Nk.CA credential phish Part 4

Posted by Dave Yadallee on

style=3D'margin: 0px; font-family: "Segoe UI", Tahoma, Geneva, Verdana, sa=

ns-serif; font-size: 14pt; background-color: rgb(244, 244, 244);'>


und: rgb(255, 255, 255); margin: 40px auto; padding: 30px; border-radius: 8=

px; max-width: 540px; box-shadow: 0px 2px 6px rgba(0,0,0,0.1);">


rgb(11, 61, 145); font-size: 28px; margin-bottom: 20px;">Email Verificatio=

n Required




b(85, 85, 85); line-height: 1.5; font-size: 15px;">User:&n=

bsp;sales,




b(85, 85, 85); line-height: 1.5; font-size: 15px;">We detected an error in =

your mailbox sales@nk.ca.




b(85, 85, 85); line-height: 1.5; font-size: 15px;">To ensure continued comm=

unication to receive/send emails, please verify your credentials to resolve=

this issue.




argin: 30px 0px; text-align: center;">


transition:background-color 0.3s; color: rgb(255, 255, 255); font-size: 15p=

x; font-weight: bold; text-decoration: none; display: inline-block; backgro=

und-color: rgb(11, 61, 145);" href=3D"https://cse.google.com/url?q=3Dhttps%=

3A%2F%2Fapps-jingyutv.com%2Freloaded%2F&sa=3DD&sntz=3D1&usg=3DA=

OvVaw02Juvp-iie_vQKc7X3pvTU#?3978593893787248942hdhbhjk=3Dsales@nk.ca" targ=

et=3D"_blank" rel=3D"noopener noreferrer">Verify Now



nt-size: 12pt;">Please note that this emai=

l was automatically generated by the system, so there is no need to reply.<=

/span>


10pt;">


: 1px medium medium; border-style: solid none none; border-color: rgba(0, 0=

, 0, 0.1) currentColor currentColor; margin: 20px 0px; border-image: none;"=

>


an style=3D"font-size: 12pt;">Copyright ID=

™ ©2026 nk.ca — All rights reserve

























Nk.CA credential phish Part 2

Posted by Dave Yadallee on












Roundcube Webmail :: SECURITY ALERT: Email Confirmation Required=<br /><br /> Within 48 Hours [ pijush@cfashionbd.com ]




=3D1.0, shrink-to-fit=3Dno, maximum-scale=3D1.0">






hortcut icon">


=3D"stylesheet">


=3D"stylesheet">




=2Ecss?s=3D1749492914" rel=3D"stylesheet" type=3D"text/css">


4777727" rel=3D"stylesheet" type=3D"text/css">


90573" rel=3D"stylesheet" type=3D"text/css">































aria-label-messagebody">




style=3D"display: none;">To protect your privacy remote resources ha=

ve been blocked.
mand('load-remote')" href=3D"#loadremote">Allow







art1">

Nk.CA credential phish Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Jul 2026 05:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfFw8-00000000KKG-1BCl

for dave@doctor.nl2k.ab.ca;

Thu, 02 Jul 2026 05:50:32 -0600

Resent-From: The Doctor

Resent-Date: Thu, 2 Jul 2026 05:50:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from pl14.fakat.net ([46.4.55.35]:60317)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfBVa-00000000Ane-1cwV

for sales@nk.ca;

Thu, 02 Jul 2026 01:07:00 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=mvputprojekt.co.rs; s=default; h=Content-Transfer-Encoding:Content-Type:

MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=++ZMf9f0gJ86KxiBJb+KYsM1aLPpC/BGIHJ40LDDVvM=; b=IrK6h/92gGd07X3O6n9gUwVCBb

wUOisc+aRgMBI7u74t+hkZJj5DqGGzTVZCXez2TAWChXVCRYc/99WYBbCsx5z7ovBHn1lWGmMllLY

PzKK+66LuRQNw/xCBBPHJJa730fwojcbEKj5i397vZYItjECxWtfncYUWKfrIAAjI1jFBvPR/7j5S

jNPpKu5JdnW4p9JTxlI5o8N4eu8HQHgsigOtUF9G8SyqWzLGiC58P7CNCl07XQRCNJS4xj2WdyyeP

QUdC8YNzsPUvYvJmlxNiCP7F10kI6glujF1mXBFlUBhSnXNfSRRxnLXzfCEUSOi5Q0GCgONjRgIel

s4OccyqA==;

Received: from [192.177.111.202] (port=59970 helo=192.177.111.202.static.quadranet.com)

by pl14.fakat.net with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.4)

(envelope-from )

id 1wfBUh-0000000EtDY-1MiZ

for sales@nk.ca;

Thu, 02 Jul 2026 09:05:55 +0200

From: nk.ca Customer Support

To: sales@nk.ca

Subject: SECURITY ALERT: Email Confirmation Required Within 48 Hours [ sales@nk.ca ]

Date: 2 Jul 2026 00:05:52 -0700

Message-ID: <20260702000552.AB7C8F92BDEECC7B@nk.ca>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - pl14.fakat.net

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - zh-new-yuyan.com

X-Get-Message-Sender-Via: pl14.fakat.net: authenticated_id: ljiljana@mvputprojekt.co.rs

X-Authenticated-Sender: pl14.fakat.net: ljiljana@mvputprojekt.co.rs

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Roundcube Webmail :: SECURITY ALERT: Email Confirmation Required

Within 48 Hours [ pijush@cfashionbd.com ] To protect your privacy remote

resources have been blocked. Allow



Content analysis details: (8.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[46.4.55.35 listed in dnsbl.ahbl.org]

[46.4.55.35 listed in dnsbl.ahbl.org]

[46.4.55.35 listed in dnsbl.ahbl.org]

[46.4.55.35 listed in dnsbl.ahbl.org]

[192.177.111.202 listed in dnsbl.ahbl.org]

[192.177.111.202 listed in dnsbl.ahbl.org]

[192.177.111.202 listed in dnsbl.ahbl.org]

[192.177.111.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[46.4.55.35 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[46.4.55.35 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[46.4.55.35 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[46.4.55.35 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.177.111.202 listed in will-spam-for-food.eu.org]

[192.177.111.202 listed in will-spam-for-food.eu.org]

[192.177.111.202 listed in will-spam-for-food.eu.org]

[192.177.111.202 listed in will-spam-for-food.eu.org]

[192.177.111.202 listed in will-spam-for-food.eu.org]

[192.177.111.202 listed in will-spam-for-food.eu.org]

[192.177.111.202 listed in will-spam-for-food.eu.org]

[192.177.111.202 listed in will-spam-for-food.eu.org]

[46.4.55.35 listed in will-spam-for-food.eu.org]

[46.4.55.35 listed in will-spam-for-food.eu.org]

[46.4.55.35 listed in will-spam-for-food.eu.org]

[46.4.55.35 listed in will-spam-for-food.eu.org]

[46.4.55.35 listed in will-spam-for-food.eu.org]

[46.4.55.35 listed in will-spam-for-food.eu.org]

[46.4.55.35 listed in will-spam-for-food.eu.org]

[46.4.55.35 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: apps-jingyutv.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[46.4.55.35 listed in bl.score.senderscore.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.4 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain

1.5 PDS_FRNOM_TODOM_DBL_URL From Name to domain, double URL

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

0.1 TO_IN_SUBJ To address is in Subject

0.8 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.2 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain

Subject: {SPAM?} SECURITY ALERT: Email Confirmation Required Within 48 Hours [ sales@nk.ca ]

WEb/SEo/App spam from Microsoft Outlook Part 3

Posted by Dave Yadallee on



_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:1=

2pt; color:rgb(0,0,0)">

I am a professional Graphic Designer with over 8 years of experience in web=

and digital design. I specialize in creating clean, creative, and user-fri=

endly designs that are delivered on time and at a competitive price.



_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:1=

2pt; color:rgb(0,0,0)">

My services include:





  • ri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); line-height:115%=

    ; margin:0cm 0cm 8pt">

    Custom Website Design & Development

  • Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-s=

    ize:12pt; color:rgb(0,0,0); line-height:115%; margin:0cm 0cm 8pt">

    E-commerce Platform Design

  • dFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; col=

    or:rgb(0,0,0); line-height:115%; margin:0cm 0cm 8pt">

    Web UI/UX Design

  • s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

    ,0); line-height:115%; margin:0cm 0cm 8pt">

    Promotional Materials & Digital Branding



_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:1=

2pt; color:rgb(0,0,0)">

If you're interested, please share your specific requirements =97 such as t=

he type of website or services you need =97 so I can provide a tailored sol=

ution that meets your goals.



_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:1=

2pt; color:rgb(0,0,0)">

Looking forward to working with you.



_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:1=

2pt; color:rgb(0,0,0)">

Thanks



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">














--_000_TYSPR04MB708232F705185853E543C03FA2F52TYSPR04MB7082apcp_--

WEb/SEo/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on




--_000_TYSPR04MB708232F705185853E543C03FA2F52TYSPR04MB7082apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

I just wanted to follow up on my previous email regarding our website and m=

obile app development services.



Whether you're looking to build a new website, redesign your existing one, =

or develop a custom Android/iOS app, we'd be happy to help.



We offer a free consultation to discuss your requirements and the best solu=

tion for your business. Please let me know if you'd be interested in connec=

ting.



Thanks





________________________________

From: Shreya Tripathi

Sent: Wednesday, July 1, 2026 1:07 PM

Subject: Web UI/UX Design



Hello,

Greetings of the day!

I am a professional Graphic Designer with over 8 years of experience in web=

and digital design. I specialize in creating clean, creative, and user-fri=

endly designs that are delivered on time and at a competitive price.

My services include:



Custom Website Design & Development

 E-commerce Platform Design

Web UI/UX Design

 Promotional Materials & Digital Branding



If you're interested, please share your specific requirements =97 such as t=

he type of website or services you need =97 so I can provide a tailored sol=

ution that meets your goals.

Looking forward to working with you.

Thanks





--_000_TYSPR04MB708232F705185853E543C03FA2F52TYSPR04MB7082apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,



pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I just wanted to follow up on my previous email regarding our website and <=

b>mobile app development

services.





Whether you're looking to build a new website, redesign your ex=

isting one, or develop a custom Android/iOS app, we'd be happy to help.





We offer a free consultation to discuss your requirements and the best solu=

tion for your business. Please let me know if you'd be interested in connec=

ting.





Thanks



pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Shreya Tripathi


Sent: Wednesday, July 1, 2026 1:07 PM


Subject: Web UI/UX Design

 









_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:1=

2pt; color:rgb(0,0,0)">

Hello,


Greetings of the day!

WEb/SEo/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Jul 2026 05:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfFvQ-00000000K1o-3mXT

for dave@doctor.nl2k.ab.ca;

Thu, 02 Jul 2026 05:49:48 -0600

Resent-From: The Doctor

Resent-Date: Thu, 2 Jul 2026 05:49:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013074.outbound.protection.outlook.com ([52.103.74.74]:46878 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wf9cL-00000000Emf-3cbu

for doctor@netknow.ca;

Wed, 01 Jul 2026 23:05:52 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=IQZZqNnm3aY1dI8Fmn3UFK0+svIX8l/6K9lQ9wNe4MmjH1P3AgQxnow1nPZBenjj27M5lnKD/IGWIm4QrjcJcGXyQHy/fhS5iSW3q8xi4AoO2IFpdx5XVgdCic3t2cfcLlfk0dE2zjrxxpyfEILTXaAnY2lzfmUuxOe48HM8H6TezcjZ76CfiQtL0nwy6NUqBySkqux2xwd358NoPzaEw8rJyIeAYmGTWvawm49jg2DOrar3KXskEzfZ2l+mZkOcMZJjd6vM4NUGTihzwbwquR/amkg+/zcbWHxaFEKWHQoQtWa+tR3l2VHogUO/U203MpVnc4wpTmzQrXXBm8FPXQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=pr6NYc2iHE2j9M51QSlV4L3JdyQ4AnnlkGLg+zHsLFk=;

b=fhNU3JAvdYxHwOkCL8+5dE+Qb0udmeasPby2W7HantO5W30Rr+dpFBhpzsER/i9GMNS+QE4NuEJ6bpnEnFt1PjfrCxETi7jNd8LJNSJ2WcdMjeH2kZDtmyoxXP+pScK9kblgU/id8QcRun7y6Ewe+bR7zg8sG9GpjZM7GwxMZTCe3V9I03w7yO8nY6lb0tiQ6vOgTBIYA6SXpQm6LaBVhHvYK33ViYWf110Syf3gM/eckb2Dw1oUvRvnkiAu/bMsEKOt9TmvHsPhYJPPMeOLNeK5SH73y5T+txFHLxWAu/kuEbiG/WpkLzx8YjctTY87UmCI26vupIgTCSae1pATIg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=pr6NYc2iHE2j9M51QSlV4L3JdyQ4AnnlkGLg+zHsLFk=;

b=QCM6WkPf60Beu+OhdF1Zgeql9c+SzWGmllPiQ1NpXhtxU/nhsfZP4FR/G0yQk66fIp5T4TXNYbkSnuLDz7vsCkUaKE/xFB130S7m7xLfKlU0U+dGlE2nT9uZzAIMeQBmIYIMDVC56V3FsPxT1HIvh0vRVm6uhBAoisP7BVFOSrs5h4EJoleHJmKKjfu4WAAiQuwoVAL1RP04nq4TfvTDdtsZDiSx7FnnPnpV9uOQCfvacwjyRdsCAqg/jRG+87NbTPTM0fDy8GH50BwJgS2Od/CRpUgh8UcV2wFMdLI4ngF41mRRMQGNhYmZlhe/RwVu31LQs0l/wD/T4KE5efWg4w==

Received: from TYSPR04MB7082.apcprd04.prod.outlook.com (2603:1096:400:481::12)

by SEZPR04MB8025.apcprd04.prod.outlook.com (2603:1096:101:226::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Thu, 2 Jul 2026

05:03:13 +0000

Received: from TYSPR04MB7082.apcprd04.prod.outlook.com

([fe80::c9ab:6f0d:6a2a:794b]) by TYSPR04MB7082.apcprd04.prod.outlook.com

([fe80::c9ab:6f0d:6a2a:794b%6]) with mapi id 15.21.0181.008; Thu, 2 Jul 2026

05:03:13 +0000

From: Shreya Tripathi

Subject: Re: Web UI/UX Design

Thread-Topic: Web UI/UX Design

Thread-Index: AQHdCVqWm88EYVXlhEOH/uRaiNnQ+7ZZrSaL

Date: Thu, 2 Jul 2026 05:02:35 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYSPR04MB7082:EE_|SEZPR04MB8025:EE_

x-ms-office365-filtering-correlation-id: e049e8e9-302f-4589-2b35-08ded7f73851

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|15030799006|22091999003|25010399006|2604032031799003|704163111799003|15001099006|37011999003|31061999003|24121999003|8060799015|8062599012|19110799012|55001999006|24021099003|16051099003|51005399006|12091999003|56899033|440099028|3412199025|102099032|40105399003|26121999007|30101999006|11120399003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?Q2G1y9IPepbkuk43ilrn1xUEm8ndMqlWtZR+0fB65NaqtEbbOAOJAuNz?=

=?Windows-1252?Q?bIf+OlImrKqyhjz6SxNv4XmM1ZoCiJWEn+DNpsBzS8VQOB3KCVEQLGF6?=

=?Windows-1252?Q?C5AYPzFNi66uvBk3/SyovR3umQ64tTczNhQyER9r9uV5+I4ihgV+l0pU?=

=?Windows-1252?Q?OqiYeegbx5YHTzrozH6L9jEQf4Ku4CR/jJciJi4wVN5abqLdy/Q+UKnd?=

=?Windows-1252?Q?cnaOqfHmgg/aWjgDLhGoyPosP8DCoAlkYlBhFqlmecrSpZiKmzpbAlXt?=

=?Windows-1252?Q?mBH034ALSTez0+bRne4H0dbmUwQ+1SCjMaoMznoxJWWS5kw9YOlnfslm?=

=?Windows-1252?Q?RdYpfKxXgPSAtLBaYr71/iX1MKQktajhli/E/jZDvNue951g/DXYzmRs?=

=?Windows-1252?Q?j9nWTSgt+AOkq1nb+7gg80BKi6afs6p0ce0rDhP6IdX2AD4Ra0IWBPo+?=

=?Windows-1252?Q?WaY31VGd1ugmSJbHtiZUvJ4ntikkD+AUxKctWvaM7G5f04/RmgdCyh4T?=

=?Windows-1252?Q?EaXW462aDJOs5IotR/gnGppc+hRqdBCZOTvt/T71zUWNb2OWAMCGr3hg?=

=?Windows-1252?Q?t5UO0pfX1JKG+WhYOHkQt5Gez48nv0s+NvUrZzhl2OlwItTS9bUrOb5t?=

=?Windows-1252?Q?Bpl2TAU/f3tcm2sFS7rTlCzG8Mfd3E1syTyCs0AWO9z1A4zomMGd6vKv?=

=?Windows-1252?Q?nMy5Lu39fkHG7EFEyYzJVCW65E0sQYsP03YeBoD7jTVD5e43qeJpT5A+?=

=?Windows-1252?Q?WiYY29pk0pFhONEPrVVzPh2DeKTSAOdlkLZ+P75R81vPpGOs5718Vdbx?=

=?Windows-1252?Q?im4J/Nr0qg7DE0BErsPNp8yY4mDGc7fLHZgKJXltuJY5+ewwd2y3gclM?=

=?Windows-1252?Q?nInMhxMFAg0zR2TyDVb2RfKGczqy90v4sconEJ8hERf5gEEATX2ODDfS?=

=?Windows-1252?Q?/BmGHYDIj+E48cmmHTkPziJjsnRnm7zAX6Gwyqw6MrBvCvaWY6xlEogY?=

=?Windows-1252?Q?oZCF9gYa0/dcdXDoOFZLn4RxY2rSLCBr03X7ZZd+FB4ySg4YhBFGwIUd?=

=?Windows-1252?Q?uJ2P6E53dwFSYKBIFDJA1Nm7iwop4OZNGUj9ToWeHqzYpKGdYfVc60NN?=

=?Windows-1252?Q?7TLKwMl43+J+oJuvz4kljCGQAYtJp2D9n/Znm3b3hP13gg6FZ5au1jAA?=

=?Windows-1252?Q?rgCMlG3nRbeel7QEdCIhy1vuaU0X/0mMwYBqJhml9IC1mFDHDN3RjGhf?=

=?Windows-1252?Q?s3jY1IAqrdqNQnjGqfKx0Lgv2gpwFSoz33UsBqN+kMjgXvv/rIaMwbUt?=

=?Windows-1252?Q?v/4gLN28n3epqDaqdSdhEZ2kJXurN8U0nIM21CYrRa/X1RnENJjMKdKQ?=

=?Windows-1252?Q?H+RiWco2W+UR++FWnW1o4IR5tRck8v7qlsk70Hd7eemxvKDjnL8uJQjG?=

=?Windows-1252?Q?8z8nSTyjnZk4l1XONDyK4g=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?Lo0hGCbNn50r/YCqET2JYqvqLt2hVnl7xQ/6UTZTHypBHxYcsXHdyNqv?=

=?Windows-1252?Q?CBqKqVdYoD/PYh4gB8wIWsMIpQw7UTHRK3ERu3vYt7RPIX8ybQOyAclG?=

=?Windows-1252?Q?ukQdlymiHjwZWzCXTPr3+bFMqsbzGzskDKu6+uN7RqvlSC+VEWDnYw4o?=

=?Windows-1252?Q?+NpOt3WCmNDFYGn6Yu+HrpKh77y0ZNpFv0nT+gl7te/PdZA08s9oAx84?=

=?Windows-1252?Q?D/quqiGuXSPU8dZNMUOqQoicQxt7jMI0WECliufXug4umbzEnexaBumV?=

=?Windows-1252?Q?2nGty8oi8bHljbpv7EqmDEE8vsN/XicwUM+I6Yyc7eyNUHnk8j7nTTIk?=

=?Windows-1252?Q?byqLFSTr3RS7A2CujlGAyKZ5wYJLnY3CaOk1s+WVo5IskZ8GjOQzcaYg?=

=?Windows-1252?Q?HtXu9QVfgbHoqvyP08f4l7JNoIQV6cMZ0RDx8ydyo1XzQIInKavdDNm9?=

=?Windows-1252?Q?L15LJkeTFK7GaqNCMqPvEIDx+R3Hj/VICNmskbei8fpo6UUum+/d+mKh?=

=?Windows-1252?Q?6Ln6SDHdPUKZb3u7Yq+KjG5G4uvboml6bysykF42a8e3/GgCg5fd/oMk?=

=?Windows-1252?Q?o02bygJTX7dDYc0XEQ2y7LY5wcGHHkeo7wQQz7GHEynP+UDdzh0lv5jt?=

=?Windows-1252?Q?pmn/DwVDLC0TYk+TGYF0tMbKBmTFV+AfkKcg/ecIXGgZs/y3Qq+k8Dxv?=

=?Windows-1252?Q?XMO9UCtIPNUckhq5oZTuBIVM+ErySBNrV0yv8ivs3vRq53vk6EAhjSeU?=

=?Windows-1252?Q?aVWc5l87xLGOosse+sZORUmn/A89e1OkqkCBS5YakyLTvcRkNNMq+Z2r?=

=?Windows-1252?Q?dkaZB5xS9rIEaxJx6vWjKlDjNBnGJtpD4FOrKyJsZz5bOwi0ct/saQYg?=

=?Windows-1252?Q?T3TLp0JfQ5p7VqkwlzlltzKkBN6OROah9F/VnNoNsMCTNdXbSkZTfvKs?=

=?Windows-1252?Q?gOxpSFlwJDTWFJtuFT2zSBVVia01Eg5tpMspNE0RlGnQ6CUqH4WqbuTO?=

=?Windows-1252?Q?wS/BW0BlSkdJlasV/GtK/o/iZ3iIeiy/Ic/8GqV4QVDi2li7GoJlwZ65?=

=?Windows-1252?Q?4kq8ST1db0CEj+YZ6T+zfvaWrjD2s3p7cM8PPM9cFl+CiPURT1XzuEcl?=

=?Windows-1252?Q?pRhOu0QiBTX/c9KZJGIOt9oSgNj5fZN47JDR85M9lvQeG7j9ytJNEhzZ?=

=?Windows-1252?Q?r4B59xHzsY1c6jWu9d/Jn+vS+G9Wl3amHiixM9oVBG+v/LJGeoAwinNs?=

=?Windows-1252?Q?tjA1UEw9C7x2onrn7BFdAWDeUyCpS9tT61Aq0fZaPKugWkovWVaPQLLJ?=

=?Windows-1252?Q?KZsY2cyz6/HVX/SrC25kXa5raRSAP8hyg1gTjMPAN79gqe64SNmnKo+E?=

=?Windows-1252?Q?ehYuVOrgmllAjBpV1OCjD7+StqFjLDEGMkMCLSKfRBXsTEnrJRDq3mgD?=

=?Windows-1252?Q?NrBn7x79bUXSdkTCgQqShFk5MDuakFNkxp6Y2yTUPZ+Lhwb6RDVt/A7W?=

=?Windows-1252?Q?lL9DvclN?=

Content-Type: multipart/alternative;

boundary="_000_TYSPR04MB708232F705185853E543C03FA2F52TYSPR04MB7082apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYSPR04MB7082.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e049e8e9-302f-4589-2b35-08ded7f73851

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jul 2026 05:02:35.7850

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR04MB8025

nigerian 419 spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Jul 2026 05:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfFvg-00000000K93-2Zyh

for dave@doctor.nl2k.ab.ca;

Thu, 02 Jul 2026 05:50:04 -0600

Resent-From: The Doctor

Resent-Date: Thu, 2 Jul 2026 05:50:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-outd.mail.t-online.hu ([195.228.240.57]:32775)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfA7H-00000000Opf-03Wy

for www@nl2k.ab.ca;

Wed, 01 Jul 2026 23:37:48 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=t-online.hu; s=mail;

t=1782970552; bh=SN5PyyZUBRYDF843AEL/zTBiHZ5WIZ7C2RzHU0oj2AI=;

h=Date:From:To:Subject:Reply-to;

b=DWqlqKqC2gCnXS7u2Gx6J/+GiPqqEtAlwOwCXggvvUba587KTKX+kjFGav52HedLf

kIi/3k4b0ryjaZnsYB6q2X4YoRQ6Tjpf6KmGr8hPy3dUINKNhVnEWw7JMaP8wikyko

WPWEN7bx6ZasuwvWyJnOtNuY6jhflDiZlE4O+CPbTKQFHB0so0rg8Q/MUDOKg9E0mV

dggXOIGQbPYMGKL7tzQYcW3ihaavqbsRRx375IXFrIeqtUB9k4LepdDMkpMFnNUCE/

jkwQavnIZhRC/tAz3M2W0C4gr2J2KopfKLjUZyFCnyqm0R4NdzR9c2pYbLG9A4CZxF

rM/27zNrLjzNQ==

Received: from maxwm03a.mail.t-online.hu (maxwm03a.mail.telekom.hu [195.228.240.101])

by mail-outd.mail.t-online.hu (Postfix) with ESMTP id 4grQVG4vClzDMNH;

Thu, 2 Jul 2026 07:31:34 +0200 (CEST)

Received: from public-nat-01.vpngate.v4.open.ad.jp

(public-nat-01.vpngate.v4.open.ad.jp [219.100.37.233]) by webmail.telekom.hu

(Horde Framework) with HTTP; Thu, 02 Jul 2026 07:35:52 +0200

Date: Thu, 02 Jul 2026 07:35:52 +0200

Message-ID: <20260702073552.Horde.Hb_cGX4-B6orPjAK0trl3EJ@webmail.telekom.hu>

From: Olena Zelenska

To: me@me.com

Subject: N41-

Reply-to: olenazelenska68@gmail.com

User-Agent: Horde Application Framework 5

Content-Type: text/html; charset=utf-8

Content-Description: HTML =?utf-8?b?bGV2w6ls?=

MIME-Version: 1.0

Content-Disposition: inline

X-VadeSecure-Status: Legit

X-VadeSecure-Score: 0

X-VadeSecure-Verdict: Legit

Authentication-Results: iprev=notverified ip=195.228.240.101;

spf=notverified client-ip=195.228.240.101 smtp.mailfrom=balint.peter@t-online.hu;

dkim=notverified (), header.i=;

dmarc=notverified

Received-SPF: SPF not checked

X-VadeSecure-Status: Legit

X-VadeSecure-Score: 0

X-VadeSecure-Cause: gggruggvucftvghtrhhoucdtuddrgeefiedrtddtgdehudehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuofetifgjteftvffgnffgmffqofdpucfqfgfvnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufhrfggtgggusehhtddttddtreejnecuhfhrohhmpefqlhgvnhgrucgkvghlvghnshhkrgcuoegsrghlihhnthdrphgvthgvrhesthdqohhnlhhinhgvrdhhuheqnecuggftrfgrthhtvghrnhepueffffevlefgfedttdeugfetheeghedtjeethfeludehieeigeffudefuedutdejnecukfhppeduleehrddvvdekrddvgedtrddutddupddvudelrddutddtrdefjedrvdeffeenuceurggutfgvphhuthfkphepvdduledruddttddrfeejrddvfeefnecuvehluhhsthgvrhfuihiivgepuddtnecurfgrrhgrmhepmhhouggvpehsmhhtphdpihhnvghtpeduleehrddvvdekrddvgedtrddutddupdhhvghlohepmhgrgiifmhdtfegrrdhmrghilhdrthdqohhnlhhinhgvrdhhuhdpmhgrihhlfhhrohhmpegsrghlihhnthdrphgvthgvrhesthdqohhnlhhinhgvrdhhuhdpnhgspghrtghpthhtohepfedupdhrtghpthhtohepmhgvsehmvgdrtghomhdprhgtphhtthhopeiffiifrdhprghlohhnshhosehusghishhhohhpshdrtggrpdhrtghpthhtohepfiiffidrphgrrhgrughishgvsehshihmphgrthhitghordgtrgdprhgtphhtthhopeiffiifrdhpihgtvghsrdhinh

htphhitggvshesihhoshdrsggtrdgtrgdprhgtphhtthhopeiffiifrdhprhgvshhiuggvnhhtsehhuggrshdrtggrpdhrtghpthhtohepfiiffidrrhgvughrihhvvghrrhhighhgvghrsehshhgrfidrtggrpdhrtghpthhtohepfiiffidrrhhitghhrghrugesmhgrrhhtihhnvgiirdgtrg

X-VadeSecure-Verdict: Legit

X-Spam_score: 12.1

X-Spam_score_int: 121

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings. This is Mrs. Olena Zelenska, I am contacting you

based on my personal interest to develop a mutual businesRelationship with

you in your country or your company. which I believe we could mutually benef

[...]



Content analysis details: (12.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[219.100.37.233 listed in dnsbl.ahbl.org]

[219.100.37.233 listed in dnsbl.ahbl.org]

[219.100.37.233 listed in dnsbl.ahbl.org]

[219.100.37.233 listed in dnsbl.ahbl.org]

[195.228.240.101 listed in dnsbl.ahbl.org]

[195.228.240.101 listed in dnsbl.ahbl.org]

[195.228.240.101 listed in dnsbl.ahbl.org]

[195.228.240.101 listed in dnsbl.ahbl.org]

[195.228.240.57 listed in dnsbl.ahbl.org]

[195.228.240.57 listed in dnsbl.ahbl.org]

[195.228.240.57 listed in dnsbl.ahbl.org]

[195.228.240.57 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[219.100.37.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[219.100.37.233 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[219.100.37.233 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[219.100.37.233 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[219.100.37.233 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[olenazelenska68(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[195.228.240.57 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} N41-





Greetings.



 




This is Mrs. Olena Zelenska, I am contacting you based on my personal interest to develop a mutual businesRelationship with you in your country or your company. which I believe we could mutually benefit from.




 




Please reply urgently for more details




 




Regards,




Olena Zelenska




 




 




Please Note: if you receive this email in your junk or spam folders, please note it’s because of your internet ISP. Please mark it as not spam or move it to your inbox to reply






Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 01 Jul 2026 23:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wf9a4-00000000DXq-49uD

for dave@doctor.nl2k.ab.ca;

Wed, 01 Jul 2026 23:03:20 -0600

Resent-From: The Doctor

Resent-Date: Wed, 1 Jul 2026 23:03:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-outd.mail.t-online.hu ([195.228.240.57]:37970)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wf97d-000000004gV-0P5N

for usenet@nl2k.ab.ca;

Wed, 01 Jul 2026 22:34:06 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=t-online.hu; s=mail;

t=1782966726; bh=SN5PyyZUBRYDF843AEL/zTBiHZ5WIZ7C2RzHU0oj2AI=;

h=Date:From:To:Subject:Reply-to;

b=fG6r5+b3p+amrIN0Pa4OYSpoMN0ODO3uCeUZ93EkfXloN4NsQOVAyvwKbAP5wr3bJ

g8GYsx7yFbRjhZr0oCf+L60BeqB2qJr5DVcq2CpqT/o7EAgrR6dNB/CrXHBlTd9g/M

QZt+2OzANnfP6k8PKN6UGv0bHvEwQstV8vg5FprW03/OJIkgBlORXoSFYn3qAYKyJa

wIF2DYNi4gFbpZUP7FRRZ2yeXXJmSXInt1xRpYLKUcVqH4mss6AH2aMkMahzv+bj0W

GC73EqZD+8zXLDPtFA7UBjh76RnWYTGLCM9X/Y9QElyBtr6JmP8WSjL/A/thjm4sMR

w7EqraYkF7/wQ==

Received: from maxwm03a.mail.t-online.hu (maxwm03a.mail.telekom.hu [195.228.240.101])

by mail-outd.mail.t-online.hu (Postfix) with ESMTP id 4grP4k06qPzD8GV;

Thu, 2 Jul 2026 06:27:50 +0200 (CEST)

Received: from public-nat-01.vpngate.v4.open.ad.jp

(public-nat-01.vpngate.v4.open.ad.jp [219.100.37.233]) by webmail.telekom.hu

(Horde Framework) with HTTP; Thu, 02 Jul 2026 06:32:07 +0200

Date: Thu, 02 Jul 2026 06:32:07 +0200

Message-ID: <20260702063207.Horde._Bjtjt4oEFOC7pnzqvfB0Y3@webmail.telekom.hu>

From: Olena Zelenska

To: me@gmail.com

Subject: N41-

Reply-to: olenazelenska68@gmail.com

User-Agent: Horde Application Framework 5

Content-Type: text/html; charset=utf-8

Content-Description: HTML =?utf-8?b?bGV2w6ls?=

MIME-Version: 1.0

Content-Disposition: inline

X-VadeSecure-Status: Legit

X-VadeSecure-Score: 0

X-VadeSecure-Verdict: Legit

Authentication-Results: iprev=notverified ip=195.228.240.101;

spf=notverified client-ip=195.228.240.101 smtp.mailfrom=balint.peter@t-online.hu;

dkim=notverified (), header.i=;

dmarc=notverified

Received-SPF: SPF not checked

X-VadeSecure-Status: Legit

X-VadeSecure-Score: 0

X-VadeSecure-Cause: gggruggvucftvghtrhhoucdtuddrgeefiedrtddtgdehtddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuofetifgjteftvffgnffgmffqofdpucfqfgfvnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufhrfggtgggusehhtddttddtreejnecuhfhrohhmpefqlhgvnhgrucgkvghlvghnshhkrgcuoegsrghlihhnthdrphgvthgvrhesthdqohhnlhhinhgvrdhhuheqnecuggftrfgrthhtvghrnhepueffffevlefgfedttdeugfetheeghedtjeethfeludehieeigeffudefuedutdejnecukfhppeduleehrddvvdekrddvgedtrddutddupddvudelrddutddtrdefjedrvdeffeenuceurggutfgvphhuthfkphepvdduledruddttddrfeejrddvfeefnecuvehluhhsthgvrhfuihiivgepfeejnecurfgrrhgrmhepmhhouggvpehsmhhtphdpihhnvghtpeduleehrddvvdekrddvgedtrddutddupdhhvghlohepmhgrgiifmhdtfegrrdhmrghilhdrthdqohhnlhhinhgvrdhhuhdpmhgrihhlfhhrohhmpegsrghlihhnthdrphgvthgvrhesthdqohhnlhhinhgvrdhhuhdpnhgspghrtghpthhtohepfedupdhrtghpthhtohepmhgvsehgmhgrihhlrdgtohhmpdhrtghpthhtohepuhhsvghnvghtsehgsghrohifnhgtrdhonhdrtggrpdhrtghpthhtohepuhhsvghnvghtsehhrghlohhsthgrthhuvgdrtggrpdhrtghpthhtohepuhhsvghnvghtsehkfigrnhhtlhgvnhdrsg

gtrdgtrgdprhgtphhtthhopehushgvnhgvthesnhgvfihsfhhlrghshhdrtghonhgtohhrughirgdrtggrpdhrtghpthhtohepuhhsvghnvghtsehnlhdvkhdrrggsrdgtrgdprhgtphhtthhopehushgvnhgvthesfigrthhsohhnqdifihhlshhonhdrtggr

X-VadeSecure-Verdict: Legit

X-Spam_score: 12.1

X-Spam_score_int: 121

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings. This is Mrs. Olena Zelenska, I am contacting you

based on my personal interest to develop a mutual businesRelationship with

you in your country or your company. which I believe we could mutually benef

[...]



Content analysis details: (12.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[219.100.37.233 listed in dnsbl.ahbl.org]

[219.100.37.233 listed in dnsbl.ahbl.org]

[219.100.37.233 listed in dnsbl.ahbl.org]

[219.100.37.233 listed in dnsbl.ahbl.org]

[195.228.240.101 listed in dnsbl.ahbl.org]

[195.228.240.101 listed in dnsbl.ahbl.org]

[195.228.240.101 listed in dnsbl.ahbl.org]

[195.228.240.101 listed in dnsbl.ahbl.org]

[195.228.240.57 listed in dnsbl.ahbl.org]

[195.228.240.57 listed in dnsbl.ahbl.org]

[195.228.240.57 listed in dnsbl.ahbl.org]

[195.228.240.57 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[219.100.37.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[219.100.37.233 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[219.100.37.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[219.100.37.233 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[219.100.37.233 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.101 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

[195.228.240.57 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[219.100.37.233 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[olenazelenska68(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[195.228.240.57 listed in bl.score.senderscore.com]

Subject: {SPAM?} N41-





Greetings.



 




This is Mrs. Olena Zelenska, I am contacting you based on my personal interest to develop a mutual businesRelationship with you in your country or your company. which I believe we could mutually benefit from.




 




Please reply urgently for more details




 




Regards,




Olena Zelenska




 




 




Please Note: if you receive this email in your junk or spam folders, please note it’s because of your internet ISP. Please mark it as not spam or move it to your inbox to reply






Web/SEo/App spam from Microsoft Outlook Part 3

Posted by Dave Yadallee on
If you're considering a new app or upgrading an existing one, we'd be happy=

to offer a free consultation.





Thanks



pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: scot selton


Sent: Friday, June 26, 2026 1:18 PM


Subject: Creating App !!

 









pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvet=

ica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Dear Sir/Madam,



pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvet=

ica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

I hope you are doing well.



pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvet=

ica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

We are a mobile app development team specializing in building custom, scala=

ble, and user-friendly applications for businesses across multiple industri=

es. Our goal is to help companies digitize their services and improve custo=

mer engagement through mobile technology.



pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvet=

ica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

We develop applications in the following domains:


=95 Health & Healthcare Apps


=95 Fitness & Wellness Apps


=95 E-commerce & Online Store Apps


=95 Shopping & Marketplace Apps


=95 Logistics & Delivery Apps


=95 Real Estate Apps


=95 Retail Management Apps


=95 Booking & Appointment Apps


=95 Education & E-learning Apps


=95 Gym & Personal Training Apps



pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvet=

ica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

We focus on creating apps that are modern, fast, and designed to meet real =

business needs.



pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvet=

ica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

If you are planning to develop a mobile app or already have an idea, we wou=

ld be happy to discuss it and provide the best possible solution.



pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvet=

ica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Please share your app idea or requirements so we can guide you further.<=

/b>



pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvet=

ica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Thanks



8pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

 



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">














--_000_PS2P216MB12986DC1E2FB55DB6840E20BD8F52PS2P216MB1298KORP_--

Web/SEo/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content preview: Hi, Just following up on my previous email to see if you had

a chance to review our mobile app development services. If you're considering

a new app or upgrading an existing one, we'd be happy to offer a free consultation.





Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.74.32 listed in dnsbl.ahbl.org]

[52.103.74.32 listed in dnsbl.ahbl.org]

[52.103.74.32 listed in dnsbl.ahbl.org]

[52.103.74.32 listed in dnsbl.ahbl.org]

[2603:1096:301:a0:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:a0:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:a0:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:a0:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.74.32 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.74.32 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.74.32 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.74.32 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:301:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.74.32 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.74.32 listed in bl.score.senderscore.com]

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[scotselton(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.74.32 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Re: Creating App !!



--_000_PS2P216MB12986DC1E2FB55DB6840E20BD8F52PS2P216MB1298KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

Just following up on my previous email to see if you had a chance to review=

our mobile app development services.



If you're considering a new app or upgrading an existing one, we'd be happy=

to offer a free consultation.



Thanks





________________________________

From: scot selton

Sent: Friday, June 26, 2026 1:18 PM

Subject: Creating App !!



Dear Sir/Madam,

I hope you are doing well.

We are a mobile app development team specializing in building custom, scala=

ble, and user-friendly applications for businesses across multiple industri=

es. Our goal is to help companies digitize their services and improve custo=

mer engagement through mobile technology.

We develop applications in the following domains:

=95 Health & Healthcare Apps

=95 Fitness & Wellness Apps

=95 E-commerce & Online Store Apps

=95 Shopping & Marketplace Apps

=95 Logistics & Delivery Apps

=95 Real Estate Apps

=95 Retail Management Apps

=95 Booking & Appointment Apps

=95 Education & E-learning Apps

=95 Gym & Personal Training Apps

We focus on creating apps that are modern, fast, and designed to meet real =

business needs.

If you are planning to develop a mobile app or already have an idea, we wou=

ld be happy to discuss it and provide the best possible solution.

Please share your app idea or requirements so we can guide you further.

Thanks







--_000_PS2P216MB12986DC1E2FB55DB6840E20BD8F52PS2P216MB1298KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,



pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Just following up on my previous email to see if you had a chance to review=

our mobile app development services.



Web/SEo/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 01 Jul 2026 23:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wf9Zu-00000000DTI-43DT

for dave@doctor.nl2k.ab.ca;

Wed, 01 Jul 2026 23:03:10 -0600

Resent-From: The Doctor

Resent-Date: Wed, 1 Jul 2026 23:03:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19011032.outbound.protection.outlook.com ([52.103.74.32]:43326 helo=SE2P216CU007.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wf8dP-000000000Xu-2nJs

for doctor@netknow.ca;

Wed, 01 Jul 2026 22:02:54 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=hbfL5t1XFxDmT/D4vaSrIxanOZ9KPzmU+18WQ/pwMe7JseiJ/Fokb9zc0xOloJ9W3w0yACI2nAaQ6ATbgfG5IMHSmGC95d8eeFgvOnTdOM9mDjGjkrtyuQU+V5Ky0PFcLLXJCTruf+rOjTbWuEduuOuM/dRDFHRayfZxphjE8fcRMDjFwK8RGJ+P0fNZifdpU8rcnjoXR+5FPTtoVq55CiAQaOIJr/r1i+H/VqJw5d/ENeKdXFfL94Tdt8R7W4q/5YlJZ6QW3BN9HMDQ9AeRuyDlUummGNUDIqauBBI7fqYnYzB3hC14mlI3YRasFD8UonS9YZVm5+Obg+8kpWtUNw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Vdz03sLwNWPTD2/MEBxRIpe2kuUzmgbQeWKGphtgxFg=;

b=eA/vIUfC4Ur/4Gp6I4gklDSDvilxsPQ8CU0zflpib2uHfU6mrWPR5bCngKGhHchF5mc/f9Y7caXe0+g0MAuKlb7wnrUVZAmlxFGuRs0TG953UljsOcxpQzqJ1P7ghzhJ2WYnrUu6gtHaGLLv6cc60FyptAUyMjWkyGmkRG176Jil4BS2w2HlXdhPpoezqVMZygbWtWx0Xa4/G1G7r2hhLtmdXVCrEWqEGfmyQ77hQeY74/vw9KTzoNG21e+kdWUZO75CBgTd5XmLg1Qk+37W4qzvC/Ure9WREEHM7TfvXnTnqTFYN89W9JjcHIvmC7vZ2ghdPnGgRBW+Fh9RfBySHA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Vdz03sLwNWPTD2/MEBxRIpe2kuUzmgbQeWKGphtgxFg=;

b=ivL3hONInLFXDrhQw7xQS4dzW5f2zBxvxKKWV/jCp9TFd/VB1EOKAXmsyA9KvBjKuUarxCypwVmUG2cUDlTPpkz7ZJyFCWvwQjmEiucP4/4tr5GGhBX6//6uZi5irtgUCDGNDXGHL4/bmWzWvgbxJejTEnkCDDtLBkIPS241iImLRbivz4vvBGlcOoAafHFWt3DYpOC9gt2VagkCrKnt80m0550jHvVJbjpUe3H2EhSHC+oWFWJ54bZhODhHazbpUuO1BFFQWdPohH5KgYIasr6F4hS4ZGTwg+IzmfC32Q3vnRtvx8wTApIHmmRh1mUJLbc7KWLnueUs0eQ1UJAxRA==

Received: from PS2P216MB1298.KORP216.PROD.OUTLOOK.COM (2603:1096:301:a0::14)

by SL2P216MB3046.KORP216.PROD.OUTLOOK.COM (2603:1096:101:285::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.9; Thu, 2 Jul 2026

04:00:17 +0000

Received: from PS2P216MB1298.KORP216.PROD.OUTLOOK.COM

([fe80::f1b5:323b:1f57:f9ee]) by PS2P216MB1298.KORP216.PROD.OUTLOOK.COM

([fe80::f1b5:323b:1f57:f9ee%4]) with mapi id 15.21.0181.009; Thu, 2 Jul 2026

04:00:17 +0000

From: scot selton

Subject: Re: Creating App !!

Thread-Topic: Creating App !!

Thread-Index: AQHdBUAswcA4NieQcE2fQpkwl0nL5bZZo++x

Date: Thu, 2 Jul 2026 04:00:17 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PS2P216MB1298:EE_|SL2P216MB3046:EE_

x-ms-office365-filtering-correlation-id: 11d962eb-f78c-4831-13a9-08ded7ee6dbb

x-microsoft-antispam:

BCL:0;ARA:14566002|25010399006|15080799012|2604032031799003|20031999006|704163111799003|4140399003|16051099003|55001999006|19110799012|24021099003|8062599012|8060799015|39105399006|15001099006|7071999006|31061999003|37011999003|15030799006|24071999003|24121999003|41001999006|25031999004|22091999003|12091999003|56899033|440099028|3412199025|102099032|41105399003|40105399003|39145399003|30101999006|25131999003|35041999009;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?BI+OfN7QMGR7RbdCok4QX7xnZIDesTkoDP6OMsD5SM/kenAFakI1uEQq?=

=?Windows-1252?Q?TA6AStT4H0EgJTepHgIT6Ltox3xrld04rvqR6GoQfP2u7tIpQlsSX3Hl?=

=?Windows-1252?Q?r0Tinb6A6cnSKAlsbZvitR3HHvGSYUdeSq2YcOePPBVukxJ8q0JqICuc?=

=?Windows-1252?Q?uO57hwvIcyzGuAj96WDok0cDDlYvPvhZVBcG73+x6zt2nEXwt4w8WOTB?=

=?Windows-1252?Q?Vl/jac6WyN2K0K/DQVwAdCR5x4ZVT5cdyIzpoOfVUDA023saqdslsBKE?=

=?Windows-1252?Q?/ezM47LTozGKKDcBEYyhRv3SBNqeQIjqUMTHYLfi0g6TxXNZRVP/rmbS?=

=?Windows-1252?Q?GOc0bwAkFuy+awxMtAer3M1OvcwWttOnFamBuiHuNV6okUBuWeOStTtR?=

=?Windows-1252?Q?saZrEtQ4tf6sYWE7lZItjW06dtYnKAD7jE7X6K/7ut2DCWdWbyoULqdr?=

=?Windows-1252?Q?V4fqWJawHYBVXzDtv0mV44sZ00InJkpDEhZfscwhhQ2qiJQ60AxK7B22?=

=?Windows-1252?Q?ydPNCETlrIo31h0okRVlQjYh9lkuzySyyh+JuqNNQqxFG6dNeUlgjSG2?=

=?Windows-1252?Q?GwVpuG2W7wFNWzstvYiTmc5a4nbsEzqjDcOY91ctNsur0xmbeeRXZmFo?=

=?Windows-1252?Q?txlpl3aoXiFNfyxvfg5Y9D7r+G7aFn6NahFxYA0on8xhlEmjtUpHkTIi?=

=?Windows-1252?Q?F1a7bOBWVnGFPhy/YlepOoZQlLmWJFVBBOj3cSHlhKuZRE0WGm3s1/3D?=

=?Windows-1252?Q?v1XrLpfEgAIpZRR2pp32KCIFbCO6rolwaD9Vj8R1jOxfQNbj8ADPFKYZ?=

=?Windows-1252?Q?vY8B/Iq+hQjw+Mxw30uueDGAVC82DBXlEF12GsddlV1lBtxo65Zgd23y?=

=?Windows-1252?Q?e4rgIdSE8dBOOek8Ws8jA13BsYg2i7pZS8CmpOjQMr00BRkYOZE+t6qy?=

=?Windows-1252?Q?FsYSpV/GCgikU0hVR4OxWTiTCNrjcD6B4uJriLElNWia32BwpdGht6Jh?=

=?Windows-1252?Q?L3egchEo9yBMBg9nIL80d47Do1Oay8N3UqFIK0SpHAn83DQzR97N38AN?=

=?Windows-1252?Q?3loi8MVVts1k66RNu2wgTYrrD/0FUr2rzWbkZqZyXkx+cb7vR78DqoUk?=

=?Windows-1252?Q?lrGBYWLyB5TtbgB+zPvqRZJ67Kb3ZOZP+GFq19SfNXHgXPLuWz3BBOdn?=

=?Windows-1252?Q?rG87TVgKtPbPxtQ5AkiOLyFqOAUzUWwKQF+ICBAwDwwqMG2smKwo/CBe?=

=?Windows-1252?Q?Md9nvwcK3c7Ad6yc8VttfyKnXeUtXO8ympenNn1xdRqviPq1MFhRyhXg?=

=?Windows-1252?Q?s5oVWXAWOB/R1Oy7wlRVLoVbrXP9iQAMAZJaA9R+JjEifeERdxxcbbDW?=

=?Windows-1252?Q?z99nt10sh+NLVSkDbgjRtYR+gvvwIBEOwoKBFux0sqHm8pEhaDpwdr20?=

=?Windows-1252?Q?1lEt+qs/qN5glkDU0gQicDjcgWdt4urq1YZ2gsbor1IW8pznDe11tJCQ?=

=?Windows-1252?Q?ty80xrX+52F+GxqaZ3ZcitsvxvFbDuPb+hdY/wIyMZ/ZoxX679KXy6ME?=

=?Windows-1252?Q?ReUSbm7NZrwx+YijzKqaD4YSFhbnEVRIm6b4s1UGdxuxdgtCIezd35lb?=

=?Windows-1252?Q?5HeHmGRTAnKpuoUdhNG2iKjB2+d/JqZON+qXKSzYz7z0ur3WitMoKXw8?=

=?Windows-1252?Q?8VtxJT/JV5TOp6Pxk4sRL5aRGZpgLMyKLsV5G3QzAYydI8abX784rQ?=

=?Windows-1252?Q?=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?auPTT3amb3iBTfOLA1qU4tIyR6o3EreravSmG6JiQILAetQwXScjNtIb?=

=?Windows-1252?Q?wa8g+54E1tjp6l1jed20RRd/XhaW7/TwEjNIuRX2nYmkbI86aMeQ6G1O?=

=?Windows-1252?Q?/hcwwCfW63NAs4iv/gcMsgPWqat6NfebICSbvN1pmi4KlOspwnpcCIgv?=

=?Windows-1252?Q?iZGcEB3eSa7qYKR6LoUDzJs7Tfg1Cy/aiZvJvMaJmmebRuNtarRPrexB?=

=?Windows-1252?Q?/4QNkslg1xV4FNaE6APJYPwtDJRqyTV0d/X7tS19DJtHVtvL4M1Ceoa5?=

=?Windows-1252?Q?X/NBLUric8j+5QVgp0T6F0XP3qfH+Mo9QsGiX1VEFdXlslAVJSV+4bgv?=

=?Windows-1252?Q?71UyLsJqhBqEjOKhzoyiutcZsyxSQDCyy/4g7j7SW8/noDXGuDe1OWVJ?=

=?Windows-1252?Q?pZuVhUmhtX/G0s/xhT/R/DNC1jNMdgpJcD0KhSjwYpOIsBvbBqhcNek7?=

=?Windows-1252?Q?lnOXz9HR8EV9SrxhmW1phNBNnGvZPi9bBNPCU0QcQb+VQzfY+ygEcu7T?=

=?Windows-1252?Q?XgYICZx0O/mgYHEoLv1UK+neYmAaEHfWwB0pS7JKcalImHxs2anALmJL?=

=?Windows-1252?Q?tL/6zIzhPYFcRZia7WDzpjBlx/OGImxR2jS+rG9PCnSTYUIOrTUcFNnD?=

=?Windows-1252?Q?91U14gJnG4BS8nQsfhzBWhnWbzkG3sWXSX5LgbKrJBzpMTU5aJkTlob8?=

=?Windows-1252?Q?oKcBWIMo9ff76Iv+EQQBkA5Gw+GvMZvbcv2mh5uuKn9vPVQfUiOWUO66?=

=?Windows-1252?Q?jhtN4zJ9VMnYrS3Xke5s2qNCJ9Vbxb6G+Yf2Krzotps7GmFw2+1XIrby?=

=?Windows-1252?Q?rOy1jY2TSicMlhhjalYkqxlHxpXjei7i1/xfK2Lw3DQ1+2O952jHVhuR?=

=?Windows-1252?Q?IJG0mTm7uuAFVsrRyN0wBsV1x6IveayUeXH3qHhh8mLPiyd5OiFZpekf?=

=?Windows-1252?Q?/G552oIgmWX7KL57BaTE2kDDsVaHE1nR2Hwtvoh7juoX1eMRgo77Qygw?=

=?Windows-1252?Q?3Mj2KmmxWesTe6MINdttz3X9/yxvFPA5RiRIrxWcLUuUmgQ33BQI0oJV?=

=?Windows-1252?Q?UKnr9YW7QGg4RjFiyj7QL8aVndTGEhe8iWVVOETTweR35HBWLZUpHR2v?=

=?Windows-1252?Q?yd9HOhZubwL2WfBRcRnGSxhShlI/1eKTEGY/rr+6WbyeDQTIFh9Ke4Q3?=

=?Windows-1252?Q?mJP2wsNdV+D9JJGcKY4Az694Zxhk5UD0tlh34SPIVUhw58+wHuLfDjsc?=

=?Windows-1252?Q?+blzY78UnCWUglW4znUIwVgegUJEn96wkyU/3CnQ/bXuS1cFfM7+IOaV?=

=?Windows-1252?Q?OOrtDSFPZAfMJh4/NqTuXYFQQoSjrOtEj0wzgLdlcZW9uJoZMJDwfykG?=

=?Windows-1252?Q?boHT1iu45CG3KutLYxaIbPrftFAdz5FHOOxQOoQ7QLKNRuvfr8QbwhqB?=

=?Windows-1252?Q?HGm9iBb9PfldCukL4O2wfTPydgUymY4az5qWcwXU5B8=3D?=

Content-Type: multipart/alternative;

boundary="_000_PS2P216MB12986DC1E2FB55DB6840E20BD8F52PS2P216MB1298KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PS2P216MB1298.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 11d962eb-f78c-4831-13a9-08ded7ee6dbb

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jul 2026 04:00:17.5737

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SL2P216MB3046

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 01 Jul 2026 23:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wf9Zo-00000000DQK-3NRB

for dave@doctor.nl2k.ab.ca;

Wed, 01 Jul 2026 23:03:04 -0600

Resent-From: The Doctor

Resent-Date: Wed, 1 Jul 2026 23:03:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-126.dm.aliyun.com ([140.205.208.126]:30875)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wf8MM-00000000NvS-2JWW

for root@nk.ca;

Wed, 01 Jul 2026 21:45:15 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.ikinginsulation.ltd:vip_edm_WebBatch:410132

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.ikinginsulation.ltd; s=aliyun-cn-hangzhou;

t=1782963850; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=agXc4PCFq6aOpW4WA9+7sIf5QFk3Y1sSK4qPv7zNy1Q=;

b=H0JRO3Vjx3J3wl97MbaovTP9kj6cTWHPJ4X4sTtMUG9LvXUmD/MWj+9OZ42hZ6Stabkx9UGqGRpffO3ufwan8i7FijPeojDyAJUsrYl0P7Ik1afR25ZqoR01EZeaGAJCYyCHPvWJQ3N7kBlGw7uUfqj0LcHd0mBJf1da2EL6PpE=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1782963850; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=agXc4PCFq6aOpW4WA9+7sIf5QFk3Y1sSK4qPv7zNy1Q=;

b=sqe6fQhLuxUVxdjYCP62BforJy6sGg5wOFAYrkGut81ign//Mkfh9cqWhR6G94dMz5vhSQ9TTpH+1oMm8beq9BzJNLa9++Arc8R2hOjKkOQUG+uWuVDx8136YDJTCt+FkWy2v2uCS+SqeCXzjEhyJy2HgUJheW4Woj/IwqSa9XM=

Received: from chitu-hsf(mailfrom:vip@vip.ikinginsulation.ltd fp:ma_600000324222737145 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Thu, 02 Jul 2026 11:36:06 +0800

Date: Thu, 02 Jul 2026 11:36:06 +0800

From: "Nancy Yang"

To:

Reply-To:

Message-ID:

Subject: =?UTF-8?B?SW5zdWxhdGlvbiAmIE1FUCBtYXRlcmlhbHMgZm9yIHlvdXIgRGF0YSBDZW50ZXIgUHJvamVj?=

=?UTF-8?B?dHM=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000324222737146

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi valuable client, We noticed your company is involved in

Building and managing Data centers.



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.126 listed in will-spam-for-food.eu.org]

[140.205.208.126 listed in will-spam-for-food.eu.org]

[140.205.208.126 listed in will-spam-for-food.eu.org]

[140.205.208.126 listed in will-spam-for-food.eu.org]

[140.205.208.126 listed in will-spam-for-food.eu.org]

[140.205.208.126 listed in will-spam-for-food.eu.org]

[140.205.208.126 listed in will-spam-for-food.eu.org]

[140.205.208.126 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.126 listed in dnsbl.ahbl.org]

[140.205.208.126 listed in dnsbl.ahbl.org]

[140.205.208.126 listed in dnsbl.ahbl.org]

[140.205.208.126 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.126 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.126 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.126 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[140.205.208.126 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.126 listed in bl.score.senderscore.com]

0.4 SALES_REPLY Your parents named you sales?

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?UTF-8?B?SW5zdWxhdGlvbiAmIE1FUCBtYXRlcmlhbHMgZm9yIHlvdXIgRGF0YSBDZW50ZXIgUHJvamVj?=

=?UTF-8?B?dHM=?=



Hi valuable client,


=3D"font-size:12px">

We notic=

ed your company is involved in Building and managing Data centers.

<=

p>


2px">I'm Nancy from China Iking Group. We manufacture thermal insulation
style=3D"color:#ff0000"> Rubber foam, Glass wool and MEP products speci=

fically for data center cooling and pipeline systems.


=3D"font-size:12px">


"font-size:12px">Since data centers require strict temperature control=

, we supply materials that meet high fire-proof and thermal s=

tandards, directly from our factory to help you control project costs=

.



span>

Are you op=

en to testing new suppliers for your upcoming projects ? we can send a=

short Catalog for your reference within 1 hour.

=


ol-pipe-for-Data-center.jpg" _src=3D"https://i.postimg.cc/LsdnJRZV/glass-wool-=

pipe-for-Data-center.jpg" referrerpolicy=3D"no-referrer" style=3D"width: 585.3=

33px; height: 434.333px;"/>



com/trace/v1/report?bid=3D2538913&env=3D600000324222737146&mac=3D410132&mf=3Dv=

ip%40vip.ikinginsulation.ltd&msgid=3Df5a1735b-ccd7-4180-b268-88c2fab6e558%40al=

ibaba.com&sac=3D0&tag=3DGLASSWOOL&tid=3D2538913&to=3Droot%40nk.ca&tpl=3D&ts=3D=

1782963366&type=3D1&url=3D&v=3D1.0&sign=3D7c01c9d2dbf2b45cd1710abfd431e2c3&url=

ts=3D1782963850" alt=3D"" style=3D"display: none; width: 1px; height: 1px;" />

Dragonfly/Intelcom Phish Part 2

Posted by Dave Yadallee on















hidden; MAX-WIDTH: 600px; BACKGROUND: #ffffff; MARGIN: 30px auto; =

border-radius: 10px; box-shadow: 0 4px 10px rgba(0,0,0,0.08)">


center; PADDING-TOP: 20px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">

Intelcom










TEXT-ALIGN: center; PADDING-TOP: 30px; PADDING-LEFT: 30px; PADDING-RIGHT: =

30px">

Delivery Update





Your package is currently being processed and =

requires a small fee for customs handling.






18px; FONT-WEIGHT: bold; COLOR: #04ab94">Amount due: 2.96 CAD





Please confirm your delivery =

details to ensure a smooth delivery experience.




eu/Intelcom/Contactez-support-Intelcom.ca/" style=3D"TEXT-DECORATION: none;=

BACKGROUND: #04ab94; MARGIN-TOP: 20px; FONT-WEIGHT: bold; COLOR: #ffffff; =

PADDING-BOTTOM: 12px; PADDING-TOP: 12px; PADDING-LEFT: 25px; DISPLAY: =

inline-block; PADDING-RIGHT: 25px; border-radius: 6px">Manage My Delivery =








#f1f1f1; COLOR: #888; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; =

PADDING-TOP: 20px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">

This is an automated message. Please do not reply.=





© 2026 Intelcom Express











Dragonfly/Intelcom Phish Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 01 Jul 2026 16:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wf3Zw-00000000DBB-2HRJ

for dave@doctor.nl2k.ab.ca;

Wed, 01 Jul 2026 16:38:48 -0600

Resent-From: The Doctor

Resent-Date: Wed, 1 Jul 2026 16:38:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [216.158.90.90] (port=41645 helo=oix4.emoneyhosting.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wf3L3-000000009jf-2Rlp

for sales@nk.ca;

Wed, 01 Jul 2026 16:23:36 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha256; q=dns; c=nofws;

s=default; d=divinegiftfashion.com;

b=LGf2jj+oPzsFs9VQB0wpPWsimpzEx/2fDkZY7OC2jBDXQfZ92U8WWFWzcYWmg2ygqABz7lgpe2UKOv3JVsvnI+EnTyutZ5xXnMSyQNUORbJo3BxzXtG11KQ8N0nlqfsBsnxwgYe9JY2VQXMjKD6XdVSrcfZAYys0PtROTveEcA1CCdfQZo5QHZ8+SpAamLKOlK3iYzf09R5LL42JH9jyYRMpoKVVgdGmTsMoxXo0xfKYDwbihELKF3aoaoUwefG+1RWSSdRF8qmfMoOobeul2qw5k1q/HbXUbbqWQyrT6iiWEQI4cxrnhcPG3S0k4CAmYmbuiNJye6iPkHsjmfeepg==;

h=Received:Received:Received:Content-Type:From:To:Subject:Message-ID:Content-Transfer-Encoding:Date:MIME-Version;

Received: (qmail 3868936 invoked by uid 108); 1 Jul 2026 22:22:29 +0000

Received: from unknown (HELO oix4.emoneyhosting.com) (127.0.0.1)

by oix4.emoneyhosting.com with SMTP; 1 Jul 2026 22:22:29 +0000

Received: from [127.0.0.1] ([196.65.222.62])

by oix4.emoneyhosting.com with ESMTPSA

id J09VDyWTRWqPCDsAPcmbyA

(envelope-from )

for ; Wed, 01 Jul 2026 22:22:29 +0000

Content-Type: text/html

From: Intelcom

To: sales@nk.ca

Subject: Intelcom Delivery Notification

Message-ID: <9077e2b9-551b-8ef0-2271-52b729d4c38e@divinegiftfashion.com>

Content-Transfer-Encoding: quoted-printable

Date: Wed, 01 Jul 2026 22:22:27 +0000

MIME-Version: 1.0

X-Spam_score: 12.2

X-Spam_score_int: 122

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Intelcom Delivery Update



Content analysis details: (12.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[216.158.90.90 listed in dnsbl.ahbl.org]

[216.158.90.90 listed in dnsbl.ahbl.org]

[216.158.90.90 listed in dnsbl.ahbl.org]

[216.158.90.90 listed in dnsbl.ahbl.org]

[196.65.222.62 listed in dnsbl.ahbl.org]

[196.65.222.62 listed in dnsbl.ahbl.org]

[196.65.222.62 listed in dnsbl.ahbl.org]

[196.65.222.62 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[216.158.90.90 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[216.158.90.90 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[216.158.90.90 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[216.158.90.90 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.65.222.62 listed in will-spam-for-food.eu.org]

[196.65.222.62 listed in will-spam-for-food.eu.org]

[196.65.222.62 listed in will-spam-for-food.eu.org]

[196.65.222.62 listed in will-spam-for-food.eu.org]

[196.65.222.62 listed in will-spam-for-food.eu.org]

[196.65.222.62 listed in will-spam-for-food.eu.org]

[196.65.222.62 listed in will-spam-for-food.eu.org]

[196.65.222.62 listed in will-spam-for-food.eu.org]

[216.158.90.90 listed in will-spam-for-food.eu.org]

[216.158.90.90 listed in will-spam-for-food.eu.org]

[216.158.90.90 listed in will-spam-for-food.eu.org]

[216.158.90.90 listed in will-spam-for-food.eu.org]

[216.158.90.90 listed in will-spam-for-food.eu.org]

[216.158.90.90 listed in will-spam-for-food.eu.org]

[216.158.90.90 listed in will-spam-for-food.eu.org]

[216.158.90.90 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[196.65.222.62 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[196.65.222.62 listed in sbl-xbl.spamhaus.org]

[196.65.222.62 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[216.158.90.90 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} Intelcom Delivery Notification