Chinese products spam part 2





您好,近期我司出版一份市场研究报告,关于《2026年全球临界尺寸扫描电子显微镜(Critical Dimension SEM)行业现状及未来发展趋势》。







主要厂商包括:



Hitachi



Applied Materials Technology



KLA Instruments



Thermo Fisher Scientific



HOLON



Advantest



TCK



Lasertec



Spectral AB



晶源微电子



......







本文正文共10章,各章节主要内容如下:



第1章:报告统计范围、所属行业、产品细分及主要的下游市场,行业现状及进入壁垒等



第2章:国内外主要企业市场占有率及排名



第3章:全球总体规模(产能、产量、销量、需求量、销售收入等数据,2021-2032年)



第4章:全球临界尺寸扫描电子显微镜主要地区分析,包括销量、销售收入等



第5章:全球临界尺寸扫描电子显微镜主要厂商基本情况介绍,包括公司简介、临界尺寸扫描电子显微镜产品型号、销量、收入、价格及最新动态等



第6章:全球不同产品类型临界尺寸扫描电子显微镜销量、收入、价格及份额等



第7章:全球不同应用临界尺寸扫描电子显微镜销量、收入、价格及份额等



第8章:行业发展趋势、驱动因素、行业政策等



第9章:产业链、上下游分析、生产模式、销售模式及销售渠道分析等



第10章:报告结论







如果您有兴趣了解更多内容,可以为您提供一份样品以及报价,供您参考。







若此报告与您业务无关,我们还可根据贵司的核心业务方向,提供其它的最新报告样本。请告知您关注的业务。







谢谢您的阅读,顺祝商祺!



Best Regards



Ludy



Sales Manager | QY Research, Inc.



E-mail: Ludy@qyresearch.com



Phone/WeChat: +86-13503065185(7*24)



Worldwide Leading Research Report Publisher









Tools for Sales spam from Microsoft Outlook Part 2

Content-Type: multipart/alternative;

boundary="_000_TY0PR02MB589877F5E8D976840903D103D367ATY0PR02MB5898apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY0PR02MB5898.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 74b56f60-8b85-4934-386f-08de65e5e1d8

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Feb 2026 01:11:54.3750

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KUZPR02MB9113



--_000_TY0PR02MB589877F5E8D976840903D103D367ATY0PR02MB5898apcp_

Content-Type: text/plain; charset="gb2312"

Content-Transfer-Encoding: base64



SGkgVGhlcmUsDQpJIGhvcGUgdGhpcyBtZXNzYWdlIGZpbmRzIHlvdSB3ZWxsLg0KV2UgYXJlIGEg

bGVhZGluZyBUb29scyBtYW51ZmFjdHVyZXIgYW5kIGV4cG9ydGVyIGluIENoaW5hLCBvZmZlcmlu

ZyBjdXN0b21pemVkIGRlc2lnbiwgcHJpdmF0ZSBsYWJlbGluZywgYW5kIHBhY2thZ2luZyBzZXJ2

aWNlcyB0byBmdWxseSBtZWV0IHlvdXIgaW5kaXZpZHVhbCByZXF1aXJlbWVudHMuDQoNClBsZWFz

ZSBmaW5kIG91ciBwcm9kdWN0IGNhdGFsb2cgZW5jbG9zZWQgZm9yIHlvdXIgcmVmZXJlbmNlLiBT

aG91bGQgeW91IGJlIGludGVyZXN0ZWQgaW4gYW55IGl0ZW1zLCBJIHdvdWxkIGJlIGRlbGlnaHRl

ZCB0byBwcm92aWRlIGEgZGV0YWlsZWQgcXVvdGF0aW9uLg0KDQpXZSBsb29rIGZvcndhcmQgdG8g

Y29sbGFib3JhdGluZyB3aXRoIHlvdSBhbmQgZXN0YWJsaXNoaW5nIGEgc3VjY2Vzc2Z1bCBidXNp

bmVzcyBwYXJ0bmVyc2hpcC4NClNpbmNlcmVseSwNCkFuZHkNCg==



--_000_TY0PR02MB589877F5E8D976840903D103D367ATY0PR02MB5898apcp_

Content-Type: text/html; charset="gb2312"

Content-Transfer-Encoding: quoted-printable
















Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hi There,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

I hope this message finds you well.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

We are a leading Tools manufacturer and exporter in China, offering customi=

zed design, private labeling, and packaging services to fully meet your ind=

ividual requirements.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Please find our product catalog enclosed for your reference. Should you be =

interested in any items, I would be delighted to provide a detailed quotati=

on.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

We look forward to collaborating with you and establishing a successful bus=

iness partnership.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Sincerely,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Andy








--_000_TY0PR02MB589877F5E8D976840903D103D367ATY0PR02MB5898apcp_--

Chinese products spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Fri, 06 Feb 2026 18:15:00 -0700

Received: from smtpbgbr1.qq.com ([54.207.19.206]:42234)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voWuF-000000008dW-0tyv

for dave@nk.ca;

Fri, 06 Feb 2026 18:14:48 -0700

EX-QQ-RecipientCnt: 13

X-QQ-GoodBg: 2

X-BAN-DOWNLOAD: 1

X-BAN-SHARE: 1

X-QQ-SSF: 00400000000000F0

X-QQ-FEAT: D4aqtcRDiqRTPanPgRrrE4yHHzGlT1gN4AHOEEbBXiw=

X-QQ-BUSINESS-ORIGIN: 2

X-QQ-Originating-IP: DdH/vcMLNXE8C0GV1KzCJ/rhA9+NDSqe/0GDukP7Nsg=

X-Originating-IP: 14.145.23.44

X-QQ-STYLE:

X-QQ-mid: lv3gz5b-1t1770426782t70192f89

From: "=?utf-8?B?bHVkeQ==?="

Subject: =?utf-8?B?5YWo55CD5Li055WM5bC65a+45omr5o+P55S15a2Q?=

=?utf-8?B?5pi+5b6u6ZWc6KGM5Lia5oC76KeI5Y+K5rSe5a+f?=

=?utf-8?B?5oql5ZGKMjAyNg==?=

Mime-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_6986919D_B91FE2C0_7002AC28"

Content-Transfer-Encoding: 8Bit

Date: Sat, 7 Feb 2026 09:13:01 +0800

X-Priority: 3

Disposition-Notification-To: "=?utf-8?B?bHVkeQ==?="

Message-ID:

X-QQ-MIME: TCMime 1.0 by Tencent

X-Mailer: QQMail 2.x

X-QQ-Mailer: QQMail 2.x

X-BIZMAIL-ID: 5772536147971556221

X-Address-Ticket:version=;type=;ticket_id=;id_list=;display_name=;session_id=;

X-QQ-SENDSIZE: 520

Received: from qq.com (unknown [127.0.0.1])

by smtp.qq.com (ESMTP) with SMTP

id ; Sat, 07 Feb 2026 09:13:03 +0800 (CST)

Feedback-ID: lv:qyr-research.com:qybglogicsvrgz:qybglogicsvrgz3a-1

X-QQ-XMAILINFO: NMkEoP1ufyq3UPPRPG4fDPsIvWGiZ0PUcrdKe0PqX3Y3ENOf6IgionJG

d0wKJDNPrMsOIq/JIbYTQYB75hcevWCBFShh0dz2hjoj+43prbPPESE4URTGaGHA14KvS/1

4v+NgU1rmYnKr97L89Z685MHv1AFc7jwMPaXBGDRpp9qjX5/npyEfXCoRwOvabWMpz9V49o

0pxR5C9YDiKxklKuU2TjPUk0I81l4OIM06/GMjtg/wokrTBEWYmukPMY9vygz8GICZJB616

mc1aKwsvWcKAZS54MOxz+DSxw0cRor8MFpUybtz25hZldKAkvNCaUOwCu/UpomT7Lz6Dk18

Lp5yW30Ghp1C1Avtpj0un/in7n7/XC2uBQ5C+sgZ5JMGiI57iAz7nuMsy6eDQvZY74qTL9o

JuJrXcoj3V7tUAEkYcnfsPj7R9iGMJsnT0vJsJKZCX9k+lsFCnN+9f9nkHIQuIT+gInzIWQ

Hp5Tx6XEYMJWItDXEIiIv+5/VMkFmYyr1pghYXnpYzjYRID0oJM42HMdPWbPwXdQJJU7TQs

UIBor59/qpBMvq+9J3/D9PudBhddVVMD1LQTgSer/khA++hAXHubTLS9U2onYCJ7gwRJZ4I

ukd+aBjgACf9jmwR/L/TQ2Njg8oq6AdUJKguxl8i6tUwqR1HQuZIkzrlNwwhKVxly6RlHo6

PFPOD5ukViMqcj5AQF6lwB8By3oGkBB+ti2Oj4QliOthM5NtWx9+TS8kJ6VQzUjF23a9vLx

m0yFaP6W29TpyIJ3UUp3M+GgsvvDGjsMN13VNGrCOkM1H5u9GPq2z7zc7Oh2kXTi1MKlkdT

EMfDMNM+X6u3sI4mnltLOqKF66FT1Z6cxPeK6pRNQrUReSxc5eTzHwsRZTqEZY38UJLY26p

9zp7fxkFEEnlOFRMrxe/Gg3fOqSqZ7Kc0CoVlZDBtuQgq8Hlw3Nf3T24g1qr6xfsRfGD8eO

Jnsgd0Yp90MFcfv23oWx9Q6eXLo7F9BCqvGs7U8BsOLNjvE+8Yh+w4h9H2n51Tf8M5xBI1g

NKrbKsTa8N4HbSP562PUeSCNRBTC0YnsecIsfwLRyiazmByHU3mBOC63oiu+KA2Pz50tI6p

LfNCbMf5Ss+NCnP/EBO6LGcUfhLpPpz0fMduhEFbMXeIimLW2ZWom4=

X-QQ-XMRINFO: OD9hHCdaPRBwH5bRRRw8tsiH4UAatJqXfg==

X-QQ-RECHKSPAM: 0

To: "=?gb18030?B?ZGF2ZQ==?="

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: æ‚¨å¥½ï¼Œè¿‘æœŸæˆ‘å¸å‡ºç‰ˆä¸€ä»½å¸‚åœºç ”ç©¶æŠ¥å‘Šï¼Œå…³äºŽã€Š2026年全球临界尺寸扫描电子显微镜(Critical

Dimension SEM)行业现状及未来发展趋势》。   主要厂商包括:





Content analysis details: (8.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.207.19.206 listed in dnsbl.ahbl.org]

[54.207.19.206 listed in dnsbl.ahbl.org]

[54.207.19.206 listed in dnsbl.ahbl.org]

[54.207.19.206 listed in dnsbl.ahbl.org]

[14.145.23.44 listed in dnsbl.ahbl.org]

[14.145.23.44 listed in dnsbl.ahbl.org]

[14.145.23.44 listed in dnsbl.ahbl.org]

[14.145.23.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.207.19.206 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.207.19.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.207.19.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.207.19.206 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.207.19.206 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[54.207.19.206 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.207.19.206 listed in will-spam-for-food.eu.org]

[54.207.19.206 listed in will-spam-for-food.eu.org]

[54.207.19.206 listed in will-spam-for-food.eu.org]

[54.207.19.206 listed in will-spam-for-food.eu.org]

[54.207.19.206 listed in will-spam-for-food.eu.org]

[54.207.19.206 listed in will-spam-for-food.eu.org]

[54.207.19.206 listed in will-spam-for-food.eu.org]

[54.207.19.206 listed in will-spam-for-food.eu.org]

[14.145.23.44 listed in will-spam-for-food.eu.org]

[14.145.23.44 listed in will-spam-for-food.eu.org]

[14.145.23.44 listed in will-spam-for-food.eu.org]

[14.145.23.44 listed in will-spam-for-food.eu.org]

[14.145.23.44 listed in will-spam-for-food.eu.org]

[14.145.23.44 listed in will-spam-for-food.eu.org]

[14.145.23.44 listed in will-spam-for-food.eu.org]

[14.145.23.44 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation

1.0 SARE_HTML_INV_TAG3 Message contains invalid HTML tag

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.7 SARE_HTML_INV_TAG2 Message contains invalid HTML tag

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

Subject: {SPAM?} =?utf-8?B?5YWo55CD5Li055WM5bC65a+45omr5o+P55S15a2Q?=

=?utf-8?B?5pi+5b6u6ZWc6KGM5Lia5oC76KeI5Y+K5rSe5a+f?=

=?utf-8?B?5oql5ZGKMjAyNg==?=



Tools for Sales spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: daveys=spam@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 20:29:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voZ0A-00000000FOZ-0EEi

for daveys=spam@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 20:28:54 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 20:28:53 -0700

Resent-Message-ID:

Resent-To: daveys=spam@doctor.nl2k.ab.ca

Received: from mail-japaneastazolkn19013085.outbound.protection.outlook.com ([52.103.43.85]:40345 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voWt2-000000008a9-3NgA

for doctor@nl2k.ab.ca;

Fri, 06 Feb 2026 18:13:35 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=bU7V1685cRSWZkO1niJ8pRfY+44UTr561UdI96b41GaGiYXSkAF3BnAL32wZtwk2zSHz+sh8y467dBaZhp13uTUjCPr06ZYYkTllfJq978jKcF7hf0xvbR70NTTcckbcoqLr8NrxDfuK0hSLMYwXcDUmtH+PdaRYTczSq20Ohp6Gyxi2riRiKbtxaOooJQnzjyFqub0aYlU18r4eOJG5mWSxadNv1/9cYuqI7yC9pV3JcCU5QHv2Ytjo5cD+gVaFPBhtV6zcVtWQ4NVj73ozrh52QEvg+3lE08Pj9weboBl7Ulx6VpmvOFc4veWTtJti4SWaQg73kWXytFDEVaIDGA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=AV4q0QmcAXxxDnYgYLGgAD6FF5+KZhUsvLShNipc/Ks=;

b=uiXl0qejP+leVRHbXLuInVCJn5FfsdkTsPtg5CHC9VFoOmVOXQ+n+jLavJqeLuwyF/3cTOIzZJX1qlQKOazejyP3kA8KOEhExre7+Ree5px8MR8/djozKnym6WtiOtKZgenKpS/y/vFM6yYpB2DkN/izduGn4dNUqNZPocWxgA8nsnVdOJujsN8FZ4ZiA/uSPeT6LPgqr1HlXWWjB9HMwi5pmkD9G9Ol65xYU9YSn2i+1Jd2r99HX5uOqRoZjnl1FClXh+lu42GVQ9CxohFSmuiMnctwG0szEpA/weLzY1fDEN9hwefdWM5Es02W4w3n7NpYKP5vPGHndG64XTb4rQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=AV4q0QmcAXxxDnYgYLGgAD6FF5+KZhUsvLShNipc/Ks=;

b=lhF+WkNuz1dvAJoozUFshVV8obv66cSNXJzTZ8Cgx3KnS/GZTw0Y0mi9ZpKzTF78esh6fJP0FuUq+qg0LUy0kC4Cdx6T+4RPAsyKcE9JaVhAhDkPB6ZAK7YzGfTiiNUkN5Bq8CCmaSvaRw07GxBz5vPVPbAnBKFNe188j7DKxzQDqFayVae8H65myzx0wFY47+SWYGnkUk7UE8sEtgK69ABqFRkZy/nB6WlXiMiBIy9CevGj43OankfwUBCvSxxH5IVqryo59IsfT6EZWSUpQHYuVJx+IFSoRnBtL43+vEye3o/B+GfBT5ZtCiIxyz2soK3L+AaAVnrZfMrom15cvw==

Received: from TY0PR02MB5898.apcprd02.prod.outlook.com (2603:1096:400:21d::8)

by KUZPR02MB9113.apcprd02.prod.outlook.com (2603:1096:d10:60::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.15; Sat, 7 Feb

2026 01:11:55 +0000

Received: from TY0PR02MB5898.apcprd02.prod.outlook.com

([fe80::90ef:ec15:c61d:5d46]) by TY0PR02MB5898.apcprd02.prod.outlook.com

([fe80::90ef:ec15:c61d:5d46%5]) with mapi id 15.20.9587.013; Sat, 7 Feb 2026

01:11:55 +0000

From: G Y

Subject: Tools Sale

Thread-Topic: Tools Sale

Thread-Index: AQHcl868WtHWQ7+wK0CIi1wOY64ymw==

Date: Sat, 7 Feb 2026 01:11:54 +0000

Message-ID:



Accept-Language: zh-CN, en-US

Content-Language: zh-CN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY0PR02MB5898:EE_|KUZPR02MB9113:EE_

x-ms-office365-filtering-correlation-id: 74b56f60-8b85-4934-386f-08de65e5e1d8

x-ms-exchange-slblob-mailprops:

q6Zzr5Fg03GA6gvxC+5DV69drWICqxJ7llXXEg+2sMwGyJfUM88rfbDQTB3WrDX56aqI50vhPlhiF1pbILU1fe4ukqlhNUznhUrJTsLaZScJ+tCffHXc2ashlcUxKpCi6GkJheMfd+9p1xdmYxA9s/F34c1ktcBq4VvM4moTnOPq2nVd9CwigJa5m5fnRCxO1NEzDUpX1fyl7xJpOefl//5LhR0VYLWxuWrCq5gY9SeCGIvqzHs69KK1Qg45iffS+0udOt0xDK/ldRacGEkEJUSqcx0aGjGE3F4uTmug7OnvWwQfYkulqVmxwjRYUxmtoLx/yXHREi7qerWaS3DGTUzRBFldcheX1QmrM9wFBRqxRZ5ogS0mUPRoPJQQ7nKwo7MUgn2IOWfeaZyVKF6a13lTxPNa26DlYIANN/j82qv9pAhoI+PH4Jv9086/XQk9GW6Ir348sY8smogJPgmGTBgEU5jZXcHoFD07MUArVtN2GtZfugDRnIG7E38QadyE533Z8naaQoMHkaqBlfzXHym1wjPhMfom7XBgeSNcrtNuDdCDdNN/jOs1FCCd4M6zQOUQUWfrUS4r47ba28h9DDWihG5+rHd4l1pWrp0+WQnCcaDljppOLcO6ymVoDp+i1mJph1Q/FjkC6Lao9haKISG9X5hsbQ/nynfSqpyG3V+h96eveT6LxsQI2J/hRvZ4

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|37102599003|39105399006|7071999006|20031999003|19110799012|15030799006|15080799012|461199028|8060799015|8062599012|56899033|39145399003|40105399003|41105399003|35041999009|3412199025|440099028|11031999003|102099032;

x-microsoft-antispam-message-info:

=?gb2312?B?cTE4NTRPM2JzWDBBRUxQbkVWYUlnU1F2RzVaRE85M1FVWGYrUjRRSSt6Rmd1?=

=?gb2312?B?eWo1NG5zd1JwRW50SVJ3WjAvYW1vOW1vK3ZBK3dlYkowMHlGVUZiY3pZc1NT?=

=?gb2312?B?alpCdTZaVDFLeWxQa1JqQmRXQllQalpxZStoakNDcnh6MHcrUHVMVzRQZ2RL?=

=?gb2312?B?Njc3UmVNTDduTlY4S1VrU282NkhLdFRlUFZob0t0YVY3OCsrVkRYbkhDVmJ3?=

=?gb2312?B?U3c4aGg4VjdjVk1qZVVTOFlKWGpQQTJvdDdoeUlHbThVR3RxQzBTK0FYdUND?=

=?gb2312?B?UkNJN1QrSXVtUTlmTW5kS2JkbVErSk85cUFxVFZNQnhWQXlONldPUi81UWNo?=

=?gb2312?B?Ym9UWk5XckdZU05MTi8wblV1NXlpWkRITkUvTG5uMndzTTVxZ0p4MWxFcjFx?=

=?gb2312?B?RC9ES09BMTRJWmF5UjhXYVNjMWxvaW5zT1p1dFExVFNMeVBtZndnLzJHME0x?=

=?gb2312?B?NTREbkxIc1FpdEVWVkJucXhGeU85c3grek9mTC9MZW85cEk0UTRmOUJRc0o1?=

=?gb2312?B?UzlRZjFwQlRrS3JDbzlSRC9RdjJlaVYyRDZ4Mko1ZzdHMmNKTnZOdmtGTlpl?=

=?gb2312?B?dVRYOWpvaTAwMnQ5dlp1ZWx0R3JDR3haZEpiSWdnU2FYdVVubEQzV25YbDJZ?=

=?gb2312?B?bEt1WXFJczEraGVNUkhyalUrY3dmZlFtWXI1MlZpeStPdWU0T1VPWjBvdGx1?=

=?gb2312?B?SklETFNKYUJybzc5V200RitQZGFBRTFDODZRL2VRU0p1NTBoKzlieWpUd25T?=

=?gb2312?B?WjR6TFVLR2dzWXd6ajRqNkUrTWxiWGljWHYxVkdvdUFjZ2dYQkpPR3dJRkhH?=

=?gb2312?B?anNzbmR3czNBZjlhdVhpNnkxZVk3L3ljWVlPaU5GaFREd3dtY0ZDZTluNURQ?=

=?gb2312?B?cStCNm5ORWRFWE1idlFYMHZKL21GTW1iWVJsRWkxMENoSXBhNFJXRE9id1Jz?=

=?gb2312?B?TEQ5NG5VNUh5eUNXZkt4bU5OYXNCRzRYUE9iMDZGcjVKMTRTbkljbGppNXZp?=

=?gb2312?B?Sm13UE1WM0p2d1YvMERndDg1enJ0dndnM0I1TlQxWjU5SXVoN0NMeHFGN0hh?=

=?gb2312?B?YU5FZUh2Qno2aW1odTJweXJnaEFJeTVDK1Z2UmN6OTdOb1ZScFYxeFRWejFS?=

=?gb2312?B?dTlNVnhyUG5HR2NmYVVnY3VwM0ZuMTJYenVUbmFISzY5Mnl5Uy9Zd2t6T0I0?=

=?gb2312?B?VSt4TjFGR0JvOXNFMlJxcWExb2lwbEJzbXhIWTlNTENadDhEUkZPUEQ1cjRQ?=

=?gb2312?B?MWhFbVk2Q2JwRlpFSWxyY2R6dzVrRDdZdmZJMnZQY29IV1V4OWYwUVdOcFJF?=

=?gb2312?B?WEFzeTA4SmtlWENDUzhxRFNLaEpTYWI1dy84Y0hkNmhESWNTYjZRTStSWUdD?=

=?gb2312?B?TSthWHdpTDlqbEFMM29ub0J0M29qaTl6WEU3ZTFRc3Bwcy9MV3ZJWWhrMExy?=

=?gb2312?B?anBwTjdENm5naDNCZXQ5Z1VYWjVneGxVcWd6ZFUxaFRrNmxZblBTVkhOOUFq?=

=?gb2312?B?M3hzcEZIb1dCanhkY0c4OHRvWXQwNnU1eWRENHI1ZWtXTndiUFFaVWZsTitF?=

=?gb2312?B?M3Urcmc2RlRMVUdnRnB5Z0VST0hPOHNiUWM3b3I4czNyeW5wYnhXV3VIWTht?=

=?gb2312?B?d1NBdFVTTk5Kcy8xbkp4MlRJUVBEL2VvL2NsN3lkbE43SWt6Znl4ZktqbnZn?=

=?gb2312?B?cE1taFljODFFQ1hJYzM3VGo0Q21zYUp0bEM1elorcUlaaXZnbXBqNnk0cktD?=

=?gb2312?B?MnlvdndUeEZGQ0YrTmo1akdDMTlaazhQREJjcVVncU1WMzNQQXVtWm94NDJD?=

=?gb2312?B?dlg4RVNWVm5GRndsOG9CSzhQbXJTdW0rS0J6Wk5IQzBTbG8wVlY1M3QyYUVF?=

=?gb2312?B?T1Bua1ZGeGJsZnhlS1hhek90TEU2UXU4Qytya1BSd0QxT2dQRW44bXo3Sy9W?=

=?gb2312?Q?mumRSHdyld8=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?gb2312?B?ZGVPaWF4YUdVa2pLRm0wUlF0WHpPZmRTb3JTdk1pZUhYZm5HcXVFbk4xUUE1?=

=?gb2312?B?THd6RGU3M25BQytBenU1VWwzN3Y4cGh1RGlIeDMweXpUdnFrSjBINTgyaHhR?=

=?gb2312?B?STBDaHNPUGJTNnJIN0kxRThQOGdjZVJoV0Z6R2JEMWlOZzVTYU1sazVjMVcv?=

=?gb2312?B?QTVVVE40MHBHZzl0bEZBNXdyZldsaTliRUVLSndyaTNENmNSNERmbmFiOHZW?=

=?gb2312?B?THFRRXdIK1d3cEpjY2ZaYnRhUXhWZGdKTmZEZnRTNitGdUFoTVdLWFNuRzNR?=

=?gb2312?B?cWxFMVMvNmVyM2JiMk9wVnJ6eWxjRWY4Ni9nZ2czTnlQdndLd2dEblVyc20y?=

=?gb2312?B?KzFFcWwzZjJGaXlIeDBRNkF0ODZSUUZ2bE5LR1hhVDhWQ3Yvaytvd0U4WGph?=

=?gb2312?B?eTBRcTJtbmozRDhPUDZiRXFCSzFoZ3NmRkFxRVFJM21lblEzWEgvbVlsZHU3?=

=?gb2312?B?UnphVGlqZDJTa0pNL2d2MkRBNjRzSElTMER5Nll6V0xKSDRvdlczSDhURWFQ?=

=?gb2312?B?VEVwdFpyR3YwUlpBYUFCTFo4RzVvMmZrWmZVbzhwWG1aeTdCQ210aURxNk80?=

=?gb2312?B?eEpHYkR3MTlIK1ZnWEFlSXdqcld6ZUJkYTczbTdlOTRVeXR6NVRuQnJLTnVZ?=

=?gb2312?B?VS9scHdMcXR2SHY0ZHQzRjExS1NVbDh1WlZRc3BxRGQ5cC9PTjdrSXVucmdQ?=

=?gb2312?B?cjJhZ3ZXOVNQOForQTQ5M0YxN3JFWDgrcVJqaklrR2tzV3IxUU85VE1OUi9K?=

=?gb2312?B?Rlo4c0dJNGdCNkJ4ZUxwQWMxSkdRaDNaU3Z5WE0zeEptR2NkWXVUQ05YK3BT?=

=?gb2312?B?Y2JUNWRZaDBJT1BQekJ6b20vK2owYTFjdmwzNEEwUHlkYWxFcDFNalZidFhn?=

=?gb2312?B?bE5XSUN6bFJTOUdTSFJ4MWJvcEhDVXZjU1l1ZlV3S0g3REVqTmFrc1d0QTRu?=

=?gb2312?B?dERIeVAyRTByUGRuWEpKOGIvOXV4cm81VnRCTklRaGpyOGtqSkd1eXk1MTN3?=

=?gb2312?B?VFZvdWlCdCt3TzZUZHp5SzFScjNIWklPa0d0bE1wNi8rMlMvR3BiU2REcTds?=

=?gb2312?B?ZFZHekIwcTFNTGNzbGRtY1E3Q3oxbW02bS9Gc0R4MTEveEJqZzNJb00vcnZZ?=

=?gb2312?B?eVhLSlh4REJ0enc1S1JVQmo0b0ptY1UrMXhRcU5MU1psZGZCd2o5WWhyUmJq?=

=?gb2312?B?My9FM0hab3RkVklaWXBBTVJiTkVyR29Ed1NHN09rdGtjcm1qcXI0RXdGaSt6?=

=?gb2312?B?eFhXMWFtRGpMRVBrR0xVN2c2TTVBUWVtM1g2bm1nb0Y0TlBrNnQyR1E0SDN6?=

=?gb2312?B?SEwvQno3MVkzTUJTbERGeFpIOGxGT2Q5b0JsQ251R3NSUkFuRit2VksvZXY1?=

=?gb2312?B?QUUzQUZEWWdoRFdYMWZPaWNoQjdmcW1hSnJCQnpYMG5QR1cybDdnVWNoNkRv?=

=?gb2312?B?WHBYWVh4T0RnL2JyK3YrdVYvUGVsdnB0ejhwZUY1cFBBOFRsdWlBL3NpL3gy?=

=?gb2312?B?R1JBSFdnRk1CNStPVEZPYlJlRkFuM1ZQVUV5UFZIMDhlWmtYQUdRY0syQVNQ?=

=?gb2312?B?UU05eWMwcEdjZDNNVHlRTXgvRzdCZ0pFV2N4TUlkY2FQM2p6MDkxcUZVSEVr?=

=?gb2312?B?TklVUkZBMGhybmU5WVdXZmJTQzhoSHRIVWR3WlBJT2Z1YVdoNE5NQnQ1ekdq?=

=?gb2312?B?SDE1NjRHRmtITXdkekJtbE0wNkFUb2l4U0g3cXRZNWdPeU5PTjdlcVNyRm1Z?=

=?gb2312?B?azUwVDV4clBrdkdqSmkrNFh0ZGg4VU9QRU9aYVYyT3BFMWNZZVg2eWp0K0dK?=

=?gb2312?B?L09XL1loa2RPV05XT2RrZnQzYXRWVVMyOXpLdE1OQ1l0S2Y2SVg1RjlpOUZO?=

=?gb2312?Q?TD285PVyC1cB5?=

Nigerian spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 15:57:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voUkf-000000003Am-31Uv

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 15:56:37 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 15:56:37 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f67.google.com ([209.85.208.67]:51382)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voTmx-00000000Phf-1qqZ

for root@nk.ca;

Fri, 06 Feb 2026 14:55:04 -0700

Received: by mail-ed1-f67.google.com with SMTP id 4fb4d7f45d1cf-65815ec51d3so1727288a12.2

for ; Fri, 06 Feb 2026 13:54:08 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1770414841; cv=none;

d=google.com; s=arc-20240605;

b=LEnJu9ysLdTw1aikm0AGA1bTEAoWIzr6BhkW1kCzU5H+66FEejVuxlZu3zpaueTe2g

tqvQ6gH48Ipo2+/OtPnGUrrtFM9akwNzHd1A2wmzzIw9dKK35J6UoFmQMnW8CWXrtF1S

nElMnzt7g9TT3yRnToKix1AkiCCnmZAj6m1u+Bark4/tt0i5z6cozmefrqyqDrqQaisa

oNlhTI4a9/YnT/w/dwvRHv5RvpD1PqZFJls7dnw5ng3JaNHkZSmZ9VafT/ZrD8+xzvCX

z5s6vO7jXUq7klUqVmJ2iI99mKeiRaXa/TRqB9InX0zTzskbBUlZxQzYPX8aaCJZRebN

1/iA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=STZJhGYJOpwauIzdTedI+cmefIOVzpfPtigsgIreWq4=;

fh=KgnDcNBjnojzG2zCPBvTvbX6K+DP1nuk584dg/a4bAg=;

b=bxcgjfZRQLseCkaJ4dtnGKw6H/WrlEWPWDl7iqaxa9DeY7Iuqn1dHCkWGbcAqtGFM6

Hm4HLdLTu1GHesAIro+jFxh35G1S+V1Xoz/Ln3++RZDxzHziczaIjZ8SXc3GF47L0KjO

lI8X09nhPlIjTsrhXaH6mFX/5FFTA+hz7AV3pAGafb3fk3E3+gBEkRkFQymwFp2OpAfC

2WDPgZWPN4hj6C2XmmoF4/Nar7cq/NQ6KQS49bKzcRZ7AGesRg3pxqengTIbXFv7jR3K

c7usxtpNkGaeb395iBAP0/K9NCvNLlq99eVRoY8t85KHL7ArKg97uOE26Wa7o3ujaeou

7YCQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=khamsoipit-ac-th.20230601.gappssmtp.com; s=20230601; t=1770414841; x=1771019641; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=STZJhGYJOpwauIzdTedI+cmefIOVzpfPtigsgIreWq4=;

b=Uxi7orQDt8gpMd+oFT9E4Q4zW6cR3cbn3mYEyxnklWcR+Vtyj/1ui72VJ+joQkdCPY

qtQKymg91OJbuIGMWDi1NJ3g1hclY8LMpymILtCcvTGPI9YrnobmQyWtQOaozAa2dwAK

hXKPc44TbqdWvCsByo38PNZD52xuXJ3NFcTrpJOTvCoSNwxPTAYEwOTrKvYwTZ/37DQ3

JAml1QCXpcGbmDAG+w8p6mRWK22xtcnZDol4M3nuHzfcRJz7S7w84/gU8j+KuwIAwxzQ

2DuGh29mnB6U1NSo0knpDh9Xp1LmgEYY79m6C33ajEVkSpEV8mqFST1Snku/yZi8Ffrd

ihug==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770414841; x=1771019641;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=STZJhGYJOpwauIzdTedI+cmefIOVzpfPtigsgIreWq4=;

b=kOe+GcFA6gbEHC3LX7qFDp2BQSSlhWgfYHqHz+lIfyWVq7nnUvvAaikKBRVDtnAX04

cueS99qDcbZMxr0aEa9LO+HLgiLdMX3cdYY/5HWTUQ0DmKbAeNLcrbFxI3AjRadtX5xO

dBa+Am5iZsma33aLcg5ETRObnjgWZBs7EcpphsOj5i2ghowR1EhyrcYkHEa5oKLp81m6

JeI9Y5tPcNY7Uyu3Kl3pu4bPbVYFAg2QjtatlboqYqS2Rh+mExOGRPEkGjzXpHVQhyJf

cY6B6xUVvCYW2o5eUsIZm6JpWlToJCdCPwCzG7iGcPTIuO5dcv6LzH9Xjj3xD+3WUbF7

XOYA==

X-Forwarded-Encrypted: i=1; AJvYcCXfY0r5DID61iMC8kox5Kx9whLTke1FeIQ0cOcR7M6uS+TyAqcp1xnfLGpyvZMlCp5nZIMf@nk.ca

X-Gm-Message-State: AOJu0YwgGvdrauWnv7G6Vm5hYCrtyM5H0QxE5CmaBUuhZLlGu6CnnY5Q

HD4NPwO96tnULOqsNbqhchuusZil1ZeAnIvMNwxuX6fMuPqfVSVXcmVV0F33czo5LTkK5doEnQF

kDtp9UucuPhzQX0YOoEgEDePlCj0czmlPXPeEMT/uDQ==

X-Gm-Gg: AZuq6aKRoQF6u92i+/agidC/aEDZCzKwzVICJ5XPoAH94eIoRLM843/4bOOocKHJWov

Aj61mQHl1Tyhe3iNGmaS4Mws4XdQEYhwppxNZWTXdEZIxFDTbTgaX/SIzOHmscllIv1Xd38O7P4

Jc72V0cKN2zTlU4uLMS6sKn3ZDQQHaQV34OhEjM7txiUxJNwjvbyiLe4YsyK0LnZObGhZv1EoNQ

LQAijpUFOCTXdsIHn0qkOhwDQV0P7CbRNjmik0dvpzlQzLWO/utIiJdxXYv4iD3+lOFZgYqxzI=

X-Received: by 2002:a05:6402:2551:b0:658:b87a:6eac with SMTP id

4fb4d7f45d1cf-6598419d5demr2539056a12.33.1770414840963; Fri, 06 Feb 2026

13:54:00 -0800 (PST)

MIME-Version: 1.0

Reply-To: sengsokrith30@gmail.com

From: Sokrith Seng

Date: Sat, 7 Feb 2026 04:53:50 +0700

X-Gm-Features: AZwV_Qgoy7O_h0fK9_vcil12W20I3WxIOZWog7RSDEDnrPeGVo8H856AJl6auLM

Message-ID:

Subject: Greetings....

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b37070064a2ed39e"

Bcc: root@nk.ca

X-Spam_score: 22.3

X-Spam_score_int: 223

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, My Name is Mr. Sokrith Seng, a personal Accountant/Executive

board Member of Directors working with Foreign Trade Bank Of Cambodian (FTB).

A late investor who died and left $31,640,000.00 Million doll [...]



Content analysis details: (22.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

[209.85.208.67 listed in dnsbl.ahbl.org]

[209.85.208.67 listed in dnsbl.ahbl.org]

[209.85.208.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.67 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.67 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[sengsokrith30(at)gmail.com]

2.5 HK_SCAM_N2 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Greetings....



--000000000000b37070064a2ed39e

Content-Type: text/plain; charset="UTF-8"



Greetings,



My Name is Mr. Sokrith Seng, a personal Accountant/Executive board Member

of Directors working with Foreign Trade Bank Of Cambodian (FTB).

A late investor who died and left $31,640,000.00 Million dollars with Our

Bank for some years and no Next of kin has come forward all these years for

claim.



Please get back to me as soon as possible for more details if you are

interested in my proposal. contact me:



Best Regards,



Mr. Sokrith Seng

Executive Member Board Directors



--000000000000b37070064a2ed39e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings,

My Name is Mr. Sokrith Seng, a personal =

Accountant/Executive board Member of Directors =C2=A0working with Foreign T=

rade Bank Of Cambodian (FTB). =C2=A0
A late investor who died and left $=

31,640,000.00 Million dollars with Our Bank for some years and no Next of k=

in has come forward all these years for claim.

Please get back to me=

as soon as possible for more details if you are interested in my proposal.=

contact me:

Best Regards,

Mr. Sokrith Seng
Executive Memb=

er Board Directors




--000000000000b37070064a2ed39e--

Follow up spam from Google Gmail Part 2





Content analysis details: (17.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[158.94.210.205 listed in will-spam-for-food.eu.org]

[158.94.210.205 listed in will-spam-for-food.eu.org]

[158.94.210.205 listed in will-spam-for-food.eu.org]

[158.94.210.205 listed in will-spam-for-food.eu.org]

[158.94.210.205 listed in will-spam-for-food.eu.org]

[158.94.210.205 listed in will-spam-for-food.eu.org]

[158.94.210.205 listed in will-spam-for-food.eu.org]

[158.94.210.205 listed in will-spam-for-food.eu.org]

[182.16.174.22 listed in will-spam-for-food.eu.org]

[182.16.174.22 listed in will-spam-for-food.eu.org]

[182.16.174.22 listed in will-spam-for-food.eu.org]

[182.16.174.22 listed in will-spam-for-food.eu.org]

[182.16.174.22 listed in will-spam-for-food.eu.org]

[182.16.174.22 listed in will-spam-for-food.eu.org]

[182.16.174.22 listed in will-spam-for-food.eu.org]

[182.16.174.22 listed in will-spam-for-food.eu.org]

[209.85.216.100 listed in will-spam-for-food.eu.org]

[209.85.216.100 listed in will-spam-for-food.eu.org]

[209.85.216.100 listed in will-spam-for-food.eu.org]

[209.85.216.100 listed in will-spam-for-food.eu.org]

[209.85.216.100 listed in will-spam-for-food.eu.org]

[209.85.216.100 listed in will-spam-for-food.eu.org]

[209.85.216.100 listed in will-spam-for-food.eu.org]

[209.85.216.100 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.100 listed in dnsbl.ahbl.org]

[209.85.216.100 listed in dnsbl.ahbl.org]

[209.85.216.100 listed in dnsbl.ahbl.org]

[209.85.216.100 listed in dnsbl.ahbl.org]

[158.94.210.205 listed in dnsbl.ahbl.org]

[158.94.210.205 listed in dnsbl.ahbl.org]

[158.94.210.205 listed in dnsbl.ahbl.org]

[158.94.210.205 listed in dnsbl.ahbl.org]

[182.16.174.22 listed in dnsbl.ahbl.org]

[182.16.174.22 listed in dnsbl.ahbl.org]

[182.16.174.22 listed in dnsbl.ahbl.org]

[182.16.174.22 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.100 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.100 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.100 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.100 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[158.94.210.205 listed in sbl-xbl.spamhaus.org]

[158.94.210.205 listed in sbl-xbl.spamhaus.org]

[158.94.210.205 listed in sbl-xbl.spamhaus.org]

[158.94.210.205 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[158.94.210.205 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[158.94.210.205 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.100 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.100 listed in list.dnswl.org]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[sw832827(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} 02/3/2026..



Hello,



Could you let me know if you received my last email? I await your response.=

..

Best Regards.

E-Mail: sw832827@gmail.com

G Wei



Follow up spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 12:44:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voRk8-00000000FZI-1VAx

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 12:43:52 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 12:43:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f100.google.com ([209.85.216.100]:52578)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voP3Q-00000000E9s-1kjV

for doctor@nl2k.ab.ca;

Fri, 06 Feb 2026 09:51:46 -0700

Received: by mail-pj1-f100.google.com with SMTP id 98e67ed59e1d1-3530f597ea3so408002a91.1

for ; Fri, 06 Feb 2026 08:50:50 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770396645; x=1771001445;

h=message-id:reply-to:date:from:to:subject:content-description

:content-transfer-encoding:mime-version:dkim-signature:dkim-filter

:dkim-signature:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=cUpoIzuqBojPpF2U3V/x6+nXXZQjlX1M5iu86diwODE=;

b=PfhLvL75BbAw3o73UGn/5HxMSRonFGHqNLPsGwxQXJHEhk8pGTaqOCXq6x2rhw6r9K

mkKIV12bW+VM9/K2Kni3txocYKBzk8ixAH9NqZblSkWwbf4y4Edb5PVLWQnFsGEEIuVx

4Ag0vbybX6yURB0PFEtK6p+1mqJ6k868YwI9Lh45UUe6ovs8OPPsFmerJReYM5d6KLzt

hEVXew/5xNEOuBDV4/4unrv8qaQACjHww1jQ7Qhqb+8LiFxg8BnjQQLeLuLFyrrFIlHr

WCGcQgCMy4+pmDxOSxy4pp7oBjszPECHc1dZ4ztxCarKiqaUVcmG+ylDZZmQXTw/jBjH

WZkA==

X-Forwarded-Encrypted: i=1; AJvYcCXXyOWQD2Y81Ao8/ARPiFcQNb/gNS01xLNIBjNqHN2J06rJYJuSM7uEuM0tAKAY2yBUMQBjTgA=@nl2k.ab.ca

X-Gm-Message-State: AOJu0Yx+6JjY4VUuCuU+sDqltjNaoKK4dtktj5VG/ifX4nhpe7N8eS7H

UbJobQFQH5aC0mUlCl2Mki7NdPLnnRstqE7upXdIJKsc9HBtg5z+KCHQcKEMYOk4t/1VBtqGtLz

MCSK77PEGkX+18Kah8zDB4s6B2EVoP+ubFVKj

X-Gm-Gg: AZuq6aL3vI3rtTF2LuzTqIaacWnrUogCnKpNtP7twSqY9uNhy8/w5L7xoyRMqJ3yoez

pZCbAxOQuBC9yBj9eQhSM6GipBrxjCtdWLvTebh9ZxvvXKSewXV6BLZWrEsFra6KjjYG+DxH377

uNBb3Qn93auTInqyZcvJ3eyFj7I9J9Bld3A1ovKLrAJdrGd0ZfrHc9G3VlDtE+3Z5ZLDAxE+ezY

n6HG8JgDOS5HKdSMYdykxPe8g6vhw7gBmE0FWpF2KFEhs0tJFsvyDWBl36j6syO3tGI+Clwc73y

vrgYI2gGExVrgUwO27qm5NOMYXw4l10gtRxIlvFvwEjMWEvj63ujGMmOZ7KqDhvy3BN7dlN3+AY

=

X-Received: by 2002:a17:90b:3a05:b0:33b:a906:e40 with SMTP id 98e67ed59e1d1-354b3c3823amr2658292a91.2.1770396644866;

Fri, 06 Feb 2026 08:50:44 -0800 (PST)

Received: from mg.cnn.co.id ([182.16.174.22])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-354b43835b0sm142877a91.1.2026.02.06.08.50.44

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 06 Feb 2026 08:50:44 -0800 (PST)

X-Relaying-Domain: cnn.id

Received: from mg.cnn.co.id (localhost.localdomain [127.0.0.1])

by mg.cnn.co.id (Proxmox) with ESMTP id 53A091B9B1F6;

Thu, 5 Feb 2026 23:59:17 +0700 (WIB)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cnn.co.id; h=cc

:content-description:content-transfer-encoding:content-type

:content-type:date:from:from:message-id:mime-version:reply-to

:reply-to:subject:subject:to:to; s=mg; bh=cUpoIzuqBojPpF2U3V/x6+

nXXZQjlX1M5iu86diwODE=; b=m2zMqi1MhuOCPl5h+Cnltp1lRW9TWSVey6ji+j

ELJi8Zqd5RkEbJn9VHdYhKcUUfbtYm4IJZieTKzyEunuVuOMYzg8aBuzP+gjMXHC

zTdR03oYAReSpc6HqSQFmSAn4rdpCmA4h7fqbRkR7j/8tbLunEyewaik8tGuXIWK

k3QRh8ZOa42AZ9h0JPlt9GS0ui6alYfRGqsg1R2ZrPRtY48EdwDp068LhTDJbacR

Gmw4INKIGd7bK7QmwYBo1XkCfY1Bgo1dM+ofv0y8jmXoVHj9KbPuikvY2kOHB9bQ

CFwAsFrMObIcRo07ZUSq7lerjBRmnpCtE3U3SR1rL8f+SHwg==

Received: from mail.cnn.co.id (mail.cnn.co.id [172.17.52.24])

by mg.cnn.co.id (Proxmox) with ESMTPS id 038E91C6109A;

Thu, 5 Feb 2026 20:21:04 +0700 (WIB)

Received: from localhost (localhost.localdomain [127.0.0.1])

by mail.cnn.co.id (Postfix) with ESMTP id 42A7C9CBF59;

Thu, 5 Feb 2026 15:35:01 +0700 (WIB)

Received: from mail.cnn.co.id ([127.0.0.1])

by localhost (mail.cnn.co.id [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id nVyg-vdMSXlE; Thu, 5 Feb 2026 15:34:59 +0700 (WIB)

Received: from localhost (localhost.localdomain [127.0.0.1])

by mail.cnn.co.id (Postfix) with ESMTP id D159B7BAEEB;

Thu, 5 Feb 2026 06:06:40 +0700 (WIB)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.cnn.co.id D159B7BAEEB

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cnn.co.id;

s=618A6F30-1553-11EC-AC97-D64BA216FC9C; t=1770246400;

bh=cUpoIzuqBojPpF2U3V/x6+nXXZQjlX1M5iu86diwODE=;

h=MIME-Version:To:From:Date:Message-Id;

b=H8EWQz+Vj2iM04mCiOCbcwsxlcc9lr0Crop3uD7xxwdLymc57Mpurgk2esAbuv9wY

X5Ciif6ls5VIxQsbuz57zY02MAKL+yledmp85ksf/62OWRSxJ6fO934zTm+7CpMpFg

eq8VJvv1fKC0UeNmS7H6/SK7e+J3YXpi/ZWAK2P0meS1gH4oE1w8ZkiscRx2wYcgXK

sc/I6JSRUEB7URJwC1Blwk1OJWM9Tt1skP8bQoSSLSJyMFek87g2dNapkhZcUJT5RB

i/VdLqGZQLc2DXbBYDbyIRg7qhqu/my+pQ0rEPk/5JcOE7qIiIgVO5e+2nUmI3Z410

HCqXic/n/k1KA==

X-Virus-Scanned: amavisd-new at mail.cnn.co.id

Received: from mail.cnn.co.id ([127.0.0.1])

by localhost (mail.cnn.co.id [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id JMjmXFUV2qwN; Thu, 5 Feb 2026 06:06:40 +0700 (WIB)

Received: from [158.94.210.205] (unknown [158.94.210.205])

by mail.cnn.co.id (Postfix) with ESMTPSA id 02B699D0427;

Thu, 5 Feb 2026 00:06:35 +0700 (WIB)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: 02/3/2026..

To: Recipients

From: nanda.rosandi@cnn.co.id

Date: Wed, 04 Feb 2026 09:05:31 -0800

Reply-To: sw832827@gmail.com

Message-Id: <20260204170636.02B699D0427@mail.cnn.co.id>

X-Spam_score: 17.6

X-Spam_score_int: 176

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Could you let me know if you received my last email?

I await your response... Best Regards. E-Mail: sw832827@gmail.com G Wei

Instagram followers spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 12:47:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voRmk-00000000G63-08AM

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 12:46:34 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 12:46:33 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f69.google.com ([209.85.219.69]:43331)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <3kzyGaQoJBXgWlWufajeqociWeh.YkioWhaojg.YW@maestro.bounces.google.com>)

id 1voREI-000000006Lb-34EA

for sales@nk.ca;

Fri, 06 Feb 2026 12:11:06 -0700

Received: by mail-qv1-f69.google.com with SMTP id 6a1803df08f44-88fcbe2e351so105656936d6.1

for ; Fri, 06 Feb 2026 11:10:18 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1770405012; x=1771009812; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=Mt53FO10xmQLF8DRc2hAJVNSLHqgJoL41s/q1diNQOU=;

b=cZLszPc3TuHyxmafm+/VNxo2ukfPDmnYVNCwx+OqcN4J3FXHXHE8Y/UFA1qbHQjojC

hwCuSgaEnxqrjlZRtenQyCJS+NLHKcLugj6t8vpunblIvvAnVyxTr8C/omapwUd225hQ

zHfgnZs1rrCO6zXX5/9OBxlAiOC1447ZKO9KNnjBDay+J+QpQocf0GRjPz2gd6uiHFVq

DfVArEmleytDH79MzWxClvHeivi5Sg8X7PIhH0n6Xx5qUHQPPlXLX3gYc6jLXqXhJqIS

uGcRo99uI1Oi6osEelCFO4/KLKa3age3e6q06s/pocjjyNoJ99CqV5ir7HJqoBZzm+gZ

q4Sw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770405012; x=1771009812;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=Mt53FO10xmQLF8DRc2hAJVNSLHqgJoL41s/q1diNQOU=;

b=XKYVQt8aBt7GSXhy1WGCB7UIFQe7mjjHlDVrdwBsz/da1k6tOMQ6153vYXRVWqZktZ

HxXAIhaKpfKyo9hHB0J215uaQpjskYYn0m/qzTru2Voe1IDCV8S3Ri+7DRVxdYdIBx8C

HwHsXG+AyiK4Jw7l8/i4pQIVtec0LNZN34NJUEpp1ES4O7keQOJjMrTMNjcy9Por4MzQ

eR9t5/Ev3xPUH43qvxQAdxC7z/WeTrs9RgJlTr72mmb9pnbIX6zVI/hcAP5wKxzWLaPD

OFx3jIIJxA86Tj5THknKLPbBQS+Nd+SPL3pqS7U30CvA7lnC/+gbfwpEwUWc0oy5TG7V

eNGA==

X-Gm-Message-State: AOJu0YzPtIRG96eW1V7bBuNFUXD1G352XhBQhI+QgrW/dDZyN5PzGl6I

Qg9w7cK5nt2VXCG8xkEaZ4ptAp1IMK+zBnSzBpkAok5CrQeavVTamRpbHSSPe89ioq4Tb52QqgA

1NpI=

MIME-Version: 1.0

X-Received: by 2002:ad4:5bcd:0:b0:894:7218:ce8d with SMTP id

6a1803df08f44-89530100232mr120297876d6.32.1770405011915; Fri, 06 Feb 2026

11:10:11 -0800 (PST)

Message-ID:

Date: Fri, 06 Feb 2026 19:10:11 +0000

Subject: daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook

Likes here

From: apayjenius@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, daveyadallee, Get More 1,000 Instagram Followers and 1,000

Facebook Likes here Sorry to interrupt your time. We offer social media services,

If you're interested, please visit our Website. If you're not interested,

please skip this step.



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.69 listed in dnsbl.ahbl.org]

[209.85.219.69 listed in dnsbl.ahbl.org]

[209.85.219.69 listed in dnsbl.ahbl.org]

[209.85.219.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.69 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.69 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.69 listed in sa-trusted.bondedsender.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[apayjenius(at)gmail.com]

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.69 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.69 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.69 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.69 listed in bl.score.senderscore.com]

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook

Likes here





Hi, daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook Likes here

Sorry to interrupt your time.



We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.



We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )



Are you interested in a free trial ?

Special For You Bonus Extra $2 FREE SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :



[ https://instatool.site/services/?daveyadallee ]





Take free trial service today only...!!

10 -101K Instagram Followers



- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest



Thank you,

Regards,



Copyright © 2014 - 2026 instatool.site

Instagram follower phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 12:47:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voRmk-00000000G63-08AM

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 12:46:34 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 12:46:33 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f69.google.com ([209.85.219.69]:43331)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <3kzyGaQoJBXgWlWufajeqociWeh.YkioWhaojg.YW@maestro.bounces.google.com>)

id 1voREI-000000006Lb-34EA

for sales@nk.ca;

Fri, 06 Feb 2026 12:11:06 -0700

Received: by mail-qv1-f69.google.com with SMTP id 6a1803df08f44-88fcbe2e351so105656936d6.1

for ; Fri, 06 Feb 2026 11:10:18 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1770405012; x=1771009812; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=Mt53FO10xmQLF8DRc2hAJVNSLHqgJoL41s/q1diNQOU=;

b=cZLszPc3TuHyxmafm+/VNxo2ukfPDmnYVNCwx+OqcN4J3FXHXHE8Y/UFA1qbHQjojC

hwCuSgaEnxqrjlZRtenQyCJS+NLHKcLugj6t8vpunblIvvAnVyxTr8C/omapwUd225hQ

zHfgnZs1rrCO6zXX5/9OBxlAiOC1447ZKO9KNnjBDay+J+QpQocf0GRjPz2gd6uiHFVq

DfVArEmleytDH79MzWxClvHeivi5Sg8X7PIhH0n6Xx5qUHQPPlXLX3gYc6jLXqXhJqIS

uGcRo99uI1Oi6osEelCFO4/KLKa3age3e6q06s/pocjjyNoJ99CqV5ir7HJqoBZzm+gZ

q4Sw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770405012; x=1771009812;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=Mt53FO10xmQLF8DRc2hAJVNSLHqgJoL41s/q1diNQOU=;

b=XKYVQt8aBt7GSXhy1WGCB7UIFQe7mjjHlDVrdwBsz/da1k6tOMQ6153vYXRVWqZktZ

HxXAIhaKpfKyo9hHB0J215uaQpjskYYn0m/qzTru2Voe1IDCV8S3Ri+7DRVxdYdIBx8C

HwHsXG+AyiK4Jw7l8/i4pQIVtec0LNZN34NJUEpp1ES4O7keQOJjMrTMNjcy9Por4MzQ

eR9t5/Ev3xPUH43qvxQAdxC7z/WeTrs9RgJlTr72mmb9pnbIX6zVI/hcAP5wKxzWLaPD

OFx3jIIJxA86Tj5THknKLPbBQS+Nd+SPL3pqS7U30CvA7lnC/+gbfwpEwUWc0oy5TG7V

eNGA==

X-Gm-Message-State: AOJu0YzPtIRG96eW1V7bBuNFUXD1G352XhBQhI+QgrW/dDZyN5PzGl6I

Qg9w7cK5nt2VXCG8xkEaZ4ptAp1IMK+zBnSzBpkAok5CrQeavVTamRpbHSSPe89ioq4Tb52QqgA

1NpI=

MIME-Version: 1.0

X-Received: by 2002:ad4:5bcd:0:b0:894:7218:ce8d with SMTP id

6a1803df08f44-89530100232mr120297876d6.32.1770405011915; Fri, 06 Feb 2026

11:10:11 -0800 (PST)

Message-ID:

Date: Fri, 06 Feb 2026 19:10:11 +0000

Subject: daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook

Likes here

From: apayjenius@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, daveyadallee, Get More 1,000 Instagram Followers and 1,000

Facebook Likes here Sorry to interrupt your time. We offer social media services,

If you're interested, please visit our Website. If you're not interested,

please skip this step.



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

[209.85.219.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.69 listed in dnsbl.ahbl.org]

[209.85.219.69 listed in dnsbl.ahbl.org]

[209.85.219.69 listed in dnsbl.ahbl.org]

[209.85.219.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.69 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.69 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.69 listed in sa-trusted.bondedsender.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[apayjenius(at)gmail.com]

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.69 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.69 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.69 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.69 listed in bl.score.senderscore.com]

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook

Likes here





Hi, daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook Likes here

Sorry to interrupt your time.



We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.



We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )



Are you interested in a free trial ?

Special For You Bonus Extra $2 FREE SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :



[ https://instatool.site/services/?daveyadallee ]





Take free trial service today only...!!

10 -101K Instagram Followers



- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest



Thank you,

Regards,



Copyright © 2014 - 2026 instatool.site

Web/SEO/App Spam from Google Gmail Part 2

From: rose.atkins@thedatabuild.com

Sent: Wednesday, February 4, 2026 9:04 PM

To: dave@doctor.nl2k.ab.ca

Subject: Shopify Users List







Hi,







I wanted to check if you are interested in acquiring Shopify Users List for

your sales and marketing initiatives?







You might be interested in following users list: WooCommerce, BigCommerce,

NetSuite, Klaviyo, Ecwid, SAP Commerce Cloud, Magento, eBay, Stripe, Wix,

Avalara, Gorgias, Weebly, FastSpring, PrestaShop, Oracle Commerce and many

more.







Please let me know your target audience and geography so that I can get back

to you with samples, counts and pricing for the same.







Appreciate your time and look forward to your response.







Best Regards,



Rose Atkins



Sr. Demand Generation







Please reply with "Not Interested" in the subject line if you would prefer

not to receive emails in the future.





------=_NextPart_000_0AA9_01DC97C5.8952AAC0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
http-equiv=3DContent-Type content=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
style=3D'word-wrap:break-word'>


class=3DMsoNormal>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:=

standardcontextual'>Hi,


style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:=

standardcontextual'> 


class=3DMsoNormal>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:=

standardcontextual'>Just wanted to check if you have received my =

previous email.


style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:=

standardcontextual'> 


class=3DMsoNormal>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:=

standardcontextual'>Any update for me?


class=3DMsoNormal>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:=

standardcontextual'> 


class=3DMsoNormal>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:=

standardcontextual'>Awaiting your reply.


class=3DMsoNormal>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:=

standardcontextual'> 


class=3DMsoNormal>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:=

standardcontextual'>Regards,


class=3DMsoNormal>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:=

standardcontextual'>Rose


class=3DMsoNormal>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif'> 
o:p>


1.0pt;padding:3.0pt 0in 0in 0in'>


style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif'>From:
<=

/b> =

rose.atkins@thedatabuild.com <rose.atkins@thedatabuild.com> =


Sent: Wednesday, February 4, 2026 9:04 PM
To: =

dave@doctor.nl2k.ab.ca
Subject: Shopify Users =

List


class=3DMsoNormal> 


class=3DMsoNoSpacing>Hi,


class=3DMsoNoSpacing> 

I =

wanted to check if you are interested in acquiring Shopify Users List =

for your sales and marketing initiatives?


class=3DMsoNoSpacing> 

You =

might be interested in following users list:
WooCommerce, =

BigCommerce, NetSuite, Klaviyo, Ecwid, SAP Commerce Cloud, Magento, =

eBay, Stripe, Wix, Avalara, Gorgias, Weebly, FastSpring, PrestaShop, =

Oracle Commerce and many more.


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>Please let me know your target audience and =

geography
so that I can get back to you with samples, counts and =

pricing for the same.


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>Appreciate your time and look forward to your =

response.

 


class=3DMsoNoSpacing>Best Regards,


class=3DMsoNoSpacing>Rose =

Atkins


style=3D'mso-bookmark:_Hlk159549989'>


class=3DMsoNoSpacing>Sr. Demand Generation


class=3DMsoNoSpacing> 


style=3D'color:gray'>Please reply with "Not Interested" in the =

subject line if you would prefer not to receive emails in the =

future.



------=_NextPart_000_0AA9_01DC97C5.8952AAC0--



Web/SEO/App Spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 11:38:00 -0700

Received: from mail-pf1-f193.google.com ([209.85.210.193]:61733)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voQhJ-000000003yx-0uba

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 11:37:04 -0700

Received: by mail-pf1-f193.google.com with SMTP id d2e1a72fcca58-81f4f4d4822so1383327b3a.3

for ; Fri, 06 Feb 2026 10:36:06 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thedatabuild-com.20230601.gappssmtp.com; s=20230601; t=1770402960; x=1771007760; darn=doctor.nl2k.ab.ca;

h=disposition-notification-to:content-language:thread-index

:mime-version:message-id:date:subject:in-reply-to:references:to:from

:from:to:cc:subject:date:message-id:reply-to;

bh=aSMAXW2Ufzc6gwlvtc2t3Wn05Td//uH4WFzAT5bg7bE=;

b=LOmmHmLyMIejG+FmLw3/mEO6t7KaWeJTqYHFlh8mz9itspiDCQPMVMno5YOV3DLCT6

oNfTDteeqOulluF08cSq6pc/9YbIZQQ64DNIP9yu36hZdulK/NYKGrmolV9tViLcpINi

N9/nScIzEjanmGvyiCsLRaR+D2NKlgKtd3B2e+tPFUeN9oT/BuZkA9qyoYnO7Sfd27Om

F96f1fdybDiA0ubTa6k5zhIM/ZZBpss2ltpgy1OZvJI5Cyo7bVpb0iILyQHG6hLHGklA

TPYPPC8xs/Pomd7Z1JGMFPFuuFiiXJknN27M3ZL2oXn2yvDQp8nOtOnOm3VZtFX7pn0u

AEZw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770402960; x=1771007760;

h=disposition-notification-to:content-language:thread-index

:mime-version:message-id:date:subject:in-reply-to:references:to:from

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=aSMAXW2Ufzc6gwlvtc2t3Wn05Td//uH4WFzAT5bg7bE=;

b=DmcnIZ7xYOY7Bpp0oxF/syv3T4zjs+MIKB7OjE0ULtBH87nZXCs9tWLmj+VR8FapZ6

YcE2TPx+mh53hTD1pUIVoni8fou4Gg37xbubzPHTg2hSRggXFFllF8CJQB1TRS73NroY

S6SomSmh3DBxw43jIO8PW7M2YIvJlIdfqHm5RG7R3i6+X05l5i15iqNh758MukyNK/DL

iIfbjnc0Gml2spJtnM3eXXyLPpm1+1uCtKAaETaFY+zqNaK3wEuYO+w/zQoMa/CL+ZPL

iybbUf1+1kaHchufOeOcpcfWxK7tIHJFkTZSNWam8jSzg7a9PmZVffzE2Lnd7QPjk15c

gCsQ==

X-Gm-Message-State: AOJu0YyCUq4XTlvBCwvhjxhWT3JuYGCBGoCgG/QKreHIQadskh7AnfKi

lWu7FJmDDxiSQqh/Dmicz59EX1yHFZAMMcFd6IvthJSd+wtRd9MZRkDXQlDcqdpBbJCgZgiNYKj

FtQXeS1g=

X-Gm-Gg: AZuq6aIR8RxmWYbHGD8KmKAFFxisW4KC+ODdL5x48MePjlSPsWVx9vVwIF6Reoc74eR

69En+81RPxIsBLtiu2yF2I5MBbvBm8DuHLU3vOmo9nsu+m9vQS6Yy/JwVWp7F0iJAz5otGGmKUF

XZfMb1LJx/WYnaGnrWPHXkVPVLPR/vIA8ZRQR3PADvgl6m5qEuzY5ugcdSQ0E/az8vXpyNUep2n

rmd27i5VwnAx5BCbZ+1HPq3ecQou6B/qVEpPTOjyRti+z2P4t1yFooFxuXculyuZW3pIoFNJY3d

ENVmy8Y/MkbOkrvHUbWNFOAyIou/SGi8L5QXEMjJbQCJe1PcHsN1wmeqySItxhBB836YItorKtx

nDy1OPne/11Dhh4P1hkpgElraE2paXT32sH02Dv1qQ/Sg3irMwD8GQiO6BPWz0K9ZAr78ry0+YN

7RYZwpQ6NH/mDzVTCDvGnOhqVL9ciZrv5aEOk=

X-Received: by 2002:a05:6a00:2381:b0:7e8:43f5:bd39 with SMTP id d2e1a72fcca58-824416f2b42mr3396295b3a.37.1770402959711;

Fri, 06 Feb 2026 10:35:59 -0800 (PST)

Received: from DESKTOPDP4EVTG ([103.214.61.57])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-824418856d5sm2703765b3a.38.2026.02.06.10.35.58

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 06 Feb 2026 10:35:59 -0800 (PST)

From:

To:

References: <080601dc95eb$d8a7c8c0$89f75a40$@thedatabuild.com>

In-Reply-To: <080601dc95eb$d8a7c8c0$89f75a40$@thedatabuild.com>

Subject: RE: Shopify Users List

Date: Sat, 7 Feb 2026 00:05:20 +0530

Message-ID: <0aa801dc9797$6f9a6ec0$4ecf4c40$@thedatabuild.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0AA9_01DC97C5.8952AAC0"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AQIZlVuqsVwHYhhgt+KfniuLSZ0rJbT8A0lw

Content-Language: en-us

Disposition-Notification-To:

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Just wanted to check if you have received my previous

email. Any update for me?



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

[209.85.210.193 listed in dnsbl.ahbl.org]

[209.85.210.193 listed in dnsbl.ahbl.org]

[209.85.210.193 listed in dnsbl.ahbl.org]

[103.214.61.57 listed in dnsbl.ahbl.org]

[103.214.61.57 listed in dnsbl.ahbl.org]

[103.214.61.57 listed in dnsbl.ahbl.org]

[103.214.61.57 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.193 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.193 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} RE: Shopify Users List



This is a multipart message in MIME format.



------=_NextPart_000_0AA9_01DC97C5.8952AAC0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







Just wanted to check if you have received my previous email.







Any update for me?







Awaiting your reply.







Regards,



Rose





Intelcom Phish Part 2

























Â

















This is an automated email, please do not reply.











Â





















--1c9e5bbbb9336e3669a57250f88edd9c8

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit































Hello,





⚠️ We need you to confirm your delivery before it expires and returned to the sender !





































Â


































Â
Â
















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.





However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:





Confirm my delivery





Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).





Have a great day!





Â


































Â





















This is an automated email, please do not reply.





Â














--1c9e5bbbb9336e3669a57250f88edd9c8--



Intelcom Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 12:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voRm1-00000000Fz3-415v

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 12:45:49 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 12:45:49 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [83.167.253.186] (port=59184 helo=givemeabreak.ca)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voQnm-000000004Vp-2ejz

for games@nl2k.ab.ca;

Fri, 06 Feb 2026 11:43:42 -0700

Received: by givemeabreak.ca (Postfix, from userid 33)

id 2C3D24247B; Fri, 6 Feb 2026 18:42:45 +0000 (UTC)

To: games@nl2k.ab.ca

Subject: We have not received payment for your customs duties! Your package will be returned to the sender.

Date: Fri, 6 Feb 2026 18:27:07 +0000

From: =?UTF-8?Q?Intelcom=C2=AE?=

Reply-To: noreply@wightman.com

Message-ID: <3413b5518fb7056ab443faca23279481@givemeabreak.ca>

List-Unsubscribe: mailto:bounce522-eXtBSWEj0otsQoy@givemeabreak.ca?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1c9e5bbbb9336e3669a57250f88edd9c8"

Content-Transfer-Encoding: 8bit

X-Spam_score: 16.0

X-Spam_score_int: 160

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: intelcom-dragonfly@intelcom.ca | Hello,



Content analysis details: (16.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[83.167.253.186 listed in dnsbl.ahbl.org]

[83.167.253.186 listed in dnsbl.ahbl.org]

[83.167.253.186 listed in dnsbl.ahbl.org]

[83.167.253.186 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[83.167.253.186 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[83.167.253.186 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[83.167.253.186 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[83.167.253.186 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: ctmsapp.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: ctmsapp.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: ctmsapp.com]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: jii.li]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 HREF_EMPTY_NORDNS Empty href + no rDNS

0.0 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

Subject: {SPAM?} We have not received payment for your customs duties! Your package will be returned to the sender.



This is a multi-part message in MIME format.



--1c9e5bbbb9336e3669a57250f88edd9c8

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













intelcom-dragonfly@intelcom.ca |











Hello,



⚠️ We need you to confirm your delivery before it expires and returned to the sender !



































Â















Â





Â















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.



However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:



Confirm my delivery



Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).



Have a great day!















Â

Antimalware phish from Google Gmail Part 3



=20



=20



=20



=20















Antimalware phish from Google Gmail Part 4

.cse-banner .encryption-icon {

/ We use the IE workaround instead. /

background-image: none !important;

}



.cse-banner .encryption-icon .ms-fallback {

display: block !important;

}



/ NB: Some MS clients ignore dark-scheme styling and apply their o=

wn, so there's nothing we can do to help there.
/

@media (prefers-color-scheme: dark) {

.cse-banner:not([class^=3D"x_"]) .encryption-icon .ms-fallback {

display: none !important;

}



.cse-banner:not([class^=3D"x_"]) .encryption-icon .ms-fallback-da=

rk {

display: block !important;

}

}






/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Austin Nunnelly: Order VIHD31635 =E2=80=93 Update finalized"/>
an>
>
"/>
anization">

a itemprop=3D"eventId/googleCalendar" content=3D"ljAnZWXc17QnZLHzVMAOnaTsAs=

"/>
1px; height: 0; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow=

: hidden;" itemprop=3D"name">Order VIHD31635 =E2=80=93 Update finalized
an>
le=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"body-co=

ntainer">

=3D"height:16px;" aria-hidden=3D"true">  

=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"">

temtype=3D"http://schema.org/EmailMessage">

Orde=

r VIHD31635 =E2=80=93 Update finalized

=

=


=3D"border: solid 1px #dadce0; border-radius: 8px; direction: rtl; font-siz=

e: 0; padding: 24px 32px; text-align: left; vertical-align: top;" class=3D"=

main-container-inner">

style=3D"font-size: 13px; text-align: left; direction: ltr; display: inline=

-block; vertical-align: top; width: 100%;overflow: hidden; word-wrap: break=

-word;">
sentation" width=3D"100%" class=3D"main-column-table-ltr" style=3D"padding-=

right: 32px; padding-left: 0;;table-layout: fixed;">=


"main-column-td" style=3D"padding:0; vertical-align:top;">
0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%"=

style=3D"table-layout: fixed;">

text-align: left; word-break: break-word;;padding-bottom:2px;">

=3D"font-family: 'Google Sans', Roboto, sans-serif;font-weight: 400=

; font-size: 22px; line-height: 28px;color: #3c4043; text-decoration: none;=

" class=3D"primary-text" role=3D"presentation">Orde=

r VIHD31635 =E2=80=93 Update finalized

=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;pad=

ding-bottom:24px;">

: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spac=

ing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" r=

ole=3D"presentation">Friday Feb 6, 2026 =E2=8B=85 10:4=

9pm (Pacific Time - Los Angeles)

t-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bo=

ttom:24px;">

l; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.=

2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"=

presentation">

Windows MalwareSafe
1 865 209-0967<=

/strong>

Order Date: Saturday, 07 February 2026
Order number: 9681=

-KEBZ-3975

Subscription is active and up to date

=

We thank you for choosing Windows MalwareSafe. Your membership has reach=

ed its expiration today.

Product Inventory View

<=

p>Selected Service: Premium Advantage
Warranty: One Year
Charged: $30=

5.44

This email is sent because you previously subscribed to our serv=

ices.

If you wish to cancel and obtain a full refund, contact
>1 865 209-0967
immediately.

Warm greetings,
The Windows=

MalwareSafe, LLC
Manager: Kimberly May

Copyright =C2=A92026 compa=

ny. All rights reserved.


tent=3D"Windows MalwareSafe1 865 209-0967Order Date: Saturday, 07 February=

2026Order number: 9681-KEBZ-3975Subscription is active and up to dateWe th=

ank you for choosing Windows MalwareSafe. Your membership has reached its e=

xpiration today.Product Inventory ViewSelected Service: Premium AdvantageWa=

rranty: One YearCharged: $305.44This email is sent because you previously s=

ubscribed to our services.If you wish to cancel and obtain a full refund, c=

ontact 1 865 209-0967 immediately.Warm greetings,The Windows MalwareSafe, =

LLCManager: Kimberly MayCopyright =C2=A92026 company. All rights reserved."=

/>

ft; word-break: break-word;;padding-bottom:24px;">

: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px;=

line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: =

none;" class=3D"primary-text" role=3D"presentation">
lpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bot=

tom: 4px;">


r: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing: =

antialiased;margin: 0; padding: 0;">Guests

(Guest lis=

t has been hidden at organizer's request)


--000000000000d6cf65064a2b683b--