NetKnow Corporate Blog

Telnet Communications phish Part 3

Posted by Dave Yadallee on Tuesday, March 3. 2026

T

qivIPi7+054T+CviG00bXrXVri7ubb7WjWFukiBNxXBLOuDkHit74PfGrQfj

Zo19qegQX9vb2dx9mkGoRLGxbaG4AZsjBHOaAPQaK8p+Mn7Rnhj4H6jpVnr9

rqdxLqMUs0J0+BJFCoyg7izrg5cevep/g5+0D4b+OL6qnh+21KA6b5fnf2hA

sed+cbdrtn7p64oA9Por5vT9u34ePqYsV07xEZjc/ZRiziKl9+z/AJ69M9/S

tj4nfti+BfhvrVxo6m717VbZzHcRaeqmOFx1VpGIG4ei5x0OKAPeK4n4y+Pb

j4YfDHX/ABRbWkd9caZAJUt5WKq5LquCR0+9XnXwz/bJ8DfEbXLfRnW90HUr

lgkC6gq+VKxPCiRScMfRsAngEnivQ/jRqfhvSPhf4gvPGGnSat4aigBvrKNA

7SpvUABdy5+baeooA+c/ht+3Drnjr4h+G/Dk/hiwtYdVvUtXnjncsgIPIB78

d6+wga+N/hn8Q/2d9Q+Ivhu18OeAL3T/ABBNeolhdvaKqwy4OGJ844GM84Nf

X9/qFtpNjPeXtxFaWkCGSWeZwqIoHJJPAFAFuivnDxV+3X8PdCvJLbTYtS8Q

Mhx9otIQkJ+jOQT9QMe9Xfhr+2d4P+I3inT/AA8unappmpX8pit/OjR4mbBO

CytkHAPbHvQB9BUV5h8XP2hvCPwXntbbX5ruS/uozNFaWVuZHZAcbskhQM8c

nPtXkZ/4KD+ERPgeHNZMO7G8mPdj1xnr7ZoA+q6illSCNnkcRooyzscAe5rz

j4U/tCeDPjEZIdBv5I9RjXe+nXyeVOF/vAZIYe6k474rzP8AaS/aX8J6Dp3j

D4e3Vpqra3Lp7W4kjt0Nvulj+XLFwccjJxxQB6le/tA+ALPxTp/h1PElrfa1

fXC2sVpYkzlXPQOUyEHuxFejV+RXww8Q2ngr4g+GtbvUk+xaZex3EqW6guUX

OQoyAT9SK/R74PftHeF/jdqmoWGgW2qW89jEs8p1CBI1KsccbXbnPrigD5y1

f/goP4h0241KNfCWmuLWaaNSbiQEhGIH54zX2l4f1JtY0HTb90Eb3dtHOyA5

CllDEfrXxLrHxP8A2YIrnURd/DW/lkSaYTlbJTvYM28j9/3O4/jX2z4dltbj

QNMlsITBYPaxNbxEYKRlBtX8BgUAadFeJfEf9rv4e/DnUJtNkvbjWtShOyW3

0qMSCJvRnJCg+wJI7iuI03/goB4KuboJe6HrVlCcDzUWOXH1G4HH0zQB9SUV

y3gP4keHPibo/wDafhvVYdTtQQrhMh4m/uuhwVPsRXDfFn9qDwl8GfEkOia7

aatPeTWwulaxgSRApYqASXXn5T2x70AexUV4hJ+154At/h9Y+LbiXUILa+mm

gtdPkgU3czRPtchFYjaCOpYD8eK4zSv2/fBF3qCw3uj6zY27Nj7TsSQL7lQ2

cd+Mn2NAH1FRWX4f8Q6f4q0a01XSbyO/0+6QSQ3EJyrj2/UEdjxXj3xJ/bE8

A/DrVJ9LE9zr2pQMUli0xVaOJgeVaQkDPGMDOD1xQB7rRXy3p3/BQPwRNNtv

tE1qyi/56IkcuB7jcOPpmvpHQNds/EuiWOr2DtLY3sK3ELMhVmRhkHB5HXpQ

Bp0h6UtFAHK+N/CU/i+3t7UXotLVHMkihNzO2OO/Qc1gWvwXsLfl7+5lI5wF

Va9JpD0qHCLd2jtp42vSh7OnKy9Efjx4lLjxHrO8nzBe3Gc8EnzG6+9for+z

/wCAtGuPhb4fEaHyxY28gaJiuXeMPJ9fnZq+NP2ovhfd/DL4uauGgK6RrM76

hp84BKsHO6SP/eVy3HoVPSvUP2WP2rdK+H2iL4S8ZGW306NybLVUQyLEp5Mc

oHIUHJDc9celU0mY06sqd3F2b/zPr8/DuyB/d3Eyexw1eXftI63e/B74Wajq

+lXph1O4dLC1mVcNE0mdzj3ChiPQ4rrZv2n/AIVQWYuW8caV5RGRtkZmP4AZ

/CvIf2hfGWkftD/s969q/hD7TeW3hvVUkmeWBoy4WP8AeMgPJUJNuzjoG4qV

FIt4mtJNSlc+S/hD8Obj4ufEXSvDcdy9v9skaS5uz8zJGoLyPz1bAPXqTX1Z

8UP2F/CeneA9SvfCtxqUGuWNu9wn2u5M0dzsUlkZSOCwBwVxg4r5r/Zx+Ilh

8L/i9omuaodmmDzLa5lAJ8pJFK7+OynaTgdM190fFz9ofwR4X+G+qX1v4h07

Vbq7tHjsbOyuFlknkdMKNqkkDkEk4wAe/FWcp+fnwi+I2o/Cz4haR4g0+dol

SdIryHJ2z27MBIjDvwSw9CARXvn/AAUEkWfxj4QkQ5RtNkYHp1kFfM3hTw3d

+M/FGkaFZRGa81O7jt1Vf9pvmb2AXcc+gr6W/b+txaeLPBsAPEemOgOcZxIB

+FAHmf7PXwFvfj3rd3ZyapJpWiaVGrTzovmOGkLFUjB+UEkMST09ORWL8d/h

BL8EvH8nh9r86naSwLdWt2yhHaMkjDgcBgQRkcHg4FfTH/BPH/kXvGfb/TID

j/tma4T/AIKDf8lU8M/9gZv/AEe1AHBfs7fs93fx/wBS1H7Rq0ulaHpKpHLc

xqJJS7ZZY41bhRjJJORz05rmPjd8KZvgz8Qbvw3JfDUYljSe3uioVnifONyj

owww444zX1X/AME9P+RE8V/9hRP/AEUteTft68/G+y6ZOiW/H/baegD1H9mn

V5dQ/ZE8ZW0kjOtgNQgTP8KmESYHt85P418QafJNELf7OzpOwVE8tirEsAMA

9uuM19nfsr/8mp/Ej/rve/8ApHFXyD4OyfEegZ/5+7fr/vrQB9G+L/2H77wf

8JLrxNL4gabX7G1+13WmLCotwoGXRX+8WUd+hIPHSvmexjuLi7ghtPMNzOwh

jWNirOWO0L+OQMGv1Y+Ov/JGvG3/AGCbn/0Wa/L/AOHP/JQfCH/YZsf/AEoS

gD3r4mfsWXPw3+Ed54tfxGbzVtOgFzfaeIVEGzI3iNvvZXOcng4PA4ry39nP

VZ9H+O/gea3lMTS6mls7A4zHICrD6EHFfoB+1F/yb14/H/UKmP6Cvzu+CP8A

yWbwL/2Gbb/0MUAez/8ABQH/AJK5oHf/AIkw/D989eo/8E9f+SdeJz/1Fv8A

2kleaf8ABQSzlj+KHhu5KN5EukNGr443LMxI+uCD+NQfsafHnw18KYvEOi+K

r06ba386XltesrPGrBNrRttB2k4Ug9CSaANr/goj/wAjf4G/68Lz/wBGQ1pf

8E7v9d47/wC3X/2pXkX7Vnxn034z+PbCfRBI2jaVbNbwTyoUadnYNI+08hfl

QDvxnvXrv/BO45m8d/S1/lJQB8g6pIYdW1GQOUKXczBgSCCJW6eh4zX1D8O/

2GL7xz4CtvEOseJptJ1fUoftdvaLbiRVD/MpmY8ktkE7cYz3Oa+W9bUPqGqK

wyrXU4I9f3jcf0r9efB0Sw+EdDRBhEsYFUegEa8UAfkVqVhc6Hqt5ZXA8q9s

rh4JNrH5ZI2KnB9ip54r9CfjFrs3if8AYqv9WuX8y5vNAtZpmxjMhMW7j65r

4Q+Jv/JSvGX/AGGr7/0okr7b8cf8mEt/2Ltr/wChR0AfIH7Pn/Jd/AH/AGGI

v5NX0B+338Sb0ato/gi1naGx8j7feqjECZixWNG9Qu0tjoSRnoK+fv2fP+S8

fD//ALDEX/oLV7L+374Wu7H4iaJr5Rjp1/Y/ZhJjhZo2OV9vlZT78+lAHGfs

x/s4D463+pXup3s2n+HtNdYpWtsCW4lI3bFJ+6ApGTg9QPWvqXwl+xj4Q8Be

PNA8UaHqOqxTaXM0xtruVZ0nJjZME4BUjdnI7ivB/wBjP4/eH/hgur+GvE9y

NNsdQnF3a6jICYo5NoVo3I6ZCqQTxnI9K+u4/jt8P59V07TIPFmm3WoajOLe

1t7abzXkkJ6YXOPqcCgDzX9pP4b/AA08QeJ9L8Q/EfxW+j2lraG2h06Gby3m

y5bf8oMhGeMKMe9eEeKdP/Zk1DSJrLSNQ1bStRWJjBqESzOu/tvDfeHtgcdx

XiXxa8U6j4x+IviLVtUllkvHvJUCyZJiRWKrGB6KABgelfUd98KP2e/BHwpO

uXmoQ+IJ2sxJDMNSJuLmYrwqRow2ksRwR8vfoaAPlP4ceKLzwR498Pa3aSsl

zZ30TFoyQHUsFZfdWBIweoNfan7UP7NnhvVtN8X/ABGlvNRXWY7MSiFJVEBK

KFHGOn418IaYS2p2BICk3URIU5A/eDj6V+pn7Q8D3HwP8apGpdv7MlbA64Ay

f0BNAH5ofDPw1beM/iF4c0C9klis9TvY7WZ4CA4VjyR6Hiv0Z+DP7Nvhv4H6

tqV/ol5qNzLfwrBIt7KHAVTuGMAc571+dnwk1u18N/FDwjqt9KIrK01OCWaU

8BE3AFj7AHOfQV+rWleJtG12Vo9N1ax1CRUEhW0uUlIUnhvlJ496APyA8U/8

hDX/APr6u/8A0Y9foH+0X8Sb34d/s16KmmTtbalq9ra2Ec0Zw0SGEGRlPY7R

tz1G7I6V+fnikf6fr/8A19XX/ox6+5v2tPCl3rv7NnhbUrVGl/sdbSe4VRnb

E0IRmx6AlfoCT2oA+UvgZ8K5PjJ8SLDw0tybO2ZHuru4QZZIUxuK/wC0WZVG

emc9q+k/jb+xN4a8O/DzUda8HS38Op6XA1y8F5cmZLmNPmdTkfK2ATkemMV4

X+yz8TNO+FfxetNS1mUwaTeWz2FxPjIg3lSrn/ZBUA46Bs9q+xf2gf2gvB/h

v4V6zHYa7Yavqmq2clpZWllOszM0ildx2k7QoYkk46YoA+Iv2fviZe/C/wCK

WhapbTyCwvLiOy1CAH5ZoJGC8juVYhge2D616d+3z/yWXTP+wPH/AOjZK8R+

FnhG78ZfEPwvoNhG0k1xfQ5wCdkaMHdzjoAqnntXt37fP/JZdM/7A8f/AKNk

oA5L9nX9ne9+Pt1fNPqsuk6FpREclxGgkcyPlvLjDcD+8TjjI4Oaxf2gPgrP

8C/GsGjNfHVLC7tvtVpduoSR1DbWVwOAVOORgEEcdq+p/wDgnyij4W6+wADN

rD5IGCf3Uf515v8A8FDf+R/8Gf8AYLuf/RqUAbP7H/iTWp/gN8TtM09nefTF

klsApIZHkt2JC475UEAd/rXyN4cl05dY02TXYrq50kTK19HattnePPz7Seje

596+xP8Agn3ew6b4Y+Il5cP5cFvcW8sjnoFWFyT+QJrc8QfBj4DfGsy6zoHi

ax0a9uiXaTTb2OJGfuzQP/IAUAcZpHw6/Zm+KVlHp2j63d+HNWmjMcQubp4J

Q2MBmEmUZsnpnk9q+zvDmix+HfD+maVHIZorG1itVkYAFgiBQT7nGa/KD4ne

DLTwF441Pw/Za3a+I7S0ZRHqNrja+RnBwSAy5wQCRmv0C/Y28San4n+Amiza

rcPcz2009nFLISWaKOQrHknk4XAz7UAe4UUUUAFFFFAHM+Pfh7oHxN0CXRvE

WnR6hYudw3HDxOOjIw5Vh6j9RXyj4w/4J73P2mSTwr4qi8hjlbfV4WBQenmJ

nd9dor7UooA+AYP+Cf3jx5QH13QIV6lszE/+gda+nf2dvgK/wR8KarpN7qkW

ttqVz58oWDZGg2BCoBJ3Agd8fSvYaKAPkj4pfsFadrmpT6j4K1aPQzM5dtMv

EL2yE9fLZfmRf9nBA7Y6V5zZf8E+fGzXIE+uaBbRE/NJF5rN+A2DJ784r79o

oA8Y+Bn7MHhz4KM+oRyPrXiKRPLbUrlAvlKeqxJzsB7nJJ9ccVz/AO0x+zTq

3xz1/Rr/AE3WLLTEsbV4GS6RmLEtnI29u1fQ9FAHiH7MfwE1P4E6ZrttqWqW

uptqE8cqNaoy7AqkYO7vzXPftLfsv6z8cvGOk6xp2tWWmQ2dibRorpHZmPmF

twx9cV9IUUAeMfsy/AzUvgZ4c1nTtS1O11OS+uxcK9qrKFAQLg7u/Ga4v9o3

9lPWvjX4/g8Qafrdhp0Eenx2ZhuY3ZiyvIxbK/74H4V9N0UAeE/B/wDZ91T4

bfB3xV4NvNVtLy71iS4eO5gRhHH5kCRjIPPBUnjtXiWh/sAeJ9K1TTrp/FWk

yLazxSsqwyAttYHA446V9x0UAc58Q/DU3jPwLr+g28yW0+o2UtqksgJVC6kZ

OPrXyP4X/YK8TaD4m0TU5fFGlSx6ffW128axSAuscquQOO+3FfbdFAHG/F3w

TcfEf4Z+JPDFrcR2lzqlk9tHPMCURm7nHP5V8x+AP2GfEnhDx14e16fxLpc8

GmX0V3JFHFIGdUOSoyOvua+zqKAPNPjn8D9J+OPhePTr+Z7G+tXMtlfxLuaB

zwwK/wASsAMjjoPSvlE/8E/fHBvdn/CQ6F9m3f6799u2+u3b19s4r75ooA+Q

vEH7BkZ8B6Vo+ia3bjWkvjeX+qX0JHmr5ZQRRqudqgkHBJJPOegHoX7MX7O+

q/AiTxC2o6taan/aYh2fZUZdmzf13dfvDpXvdFAHwve/8E+vE91d3co8VaSq

zTvKAYZMgM5YduuDivtrRbFtM0exs3YO9vBHCzDoSqgcflV6igD4n8WfsG+J

PEPirXNVh8T6VDFqF/cXaRvFIWRZJWcA8dRuxxXvviH4OX+s/s5n4cR6hbR6

h/ZcNh9tZW8rchU7sdcHbXrdFAHxv8M/2IPEfgb4ieGvEdz4k0y5t9LvUupI

IopAzgA8DIwDz3r6j8ffD/RPiZ4budC8QWa3lhNgjna8bjo6N/CwzwR+OQTX

S0UAfDniv/gnvrcN7IfDfiixubEklY9UieOVR2GUBDH3wM+grS+Ef7D/AIo8

F+P9C8Q6rrukiDTLtbowWayO8m3Py/MoAz+lfaNFAHyj8cP2Ix458T33iLwn

q9vpV5fStNdWN8jGEyE5Z0ZclSTzjBGSTkdK5H4ef8E/tQt/EdreeMNY0+TT

IJBI9lpquz3AByUZmA2qehIySMjjrX25RQB8PXP7APiNtcmvLbxNpENv9ta4

hh8iX5I/N3In4DA/CvtS+0+HV9MuLG+iSaC5haGeI8q6sMMv0wTV2igD4c8Y

/wDBPvWk1aZ/C/iKwm0x2LRw6mrpLGCfukqCGA9eD7V6X+yx+zH4i+BvinWd

W1nU9NuoL+yW1WCx8wsGEm7cxZQMYBHHrX0xRQB8K6x/wT58Ualc6lKvirSU

+1SzSKGhk4DsxHbrzX2jpmgRQeFLPRL6OK8hSySznRlzHKAgVuD2ODxWzRQB

8ffEj9gG11HUJrzwVrqaVDKSRpupI0kUWT/BIuWC+gIP1rhtL/4J8eMmu1F1

r2hWlvn53gWV3PuBtGT9SK++qKAPI/gf+zf4c+CEEtxZtJqmuTp5c+qXKhXK

ZB2IoyEXgHAySepPbg/2jv2Vta+Nfjq013TtcsdNghsUtTDcxuzEh2bIx/vY

r6YooA8f/Zq+Cuo/A7whqOj6jqNtqUt1fNdrLaqyqAUVcc98rmuU/ab/AGZd

X+OniXQtS03WbLTI9OtJbZ0ukdmcs6sCNvb5cc19F0UAfPfwI/Zq1b4T+DPG

+h3+tWl5L4hjEcU9tE2IP3LRkkNjPLZxXg15/wAE8vGVq6rZ6/oV1Eg2rJKs

qPwOp+U4+gJr79ooA+GfCf8AwT21uS9j/wCEi8TWFpYKctHpcTySkemXChSf

XBx6Gvsvwd4T03wL4a07QdHt/s2m2EQhhj6nA7k9yTkk+9bdFAH/2Q==

------=_NextPart_000_00B2_01C2A75B.6333C7F4--

Telnet Communications phish PArt 2

Posted by Dave Yadallee on Tuesday, March 3. 2026

his is a multi-part message in MIME format.

------=_NextPart_000_00B2_01C2A75B.6333C7F4

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

Your Telnet email account has been flagged for revalidation.

To revalidate and continue using the Telnet email services - CLICK HERE

Telnet Communications.

http://www.telnetcommunications.com/

------=_NextPart_000_00B2_01C2A75B.6333C7F4

Content-Type: image/jpeg;

name="img1.jpg"

Content-Transfer-Encoding: base64

Content-ID: <00C044C2270A$03381608$0100007f@lfcimklvkeghibt>

/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAMCAgMCAgMDAwMEAwMEBQgFBQQE

BQoHBwYIDAoMDAsKCwsNDhIQDQ4RDgsLEBYQERMUFRUVDA8XGBYUGBIUFRT/

2wBDAQMEBAUEBQkFBQkUDQsNFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQU

FBQUFBQUFBQUFBQUFBQUFBQUFBQUFBT/wAARCABdAZ8DASIAAhEBAxEB/8QA

HwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUF

BAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkK

FhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1

dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXG

x8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEB

AQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAEC

AxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRom

JygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOE

hYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU

1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD9U6KKKACi

kJxSFgDg0ABYCjcD61V1C9h06zuLy4fZBBE0sjnsqgkn8ga8c/Zf+IM/jrw5

4gW6lZ7u21SWbBOQsczF1UewO+s3NKSh3O6lhKlXDVMTH4YNJ/8Ab1/6+Z7f

RTd2Bg9cU6tDhCiiigAopu6lyKAFooooAKKKKACiiigAooooAKKKKACiiigA

ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACi

iigAooooAKKKKACiikJxQAEZrxP40fHS8+DfjHSVutPGoeHby0d5fK+WeORW

52noRjHB/MV7JHdRySyQrIjSx43oCMrnpkds183/ALbuh/b/AAhoF/8AdEN1

JbM4GeJE4H/jhNYV5OMHKL2PbyajSxGNjQrRupJr52dvxscz8U/21PB3ij4f

6zpGiQ6tFqN7D9nR57dFQKxAfJDn+HcPxryj9nr9oLRvhR4svbrUo7yTS7y0

8qRbeMMwdWyhxkZ6kZ7V5Be+E4rOzmnW5kYxru2lQAa56FPNmjjJxvYLn0yR

z+tZx9nWl7WL2O6t/aOT0JZbWgkquvRvtunptp/wT7v179uzw1cwQ2nhjStQ

u9XupUghOoRiKFGZgoZsMS3J6DGfUV9P2vm/ZovPx52wb8dN2Of1r8xfhP8A

D6C9+KPhVJblzAmoxTSFwFVUQ72JPYDbnPavrXxv+3N4A8L38tlpkd94kmiJ

VpbJAluT6CRvvc9wCPc1pSqRqXlF6Hn5hl9bLYwoYmCjN3d73utEtm9mn2Po

2ivm3wX+3V4D8SahDZ6rbX/hx5SFW4ulEkAP+068rz3xj1Ir6LguI7uGOaGR

JYpFDpIjBlYHoQe475rc8Y+EfE/7dXj/AEbXtXsYNM0NorS5lhRnhlJKq5Az

8/XAr7b8H6tNr/hPRtTuVRbi8s4biRYwQoZkDED2ya/Jjx9/yOPiP/r/ALj/

ANGNX6Yn4iaf8KvgLoviXVYbiextNMs98dqgaQ7lRRgEjPLCgD1CivBvAf7Z

Hgbx5rFxYxx6hpKW9rJdzXeookcMcaAEkkOefbFcrrv7f/guw1FoNM0bVdXt

VYqboBYVYZ+8qtyR9cH2oA+o6K80+D/x/wDCfxqtrj+wriWG/tgGn028QRzx

qf4wMkMueMgnHfGRXZeKvFukeCdEuNX13UIdL06DHmXE5woz0A7knoAMk0Ab

NFfLWu/8FAfBtjdmLTND1bVYQceewWBT7gEkkfXB9q7n4V/ta+BvinqkOkwz

XGjaxMQsVpqSBBM392NwSGPscEnoDQB7ZXnXjr9oP4f/AA6Eia14mso7pFLG

ztm8+f8A74TJH41lfGr9o3w78Eb7TbLXLLUbqTUYnkiNjGrgBSAc5Yc8jpmv

zF1F0ubu8miUok0ruoYYPzEnn35oA/Yyyu47+zt7mLPlTRrIm4YOCMj+dWK+

evhD+1t4S8d654f8H2Gn6tFqc0AiWWeFBEDHHychyccHtX0IDmgBaKKKACii

igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKK

ACiiigAooooAqX7zxWc72qLLcrGxiRzhWbBwCewzivC/Cn7X/hbVJRaa/Z3n

h27Vtju6+dAGHDHcvIGR3Ga9t1fW9P0G1NzqN9b2FuvWS4lCLwPfrX56fFCL

S7z4i69PoNzHe6TPdNPBNCPkO7DFR7BiR+FcWJqzpWcD7PhzK8PmftaeJg9E

mpK6t3Xbto0dZefHvVdK+NWseLtJmNxp9xcCI2hO1Lm1T5UB44bAyDjIJ57i

vb/jX4h0r4tfs73evaNKbiCCWG48tgA8UgcKyOOxAc/hzyDXyNDpZbGQa63w

rreo+GrLVrG2fdYapbtb3Ns5+R8j5XA7Mpwcj6V5sK0rSjLZn6DjMooOdCvh

9J0nH5xjbR/LZ/L0871m2f8Ase8JHAjJrz/TwWv7RT3nQf8Ajwr2XxJppi8M

6k+OFgY/hxXj2jjdq+nD1uohj/ga124NWpyR8dxXUU8dQa6L9TuviHcy6TZQ

20LtEbosHZDglB1X6Ekcd65vwZp+jXl7K2s3cdvbRKNsbsVEjEnjjsMdK7v4

26DNHY2F+qEwwyPFIQOFLYwfYfLj61wngvStE1rU2tda1B9MR1zDOMbS2fun

PTPY1pRSVGy/A8/OK06mcuU0pJWspfDa3Xyvf5nT/E3RvA8PhXw9qPha/iGr

M0lrqempIzA7T+7nUH7u4cEZxnHvX1h+wV48vfEfw71Xw/euZRoN0sdtI7Zb

yZAWC/RSCB7HHavnCf4NeD7ODz7nxZHDFj7/AJ8R/QEmvqf9j7wB4X8K+E7r

WvDuuy6t/be0ypMAnlmMsvyr1xz1NdMJJqyPAxuGqUpupNJXe0Wnb/gHwP4+

/wCRx8R/9f8Acf8Aoxq+7/j/AP8AJmSf9g7Tv/Qoq+EfH3/I4eI/e/uP/Q2r

7u+P/wDyZkn/AGDtO/8AQoq1PLPhLwd4X1Dxv4o0zw9pZAvNTnW2TeSEGSPm

bvtGM/hX0H8Zf2LR8MPhpd+J7DxJcavc6eEe8tp7dY0dCQrGPHIILA4OcjPN

cB+yV/ycL4S/66Tf+iXr7x/aQH/FivGv/YOk/mKAPz//AGZteufD/wAePB09

s7KLi8+yTBT9+KRWUqfbO0/Va9C/bn8f3fiD4qL4YWdxpehwRk24OFa4kQOz

kdzsZAPT5vU15V8AufjZ4Fz/ANBWH+dehftueFbrQfjjd6lJG/2TWraG4glI

ypZEETqPcbFOOuGHrQBp/s7+E/glJ4SfU/iNrFjcazcyusenXU8qC2jVsKcJ

j5mILZJOAR3zXk/xj0Twz4V+INyngTWxqWgsqXNncRSFntnPVN3BJUjIPXBH

pXb/AAH+FPwz+J+lyW/iLxhceHfEUUjA20rxRxzR/wALxs45PYgnIPbkV6H4

n/Zp+Cvg61WfU/ihJGGIVY4p4ZncnoAqZJPPpQB6npPwu8O/tafC7wN4r8VT

6jHqUFg0L/YbgRgyBtshbKnJLJn8a+ANUhWyvbyKPJSGR0XccnAYgfjxX6v/

AAp+Hll8Lfh/p3hrTrme8tLVXKTXAAdtzFucfWvyl8QxPHrGpxOpSQXEysh6

g7jx9aAP0N+Ef7JngrwLrGgeL9NuNWbVYYBKqz3QaIl48N8u0ep717+OlcP8

OPiJ4Z8T+F/Dx03XLC4mubOMR263CecSEG5dmc5GDkdsV3AzzQAtFFFABRRR

QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA

BRRRQAUUUUAc5438EaL8QNDk0rW7JLy1Y7lJ4eN+zoeqsPWvkX4l/ArUvhtd

GYFtQ0V2xHequCnosg/hPv0P6V9u1WvbSG9tpLe4iSeCVSrxyDcrA9iO4rnq

0I1d9z3srznEZZLli7we8f1XZ/n1Pz+t9K6YFadvpPT5a9u+JXwVg8OLLq2k

ELpuRvtXb5ocnjaT1Xpx2964O30jOBt9OB615bpODsz9JpZnTxdNVaT0ON13

w4NR8P6jbGVLVZICpnkPyp7n0FeBS6do3h/VbWRNcGqG3nSVhaW7FSFYHAZi

AenUV1Xxx8cTatr8+gWspTSrBtkoUkCeYYyW9QucAdM5qv8ACr4J6j8S0kvW

nGm6RE5Q3JXc0jjGVQd8ep4Hoa9GlD2cbyZ8FmmMWPxKhRheUdL+n4W9Tspf

jl4V1WG4tNQ0i+aznBWRZFR1Kn1AbOfp0PNYth8EtL8fwT3/AIM10Pao+x7f

UYXVom67d2OR05x+NehTfsiaNNbgW2u6lDOBjfNHGyk+pAA/TFek/AP4K6j4

K0u/0eae3u5ri9Nws8WQuzYq5IPQ8dBn2oSjFfuxVHWryX15JxS3WjX3P80e

CaV+yF4jv7yOH+0dMBc4HkLI7n8Cor7R+CXwRtvhd4X0uzu7j+0dQtEIWXZt

VSSSSBk5PPcmub8V/tA/Db4GXM2mXF7LrGvRnbcQabEJXjOOjEkKn+7kkelc

rZf8FA/BstyEuvD+s20JODKgjkI/DcK3UW/iPDq1acW44ZWT0b6s4/xH+wJr

et63ql8niywiW8uJZlVrZyU3sTjrz1r6E+I/whuvG/wPHgODUIbW6+y21v8A

a5ELJmIoScdcHaa6T4d/FPwx8VNLa/8ADWqxajHGQJYgCssJPZ0PKng9eD2z

XL/GH9o/wv8ABLVNPsNetdUnmvYWnjNhAkihQcc7nXBz6ZrQ4jyb4OfsY6t8

MPiVo/ia58SWV7BYM7NBFA6s+5GXGT05bNfQvxP8IS+P/h9rvh2C5S0m1G2a

BZ5F3KhOOSB24rz+3/a3+H7/AA/TxdPcXtjZy3MlpBZ3EK/ap5EA3bI1Ygjk

ckgDuRXEWP7f/gi41ERXOi6zaWjNj7SURyPQlA3A+mSPQ0Ac78O/2HNZ8E+P

PD+vy+KLG5j028S5eGO3cM4XsCTxwe9fSPxR+FXh74veGm0bxDamaEN5kFxE

wSa2k/vxt2PYg5BHBBFYPjf9o7wH4D8L6brt5rS3ltqkfm2EOnr5s1yvcqvG

AOhLEAHjrxXlunft/wDgm4v0iu9F1mytWbH2kIkm3nqVDZx34yfQGgDzrxL/

AME9NcF4w0TxRpl3ZFsgapDJG4HYHYGBPuMfQUnhn/gnjrsV9E+reJ9Ks4Uk

Vz/Z0DyscEHGGCY6e9fY7eN9IbwVJ4rtbkahoq2bXyT2uGMsQUtlckc4B4OO

eOK8g8G/treAvHHiXS9EsbLXYLrUJVhikuraNI0J7uRKcD3GaAPfYkEUSoCS

FUDn2r5M+Mv7DjeL/FN/rvhLWbbTGv5TPPp9+jeUsjEl2R1yQCSTgg4PQ44H

VeNf25fAPhjVJrDTor/xFJE2x7iyVVt8jrtdj831AwexNdZ8JP2oPBfxeluL

Wynm0nVLeIzvZakFjJjX7zowJDAd+hA5IxzQB438Ev2MPFXwy+KWi+K9Q1jQ

54bF3Lx2qytK6spXALIMHmvsNa+bfFv7dvgLQdSks9NtdR18RMVa6tkVIW/3

CxywyOuAPc13Xwc/aV8I/Gi5msdKe5sdXhTzHsL5ArsgxlkIJDAZ9j3xigD1

Telnet Communications phish PArt 1

Posted by Dave Yadallee on Tuesday, March 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 11:58:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxUvx-000000004OM-1OAK

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 11:57:29 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 11:57:29 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx.ite.net ([202.88.64.59]:57318 helo=mail.ite.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxUnN-0000000042F-0WL9

for sales@nk.ca;

Tue, 03 Mar 2026 11:48:45 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.ite.net;

s=smtp1dkim; t=1772563660;

bh=jeh1m2YgnqeDDCXh75gDDh9lhngW/9jApU60mG0Q4co=;

h=From:Subject:Date:From;

b=ZgEIymRKfdXbQPdvLrWavLHUPCXZ6371o1g9GTMyx4us21bQRiHvhu5F0amTOnm/I

rVArCGgJEF/vbRH9kNpg/ogQJM0e3LAH8NvOTk/CXeG3jJ6RKDvc2AynbY1oVRMWPF

PwRVtVwQVMQ/p1y+ACGi1Hs9aX5mdvHMaZgvUnjU=

Received: from User (unknown [209.107.192.250])

by mail.ite.net (Postfix) with ESMTPA id 1A2AB8CCAE9E;

Wed, 4 Mar 2026 04:47:11 +1000 (ChST)

From:

Subject: ::: SECURITY ALERT :::

Date: Tue, 3 Mar 2026 12:47:38 -0600

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_00B2_01C2A75B.6333C7F4"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 5.50.4522.1200

X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200

X-Virus-Scanned: clamav-milter 1.4.3 at av01.ite.net

X-Virus-Status: Clean

X-Spam_score: 21.6

X-Spam_score_int: 216

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Your Telnet email account has been flagged for revalidation.

To revalidate and continue using the Telnet email services - CLICK HERE

Content analysis details: (21.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.107.192.250 listed in dnsbl.ahbl.org]

[209.107.192.250 listed in dnsbl.ahbl.org]

[209.107.192.250 listed in dnsbl.ahbl.org]

[209.107.192.250 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.107.192.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.107.192.250 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.107.192.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.107.192.250 listed in dnsbl.ahbl.org]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[202.88.64.59 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[202.88.64.59 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[202.88.64.59 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[202.88.64.59 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[202.88.64.59 listed in wl.mailspike.net]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.0 NSL_RCVD_FROM_USER Received from User

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.2 MISSING_HEADERS Missing To: header

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

2.0 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} ::: SECURITY ALERT :::

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on Tuesday, March 3. 2026

x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?eaj6cbV9avCtSx/CmpnAgKymq/5+Vsu79Ltx+Z2VYjE+lhya3HhUF7kv?=

=?Windows-1252?Q?Ttt1y6+73kp/K5SN8ufthJSdrtAUUY0GfjXufAly0EDg3k9sZW0Ex8QZ?=

=?Windows-1252?Q?cnsKEh2KRcc6LdQl52dB5FLHexmJ7PNg6pH4tW/mngQyQzXuyXmaCPL/?=

=?Windows-1252?Q?QavpYMvjO8JZkJ9vpAPF+6lCs2/C8pujigxd+bi4kz/dqLcvN7VKPpCa?=

=?Windows-1252?Q?AK1N9ouXjWhr3297WMDsVleaanuSHbS6EYRNGOvs2+wUtcWvMrK/K8G5?=

=?Windows-1252?Q?7F75sb6YGMCPFaIQheDsVskHtwZYlR+E7s5lIsYrqmBcBl66925xU4uA?=

=?Windows-1252?Q?bCdQSfMJ1DQrhC7hJTzvD2DBpMyKmQGJrGgtjDY3m238PWMv64zTvg/C?=

=?Windows-1252?Q?rI0nTicGtnueZSjGsa6QbAhJUkeqK99/kIF/zoXk6o6BsIQo3UWh5RpW?=

=?Windows-1252?Q?RUUJWKky6M7v4C3ihZ/gKl4m8Ntogg0SsB+G+wfMDeVwcfbsmVTKemJa?=

=?Windows-1252?Q?TnnozJTz3XbsMMdRKXEn0D/ibQzzx2OT2z+DVPfppLF7y9HsV1mHCrdG?=

=?Windows-1252?Q?ALnogf2+n6L6Xi7sOSKl5AZrx34rqDcB/lMz8C10mIkWG69xzO1iC9wn?=

=?Windows-1252?Q?1V5QPKePO8u4C7p/Dfh1KtwDMebiDMaHwLo9Qvz32x5zixt4Q7je8r9v?=

=?Windows-1252?Q?wzRvv8zisT54nz4z6bXn/CxEDcfWQwJ6xoVnmIohLgggI6I3iWTps8dw?=

=?Windows-1252?Q?95xOXtWa4Cu4YV5BjMFF2iFJbFYHiSCSYyPoD4oziHrcFg1/1GNSRPNf?=

=?Windows-1252?Q?Mje9ltEbBkHiQ38AN29XV8J8IpjhNhDbpak7eWP+gptxpCdBjj2FhnKU?=

=?Windows-1252?Q?nRoRbkReDgmMf1lJoOv4ybdQAqf8DZpjl9qUd7Xf7VjbOo+pu++EQKrl?=

=?Windows-1252?Q?hhTn7LBnh/TBCbMlrZLcKb8o2EJQaThqAwmi7WZQIpaT1muSGPQGtaPp?=

=?Windows-1252?Q?9ThWOMyeJMJQIHsBtTiPZ1Hh/3lH/AG24nFALOfmnmarrBGDDBxa0VTg?=

=?Windows-1252?Q?C9+TMi0Qifs41UNW7+K141efiXMs5Un6m0F3J1HFiOk2gEuUsYRaK1lB?=

=?Windows-1252?Q?DVoKpyczV9CICGzw2S0vxDfUsdnkNsA70txxJTEnBgaeAgcKuiXbzOV+?=

=?Windows-1252?Q?lxEgDvi3NeTLdX5s7vZSV/7A6kn1CZ3qPv5jUjpHbxKNV25IOTyhWzTu?=

=?Windows-1252?Q?pTiZxMbd/VIhUhlh3MFHs3xRb+twZ1a6YHp1IengsflS2uJVFSGSBNWX?=

=?Windows-1252?Q?IxXAVpE1qyUo/QJ7A5HJ8h2cot75WTnVnsHE4s/FMKNC9UpUqzsVzMTc?=

=?Windows-1252?Q?ZmfQds9jJZB85OQ3jmIILdRVSAO60/XFgD9FZ2IzWg3LSiWckMCbMXdk?=

=?Windows-1252?Q?SsV1FFQeD79wox/Tc0SBoW9BffzFem8sDZk3M/sj+xQMbthcdM3eEQZn?=

=?Windows-1252?Q?zrg10pil3Sa6bRXl5xV2oZbm+Hjez9yZaTeDpAZT3s6yFMmiaaBbVIR/?=

=?Windows-1252?Q?HNEAL1DSsBma26+9?=

Content-Type: multipart/alternative;

boundary="_000_JH0PR01MB546857F53FD771FFCE77ACC1EC7FAJH0PR01MB5468apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: JH0PR01MB5468.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 8fd360f2-8d5d-4ef8-dc7c-08de79514c54

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Mar 2026 18:18:41.2645

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5882

--_000_JH0PR01MB546857F53FD771FFCE77ACC1EC7FAJH0PR01MB5468apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hi,

Your website has great potential but it=92s not ranking well on Google.

We can help you get better visibility and higher traffic.

Shall I send you our SEO pricing?

Thanks,

--_000_JH0PR01MB546857F53FD771FFCE77ACC1EC7FAJH0PR01MB5468apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hi,

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Your website has great potential but it=92s not ranking well on Google.
v>

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

We can help you get better visibility and higher traffic.

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Shall I send you our SEO pricing?

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks,

--_000_JH0PR01MB546857F53FD771FFCE77ACC1EC7FAJH0PR01MB5468apcp_--

Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on Tuesday, March 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 11:58:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxUvi-000000004Ng-3ie3

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 11:57:14 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 11:57:14 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013073.outbound.protection.outlook.com ([52.103.74.73]:12658 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxULj-000000003A6-2noy

for root@nk.ca;

Tue, 03 Mar 2026 11:20:14 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=U+cf8vAqmQ0bbCguL+J/lYKq4P1mlCZ3+4W4fthYxeux1nxFu+WNw2YgHrcwhUtBHuL1eUkGLoiNtoWRiJkhXqM+MBcLTGt2cw2T4QBslirc2euwaDivn2jmycLVSqjhLGsn/3BRqVhW6ZlvgV5kIW+KuA9BgDa4HazQ9D4OKAhu4UIsqoNWEUocauz3rZpJeP/x7h4ezY1HxwmJ7onoZDjow/sQVVIXlpjpWMQ7OUh6IQi9SOlu4fU92CI1Z5JBJsTjSxXqxIiZzh8Xg2g7SZ7+71t5iIVUxrbisjqrh7lp4dJadOjjxER8jasNHeoaQ/oKRrwcSqI8+Kl7lLofMQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=3HJ1A6Uun4ffb366T8Y8TYkxaixJqXXanQ5Z7hLX+Kc=;

b=rZIoyRpME1pasTYJ/6tFQ6FE1mUsUJpDPTk+Jo7vWi4JDTMkXLikmM1R1alioxmY8MJ0pAilrfcowXx5QkzLrZuriClaZxLXu37BdZsb/pZSywkn6fFIlblcZV1HpckClZXhshgCoFhQOcDhR+jHTxRbhKVhsu7YzzKrY3GmIJBHMbyLacvvfxGGKBbU6pL15A8xDDjWIzZN+eG4Zn2b5g0xCNialNyFLbySSW8cjzEwEeWot0S2VGlT71x4OahBxFktoeGT1PMJZ4qMUrcbb6AQE/Sbo5a3LRosPdWKWfPVcQt7shfPdoTVcj71vZ/uro6ASBUcqgm4pqbrc77hdw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=3HJ1A6Uun4ffb366T8Y8TYkxaixJqXXanQ5Z7hLX+Kc=;

b=ik26Lb3g2D0cmYsct4Q9oYXDz0stjQG6Jq418tzufIYptSr1BS91jysxxYQns3j77/nPPLzgl9kRCpYq5vk5b+ndIt2SMF5vjEwpkAn2fWtIB1MLz50SXMjOEsWHu4hRKysTYs04WDAuTBmuunEcSBhHwLUM5MF1UxXdQ8M/UlMESOrytLlDoJoUQ/qhWiTvhqJDpQ4yPwdE0NriTpWHOKonxstvXS/NB3sf0WFoCYUvqq6+YHthmeVoC0hvjSkVh44rKTnRQ8MZAQ9pR3J/0h4nhkyJZI5Lz4JNDvJ53zvx4T8Wfc+jHRmxdVc8y8Zi6CrYbwVDgwHthRtWdZw63A==

Received: from JH0PR01MB5468.apcprd01.prod.exchangelabs.com

(2603:1096:990:13::11) by SEYPR01MB5882.apcprd01.prod.exchangelabs.com

(2603:1096:101:1e1::9) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.22; Tue, 3 Mar

2026 18:18:41 +0000

Received: from JH0PR01MB5468.apcprd01.prod.exchangelabs.com

([fe80::1bbb:e9b4:b451:4d55]) by JH0PR01MB5468.apcprd01.prod.exchangelabs.com

([fe80::1bbb:e9b4:b451:4d55%4]) with mapi id 15.20.9678.016; Tue, 3 Mar 2026

18:18:41 +0000

From: Cabin Seo

To: Cabin Seo

Subject: Re: Yes

Thread-Topic: Yes

Thread-Index: AQHcpzPVGDrDugEl1EGrsWPDNCnIeLWWZ4kmgAVBy0aAAXx4cA==

Date: Tue, 3 Mar 2026 18:18:41 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: JH0PR01MB5468:EE_|SEYPR01MB5882:EE_

x-ms-office365-filtering-correlation-id: 8fd360f2-8d5d-4ef8-dc7c-08de79514c54

x-microsoft-antispam:

BCL:0;ARA:14566002|8062599012|20031999003|8060799015|31061999003|19110799012|7071999006|15030799006|15080799012|10112599003|461199028|39105399006|3412199025|440099028|102099032|40105399003|41105399003|39145399003|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?tcWt7jAiSNl1A6TBD0d6o7wByMMmARmzBNlQJsGEaACHnWHzDRaag26O?=

=?Windows-1252?Q?IcICZgZ7l4O3vIn8b9frGc/b1M7Q0496xbPRRyIvvhFQyV9DhcftkhaS?=

=?Windows-1252?Q?VG0Jl65Umx54NUWq/4EpCnBSOYzrmdjhfM8WIf5mNZrDTGc1yWIb8YSb?=

=?Windows-1252?Q?VQLCLTR8Q4k/pA4IelwIuos6XCIln8qT9/4APfxUtqnZwGJp6k3O3Km4?=

=?Windows-1252?Q?onUNlXP/DoB787HJ99bTFkBgmPJeraD30IUJVyf2ZJIR2fU/01UOXs02?=

=?Windows-1252?Q?4ggETcrATH2HBYFICUGh0DHAFVv3ul51GbKyV4gkRWQgqZkaKajBRFox?=

=?Windows-1252?Q?82KTcZadIergZqjrTXoH2Hy5Dhj7C6APlnynTc3Wxfo3GbQeiZDaGWrN?=

=?Windows-1252?Q?UxCqhST1pkKoC2W0hWdfvUKBcddiDYkY/YI59vZMkYMLsX+gQ2DD/YgT?=

=?Windows-1252?Q?R20zUSinakCxDl30DO+W0D8Q09hOf7KxBGvM0VTKm4fGkZkONoPu1NSG?=

=?Windows-1252?Q?89dU4fMVCJASwAmkuc+wpG5j+17PNtE0Y3hCXrmxnKICGFWsHR2fPhMp?=

=?Windows-1252?Q?PJRkEulfKBFs9UsM8p9bW3gMGwfXkCZYr91ATKcfe/yLwH77Gngu+QWZ?=

=?Windows-1252?Q?9AYUq+38MXByLQh2ChU65u6rHSylSpvta7jKO9o+fa1UwEGgmXJNOUP0?=

=?Windows-1252?Q?/tfMauRRP5GS+k+KI/TzsOgmN5MWxeeQgIIvGmaoI0gBv0d12eBMmHYk?=

=?Windows-1252?Q?pkA9saxsBvMqRO9SYbfP7pdt1KqUHuflGZEZUVej0YpMBFGe0EEff15f?=

=?Windows-1252?Q?7sIl/rvpH9rINYY4HSCl5VpIYN7WVeDOX+HWZ24EENJyagOVxP2dce1J?=

=?Windows-1252?Q?ylteXHTqb9f6LGvq94nNpEX2aLPImeUaZhvqvPHT6joKCgV5qY3K+rlS?=

=?Windows-1252?Q?jZxG3G463m32URfv0Ijkx0E1BsxBawDig1T6JQ+fUoVSZV+EPfSlE6f3?=

=?Windows-1252?Q?3j3XOkbQsGJWVi5C2TYmz3SaLaUOkdkYlbxBZHESepGMPcIebWpejueS?=

=?Windows-1252?Q?2ziVsx7Tfe2T02sV0Kb555EZD/QKRgXmti7FscMIdsEvHK7NdSztRF6R?=

=?Windows-1252?Q?XmjtT2dliON6YAzIvfLkTEGYmd8gV9fZVqL1AiWCgnhpoozmQaPwE8LM?=

=?Windows-1252?Q?AMKs5Ln1KVo9cuMrorJifE7mLYIy+7l2?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

HR Phishing from Google Gmail

Posted by Dave Yadallee on Tuesday, March 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 11:57:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxUvI-000000004Lv-0JeC

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 11:56:48 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 11:56:47 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f227.google.com ([209.85.210.227]:58878)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxTKX-000000000ft-0x6L

for sales@nk.ca;

Tue, 03 Mar 2026 10:14:56 -0700

Received: by mail-pf1-f227.google.com with SMTP id d2e1a72fcca58-8272c559597so5891802b3a.1

for ; Tue, 03 Mar 2026 09:13:58 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wildbirdtrust-com.20230601.gappssmtp.com; s=20230601; t=1772558032; x=1773162832; darn=nk.ca;

h=mime-version:date:message-id:subject:to:from:from:to:cc:subject

:date:message-id:reply-to;

bh=GRc2CAzc6wVUKgRku9e0U0ToYunHqwre11Spo5t0iQY=;

b=sBsc4nnzKrIx6djr4HzK4uXDrfc/ImumdbqNtwNkohn8NwlMBpig056+TGi4IZAT5O

9k/XPnkVdTpP4beesZhODC9hfcoRfxE3FynCYof8b4lOj7KL0i4Y7xurio/YsHxoot0q

7WC8bWWxDk7S+BvJHAIJzyXyBtx+H/myFn1+45jg9Reu1ZAogKREc5U0yWD6wPMo+Zv7

5kMyN+fDlyPV4zGl24Dkd65benkgwT3fasX8PKykSwG1RwPRap5jZZMqtesKHjsv0dT6

WxdW6XD1eInhnmeJ5o/Vbr7yWETIGXHLNXL/EJ6uSG4JYZQsUtufD6awgnOt993Ri6bl

Y3fg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772558032; x=1773162832;

h=mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=GRc2CAzc6wVUKgRku9e0U0ToYunHqwre11Spo5t0iQY=;

b=F25kof8UpSZEOcsHNxOGbZ3Yy8HjSd8ckt5Ub6DAhwsNAwIFurmA0SPiPoD+PNqfCH

ZqmO24PRN2DPQ2oRZ9cdpjncL27wjw+svlN1MRFn0kC8TtDbSJzy6ohbHJDGOxIMImP4

Foaz4nCb/rCHzZ/ukNrbOlsyTCLRB7o27UN0DXlnu0ev/waAdQpfVTZrQsjTc/Y24jLX

flQCj6L6A8qxFPJfiwFDlYcQqJWf00T+HG9QPya7eH/eSDDLgEaKqiBhYi/bWKKmzNG+

DONwAIEOauFhrgG4BLQJLY2CYh8/idQ5zmeTsVQ+mM7dDRMnWum5e95jw9bOT/gBgi26

gYDg==

X-Gm-Message-State: AOJu0YyEI23BUTQdX7VhN6tMK55ZWmApj3EC9/Shb/qDWlEfN2cQCVJM

cvI8OJdKnaJCjG+Dv7KGj8mc35tqsl9f05h121FZGKnDSq78mpUk9VKPwxw0Q7R+cEzmPr2dr4v

MGXl5Luz8Wj6QBPbVk6UQkldt0ChlDPrpYeAJZJUrDc6X

X-Gm-Gg: ATEYQzw2BR8t9CStgeFQINsaNQblZMQ+g6l1MB3NqwLZUp1ephWWgpfhGo7zP3YT9+7

6nwJgnrK7zZajoUviHsu+Ptl9u6yHGj1cfg8pgid43mme4nV0i0Vxfnia9QU9S45nwd2TUVEh08

8IpaccEnZ0EI3Bz36UUgbPOkDMMB61jKV5qYyeAul5Z2886psIJcw/Pdsk6h2V7QtFPeVidRJua

j5PtFHzF7FffrGLZ6RutcDmu5sKxkZJvtgFYuY9EsmutJia6ht6VgCVIAE7QhZlcenOrAzCds71

XAAuEVG0fVcuD28KuOWKBVhmdurAfnH+7HaThD7PQIGkgXVcflkFHYysJDl1+R+MKFYHQUVc827

zZRDu/vuN49dJ85DYterEUDzNfsVsVxsWVgoR4PHSUV3MQbPailmbIUc=

X-Received: by 2002:a05:6a21:7481:b0:394:6208:6624 with SMTP id adf61e73a8af0-395c3ae84a0mr15487930637.36.1772558031801;

Tue, 03 Mar 2026 09:13:51 -0800 (PST)

Received: from wildbirdrevolution.org ([203.25.124.126])

by smtp-relay.gmail.com with ESMTPS id 41be03b00d2f7-c70fa5c17c3sm1345028a12.2.2026.03.03.09.13.50

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 03 Mar 2026 09:13:51 -0800 (PST)

X-Relaying-Domain: wildbirdrevolution.org

From: "nk HR Operations & Total Rewards/OU=EXCHANGE ADMINISTRATIVE GROUP

(FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-81893"

To: sales@nk.ca

Subject: Your 2026 Compensation Statement Ready

Message-ID:

Date: Tue, 03 Mar 2026 17:13:50 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-83946af1e00ba36c-Part_1"

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ï»¿

Content analysis details: (10.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.227 listed in dnsbl.ahbl.org]

[209.85.210.227 listed in dnsbl.ahbl.org]

[209.85.210.227 listed in dnsbl.ahbl.org]

[209.85.210.227 listed in dnsbl.ahbl.org]

[203.25.124.126 listed in dnsbl.ahbl.org]

[203.25.124.126 listed in dnsbl.ahbl.org]

[203.25.124.126 listed in dnsbl.ahbl.org]

[203.25.124.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.227 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.227 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.227 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.227 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.227 listed in list.dnswl.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.227 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Your 2026 Compensation Statement Ready

3 attachments no doubt malware laced

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on Tuesday, March 3. 2026

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?dYYRkouxEppVA4vVihtwNw45n8rWLa8zWXHPE65Mg3Rcn0i/aFcmgJ0Y?=

=?Windows-1252?Q?RmYc/ej9Gg5aoTF8pbhFm1FNVwjCJrb8ue1tQVhOAVoVQsDe0iZgnExi?=

=?Windows-1252?Q?nbd6LLxsBX0PjcFD8Tceam7ZYe+5yt+oXNz1wBmA/vUsZS2lSKKRT/rJ?=

=?Windows-1252?Q?iBBvIktHXp2QD5H3DPiNRTYnjzuxtOebKu+izOIveZjXDcsRP21gpSxI?=

=?Windows-1252?Q?rShxkCkA62USwWH1N7y0qJxuJI9x7SaFSC4lWJ4O4K0HAMbv0fbJJv88?=

=?Windows-1252?Q?YpS4dxem89ZkvIJhKVGS6tgVucu2z+3xAt7nw2decqm6xmQB97/HKw/i?=

=?Windows-1252?Q?FA1/Z8/T3czj7nNO7A7gro7BCzIjKcT7+3z5TusAFKAaZpxsTper79QT?=

=?Windows-1252?Q?j4qCLaH0Dl40kuJBfnthv5bbDmiHA5ZHzZ3Nl6udA2Dds0BbpUAcT3OQ?=

=?Windows-1252?Q?q6I3mfeWjaHXSbbATU86X/7akSRW8zhAzSaqAfTh+PGx3QobaN3f6ok7?=

=?Windows-1252?Q?Em5DDfqAFx2yK4kE0J7vKF7H5ZAPiMWxPdS7HS0s/h7k+SBP+klxZEKp?=

=?Windows-1252?Q?au05qFRdd+2Tm4C3nM7tQKlfxt+ivVm0ra4uEKNsmt+fWlKoktoteqqh?=

=?Windows-1252?Q?2uMUSvqyw2XwrXJBKn0ouZ7JdXHdp6JcshuX1UbibInUjZ4A3nAMy7z+?=

=?Windows-1252?Q?oQ6xIrSTD4MR9xJJxSfRoGM2vHWcwSjnjMnrHJvLPOWunnn2uiSsPR+t?=

=?Windows-1252?Q?Sr8oebhC872P9ft5Fi+it85//R8BtGyDjUDmRonXfOi7vDnsfKZKtcbw?=

=?Windows-1252?Q?M/xGXxM6MQNShEawEd5DHhWAKI/NenRW7wkilwtDTAHYC7fAceCAAeTK?=

=?Windows-1252?Q?wqnyY++ieey/o0O+i85rM6P0XFQ/0aeMzOkRkH3TJ/2AAxWi0HdEtaFH?=

=?Windows-1252?Q?64CAZTL0cR/NYrglJU0xttRKoPzbJ7g8dGM9lUwwo1XnX/OxpKbSdf6M?=

=?Windows-1252?Q?zkbXeSGscXR8pvaRUqnwRC2zNzhFRy2VeA+gHd0zav/EDuGp1PvA3n4a?=

=?Windows-1252?Q?S4N6rWmFJhXFPwwo/12MZvW1NyFQdMm1gPdrRMxsUbngchsnfv4UDVQz?=

=?Windows-1252?Q?7qI2rLIKx/P2ym9tP3yLhq5MZdMGGHZy8WQaNBMrT60u5x4uFME+RGtw?=

=?Windows-1252?Q?qpJbLWK8GopKOYJ679qsFkbzLJWe0pSrHDaUQ6l1uGUZeZQnmhizf8i/?=

=?Windows-1252?Q?jz/m9Ynm/0xnrgQHVZToYSmbpVWxPRJro8lLDZmk1lySG73EUFprIM8J?=

=?Windows-1252?Q?Uu2lA6aRCWUv3mNZ3eAoe/CUosl9Gs1RqrmKk/UiwxMmO9w9CXGk0z39?=

=?Windows-1252?Q?JP53L+75SMTPwPg/pFBeRCV65d8wwJ05EuoZ+bWzKDKWg2pnlXBnzXVC?=

=?Windows-1252?Q?VxA/IQUyti2P1WEHdvfdtrKadQLWDvHKFI+2tYCMyOijhl4PxibR0/ei?=

=?Windows-1252?Q?sDfTypSFr3IcarbG8TkuiPZpl8LeGQ5RLSjzRo4m32vU9CYkvVGWXaaW?=

=?Windows-1252?Q?6n9v/WapvGruIPnhqPLJmu8Nz/AUoPQ+QxZj7g=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_PU4P216MB1369F8874D3159D4CC8CF8B2E47FAPU4P216MB1369KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PU4P216MB1369.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: d32a4f50-ade4-454b-2153-08de794583a6

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Mar 2026 16:54:20.1119

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE2P216MB1428

--_000_PU4P216MB1369F8874D3159D4CC8CF8B2E47FAPU4P216MB1369KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hi,

I personally visited your website when I was browsing it.

In order to significantly improve these search results for you, I would lik=

e to send you an audit report of your website.

Can I Send you Quote=94 and Cost/=94?

Best regards

--_000_PU4P216MB1369F8874D3159D4CC8CF8B2E47FAPU4P216MB1369KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I personally visited your website when I was browsing it.

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

In order to significantly improve these search results for you, I would lik=

e to send you an audit report of your website.

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Can I Send you Quote=94 and Cost/=94?

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Best regards

--_000_PU4P216MB1369F8874D3159D4CC8CF8B2E47FAPU4P216MB1369KORP_--

Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on Tuesday, March 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 11:57:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxUv4-000000004LS-0wZw

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 11:56:34 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 11:56:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19011035.outbound.protection.outlook.com ([52.103.74.35]:7306 helo=SLXP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxT27-00000000Pof-27be

for root@nk.ca;

Tue, 03 Mar 2026 09:55:54 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=zVMFGWJiazA5TBoXvRlGAxEZ1PCp7P56u/F4igJJ4VyTtNZ7C4pFgQNTh/rrvgljJ31gR7uVlGV2THC9AOfJfelPYQpTNMqnoAtxDTA69RUJPR4fImFkDeB4yHM22w2M6k6LJA1+mcUOUzSQTMpoDvlnVvk5jNJlTq03gnXJsuMWD1ngT3XpKA/DQCXw8+NDcSWj6YH2U4Qy6xz4L8+Vuo5LRclmAASLruPUZ+9OEjPpfRJyNK2DPwaXeuMmMutXnQJaS3FR5Zq5LExAwx9PnHUrZJCSiiTrlxiOY+creTlahTzry/NSb0ETnXMIVIQ5G5GdF7IHhDIvCukfBGe8MQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=NNVCuugmhkkLfcv49JZCPXSoJ8siQh/B40HiL/ffVSY=;

b=moumtFsjlwl3GHB2nMpRqAYR/t7cZP4bAVgw8dc0VhSWXGp4vzXpSCUWFQQRTyotR+Ri0MJXmJPS66B10PS1JCcTrt53llbZ2+w3mm4kfV98mInxVrcSdms1FyFbKhGGi1/HHLnm4YbT5gnlNoaedvB+gxOPqTwWCEuLMy+T5OuN1cCsbvmTi+076j2PQbHHMZ1MvXtvxfkHD2IIw39IMF/5wXBjY/Kwng5VfCPI/iMfOOCbuzuNspG78lD/FJf5gyK8akPo4wS0NVM7URzFboARD9mUUGzo8rvm2CcosYbx2mF6aht36f4qhMo13uXl7LVj5ONKkDKogfgvYfcsTw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=NNVCuugmhkkLfcv49JZCPXSoJ8siQh/B40HiL/ffVSY=;

b=Dw55zoTc1P0nMkxFYBCHwZ2Cs0rw9LA8VuepNgLdx+VTXSS5H0qhIdSJOeGlc/HQyy9Pmfa10yd4DN3MUXZjQufPHhFxHYdR2xQXn4BlYDz/nAy6TxOQ9YRH/vhJc+NdJ9oaihsA/qe+zbmx6lYP1/7coWdQzykLoPBo7Tc3/sRum03aUDee3vVcE2mKu54iVaj0/z14H5AiF+AWHzAoaRXOFVJt35t1buWyICrzN/OKIVRAItfBoWwXw5E8f7/OqSdo/SMKoQAkn40OmnXYsF61IkuiKODS7ZPywrmGuhtddOQq1EPktJxo3FWfD68+KfMeJmHU29OnR8MSvvly8A==

Received: from PU4P216MB1369.KORP216.PROD.OUTLOOK.COM (2603:1096:301:a2::6) by

SE2P216MB1428.KORP216.PROD.OUTLOOK.COM (2603:1096:101:2e::10) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.9678.17; Tue, 3 Mar 2026 16:54:20 +0000

Received: from PU4P216MB1369.KORP216.PROD.OUTLOOK.COM

([fe80::6835:de83:98d8:5611]) by PU4P216MB1369.KORP216.PROD.OUTLOOK.COM

([fe80::6835:de83:98d8:5611%6]) with mapi id 15.20.9564.013; Tue, 3 Mar 2026

16:54:20 +0000

From: Adam O1

To: Adam O1

Subject: Re: Send

Thread-Topic: Send

Thread-Index:

AQHclS7cZpyXhF5sbU2ZL3Y9tHMfd7Vy5L8zgAZN3RWAAZtIm4ABCMn1gAIpYaWAAUvDU4ABV9LIgAN/TRWAAAAb6IABqv2fgAFFZB6AAYD0XIADiCeggAGDO0GABGGGWoADMpYbgAGAPMCAAxB0YYACD3K8gAFeQVQ=

Date: Tue, 3 Mar 2026 16:54:20 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PU4P216MB1369:EE_|SE2P216MB1428:EE_

x-ms-office365-filtering-correlation-id: d32a4f50-ade4-454b-2153-08de794583a6

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|15030799006|15080799012|461199028|8060799015|20031999003|36102599003|19110799012|39105399006|8062599012|7071999006|440099028|3412199025|102099032|35041999009|39145399003|40105399003|41105399003|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?Occ7c8lE9iCpc1iVCaRmATZ4C9lRUhS+zZoQkLIqrAF/rRoYrfTvNhv5?=

=?Windows-1252?Q?8oED4kIoEFFLLx95bq5aYBM8rqYrTFKEYA7aLLREonZy0uZ8hoDTUACA?=

=?Windows-1252?Q?8TI7WKwrd8gfNixeGO7PCfxLBZ6l7FKbQjOsIVAVB2sTMAX2Tr5BeuNZ?=

=?Windows-1252?Q?SCHXRvJa7kgFXkHiMP44D70ZNFzm5bCn3lvnBB2cikeqUH5wcQMiIQXF?=

=?Windows-1252?Q?KOHyRlebdMgj10Yq9Xu2Bd1/hZweW2PSUcGup70SWEKcIcVjI1FzMogh?=

=?Windows-1252?Q?l5GRsbraid0hv0bwNh+YS2tzXSL/UTavHlQtVSMrGakB/NFgL1Fm6KYS?=

=?Windows-1252?Q?zIvVgYDX99I68LnAdo+rhxXQgAvWW5IkFSY34mRmO24d+10qEUgkFcoX?=

=?Windows-1252?Q?8iRVJ6sYncg5EZE50T3FitidphQeDS/5KQznsMR4C/z6KLPrtD9deW3q?=

=?Windows-1252?Q?giCTAIo61uir3bLNbaYudn0WUzZvHIQpW+TViwPAqUSjxwQXwy0gfBFj?=

=?Windows-1252?Q?B8HCMEaSyDtMNUDcE2Saun0ZBRgo0/9AT2biN7gpu+hptR3x04vGGtaT?=

=?Windows-1252?Q?anq/ocSOmHFkPwwVcRCD2pgHIBFfUhWYlrjAYUwTS3vXcdaTodyXM9co?=

=?Windows-1252?Q?E38C9P+6XEAh1+JYZP01A1YSgXJVMdfEuJds2e8o92qIEEqR3328vHow?=

=?Windows-1252?Q?eQV0R8TipXiQU4V3UNp8/txrCm/C9fhJTFA7ZgBRFXkoElwnfIICbOZE?=

=?Windows-1252?Q?DUMc90DxlAmtgv0b8OgTeB8g3AKHDObr39FX46KembrId4TjsTOqXBzl?=

=?Windows-1252?Q?/D5ysgt73g2lvEenyuwgRpwJR9wA0i2SEp1+nKHqF2y+gwSWzIdQJF1e?=

=?Windows-1252?Q?rxNG9db80ZZyHPiWthUJLOVMQb1NU0rWObFk/v2JaRy/06TDwZvHAk9+?=

=?Windows-1252?Q?e/3NdhziptwVHpHimI3J1jXM7BxHWhqARytnF1/uTkzHt20sPlLoeX5h?=

=?Windows-1252?Q?E3IshS6ZK/Jq1b1ToMcTUgedm3Jdfnm44Yi0j1RqmGeT4DYiRGMtD4uT?=

=?Windows-1252?Q?U0Zu2+LuDMOQV7T1AiRAsrEqObEij4B7NN+LIwbRYhYWDMoWEkV9h+zk?=

=?Windows-1252?Q?0XCy0NjuDmhqi5AV4CvBcDs13t+OhpwNFn1PT/poqd+8n8CA5IyMO+hf?=

=?Windows-1252?Q?Vnji7J1vyorLyqJ6ch5q7TsyMthj63cYf5O7XGVHdSUKrNU9EK5Cxw?=

=?Windows-1252?Q?=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

Web/SEO/App spam from Google Gmail Part 2

Posted by Dave Yadallee on Tuesday, March 3. 2026

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.195 listed in list.dnswl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.195 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} S-E-O Proposal !!

This is a multi-part message in MIME format.

------=_NextPart_000_0114_01DCAB5B.5AB61BD0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Hi there,

I was checking your website . See you have a good design, and it looks

great, but it's not ranking on Google and other major search engines.

Do you want more targeted visitors on your website?

We can place your website on Google 1st page. Yahoo, Facebook, LinkedIn,

YouTube, Instagram, Pinterest etc.)

May I send you a Price, SEO Packages? If interested.

Kind Regards,

lovely

------=_NextPart_000_0114_01DCAB5B.5AB61BD0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hi there,

class=3DMsoNormal>
style=3D'font-size:12.0pt;color:black'>

class=3DMsoNormal>I was =

checking your website . See you have a good design, and it looks great, =

but it's not ranking on Google and other major search =

engines.

style=3D'font-size:12.0pt;color:black'>

class=3DMsoNormal>Do you =

want more targeted visitors on your website?

class=3DMsoNormal>
style=3D'font-size:12.0pt;color:black'>

class=3DMsoNormal>We can =

place your website on Google 1st page. Yahoo, Facebook, LinkedIn, =

YouTube, Instagram, Pinterest etc.)

class=3DMsoNormal>
style=3D'font-size:12.0pt;color:black'>

class=3DMsoNormal>May I =

send you a Price, SEO Packages? If interested.

class=3DMsoNormal>
style=3D'font-size:12.0pt;color:black'>

class=3DMsoNormal>
style=3D'font-size:12.0pt;color:black'> Kind =

Regards,

style=3D'font-size:12.0pt;color:black'>
style=3D'font-size:12.0pt;color:black'>

class=3DMsoNoSpacing>lovely

------=_NextPart_000_0114_01DCAB5B.5AB61BD0--

Web/SEO/App spam from Google Gmail Part 1

Posted by Dave Yadallee on Tuesday, March 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 11:57:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxUut-000000004L6-2Ws5

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 11:56:23 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 11:56:23 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f195.google.com ([209.85.214.195]:52717)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxStt-00000000PRC-18Gq

for sales@nk.ca;

Tue, 03 Mar 2026 09:47:23 -0700

Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-2adff872068so29727335ad.1

for ; Tue, 03 Mar 2026 08:46:26 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=theappsdeveloper-com.20230601.gappssmtp.com; s=20230601; t=1772556379; x=1773161179; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=uc9Wb2J09QnFz53l1MkwW9h3Big4S1oe5EFD9mQSHks=;

b=V55dn4xFItIrbN6h/sCr0pEBtPQzRzEA3xNJifop+WuHTN6NcE8cGX4R+Gc1qFv719

QTQKaZxdXOx6oKhuPWwhAKC5vntfPtJSBUGvpzbAZIMGPpdIOJnIixmARpofOYRXVOX4

aPz/GDOXUTAVG3d4JaCnAawp33/VdNTyoACTXRMhatwjH7tlAAywrCCN4Ex2Z8GoRD7V

AZuh0qzyJj2PBDE2EfPr4b/c69kPAJyX0enNDDjPJZzCcXSg/YrJLtKe85iuFTFJYtFy

NW8kN2GlcA2cl30J3IDoYUCr0P6y15GnZbGUwjk1a8w2GjPr91mUqaNMB9c7FfbH4gVx

P6Ng==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772556379; x=1773161179;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=uc9Wb2J09QnFz53l1MkwW9h3Big4S1oe5EFD9mQSHks=;

b=RxduZGWO1GslUoiScrvT9sBzMUjP86bAMbguyFQg8mSXH2eGij1T9/S9P4CqnsVKaz

PwM3+1QlkRkbjh74T4wsVUstU5DNatAcyCeOid4dDrr4VR+e3xajYJycSH3legzvWIvu

oZnsWDTViIcw9iCQFzU0ytHwt4RJOvfPFSkFe8HH16hvu3RAnp06arI18r2/Mpo/qZQA

rf5Yq7eB8EbwWF77LJgTsvWMCUGISdWNIXRqtAzmR1wwd34KQ2wx3c7AC12imdCnEs0O

csJgNFuaLrPZ5rt49O5W5Pol8zHYNXGQO3UD/wK5mfEMOuNC+hu8RE9xx4jD9MVKYajy

unYg==

X-Gm-Message-State: AOJu0YxDELvM231nJ8vWIiGTNx9pktXL8T5sPnvRPsBDoa21hSqCjBBX

L/v7sF0NeiValtr/nD48Z9tM7w3zVYbYpq736CSI1aukUs6ar8umQRk01z4zx8sFE8l58lpnSPJ

9oXSmpHs=

X-Gm-Gg: ATEYQzxFpBN5prE0o+U38BllxIBN5qhBpQdMy1WoDTFPgkpxACTe8iraLzhI8d/2aup

tMd5gUEGV9GNYfKbytst4OulVQaRRYTmG+sk8fTBEAu7VvX3V1CC56JdmEDWZRnnS8Tm2HQFhjP

0Sy7mrijxKEJp+uwwAw1PfwCcf/n/FR3EvHB9ntZYIJPqQe/T81fy/G5HHhqyTm9fCQXqoh5dR1

GkOHXk2PvDFG++ArVwwzDs6AFFB/a5w+S4Ui1E7BYEUXJ8+SJz/EdrBVDDkUL8sT3qKScq3BBQj

ZTzr1HkuD7dyGq6sp6z3Hvm1e5ud3dfx3OoOTZQj8qUQPzCREc/ZlQwkaQyMuR7l9b7rhmFKzUz

6xaQm8AeMxgKHAF8UVtpe2SK7ERf1c0QYcRB25JlvaZ3iz7Z+Fbk8ARvt29gWT6GJaBL8x/g6wy

EOfbm3rBqpK/KROTGT3qnC19Oh4mwle4whkucJXZ/Mirc6be9g

X-Received: by 2002:a17:902:c94b:b0:2ae:5442:45cf with SMTP id d9443c01a7336-2ae54424962mr74422605ad.33.1772556379363;

Tue, 03 Mar 2026 08:46:19 -0800 (PST)

Received: from dell ([2401:4900:8841:3a8b:65eb:256e:1c98:b2bb])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2ae4b782c53sm75485035ad.41.2026.03.03.08.46.17

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 03 Mar 2026 08:46:18 -0800 (PST)

From: "lovely"

To:

Subject: S-E-O Proposal !!

Date: Tue, 3 Mar 2026 22:15:44 +0530

Message-ID: <011301dcab2d$40fddfd0$c2f99f70$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0114_01DCAB5B.5AB61BD0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdyqcwNbVIavfGATQo2C4/x7bMo/Tg==

Content-Language: en-in

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi there, I was checking your website . See you have a good

design, and it looks great, but it's not ranking on Google and other major

search engines. Do you want more targeted visitors on your website?

Content analysis details: (9.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in will-spam-for-food.eu.org]

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in will-spam-for-food.eu.org]

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in will-spam-for-food.eu.org]

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in will-spam-for-food.eu.org]

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in will-spam-for-food.eu.org]

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in will-spam-for-food.eu.org]

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in will-spam-for-food.eu.org]

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in dnsbl.ahbl.org]

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in dnsbl.ahbl.org]

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in dnsbl.ahbl.org]

[2401:4900:8841:3a8b:65eb:256e:1c98:b2bb listed]

[in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

Norton Phish from Google Gmail Part 3

Posted by Dave Yadallee on Tuesday, March 3. 2026

@font-face {

font-family: 'Google Sans';

font-style: normal;

font-weight: 700;

src: url(//fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLV154t=

zCwM.ttf) format('truetype');

}

=20

=20

=20

=20

Norton Phish from Google Gmail Part 4

Posted by Dave Yadallee on Tuesday, March 3. 2026

>
/InformAction">
/schema.org/Event">
org/EventScheduled"/>
p://schema.org/Organization">
ndar"/>
ll4ahk8eh1op5vtgng"/>
fff; line-height: 1px; height: 0; max-height: 0; width: 0; max-width: 0; op=

acity: 0; overflow: hidden;" itemprop=3D"name">9982-321-AYB payment confirm=

ed for Order
datetime=3D"20260304T050000Z">
"20260305T043000Z">
spacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" =

class=3D"body-container">
tr>

">

"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width=

:100%;" class=3D"">

n itemscope itemtype=3D"http://schema.org/EmailMessage">

ription">Membership Date- 2026-03-04
Membership No- 1011-998-MND
Supp=

ort No- +1 (803) 234-0500

Hello Customer,

We appreciate your continued=

trust in N0RT0N LIFELOCK 360. Your subscription has been successfully rene=

wed in accordance with your prior electronic authorization.

A payment of =

USD318.33 has been processed for the applicable services.

Product Pricing=

Center
Purchase Item: Prime Protection Plan
Coverage Term: 4 Years
r>Total Amount Charged: $ 355.66

Thank you for your ongoing business.

I=

f you have any questions or would like further assistance, please contact 1=

{803} 234-0500. We value your feedback.

Thanks again,
Finance Head of=

N0RT0N LIFELOCK 360, LLC.
Jody B
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.

n>

ng=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"">
tr>

; direction: rtl; font-size: 0; padding: 24px 32px; text-align: left; verti=

cal-align: top;" class=3D"main-container-inner">

tion: ltr; display: inline-block; vertical-align: top; width: 100%;overflow=

: hidden; word-wrap: break-word;">
lspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main-column-ta=

ble-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-layout: fixed=

;">

gn:top;">
esentation" width=3D"100%" style=3D"table-layout: fixed;">

font-size: 0; padding: 0; text-align: left; word-break: break-word;;padding=

-bottom:2px;">

s-serif;font-weight: 400; font-size: 22px; line-height: 28px;color: #3c4043=

; text-decoration: none;" class=3D"primary-text" role=3D"presentation">
n itemprop=3D"name">9982-321-AYB payment confirmed for Order

td>

reak: break-word;;padding-bottom:24px;">

sans-serif;font-style: normal; font-weight: 400; font-size: 14px; line-heig=

ht: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" cla=

ss=3D"primary-text" role=3D"presentation">
itemprop=3D"startDate" datetime=3D"20260304T050000Z">
=3D"endDate" datetime=3D"20260305T043000Z">Tuesday Mar =

3 =E2=8B=85 11pm =E2=80=93 Wednesday Mar 4, 2026 =E2=8B=85 10:30pm (Central=

Time - Chicago)

ng: 0; text-align: left; word-break: break-word;;padding-bottom:24px;">
style=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: =

400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c40=

43; text-decoration: none;" class=3D"primary-text" role=3D"presentation">
able border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation"=

style=3D"padding-bottom: 4px;">

"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-we=

bkit-font-smoothing: antialiased;margin: 0; padding: 0;">Organizer

>

class=3D"primary-text underline-on-hover" style=3D"display: inline-block;;=

color: #3c4043; text-decoration: none;" href=3D"mailto:ferhattuman5@ordweb.=

org">Doretha Zhang
e=3D"http://schema.org/Person">
hang"/>
>

on-hover" style=3D"display: inline-block;;color: #70757a; text-decoration: =

none;" href=3D"mailto:ferhattuman5@ordweb.org">ferhattuman5@ordweb.org<=

/div>

left; word-break: break-word;;padding-bottom:24px;">

ily: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14=

px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoratio=

n: none;" class=3D"primary-text" role=3D"presentation">
cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-=

bottom: 4px;">

olor: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothin=

g: antialiased;margin: 0; padding: 0;">Guests

(Guest =

list has been hidden at organizer's request)

--000000000000db2716064c21625d--

Norton Phish from Google Gmail Part 2

Posted by Dave Yadallee on Tuesday, March 3. 2026

--000000000000db2716064c21625d

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

TWVtYmVyc2hpcCBEYXRlLSAyMDI2LTAzLTA0IE1lbWJlcnNoaXAgTm8tIDEwMTEtOTk4LU1ORCBT

dXBwb3J0IE5vLSArMSAgDQooODAzKSAyMzQtMDUwMCBIZWxsbyBDdXN0b21lciwgV2UgYXBwcmVj

aWF0ZSB5b3VyIGNvbnRpbnVlZCB0cnVzdCBpbiBOMFJUME4gIA0KTElGRUxPQ0sgMzYwLiBZb3Vy

IHN1YnNjcmlwdGlvbiBoYXMgYmVlbiBzdWNjZXNzZnVsbHkgcmVuZXdlZCBpbiBhY2NvcmRhbmNl

ICANCndpdGggeW91ciBwcmlvciBlbGVjdHJvbmljIGF1dGhvcml6YXRpb24uIEEgcGF5bWVudCBv

ZiBVU0QzMTguMzMgaGFzIGJlZW4gIA0KcHJvY2Vzc2VkIGZvciB0aGUgYXBwbGljYWJsZSBzZXJ2

aWNlcy4gUHJvZHVjdCBQcmljaW5nIENlbnRlciBQdXJjaGFzZSAgDQpJdGVtOiBQcmltZSBQcm90

ZWN0aW9uIFBsYW4gQ292ZXJhZ2UgVGVybTogNCBZZWFycyBUb3RhbCBBbW91bnQgQ2hhcmdlZDog

JCAgDQozNTUuNjYgVGhhbmsgeW91IGZvciB5b3VyIG9uZ29pbmcgYnVzaW5lc3MuIElmIHlvdSBo

YXZlIGFueSBxdWVzdGlvbnMgb3IgIA0Kd291bGQgbGlrZSBmdXJ0aGVyIGFzc2lzdGFuY2UsIHBs

ZWFzZSBjb250YWN0IDF7ODAzfSAyMzQtMDUwMC4gV2UgdmFsdWUgIA0KeW91ciBmZWVkYmFjay4g

VGhhbmtzIGFnYWluLCBGaW5hbmNlIEhlYWQgb2YgTjBSVDBOIExJRkVMT0NLIDM2MCwgTExDLiBK

b2R5ICANCkIgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4NCg0KOTk4Mi0zMjEtQVlCIHBh

eW1lbnQgY29uZmlybWVkIGZvciBPcmRlcg0KVHVlc2RheSBNYXIgMyDii4UgMTFwbSDigJMgV2Vk

bmVzZGF5IE1hciA0LCAyMDI2IOKLhSAxMDozMHBtDQpDZW50cmFsIFRpbWUgLSBDaGljYWdvDQoN

Cg0KDQpPcmdhbml6ZXINCkRvcmV0aGEgWmhhbmcNCmZlcmhhdHR1bWFuNUBvcmR3ZWIub3JnDQoN

Cg==

--000000000000db2716064c21625d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-we= bkit-font-smoothing: antialiased;margin: 0; padding: 0;">Organizer

olor: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothin= g: antialiased;margin: 0; padding: 0;">Guests

"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-we=

bkit-font-smoothing: antialiased;margin: 0; padding: 0;">Organizer

olor: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothin=

g: antialiased;margin: 0; padding: 0;">Guests