German language spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Feb 2026 13:45:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vo6D1-00000000D8V-2a5R

for dave@doctor.nl2k.ab.ca;

Thu, 05 Feb 2026 13:44:15 -0700

Resent-From: The Doctor

Resent-Date: Thu, 5 Feb 2026 13:44:15 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f67.google.com ([209.85.208.67]:56683)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vo2QV-000000001ej-29EE

for doctor@doctor.nl2k.ab.ca;

Thu, 05 Feb 2026 09:42:05 -0700

Received: by mail-ed1-f67.google.com with SMTP id 4fb4d7f45d1cf-653780e9eb3so1544798a12.1

for ; Thu, 05 Feb 2026 08:41:08 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1770309661; cv=none;

d=google.com; s=arc-20240605;

b=VsRp84oW2TuBYABpLQ9t4fNujaCY+Zd/A6ofJoQvQA0epn6hQrA44/wt4gvdEM0id7

0d+Y5FC7VHjY6VZKqntg98BxSO7K6AXH0hQVJoAtQlyloS7EWYj7L4Dg4r7ZCTuKYp9x

dSwYVu5qe9K2tQtFBEEmcVSbPoPjnXWWtkXAhVxGdd16WK5Nb6YXIUycH5U1ChVorYoM

+7tI82d9QjvHwFDiROQdmA7HnJL7aIo687nQoEeMN3mZA5f5xVyg5kRKenUi0uFz+UHV

y54K+ptDjkptEVE7fLJ6fMbI7EuiOei1t+f3WbYX8rZjOovp9heXlnnkUvLTJgVJCXQU

/ORQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=MafMyfR2LGlAPtC+Fnjd+pn+JRSOIWB2ljcAsMS8jq4=;

fh=AkNyb6PqAYClcssu4BPCSdSwYP+YrAHI92UJh26OyuU=;

b=F2PA3W3fS8Fi6+qgHf7JPrpG41DGzR/NTMavfEr/yu3LYrEhNK//mQlauKli22GHcG

FRJY7opk5LE8Dnfc8ZIeFdvYBTfVfNaXNjqIUiiMXfYVsKmrhflggB15s+B0367WNplC

Ewb6i0PHyT9U0wQpqIIivJY22gDn8DTMY1izw/DJC5HoihG5MKy+PhHsxF2d3wwBHEKS

M79spWGefzRXYGWML9fVPb+/VpgpvwlCMdQRXEoFghkd+evgv/dm2Nkwxxru2exouejA

s0Fm5KXwbeFl0wCZZVru2buRR+EVUQ8ZHd34vWt9ceFdlDZcbab9agYRyQPDcSCWcyxE

2ZvQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1770309661; x=1770914461; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=MafMyfR2LGlAPtC+Fnjd+pn+JRSOIWB2ljcAsMS8jq4=;

b=bGHLb6FuaUd/npti/CRjR1K7Ibp+SBEEDZ4XYhKkcPWqaClpok8Nqgr7HjznX4kFPh

s0IiznhqdlFZFzTk1q90ZLPKRFIn8/pP1zRJ5DLg45rgB2fxb3vfdXxRMftklTdsN9Do

FHI7QeiRgrXcqQWDt3eg0oKUqnujDKuqUGtUud7+Lb1iqlJOJDgljAWTbnFYFnDTukNM

yw5iCl5TKsfpjNxrbF05wP1vSBMBGWKbd/ZPGiPXsuq8N5Fktbf6SZrx4l/6hGTcUTHF

tt1kH49LPLWDI3eZlggQBSbY7AJW4Aa/Sd2yGVWUD8VoMMIt4bDpIn4gL86tSNTZF1mT

LJRw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770309661; x=1770914461;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=MafMyfR2LGlAPtC+Fnjd+pn+JRSOIWB2ljcAsMS8jq4=;

b=XAW5e3apjqps5XFCHPxMB6gjTQFh8WDW+0I9THCu8DTy1aMZHkzFKZ+YcqM6CgE9oF

cHD1glXWor3vyM+p8jyTeEv3iNR/wU0/q0Qh4XAwTGrWZsDZhrEYWW2gB9ptZ/YSo8OQ

Z5sqrTQKLMxZv8RVepxgV/eXx3IJC3U9QovG4r6IW3WM4rcYb0qtE6yuVAF7l725f6pn

soOkBPlwOtV7PRwvfCNeWi73j4m6I0FG5DqMZyqd7222EUDmPsRJJP7RBz+FCg2b18+Q

Pqy4HF1hqg6RcFtMtpIfT54x+miEutZ1pyRpuDG/ce7ZgUY40ryLVV8xVqt2asAKQ3K9

dXqQ==

X-Forwarded-Encrypted: i=1; AJvYcCVT1rsN5I9eZYzF8HW/vp9VadTym3c8iCPoA901AG4SDMDG3anxd63PthM9HYtdemSKVQ1cXZY=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxHXkU9sRSHVLVgl87zo8r+P77bFQw9krumHd1IyIn3G2SPPv0W

I54MsIbNLFYu5jHkKqInEfx22eY2uPcq7JinbEcJhSxAa+JbUS9eh/tEpd81HDFdPy58JuwbCpp

ADuwCmpL545V3yE99eyEf73OWeEl6KVg=

X-Gm-Gg: AZuq6aLl5MIl5wdjoEDfBQ2149IbsHM3SeLpJjGSA9KHSZ1frJ+3TDObs4ukUoD4s9z

UsTQDr7uPIUSCWiohYVU+xA88a0oIHFxd7lPYGzH12sgo39Nh2jYxll5yP4iWx3MKEt1LSmIXVT

Pq25ipfJB/6AHzPzOLN6kL3XY1wOSQiQKuJyCo9ghd6P+kFzDoTKbEkaSts+GLFtZDRX78hjM1s

ydtu0Ce9s2bNPgUiqJLbgbbli81+/KjODSREg650rlDdpkuP+oUkYSdtd+AwZ9EkokiypVefxw2

I8KVPjBpkalO8xClSvpgJzZIGp+im3zvUTXihj97oYPZO7RMO79a4Q==

X-Received: by 2002:a17:907:d0c:b0:b8e:2a8a:4320 with SMTP id

a640c23a62f3a-b8e9f2d8f05mr421747066b.49.1770309660348; Thu, 05 Feb 2026

08:41:00 -0800 (PST)

MIME-Version: 1.0

Reply-To: ulrikagustafasson@gmail.com

From: Amanda Ulrika Gustafsson

Date: Thu, 5 Feb 2026 16:40:19 +0000

X-Gm-Features: AZwV_QjWido7BeCZdyMIljoWzLDJJ5MhmZv3-0MGnhAGbKHCQbnaPGNCRyFWsKo

Message-ID:

Subject: Spende von Frau Amanda Ulrika Gustafsson.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000729723064a1656d5"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 16.3

X-Spam_score_int: 163

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Guten Morgen und wie geht es Ihnen heute? Ich bin mit Herrn

Ali Gustafsson verheiratet, der neun Jahre lang für die schwedische Botschaft

in der Elfenbeinküste arbeitete, bevor er 2011 verstarb. Wir waren elf Jahre

verheiratet und kinderlos [...]



Content analysis details: (16.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

[209.85.208.67 listed in dnsbl.ahbl.org]

[209.85.208.67 listed in dnsbl.ahbl.org]

[209.85.208.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.67 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ritawillz51(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ritawillz51(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.67 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Spende von Frau Amanda Ulrika Gustafsson.





Carton Nation spam Part 3

Posted by Dave Yadallee on


div>=0A =0A
s" style=3D"padding-top: 5px; padding-bottom: 0px;">=0A
iv class=3D"p" style=3D"margin: 0px 0px 12px;"> =0A =

Enjoy 20% off your first order at =0A =

Carton Nation.
=0A =

=0A =

As a welcome, simply use the coupon code =0A =

new20 at checkout to receive your 20% =0A=

discount on your first purchase. =

=0A
=0A

le=3D"margin: 0px 0px 12px;"> =0A W=

e wanted to personally introduce you to Carton Nation. =0A =

=0A

"margin: 0px 0px 12px;"> =0A Carton=

Nation is a Canada-based online smoke shop where =0A cust=

omers can order quality native cigarettes, cigars, tobacco =0A =

products, and smoking accessories directly from home. We focus =0A =

on competitive pricing, reliable shipping across Canada, and =

a =0A simple ordering experience from start to finish. =

=0A
=0A

ss=3D"p" style=3D"margin: 0px 0px 12px;"> =0A =

If you are tired of limited selection, high prices, or =0A =

inconvenient store visits, Carton Nation was built for you. =0A=

Our customers choose us because they want trusted product=

s =0A delivered straight to their door with clear communic=

ation and =0A dependable service.
div>=0A
=

=0A We invite you to take a look an=

d see what we offer. =0A Visiting the site takes just a mi=

nute, and you can browse =0A freely with no obligation. =

=0A

rgin: 0px 0px 12px;"> =0A Visit us =

here:
=3D"https://www.cartonnation.com" target=3D"_blank">www.cartonnation.com
> =0A
=0A
v class=3D"p" style=3D"margin: 0px 0px 8px;"> =0A =

If you have any questions before ordering, just reply to =0A=

this email and our team will be happy to help you out. We=

look =0A forward to welcoming you as a Carton Nation cust=

omer. =0A
=0A =0A =


er=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A =0A =

=0A

0px;">
width=3D"300" style=3D"width: 300px; height: auto; max-width: 300px;" alt=

=3D"Payments" src=3D"https://0taxgfx.com/graphics/carton/payments.png">=

=0A
=

=0A =0A
=3D"presentation" bgcolor=3D"#060745" border=3D"0" cellspacing=3D"0" cellpa=

dding=3D"0">=0A =0A =0A =0A =

=0A <=

/table>

ign=3D"center" style=3D"padding: 15px 20px 0px;">=0A

class=3D"small"> We are your trusted =0A =

source for premium Native Cigarettes and affordable smokes in =0A =

Canada, offering only genuine cigarette brands with =0A =

top-quality tobacco.

5px 20px 15px;">=0A
=

Copyright 2026, =0A cartonnation.com. All Rights Re=

served.
=0A =


;" href=3D"dp:unsubscribe" target=3D"_blank">Click here to =0A =

unsubscribe =0A
=0A

------=_NextPart_001_5224_19436112.28CC501B--

Carton Nation spam Part 2

Posted by Dave Yadallee on
We are your trusted source for premium Native Cigarettes and affordable smo=

kes in Canada, offering only genuine cigarette brands with top-quality toba=

cco.

Copyright 2026, cartonnation.com. All Rights Reserved.

Click here to unsubscribe



------=_NextPart_001_5224_19436112.28CC501B

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




ft-com:office:office" xmlns:v=3D"urn:schemas-microsoft-com:vml">=0A =

=0A =0A
ntent-Type" content=3D"text/html; charset=3DUTF-8"> =0A
ewport" content=3D"width=3Ddevice-width, initial-scale=3D1"> =0ACa=<br /><br /> rton Nation =0A=0A
name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001"> =0A
=3D"body" style=3D"margin: 0px; padding: 0px; background-color: rgb(204, 20=

4, 204);"> =0A =0A

ow: hidden; font-size: 1px; display: none; max-height: 0px; max-width: 0px;=

opacity: 0; mso-hide: all;"> =0A Enjoy 20% off your first order. Use cod=

e new20 at checkout.
=0A
=0A
=3D"100%" class=3D"wrapper" role=3D"presentation" bgcolor=3D"#cccccc" borde=

r=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A =0A =0A

=3D"center" class=3D"pad-outer">=0A
ainer" role=3D"presentation" style=3D"width: 640px; max-width: 640px;" bord=

er=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A =0A =0A =

=

=0A =0A
esentation" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A =

=0A =0A
table> =0A =0A =


https://cartonnation.com/shop-2/" target=3D"_blank">
ht=3D"320" class=3D"img-responsive" style=3D"width: 640px; height: auto; ma=

x-width: 640px;" alt=3D"Carton Nation" src=3D"https://0taxgfx.com/graphics/=

carton/logo.jpg"> =0A

r=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A =0A =

=0A

x; padding-bottom: 5px;">=0A
Hi there,

Carton Nation spam Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Feb 2026 13:44:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vo6Cg-00000000D7F-47CM

for dave@doctor.nl2k.ab.ca;

Thu, 05 Feb 2026 13:43:54 -0700

Resent-From: The Doctor

Resent-Date: Thu, 5 Feb 2026 13:43:54 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [102.22.210.168] (port=27254 helo=mail.0tax.co)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vo1hw-00000000PaK-30NZ

for doctor@mail.nl2k.ab.ca;

Thu, 05 Feb 2026 08:56:01 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cartonnation.co;

s=202510; t=1770306894;

bh=mitTnN/9p4MIsEJDPcCIQbNJFl/x1Xtn3WYtlfqw9RY=;

h=From:Reply-To:To:Subject:Date:List-Unsubscribe:From;

b=k3dEeK6k1wwIxBhfO7ghjd8u2en3ExrNlbbjw3Ly+/EgMJfg0iwmteQ5gueEajUOF

5auU2e68mpszitxcDoLuHc0+aJRzGkC0ir9kRZ00XM6cAiDRqiGpD+0hBX5K5uyGn9

Ao0NIOx1Cz325NPmrqpkGmkLZ0o8sQ3JE6Fyq8mbDte9Fv5U/S+PqXv6wNnhMBXbWE

U11NpqCYBqTP0K9nqgMstPz3Hdq2zjeJbhSbLkJCBkJjdIJ2h/G/anTvIZdNR6JWLE

N+yYZCmwJOwrrt6Z2oqvBXgEc4jcBvNg3S5FDcBXx6+bwquKy3a2kaIrqL1wzQ2C5i

8SCy7Ezts/OZA==

Received: from mail.0tax.co (unknown [102.22.210.168])

by mail.0tax.co (Postfix) with ESMTPSA id D99D061AB2

for ; Thu, 5 Feb 2026 15:54:54 +0000 (UTC)

MIME-Version: 1.0

From: "Carton Nation"

Reply-To: bounce@cartonnation.co

To: doctor@mail.nl2k.ab.ca

Subject: Enjoy 20% Off Your First Order at Carton Nation

Content-Type: multipart/alternative;

boundary="----=_NextPart_001_5224_19436112.28CC501B"

X-Mailer: Smart_Send_4_4_2

Date: Thu, 5 Feb 2026 10:54:54 -0500

Message-ID: <215724865309762790974@DESKTOP-OKPMCF7>

List-Unsubscribe:

X-Spam_score: 21.5

X-Spam_score_int: 215

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Enjoy 20% off your first order. Use code new20 at checkout.

Hi there, Enjoy 20% off your first order at Carton Nation. As a welcome,

simply use the coupon code new20 at checkout to receive your 20% di [...]



Content analysis details: (21.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[102.22.210.168 listed in will-spam-for-food.eu.org]

[102.22.210.168 listed in will-spam-for-food.eu.org]

[102.22.210.168 listed in will-spam-for-food.eu.org]

[102.22.210.168 listed in will-spam-for-food.eu.org]

[102.22.210.168 listed in will-spam-for-food.eu.org]

[102.22.210.168 listed in will-spam-for-food.eu.org]

[102.22.210.168 listed in will-spam-for-food.eu.org]

[102.22.210.168 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[102.22.210.168 listed in dnsbl.ahbl.org]

[102.22.210.168 listed in dnsbl.ahbl.org]

[102.22.210.168 listed in dnsbl.ahbl.org]

[102.22.210.168 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[102.22.210.168 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[102.22.210.168 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[102.22.210.168 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[102.22.210.168 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: cartonnation.co]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[102.22.210.168 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[102.22.210.168 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[102.22.210.168 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[102.22.210.168 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

15 GR_DOMAIN_SILLYS1 Spammer tool signature (sillysend)

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Enjoy 20% Off Your First Order at Carton Nation





------=_NextPart_001_5224_19436112.28CC501B

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Enjoy 20% off your first order. Use code new20 at checkout.

Hi there,

Enjoy 20% off your first order at Carton Nation.

As a welcome, simply use the coupon code new20 at checkout to receive your =

20% discount on your first purchase.

We wanted to personally introduce you to Carton Nation.

Carton Nation is a Canada-based online smoke shop where customers can order=

quality native cigarettes, cigars, tobacco products, and smoking accessori=

es directly from home. We focus on competitive pricing, reliable shipping a=

cross Canada, and a simple ordering experience from start to finish.

If you are tired of limited selection, high prices, or inconvenient store v=

isits, Carton Nation was built for you. Our customers choose us because the=

y want trusted products delivered straight to their door with clear communi=

cation and dependable service.

We invite you to take a look and see what we offer. Visiting the site takes=

just a minute, and you can browse freely with no obligation.

Visit us here: www.cartonnation.com

If you have any questions before ordering, just reply to this email and our=

team will be happy to help you out. We look forward to welcoming you as a =

Carton Nation customer.

Place your order here=20

Web/SEO/App spam from Microsoft Outlook Part 3

Posted by Dave Yadallee on
Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:208:ab:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:ab:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:ab:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:ab:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:ab:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:ab:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:ab:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:ab:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[52.103.14.40 listed in will-spam-for-food.eu.org]

[52.103.14.40 listed in will-spam-for-food.eu.org]

[52.103.14.40 listed in will-spam-for-food.eu.org]

[52.103.14.40 listed in will-spam-for-food.eu.org]

[52.103.14.40 listed in will-spam-for-food.eu.org]

[52.103.14.40 listed in will-spam-for-food.eu.org]

[52.103.14.40 listed in will-spam-for-food.eu.org]

[52.103.14.40 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.14.40 listed in dnsbl.ahbl.org]

[52.103.14.40 listed in dnsbl.ahbl.org]

[52.103.14.40 listed in dnsbl.ahbl.org]

[52.103.14.40 listed in dnsbl.ahbl.org]

[2603:10b6:208:ab:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:ab:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:ab:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:ab:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.14.40 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.14.40 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.14.40 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.14.40 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[samina5426(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[samina5426(at)outlook.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.14.40 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 MR_DIFF_MID No description available.

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.14.40 listed in list.dnswl.org]

Subject: {SPAM?} Re:



--_000_MN2PR07MB58402B67312C1356D710E641C099AMN2PR07MB5840namp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Just a quick follow-up =97 may I send you the SEO price list if you're inte=

rested?



Thanks.



________________________________

From: Samina Samina

Sent: 12 January 2026 16:53

Subject: Re:



Hi,



Good morning, We help businesses grow by getting them found online.



Our proven SEO strategies deliver higher rankings, more traffic, and bette=

r ROI.



Let=92s schedule a call to discuss your goals.



If you are interested, I send you an audit report and proposal ?



Thanks,





--_000_MN2PR07MB58402B67312C1356D710E641C099AMN2PR07MB5840namp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Just a quick follow-up =97 may I send you the SEO price list if you're=

interested?



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">









x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">


11pt; color: rgb(0, 0, 0);">

From: Samina Samina <samina5426@outlook.com>


Sent: 12 January 2026 16:53


Subject: Re:


 


Web/SEO/App spam from Microsoft Outlook Part 4

Posted by Dave Yadallee on

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi, 



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">







d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">

Good morning, We help businesses grow by getting them found online.



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">







d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">

 Our proven SEO strategies deliver higher rankings, more traffic, and =

better ROI. 



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">







d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">

Let=92s schedule a call to discuss your goals. 



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">







d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">

If you are interested, I send you an audit report and proposal ? 
>


d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">







d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">

Thanks,



edFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12p=

t; color: rgb(0, 0, 0);">












--_000_MN2PR07MB58402B67312C1356D710E641C099AMN2PR07MB5840namp_--

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on












































































































In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: MN2PR07MB5840:EE_|DM6PR07MB8110:EE_

x-ms-office365-filtering-correlation-id: d98ebf4a-a6ce-4559-d212-08de64cbb1b6

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|15030799006|15080799012|19110799012|8060799015|8062599012|31061999003|39105399006|20031999003|7042599007|7071999006|40105399003|51015399003|440099028|3412199025|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?xvveRSlwkeuM5ETl4CjI4gaOCtQIF3B2qYvpsfGYfeL9dKoVOOaVTJy+?=

=?Windows-1252?Q?5sOx8gYVOJ8NllXYypu2gzPzyAsbw64dFTKwU7DVhbq60f6S8nw1YoM3?=

=?Windows-1252?Q?H1k7w8WzfDN+w1gmqxj0c30gxoy3WK1K/P1zwRFFoc8oO5Ed3uvdi1l2?=

=?Windows-1252?Q?egJqQbc9zpVQrBEdUB6C5omiJzPNXiB9cwzpk2IbD0qomnh5uxbSzj21?=

=?Windows-1252?Q?jFFn0ZPJ9pRIh/UapXCh9haSHSyoSsz+PRU4Ez3mstm619tZS/3lfekp?=

=?Windows-1252?Q?hMvp8j4AKF0MNINcPy7gGpHvrljmRpk0apRSGPZydDvx4WPMQ3aXG5JL?=

=?Windows-1252?Q?8aoVGxNJ0WAfXSoI55GzGnF+7OktHv1EKCVFIiFf/utt6+34p+/ysG4H?=

=?Windows-1252?Q?Jwl3LGdlIsdD6VDtDc+Cmb9o0OBzB7j1aClexlRFzSctIFt4CTwKh2vC?=

=?Windows-1252?Q?RkC6vy5/g6LrbZLyrTGOL4/onFUWM/JXAn5CkbOncMwC2f0NfMUT/7hC?=

=?Windows-1252?Q?4Jzo9au6CVUt7gFdSn0KKE6SPwEWiwqZkfKkrSPqB8vLj1FvJLnaTHU5?=

=?Windows-1252?Q?WLmwkP7gmy0CtGdCxLbTgwaXkMd+lISJ21nogrj5iJqvBOtLLTWWRqef?=

=?Windows-1252?Q?auYdelYogpH9ZZBGJE1mvZ/O2I/TXqr0ajplXAVXrvmw7KG9cCWKoSUB?=

=?Windows-1252?Q?Wd7/BSPOrZLsI11+pXvh+SFC/3Pdyub+4FkvteHJ4yq3Z+vZX8kBGNIJ?=

=?Windows-1252?Q?rJKzLGC1SnREkZg87FDcf5WZV82sOtDvqbFTKSixJmFYJxyAQYUOP7hn?=

=?Windows-1252?Q?p/1ehsqpiMd8PttnwuBAqkye/2vkufyVGigzc7KA1zqw+b8sDtDy/bMA?=

=?Windows-1252?Q?RnXQpY6yNofln3LoQM7NkxiSchRbIfzVE+S5jEJxJDnTZhhLcNKQbDbN?=

=?Windows-1252?Q?gHdjnZPzF//aJBJ/wuEBDbAFSErMhZQu39M55sZL+3VlDgxjAHocfayh?=

=?Windows-1252?Q?ovHMoZb2jkO7+jqczuPpuzh3ySuDVhqvQBAIzvHrMvY0Q+muwCzTCcMT?=

=?Windows-1252?Q?LITH/tezU8kVmbnV0zMATA2oVcj9wSzr1eAz6MEBO3GPZ5h8tq7RR/Kk?=

=?Windows-1252?Q?ELejgdhzk4VBKaVCmlbn7HuVMOQflxvUO39dPfFSj7k18yYWZK12TpGn?=

=?Windows-1252?Q?G8vkbB1I0oai6F9dKqnQRFhCFU8sssSC54LSsJfi53FQyMi7klSkAAOZ?=

=?Windows-1252?Q?WkPz9EkF/tV4hDFrsI10bo7XzlB8NXd5cT2pgtJoeweKwvcEm/7yIMgB?=

=?Windows-1252?Q?bPF+HYJuYou486DgyzlFCoPc1JwKtNPyqN19C3eC0wgIQctb5oNh4vAR?=

=?Windows-1252?Q?CQof1dzb3COSZ3C+1UrcRFFrfLFddiHtQVnUkN3CgOvigleePUf8kdbr?=

=?Windows-1252?Q?i57bHl59MJAGwcaqcbif2I8OkeOVW2itqQzpYFF4lnY=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?oTDCXl0MBBfDItvLx30VLjp+eg6XvkZeb0zmH07w8yCQn1x46SrDAIwk?=

=?Windows-1252?Q?9r3YAkrasdz1bzAQGoWt+DRvj4EYPY9kVyz8rJhvb+4OeHY2kzmIe0PS?=

=?Windows-1252?Q?7int2Fx345cap5PRz/2oTf30U5KpGxdAIKx37A6hAKfO17aBj9Xegj8n?=

=?Windows-1252?Q?17MYmGRNSMMwfPCQpSdMuqVOPYskiYGD8PGzqCiccGseZQPqka+Z8cnT?=

=?Windows-1252?Q?oMkUp9iy7xI7ebyjQ3QmwygPKQfh3SDHiGzhFwJjcvRO5OGPBFFS9ce9?=

=?Windows-1252?Q?r80yXj0sIlyfeowZcOuC2kyPCr9iGtBac4uSU0EswQ9f4S8ukwLBEnKl?=

=?Windows-1252?Q?3AXRNN6MYyP95vfOXPPNTVd5goNTEjMTki/VtQY7+4FVfW92Cp/53o1D?=

=?Windows-1252?Q?1qmy0hpI77e3PRaw8jX1OotoRXWr2/JRfmvItg5BZlzQfeu14nIvxkr0?=

=?Windows-1252?Q?RFWjHME73Yi001eE0db96cO3yD2WAuaxTkPgAc24bhZstuwtSbWhVdhz?=

=?Windows-1252?Q?7TUK0zdBsYPQWEZWvyN0mXJv7S4+fDgTphXKA6Ahu5Ywq+Xi821oM+jf?=

=?Windows-1252?Q?HG1hxIHypu76IohwzqebNvf8z72AIX3YlXFCQmfv8lPiu8xFiFmbFRDY?=

=?Windows-1252?Q?I1v+we2W7m0/6wEjK9w4GHDzQfDL9jkJHIdOg7g1ukD/7hTklHWHPoJj?=

=?Windows-1252?Q?r01W6zgyeus/UEMbVyPgzgprDnKiMcgbojdF8qOKZR5aLdYKXXzzanO0?=

=?Windows-1252?Q?AoHlWFkXy9zh2w9OjxSIWGwYfp33ywBcvGgzKLvk74ki7WiTctehgxzc?=

=?Windows-1252?Q?r+sm8AzQb81rZiGMvcx5Q1MSIj2oVxvi7JZJb8vlZd/R8ourvj6nbodK?=

=?Windows-1252?Q?TG/fTXUtyhL7Eo/9+T/rfbTumahF1YGWcUA2Kz7KoYkpISFcqz7lFtgp?=

=?Windows-1252?Q?S4b0nyuXF+eBgyTnbeLr8/cpAE38B21qKAcOtZDTcQ0sJV1ANKeepIZh?=

=?Windows-1252?Q?DaQHJqMi8gT2fih1HaGoXjNQ9wly+WtUt90HflSS+PGRin/Sm5GJYMv+?=

=?Windows-1252?Q?X8q1IWE5Lsx63g566kF5X1XK3fqW9nUALnkgwCLhLF6ExBdexo6gSqS8?=

=?Windows-1252?Q?BWV+J2kVQViWaLQHLyKkwa9+T7BY3uz4SJwWu7MkswU0YJWvZ7zPLz9b?=

=?Windows-1252?Q?kjUslRwmG9mQ2S4360WgxyjTFpvoeKKou3hi7Nc+x/fpF6dHJYInSqDJ?=

=?Windows-1252?Q?3lfmAGVRpf0/uozJmQDT0iiHgljSsfg3twaxk2gPv/v2uC8KlwR73JSM?=

=?Windows-1252?Q?1+dTUjPR1fCUcFpS7BVw6wJdWYyqhJ8qVkksoeEggUfWmdYqqC4d0cUu?=

=?Windows-1252?Q?mkQ6XlkzdSdcEkCLaJsROa67D6aykx1tFNikGgCw6lTlqrKvYbmIpPm2?=

=?Windows-1252?Q?J7NOEizFhf36zxKeZqpxncybJV2QMNPOz4Vcf4DGXdk=3D?=

Content-Type: multipart/alternative;

boundary="_000_MN2PR07MB58402B67312C1356D710E641C099AMN2PR07MB5840namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MN2PR07MB5840.namprd07.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: d98ebf4a-a6ce-4559-d212-08de64cbb1b6

X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Feb 2026 15:31:55.5323

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR07MB8110

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Just a quick follow-up — may I send you the SEO price

list if you're interested? Thanks.

Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Feb 2026 13:44:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vo6CS-00000000D6x-1UZT

for dave@doctor.nl2k.ab.ca;

Thu, 05 Feb 2026 13:43:40 -0700

Resent-From: The Doctor

Resent-Date: Thu, 5 Feb 2026 13:43:40 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southcentralusazolkn19013040.outbound.protection.outlook.com ([52.103.14.40]:48987 helo=SA9PR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vo1ME-00000000OTK-1OpK

for sales@nk.ca;

Thu, 05 Feb 2026 08:33:37 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=hBGAGPh+KvKkhatDZr6LZYKf2dawtNMqai5CYBZQ0D4+Ue5Q8AHbyJgWtX1GA7Hg6BovsTDmrJFWkjvB8P1kCduHkn0k7oS8C8sh8A/MUtz4BReM0HmZyxLCfR8H+mWJIJSECmLZpsDDbN5di6wcNni+gOl1KOmPPwXH7xYCUTNPbd1krr+vOnhbvlTjBNBh3zbRmUOiJk2vcxwIyqACU6cjneVrd0xiGh8ClmWfrqIYODymGTo8mY4RcVYaPXI26ASgGtA/fWmYGrtKslPWmjcvQ/hEXN3zlXn3kH01VzHsnR8EJ0tTFbSTjlQQz4uzXMoCRWWEE3BObYygt7xWCw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=eIBSvAFD3bOM9kMAfyMywSzjj+0o7uUY34OovN3Pr+4=;

b=spA0leYCcyP1BqZvxbmKcfYP+0EGbtJoaCruGdfsETGUfDG+O50E7tPrkAGSTNJuE+0K1M/FsmhWNwDEVEgpGlUz1ppqowFSJF/cjejnRGAvNqlO0+VJF7Gt/yh8BooVV69u8sPSnbJM8xTRTmDxGmYV0Hjr8jyUNzpn/UZwtOD3/U02XXOSFnNjx7X+DItb0DKYkCqAUabnxbATdT/iS6oxf6J2eeYv5gh8bT7s8iNIa1xFDWOunoywv6fO6AMHSXW0f3IQQdOho/BMP7b6LRdO0KI7Ah2SVD5CDV/F6vn8KxKLRaJGiwcF7HGt6kEO7+UhHJ4dqc10GzRFO7cixw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=eIBSvAFD3bOM9kMAfyMywSzjj+0o7uUY34OovN3Pr+4=;

b=fPk8Gm3kCCbGUP/SM0WmQY9nImsVfzZ2oOL/EFRBYewQryYJ1oN5gwNGNTliB1a1jb4UO6EOY/8evjXMSTI7TC3weD+6IwE0Of5M9EJqI7JgDbWVAqLr1uBDKloNZ95EeRxw/CLh2eAQlG5uCm1N5vIppzCfO1Je3HvD2ZPLw98MuUQve3D4EweiecJTbPavrc+BYDkgCRUzLO/WXnml61vuAcd8M+Jme5z6fpB38JpG3BDsIdgk0DSB6b3SWGkojkpQjjxICElqbbsZs41FxH7QPMNeqG1cK3sAYlacNur7hGoq8ei0wYvJP4YyhCNVFUcfU/71j08WIju96f5rrw==

Received: from MN2PR07MB5840.namprd07.prod.outlook.com (2603:10b6:208:ab::10)

by DM6PR07MB8110.namprd07.prod.outlook.com (2603:10b6:5:1b7::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.12; Thu, 5 Feb

2026 15:31:56 +0000

Received: from MN2PR07MB5840.namprd07.prod.outlook.com

([fe80::1b2f:6ce9:f2ed:4539]) by MN2PR07MB5840.namprd07.prod.outlook.com

([fe80::1b2f:6ce9:f2ed:4539%6]) with mapi id 15.20.9587.013; Thu, 5 Feb 2026

15:31:56 +0000

From: Samina Samina

To: Samina Samina

Subject: Re:

Thread-Index: AQHclcqci1ucg1ES0kqx/CxzrdxfQLVyaskogAAAPUCAAc70aIAAA4SE

Date: Thu, 5 Feb 2026 15:31:55 +0000

Message-ID:



References:





















































































































































Web/SEO/App Spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:d10:53:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:d10:53:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:d10:53:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:d10:53:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:d10:53:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:d10:53:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:d10:53:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:d10:53:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[52.103.43.72 listed in will-spam-for-food.eu.org]

[52.103.43.72 listed in will-spam-for-food.eu.org]

[52.103.43.72 listed in will-spam-for-food.eu.org]

[52.103.43.72 listed in will-spam-for-food.eu.org]

[52.103.43.72 listed in will-spam-for-food.eu.org]

[52.103.43.72 listed in will-spam-for-food.eu.org]

[52.103.43.72 listed in will-spam-for-food.eu.org]

[52.103.43.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.72 listed in dnsbl.ahbl.org]

[52.103.43.72 listed in dnsbl.ahbl.org]

[52.103.43.72 listed in dnsbl.ahbl.org]

[52.103.43.72 listed in dnsbl.ahbl.org]

[2603:1096:d10:53:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:d10:53:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:d10:53:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:d10:53:0:0:0:5 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.72 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[fatima.seoagency(at)hotmail.com]

1.2 MISSING_HEADERS Missing To: header

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.72 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} SEO Proposal Cost Agencies



--_000_KUXPR02MB8853204D327C11EF6660BD179999AKUXPR02MB8853apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I=92m Fatima, A Facebook & Instagram Ads specialist with a decade of experi=

ence. After reviewing your online presence, I=92ve compiled a SEO report wi=

th insights on how you can improve engagement and results.



We propose a targeted SEO strategy to increase visibility, traffic, and lea=

ds for your Property Management services.



Would you like to receive it? "SEO pricing and packages"



Best regards,

Fatima Sofia

SEO Director | Head of Operations



--_000_KUXPR02MB8853204D327C11EF6660BD179999AKUXPR02MB8853apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








, 0);" class=3D"elementToProof">

Hi,



, 0);" class=3D"elementToProof">







, 0);" class=3D"elementToProof">

I=92m Fatima, A Facebook & Instagram Ads specialist with a decade of ex=

perience. After reviewing your online presence, I=92ve compiled a SEO repor=

t with insights on how you can improve engagement and results.



, 0);" class=3D"elementToProof">







, 0);" class=3D"elementToProof">

We propose a targeted SEO strategy to increase visibility, traffic, and lea=

ds for your Property Management services.



, 0);" class=3D"elementToProof">







, 0);" class=3D"elementToProof">

Would you like to receive it? "SEO pricing and packages"



, 0);" class=3D"elementToProof">







, 0);" class=3D"elementToProof">

Best regards,



, 0);" class=3D"elementToProof">

Fatima Sofia



, 0);">SEO Director | Head of Operations








--_000_KUXPR02MB8853204D327C11EF6660BD179999AKUXPR02MB8853apcp_--

Web/SEO/App Spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Feb 2026 06:27:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnzMy-00000000Ipm-1c52

for dave@doctor.nl2k.ab.ca;

Thu, 05 Feb 2026 06:26:04 -0700

Resent-From: The Doctor

Resent-Date: Thu, 5 Feb 2026 06:26:04 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013072.outbound.protection.outlook.com ([52.103.43.72]:9661 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnyXF-000000005vu-2BiS

for sales@nk.ca;

Thu, 05 Feb 2026 05:32:48 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=bAVtBUrl73aGmyDI3o+iVgWMGNUstq8f83qQPPUNzbDo0FMdZBA0bt2WPp/dlbbo30xOmYWIo2jUMrHjEeP174mx6Ct8A71WF6cUiQq1ptf+B2WeJ9uLPhfCXHeCiCwxXXG0+Pdq61CNSEqPAkPYa2zk7ErWX+H11n5QiC+ypqHyNaqPtlK5lWZHQ6LfxJ4g/flgSpsDBhK1IPR0iiHfipZB65c4O2f0lnL/tCGvA4vr9qbbL6Elaze2tIcXp2FThWsdS2fSsCR0xkOIUq+zngrxfXPpnrc5RNSbkrflqjpNO/oksq7h/WX36iv3yG0n1sWmcuPw1M26XWCxt8GfgQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=CX9k2mOM+4svackyQarkGTATxx7g/zih/rhOT1l36p4=;

b=SD76hBVOeV1swMJrFghLK+bYGjIWQBOfSPI+kMYZ4tM0CbMiMtAAQhInb80jwTbYILilT/ba/s3q1Viqvu30UnjeGX7gA9GMTgbBEOsVAnOhAn2YDXNzjw6zM7RfMmlA4Gh3a4xX2dKf87tSMa03n3O41Ii73DOXaxkSIoAJo3Vh5dG4Vjg9Mi9qt+HLR7QCE8mZWqhVMEHml07dXtg7DENVmk6KFTkPfQi5x9ldzFXwzWavnB/OxZg/lGz11PuUqqbAkkU2rex3Rn+GYMOjwltFKSWWIDNxjzT625gm7SkJSFFf+qIbdHr3eEJm8hnosvFPm7ORZMSAfi2FEUuLRw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=CX9k2mOM+4svackyQarkGTATxx7g/zih/rhOT1l36p4=;

b=GmZrkGtPEKntAkfI2eOI++rICThyLN2xwLhZlVw26SWfD2ISfYSKajrDa18te2j0SrC/XFBBdSwKT/cAorjrJR+e/7ZLQ50q1Cn7mxZAuUaWc66InxJiZe5DF/dys+psyJKkUodh4LQePxdcYjs1dPRX7OHIPCwJSCkH4Gk/O5hopSdaiCtazb8EHuW7qkfPI25PXsJbW0A/y0wcaSUgSh0YTdCWExYHzLZQhl9u9pPP7c6ETqs1zo0DCtk94/Ujk8JVleZ9RUN+CE63Z7w3fWWvRdfZS5VO+2jl+J5unzcOJ3ScvO0kmYgUGOBy5KZOptLVID15JzHWuCYK7PTutw==

Received: from KUXPR02MB8853.apcprd02.prod.outlook.com (2603:1096:d10:53::5)

by TYSPR02MB6447.apcprd02.prod.outlook.com (2603:1096:400:40f::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.12; Thu, 5 Feb

2026 12:31:08 +0000

Received: from KUXPR02MB8853.apcprd02.prod.outlook.com

([fe80::48a5:a66:cb8f:c87]) by KUXPR02MB8853.apcprd02.prod.outlook.com

([fe80::48a5:a66:cb8f:c87%5]) with mapi id 15.20.9587.013; Thu, 5 Feb 2026

12:31:08 +0000

From: Fatima Sofia

Subject: SEO Proposal Cost Agencies

Thread-Topic: SEO Proposal Cost Agencies

Thread-Index: AQHclpsZJhUClQ4SfU2YrvY7XQ2fBQ==

Date: Thu, 5 Feb 2026 12:31:08 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KUXPR02MB8853:EE_|TYSPR02MB6447:EE_

x-ms-office365-filtering-correlation-id: dd486846-fc0b-4a4d-e46f-08de64b27084

x-ms-exchange-slblob-mailprops:

ScCmN3RHayGKAlIIivN7fIKgPET+ZtPoEd14OSdccoLGuZdljVrPpTAY/rflAdw6YoIoOFv5UJIXK4pvKQ6pmlfIn90jtmMHBKcwSI2kbBDW6wXSDijfezLL6xWd7XNGUFGmArVrYT4m4u6RCwFgHCfcZGxTTsZ7IfkuXmxg2LrRetaONUc0dhoMcCa4jQC+80l8LWfpSHRvJKhpLiDHtSCPXBtZabxG0mctmcG6kUSFaEm7mT7/8fk/ciq5WA85kz7PIFqx89Orr2qyX/hRr/3gzE60RdMSQr+jU71Y72KUJEbCN0o7eaT/DXDIt0FuWruCF3b8ulcCLf2LeatDoR1N4nBkAct1mHbn08owpU7Qgv1s6452PWPfUvc1MSMTnMf7Ov4DctCqa16FhQ935mw5aRSsKOaIODYUJcqXFE25wx9O4Si+KikVEQ51hp7kiV3WTtoNvoHDLEuxr3mbbOrgt5AuFMwpCTw7aI9FGBaP/Zw2NoWzoYaQY17pQTJa38MRokMq/xpTB26EAN0/h/nWqIanjHCLU/rX1Cg4sU581rfv3wuGL8OIalseSinBDvQG4GDepBduurFm0u/byVZLU5FQ0w3ZnuLl2sDl1IS8YGl+fwihOuBYSYBWgRorvEksjr4QDj7jDaXqq41EHgqIOk/lWdQmTvlu2uBcjoai/zsX/VHoWpRqGV+wq0UVQsayE+gkirIgQU4+rGDXSdx6w7IutIdY8xdn626+h/M=

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|15030799006|19110799012|8060799015|8062599012|7042599007|20031999003|39105399006|461199028|31061999003|39145399003|40105399003|41105399003|440099028|3412199025|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?Affj+6ZcPcpefNqGGdk7ft+54SwUbHoY1zxY/lLIfGCbc9P5xwxtPvCe?=

=?Windows-1252?Q?qZIrGAt/PSBRo9XMP9Ev+CpoqWN5C2wtnBc1VS8lsmAw8Lavdu/0SAED?=

=?Windows-1252?Q?7eXkAvUPAkx+x/FdJcuVBQ9EfoFCNr8JxImj5Li8om8xHkgOgSpJb0H6?=

=?Windows-1252?Q?s9WrKYFtodWV0QY5co6TWQ8R5iH5zMqF9ty5hxhMRC8GKDWlzuX8rrDM?=

=?Windows-1252?Q?IP5TMWpkORaiTcc1X8/KlbHGVUcFneLtaMygdQjbA1H9v5VYmkAE2Gw2?=

=?Windows-1252?Q?ZzAkdIOw22TSa7IQIJYeeQvPgC3aOGkeEj+l/opMb3EV54//6kBunpa5?=

=?Windows-1252?Q?sy7rSpSoweXkemsx6V7uYnHTF7CXez11IUSgC/b3aCUtkJt0Q/0vus51?=

=?Windows-1252?Q?zaBOpv+O6XzyfGTVU7Mi0R5yWZNQKLjfLXoxNletGwF8+D1XOc58EkoV?=

=?Windows-1252?Q?H79iNdHGJdEy/qEGexJMgLrmvRb7mCeC8XpB5vZGgrgjriEugZ7WOmsc?=

=?Windows-1252?Q?owGKCliJsRdf9xRsJLyYqfk0E67YvUkc6C3z4kQrNRJNz4CFeS//DJsb?=

=?Windows-1252?Q?T3GVjCF0Mo1JbCcsmeojFUtwWRIsOsCBa4SaDufU+GMbx9Koie4raXUs?=

=?Windows-1252?Q?Ueku46GTW5xcsyVOR/lBRx9aBSBt8zBUDaBJZbE52tpfQ66RRyLWXWHH?=

=?Windows-1252?Q?qfpJ/ql0p9aarYFQQQrYQWcqtQBQ4iQ6dyAK7Jcy6yf8dJRin7UXxwcZ?=

=?Windows-1252?Q?3G18GLoeZKzq4idds9xMIEhFGILXsursLbQ6jQWk8DisR+5dewrJfxCo?=

=?Windows-1252?Q?1kVWVkmeaFcyeZZ/sPc1KUBUEugTV8K1RCOKkmIOW6iWVEFrtKocIArR?=

=?Windows-1252?Q?X0rG9XVbUbdtXnbOoQB64wRU6uSV4ok9IJ1hXP5AsQpLDgGOOVmTALvL?=

=?Windows-1252?Q?3SUBiLiCHaSKOhsh2a5X/c/Utu9vIq779mEA3IMofA3DifJQ/Sw6yL2I?=

=?Windows-1252?Q?Vh/0qDFYELTfmt7+6+6MnHFAgZxNIhMtd6LxvGv0v1/k+lc6hUdjIGhv?=

=?Windows-1252?Q?qFrcL1TrkDFjEbGYm4h+9gPmNlvSVd/mmtJkfu64ra2HbGMJaYRJc5Gh?=

=?Windows-1252?Q?UYO91k2qB0uJxXMsQjQprrqIb5qeULx7zW1h73CFp9TJJFuf/rEKFQri?=

=?Windows-1252?Q?1U9OFxp2GRB5FjyTDYsS2LzMLRNVek44rvjLGvPhW+dGTFzMh5QKhBTz?=

=?Windows-1252?Q?y8+pCaFIIOm0w1tNBeLrzc/9dB2HCc+R2JzpWyAUq+cvJAMflPV4bIuD?=

=?Windows-1252?Q?LFEelVwmPaqENlaA9QjwIyh+13gKo9lj97R1SngCqEG8P6TGIVflWkxA?=

=?Windows-1252?Q?HcbbX8cdms40tqveDeYWehfJ6k94VEq0vnM2Ylm7pNjmiz+1xPNbJJcN?=

=?Windows-1252?Q?+mBjEcKVvOIu8u5yCKRqpg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?nbwuUCCt6A4kcwJOijejs9ZX0bolAoqj32a6ga/jjlFF8VcdZZfYwGye?=

=?Windows-1252?Q?bpQBofNV7vyiVhzygQoGotsQ/Ntq/vUW+TXNraRMJ4W0YLxvf1jn3wVL?=

=?Windows-1252?Q?tLxXh5cWS7PWI3U9CbCuvHkl/rlFZyVq9tT+uE0amGRs9gFIZWBbpaMX?=

=?Windows-1252?Q?LcKkLpF74nOYx8ybUXwnNCbYrIZ7ADM2tprKwgHYVG7TcUj5Tl2snyW8?=

=?Windows-1252?Q?l8lyMhBL2G7o7IS2ajrbrWJmOXOraYzQgFAY76bL/zyZ/GkkRnyUaGXc?=

=?Windows-1252?Q?rsW34w0op7Dyq+i1gWHo9a6+A5aKTXuIB2I4ENBN8FPgNMfavC1sOKN4?=

=?Windows-1252?Q?/wKWVgYHeguqkZxQTakaW5AhDBIqIMAllEE615LDAh6ndDPU27OT9oWU?=

=?Windows-1252?Q?k7OcHHQJP+y2rz+f0Rk7bXN3zM0sNm6tEY3tWhDYE5wJvtufrpl2RnfM?=

=?Windows-1252?Q?zC0S9uyJIatRcIH84i8ZPZRkpWMFzNglTQ9M0luZ5EpLjleqjZ6YoDIT?=

=?Windows-1252?Q?DzS1fNXPlu/QtiX6ur6hgm7vAchO6ZUyhzJme6mMqBkvisbVLS0jB+Pg?=

=?Windows-1252?Q?baEHHH4NW+DhSphcjb3IOcCLuXhkyoT2BmUC88zPfaCWLz/HGE5IZuCr?=

=?Windows-1252?Q?BE7SQdVJtSumHmn6KQR3CDewwChc7b8HDgnde14jdkJB1VBHzoIxQ3El?=

=?Windows-1252?Q?MxtN5UBGtDp2FiF43M6EdMb+8/Gm1c5pRLHRyg2LIHKZVHaD+j0e9xm6?=

=?Windows-1252?Q?b6LyOWzcog6p7HvDYvpYzX8IXXyqf1+YQe69p5Ckl4/qrp+ORGmqr0/0?=

=?Windows-1252?Q?nPquVG84D3ipACHEVDgiZIMXdK/HihWwtsKa+KYNWyD4O8j009AlUFPa?=

=?Windows-1252?Q?c5EpZ6IbXBafr7RpDL6DKXWTyCak3/VgEFMXTOYnzcDMGtB70BPbAEfM?=

=?Windows-1252?Q?YvRPSSgqALXv4OgJJPqR0uPyP1vDSNsFpJaPPQv8Njx2UFDECwduimIH?=

=?Windows-1252?Q?S+u6rWh8wX/aeI1yq5mlM7buwRlIywLZd+yQV1FlM8PPpi7/klu37BDl?=

=?Windows-1252?Q?2CknG/jr24iSQihQfvu9bYq6ZNYMi+hVnmG7TzOYJxMXG0oqQNnW+ryn?=

=?Windows-1252?Q?LHiQea2qOZVZGrJHiA0NvaJSmlFdstpkAddsxo+1qoxigVTPVuXve+if?=

=?Windows-1252?Q?7K6lYwvKVvfi4UV7AZHa9RS5h57/IJmaNQxL+/Qni45EcKbfoS3zM9rh?=

=?Windows-1252?Q?eolBvPyO/IXg0nV7zAGhuQr6eZdiIbJ5PBOIyg3yIgE4EHpvbHTgDy/o?=

=?Windows-1252?Q?3s47HRm9/uSe0NMyjPqnQiK6ewwu2rPwBnU2SyX2lSsy4TruWTOK5KJE?=

=?Windows-1252?Q?Voz3yBtWXvfgvzs6Ekv2gWOjityxBHBuM6IqB0HT/UblSlGaPjzk/b4U?=

=?Windows-1252?Q?0nkZ5GnIuOGFL2ZRLOLhYcQ5klGfYPan0VqG1km8dkeQE35oqAsB4J5y?=

=?Windows-1252?Q?5D4IAte1gApnBW2jutgIhYPp6tWLxYasSfGKCBQQ3OoVYVYovCqOwkDZ?=

=?Windows-1252?Q?3JIR6C0wRFmUtLvl?=

Content-Type: multipart/alternative;

boundary="_000_KUXPR02MB8853204D327C11EF6660BD179999AKUXPR02MB8853apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-31b93.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KUXPR02MB8853.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: dd486846-fc0b-4a4d-e46f-08de64b27084

X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Feb 2026 12:31:08.7447

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYSPR02MB6447

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I’m Fatima, A Facebook & Instagram Ads specialist with

a decade of experience. After reviewing your online presence, I’ve compiled

a SEO report with insights on how you can improve engagement and [...]

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Feb 2026 06:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnzMq-00000000Ip0-3jyM

for dave@doctor.nl2k.ab.ca;

Thu, 05 Feb 2026 06:25:56 -0700

Resent-From: The Doctor

Resent-Date: Thu, 5 Feb 2026 06:25:56 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19010021.outbound.protection.outlook.com ([52.103.43.21]:49514 helo=TY3P286CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnyOT-0000000034g-2ebq

for root@nk.ca;

Thu, 05 Feb 2026 05:23:44 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ECYOuvQBU7z1rDJOW4zHKZwn34a6Bq1eWEtrVS0Rdf0JSQ/hqgZ4IeI27DadUDH3Txg3yStp6LNJQPHdS+FOm+l4pnbiw1RN9NcgZ+1E+r494IrQZrzjjykGpITIMQsYnRhWyVdUdZYpzeEoKV+Km3eoP7+kbwJUxbwdfYbjNqcxLQNdJ3DXe1lGUvvWU/3vFiFCaXlWTwOTOIqbj3QQFIPQBsmgb11mzqHDXVyOtXtRI9arIQcgEi0ingZhn3LyqnZINp3Y4tAXY2DG20y/7bguCBUZXMvBr0x+uZSz4dOGc1O1kELN1LT9oLMOi2XL1BEDhSZMW+m9rADb4XHEbw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KucXEz36VlXHf3ezw0AE+q+VTGgdUyV+GUqPlKXx8YY=;

b=FlUahdBRkQGSYnRLweTrNE1UwulwDM+Ya26mc+GrmNLeesvUps5oFGkC0tkjPcJYpPx32qp+je6meK58tx8g0L/GuN8L4oLNZ4mxYFZq45kbyKQZU28FtwzO7zWSlAChLpiud70+Dj+j2a8aVpEaxj31VuLGzDf+hXx6DsuwChA8+ZzioSgF2/GkchRrraBYuCEOjYGHiCnYLbFo0kt8rBSROEiC+Xysm4vhnERCdZ3FSNlq+ZfrUdVPBl/3xgKaDMrYVwk3Ib9BCJMymRCff52zLpgMyWjZpKGixTzeBOyl7ZJjmdzRe83enoEahe3PBMeDEj7GA9Mg0XUptzPRPQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=KucXEz36VlXHf3ezw0AE+q+VTGgdUyV+GUqPlKXx8YY=;

b=fmN8YLMwk6nK5tN3RnSiU0b8/G23TCb0BwKl+9iuXSQ4Hm4qORcJHmEylnyeK3PQP+Jm/HKRXiMeF6mk0xWrGYfI5p6UK9E75vyQ2ovcTwpP590riSm2Jh/mZb133abRuFzRk/fkMZgA5XqrIrQax0NZlUIXSfVuBSnhnRBzpqZp3pghwvido6Me/pj1tvndfcVKkEK960aWrBsrpritgDo8/NLEWR5CXqcRsxzhb2cYRAA2PmldjOzkc9UzPysEnB3YMzzHdsalT/OyHL4j1T2Oh4eUDEN3AACsFHFSf3xVg+QQ6KbHAqG117/ajH7QMPjHPeJE3CX5XTk1oYVRXQ==

Received: from TYWPR01MB8480.jpnprd01.prod.outlook.com (2603:1096:400:173::14)

by TYWPR01MB7355.jpnprd01.prod.outlook.com (2603:1096:400:ea::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.12; Thu, 5 Feb

2026 12:21:59 +0000

Received: from TYWPR01MB8480.jpnprd01.prod.outlook.com

([fe80::b6ad:7a5b:ff0b:714b]) by TYWPR01MB8480.jpnprd01.prod.outlook.com

([fe80::b6ad:7a5b:ff0b:714b%4]) with mapi id 15.20.9587.013; Thu, 5 Feb 2026

12:21:58 +0000

From: Irene Martin

Subject: Re: Cost for website..!!

Thread-Topic: Re: Cost for website..!!

Thread-Index: AdyWmcSLHGSDg7qsQXiDHPaDCDjHxA==

Date: Thu, 5 Feb 2026 12:21:58 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYWPR01MB8480:EE_|TYWPR01MB7355:EE_

x-ms-office365-filtering-correlation-id: 57ce74c3-23bf-4297-ec2c-08de64b128ac

x-microsoft-antispam:

BCL:0;ARA:14566002|13091999003|12300799018|31061999003|461199028|8022599003|19110799012|8060799015|8062599012|15080799012|440099028|3412199025|102099032|4295299021;

x-microsoft-antispam-message-info:

=?us-ascii?Q?mOmzqBimJBWaKjER+L9yvAk2yqLHWKhaxAPAEcB9JPXb2oJ6l1hIgUKXt23a?=

=?us-ascii?Q?gnRDRrG4TVu30LFfI+0cYGdltEyu1/15EuAMyslnVKiiLJKJjJElap0yRGxm?=

=?us-ascii?Q?BodT9gK22eL1nk8NopNMKRbYapjGB1imFB9Jz4hvmCTGwOyzZEzczW8J8jXq?=

=?us-ascii?Q?dZQ8KXeZ9v4mYMfNz+mJkdPGEvhfaBCgq1a/0WOse2SLeLW0AbCiovu68FM6?=

=?us-ascii?Q?2pXLsBmCj07k6tejPOO+4nS8nBE1AheLmtgi/PVMoekyTeLYcp45BbU6DcBf?=

=?us-ascii?Q?E3uUVrTXWV7KYx6uoPusReowxb20bFGbu2rPRKmxh2YShoLHxqQ+Z0zJaV1k?=

=?us-ascii?Q?MB+BrBGmSWVzARmbRouZI/9xnf8hS4+pM3FvLNaNUwb4D/gf8vdcEg0BveZC?=

=?us-ascii?Q?vqFljCHzD99lLdVHsCFqA6jKLL2onWBlHwFOoYYWoURiWs4rwF4SXpRjcEzp?=

=?us-ascii?Q?bzJ4oMBGkXGcDL1bEnP5OCHizGosFvObCXzsrqVtFxVRApRg3IwoSrQ+/QOm?=

=?us-ascii?Q?gmiInoRJ/R0pYXS+h5VQjTe+CY13BHBbJ2GWeysKwhqaerBXyDoy4yZrdwIH?=

=?us-ascii?Q?eWfjOSzC1W5BQJY8cT8S+eJMDXX8+L4FaasZtjiggAi/K9xWS1lgMzaxYLLq?=

=?us-ascii?Q?UIBQ8ZLTR0Vvt9/CNx6Mnl+axfTIC67DIFQUbvFHgeSy7gR/oBtIRU3Uv6Oa?=

=?us-ascii?Q?j8tlMTT+vY5UkznkSEt/QsEzanf83M/HLL8dPsZ1RS3SXzG9zpAa0uO9QvxT?=

=?us-ascii?Q?RYjJYBQNL96PDsN/1d+Qmgp3Vzz1Ss9FeZuLJNS4QSFkvr7XRTlRY891J6Vm?=

=?us-ascii?Q?iQT8IGaP5lQhbkCsx8MMT9WA3fSa1OmyF0bNPc98ixM91bDE1VzUTQ3mYqQ5?=

=?us-ascii?Q?qJ8lgoTW/UMFKG5ZEM3N8/Ivf6P6fnIt1Z2HeEIKuVQKgG+rcTXTYP6DGTe8?=

=?us-ascii?Q?/jNTwsoyCdoMLKElWQyrXUKwRLkfuinTJFE+6vGmNO2k+eLQlXn1afiA4d0J?=

=?us-ascii?Q?X+3O9KCxBWcAIq2cMOg97TRTk4zonQIq2zzjMhW9v+yzPpp+xXS8Fma/T0UA?=

=?us-ascii?Q?+QVQ10EJe7dN3yk6ve61Ccwwnc4gZnunNUZGGytX1nrr0ZfeTPpdH4QSKi8S?=

=?us-ascii?Q?BkqkvP6NIRTTT4d4B00nZf9eahoM1AgEFLAreohEkXZCNg9ky/gvKZhrR8TW?=

=?us-ascii?Q?Kfl3Za3tQwmlbRinUC6UX1VP11fgkfIdwRg9dg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?jkjCFnQ7zmq3nmg1H1/wp2AG9ero411ou+C5XU7d64Uj8h6t6dIDOoL6DmJP?=

=?us-ascii?Q?0RW5dp4Dm8ZBTmv5jVF1AbLTRb2WWcYVskv2WBwKYC5zYzujR9m8na3EUn82?=

=?us-ascii?Q?x9W5bj6hYIvWwyWax1e3jZi8J5LYSQgLQ7t4vsdNoQWj65hxRfSNQlT7YY2X?=

=?us-ascii?Q?xKXu0/FtHHqK9Bf4lfMsl9vRuZb72wGQyAyG7UNCE8tQGnkpYHIQikXndAZU?=

=?us-ascii?Q?6e/I8jLYGVPgrlLRiuAqmAePvCpMhz7NY5WVDaEeVpxFfbiYsYYM92zLsZ10?=

=?us-ascii?Q?e9DtfFXX8NYQ6uLJq2nHxJF+5lOYBcFOOwWX5jEiGN2jVO55m8XksJfqxrrt?=

=?us-ascii?Q?gGOCzgOCP4fQXPSquApBJyJlhZM1zGzEGZ8ZteRPwKgUYRxfl36+2sVUmimW?=

=?us-ascii?Q?ccYgmPnBuFsdJxBlue/ZK2TjHMkGR2W4NlxSzX8GvPo+CjraRjz+cMV25Juw?=

=?us-ascii?Q?WivcapjrMGoShYQwzegkatu7nalRD9NyqvRylJehAZGS2YbnLEVg6ObvQVza?=

=?us-ascii?Q?a3oFsHnGrddiLQLckgKeQQJsoWCouT+IzcOHL+fCf5fS8AQQ2FgTAUD7GYwO?=

=?us-ascii?Q?uMv1IS4IssSh8HkXvjHK/aAgfokNdBtlP1rEM93WLwa/qD07SRPhxdALji9u?=

=?us-ascii?Q?qRN5XhrUhNEhtRH+JIe7c1LEL64EoaAwOsQxXYJjxyOTICWAR4XHtnCxjwLr?=

=?us-ascii?Q?N9XUIxi1x3MLTdAbLBDV/EmbRdirROwHEUUgCv9qa8XI6bhE/rhwSrRGoN6G?=

=?us-ascii?Q?DS3RfdJ74pBxmAcluRhZwOSG8Y3D3msK9SqcpN+GqVFxpLDBBs0CyEsSpQlJ?=

=?us-ascii?Q?U+oX7YxST89Q0Qp/FxZHnjky7Se59nGK4BG/N++42TaWUjie/ZO3XnOG5xwn?=

=?us-ascii?Q?QlrrUNvw1lYlhS183EvtHepmvezyONnED9qaG8Rop9sbmKiLLFScjOUs92Vp?=

=?us-ascii?Q?7wKtuTqeYZ43Tc+Q/FESyoxEQdVIWe3ifJ238L0Gh3Y1UaKxgfTMMAPa8ERU?=

=?us-ascii?Q?8q9YsQctlaspfgoRbQ8M4UkZwuDZPAv12mgsQ5q1+SjZoQilS9iA5PpkvfSW?=

=?us-ascii?Q?txI+hwK9CK6IOrVE9HWwAKeptb5uD0zpenoQsV0IavCIGqnlQRjguRMVXQuN?=

=?us-ascii?Q?OXzekOUCe0h583ayOB3AuIu0qC0X2XI8FNiItG00eVQnJiZrOTwhGRu5VaRR?=

=?us-ascii?Q?yq7YSM7RrDCIcGW9D0/neGps6NXg+Is2+I30HrBjMsPQz1QI2OtjzSxJiGvt?=

=?us-ascii?Q?y8tqRZkFY1WvBvnr0756qB7HnmhZ7DAHJTi84f4quKynZOw5XvuLNjkDgkaS?=

=?us-ascii?Q?ogqWByoeGFS8sVLuEvRLEe6P2y6bTKjhkK8dCvsVNAwmh92PwLZ4Iz5ll6+Q?=

=?us-ascii?Q?3yptKqLGHiqmEPuazREWSBwN0P455ydRXjC63KSvHqFxa1jCUSn2A7PkhpSA?=

=?us-ascii?Q?bX+KXrjWfEXgbxkuw1B6KMkf1MeJAwZn?=

Content-Type: multipart/alternative;

boundary="_000_TYWPR01MB84807DC10B123753BC569F92BC99ATYWPR01MB8480jpnp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-3-msonline-outlook-96c32.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYWPR01MB8480.jpnprd01.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 57ce74c3-23bf-4297-ec2c-08de64b128ac

X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Feb 2026 12:21:58.7049

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYWPR01MB7355



--_000_TYWPR01MB84807DC10B123753BC569F92BC99ATYWPR01MB8480jpnp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,



I am a professional Web Design & Mobile App Developer, with 14 years of exp=

erience. I will create an amazing, beautiful and unique website for you. I =

can upgrade, rebuild and redesign your website.



May I send you previous work examples & price, if interested?



Thanks,





--_000_TYWPR01MB84807DC10B123753BC569F92BC99ATYWPR01MB8480jpnp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>













Hi,


 


I am a professional Web Design & Mobile Ap=

p Developer, with 14 years of experience. I =

will create an amazing, beautiful and unique website for you. I can =

upgrade, rebuild and redesign

your website.


 


May I send you previous work examples &=

 price, if interested?
b>


 


Thanks,



t;"> 










--_000_TYWPR01MB84807DC10B123753BC569F92BC99ATYWPR01MB8480jpnp_--

Web/SEO/App Spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content preview: Hi there, I apologize for the cold outreach. If your team

is still spending time on cold calling, appointment setting, lead generation,

CRM updates, or admin work, we can take that off your plate immediately—with

reliable virtual assistants av [...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:a01:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:a0:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.103.67.12 listed in will-spam-for-food.eu.org]

[52.103.67.12 listed in will-spam-for-food.eu.org]

[52.103.67.12 listed in will-spam-for-food.eu.org]

[52.103.67.12 listed in will-spam-for-food.eu.org]

[52.103.67.12 listed in will-spam-for-food.eu.org]

[52.103.67.12 listed in will-spam-for-food.eu.org]

[52.103.67.12 listed in will-spam-for-food.eu.org]

[52.103.67.12 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.67.12 listed in dnsbl.ahbl.org]

[52.103.67.12 listed in dnsbl.ahbl.org]

[52.103.67.12 listed in dnsbl.ahbl.org]

[52.103.67.12 listed in dnsbl.ahbl.org]

[2603:1096:a01:a0:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:a01:a0:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:a01:a0:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:a01:a0:0:0:0:14 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.67.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.67.12 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.67.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.67.12 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ranjittakaur(at)hotmail.com]

1.2 MISSING_HEADERS Missing To: header

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.67.12 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} RE: Interested in our pricing/package plan? Can I share it?









Hi there,







I apologize for the cold outreach.







If your team is still spending time on cold calling, appointment setting, lead generation, CRM updates, or admin work, we can take that off your plate immediately—with reliable virtual assistants available part-time or full-time.







Interested in pricing or learning more? Let’s connect!







Best regards,



Ranjitta Kaur







From: Ranjittakaur@hotmail.com On Behalf Of Ranjittakaur@hotmail.com

Sent: Wednesday, January 14, 2026 2:52 PM

Subject: RE: VA – Part-Time or Full-Time?







Hello,







Just following up on my previous emails—any update would be appreciated.







Thank you,



Ranjitta Kaur







From: Ranjittakaur@hotmail.com On Behalf Of Ranjittakaur@hotmail.com

Sent: Monday, December 29, 2025 11:57 AM

Subject: VA – Part-Time or Full-Time?







Good morning,







Hope you are doing well.







Please, could you let me know whether you are interested in hiring a Virtual Assistant.







Available Part-Time or Full-Time at highly competitive rates.







We specialize in:







Cold Calling, Lead Generation

Appointment Setting & Documentation

Research & Administrative Support

Social Media Management

CRM Management and many more.







If you’d like to explore how we can assist you, let’s schedule a quick call at your convenience.







Looking forward to your response.







Best regards,



Ranjitta Kaur







P.S.: Not interested? Reply “no” and we won’t contact you again

Web/SEO/App Spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Feb 2026 04:30:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnxXn-00000000Ibj-3Jch

for dave@doctor.nl2k.ab.ca;

Thu, 05 Feb 2026 04:29:07 -0700

Resent-From: The Doctor

Resent-Date: Thu, 5 Feb 2026 04:29:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southindiaazolkn19010012.outbound.protection.outlook.com ([52.103.67.12]:59308 helo=MA0PR01CU009.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnxHo-000000007V5-1jnC

for root@nk.ca;

Thu, 05 Feb 2026 04:12:47 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=nHetmJbfRibRbYnBC0Gyqn+/J9YtzIOnv8ETcXs65TNGnKd9JusHCOo+BBd7bon/tiMo4Vn8eNo9puoUNlx2tMCwTGKVB6PyEHwEf6SCAfwum883xcN5tAGSf0gUfPNapdyooomMlHRgZIq1bA/MG+o7kJrufC3SW9SGj+RJBoETKoltSDRZY2B028zFQj3A127zRikKh1Op0K28/sFI4oFPEnNHd1pktMBYq/lO4aGRFRHD3XZLHtm5sZ+2VCwUxKJxoEpRohPA+BTCyISTMxyhBKbmVtkBDdM77D86jERTfgX4A6rUUYtkfqcpfLXh5DmneU6EbvKQirBcO6XRQQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=eKoYPTsa1AV23v12/KWSvXvBlwAztOxNBpBVDRtJJII=;

b=mhQCj27GU4ukO4t6uqbXmhSfZAo8im+uSeDC9X42W4pK1RPBXaWgeILAmuAcWcOKwsXSg8ERVSccPLbk8Pc00Tp5DCTgqmMvo6Dvthx3g1LTtplIE2p9KtYmXUzSpXP0sHwQYG+/mK4r4viteE4i1cnGdbCOjHn/p29FOG6R8oPn0Y/dAZhzrIIrUJtHTRzZhd1vtgC7T+05n4e/Wke3k9epIUl0/I7EftPm1zqqPs/hOKpcthz3Ow8gYYAjY93RAWyLfEYNvlHcCjZlsISa/O9nUv5Vu+RiC49K4Qo9ohi8HBpAnAJ7B5exchVLWBeFzHSCMVyCOCE/bZ7Vf2OMFg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=eKoYPTsa1AV23v12/KWSvXvBlwAztOxNBpBVDRtJJII=;

b=ohQY6asakGjgHlWkKRTz/uUlOGycX1CG0jf4Rz1I3LuypFq2mcS3x9/iqLjQK8/SeAB6CQJm3bC3O1Q1pG35CixsSgXAGoyv5xyIxcljz1zlsipzbUfjHmqPsiy9mK6vvP+ho+9TfrHs//2hgDsL7pjmgUR12hamrB4mjtiXfCKfjDXsKhl8/GVkLgWYm4ZKch1LCEuCh/PYbtHiG4XLtxETCmSqhGTW+ngQ8nyfvgY54sv43vSHyjuxwSzg7O5s79HXAWqE37khfoV8g5wKT8w39tUREkFTUVD0W7uZIBepVUASvQ0NGQ+DWHMccqYR0JnR2dlXcPuItJa/Uufifg==

Received: from MAZPR01MB8567.INDPRD01.PROD.OUTLOOK.COM (2603:1096:a01:a0::14)

by PN1PPF8C6B8F4BE.INDPRD01.PROD.OUTLOOK.COM (2603:1096:c04:1::41d) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.14; Thu, 5 Feb

2026 11:10:33 +0000

Received: from MAZPR01MB8567.INDPRD01.PROD.OUTLOOK.COM

([fe80::4ad5:c58a:e385:fb4a]) by MAZPR01MB8567.INDPRD01.PROD.OUTLOOK.COM

([fe80::4ad5:c58a:e385:fb4a%5]) with mapi id 15.20.9587.010; Thu, 5 Feb 2026

11:10:33 +0000

From: Ranjitta Kaur

Subject: RE: Interested in our pricing/package plan? Can I share it?

Thread-Topic: Interested in our pricing/package plan? Can I share it?

Thread-Index: AdyWbgAYAhVzMoCqSzy9s0Brq+Bbmw==

Date: Thu, 5 Feb 2026 11:10:29 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: MAZPR01MB8567:EE_|PN1PPF8C6B8F4BE:EE_

x-ms-office365-filtering-correlation-id: 0e6597ea-f13f-4e01-3fb9-08de64a72e41

x-microsoft-antispam:

BCL:0;ARA:14566002|5062599005|13091999003|461199028|31061999003|41001999006|12050799012|8022599003|19110799012|8062599012|8060799015|15080799012|440099028|3412199025|102099032|13041999003;

x-microsoft-antispam-message-info:

=?utf-8?B?dDZsc3VBeWJGMjdaUXk4MnY1NlY1RUxoSmZNNVlZRFRrUS9tK1A3OGVjVlBo?=

=?utf-8?B?Z2RTYXpZK2NCQnhlT3ZLNXBjK2FQVkdKZXptYnQyRDVubEZrTkdza1o5bjRT?=

=?utf-8?B?WFZ3WG9yOFlLdEx0TkFXd1UvSXJFZ2JYOU9XRXdHQnhCRnozTHhBMEhkVzNv?=

=?utf-8?B?RXhJUEdtVjJXTmFOTnA3NEswa0dFYmlScVZWelllY1RtcklEdWJXQzcxZG9G?=

=?utf-8?B?dDhJazhiNHFTelE2WUtiY08wZzVoNGt1aEtNQXp6T3Baa3NWdjU3MWcrRi9Q?=

=?utf-8?B?QmlMc2Y2alM1Mk1tMUlLMjJYQmF6TEczT290TGgyN3JGektISkdPQTJpZFhE?=

=?utf-8?B?K3BLcWhKOURCeEoxRFZtc09BQzJyS0xTYmFmb0RiTTBOd29BV1J2d2RiOUxR?=

=?utf-8?B?Rng1Mmpqck9ldXQ0dlBrSEpSTmlMcGdFVHR4TEU2dXltZmJrcnNlUmd3QWR0?=

=?utf-8?B?TDdzOWphY1ZKWDVxaWVXOG1aNXNwdzB3czg5em1yK052eDAxMGVOY3E0bkVW?=

=?utf-8?B?THd2Rm02cXI1SGJaZFVXOXBtZHU3ejFNL1RwdFptaVZKZUorNGtYelBzZDF2?=

=?utf-8?B?akI4UTBITXY1M0drWXQ4dk4wMXdPNlZZcmx3SDk4TWFtaVZ6ZE5HNjZRZklr?=

=?utf-8?B?MVJiM0xaeFRRTEdhdDJBWFRHYVhHeGlBU0tkR1FRSGJVNytHb2U1MzZpRnB3?=

=?utf-8?B?Z2h4aTRYVHFjRGFwU3lCNDZPcVFlQjN2UlJBT0RrdVR6WWhidmp1QXUvMGFY?=

=?utf-8?B?cXgrSVFLeXlmbGdkSjl2bFdTYUJmamJoM2hLNFFYbFlwblAwYnMxZHllY0Rh?=

=?utf-8?B?YTkxODVDMHlrK3JWRlROSS9CVXRLUWJlTlhISXl0T2hVdVJiYWpQQkdHWVQy?=

=?utf-8?B?citLUzhCM0oyV2pRNHBPWEJKRm04cG5HVVVhTEJSR2tmbThBNlhWcFdTRldY?=

=?utf-8?B?ZjlUdEcyKzJzL1FpMXBZQk9Pc04rRkdnTm9iRjZQL0c0YWpxR1V3NFpyeEJ3?=

=?utf-8?B?VEQ5UTM4b29ZaS9MYkF2Uzh6MzJEZ2wwZmZXdUNPS1VZamE1ZWZNMS9iSCtW?=

=?utf-8?B?NlVJVE8xanIvZm90bnE3SEhwU2NXSU9QOWVKYzZVbHBvTm8zUStNRGFiU1c1?=

=?utf-8?B?UzZUdE1hY25ob0RQZWJmZVF6SkFjMStGMnplc0xCSHF2MzFUaTNxdU9zQk5H?=

=?utf-8?B?TWlqSG5MY3FJWWtlUlowU0d1ZDlWQysxQU9xTllTaXFPL2c1Z09LWDM0OE5l?=

=?utf-8?B?TXd3eHVoVGN4VmJNcmNqRE9mejg2UFRkdWZtNWkvZjcrNTA0STZkZ3ErbXl2?=

=?utf-8?B?Y1ZUZFVpOGZ4YmczUFU4SDQyVDFPMkY0YzBtWjk3UzJJTiszSWIyOWlXM1NV?=

=?utf-8?B?WWNDR1hQZ1ozSU1LOXp6WFBhQ3V4eHUrMWhaZEtFeVN3RFBIZm4yNzU1Qm5E?=

=?utf-8?B?MUFwK0srVGp4QUhBZXk1b1FVUUFLNE12dzYxNXZyT0FHVUdyblJ5OFlNTUQ1?=

=?utf-8?B?SDhuOUo5WENjNjVzb3lTVFJEYi9nM2M3d1IzNzNvQTdqWDMybUdVNCtEZkFT?=

=?utf-8?B?TUZBRXg3MG1FWFBTWktOaEJvQlRoNU5kVDcvNmR1OHNYNS9ReFE5Ums0ZHNV?=

=?utf-8?B?OFFSV0tkL25lMk05Qmt2b0RzZEtUakVpMFhHNDVnVk1YUi9sQjlIcGxEMEhZ?=

=?utf-8?B?d3ZiREFPbkg5UFMwbWhLVXlJUUp4Qisxd0VSd0NjU3czelpQN3Z0Si9BUlF4?=

=?utf-8?Q?TwMfTVXWnfvqkbCWDc=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?MzZoNnJzbjJXUHlXa2pLNVFWMTdSMlRYUG05ZGdtYi9SbFNsRi9Wc3ZTWS9m?=

=?utf-8?B?YXM3WGZmNmJSNklSRlBFdzRqdzJLWWk5bVMyd2oyTCtYbzlUVU5kMnc0ek1U?=

=?utf-8?B?NWpoR0JwMGR5Y0V1dk04M1c0aWtmOTQ3cmQ5WkZjVHFSY1NSSSs0dEIyNGo2?=

=?utf-8?B?eVd4Y09UTENaZS9Ebk5rNldaZmxndzNKendueElEYlNBekF4STBHdmk3Z3ZP?=

=?utf-8?B?Z29MK2xRTUt6Vnk5cFU4TWxMcTFORndOT0wyMS9sOXl6dEZrNVEybnFZbWJV?=

=?utf-8?B?V3lKc2kwNC9URGMyYU1HUDdyQ2doRWdVQkJEbDE5eEZRSkxsVHZGanY4VVpv?=

=?utf-8?B?U0IwYWFod0w3ZC9STUF6YUw3MWI4dUhGWnVrNTN1cldwTll6a2FoT0dicFJh?=

=?utf-8?B?SlZGWW5QUlhJaG14T05DK1RYSXBrSDB5M3JTTGMvbkpYWnhyQkh5QlZubDVG?=

=?utf-8?B?MkhhcnRsalFvc2hvaGEzcmR3cEhsRTREcWN0Qlc1N2lzMFB2blo4ZEpPWDJy?=

=?utf-8?B?ZXE5NmxkKzJMRndIb1k0MTk1TmNISWhLcTBXUE8vSER2TjBad1A0T1g4ckw2?=

=?utf-8?B?WXFSMkxZeG4vbmNGT3ZhRVVsTDRTV1JvZDJ4OFFqaTNKamxYSDhVSnQ2TktI?=

=?utf-8?B?aWJxSHFSQlU4dTBiZVZNTFJvbmRhZk9Qd0hrSnRSREo0K0gya0hNVnlXMEla?=

=?utf-8?B?Rklhc3h6bmZDaFk1eXE5SVZaeUg1WFM3V1E5aE92c21ra25sWWxwYlZRTk93?=

=?utf-8?B?UHhLcW90NTdrdkdXTkpvbFYvUVhDZVMwN2x0OUJjai9YZ1FIZnNWK1hKbW9R?=

=?utf-8?B?ekQ1SjVETFBGS2RONTFEd2RFdDViT1haMWQvbFBObUJocmVvZFRQTVRGZEVk?=

=?utf-8?B?WnQyNGJyb0I0T1djZUdzZWhQekJua1lzenkxL0ExQjBZZE1BelpmK0RaOUJJ?=

=?utf-8?B?eS9DV01GSU5XRUVZc0Z0SXl1MzdLVmdWK2pXVXBNS2VLNysxRnZkQXdVaHlS?=

=?utf-8?B?WmRYeDl5SWczQkovMUFRcEJrcWxOQTh4ZEVydmJENWhQV1NjcXUrQXZ6ekhm?=

=?utf-8?B?T0FWNFJYSlY2cjRIdVlFM1F5RlZLaWtJNkJoRnFPd0wxREhzY0Vlc2toemE1?=

=?utf-8?B?ZGZYejVhTXFkTzAzSVRKaEJIR1lDVmtQVHAzUGRRL2txQ3VSeDAzcnltS3RP?=

=?utf-8?B?TUtNemRWWm9MNlhOd0ZXSERoaWF6Q3pCWkVDVzRCREtzcTcxbEo3dG5uNUxp?=

=?utf-8?B?bno4LzJYNm04L3krOXl0OHRTTktBTFUyT1diRU1PM3VBdjIzQmM1L3NjNEU4?=

=?utf-8?B?T2dJNWlNY29lQnVsWndKR0c5U0M3ZkxzVDk3cmwyRGVUYm1iZDdzY05mam9u?=

=?utf-8?B?L3RaaHJwRjllckM5ZFNxL0c4OTZaUGwzUnBMMUtPcytVTW94aDAwV0o3TkRF?=

=?utf-8?B?bU5YM3o3T0N6YzIwN1JWVmVuVlBMUENkWElWZ2ltb0IvK0ZpakFQbndQZlJY?=

=?utf-8?B?QjhrTjkySWJ3ZGRwNGk5TkZwSlRESFg4Ti8xRkhWMExLeENMSTJIMGRaUG5o?=

=?utf-8?B?dUExNmRaWk4wdnhIekdrb1J2bGRJc05BbHB5c0dhTkRVcnBTSDdwWkN4NUJT?=

=?utf-8?B?b3ZFWTZVeWdaWm1RYitkMmVacGJyR1NKMlZCY2d6TUVSY3YvQlFPWS9SOTdV?=

=?utf-8?B?TFBjUlQ0NWhVVUtEMy9LR3VIOVJ1a083N0NJU1lyR25rcWZUdDJScW1jV2pZ?=

=?utf-8?B?cW93czhXRjRLWFN2a3dHcFgxUXRyb3NpbjdtVTdwWlZuVW5DL04vQ2NueXpO?=

=?utf-8?B?VG1xaUlzL0lwdDVQMVdrV2plQ0xZOUxqdmFxV05xVVVKYTRwN1I0ZHFyQkVI?=

=?utf-8?Q?Z3YHB8THTYpvc?=

Content-Type: multipart/alternative;

boundary="_000_MAZPR01MB8567303DD74A7DA49BA48DECDD99AMAZPR01MB8567INDP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-fecfb.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MAZPR01MB8567.INDPRD01.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0e6597ea-f13f-4e01-3fb9-08de64a72e41

X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Feb 2026 11:10:29.7185

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PN1PPF8C6B8F4BE

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Feb 2026 04:28:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnxVn-00000000B3S-1Y1k

for dave@doctor.nl2k.ab.ca;

Thu, 05 Feb 2026 04:27:03 -0700

Resent-From: The Doctor

Resent-Date: Thu, 5 Feb 2026 04:27:03 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from zimbra.cotic.rn.gov.br ([177.87.96.158]:60636)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vntqo-00000000M3N-1HKy

for sales@nk.ca;

Thu, 05 Feb 2026 00:32:40 -0700

Received: from localhost (localhost [127.0.0.1])

by zimbra.cotic.rn.gov.br (Postfix) with ESMTP id 481B88D2042;

Thu, 5 Feb 2026 03:43:23 -0300 (-03)

Received: from zimbra.cotic.rn.gov.br ([127.0.0.1])

by localhost (zimbra.cotic.rn.gov.br [127.0.0.1]) (amavis, port 10032)

with ESMTP id 7cCGohhE3o0Z; Thu, 5 Feb 2026 03:43:23 -0300 (-03)

Received: from localhost (localhost [127.0.0.1])

by zimbra.cotic.rn.gov.br (Postfix) with ESMTP id 97E818D2037;

Thu, 5 Feb 2026 03:43:21 -0300 (-03)

X-Virus-Scanned: amavis at zimbra.cotic.rn.gov.br

Received: from zimbra.cotic.rn.gov.br ([127.0.0.1])

by localhost (zimbra.cotic.rn.gov.br [127.0.0.1]) (amavis, port 10026)

with ESMTP id fw_DoH3MW30v; Thu, 5 Feb 2026 03:43:21 -0300 (-03)

Received: from zimbra.cotic.rn.gov.br (zimbra.cotic.rn.gov.br [10.104.0.72])

by zimbra.cotic.rn.gov.br (Postfix) with ESMTP id 7A7488D202D;

Thu, 5 Feb 2026 03:43:18 -0300 (-03)

Date: Thu, 5 Feb 2026 03:43:18 -0300 (BRT)

From: Cheng Saephan

Reply-To: Cheng Saephan

Message-ID: <2017505002.2341740.1770273798439.JavaMail.zimbra@policiacivil.rn.gov.br>

Subject: Donation of 2.8 Dollars.

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_025387c4-1e01-4608-b35c-19d4afb417d0"

X-Originating-IP: [10.104.0.72]

X-Mailer: Zimbra 8.8.15_GA_4652 (zclient/8.8.15_GA_4652)

Thread-Index: 3yQnKl5B6eRIU19ZA8CKJs+y1lGcgQ==

Thread-Topic: Donation of 2.8 Dollars.

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
The sum of $2.8 million Dollars has been donated to

you by Mr Cheng Saephan. You are advise to get back for more details via (chengsaephandonation24@proton.me)

FOR MORE INFORMATION.



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[177.87.96.158 listed in will-spam-for-food.eu.org]

[177.87.96.158 listed in will-spam-for-food.eu.org]

[177.87.96.158 listed in will-spam-for-food.eu.org]

[177.87.96.158 listed in will-spam-for-food.eu.org]

[177.87.96.158 listed in will-spam-for-food.eu.org]

[177.87.96.158 listed in will-spam-for-food.eu.org]

[177.87.96.158 listed in will-spam-for-food.eu.org]

[177.87.96.158 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[177.87.96.158 listed in dnsbl.ahbl.org]

[177.87.96.158 listed in dnsbl.ahbl.org]

[177.87.96.158 listed in dnsbl.ahbl.org]

[177.87.96.158 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[177.87.96.158 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[177.87.96.158 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[177.87.96.158 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[177.87.96.158 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[177.87.96.158 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_FROM_12LTRDOM From a 12-letter domain

1.0 XFER_LOTSA_MONEY Transfer a lot of money

Subject: {SPAM?} Donation of 2.8 Dollars.



--=_025387c4-1e01-4608-b35c-19d4afb417d0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit









The sum of $2.8 million Dollars has been donated to you by Mr Cheng Saephan. You are advise to get back for more details via (chengsaephandonation24@proton.me) FOR MORE INFORMATION.


--=_025387c4-1e01-4608-b35c-19d4afb417d0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit






<div>The sum of $2.8 million Dollars has been donated to you by Mr Cheng Saephan. You are advise to get back for more details via (chengsaephandonation24&#64;proton.me) FOR MORE INFORMATION.<br /></div>


--=_025387c4-1e01-4608-b35c-19d4afb417d0--

Web/SEO/App Spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Feb 2026 16:22:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnmBL-000000005Rz-0ADX

for dave@doctor.nl2k.ab.ca;

Wed, 04 Feb 2026 16:21:11 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Feb 2026 16:21:10 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f48.google.com ([209.85.216.48]:46174)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnkaS-00000000Poa-30Rr

for root@nk.ca;

Wed, 04 Feb 2026 14:39:11 -0700

Received: by mail-pj1-f48.google.com with SMTP id 98e67ed59e1d1-353576abcfeso78049a91.0

for ; Wed, 04 Feb 2026 13:38:13 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1770241087; x=1770845887; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=0lzT8Z9FmOsqhn5wAy6BtVintSc+VXKUHeKukV2lNu0=;

b=L5M89JwX+2xiSa3QrICp4Ht9rpDS6Rw3CfVRpp8vN7LBCxEuxo2R6HpIoHD6mxFnBd

GBWz2Qidz/MQVYZn8DfBnNWri4X3N5aqZFl/+2uOcoM9hRL5GqjF+42oucmjbARDcrhu

umsNkTmrhMPN6X4/QrPRr7n9w5lyip2Qwm4XipbUh+hqRPS9xrB0voL/VWdeCf9/yVTB

PGjWQuSPV65lbu8tVlW23R3fIa+kXHZuxVechxf38fxTk5aXXjedDV3zuf502FsYI3if

wLJe0TOxunEMxSiqy6Q7Ej5oHr1gSlE34k9nhibEl2XPFy41IdbGS0GH3jGzEZzb/fv3

WOpQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770241087; x=1770845887;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=0lzT8Z9FmOsqhn5wAy6BtVintSc+VXKUHeKukV2lNu0=;

b=NamLBci8M/I8eOTsfZ0dHq94U4DteCE9QI8srWj0gRnGjvCUR+SKX/YNuCYEFZOYDT

6N+e3jwWk+qc+TipAs0TiX6hc8AvIW/H152WkwUJ6wlsRDG7SuriZYNCXOHE+5CLD0TN

4nVN/T5/Z6/tWiLwaYXm0X7TYiNXyEC0C1ifTJC8nT6SHjxqsv3dMGlutxDmHctXqTDH

oDX0HNjoDqrNJ3EcGtrcFSEasIO8fW+35Hpzb49hqnBUh0CYP7Fy9Fbz076ne3MrVdBY

jrUjKicZHifMsZT8EhHCYlqZ0l/JNa8GX2U8Cqv3zQWK9qezVr7h2LEwqzqUEwx7wWoQ

2oBQ==

X-Gm-Message-State: AOJu0Yz8FUryqzgNgdbmRBr3kQAwzDOQksl6HzZuJMyzE74JdS2gDAGA

AKMPtlkC/+fV3vw37zGqn3YpJkabkfEjXR5UeCgH0+ApbKHelvL3oBy4+MUcyXsP

X-Gm-Gg: AZuq6aJLHIVu4+WZ6JrcDDNu7g1jcNx7h37ZQmuSy/LJfn9aW8d0s8RtSMIdVsMiyjU

qTx70WgqegCYIitWgvhSbcaHW2v5pFoRGJNFl3UMfkUVJbosz3xojHQFz6QG8mgpdfXSFuqXkvT

iftOi1AE/QFeI2tGlTp6TNkrqetguHiZQT6qr/XIsKpXFdWBWr7mfBTMwVVz8tj495ihmnXDV6g

8Dpa2nbPhRHS2aub5yuucuUZhZdA0RqUl8kOeuGZXrX4rspmdX0i8fjsUEzCLLpsn7DPVJ0+Z9W

rNUNMttwiFLgpAf+4PJwoTJQeAQbN8iYOazjJLNut5XlS6WAcbfQT2bEgDxeBmvw9EDY436MnUa

y9FR+6/9WkXv4o3NALeeyHj65bb83GOxoMgJUHiVREF4CldmdaKBkZuGXsNNHmxn6xJEcUl0Pxx

qHu9f8xrl7i871gjiGiRPd2TZQk0kA4nfkAxNx

X-Received: by 2002:a17:90b:1e0d:b0:353:f7b:6d60 with SMTP id 98e67ed59e1d1-354871f464dmr3802111a91.33.1770241087405;

Wed, 04 Feb 2026 13:38:07 -0800 (PST)

Received: from DESKTOPVFI8GCA ([2401:4900:a061:d028:2d0d:3a7c:5677:fff0])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3549c09df19sm277134a91.1.2026.02.04.13.38.06

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 04 Feb 2026 13:38:07 -0800 (PST)

From: Mariya

X-Google-Original-From: "Mariya"

To:

Subject: Re: Good Afternoon Affordable SEO !!

Date: Thu, 5 Feb 2026 03:07:37 +0530

Message-ID: <10ef01dc961e$8c873a10$a595ae30$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_10F0_01DC964C.A63F7610"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AdyWHlbsze/losArShKfzPQ4QGgO2A==

Content-Language: en-us

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Good Afternoon root@nk.ca I'm an SEO Expert, and I've

helped 250+ businesses achieve 1st-page rankings on Google through proven

SEO strategies. Would you like me to share our SEO pricing and service packages?





Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in will-spam-for-food.eu.org]

[209.85.216.48 listed in will-spam-for-food.eu.org]

[209.85.216.48 listed in will-spam-for-food.eu.org]

[209.85.216.48 listed in will-spam-for-food.eu.org]

[209.85.216.48 listed in will-spam-for-food.eu.org]

[209.85.216.48 listed in will-spam-for-food.eu.org]

[209.85.216.48 listed in will-spam-for-food.eu.org]

[209.85.216.48 listed in will-spam-for-food.eu.org]

[209.85.216.48 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.48 listed in dnsbl.ahbl.org]

[209.85.216.48 listed in dnsbl.ahbl.org]

[209.85.216.48 listed in dnsbl.ahbl.org]

[209.85.216.48 listed in dnsbl.ahbl.org]

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in dnsbl.ahbl.org]

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in dnsbl.ahbl.org]

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in dnsbl.ahbl.org]

[2401:4900:a061:d028:2d0d:3a7c:5677:fff0 listed]

[in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.48 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.48 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mariyawebservice11(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mariyawebservice11(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.48 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: Good Afternoon Affordable SEO !!