Virtual Assistant spam from Microsoft Outlook Part 2



x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?rtLdxr35lbJCsciYcCUronp/pwxzDEdLiEezeFht+zKFE7KDqZpnUR7B?=

=?Windows-1252?Q?S2vTBnBnQISs4NWT0YMG56G7yV4Y1Qhz1VlykvOvLwPXTS+LrjPRqS3J?=

=?Windows-1252?Q?o5sLeRXeZufzVPzisZOYg61eXyAGYSKc8tNkbVanm4M2Pu54lU7wURN2?=

=?Windows-1252?Q?d/UOVXDt3CWfdGQZuQ6Uqm843S8S+4beh+867D+Axg9l3lKp6tqLnLm2?=

=?Windows-1252?Q?C2Z7m8Fa6wEHeIKfUxUBAlJv+krNJ7t87LVQb8mpup4xVB0HCZ/2CakK?=

=?Windows-1252?Q?GtnxVqth8n4bPoAYTRpytCaeQWIUu9wRkqFotwAUOZzTcJ3oW+M71wik?=

=?Windows-1252?Q?D0+o5C7HpHS+Z7yOvN5giMTBEB/nbLPiEiVad0uQnsjOvUlQqfTAZlPV?=

=?Windows-1252?Q?I+rVSkh9Sf7qE4aouLWZO5+pXKj5lmu0waBLjgMeD3JqntREwpL31g70?=

=?Windows-1252?Q?NbFQ+59t/0Q1lXJYh1JbLMGAtCD2fFoi1OTsUVUJ7v0dTUIv3SVt0w2o?=

=?Windows-1252?Q?ATU3Wh5GbDPW7bXykhVGpeyx4uhuMtzwsSe0GJ8p5g1wqLaUMWOthaL8?=

=?Windows-1252?Q?2H3FI3YIYxfJ0JA0x1HhbGisfB2JdT7XEbQXfc97FczutZ9Be4d3Gzs4?=

=?Windows-1252?Q?/h9vg0HH18ZzlmCkadQyfWto+MyFVyR3r9yAWWZyDoMLdpGxM4PrzrU/?=

=?Windows-1252?Q?RBsUp9LItwjK4l71YvjieJY9+I17YRCsMnmf1+u/kaw5K33T2J3dwVQg?=

=?Windows-1252?Q?3MM1JzyF1WoTqPGRvF7nZK93HQviP0W218f3fSk66AzUiedK27t0FxaS?=

=?Windows-1252?Q?02zvAnj2gaUIWbxaS+ffZgCEsrIPnIJ2C3sqR8z/slH0AlvDMv+dDYiy?=

=?Windows-1252?Q?cDekkIwNsSKhk1DOwrgY+Ltvu2XS62DO1ec9/sWpTAZx72dCG3l/k/bN?=

=?Windows-1252?Q?MUXObtlvVPLnzannAdhHsz+5APGgUizTt42pSn8oixdGmTBFG68MGOw7?=

=?Windows-1252?Q?RId36N+TALJJuZHkwRf3f242hQDu2L8cybvuXR9EPbq2XsAqreISYd+G?=

=?Windows-1252?Q?ga+EEyejPkRodoi3EqixX9OxXz18ow+T5xBSOvRyQTfNfJxZneY4fNY3?=

=?Windows-1252?Q?Da3suYC/hFss6VAYdELFbgzyHfu1GEquEjDht9w1imXZvYhVyUtygP5a?=

=?Windows-1252?Q?NrfBp/6VLCp+Tps7G2SF4r9fWQROWvYVez34D3RdzWXDYG09yQye37Vc?=

=?Windows-1252?Q?+Z0XlKXf0rdyxGGW7SiVkKQwRf/b8IBb/FWkv8Ez73DeWhczKHhQvj+d?=

=?Windows-1252?Q?e9Oy4SC9WMWld0KF0iVNj1JvhmSuWtfz6wUbgDvMML/lV4pOAJTTuhQD?=

=?Windows-1252?Q?yQXIJ9GNMgTdBEaTnUAnPmFeIuCeUn6LqWyLlT7rKxOCdquczgu//w0l?=

=?Windows-1252?Q?FX30JKdyva2Dx14WCsDty9h70KwSdFV3O73LaUG2S1IQgHKONO5aRMUr?=

=?Windows-1252?Q?xh3iF4Zy+g/UuFQr5rk2un5c3KeFNq2mvZJbHL5oy7l7ytDLnbZUQ9hB?=

=?Windows-1252?Q?0qqFEPk53gcs3HF+?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR04MB79038843008E7502E6FBC3C4D190ASEZPR04MB7903apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR04MB7903.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 043e1d07-20ef-4817-96b4-08de5dbbd194

X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Jan 2026 15:50:38.9290

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB6280



--_000_SEZPR04MB79038843008E7502E6FBC3C4D190ASEZPR04MB7903apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

A quick follow-up. I help founders save time by managing admin tasks, inbox=

es, and scheduling.

If this could support you, just reply with your contact info and I=92ll con=

nect with you directly.

Regards,

Adbrd





--_000_SEZPR04MB79038843008E7502E6FBC3C4D190ASEZPR04MB7903apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,



ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

A quick follow-up. I help founders save time by managing admin tasks, inbox=

es, and scheduling.



ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

If this could support you, just reply with your contact info and I=92ll con=

nect with you directly.



ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Regards,


Adbrd



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












--_000_SEZPR04MB79038843008E7502E6FBC3C4D190ASEZPR04MB7903apcp_--

Virtual Assistant spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Jan 2026 10:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkmZV-00000000Mc4-1ijm

for dave@doctor.nl2k.ab.ca;

Tue, 27 Jan 2026 10:09:45 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Jan 2026 10:09:45 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012062.outbound.protection.outlook.com ([52.103.66.62]:42124 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vklMJ-00000000Nt3-2H2H

for sales@nk.ca;

Tue, 27 Jan 2026 08:52:14 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=hnCtwd1nfVlrVFm/LCXZN680avH+pzmrtWipXKzRU584H9OVfiDVPpZvTB+KNKWORInVMkisygth5coG518NMxqbm9SyCUpjpyAujLnGpc7Q+fSioRdHGcOz6bMAz08KUXA4YxQBDOsQT2VDLJSrmLPrajo6DIq+cls5eM0KpVWqzluEv9fHEsb3nqw5JPyDYHTdrbNzStNvh6f5Z9S7rw1QmDPH0QTOFx8A6TFJZYkySViCH5/MtXqCQdJ6B+Z7D0eAv/bDt7XiW+u4nljS2AaKSQ76Rbo10Y+y6jE4pG2FWMlt9Odw7nCISwK3tm9XUaBrf9QTzWb9hX3jXjCFOA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Nv9BUVrhvlAgZhwJws8QVpU1hM6GmvOECBqkLQqCKlk=;

b=nqEn9EHx3sJMutRuPW9k9LR3I434YINq0ky/KJzw/rEUqU79SpBBrboEEpcqFxwOcARKPDdXC5xDIMtsdBw0Up8K9co3dYSLC+9fRs22RHBJlNU766VR7ZO8LKdU+QIdTS6ewgRqjI3sHNsfewE79yQrb39+t+ETZKLNDtKVYhgxw7tpgXWCwSlQK28LTOJBZgMtpAlpAeiGFHGEgbcxVe0TcJTCLC30bVS8wyNPep4zk/pi9/XjwukPuJo09FjdB0AFB8FF92XG+nHxcrb3bXXnRNJ1IysI2SO5xO3S71aU50dhXHuXsp5IASuKTxALuGVNVL1FVDaAfyJpyF2/8w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Nv9BUVrhvlAgZhwJws8QVpU1hM6GmvOECBqkLQqCKlk=;

b=CNIRm2raiq0ZIW8NvKi6J8SppnLmOGsKkw37tpAJLUJhVXvKmVE+2hVKZXW/JcbzVIO+o2jEu35OSohFkIGjIHnydo6FSbHvPk13MHUE6JrQMdBZc6BP6bdoR77vB9F9unCHvkz/2Z0R7VwPbOPzIHiEIU6AW1jlGGukkEMXZCmK/Nu6bgORHZOxD89pNP3UrEb5k7XYaOuydh8fsfasH08UrheiOzCrHtmJurVX5q+rbxtuA4AeXopuKtKItCD2b+boRJ48s4/q8U7XnOwWFc+YuaCroDoiOFwXUmGb14Zp8xoIPL/yCmmzP74u/LMvNSbfLepqBnEERnzN3CqRrw==

Received: from SEZPR04MB7903.apcprd04.prod.outlook.com (2603:1096:101:234::8)

by TYZPR04MB6280.apcprd04.prod.outlook.com (2603:1096:400:289::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9542.11; Tue, 27 Jan

2026 15:50:39 +0000

Received: from SEZPR04MB7903.apcprd04.prod.outlook.com

([fe80::661b:b942:45f:e37c]) by SEZPR04MB7903.apcprd04.prod.outlook.com

([fe80::661b:b942:45f:e37c%6]) with mapi id 15.20.9542.010; Tue, 27 Jan 2026

15:50:39 +0000

From: adbard miton

To: adbard miton

Subject: Re: Virtual Assistant Support

Thread-Topic: Virtual Assistant Support

Thread-Index:

AQHchteVvFHnZFynPUeRDdUIZWFXVLVWGrofgAIFVLqAAtrmboAE5FJ7gAFvOieAAaqp6oABRZC/gAH8yFo=

Date: Tue, 27 Jan 2026 15:50:38 +0000

Message-ID:



References:

















In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR04MB7903:EE_|TYZPR04MB6280:EE_

x-ms-office365-filtering-correlation-id: 043e1d07-20ef-4817-96b4-08de5dbbd194

x-ms-exchange-slblob-mailprops:

SoURN12IA8uWt6j1FABxGa/1cQWkCELviENNG7j9sOgA8CkJ8Va8EVPY7pdOKi5Gl7TNMFAsmQ9+EBoSH5ymDp3XVrj5uVyUEGi/j60O0fQh3hAz5sg0f0hbee3aRLQQF/81fgyxZqzawCtLk1o51IJVcdGtjHa40tY3TGenJZCpGXO/CEZtizE2MviLAQCdjg778TBfiktU6s8kkwFahm5BHYiyc6iSo143RcIUxcWQn9i5fzPtdTxQEjYdF65L+8bb3iBvjFf2s8FE8wRt/O97nA5YtU3A5jnkSTiD3LkJGBNWqwZ1lB1gP3E4bXb3yHTuVUQhSrPjVgV+FQ/v8YIP/LLMJx7FoIEbpB/avA8AnvAwPKU5UY+IiaFeO0ZNDO/ZtuQTi6gFO9vvEeX9io7JzEWZQkLjYbE5Ve+Qx20W5fkD/ZpNZTr9vrGAZbCD2TWRj3NNJv4VvWc6U4m/tfpWfiZ8nGJ3olLdW5cX9ZzxIqMtlQvNF/UwwHYP8WT8FGQqfh+/WuilhL1Hpf7YOcKaBkvhbU9hWp+EI+EN/IDKpyhZ6fefF35lyubzn+EWx5/tmB58rtcUAmZBRxGqs1PULR4L8FWeXvK2BRZlrrL9Dz/lxsBOWYAQ0Y2+Xmm+DOV7IQILFk01F4EUsePn7W42UdC6Orxo

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|8062599012|461199028|8060799015|31061999003|15030799006|19110799012|39105399006|3412199025|440099028|39145399003|40105399003|41105399003|12091999003|102099032|19061999003|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?1BnmVrbom65q+acD11Q8mY67jDB54nNwdQ2jzaJ7ymd+r9qq0XukW14B?=

=?Windows-1252?Q?TzOzjxul0HEt3Ctv+84b7FB0B4973Q+Q4Mjmkner8RlFwpHDIYS4ndEj?=

=?Windows-1252?Q?tf/Z515rIIz5tZcV+hrFqoR5rBpj00YjrX6XUoe77OChXHx9jinO815P?=

=?Windows-1252?Q?Dc8i22ePnDfaEbg2+wOe8L2Fu0BJrt7XWj/fBKrIAGyyu4huJB0CDbDc?=

=?Windows-1252?Q?jbiGT+vAWH2L8UWPQQVkGMqOrvOQ680kopQdd+LHeDpbitGbAR2Wt/Fq?=

=?Windows-1252?Q?qoGYZT0RDBhY5kXBh01RYQZ3ygOZVUoIbC7WDY0mdH+dhTAO5s4Q7E2G?=

=?Windows-1252?Q?otl8/eddTnpeZodQbwPDXtSWHpFM4lsAtJvyFhuJ51fQ/hK4jUhvxf7j?=

=?Windows-1252?Q?m+tgYI/B4DvdYYHir/BYbuuAb5cSdRZh9DeudKWBBWGj3MU/WctcAkzD?=

=?Windows-1252?Q?/eVPKxqlwLS2qn2B8MOKURNm/aw2P3CwNMsP+PA0yiK+Btop3PAgeYwi?=

=?Windows-1252?Q?+J7I/LWr+HmTmToHxP3pFa6JJe7JwJw+c020jaWznHLsP0LuNHNKyAxr?=

=?Windows-1252?Q?fZ3zQpUHLsNhGYL7+gvm34zwDTLks3DmV6GClMXu89yRr/FobAv0V0BA?=

=?Windows-1252?Q?0A2wAChf1R6A/As+xKFalyPPRGLVknuibI3QXXjEsUlzoGytgdhsmBXu?=

=?Windows-1252?Q?cfxOntoYGjQp4BAaBiqHXBL00cS23j21qi9iTbOLR0GbE/rXxENfPdIk?=

=?Windows-1252?Q?KooK8Gvoi6lRp4Ec62BRgm2BCVGis+s3p0B56KP3NgGgV44b5wUdSW+6?=

=?Windows-1252?Q?PQDSy/e/I2C4feOI4yee1S1aRX7HOhar2CQfmUtDESR7hYgBGvcqdFN5?=

=?Windows-1252?Q?1GYKWEj2Ur3FrvIoklkcyp0gG+7+pIsX82yS7h1yl2b2Ya85GOzV7svg?=

=?Windows-1252?Q?hNVmY+4PpjoSjshn93U8T5UX0L1Z3+CZLgDT/Xo6Rr3OlKCKHNtpbMY1?=

=?Windows-1252?Q?fj0N/mWudPOHzWz0oV5IBgZ7MRKiTdYDnTDDMdibSfSVdXU4g4KKE3r2?=

=?Windows-1252?Q?aAQ6NcpwutnGk7IdVPbnZrGZqTkx+D4rZVJGO7ECtSUauKVNTsj88g4X?=

=?Windows-1252?Q?Oq9ZoDXJBHzS0u1JKhqHNrQ3ZUFCCRD4Qan3gzatf7fFVlHCIcJaAvcN?=

=?Windows-1252?Q?Acl26xrxYW2tkiq8rim6sNCL2KM2MTahUoSa72AInWU4CJ08AqXKY0Ie?=

=?Windows-1252?Q?KVG2ZtQI/Ga3tLUjWu6k0ahc0cP9uuHhWHyMMSev70hPnhDLL2/2ccKl?=

=?Windows-1252?Q?q18FPB2X272Phyfwho02nKR06+HPfkfecr9S1eR8DfZ5jxRH+JHPTKrP?=

=?Windows-1252?Q?UGMqrfZjv/zU9pvPpt5x3wEPztdk69/rH0jbS3E48OZByNe7fNp/oEto?=

=?Windows-1252?Q?pQzXwNftuS+q8hDbzmnuDTchk7S/caZfAiCQKQH5ldQ=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

Zoom Phish from Microsoft Outlook Part 3



1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.102.149.0 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

Subject: {SPAM?} Zoom Invitation from Your iPhone 17 Order Has Been Completed PayPal

Account Alert. Payment Alert =?UTF-8?B?4oCT?= Call +1(828) 407-9068












=3D1.0, maximum-scale=3D1.0, user-scalable=3D0" />

















<br
=3D"zoom logo" />








4px;">

Hi there,





Your iPhone 17 Order Has Been Completed PayPal Account =

Alert. Payment Alert =E2=80=93 Call +1(828) 407-9068 (efrerr@virgilian.com)=

is inviting you to chat and meet on Zoom Workplace.

"Your payment of $1,099.99 for iPhone 17 has been=

completed through PayPal. If you do not recognize this charge, please cont=

act us at +1(828) 407-9068."



Please click the link to view invitation. Invitation li=

nk expires in 30 days. By accepting the invitation, you will be able to mes=

sage and call each other.







If the button above does not work, please copy and open the=

link below in your browser.







Thank you,





Zoom












enter; color:#6e7680;">


g: 0.5px;">+1.888.799.9666


©2026 Zoom Video Communications, Inc.





or: #0D6BDE;" href=3D"https://www.zoom.com">Zoom.com


55 Almaden Blvd


San Jose, CA 95113
















Zoom Phish from Microsoft Outlook Part 2

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?dkdaNjlVYVNqeUZhQ29BY3RpY3BkcjFYb1d1TFNzQ1JvdXNWeWtJWGJYQkZW?=

=?utf-8?B?ODNxaHFDekZZQ1QxeTAwRTZkWTlwdkZKOFVYODNXVTQ4UGlUaHJFazhpUHdJ?=

=?utf-8?B?K2FaYkJLa3hUR0I5M2Y3eGFGamU2dU1tV2NhQ3A3RERpTGZnZFE4K1lJQ3Fy?=

=?utf-8?B?b1lZYnV1dks5cUJTWk1QNzB5ZUdCTXRSN2VySFhCUXZUSld3VGV0K0pXc09P?=

=?utf-8?B?eWNCM3BmMFZ3aGhUSUh6VngwaEpMK1czOUNXa1h3VFJvVW41MDBpZWJzUjk1?=

=?utf-8?B?ZXFUSHpvYmd4ZmgwZGhUSmJxOS9hSXRTL2JWMk1zczlRUkpRbmg0UndpUUZ4?=

=?utf-8?B?ZnV5VzFhYnErNjY3ckJtNG1GZnVZUkJOMTZ0T3h5a20wcDUvc1BDdWM3M0Zq?=

=?utf-8?B?WjcxTlhvUEJKR2lIa1dHWEQ2UW5pWlJ6cXFnVVN0RSs0YWJMaXlZR0hBazdY?=

=?utf-8?B?WGtFQnp4M05xNTVNSEY1YXVLbjVYY3RaamwzTldFZXMyY2I1Sjd6RUtpV2ZW?=

=?utf-8?B?OXBJeXZzM2Z5N0hKMVhUZmRHcTBzMGV6N3lqclVyWGF3ZHR1Q28yUjFPeENW?=

=?utf-8?B?RTJNa1VUbnBKRnFVQldDNzRjWnFESkxiUTF4aE9SK0VYblVkNjZvWUhFTjIw?=

=?utf-8?B?OUllV3oyOWU1STU0MCtTVDM0L2NYdEpwVzNmamYwUVQ2N2dSWktoWUZJSFhI?=

=?utf-8?B?WE5SN0dOdjkxcmh3UmFacnRudCtRbk9Ba2QrOTNDc0hOL1ZuMWhtMzZucFJr?=

=?utf-8?B?QVc0Ly9CZ3dNUHpHS0tZbjFoenF0V0tzV2JEWHN0Z0VHTXhCRkt1dUxVMnEr?=

=?utf-8?B?cWxrZ2Q4RXRqUmd4K2Rsemtqb2tyc0ppNlRXOFdTRktCRkFrTHZjU2N3cDJz?=

=?utf-8?B?bEZtQTVDeVloNEdqZFhrbGM0dWJRU1R4TVVhMlFHcTlZdktwbWRXQk9NdGlI?=

=?utf-8?B?Q0tsOU8rMC9VamZjVXg3NzdGMzBSSzMrTlo0ek8rVlh5SlgxbU16d0ZSVUtE?=

=?utf-8?B?Rm1wNzR0bFZkaXhxWFZOdTVGcVA0TjNHZlNmOFdpNGNGNDI1MjAxQlQzRExn?=

=?utf-8?B?Yi9mOWxhSFJTaS8xZFd6WTE2YWg1Mk1aYUxqMGJFRFBzRHU5cUpkc1NIOXRy?=

=?utf-8?B?OGQ4d0JzUGgxTXkwRTE5ZDdEWHJVcUxnaFliU1NTWkVGVmFhS0VzOG55a2Ru?=

=?utf-8?B?U2VRQ2dCUFVhcE5kN0pNY3lxYUwrdnVNaUxxYm0zMDNtOGNhSW1HdG5EKzZs?=

=?utf-8?B?SW5tbldUaWkvMmIya2VMSDFka3hXRFpqRUhUNTV6ZVVmbnMvdFJ1MzJPY2M0?=

=?utf-8?B?VzZ3Z3pCRHVsUXNVUzEyNTRoTlkzcGlMNjBYNWpRTE1PNjBOVFV2WkV4THJW?=

=?utf-8?B?YnVKbTlBWmhISnpZRUZoOE1kVC95azQ0NVU3OGdWTS9CSXkyMnUzZ0xFMDlk?=

=?utf-8?B?QWlLY2h6bjVvV2d3b1hDNzBXRWhjdXVINUdWTzllYnQ1QnRDSVRWbGJwN0ZS?=

=?utf-8?B?Nlh6TDBTT0Uzam9ERkpxNjlBWjZ2UGJPREJESURIQXlyT2NqclVnQkRCcHR5?=

=?utf-8?B?cmNybHB3aklxb3RJN25JQ01oRGpEV0hPSEgyRG1UV0lXV3pPUHMySGV4L2xJ?=

=?utf-8?B?OWdLS0oyaWdVdTFuNmxERUVIMHNLenBvcmwrbklDUDdmQWdLajFoeFZjdkJz?=

=?utf-8?B?L2phYjFHaWxHZ21OUGdVUUJvaU8rVzY0eC9vMTdudzVXdExKSWVVZVNaZStP?=

=?utf-8?B?Sjd2RXZJMEdDVm5INU1mME9Nd3BLT295NVlFU0FsSEM4SXFibkJiRzJwR0FH?=

=?utf-8?B?RnFBdXgvV3BMcEphMmpkc0tPdnM0c3Z5bTgrVTNRdWV1QWoyRm9LQktac29H?=

=?utf-8?B?eExPNmxKbEtHUU13NGNHb3Bnam1ZbzN6ZkN0YWJYc0xHUXl0eDYxUEs0aU53?=

=?utf-8?B?ZXRqUkRocmRlcldURmlHT2JwMG5lOTdjZkhZdlpQRm1rTHliUHFwZ2lUUjE0?=

=?utf-8?B?ZHFBVGxlQXlZaDdLaXZoVnoxVWxidXBxaHA0TzdGK3czNng0T21vNzQreGJP?=

=?utf-8?B?RGludktBa05yOGMwbVY4cHhjcXZXekEwdTYxRkFSemRsbGt1R1pGOHRrb3cr?=

=?utf-8?B?Q0pMUzNmWGFhamRnZXFpaEJpVFA0TlFFZHRBSHlIc2wyOG50ODJGUWhCRHhO?=

=?utf-8?B?eTRkVFJhUy9yZEYwdTJKaFdUMlVjVmJVTytoZ1dSNCtxSWJpaUhWd2Z5SENi?=

=?utf-8?B?ZWwyYTBHdklVRjMyVUM2QUxXVlYzUkNXNXpNT3RvOTY1UnRLaFJ4THcyVmQz?=

=?utf-8?B?Tkk1M2V1NVYwTlhHbXBYNGFlSHZ3OE5rTGdybTNwVUhnR3VZbFg2b2hTcHh3?=

=?utf-8?B?ZHRxSS9lamNIcUtWMytEMnBESW9Jdld5eGJkdVFEVHJUUEtac25uc1h3UkVQ?=

=?utf-8?B?KyszcVNKLzhwbDIxSzI1NkQvS3MyOFhvSk5lMVJYYVk0QTZuMjhXUEdTZlQ1?=

=?utf-8?B?cXgyM3B0aTgzWkxUZ3NnMTZzcTVBS1phc2VHTVZidS9OTjVtOWJTd2dnVW41?=

=?utf-8?B?UnhyaXRlZEVyNm53QjNOdmxJQVBzbDFMYXAxc3NJeGlRVmdFVFZpQ1FqYlBu?=

=?utf-8?B?SU1mdXZMNGgreEl1QVdtQUNTeHI1bDIvdEp1bXdUdjJnWHBZQUczUXY2eFAx?=

=?utf-8?B?bnpsYnhGUnZ1dzAySGdDRmRNYXoyeUYwWUZrSThVeVpOUXU2Tng4NXp3dG1G?=

=?utf-8?B?aE1GbkltQW41UFQwWGJ2ZlBsOWpxYnZWNEVQZzcydW9HM29VRGY3ejNQdWoy?=

=?utf-8?B?T0lIOVVBVVhsWGcwbkxlYjdkK2QxN1oyVVQrNkZNeHU2U3pObjUxRmRoZUsw?=

=?utf-8?B?SVhpTVlOUHFIY2Z5cWhSSmN5T1R1NkNpZ0JLV3hwSmhMU0xFRGlNckM1eDVo?=

=?utf-8?B?SWJZTy9nNTZLK1pMSFR4Z0V2aGF6ZVlTVEtvNTBHVHRGRU1jUlhmeTFlc0xF?=

=?utf-8?B?U0JSZmlYMDZQR1daMndNYXROcnFmVzN3ZXBjdUtHWTVwZmhWY0VFdVlDSVg3?=

=?utf-8?B?S1JtK0FRQ1F3Z045RC9PMTdWVzk3Y0pFMmUxYndmOEpDSjREaE5EeGpGRUE5?=

=?utf-8?B?OVp4S2lEalFvWjI0RVNnd1h4dk9ubU1Ia2hvSXBOWDFLSmdSWWNEM1NpdFVj?=

=?utf-8?B?RWVJaE1jeE1zVXl2NzIyVi90aXE0YjZBNXZ1OEJ3RlJ4VlBudEpFbUpadmFx?=

=?utf-8?B?MTJWZ2VGS0l1OS9raVd5SCtKa1Z1ekpkWWlaVkxJMHRLWDI4TUVja2VTYUkz?=

=?utf-8?B?Q1NVbEVFZC9EVDVCUkY5TmJyTkJ0R2VpanJ0SzRhTXk5UWhWK09FV25PU3dm?=

=?utf-8?B?aE96NHkzbkp2SzJYbm5OaVcwTm0zTnN1TFlmRGptdjZadWZaMkJRYjVOaWlh?=

=?utf-8?B?NjFZdVJTNXQ2M29JVlVlRGFtQlRtazVoTnB2WGdweHR0dExhbGZSUnk1aW9u?=

=?utf-8?B?Z3FkblJTazlHalFFZ2trMlFKRlMxc3l5bERyS2lzT1VXODRzUHV3YUVBQUJw?=

=?utf-8?B?cEJDVjVReHArb2NOK0dreWZzdWlpdm5sNjBxc3JxOEpDSUQ4bGpFeDRBdHNH?=

=?utf-8?B?aUxBS0QvQkxHOGlHM0dRcW43Mll5S1NFU09WTVdMMnRlOVFWVEpwWHZIVEZZ?=

=?utf-8?B?Unl6TElJenlseDJiM0htY0prMHRiYmtsSVNxQWlNZ1BEak96cS8weEdiaG5D?=

=?utf-8?B?RjdTL1dpNCsxdTNMVlJ5dEJmUC9LZEVLdXFYeEFCU2xGRFNBM01kOTJBY2N4?=

=?utf-8?B?eW5vc245amRseHVVbzA2WDZkb1gxbitLTXhSQmVINm9PRzVMZGRYWDJVR3NV?=

=?utf-8?B?RUhzK01Cb3Q3dGVpZkNZM0NkVVZJSm1ydG01RStkNkdadnJaNjloL2VMYThu?=

=?utf-8?B?YTZrMVZCakZrVTJ4WXUwK21MeStaVnJaVS9CS3NzYWppeDlSNm1NSWI0MTRF?=

=?utf-8?B?dk5EcU00NlNmM3p6OWd1SHBMMzIzTGR2MFVtek50dWhOUUtiVDlwZ0IrcnRO?=

=?utf-8?B?Ky9oOGRMYXVLMjFadWd3QUYzMjdoeFc3SWI3VmhKT0xUODJQOCsvb2w4UHpa?=

=?utf-8?B?V2s3bXh1Y2JkUjNMNU50bXhweWJwMGZ1NzJFWU15VDNqS0FKOTk1UmowaEdO?=

=?utf-8?B?US9HZ3M4VkliR3V3bEU3ejRpaWFMRkYwblNFU203UGFINTk0N25jMUF6WE9U?=

=?utf-8?B?YTJ2akFGL0NJV2FrdnhRcnJ0RHZCeEVFZTBJZm93RyswcStEY0xMUGViVkdO?=

=?utf-8?B?ZXJ2L1ZaTU5kUC9xK2o5emRtQVNZYmdZN0prb0NpRy9MdWlWelZxeU55bmVD?=

=?utf-8?B?dHFENENxZG8reWI2ZWk0QzAzdGtlZGFYMnRXNnN4MjFKb1NzN2wxbkY2L2RP?=

=?utf-8?B?OHZjRFo5SEpPWkpZN0xXMDBtamV5bnh3aHo1TjdKVWVnWlpNY3lhOWhaelVB?=

=?utf-8?B?RGQvaFFiUTV0cW8zTVphU2s3czh2eGZyOE9WZ2FXaGxyVzJISVlMWDNNNEl5?=

=?utf-8?B?MjVFZ1NVbjR1K0lNZTVnSWRoTksybWpkZnlJSzh0bHR0UThITlI5L1dqdk5B?=

=?utf-8?Q?s6qEpbJZS8QlOomUD?=

X-Forefront-Antispam-Report:

CIP:159.183.151.213;CTRY:US;LANG:en;SCL:8;SRV:;IPV:NLI;SFV:SPM;H:o31.sg.zoom.us;PTR:o31.sg.zoom.us;CAT:OSPM;SFS:(13230040)(48200799018)(69100299015)(5083199021)(376014)(34036016)(586017)(29132699027)(7416014)(61400799027)(41320700013)(8075299003)(3613699012)(4076899003)(8096899003)(13003099007)(102250200026);DIR:OUT;SFP:1501;

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: Jacobd066.onmicrosoft.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 2d2d1b52-3c18-4141-8dbd-08de5db53586

X-MS-Exchange-CrossTenant-Id: 54651c30-dc9d-4efd-b60a-edb9fb8967e0

X-MS-Exchange-CrossTenant-AuthSource: SJ1PEPF00002310.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jan 2026 15:09:42.0380

(UTC)

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV1P223MB1339

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi there, Your iPhone 17 Order Has Been Completed PayPal

Account Alert. Payment Alert – Call +1(828) 407-9068 (efrerr@virgilian.com)

is inviting you to chat and meet on Zoom Workplace.



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.102.149.0 listed in dnsbl.ahbl.org]

[52.102.149.0 listed in dnsbl.ahbl.org]

[52.102.149.0 listed in dnsbl.ahbl.org]

[52.102.149.0 listed in dnsbl.ahbl.org]

[159.183.151.213 listed in dnsbl.ahbl.org]

[159.183.151.213 listed in dnsbl.ahbl.org]

[159.183.151.213 listed in dnsbl.ahbl.org]

[159.183.151.213 listed in dnsbl.ahbl.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.102.149.0 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.102.149.0 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.102.149.0 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.102.149.0 listed in dnsbl.ahbl.org]

Zoom Phish from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Jan 2026 08:15:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkkm8-00000000C4F-1rcq

for dave@doctor.nl2k.ab.ca;

Tue, 27 Jan 2026 08:14:40 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Jan 2026 08:14:40 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus3azhn15011000.outbound.protection.outlook.com ([52.102.149.0]:65127 helo=PH0PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkkiG-00000000BnL-2HJY

for doctor@doctor.nl2k.ab.ca;

Tue, 27 Jan 2026 08:10:44 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=T+g4ODjzy91tTzqf61kF8OMrUb8AOwWYc3gUta0Ft2saHQPvgaaSDvBaiDVSlpgS6dDejMDZOIHpRC3OukYreAxcMBP262MVfHAdJsW3wbe7j6XsR4cM85oWt9X1gruI6JIo+2kjOGNTlSNvKud8/dwE6NW+kWG7gB/z2Jde0qD0QPtjN8InZEvgJgiinkx055gtSABQCrVy8pstl5pgSFOzyYkISwJ8KE+r9iM1bD+j798oLEyLA2CUmUjgjGZtxZPPUtG/q67crt2uBm6y/nSQDYokKIpzi0d24Y8e+v+KmMBknQCDpSs0IELiEH95SLxM8MWOfK0aIohJfOgGSA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=YibIWlhUtvhcItGDSERiRsrN0/2BhX1NX3FFaF3wqZI=;

b=e5xg18/dVMRASfw7mOiA3Tiy/IgSqjSJgsQxCrLfCXRoKENgJ1WJh8BvlzT4b1n6KRMfdTKjQAM3G3iuE6lUfDAJ1kR/w4TW7p/N0Iea54lglv6qQdqhw4pHrMRfXHF+DnBbT3NgcH+EXKTBn45FxuJkVJ3s0iIuXIa9wN7pEhImNpKLwDjigsBZjPjPB+iS0Wki1tVjU6EIafkqMGarCZVsYeBXwtzRJDIpyC4a8Al4gI88gi0tnUyAwYcx7zWz5CnNju8DNNNKEPwe7zWy+JuSHRXqDr46U6U1KTNNjuvsBnGOWRgZwiHT4xqcel4TOTNoT/njuDN28G/eSjq4JA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is

159.183.151.213) smtp.rcpttodomain=jacobd066.onmicrosoft.com

smtp.mailfrom=bounce-sg.zoom.us; dmarc=pass (p=reject sp=reject pct=100)

action=none header.from=zoom.us; dkim=pass (signature was verified)

header.d=zoom.us; arc=none (0)

Received: from CY5P223MB0443.NAMP223.PROD.OUTLOOK.COM (2603:10b6:930:29::9) by

LV1P223MB1339.NAMP223.PROD.OUTLOOK.COM (2603:10b6:408:2b5::22) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.9564.5; Tue, 27 Jan 2026 15:09:42 +0000

Received: from CY5P223MB0443.NAMP223.PROD.OUTLOOK.COM

([fe80::ea00:47ca:a4f5:846e]) by CY5P223MB0443.NAMP223.PROD.OUTLOOK.COM

([fe80::ea00:47ca:a4f5:846e%3]) with mapi id 15.20.9564.001; Tue, 27 Jan 2026

15:09:42 +0000

Received: from SJ0PR13CA0026.namprd13.prod.outlook.com (2603:10b6:a03:2c0::31)

by IA3P223MB1528.NAMP223.PROD.OUTLOOK.COM (2603:10b6:208:572::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9564.7; Tue, 27 Jan

2026 15:03:20 +0000

Received: from SJ1PEPF00002310.namprd03.prod.outlook.com

(2603:10b6:a03:2c0:cafe::76) by SJ0PR13CA0026.outlook.office365.com

(2603:10b6:a03:2c0::31) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.9564.7 via Frontend Transport; Tue,

27 Jan 2026 15:02:53 +0000

Authentication-Results: spf=pass (sender IP is 159.183.151.213)

smtp.mailfrom=bounce-sg.zoom.us; dkim=pass (signature was verified)

header.d=zoom.us;dmarc=pass action=none header.from=zoom.us;

Received-SPF: Pass (protection.outlook.com: domain of bounce-sg.zoom.us

designates 159.183.151.213 as permitted sender)

receiver=protection.outlook.com; client-ip=159.183.151.213;

helo=o31.sg.zoom.us; pr=C

Received: from o31.sg.zoom.us (159.183.151.213) by

SJ1PEPF00002310.mail.protection.outlook.com (10.167.242.164) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9564.3

via Frontend Transport; Tue, 27 Jan 2026 15:03:19 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zoom.us;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=sg; bh=YibIWlhUtvhcItGDSERiRsrN0/2BhX1NX3FFaF3wqZI=;

b=fPhN0zjLsAKN9udGOlExmfX9SatSKzN6F23Qq4bdGIHvk6TynHfAqQG2jVEENr+MEtOX

CwShYwek8n3h4KPLYxe78swlS0ZMVhBC05l32rTfoxPOgCmacx5hOKWn+PdOGh3seK6jjd

BSBAWMqPC58lZ0GG5JxSHmXnM73tG2BYAOdK3q8eSDoQLIANJtYrtq/XlSg/B1v5MQB0V+

2pwG3rocBsjJHhuZC8/74/L4xDbPfCDrySjXuL+fDxqy93/TeCwf1wMg1NKVRwBr1i7kRu

AEgWzcJHdQvNMBzicRPxT4MKZBXMub417Pf95TMf7dGDd7sEjiUyl3ZBuEop0JJg==

Received: by recvd-77c97b74bf-jq6sb with SMTP id recvd-77c97b74bf-jq6sb-1-6978D3B7-40

2026-01-27 15:03:19.199312518 +0000 UTC m=+3516752.388898677

Received: from MTU1NzAzODg (unknown)

by geopod-ismtpd-66 (SG) with HTTP

id WJMZr9FDR1ywnCbkvhoYLQ

Tue, 27 Jan 2026 15:03:19.167 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8

Date: Tue, 27 Jan 2026 15:03:19 +0000 (UTC)

From: Zoom

MIME-Version: 1.0

Message-ID:

Subject: Zoom Invitation from Your iPhone 17 Order Has Been Completed PayPal

Account Alert. Payment Alert =?UTF-8?B?4oCT?= Call +1(828) 407-9068

X-SG-EID: =?us-ascii?Q?u001=2EV=2FCrMu5=2F7JiV4gIYr+InI6MELJgR7AD1buWM99=2FR73ZFoqqpDBbZ3TVvT?=

=?us-ascii?Q?+Lil2N=2FZHiF45IgsPBduJZMfvq=2FJMTV9BucAWA3?=

=?us-ascii?Q?2kPonxabLII4J=2FfkgQ=2Fx5cVPJ+bTF5fubH4VZmh?=

=?us-ascii?Q?1jGwwsXqAC4OoMQMinO+VG6GSRkM=2FUmGNGQce1T?=

=?us-ascii?Q?wbCiFxRyVoRkttI5kKPulGPgV=2FpMEKJyjPKAxz1?=

=?us-ascii?Q?2Ul2v7RUzvyIqWpxbhHmPsumg2LOeWr3IvjLMr6?= =?us-ascii?Q?HCx3?=

X-SG-ID: =?us-ascii?Q?u001=2ESdBcvi+Evd=2FbQef8eZF3BrbnM7KwlDBSXfpWW2tD=2FAAh+iUdxWUXcG6EE?=

=?us-ascii?Q?xZ520JuhXmDOZgxlldqGeCdnQ9TnaGDJeq67kTn?=

=?us-ascii?Q?LGOR4uQcauOsbin6rKbfKTYKGpDiXHkN90Cv7py?=

=?us-ascii?Q?q2qgpRRAke3l+A6ZeP0AeuqnOeOiPXiQH7UHzv6?=

=?us-ascii?Q?6cwHPixOytrff8+MRtirQAbp0Vwzx+ATvtbFvAh?=

=?us-ascii?Q?hfD7sQjkERQzIpOabKyxuYEpkOM0QTmnvM0FsMf?=

=?us-ascii?Q?sbBBk9iO1rqrD36+hThfVIt=2F3zgOqjQIlByo6=2F+?=

=?us-ascii?Q?Y27l82Hkr28mGDL+3oche8o6DE01Whu1ZK7Gzb=2F?=

=?us-ascii?Q?qnZwHhFArG8rwooLtJWvwqZWKLZq0Fw5JGa1Yru?=

=?us-ascii?Q?CZGRDVAEPJvlt2rgVZRVUBnFkda9ASs0Hsqopmv?=

=?us-ascii?Q?rBaaet1YGuvCYU2qN15cLRJ75Q+UFy31=2FQ4jtoV?=

=?us-ascii?Q?O1HMr3APU29OpYffhXHTNAj1UPzzuxmhYQ5D6kp?=

=?us-ascii?Q?4wLQ2EyV09lQAlYIgvIGeXFauWlvzly3VqpFY4x?=

=?us-ascii?Q?LTVBIMr7fMfZhRm02nTCiPjxWBF24nEg+QABi5O?=

=?us-ascii?Q?ck5=2FyUt799EWxexePNDjsS656T6BNBw16NNLiky?=

=?us-ascii?Q?9j7TeNDgEAFhb++TnRh8+7ci5iwPPhCYadB2Dmr?=

=?us-ascii?Q?8M55KVGr9SbzpTWZL2GEXaxWpeRN=2FX6sJ3JP4L0?=

=?us-ascii?Q?pk=2FglVG4nYh1D6ckDLwRFFUhX3t0ZJitxjhfpQM?=

=?us-ascii?Q?n4hHKxi6vVk+c8rAXinOD5Zk6AKdZYYMejmDY+v?=

=?us-ascii?Q?YumguRwRgwI4OZ4o1VIFXvgl40=2FyNyPnOA0cC2j?=

=?us-ascii?Q?iaXv=2FIMaP0F1=2FHQv3AVFbR0QPCVV0Rl6VnfsFIE?=

=?us-ascii?Q?g9cTUFhCauv=2FyYeu5CB+L1Y3bX96lHAk=2FyoSkc=3D?=

To: noreply4@Jacobd066.onmicrosoft.com

X-Entity-ID: u001.6mUY7xs+tNnsNuz7tuXEzQ==

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 54651c30-dc9d-4efd-b60a-edb9fb8967e0:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic:

SJ1PEPF00002310:EE_|IA3P223MB1528:EE_|LV1P223MB1339:EE_

X-MS-Office365-Filtering-Correlation-Id: 2d2d1b52-3c18-4141-8dbd-08de5db53586

X-Moderation-Data: 1/27/2026 3:09:41 PM

X-LD-Processed: 54651c30-dc9d-4efd-b60a-edb9fb8967e0,ExtAddr

X-MS-Exchange-SenderADCheck: 0

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|48200799018|69100299015|5083199021|376014|34036016|586017|29132699027|7416014|61400799027|41320700013|8075299003|3613699012|4076899003|8096899003|13003099007|102250200026;

Who's Who spam from Google Gmail

Evidence at Spamcop link to spam

Web/SEO/App Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Jan 2026 07:23:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkjxG-000000004BA-47Ur

for dave@doctor.nl2k.ab.ca;

Tue, 27 Jan 2026 07:22:06 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Jan 2026 07:22:06 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f198.google.com ([209.85.222.198]:61607)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkgot-00000000FhG-0tXX

for root@nk.ca;

Tue, 27 Jan 2026 04:01:23 -0700

Received: by mail-qk1-f198.google.com with SMTP id af79cd13be357-8bb9f029f31so1962278585a.2

for ; Tue, 27 Jan 2026 03:00:27 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webandappdevelopments-com.20230601.gappssmtp.com; s=20230601; t=1769511621; x=1770116421; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=0xlqoh5qqM9qsc19AEaeCFLRvBTtNn5QPzTKQ9ut+BM=;

b=qilaSOIfPy2DkgaotcGIi7FkQwFG6mPnROVKfDhhNIUVrV/WajXQ3BZk4YyOz544RY

jpVtcuK8M8WvDMmvbyW4mBjhPDTs0m/p5fFCGXA04IBq041CikWop6NVx3PYjC3n2dx3

CEwdxZTWrEqdOwh+O/+vcpzXR4sjUW+7MUkGZywGO/PU27D+uXZUlnC6xT5AWDZqw07G

qweZ8hQ8r9Bwumt3TMuInUModF4vOqlJpi/bxQ4kByQ0Zw6wbUXeNym+08aEuPWCL8v8

j3Ov6hRVTVkgP8chAo5YYxXy85d/STYOoHwmUYZYiYIdGeo9PC9N4HpesojN4Iddm4XK

YYbg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769511621; x=1770116421;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=0xlqoh5qqM9qsc19AEaeCFLRvBTtNn5QPzTKQ9ut+BM=;

b=n4dnpQ/y5Bidqn4geiJ1m23vw26FEMjx1LggeaI27z3u1X1tKeoIm8g1H3VvUgmK1v

Z/AR2f1+b8bTwpdfLZV7Iim9s41IprX3ZaWXbGO/r2HyNDV73sCE5k2aZRZMoqlaYt7g

bjs1O2VjMRN3A6Rm4RHotwZqVU6ecjtnKtbmgp9ukn5M9hGrz52YxMSeaei5J336P/J/

8k99NmaHqHbFo1GdkGTcBQsQu2H2IGgaxYcbaqxX3X8olMOXV5X2i4T/qoCdGDhAobxi

DQ54dbnrYzef8VVpFx7Qpily58wHrtI2IreakyREqTID+rqU+8BAma6ndk56pL9WQFn+

CNhg==

X-Gm-Message-State: AOJu0YwTx0Y4l7E7Z0065x//AkeGBsdMeW8sgg6A8YUPIuyVAWzUWJgK

9ojDgcXY/mZ1E2S6/PIsFO8lyowka1r4AxxIr3Rx+wqwLPaPhuk+UgSZa3bUyqORlMmMjJRKksy

N1NA2CKL+vqYwHfnlx27n

MIME-Version: 1.0

X-Received: by 2002:a05:620a:19a7:b0:811:3f8a:24a6 with SMTP id

af79cd13be357-8c70b8f106amr137256785a.53.1769511621064; Tue, 27 Jan 2026

03:00:21 -0800 (PST)

Message-ID:

Date: Tue, 27 Jan 2026 11:00:21 +0000

Subject: Re: Worried about the cost SEO Services !!

From: shigha@webandappdevelopments.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="00000000000099870706495c87a3"



--00000000000099870706495c87a3

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,



I hope this email finds you well.



I came across your website www.nk.ca I was impressed by what I saw. I

believe your business has a lot of potential, and with the right search

engine optimisation (SEO) strategy, you could improve your website's

visibility and attract more customers.



With your permission, I would like to send you an SEO audit report that

will identify areas where your website can be improved to increase your

search engine rankings. This report will be very specific and will show you

exactly what needs to be done to move you up in the rankings.



Do you have a free minute we can talk in the next couple of days that would

work for you? I can give you a few proposals of different strategies that

I've done that have had a major effect on my customers' sales. I'd be happy

to help out.



I look forward to speaking with you,



Thank You!!



--00000000000099870706495c87a3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

I hope this email finds you well.

I came across your webs=

ite www.nk.ca I was impressed by what I saw. I believe your business has a =

lot of potential, and with the right search engine optimisation (SEO) strat=

egy, you could improve your website's visibility and attract more customers=

.

With your permission, I would like to send you an SEO audit report=

that will identify areas where your website can be improved to increase yo=

ur search engine rankings. This report will be very specific and will show =

you exactly what needs to be done to move you up in the rankings.

Do=

you have a free minute we can talk in the next couple of days that would w=

ork for you? I can give you a few proposals of different strategies that I'=

ve done that have had a major effect on my customers=E2=80=99 sales. I=E2=

=80=99d be happy to help out.

I look forward to speaking with you,
r>
Thank You!!


--00000000000099870706495c87a3--

Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Jan 2026 07:21:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkjvQ-000000002x4-47Zb

for dave@doctor.nl2k.ab.ca;

Tue, 27 Jan 2026 07:20:12 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Jan 2026 07:20:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-136.dm.aliyun.com ([140.205.208.136]:20148)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkcj5-000000000kW-1hIT

for root@nk.ca;

Mon, 26 Jan 2026 23:39:03 -0700

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.clampfactory.ltd:alibabak_WebBatch:324914

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.clampfactory.ltd; s=aliyun-cn-hangzhou;

t=1769495881; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=IO1yP5SyASbyr7qcC3Bi18rgiZad+kSTfWutIcXwbvo=;

b=sxAbkXogjWwnnILI/Nq5qW1SfCSNqkkNPQPLHgjSbPXDVW+a5r3dcjq9Ab3bLIdQrqVqO9L0Y1WeW+TdlSZA78uQy+mRqauLciintPkRRRZ0MLKoXRICVPCJm9T861x4aigYEnRNPsl0GkkCyhZYRmuNGqVMPo206wSBzLwdZAY=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1769495881; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=IO1yP5SyASbyr7qcC3Bi18rgiZad+kSTfWutIcXwbvo=;

b=tNZZ7YT2jgd5ZIxTGfY1lDyUV6ijUFGRYq2tyClqc7mbNtBrDLbQGqWIzFs+3pzCVbHm3PhQSrFcx8nFwR2CCnWrE0TGh1SmKSTm4a75XLcbY2cV77dVqGIgi+39alq8pLC82Lto5sSFFEox7xduypFcdmPuiR2W1zNzrN7i6GI=

Received: from chitu-hsf(mailfrom:vip@vip.clampfactory.ltd fp:ma_600000271784995822 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Tue, 27 Jan 2026 14:36:06 +0800

Date: Tue, 27 Jan 2026 14:36:05 +0800

From: "Vivian"

To:

Reply-To:

Message-ID: <8474d3c6-9c07-4257-890a-4cbc5e1293ec@alibaba.com>

Subject: =?UTF-8?B?VCBCb2x0IEhvc2UgQ2xhbXAgTWFudWZhY3R1cmVyIC0gUm9ja2V0aXMgSG9zZSBDbGFtcA==?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000271784995823

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 15.0

X-Spam_score_int: 150

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, How are you?



Content analysis details: (15.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: chvsta.068000.xyz (xyz)]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

1.0 CN_B2B_SPAMMER BODY: Chinese company introducing itself

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: ns4.dnsv2.com/112.80.181.155]

Subject: {SPAM?} =?UTF-8?B?VCBCb2x0IEhvc2UgQ2xhbXAgTWFudWZhY3R1cmVyIC0gUm9ja2V0aXMgSG9zZSBDbGFtcA==?=




mily: "times new roman";">Dear Friend,


ap-mode: wrap;">
ew roman";">How are you?


an style=3D"color: rgb(0, 0, 0); font-family: "times new roman";">I =

am Vivian From Rocketis Hose Clamp Company, Very glad to being your service.
span>


; font-family: "times new roman";">We are a leading manufacturer in =

China which specialized in T Bolt Hose Clamps&nb=

sp;
supplying for over 20 years; good quality and professional service=

help us gain many good reputation all over the world.


ext-wrap-mode: wrap;">
"color: rgb(0, 0, 0);font-family:times new roman">Our T Bolt hose clamps inclu=

de:


wrap-mode: nowrap; color: rgb(84, 141, 212);font-family:times new roman">T Bol=

t hose clamps


e=3D"text-wrap-mode: nowrap;font-family:times new roman">Spring T Bolt hose cl=

amps


1.imagehub.cc/images/2026/01/08/6fa2fb52e6d3e57db608a60df2625949.jpg"/>


style=3D"margin-top: 16px; margin-bottom: 16px; text-wrap-mode: wrap; color: r=

gb(15, 17, 21);" class=3D"ds-markdown-paragraph">
mes new roman">As we step into the new year, we would be delighted to explore =

how our expertise can support your business. If you have any upcoming needs fo=

r hose clamps or would like to discuss potential collaboration, please feel fr=

ee to reach out. We are always here to assist!


p: 16px; margin-bottom: 16px; text-wrap-mode: wrap; color: rgb(15, 17, 21);" c=

lass=3D"ds-markdown-paragraph">Loo=

king forward to the possibility of working together.


gin-top: 16px; text-wrap-mode: wrap; color: rgb(15, 17, 21); margin-bottom: 0p=

x !important;" class=3D"ds-markdown-paragraph">
s new roman">Best regards,


ode: wrap; color: rgb(15, 17, 21); margin-bottom: 0px !important;" class=3D"ds=

-markdown-paragraph">Vivian=




Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Jan 2026 15:03:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkUfK-00000000M4B-3tN2

for dave@doctor.nl2k.ab.ca;

Mon, 26 Jan 2026 15:02:34 -0700

Resent-From: The Doctor

Resent-Date: Mon, 26 Jan 2026 15:02:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from shiva.jussieu.fr ([134.157.0.129]:36506)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkShE-00000000Ctx-3HDF

for doctor@nk.ca;

Mon, 26 Jan 2026 12:56:35 -0700

Received: from mailix1.insp.jussieu.fr (mailix1.insp.jussieu.fr [134.157.37.11])

by shiva.jussieu.fr (8.15.2/jtpda-5.4) with ESMTP id 60QJt3E1046228

; Mon, 26 Jan 2026 20:55:03 +0100 (CET)

X-Ids:164

Received: from hordix.insp.jussieu.fr (hordix.insp.jussieu.fr [134.157.37.9])

by mailix1.insp.jussieu.fr (Postfix-INSP-2.10.1) with ESMTPSA id 0F968C01AF08;

Mon, 26 Jan 2026 20:55:00 +0100 (CET)

Received: from [103.97.88.154] ([103.97.88.154]) by webmail.insp.jussieu.fr

(Horde Framework) with HTTPS; Mon, 26 Jan 2026 19:54:59 +0000

Date: Mon, 26 Jan 2026 19:54:59 +0000

Message-ID: <20260126195459.Horde.FWaXJkSXZd4eT-Qt7FUa9Z7@webmail.insp.jussieu.fr>

From: Yuxuan Zhang

Subject: Hello

Reply-to: yuxuan.zhang3@yandex.com

User-Agent: Horde Application Framework 5

Organization: Institut des NanoSciences de Paris

X-InspUpmcSession: sharma

Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes

MIME-Version: 1.0

Content-Disposition: inline

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good Day, My Company Hangzhou Iron and Steel Ltd, is seeking

to engage you as her part-time regional business intermediary executive within

your region (USA/CANADA) If interested, kindly reply to this [...]



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[134.157.0.129 listed in dnsbl.ahbl.org]

[134.157.0.129 listed in dnsbl.ahbl.org]

[134.157.0.129 listed in dnsbl.ahbl.org]

[134.157.0.129 listed in dnsbl.ahbl.org]

[134.157.37.9 listed in dnsbl.ahbl.org]

[134.157.37.9 listed in dnsbl.ahbl.org]

[134.157.37.9 listed in dnsbl.ahbl.org]

[134.157.37.9 listed in dnsbl.ahbl.org]

[134.157.37.11 listed in dnsbl.ahbl.org]

[134.157.37.11 listed in dnsbl.ahbl.org]

[134.157.37.11 listed in dnsbl.ahbl.org]

[134.157.37.11 listed in dnsbl.ahbl.org]

[103.97.88.154 listed in dnsbl.ahbl.org]

[103.97.88.154 listed in dnsbl.ahbl.org]

[103.97.88.154 listed in dnsbl.ahbl.org]

[103.97.88.154 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[134.157.0.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[134.157.0.129 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[134.157.0.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[134.157.0.129 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.97.88.154 listed in will-spam-for-food.eu.org]

[103.97.88.154 listed in will-spam-for-food.eu.org]

[103.97.88.154 listed in will-spam-for-food.eu.org]

[103.97.88.154 listed in will-spam-for-food.eu.org]

[103.97.88.154 listed in will-spam-for-food.eu.org]

[103.97.88.154 listed in will-spam-for-food.eu.org]

[103.97.88.154 listed in will-spam-for-food.eu.org]

[103.97.88.154 listed in will-spam-for-food.eu.org]

[134.157.37.9 listed in will-spam-for-food.eu.org]

[134.157.37.9 listed in will-spam-for-food.eu.org]

[134.157.37.9 listed in will-spam-for-food.eu.org]

[134.157.37.9 listed in will-spam-for-food.eu.org]

[134.157.37.9 listed in will-spam-for-food.eu.org]

[134.157.37.9 listed in will-spam-for-food.eu.org]

[134.157.37.9 listed in will-spam-for-food.eu.org]

[134.157.37.9 listed in will-spam-for-food.eu.org]

[134.157.37.11 listed in will-spam-for-food.eu.org]

[134.157.37.11 listed in will-spam-for-food.eu.org]

[134.157.37.11 listed in will-spam-for-food.eu.org]

[134.157.37.11 listed in will-spam-for-food.eu.org]

[134.157.37.11 listed in will-spam-for-food.eu.org]

[134.157.37.11 listed in will-spam-for-food.eu.org]

[134.157.37.11 listed in will-spam-for-food.eu.org]

[134.157.37.11 listed in will-spam-for-food.eu.org]

[134.157.0.129 listed in will-spam-for-food.eu.org]

[134.157.0.129 listed in will-spam-for-food.eu.org]

[134.157.0.129 listed in will-spam-for-food.eu.org]

[134.157.0.129 listed in will-spam-for-food.eu.org]

[134.157.0.129 listed in will-spam-for-food.eu.org]

[134.157.0.129 listed in will-spam-for-food.eu.org]

[134.157.0.129 listed in will-spam-for-food.eu.org]

[134.157.0.129 listed in will-spam-for-food.eu.org]

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[134.157.0.129 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[134.157.0.129 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[yuxuan.zhang3(at)yandex.com]

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Hello









Good Day,

My Company Hangzhou Iron and Steel Ltd, is seeking to engage you as

her part-time regional business intermediary executive within your

region (USA/CANADA) If interested, kindly reply to this message.

regards,

Yuxuan Zhang



NetKnow now in NetCraft's Top 12000 part 2

MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services
which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).



Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

NetKnow now in NetCraft's Top 12000 part 1

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now at 11960 from 12513 at Netcraft
and pfs compliant



A significant increase! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server


  3. and
  4. keep design current!




How do we compare with other providers in

Edmonton
, Alberta, Canada?



Rogers





Rogers Business Solutions

which rank 4147 from 4026 and are hosted in Europe.



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 6188 from 6177 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business


is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Netknow again





We at Netknow are at 11960 from 18857 since the start of 2026.



Government of Alberta



The Government of Alberta Website

ranks 14906 from 15039 by Netcraft and seems to hosted on Cloudfare.



City of Edmonton







The City of Edmonton
ranks 30279 from 30399 by Netcraft and hosted by Google.



University of Alberta







The University of Alberta
ranks 52461 from 51735 hosted by Amazon Techonologies.



Juno and NetZero





We have Juno Internet ranked on top

at 307401 from 307030 who are the owners of

US Based Netzero
at Netcraft Rank 68686 from 63310 .



Grant MacEwen University





MacEwan ranks 111574 from 113114 .



NAIT / Northern Alberta Institute of Technology





NAIT ranks 119517 from 123300 hosted by Microsoft .



TekSavvy



TekSavvy ranks 179061 from 181543 and are hosted by Microsoft



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank 1196922 from 1196746 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 325600 from 309224 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 342424 from 351775 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Internet Centre / CCINet



Internet Centre

rank 546614 from 546388 . Their partner Rack Nine ranks > 2000000.



Distributel / 3Web / CIA



Cybersurf

is ranked 763869 from 850279 and seems to be hosted in USA by DigitalOcean.



Primus



Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Northern lights Fiber







Northern lights Fiber
are ranked by Netcraft >2000000 and uses AWS.



OkayVPN





OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

Web/SEO/App spam from Microsoft Outlook Part 2

Content preview: Hi, I am a professional Graphic Designer with over 12+ years

of experience. Do you need New Website, Website Development Re-designing,

CMS design, E-commerce design, & Website Update.? If you are inte [...]



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.23.19 listed in dnsbl.ahbl.org]

[52.103.23.19 listed in dnsbl.ahbl.org]

[52.103.23.19 listed in dnsbl.ahbl.org]

[52.103.23.19 listed in dnsbl.ahbl.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.23.19 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.23.19 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.23.19 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.23.19 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[parulwebsolution(at)hotmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.23.19 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Update.?



--_000_SA1PR03MB6420A438ECCD18161DE57E9ADC93ASA1PR03MB6420namp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,

I am a professional Graphic Designer with over 12+ years of experience.

Do you need New Website, Website Development Re-designing, CMS design, E-co=

mmerce design, & Website Update.?

If you are interested, please share your requirement. I can send your price=

list.

Best Regards,





--_000_SA1PR03MB6420A438ECCD18161DE57E9ADC93ASA1PR03MB6420namp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hi,



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

I am a professional Graphic Designer with over 12+ years of exp=

erience.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Do you need New Website, Website Development Re-designing, CMS design, E=

-commerce design, & Website Update.?



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

If you are interested, please share your requirement. I can send your price=

list.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Best Regards,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_SA1PR03MB6420A438ECCD18161DE57E9ADC93ASA1PR03MB6420namp_--

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Jan 2026 10:24:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkQIr-000000001CU-2cAH

for dave@doctor.nl2k.ab.ca;

Mon, 26 Jan 2026 10:23:05 -0700

Resent-From: The Doctor

Resent-Date: Mon, 26 Jan 2026 10:23:05 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus3azolkn19010019.outbound.protection.outlook.com ([52.103.23.19]:36912 helo=PH7PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkPIN-00000000MOK-1OFX;

Mon, 26 Jan 2026 09:18:42 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=HpO/TOKcEfh9Z95D/lZYMLFSsT5OImSor1fL595oW2s8/mJAOvoAGshLcUJpYd0X0LtwD1MLTsHt8+l7zFIsg8lGosTkAlYd/iGHuoshyuPHtXaUNBy1Z+BGawsVzXrl+vzL8UKLA+K9k90LJBr7sQbU08eFDsWrf43bfIKaEsmziwY5DNOHNMXePYcb3O2Y9wFFuVy8h5XEqhRcIN9pcXPyUgT2/X/8KHF+A4osKkVsoJEgQFuyiEuBJLxL0g/gfYnlKaJtogO0eyQXRuWokVZKGxuNTA66I6oL9T0XZupSSPCLSRbtOAwjMV0tHAb8exSQmidBfjJ4omIFfx+gRQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=UmTSyQGgtQlKhw0RNyT/vWZCu2WTrc/Jvd8d0+z2wAk=;

b=iAc9d0j322xeUo8+e9vcp+cl2MzkRWn3ya2OAVPLCYPwuN1qajtYXAzh7yOjySPpNoBqk3E0Uqsi4VrJDPNHb0N8wScL20QbBB2jIdi4yl9WVIgjDeYMnqju/FXfHiZWQx7IBvGvkZI5L/Eel/avQNUflMbGT9IN1eCraVtAjLYD5/bNL0Tc/sE5i0JMYr4SEMlpO4zopjmdUm98ywgO8zZIbar9RsTVd9CqV4KKh+zKNZ2NXuLOyL8DcNlE+ICOIThNuugEJ5oWC9/rsV/iWSBU1HiJhYb9is3fGLWq9qjyN0L2NmSyidqy8MyZqqv7hpBuekro+ElcWbbbCsKyIA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=UmTSyQGgtQlKhw0RNyT/vWZCu2WTrc/Jvd8d0+z2wAk=;

b=GdAWQUp4OVGY/x7vc18nNMQmA+XFSmburiMxz0J7fV28SbL6wiUzd47MD9AicNXKPy7SfIYi9Zq+wkDoU/gYZONhWWep7zjbOnTbiVXCRWJ+s7LmflPMOoL3y6phfSrlM/M8TYf9rJccf7rJmx02XOWjULlt9HJAwLLvw5lIeprRoEpupwTvIFvXvr+yU5pL29gCyy5sJyIedtm2v3Xpj74nCBeQVK1ZVp6VGEYSCFAEd+bnf5L1bJHVjVQWOnzbovsIE4dcP8GdCQSBhsN5IQYETPsjprk1M4jJXeF/9L3FTCSgJBS5KBMcsqTShFFEJSFFMaNY2/aJ8PjFwTW4yA==

Received: from SA1PR03MB6420.namprd03.prod.outlook.com (2603:10b6:806:1c3::14)

by CO1PR03MB5827.namprd03.prod.outlook.com (2603:10b6:303:9a::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9542.12; Mon, 26 Jan

2026 16:17:26 +0000

Received: from SA1PR03MB6420.namprd03.prod.outlook.com

([fe80::f7bb:f1fc:9f63:9e78]) by SA1PR03MB6420.namprd03.prod.outlook.com

([fe80::f7bb:f1fc:9f63:9e78%4]) with mapi id 15.20.9542.010; Mon, 26 Jan 2026

16:17:26 +0000

From: Parul Malviya

Subject: Update.?

Thread-Topic: Update.?

Thread-Index: AQHcjt7n6/JTZ4xhBkasq1JmaghW5A==

Date: Mon, 26 Jan 2026 16:17:25 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SA1PR03MB6420:EE_|CO1PR03MB5827:EE_

x-ms-office365-filtering-correlation-id: b7ac88a7-03a5-41ed-b4c6-08de5cf664f5

x-ms-exchange-slblob-mailprops:

TmQEXxnpNvBQ6yUILjshi4xEF9CJm0gDzQkT4y9aLlNIRjAF2SYoXxKc9MINL+fYTESUH6Zj+hbcqMd6HPVCnX56odE7BW6K/SKv00COwrl0PGQJUVSq6ZRiVYa18aBpPb6QTm1RFoUu9Zj/4Ne9W1C/rR20gq1kPGbQbjpRaF5dR/wwSQdz45M2eyzTtc+0xB81f3IR/t2K+q6+rptU6OIAe91qQmlutjHb57VQPTxZJyW6vg+zYFvGbYGSUPRaLq9D2AzWvdZR2k97Yzj5O+FJ9PPvaX5LvNy9U0zkkY52IVlKjh79mGdxndpDq8VhWKkFwNUaeGf61tQuU+bxnxgflI5mVOJ7QkTMicYQwi7LKYGWDffL9kvdmN+cLXiMoAi+k2hefQNLeVwTwplDP4l+FuxYjVQvF5niOexepIY0wHDgUNWYV07OzvSt0Np1n4IOAUAUo3qukQ8ps5YjN0QuBzvRAlhFIBtd+H8yY9WNJ9IM61pTH29t50/RVjT1Ff6h+blI4mB5WepXVKHu+rZ+0APm5OoMcabN4QiOkcWJQWvUcmcJLI93wVnTnOB+FGY2a7lWLYE=

x-microsoft-antispam:

BCL:0;ARA:14566002|30051999003|461199028|8062599012|8060799015|19110799012|20031999003|39105399006|15030799006|15080799012|31061999003|21061999006|440099028|3412199025|51015399003|40105399003|102099032|35041999009;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?iTRwfHXRCzbEN1r77lnE0+dC25NbFv+4/9Q7DFI0kI5aJORxQIrhWFBQmE?=

=?iso-8859-1?Q?sOPjTACx3McVsToV0+M7Xw1uiDgG0vLqEyY+WQ2FjbRfDgzItQQlNeERdS?=

=?iso-8859-1?Q?s6pHWKSiO2jegNmoVHJ8J66V+N+YUVf8byrO1VcX6qXYh/N+QGATpV2+FY?=

=?iso-8859-1?Q?cRGcoRp8hw1ljZfJp9UO+OGl8wH2uA95nClZKvdizoppXEgtZXYZK1Ygpp?=

=?iso-8859-1?Q?ciPB8vwsOD2psYw8SY5aFw672D9r+WRkIEelFqsnenT/snCzwRMOuzJ4h+?=

=?iso-8859-1?Q?+CVd6Ax4HLTENoupsgcvNwidPyvnZoY1SbkwvAmYEksxtcMKJIujqzzYom?=

=?iso-8859-1?Q?pMPxRJA8fN+EAPvjfqhb0hio+TaeBcB4WOsbm3YlWG+M0RHdlK0+8mIEAv?=

=?iso-8859-1?Q?jsy44M70cuqCP5zS3HGGhA0HCIeL0SPwZrgHDJSqg8Am5dznVNWCzqa2Uk?=

=?iso-8859-1?Q?vii+1NG1wgUwwTVckCYnPg/77LeqNZgVwB5zq6YaZgM/lVjn6LqGpSeQXm?=

=?iso-8859-1?Q?agZTE7XKAQyb0btFhWBpVVWm8oDKJa50pyW4a0zcRIHYUky21OM9clwZKs?=

=?iso-8859-1?Q?GDPNz2phT4Z1BrGnkKAwTs+y4H6A6QgwqwZAvB4LIQbT1h2UEpk7RKePhe?=

=?iso-8859-1?Q?IWAs0FIDuufkhfXLYXX903agkOnn59gu8jhOwR41sQoEU3Ri/tOpCsnDob?=

=?iso-8859-1?Q?8Y0k1v9UJPlqN1UcBjGEdzoiU4KXHSU8Qb0EAoaMprxRxFZNRLf6hUvTCk?=

=?iso-8859-1?Q?+koNQUGb9HP9SnzsaADNHU3rxOvgjqINjc89WZNUKR8pSlyN/X9hVJKhNP?=

=?iso-8859-1?Q?GKU8Bh3EnzYxhB8TYO33j6CZEpwXyhfY3m18baVhW56wP9uAVxwTlScpRf?=

=?iso-8859-1?Q?QT6cFcWTiiUEZhCUDTFNrT++Bz2hOlSCgqticpsiIe4pTlSbXcqioZDnxQ?=

=?iso-8859-1?Q?YxfVpgpiczcSiq3B2/Ejvwta7KXvW+gz0/EXcFGIY+n/nwRrNUTlpGP7//?=

=?iso-8859-1?Q?ZfcyVq/Fw8XqzHauhFYuet/GqdlCDMo6y8Vj0FKF1CgrscQPyg8pwixFW5?=

=?iso-8859-1?Q?LttV/TtOwcCv0w3UmJXwVJ4rgv+UAcCn9OXTkL4KSTFQjDSHCFrFG1dX1T?=

=?iso-8859-1?Q?Wa6G3kC6b/kjRtDviG/NmfOqXbEqcVPEC+7IJUAmdNKocKemd8Q9t6H9O3?=

=?iso-8859-1?Q?K6Jdjk5kxVNbUGQiwsBoad/2/dlYytQSxZrY4ct9JhnjkvxaPx+RP68BR2?=

=?iso-8859-1?Q?ObqwI9mvuBmcxAtrwy4rnmVzXUrqRSSDULIS8KcVRJxdU4zfzwweHiG4wy?=

=?iso-8859-1?Q?3N6yeJ78z2j1qD8nBHKR7HGUhDKOIbckJnpc516hi/zljQsRXzA4Ovo0dt?=

=?iso-8859-1?Q?ygNVz0E2fDx7RqIOOAgr8i1MrNXDviJ2qO4SYKZXOnMQ7UjJ+O0zE=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?uuxISEHrDDQRvfb67QD5Aub9yqMHLlBV/t2B0YX16pQ/1kNfgjMaEo0BB9?=

=?iso-8859-1?Q?EAtAh+sO0e78y+mnh74/ziceCuUxXtCJro16s099AvBkvMAVPhdug9ogg1?=

=?iso-8859-1?Q?7gGj7c2GWtGTJONbDguQ0R5Ea1D2RIdUlG9GuOoat0uxzbn34Gmp1kMck1?=

=?iso-8859-1?Q?Zu7nUgcX3+KowePopiMvjbfmK2tiQhUQHxA31AolHYvDZdPSc9fpP1aNxN?=

=?iso-8859-1?Q?mNOGZOHnUp6kWoW9E/1P46WNZAbTD2aSj3teqP7xNYle7W1JnHNMdN6lxX?=

=?iso-8859-1?Q?k1Ur2++AAae0fS2PHGs5eO15Epctx+zisFqvsPX5kzPtVqtXut9all+aYZ?=

=?iso-8859-1?Q?Y6sMm/ty00tpJzmtD/gFAZyWVnWwB3EUzD18Y4qwrVy4Xy9W/oqXvrzeVf?=

=?iso-8859-1?Q?qo/9/Aqs2yoj1i7cql1al97rYrHuPplqdeexU4Miarn++K61Z8TY7Adcwq?=

=?iso-8859-1?Q?iE4vTI+eNTCYrGly5hqqXHvpaE3pr2jTewwCcQHqwPq+NbO2tF2cJE5eKA?=

=?iso-8859-1?Q?r9WhG1Hrd1PY7abHReMe1sZ1WVlPKBN7LqdaN/PpNZDn/qy27/mYDjokEK?=

=?iso-8859-1?Q?rP8jDGeWAjOrhXneTjNyTOFZueJ2mwxLdOmhU17bDJIXDMdYj0Zu05gkY4?=

=?iso-8859-1?Q?7suLtHglepfXhH9BUfhvPQkYkGAlJgWMH2GNdR1rmgNaGVvU5Z2xR5ozxv?=

=?iso-8859-1?Q?lvQnwF/DdEBTXaYaLM+JdMWwO2O8UK00N2PEmw3pWf44kaSyZPmgcopGes?=

=?iso-8859-1?Q?fs5wItR8qz+NknO7yEue3QbRGnSc4OVj5Ry8eCCVS/7WTxcHKIYntPaeKS?=

=?iso-8859-1?Q?b+17KuVhH2F1IlONq8i0mmuLZ+8rQlSl4kcTdnjpyEl6MYiv84ASiRcE+m?=

=?iso-8859-1?Q?3Ng58ACf/wyJsdEKXJ/q4iM+jwqXd/PSLPcNArs3fKbV+lJWNq147m7+Yr?=

=?iso-8859-1?Q?MBnzQwcIe9DTTJkXouBfZzJ2yv153T0DLUSdO3wbQy5EnI6EXNlKSdruAY?=

=?iso-8859-1?Q?0k4j99yq4zwMkozeC0nSiXrTYMgpOqOVH5ASUGyVl8er5MnX7RzW8gEVVI?=

=?iso-8859-1?Q?3aKtwgqP0AkoP1F3ZZscJLPsq/Chg6v+JPEpgpyu5vV2w1d7pHMaBYnyqZ?=

=?iso-8859-1?Q?FYrfajaLPE6KnO+5X7xTOpp16sqgfhwuZFSxdgt8nIf9kmJaYm0lWomW5T?=

=?iso-8859-1?Q?FEMwE3ZfyNf7Kg608yaZwVI6m9Yi8hG30XYFw1QiyUcVilXNRkIuC/wSyD?=

=?iso-8859-1?Q?xqjlQErr2aoYTLlMwL3RbLHQN16KVzdfQ0f1Wz04KnffnTRpt9/Gnpohuj?=

=?iso-8859-1?Q?5Q7eOk0TSZiCUybKYPNP99vpdlTlzdhh7wg3rHj2s5S9NDNkfZTlGyTS7i?=

=?iso-8859-1?Q?llMToaX2hQkhNsv2JYI6XgXm+FqiX6IB9RLL4kDFUKU16zv8qDQw+Q/y2t?=

=?iso-8859-1?Q?LArkTzTgsNOAP4P2Dl5yWroqZmiMznhnpiCSjOvdpCpo7mZa4nl+ZC1D4l?=

=?iso-8859-1?Q?QPNTr3q4wz/IrP4kNeHZ5M?=

Content-Type: multipart/alternative;

boundary="_000_SA1PR03MB6420A438ECCD18161DE57E9ADC93ASA1PR03MB6420namp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-dea6d.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SA1PR03MB6420.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: b7ac88a7-03a5-41ed-b4c6-08de5cf664f5

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jan 2026 16:17:25.8141

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR03MB5827

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Norton Phish from Google Gmail Part 4










/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Autumn Beckham: Order W19S7LLP approval record"/>

prop=3D"object" itemscope itemtype=3D"http://schema.org/Event">
op=3D"eventStatus" content=3D"http://schema.org/EventScheduled"/>
prop=3D"publisher" itemscope itemtype=3D"http://schema.org/Organization">
eta itemprop=3D"name" content=3D"Google Calendar"/>

"eventId/googleCalendar" content=3D"sjYRBbCFb1YsaNMU5JLhvsDjG5"/>
e=3D"display: none; font-size: 1px; color: #fff; line-height: 1px; height: =

0; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow: hidden;" it=

emprop=3D"name">Order W19S7LLP approval record

rue">
e itemprop=3D"endDate" datetime=3D"20260127T032037Z">

order=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=

=3D"center" style=3D"width:100%;" class=3D"body-container">

tyle=3D"" class=3D"" align=3D"left">

den=3D"true">  
=


n" align=3D"center" style=3D"width:100%;" class=3D"">

=3D"" class=3D"" align=3D"left">
rg/EmailMessage">

Order W19S7LLP approval record=


cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100=

%;" class=3D"">

dius: 8px; direction: rtl; font-size: 0; padding: 24px 32px; text-align: le=

ft; vertical-align: top;" class=3D"main-container-inner">

ft; direction: ltr; display: inline-block; vertical-align: top; width: 100%=

;overflow: hidden; word-wrap: break-word;">
=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main=

-column-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-lay=

out: fixed;">

rtical-align:top;">
role=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;">
style=3D"font-size: 0; padding: 0; text-align: left; word-break: break-wor=

d;;padding-bottom:2px;">

oboto, sans-serif;font-weight: 400; font-size: 22px; line-height: 28px;colo=

r: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"presenta=

tion">Order W19S7LLP approval record

td>
<=

/table>(Guest list has been hidden at organizer's request)<=

/table>

reak: break-word;;padding-bottom:24px;">

sans-serif;font-style: normal; font-weight: 400; font-size: 14px; line-heig=

ht: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" cla=

ss=3D"primary-text" role=3D"presentation">Monday Jan 2=

6, 2026 =E2=8B=85 8:20pm (Mountain Standard Time - Phoenix)

d>

eak: break-word;;padding-bottom:24px;">

ans-serif;font-style: normal; font-weight: 400; font-size: 14px; line-heigh=

t: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" clas=

s=3D"primary-text" role=3D"presentation">

Norton Price Estimate Dat=

e: Monday, 26 January 2026
Price Estimate No: PC53353UHZ4265
Support =

Outreach Line: (865)-291-8559

Membership Information Email

Hi,<=

/p>

This email is provided to document your membership information with N=

orton. The entry below is shown for reference as of Monday, 26 January 2026=

.

**Payment Details Panel:**

- License Key: 677c29b3-657c-4fca-=

b123-1044355a7020
- Product Purchased: Premium+ Membership
- Support =

Term: Five Years
- Payment Status: Recorded
- Amount: $380.44
- Re=

corded Date: Monday, 26 January 2026
- Reference ID: R201H1WZVQ

Yo=

ur membership will continue under the standard plan settings unless you req=

uest adjustments before renewal.

If you have questions, you may conta=

ct our support team at (865)-291-8559.

Wishing you calm and well-bein=

g,,
Norton 360
Billing Administrator: Rita Ricketts
Contact Number=

: (859) 222-6452
Operational Address,: 1417 Brushy Mountain Dr New York=

Ny 10025 US

=C2=A9 2026 Company. All rights reserved.


a itemprop=3D"description" content=3D"Norton Price Estimate Date: Monday, 2=

6 January 2026Price Estimate No: PC53353UHZ4265Support Outreach Line: (865)=

-291-8559Membership Information EmailHi,This email is provided to document =

your membership information with Norton. The entry below is shown for refer=

ence as of Monday, 26 January 2026.**Payment Details Panel:**- License Key:=

677c29b3-657c-4fca-b123-1044355a7020- Product Purchased: Premium+ Membersh=

ip- Support Term: Five Years- Payment Status: Recorded- Amount: $380.44- Re=

corded Date: Monday, 26 January 2026- Reference ID: R201H1WZVQYour membersh=

ip will continue under the standard plan settings unless you request adjust=

ments before renewal.If you have questions, you may contact our support tea=

m at (865)-291-8559.Wishing you calm and well-being,,Norton 360Billing Admi=

nistrator: Rita RickettsContact Number: (859) 222-6452Operational Address,=

: 1417 Brushy Mountain Dr New York Ny 10025 US&copy; 2026 Company. All =

rights reserved."/>

0; text-align: left; word-break: break-word;;padding-bottom:24px;">

le=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400;=

font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; =

text-decoration: none;" class=3D"primary-text" role=3D"presentation">
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" sty=

le=3D"padding-bottom: 4px;">


t-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit=

-font-smoothing: antialiased;margin: 0; padding: 0;">Guests


body>

--000000000000b974ee06494b3669--