Norton Phish from Google Gmail Part 2

--000000000000a1a011064bcfe35c

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



MjAyNi0wMi0yNyBCaWxsaW5nIE1hbmFnZXItIEdlcmFsZCBBcGEgWW91ciBhY2NvdW50IHN0YXlz

IGN1cnJlbnQgYW5kICANCmVuYWJsZWQuIEN1c3RvbWVyIFN1cHBvcnQgTm90aWNlLCBZb3VyIG1l

bWJlcnNoaXAgcmVxdWVzdCBoYXMgYmVlbiAgDQpzdWNjZXNzZnVsbHkgcmVjZWl2ZWQgYW5kIGNv

bmZpcm1lZC4gVGhhbmsgeW91IGZvciBjaG9vc2luZyBvdXIgc2VydmljZXMuICANClBsZWFzZSBu

b3RlIHRoYXQgdGhpcyBtZW1iZXJzaGlwIGlzIGVucm9sbGVkIGluIGF1dG9tYXRpYyByZW5ld2Fs

IGV2ZXJ5ICANCjEtWWVhci4gWW91IG1heSBkaXNhYmxlIHJlbmV3YWwgYXQgbGVhc3QgMjQgaG91

cnMgcHJpb3IgdG8gdGhlIGVuZCBvZiB0aGUgIA0KYWN0aXZlIHRlcm0uIEZvciBhc3Npc3RhbmNl

LCBwbGVhc2UgY29udGFjdCBvdXIgc3VwcG9ydCB0ZWFtIGF0IDEuODU5LiAgDQozMTIuMTg0NS4g

T3JkZXIgSW5mb3JtYXRpb24gUGFuZWwgQmlsbCBpZC0gNjYzNS1BWUtLLTU5NjEgQWNjb3VudCBU

eXBlLSAgDQpOMFJUME4gTElGRUxPQ0sgUHJvZHVjdC0gUHJpbWUgRGVmZW5zZSBDb3ZlcmFnZSBT

ZXJ2aWNlIFRlcm0tIE9uZSBZZWFyICANClBheW1lbnQgUmVjZWl2ZWQtICQgNDc2LjAwIElmIHlv

dSB3b3VsZCBsaWtlIHRvIGNhbmNlbCB5b3VyIG1lbWJlcnNoaXAgb3IgIA0KcmVxdWlyZSBzdXBw

b3J0LCBwbGVhc2UgY29udGFjdCAoODU5KSAzMTItMTg0NS4gMjAyNiBOMFJUME4gMzYwLCBsbGMu

IEFsbCAgDQpyaWdodHMgIA0KcmVzZXJ2ZWQuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

DQoNClJlY2VpcHQgMjk0LUtTWVggb3JkZXIgY29uZmlybWF0aW9uIGxvZ2dlZA0KRnJpZGF5IEZl

YiAyNyDii4UgMXBtIOKAkyBTYXR1cmRheSBGZWIgMjgsIDIwMjYg4ouFIDEyOjMwcG0NClNpbmdh

cG9yZSBTdGFuZGFyZCBUaW1lDQoNCg0KDQpPcmdhbml6ZXINCk1hbmVsYSBTdGFwbGV0b24NCmtp

cmFua3VtbWFyaTA3ODZAcHBqc3Mub3JnDQoNCg==

--000000000000a1a011064bcfe35c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

































Norton Phish from Google Gmail Part 3



=20



=20



=20



=20

















Norton Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Feb 2026 11:42:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vw2mg-000000007Fo-2kCf

for dave@doctor.nl2k.ab.ca;

Fri, 27 Feb 2026 11:41:54 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Feb 2026 11:41:54 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f74.google.com ([209.85.161.74]:47277)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvz1u-00000000ESc-2HQM

for doctor@nl2k.ab.ca;

Fri, 27 Feb 2026 07:41:32 -0700

Received: by mail-oo1-f74.google.com with SMTP id 006d021491bc7-679c52164f5so16601740eaf.2

for ; Fri, 27 Feb 2026 06:40:35 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1772203229; x=1772808029; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=kELLkhFnykNDEOz3WXIFe5mf/Seo33Dgsxu8QUVYp2U=;

b=1x8n2dRniIxg8ff1K/iqocdl7t2ipznWb45XCWopOh8d4eocpvMhNMwpB5Gp8BwUFt

rIW4k1LZ4hX83BhX/ibSWpYaRLNePxzbTQpwTc0xeP45bzG6Oob+9u4wRrjZOVdKaWm2

EXIQsP9yoPaLy8GrxHO/LqbKW/Vx6xCrmhSs2tgRIYVdLw70AMp47Rc9ZpUAUHHjLOuR

BBAk6yoanbNs2tVcQ4UkPlwRCbgy5jV9PJQb9pNdvQFoGSXiRg11EmY8gp3BSWhyE5wg

4DPLI1bIlmDKA+XDONBwzk0xYawA8sKcku3A25St5X4ghT0vjrWkLyojT7RVE/WjgA8I

SHfA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gsyps-org.20230601.gappssmtp.com; s=20230601; t=1772203229; x=1772808029; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=kELLkhFnykNDEOz3WXIFe5mf/Seo33Dgsxu8QUVYp2U=;

b=bVkQVPLmA5sZpmX4cCadsIEz16z3yF0KLX4yzGdgOCBPDFXrSBEADO0e1NNyXchQvH

gdUA4HragZUApWOJQ//355GFehw44ejF6FVBNFwz+khLUI/bC+gfkG73ayM/pxEe9SzM

akAQxahjyAr1SSuP2hLfzkJhuofDZTlRD52EFau9ryYwOxKB/lrzwIg45uoJlSde0k3f

J9GpVkd8N9YmgyxztEEL606XqIfaHhb5dm2nqNI2jCZIS1V/8Y25n3ZlbTHXRDPZpFrl

8VLlpIiG2IYBCoyUvBBRxjZc2VlGIUedQFtJLVd3esm1z2vuAveJzTUqWMTH+f8GxlOX

sdvA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772203229; x=1772808029;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=kELLkhFnykNDEOz3WXIFe5mf/Seo33Dgsxu8QUVYp2U=;

b=MFaqRHmuVxi9QtZSSeTvOUd3lIN4tZOntEaaR7+i4D3q5FMsFq2IktfCzWvc9lETfk

erhitiPVprJSYYzYDU6WEqraKH0MA2QnPD733YSMM+Y5FM7dkMO3RLd3gwR41bwD1Wlx

oP865fJVDfsqnA0wuqdowLkEZvoOH2HyUfeMVsmAi6cVyalHvH4FasZ15oB/d9AYJWLT

0El9M928DICYpCrB9ScORGxfE8XHOyLCRzQaVNfM8IeM+4ocgVPL/LjyqXAdlpqPKIni

upGT+KmEP2CEaWmZiQbvawvCgv/aTH+y11EpSHNwYO2RYlZV/eWdL8X8mtHc5CCDr/4K

Qpvg==

X-Forwarded-Encrypted: i=1; AJvYcCXOfAd576rNy5hKrW6C5fZMrsMRPJolJZNpaWXiEW7Iw1RP0RLrXVEB4V9KTZ3ZCSyU5/ApgcU=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YwpXh4hNvpnNXJPRepdzsC9+OZRrnPLwfnI0RqyTXTVkqD6xNbx

gJhDvvDifGf4X/SqSF9NsjSPrVqvNMPhtEPaPg6CMFLVQfr0oqgSAKn43ThOthaoziDS7541nSx

o8p2hzKvaBGHFzdV4/JomRlE1muP7AgyeBGkf6qo9NDGNlg==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:2203:b0:679:c358:8ed4 with SMTP id

006d021491bc7-679faf192c2mt2110783eaf.46.1772203229200; Fri, 27 Feb 2026

06:40:29 -0800 (PST)

Reply-To: Joshua Shirley

Sender: Google Calendar

Message-ID:

Date: Fri, 27 Feb 2026 14:40:29 +0000

Subject: Transaction Number NGAT-1827 confirmation available

From: Joshua Shirley

Content-Type: multipart/alternative; boundary="000000000000f5dbb8064bcf3782"

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: N0RT0N LIFELOCK Alohaexchange Kitz United States 1859 3123932

Welcome, This notice confirms that your subscription has renewed automatically

as scheduled. The renewal process was successfully complete [...]



Content analysis details: (15.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.74 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

1.0 FUZZY_NORTON BODY: Obfuscated "norton"

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.74 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Transaction Number NGAT-1827 confirmation available

Web/SEO/App spam from Microsoft Outlook Part 3



--_000_JH0PR01MB63933D616E09A1F2B987B200C973AJH0PR01MB6393apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Hi,



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Are you looking to improve your website=92s SEO at an affordable price?<=

/i>



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

We guarantee better rankings and can get your site on the first page of =

Google, Yahoo, Bing, and more.



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Can I send you our best SEO package and proposal?



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Best regards,



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Nidhi



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_JH0PR01MB63933D616E09A1F2B987B200C973AJH0PR01MB6393apcp_--

Web/SEO/App spam from Microsoft Outlook Part 2



X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-3e488.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: JH0PR01MB6393.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 991120f2-d5d0-48cb-8e39-08de75f9a608

X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2026 12:13:42.5859

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR01MB4083

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Are you looking to improve your website’s SEO at an

affordable price? We guarantee better rankings and can get your site on the

first page of Google, Yahoo, Bing, and more.



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

[52.103.43.59 listed in dnsbl.ahbl.org]

[52.103.43.59 listed in dnsbl.ahbl.org]

[52.103.43.59 listed in dnsbl.ahbl.org]

[2603:1096:990:94:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:94:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:94:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:94:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[alicebarnsme(at)hotmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.59 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Keyword Intelligence:



--_000_JH0PR01MB63933D616E09A1F2B987B200C973AJH0PR01MB6393apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Are you looking to improve your website=92s SEO at an affordable price?



We guarantee better rankings and can get your site on the first page of Goo=

gle, Yahoo, Bing, and more.



Can I send you our best SEO package and proposal?



Best regards,

Nidhi



Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Feb 2026 05:16:01 -0700

Received: from mail-japaneastazolkn19012059.outbound.protection.outlook.com ([52.103.43.59]:59915 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvwkh-000000007LO-2dVN

for dave@doctor.nl2k.ab.ca;

Fri, 27 Feb 2026 05:15:38 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=gXVbzgIBFYPulDVr5EPrWSZh+l+bS0pRjbr6en1bszL6V0s6oWCav19oxPAxQuYCyg1xEUqYw4xIs2Qes/B5uSkrHz1cEaeOHwfWIzZ4rjELYOsv9OagIaFPfQys8v7IL5C7m3Eyglz+Pwsxxunu49JXD8jJZtS5xZI4BpEoke3uvabeFM6GcHgbNJi28SUy2j86FdpF8ESimwfyvk0HzzEXyP5D1key+n2ZpmXo2NegaEzdxTVoWIQLIPsHHurJG7n7BP9VCU2JX+GCD2NbKtUErqktrMV8LRvcd2UegjOhlQfrQVCwfmW4eMvKQKq5asykF3/3GgYGmsi2NDYz4g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=0dZRnn0FCkisuLxVYBkDn7FtItnHvncySXySMbbw5nE=;

b=KWl0OmD9onvDDlg8+swSdmjfcAKQPAS8Nj+yVE+q/rF5ZVx5yddH1wMRGCsXR6muj8dH1IA96PYi/sOptavuzbk2l6LopOQVwdopGgSESHGIBU4DbQTmXoPrcXrg+j5r4clDEfRESI4hmOizAJswbGYRccnY25XRUdTbjpXTLMJm4A19ckrKkENf6Ys/5Poa4dBAr3/TN5NrWK3ChMyzToLl7t5u99IRiOkXBodm1yXFHm5OG0IxreAe9nsnuVfJKuPIIyvhtzbK5gL7dCblEUqkjAEwjJsdp2oOguVmitVQ1xQHYhOQxYQy4A0zgzFi9PmkOIVhRgMNFpe6TfGpRw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=0dZRnn0FCkisuLxVYBkDn7FtItnHvncySXySMbbw5nE=;

b=fna+RfQbkxDFHo8A9jrwRIHmPfU93aWmSftdHDAN0UP3dEmjSgRYhN8d8aT16QRcqUT6Pg95sRbbGyk4nXBQtUQzEVH2GCVD+dlgTvL5NXx07Z53JQezOCSbkIxGUuxrT2cZOwxyXF9YUH+CCGJ6wI+uS01PxRjD9tABHyRTmJR3/c1xOTlf+ucObfwsePmlhfe/toM87lsMuRls0qusYmWhhYQGHW97FAJZmPivyEdhrQ/d6xyU+a/r5csBFNLcZ96cUBfXUTFylLRAe6VTK+Q4EwT4Qk0luSCWiqstS6sp+08s+QYvihOsjrtJwPQPxB8k6v7B5XbIHpe3x/jpFg==

Received: from JH0PR01MB6393.apcprd01.prod.exchangelabs.com

(2603:1096:990:94::5) by SI2PR01MB4083.apcprd01.prod.exchangelabs.com

(2603:1096:4:1a2::5) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.15; Fri, 27 Feb

2026 12:13:42 +0000

Received: from JH0PR01MB6393.apcprd01.prod.exchangelabs.com

([fe80::2aa4:3a80:e641:4e3d]) by JH0PR01MB6393.apcprd01.prod.exchangelabs.com

([fe80::2aa4:3a80:e641:4e3d%3]) with mapi id 15.20.9654.014; Fri, 27 Feb 2026

12:13:42 +0000

From: Aashi Rai

Subject: Keyword Intelligence:

Thread-Topic: Keyword Intelligence:

Thread-Index: AQHcp+FPqYJQbgHKoUKVZwExmgWkeA==

Date: Fri, 27 Feb 2026 12:13:42 +0000

Message-ID:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: JH0PR01MB6393:EE_|SI2PR01MB4083:EE_

x-ms-office365-filtering-correlation-id: 991120f2-d5d0-48cb-8e39-08de75f9a608

x-microsoft-antispam:

BCL:0;ARA:14566002|41001999006|15080799012|15030799006|8062599012|8060799015|31061999003|461199028|19110799012|7071999006|39105399006|20031999003|440099028|3412199025|102099032|41105399003|40105399003|39145399003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?eYQcDV797t7/bgfRV6hwFsiNFwpN+h4Wd4HSYYXyzN14xdsoQwhRTZf5?=

=?Windows-1252?Q?0ZUcIp52TcXHCmqZcLOYhd280PBW8UDRkasZXejtrFJjqN3kPl6YJ5g3?=

=?Windows-1252?Q?EFlh6zLPhmKK17fOedWc2UE3VW10A97gJlOHsyuCXb7UOECIKmDL3/9T?=

=?Windows-1252?Q?m14MV58//IkXoJgnjPp8Q+ZC0pOsWTaHJH08KiqTNH2DbeuhgMGbP36u?=

=?Windows-1252?Q?gLwhQk295bWC8j/r+0k8VfxUQDjSKFPi+nLPFiqZBetSkYJmZQ/QCR4z?=

=?Windows-1252?Q?DrEKJjELw+SqLfwwaS7b7w22EtRGIFWwRKGpHZD9bnZlcqcCLNM5+aFN?=

=?Windows-1252?Q?Ee8Bdw2HidpGdeiY8DH78tp4uMSqk7OuuJtZiMwrFFwUVqIH7zd/icxv?=

=?Windows-1252?Q?1BjvfGjrHD72DFGTvjkyYbl31LZe44WV46PuwKoBytVkVYPwvz8J0mUm?=

=?Windows-1252?Q?F9r45p2zIII6WwkBOrOWWRKl5ECc756kzp91Q4kBUC7FUVn+1fG8J/Rz?=

=?Windows-1252?Q?7zDVN8YTzCzd7rWWDdQxrAs5/1ai9ljAJDoRojTOsRz2k/3zzJ/qSTaV?=

=?Windows-1252?Q?dfEbCoso42gW22P7AdmrDrY3mmg7uzyiIvQFrxy/b9l2KhEomkEVwVfs?=

=?Windows-1252?Q?EjgOhjVk0LUvV85bwzmalJY7MvenhIH2h0Adt1/W1T8Huhz/s0IUBA0X?=

=?Windows-1252?Q?n/JgISZ5XHU55wsI2UcNd0OONVvuc2F44PI0Mdl5gICVQEchX5sZ+aBS?=

=?Windows-1252?Q?edVWEfEseto0lSgEYqzXNJAm34MreDDqh73mHjIJr7DH7rkaatx04z0I?=

=?Windows-1252?Q?D2x3/pj1Ndq+AJbreIgwJEly6wVzGN2mbF5nv/wvBOxAjCihuvpUho4U?=

=?Windows-1252?Q?SWOYL87wPY7JLQb2VjJj4jlqHwWcYnjgB7NMQWl6t7rQ3exVM07kb+Fx?=

=?Windows-1252?Q?VX9pGu9ofxoAsaQFjaxK1i3JX8rZXlML2kSxRFQq+0M8V2/aq0AWit8S?=

=?Windows-1252?Q?eRjo5Ygix+7z8VZGZFZp/yhVYv7yQ0ddVO9ngxYIX83u6Tt5yVm+Zych?=

=?Windows-1252?Q?XGks4o+pZn+xthhCgsvcYejHkOExd6MeO53pgE5z8OyuOekc3Gie+/VD?=

=?Windows-1252?Q?SKAzq2jxxt4/yEzr7xgbiceI9+yuXs54BYxsa/jhLQ7y+A=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?H4r0/233ccw+PnotT4gqTYct1IFQsTwbphRF13g1Rmy+Azt2gmGPi+9L?=

=?Windows-1252?Q?Ozq785Jy3kMi2JSB812jpILTXduXJEP8AzfPCDD0bDF3108lx1P+4h3b?=

=?Windows-1252?Q?lAebe4QUpMCzH6mdw2qgWreZQCvxlwNxhUbZN7keTEHHNrggSXg2tjMu?=

=?Windows-1252?Q?eBZbczppiRD6+oqv3dMaAa0fwOnCJnUJjBjheuVGAanNKAXPHGOvKO7c?=

=?Windows-1252?Q?p4TsrWrPnOS0i60G7/t10NzjWLAjr3Jm/ATqgPfyT0gT70DM5HimleOY?=

=?Windows-1252?Q?2UM8qOREy8NPcP7LalP5B1rcjk5Mt68nrpGJXljfdXQyoR4QrthIToTW?=

=?Windows-1252?Q?vps6pD+objcK6zhCujMTxaP/l9BFfqQ36lLNN6QKHJQgZo1JO9V5ga0n?=

=?Windows-1252?Q?pmqQd+U7KWQO1IEIzRsapEMBCQXJG6hPPIx1hoC/FojAChnH36gQT+aA?=

=?Windows-1252?Q?qWi3s2A1lUWxsu+h0g0lDKe5EmLHwQRIOAG5C/ozLNJXbZGGsxmARp5A?=

=?Windows-1252?Q?nd/ZuDNDs+9x2KDVssUM/Q4C6I4Gi6YExuMXCfo5TA/s+MUFRQ34KQZ4?=

=?Windows-1252?Q?rvWrzkLePXvnUCeZriFRzDeY4TQ19DabgaSwzLfID2/SPqbIDVMLkKwL?=

=?Windows-1252?Q?u5ICNujUxO4bpfVaS9EBg9i5p5u1uvt6Yt5wNmGdAzIHYYM7b7AIrA0y?=

=?Windows-1252?Q?WvO67nb8nvQjynExjIlAZDLK+JjngrM6S5qBR0EcFdlCEke32+HkelCr?=

=?Windows-1252?Q?ywGoOZTTnrc7uvA/mslRDJ42YFPGB1tVlKXtl3CxHDg5tmO6xJTSFaVa?=

=?Windows-1252?Q?M5/RNCxp1SiP8ffgJf7Th4/uFiXwBfpa/q18MyCl0JtGVD9EQlAOfjl0?=

=?Windows-1252?Q?4f6/h17WMpMRl1UhfrGdW7VqXB66fJ3xJlvn0ojnsUuwoP4pGeH9W//X?=

=?Windows-1252?Q?rvR3DAmqIAN2R9WKVkgmANQ0agCLkxuudzju8ns5GX7JjNDNp0sqG97m?=

=?Windows-1252?Q?vxUx83xfPnes8QBPlXJe3cyTRSNjZOCUq/0L8k9Lupw5GHTEB+hKCufV?=

=?Windows-1252?Q?Bvld8tNt0B4TDFABUnVWKvsKbjJ1p73uS3G6H/ApR+bpFICB4ykMi/jH?=

=?Windows-1252?Q?ouRRu0zrDgLR3iqusF3mXgQtD7Z6Faa0Oo9S15MDoCe9uFhpnXA8pgM9?=

=?Windows-1252?Q?LK1JIVli+PnRbofH6uFZETgWKUuWyzo3V4AG0DkLHnxfDZCqDJsiwMAD?=

=?Windows-1252?Q?xZLOtm9jeRX1vBB/kQaRbtpxK3U3x2aHEzcVA1h1qW2azYUgRQ8w2Fre?=

=?Windows-1252?Q?zftaNGP9Ri1maHi57Mx/wmtfoQZkGmE6GsgcXgTwmjaIxvTInSVdVBqm?=

=?Windows-1252?Q?G0V7Rc8bT5uM7qMJrJY4G7atnkDe86B1y3I8GRq/QMFkRXzqJAQVR9gk?=

=?Windows-1252?Q?8SsqjXnIrR6Ul5juyOsggtDb3qOh9FYG9OW8c2NNoIxNEbJdiQNieZp1?=

=?Windows-1252?Q?+S1fDfE6?=

Content-Type: multipart/alternative;

boundary="_000_JH0PR01MB63933D616E09A1F2B987B200C973AJH0PR01MB6393apcp_"

MIME-Version: 1.0

Web/SEO/App spam from Microsoft Outlook Part 2

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: fusion360.agency]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too

expensive

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.196 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.196 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Designer\Developer



This is a multi-part message in MIME format.



------=_NextPart_000_43180_01DCA811.37AFC9D0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



I'm reaching out to see if there is anything that would like to create

Shopify & Wordpress, upgrade, repair, or redesign on your website or Mobile

App.



I am a web designer/developer that can do just about anything you can

imagine at very affordable prices.



If interested. May I send you sample, Portfolio and company Details?



Thank you for your time and consideration.



Kind Regards,

Aarti





------=_NextPart_000_43180_01DCA811.37AFC9D0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hello,

I'm reaching =

out to see if there is anything that would like to create Shopify & =

Wordpress, upgrade, repair, or redesign on your website or Mobile =

App.

I am a web designer/developer that can do just about =

anything you can imagine at very affordable prices.

If =

interested. May I send you sample, Portfolio and company =

Details?

Thank you for your time and consideration.

Kind =

Regards,
Aarti



------=_NextPart_000_43180_01DCA811.37AFC9D0--



Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Feb 2026 06:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvxyu-000000008I4-1ffl

for dave@doctor.nl2k.ab.ca;

Fri, 27 Feb 2026 06:34:12 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Feb 2026 06:34:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f196.google.com ([209.85.210.196]:59723)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvwo2-00000000Fqb-0JKu

for sales@nk.ca;

Fri, 27 Feb 2026 05:19:07 -0700

Received: by mail-pf1-f196.google.com with SMTP id d2e1a72fcca58-827270d50d4so2078452b3a.3

for ; Fri, 27 Feb 2026 04:18:07 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=fusion360.agency; s=google; t=1772194681; x=1772799481; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=vsweOtuLM2Lm4e23uWITqk37YhQqG7x6BD/eg/mcspw=;

b=VmOrg+rfax8jmpYsbwjfbQ8seF+AfUPrtT3GzuLjB6Qx6HyBlPxKNG9xsg1MIQfEev

Q01xg73b/A+P5V6EV42l2lshB4KBKArVVJDBO8FivolB/guWHwRvM7Wv87AVK6fP2i1J

Tao4Nyug9huXgQNngPutGcoz2ISMzWw/kSJfdtdNC3fjR8lnHeI63AGuU84HiotcbtJy

cA5Vyfc0NMAjI8E4VZ5ISzbhKtY6h4p5qWOdOL1oJMAjBwuccUrvCW+2QiZWMssw7fY2

X2w5EmJp55AYQAGFaqr1Sww2FSluMlOdzvxuFxWYvRbP/XOUVLZIJkaLl1vqiOpkomoq

FPuA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772194681; x=1772799481;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=vsweOtuLM2Lm4e23uWITqk37YhQqG7x6BD/eg/mcspw=;

b=NfSGXV4lRp19snLXOO4Yw5LnxTZGsj0c4o/+hhdxNB1LvFoov21JKPP7f7+hEzai83

aeE+ihMUecR4fP18bfjLrYBtgqqOgrehCeqGd8gk2BTn5t0orJd+nVXj55tRIRiwjI0P

6o46JyNAFHClrna45IxKD+9aailjIPkH5mhxzwuEzqCcuhXENOY/M8bRdvGKFqkxm12X

tVaCK3f4eavTPZBpq8t8gB1+hbbHqXsPkBzlNadfEr6MZuBrilEKNvUDMeeEtmOOblmG

gmYcz81u7jyQKZsng/bgVkuDN0z7rFoGbsqSkRVpIHWJC7PTvdC+yoPHBFZ3N2Rq459P

HSHg==

X-Gm-Message-State: AOJu0Yw9F8UjQup1p2zu4PU6Hix4RjK0waeJ9P6RcfC0Gxh2C/3wNZ/S

sC93EJiWuBGu62MC0MLUTRyRUKZTmXOGmVVvg075FFDtl+P5EYN1vFUf1tj0ytopN8Pgnxj3ERM

gz91ZYK4=

X-Gm-Gg: ATEYQzz+e/xTnIfpBMfUNYS8QDpYf15EXcsL2P50001jMvRMHN5rlZrhhBvSpIP+EMn

3McIKqn4pw+Xei1PMg7ho6fEsnbOqZ8yoyuT0PD9mff7yvlJ5jHQDzt0MAE7DGnAdKJuqB0oUbR

wY9Jg0CoVZBWK3ujmHokIuZ2QX/uRWn6GdAqjjbGYcej1mECxJHUjCW1sJoV6nOZ5YxHUdhDEG9

FKSxI9tWEm6s8eWmeGZh1LemNrJdHbutilnzZDKp90TjXLigdhrc34c0t5QNsPdFB+aDMnuSqPu

KevyjkEWWVMJiG+xHBW1YyFRDHqFo6/FbIqPvjN4VZCbhJ3Inb9V9FnuZkoivAJNGccVcBxJm8G

UQ9b58DXNg2Jnvq2TQVA0hiK/0gj/PPbgortJlzB40MvoBJLNghQmYU5rDLcv57wf0YHn7brMMl

M1RpIZY/0cIPoUAX8hSG5R5hS/UsY4elROvlt8NyHfZxizqWM=

X-Received: by 2002:a05:6a00:c92:b0:827:26b0:58d6 with SMTP id d2e1a72fcca58-8274da12a0fmr2802330b3a.47.1772194680808;

Fri, 27 Feb 2026 04:18:00 -0800 (PST)

Received: from Kanhaiya ([2401:4900:1c62:8055:8d45:ff2f:995f:dac4])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-82739ff34fesm4680621b3a.42.2026.02.27.04.17.59

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 27 Feb 2026 04:18:00 -0800 (PST)

From: "Aarti"

To:

Subject: Designer\Developer

Date: Fri, 27 Feb 2026 17:35:28 +0530

Message-ID: <4317f01dca7e3$1df78dd0$59e6a970$@agency>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_43180_01DCA811.37AFC9D0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdynuCkCbIRuchtjSRGqGKSmVj8gWg==

Content-Language: en-us

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I'm reaching out to see if there is anything that would

like to create Shopify & Wordpress, upgrade, repair, or redesign on your

website or Mobile App. I am a web designer/developer that can do just about

anything you can imagine at very affordable prices.



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

Web/SEO/App spam from Microsoft Outlook Part 3

--_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);">

Hi,



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Would you be interested in building an app for your business? We are a prof=

essional Mobile Application Development Were based locally in Teddington, L=

ondon Company.



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Our Mobile App Development Services:



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Android & iOS Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

E-commerce Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Catering Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Real Estate Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Cleaning apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Lawyer Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Hospital/Clinic Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Music & video apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Photographic Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Taxi Booking App



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Gym & Fitness Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Hotel-Booking Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Spa & Salon Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Grocery Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

* ...and many more apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

I'd be pleased to send some of our created app samples & price list if =

you'd like to assess our work.



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Kind Regards,



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

David Smith



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Business Development Manager



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

*********************************








--_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_--

Web/SEO/App spam from Microsoft Outlook Part 2

Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

[52.103.43.21 listed in dnsbl.ahbl.org]

[52.103.43.21 listed in dnsbl.ahbl.org]

[52.103.43.21 listed in dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.21 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.43.21 listed in bl.score.senderscore.com]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.21 listed in sa-accredit.habeas.com]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.21 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[seoworkmarketingwebsite(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.21 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.43.21 listed in list.dnswl.org]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Mobile Apps?



--_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



Would you be interested in building an app for your business? We are a prof=

essional Mobile Application Development Were based locally in Teddington, L=

ondon Company.



Our Mobile App Development Services:



Android & iOS Apps

E-commerce Apps

Catering Apps

Real Estate Apps

Cleaning apps

Lawyer Apps

Hospital/Clinic Apps

Music & video apps

Photographic Apps

Taxi Booking App

Gym & Fitness Apps

Hotel-Booking Apps

Spa & Salon Apps

Grocery Apps

...and many more apps



I'd be pleased to send some of our created app samples & price list if you'=

d like to assess our work.



Kind Regards,

David Smith

Business Development Manager

********************************

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Feb 2026 04:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvwBq-000000002BR-0ZWP

for dave@doctor.nl2k.ab.ca;

Fri, 27 Feb 2026 04:39:26 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Feb 2026 04:39:25 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19010021.outbound.protection.outlook.com ([52.103.43.21]:53072 helo=TY3P286CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvsNA-000000009Bt-0UgF

for sales@nk.ca;

Fri, 27 Feb 2026 00:35:03 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Gv+irqd+FrDA1mMxo1m9aa1YaFNN93ZRN0w330TJhJJNyelGfK370LnIfnOMBQu/EsnizMAIPBt9oikkOzg1PbBHFeEEMHkm5Pn5TVpTE2gHUXZCFDNSIOyqpnq0xFowcJjUwXTIT95bMv+FpRLH3qSUaDaPebLha/DiH7JwJq64zfulfd/ml+7TjcyDyDUJipuUKn4eJx6ZnlSL/JZVC+0js0JpEOdLdyc2ApK/2qB/zKwGKK37Jc2TBlFC6EtOR2pc9h4L1Jet47rMI4DBsZqhIXj7VT5bmuoYrPKGthWEh8mC/k7WIKdEPSA5aiB3mhEBw/fiENsE5hZ1AFxPdA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fc/kN3E8SxRGKKRhqjjXLW15geWPLav+7qkn+kWmvxw=;

b=qnD19XAEqb38jN6/NX6HvucfMNlOjTAypmKpgQ+gUWhAERtKHbp1uGK4NqX2kcVyHO0R1D5qEt00QolpSQqUY1Wje4wfGaVnUefqoBN7d3wVTAH/ushVJfuSgEld+E5jAwU9rxfpwDDCEcqlbIbHZ4GjVHlOetLA4/grdvy2Uiwu82m1HPEy5W3KL/N4siDYDtXpbhcPJ2yZL4i1jEbQKmF91dw4dwdf3qPQ1t2LDoqV2vE7DlzcWKbXznKJ1khkcM5UMN4zPqzHx9lhZ0WBIhNDXNmK1J3I5cfy7UwW81N/ZiT8LlDgsfwzckMD+/dGz75SuOjY0d0VSlZSNzBkAA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=fc/kN3E8SxRGKKRhqjjXLW15geWPLav+7qkn+kWmvxw=;

b=EAKBeKcCrL4vXRCm9ZSTlb7lpcTLFkWqTUgUP9JVQIw3/rnosq5ViJXXgTUUiOwKH7CHADvVeap/vk0siGc8VlUs/T8XlHH3EyZtm2nHnslC2lb2RFZm2fyezdodFzpPpYEJLVwUE0wUIpwjD/dpJSL83n+G0zXMRMUK83PTsQkSGPV+ocPf1Ne8NLHYLGECmYwedjVQw6LduoX70Of+3FTrzWLHCgQ0U6kCSGyaIOoXXRbp6Im9+HH9+vo0ZC/j/PbUdD0JydrCs31Dm+gFc/iMvbAjcngDxokPnk6vjk1eU7oNoIBl/skIROsP+EbkUpL/g5EJC5rxGqQQCiz2KQ==

Received: from TYCPR01MB8309.jpnprd01.prod.outlook.com (2603:1096:400:159::14)

by OS3PR01MB7359.jpnprd01.prod.outlook.com (2603:1096:604:149::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.15; Fri, 27 Feb

2026 07:33:55 +0000

Received: from TYCPR01MB8309.jpnprd01.prod.outlook.com

([fe80::ae67:81ef:8f23:edd6]) by TYCPR01MB8309.jpnprd01.prod.outlook.com

([fe80::ae67:81ef:8f23:edd6%5]) with mapi id 15.20.9654.014; Fri, 27 Feb 2026

07:33:55 +0000

From: David Smith

Subject: Mobile Apps?

Thread-Topic: Mobile Apps?

Thread-Index: AQHcp7s0LbLDHbY2ZEyp3cLpSobTLw==

Date: Fri, 27 Feb 2026 07:33:55 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYCPR01MB8309:EE_|OS3PR01MB7359:EE_

x-ms-office365-filtering-correlation-id: 9e0efdce-bd36-4d4c-f1b5-08de75d29019

x-microsoft-antispam:

BCL:0;ARA:14566002|20031999003|39105399006|8060799015|8062599012|15030799006|15080799012|19110799012|31061999003|461199028|40105399003|3412199025|440099028|102099032|30101999003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?oQ1l0VVx28+MzVFRzqonIfp984HzW8ciTqIr1dnn/1vPemd/7KzLgiEvct?=

=?iso-8859-1?Q?eKpbC9CcyY2sQOf/U3y7TvmlazEBBxUbqOrirQuVQrmF60VAik0c6/+wUO?=

=?iso-8859-1?Q?XqR4xSJ9kAqMzrRZBLCnXAZBII/lVVUCxvj8y8bV8uP9FEE9aawpc6DOHm?=

=?iso-8859-1?Q?xckZDf9YJ4MDP7EVIPgfyuf5Fkaz5kHoEhueuJpM5DPxoDs3QNBYyrnnAM?=

=?iso-8859-1?Q?5ZKGE6JKixSPxdkFbodnp1yhxrl9UbvFL2CUbgW9X8iX+HUuuA70MA4F98?=

=?iso-8859-1?Q?J3j7M1rYwAPHmsv7KuAQr/uuNWTkSrWIgDC0hidjvdUPMwe9sVo5mVs8XS?=

=?iso-8859-1?Q?jaI48HVKzdj+VSKUW63Uxbu9TI9INUrRdFEps7dNAZcR4zMZcl6Tbbex0k?=

=?iso-8859-1?Q?UU2wggJO2KMNJXFOiHCyj7XZeBi4H0tuwWvIu4Wupy/q+3RVRemwil+I9L?=

=?iso-8859-1?Q?vWlB7nKCvNVuSS4F4tJzqmDvIiDlaIZ97nxcBiGu0hOsLKhOJMxlEUnIIn?=

=?iso-8859-1?Q?761oELHAuOEQ6/jqfZ+KY5OAANanJGPrByEHfgQQmXc8BWgsQDfhCPmfJm?=

=?iso-8859-1?Q?ehoqwYLHY8U1dXkFuoRr1BuUzTYxWJXx4vehUdANRZNJkuSBWvTboQwmoG?=

=?iso-8859-1?Q?Z0v2R9HNOIWobh3DhU6Jk03CWlctXeIITYm7rPa/Dp+9OAh8XuZOs7BpYV?=

=?iso-8859-1?Q?IkLNOXbQsco3cWJ1DiPFvTmsFb3RE5iQrge03IugnJ8XOWW/KpJRHYI/D9?=

=?iso-8859-1?Q?3yP1K+1WBWTb0+M/c/KaruI4JZy1nMy7fpYSYrZkefK2U7BNTf+QIZM1wY?=

=?iso-8859-1?Q?8PKeWZLaU9+Zwqe2jnYXtZdgihXLuKaqb5KuKd6QihNGiePlAWjCOVU8Xl?=

=?iso-8859-1?Q?CqGgA8XJiHM6QB8HyPt28uQ0EeUhMoYNiuroUL/aOqyd+r6g6J5CdK1nX+?=

=?iso-8859-1?Q?j2l7tzoNbw9YDBUs6457TA3dLdJka+RXLBktFP+M2wqKQ4gRZ9l4q/gcfe?=

=?iso-8859-1?Q?GJVYZtAgOX1W2hG/ix28I6zULs8YeyF0IdgFBN?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?Tk67gxh9/Kn7M6FRta+VxdTKHjj98kcSaXukG9GW+W5EhtKSCa0emGl2Vt?=

=?iso-8859-1?Q?XxjS0qsnGdsuStzZ3Q+AsRtP5ywkqQRThuSvygMnSvS2nPzLSTj+8hyus4?=

=?iso-8859-1?Q?HQ/f5f3VcPDxNjWQoUyKN8N0h6PC8OIlEyOJRXpEsS5SsUU6z+zKVs9XfC?=

=?iso-8859-1?Q?JG/zy49BIDE7OF3w2gAkPHdtnRXyN+bNZmrI1Sws1bzRtd0RUnfFQl8JY0?=

=?iso-8859-1?Q?51soQmN1dH++5QIpjkqHdo0iJD5DjAoe+f1Xc32Bpt7b8vbV3fYT6zWdZ4?=

=?iso-8859-1?Q?xJsukWSqg/WAGCNCUzTNN64JDMHHQn6n6lk+HuRk9CVnmME3TW9Jy+LlC+?=

=?iso-8859-1?Q?vBfQrkb7I0vpEvtenQh8qN0P5aDne1o6ZjHypm5bHHtt9Fw4WissyLfMDP?=

=?iso-8859-1?Q?KDoeOHjhs/zXuYq099KCkEVl1VGq33X5Off/8+Y+mEOWBLrT2cdj1NU0SI?=

=?iso-8859-1?Q?2ioLqLYbP03J4bjaeEx5KmNwXFdj/qWwG6Xa9aroqt7fcyrV8MT5E7dMOh?=

=?iso-8859-1?Q?cF0Du/iPWZWeLgnXI8pxyqdE3K7/vbSDjkEUfT8mRWNjrWnrVWY0wAwe9K?=

=?iso-8859-1?Q?pkIjLcGn4/yLSwfT7UfzEyxmc5uZPrzqDe4vay30p2dsVWgeINw98P1FaU?=

=?iso-8859-1?Q?SUiD9Qzr+oP6sgzoi1ceh1438DdKMrhKyl6EyJ3a1rJCsc4otaYd8YxYDq?=

=?iso-8859-1?Q?vl1IjedH0+ox7dLS8tLg5WTaqRHqNfjbTvJ65MvunK+kVKQgqcVJUto/RX?=

=?iso-8859-1?Q?+v0WwrHNkobXlxqb9JGHOLq9W3D/2Ylk73MC6+fdgw2afXiShgZLmHTgQA?=

=?iso-8859-1?Q?+7Jx6xWnyYDEG1ikg0tcQEGpuhKYN3dNsMuTwv7WrDnpUhIsrfW/CtE6oL?=

=?iso-8859-1?Q?6rMTZwtJw+Ce9VJvJKp9q4tcsxYRdXQUin+ynfdB0/Q4XmiO+GFGVC/WNJ?=

=?iso-8859-1?Q?wp1MzKyBkuPeIpiMUDxyESShFb1d6CzC8zu+Co3rR4N+fv7gJv14xJ3JIH?=

=?iso-8859-1?Q?OH0IETJUd8mjSEh6pI69Plg43J0OYyjmAX6YQ6vIug5uYRr/C7gXG9Ody4?=

=?iso-8859-1?Q?a11fa99yPxPyPDPQ3jNOoIkvGpvsKJfiXtt9Fb8qW4ZbgVA8wMc9EGOrN0?=

=?iso-8859-1?Q?bzVSJU3CEodRLdktI6L5GPCwrhdd5e4otKwmv27SvrDtZLatsa0V8bQBNv?=

=?iso-8859-1?Q?KlF6YdztKbwB0Ic5zTyIMGRKJhJRYSzoRVJP9w80y/0hFBWpah0CBDOKnj?=

=?iso-8859-1?Q?gcxlRsv5ppjWrXSM+HjAiagQ/q72Emo2szxJvNlm4zyBPZft4bSH0o7iSa?=

=?iso-8859-1?Q?IYDoegGGFxrsWZ1k01JGTI7E0eKa5D3ZaUvmh0qhvGY8dAHsudslqmfh1p?=

=?iso-8859-1?Q?6WjZliMCh2t0rwQ7vxaJ2wVHbGLc+kbkoWLre6kl/EzYxBIiSFB9m5pJR0?=

=?iso-8859-1?Q?SgHhhRM0ue8DNGisn/KrEHLffCiPmzHBbCpFX9VRInuWfbq7JTM4JO814Z?=

=?iso-8859-1?Q?MpPml5shylSWEgsRi5ZmbN1OpjfNg18+YlWrrgGIUb/g=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYCPR01MB8309.jpnprd01.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 9e0efdce-bd36-4d4c-f1b5-08de75d29019

X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2026 07:33:55.4340

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: OS3PR01MB7359

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Would you be interested in building an app for your business?

We are a professional Mobile Application Development Were based locally in

Teddington, London Company. Our Mobile App Development Services:

Dragonfly phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 15:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvja2-00000000DAW-3Xh2

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 15:11:34 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 15:11:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [178.238.45.181] (port=45286 helo=getluff.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvjRe-00000000Cli-3uhb

for doctor@nl2k.ab.ca;

Thu, 26 Feb 2026 15:03:02 -0700

Received: by getluff.com (Postfix, from userid 33)

id 1684A4E54E; Thu, 26 Feb 2026 22:02:07 +0000 (UTC)

To: doctor@nl2k.ab.ca

Subject: Your package is on hold!

Date: Thu, 26 Feb 2026 21:47:48 +0000

From: =?UTF-8?Q?Intelcom_-_Dragonfly=C2=AE?=

Message-ID:

List-Unsubscribe: mailto:bounce086-8nbcTJvrBuXsfeG@getluff.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1f25cb1ca6c3a1453dc6bd5568695907e"

Content-Transfer-Encoding: 8bit

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: notifications@ca.dragonflyinternational.com| French version

follows



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.1 TW_UX BODY: Odd Letter Triples with UX

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 A_HREF_NOWHERE A link tag with empty href

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 HREF_EMPTY_NORDNS Empty href + no rDNS

2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Your package is on hold!







notifications@ca.dragonflyinternational.com|



French version follows



Intelcom is now Dragonfly! Learn more



Tracking # INTLCMH868877879

Hi,

You have a package waiting to be delivered!



Your merchant has handed us your package INTLCMH868877879.







However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 4.95 payable via our secure form below:

Access the form



Questions? Take a look at our FAQ.



This is an automated email, please do not reply.







Intelcom est maintenant Dragonfly! En savoir plus



# de suivi INTLCMH868877879

Bonjour,

Vous avez un colis en attente de livraison!



Votre marchand nous a remis votre colis INTLCMH868877879.







Cependant, vous avez un colis en attente de livraison en raison du non-paiement des frais de douane, des taxes et des frais de courtage auxquels il est soumis conformément aux conditions générales de l'Agence des services frontaliers du Canada, d'un montant de 4.95 $ CA, payable via notre formulaire sécurisé ci-dessous :

Accéder au formulaire



Des questions? Consultez notre FAQ.



Ceci est un message automatisé, veuillez ne pas répondre à ce courriel.