Payment phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Thu, 05 Nov 2026 16:26:00 -0600

Received: from mail-westcentralusazon11020084.outbound.protection.outlook.com ([40.93.198.84]:61560 helo=CY7PR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xP5u7-00000000GOg-0Z8Z

for dave@nk.ca;

Thu, 05 Nov 2026 16:25:59 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=kdV5JSgpg0mg0T/390UofFpFZm/NNFQaOQR4X4n8ed5J4TBItOm+B1wnajVe/xbo4Xq4K8dyexV5LITpa1s6E+2UNvXIRsl2fZQs+Qhgqmxho07LVxrCk1IweOoqnHpsoBXTZezgTlIUeytepEo7e82kd8djxalg2Ph7BEGuyF9LS3YJ1C9GUxNG9UnppH8DQgD84QpmEBIUoZkkXEf9jNzo8Z1j7TufhRCh8nCC2Iu7g5oUcXWfKMy0+IbhOHkC9bljcBsDGCvNXoHErqY5bRwuNSYZEXSonzEVQFY/PIZoPM83lfCgiKJ2cCIb6zagsixRDlOjoqg4ODLh475hZQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fbaPxmZnE1wLHWxnIiMwr9xkWrmL/OPnHPzEzvi31lc=;

b=pAjKwQGqB9+7/M2r2faQghA59elvpqY4DXyIcADfi0yXzm2yqR2Pjv1siN+L+CbLLirUU4K5bc/bqSEsazufZOat1EGE8TUgnNpFINkW+jB4wl2i4PfONMvrYXSDjzdM6L4a4+Di/P8z79UQDfRvqfVY8f2bZeOBXUGXglG5NJ6RFyjjBBPgHUOd0FK194lAIfP31D+008falONj042n6Uts6tFmJ4HeIe0IiZUi4mhR2BAV+IxyYPPdWjKuAMw31IrJwva453d3uandhoZiS5s0lbEjT+hQmFJse2Fm79eXX2/gDGgpJSxrTwHjVbHaUwHUlJbxpAyHuFm7iu2++Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

104.128.190.227) smtp.rcpttodomain=nk.ca smtp.mailfrom=kernprintservices.com;

dmarc=fail (p=quarantine sp=quarantine pct=100) action=quarantine

header.from=kernprintservices.com; dkim=none (message not signed); arc=none

(0)

Received: from BN9PR03CA0493.namprd03.prod.outlook.com (2603:10b6:408:130::18)

by BY1P223MB1183.NAMP223.PROD.OUTLOOK.COM (2603:10b6:a03:4a9::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.10; Thu, 5 Nov

2026 22:24:51 +0000

Received: from BN3PEPF00022BCB.namprd03.prod.outlook.com

(2603:10b6:408:130:cafe::9c) by BN9PR03CA0493.outlook.office365.com

(2603:10b6:408:130::18) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.592.8 via Frontend Transport; Thu, 5

Nov 2026 22:24:50 +0000

X-MS-Exchange-Authentication-Results: mx.microsoft.com 1; spf=fail (sender IP

is 104.128.190.227) smtp.mailfrom=kernprintservices.com; dkim=none (message

not signed) header.d=none;dmarc=fail action=quarantine

header.from=kernprintservices.com;

Received-SPF: Fail (protection.outlook.com: domain of kernprintservices.com

does not designate 104.128.190.227 as permitted sender)

receiver=protection.outlook.com; client-ip=104.128.190.227; helo=joint-worth;

Received: from joint-worth (104.128.190.227) by

BN3PEPF00022BCB.mail.protection.outlook.com (10.167.248.168) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.615.4

via Frontend Transport; Thu, 5 Nov 2026 22:24:49 +0000

From: noreply@kernprintservices.com

To: dave@nk.ca

Subject: Secure Message: Electronic Payment &89574;MEHPEYMYT Scheduled

MIME-Version: 1.0

Date: Thu, 05 Nov 2026 22:24:49 +0000

Content-Type: multipart/mixed;

boundary="v2kl7S8TBG0tDTthsneYWIDhfWZYiU8TrahlR2kK"

Message-ID:

<6ef37fd1-3516-43eb-b3df-246b01bf869a@BN3PEPF00022BCB.namprd03.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN3PEPF00022BCB:EE_|BY1P223MB1183:EE_

X-MS-Office365-Filtering-Correlation-Id: 8c470f45-f7a1-49b1-004a-08df3b8b9b06

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|36860700016|82310400026|34020700016|61400799027|376014|6049299003|23010399003|16102099003|10067099003|18002099003|6143699003|8096899003|4053099003|3613699012|56012099006|261028144727099003|261009223027099003|261022105027099003|261021135927099003|261026140227099003|260925021311599003|260925021911599003|260925022911599003|7840400017;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:104.128.190.227;CTRY:GB;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:joint-worth;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(36860700016)(82310400026)(34020700016)(61400799027)(376014)(6049299003)(23010399003)(16102099003)(10067099003)(18002099003)(6143699003)(8096899003)(4053099003)(3613699012)(56012099006)(261028144727099003)(261009223027099003)(261022105027099003)(261021135927099003)(261026140227099003)(260925021311599003)(260925021911599003)(260925022911599003)(7840400017);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

hdRXlV1VXnE70Ligr5dUU2Am9E20JsRf5dT6Wn8EugTCsjmJbdKUv+S+HPJz/2A9ZkbT+HBMwrFl6aAdRUdv3hqjd0OPC8sBPivnyeFf6fYMZ+8XhEJXizz4535D2tmg+PaoTZ3yvx0X+fGWOGdQmVBvs8Ge854qLDNwzgrYhXQukQuyf7Bf5KlyL71cEFsBFXwemXhrd+E63iXlGYgTMMzhkzhMGPTufc4pdJak85VjKQYzpQ2cYANA+MH0x5UaDI10XsQAltqrvsS4Q+gWeRLdWW4Sur+LaSFxyq6GZCkrPiG3Ljn/NbLrE6ydH9N/3QKfANUWxEmDrJHEdSa7Sk1pYfVBUrKtqpHVOsYy22eUbn/XHfCNSiHmURJJZ3iu76rApbN1OaRDmfoUhS4IGWhn6rdUyHP/eWEnKHPST9ezjcZGLF9bvUY1AX6U6gNq

X-OriginatorOrg: kernprintservices.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Nov 2026 22:24:49.4578

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 8c470f45-f7a1-49b1-004a-08df3b8b9b06

X-MS-Exchange-CrossTenant-Id: cadcdbb3-5905-4692-ab3c-8b3c36f8833f

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=cadcdbb3-5905-4692-ab3c-8b3c36f8833f;Ip=[104.128.190.227];Helo=[joint-worth]

X-MS-Exchange-CrossTenant-AuthSource:

BN3PEPF00022BCB.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1P223MB1183

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: . MiTek Holdings, Inc.. All Rights Reserved ---- This communication

(including any attachments) contains information which is confidential and

may also be privileged. It is for the exclusive use of th [...]



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.198.84 listed in dnsbl.ahbl.org]

[40.93.198.84 listed in dnsbl.ahbl.org]

[40.93.198.84 listed in dnsbl.ahbl.org]

[40.93.198.84 listed in dnsbl.ahbl.org]

[104.128.190.227 listed in dnsbl.ahbl.org]

[104.128.190.227 listed in dnsbl.ahbl.org]

[104.128.190.227 listed in dnsbl.ahbl.org]

[104.128.190.227 listed in dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.198.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.198.84 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.198.84 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.198.84 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.198.84 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.198.84 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.198.84 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Secure Message: Electronic Payment &89574;MEHPEYMYT Scheduled



--v2kl7S8TBG0tDTthsneYWIDhfWZYiU8TrahlR2kK

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable



. MiTek Holdings, Inc.. All Rights Reserved ---- This communication (includ=

ing any attachments) contains information which is confidential and may als=

o be privileged. It is for the exclusive use of the intended recipient(s). =

If you are not the intended recipient(s), please note that any distribution=

, copying, or use of this communication or the information in it is strictl=

y prohibited. If you have received this communication in error, please noti=

fy the sender immediately and then destroy any copies of it. '. If the disc=

laimer can't be applied, take no action.

--v2kl7S8TBG0tDTthsneYWIDhfWZYiU8TrahlR2kK

Content-Disposition: attachment;

filename*0="SecureMessageAtt_#7227498986.zip"

Content-Type: application/zip

Content-Transfer-Encoding: base64



UEsDBBQAAAAIABizZV2UBxolhQUAAEcKAAAoAAAATmtCaWxsUGF5bWVudFJlcG9ydHNfI1JlZkJX

TkZEQVJFREwuaHRtbK1WWXPbNhB+969AkUkljSwRPCTKlOCMLCdpEzt2YruJm3FnQHIpIqIAGgQl

sZn89w5BHU7b9KnEAxd7frtYHJMXm2WGVqAKLgXFdp9gBCKSMRdziu9uX/VG+MXp0aRYzdFmmYmC

4lTrPLCs9XrdX7t9qeaWQwixitUcHyG05rFOKbYJeY5RCnye6t1sxWF9JjcUE0SQRwgaegSjXEEB

agXTIodIf2CaS4o3lzy+v+QxWgJofHqE0KTQVQZIVzlQrGGjrago8Onkp8+z8+nt9PMRQgjVKL8a

CqGYF3nGqgCFmYwW4y13ydSciwCRPYOLXgMzQDYhq/QHgvgg0bKM0h6LNJciQEsmeF5mNW6x0+it

IVxw3dMs76V8nma1m14kM6kCpBUTRc4UCN3ofztC6OHhdGKZFE2yMSRFTSA0SXimQSEeU1ykGG0o

7tl1Nasdsau4813FXfLc1K3xAedK5jcpi+UaxfUKYBRXFDsYFTo+hxU38Cl2MUoyKeOezFnEdUUx

6dvY2kKxGiwGobWDOJk3GSVSLSk2ZMY0tD2CnJHX2YKYKIj0DqrrkANS38FIbeoewSjhWUbxs8R8

NTYlF0DxM4jqYeQaFMWlytrPirSzR2a81yUK5cbUyPZMhezhvj7ek5g1Xccc/jhk7MVePNoxersi

9wf7mDnT6dZcSAFPbO0hcz32d1t3z8i4gIjlFCtZivg79hfJxY6/a2SKLx0HuSN04RLkDdGFN0TO

AVrMipQpxaomrydcmSQFNOnuW4EJvmQaENNa8bDU8I4tgeJ/WGG0YlkJRW09rkftewHVLV/WTDIm

fWcwJn1/MLYxiktFsVtgpCAHpmeyFJpiLmJIuOAaDi1UV21L17u4Xqvh0KyV62GUSKF7CVvyrKK4

5L2CiaJXgOLJcVEVGpa9kh/3WJ5n0GsYxweVrXnB/4R6O2yn6+2aD8mhwWy/Hvj0BqJScV2hKIVo

gQJ0f33+ZnZ1eTe7m1g1vH9HOiD/K1J7j8t364FPrwQgzXKkJcqVjADiA5yJNTe/fctHj97tDdi/

YSRFlPFoQXE7KYU5ntqdryum0O/Dd/dn9OfHUuqxHbng2rYbDXwvBs/zCIRxeOKECfjEdcjJyPMH

ruN4SegP/Ji4jIROOAqZ73hRfMIc8AZhGPlROIz9kDiN1+OzgvvrbYhgy3s9nakL6o9rCO8X0Qef

xjIqlyB0fw76ZQY1eVb9Grcbg8fhUgl/9aWZdWql6a5N262YadZbtTrG3VlVfvKpcdov8ozrtgHQ

6S9ZfsieX9kfi+Pqyr2fdr4q0KUSyMyeO5RS+4WRb+1brU5fQX0TQrvTr/dhzQqMyvjbgWPC3167

udhmOz2bnb989fqXX9+8vbh8d3X9/sPN7d1vHz/d/87CKIZknvIvi2wpZP6oCl2u1pvqT2I7rjcY

+qOTrrUtVkXe3EypcfyfiI4rL3LntNUaJ1K1azAmI0rG5v9zpsemOP0MxFynDbfbbRrBZEON/LMR

PIyNuy5tJJS2aOtFi7YCA+SzAdWv9/HmKmnK2Xn4Zhbg4i6zKdMybBsPnWOIQpdRAWt0x4UeTesj

qW3UtlA6BvE/0T5R2aM1zrYQaaMRpUzNZAxT3fhoVuI1I2+XJuotbPTL+ukCqt3pm0cMtE3n/yCw

ifFfgf+gxnsze27orfqDia3T6QnsY5/DLnZsqLZx1RmvuYjlup/JyFyy/VRBQo3p+Fun3THXFTHn

CnlyWT25rcwzqTkhnrwdMIpKVUhFcS650KCaM3YyN4fCbith1GwbivOSe0NlBY/d9TV4JADrxOLD

POh+utbd68fAupjJkfUpCHNv+Lb8EnCxKj/6j0F0C5JbF0F3eDNTFguuq6J7mS0CSuuAk/rdd3r0

F1BLAQIUAxQAAAAIABizZV2UBxolhQUAAEcKAAAoAAAAAAAAAAAAAACkgQAAAABOa0JpbGxQYXlt

ZW50UmVwb3J0c18jUmVmQldORkRBUkVETC5odG1sUEsFBgAAAAABAAEAVgAAAMsFAAAAAA==

--v2kl7S8TBG0tDTthsneYWIDhfWZYiU8TrahlR2kK--

Microsoft Teams phish from Algeria

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Thu, 05 Nov 2026 18:22:59 -0600

Received: from sgadz.com ([41.110.188.158]:58946 helo=mail.sgadz.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xP7ig-00000000Cnq-2ItV

for dave@nk.ca;

Thu, 05 Nov 2026 18:22:17 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.sgadz.com (Postfix) with ESMTP id 804B828507A;

Thu, 05 Nov 2026 18:34:40 +0000 (UTC)

Received: from mail.sgadz.com ([127.0.0.1])

by localhost (mail.sgadz.com [127.0.0.1]) (amavis, port 10032) with ESMTP

id VR9hTqU-PU-9; Thu, 5 Nov 2026 18:34:40 +0000 (UTC)

Received: from localhost (localhost [127.0.0.1])

by mail.sgadz.com (Postfix) with ESMTP id 4DEDC28509E;

Thu, 05 Nov 2026 18:34:40 +0000 (UTC)

X-Virus-Scanned: amavis at sgadz.com

Received: from mail.sgadz.com ([127.0.0.1])

by localhost (mail.sgadz.com [127.0.0.1]) (amavis, port 10026) with ESMTP

id dudcBk6XJPPP; Thu, 5 Nov 2026 18:34:40 +0000 (UTC)

Received: from [167.148.41.135] (unknown [172.20.140.2])

by mail.sgadz.com (Postfix) with ESMTP id 94BAD28507A;

Thu, 05 Nov 2026 18:34:28 +0000 (UTC)

Content-Type: multipart/alternative; boundary="===============0147994975=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "MicrosoftTeams Meeting "

Date: Thu, 05 Nov 2026 18:34:16 +0000

Message-Id: <20261105183428.94BAD28507A@mail.sgadz.com>



You will not see this in a MIME-aware mail reader.

--===============0147994975==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams =



=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============0147994975==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/nBk0XV16d1">Reply, Go to conversation<=

/A> =



Microsoft Teams







Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============0147994975==--

Microsoft Teams Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Thu, 05 Nov 2026 15:59:59 -0600

Received: from sgadz.com ([41.110.188.158]:48308 helo=mail.sgadz.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xP5Uq-00000000C7E-3Gfi

for dave@nl2k.ab.ca;

Thu, 05 Nov 2026 15:59:51 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.sgadz.com (Postfix) with ESMTP id C74EA284E6C;

Thu, 05 Nov 2026 18:31:09 +0000 (UTC)

Received: from mail.sgadz.com ([127.0.0.1])

by localhost (mail.sgadz.com [127.0.0.1]) (amavis, port 10032) with ESMTP

id UXLLz7tUKeBS; Thu, 5 Nov 2026 18:31:09 +0000 (UTC)

Received: from localhost (localhost [127.0.0.1])

by mail.sgadz.com (Postfix) with ESMTP id 909E4284E84;

Thu, 05 Nov 2026 18:31:09 +0000 (UTC)

X-Virus-Scanned: amavis at sgadz.com

Received: from mail.sgadz.com ([127.0.0.1])

by localhost (mail.sgadz.com [127.0.0.1]) (amavis, port 10026) with ESMTP

id Pn7U4TxQxQKB; Thu, 5 Nov 2026 18:31:09 +0000 (UTC)

Received: from [167.148.41.135] (unknown [172.20.140.2])

by mail.sgadz.com (Postfix) with ESMTP id F21D1284E6C;

Thu, 05 Nov 2026 18:30:57 +0000 (UTC)

Content-Type: multipart/alternative; boundary="===============1335020016=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "MicrosoftTeams Meeting "

Date: Thu, 05 Nov 2026 18:30:45 +0000

Message-Id: <20261105183057.F21D1284E6C@mail.sgadz.com>



You will not see this in a MIME-aware mail reader.

--===============1335020016==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams =



=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============1335020016==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/nBk0XV16d1">Reply, Go to conversation<=

/A> =



Microsoft Teams







Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============1335020016==--

Nigerian spam from Google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Nov 2026 11:32:00 -0600

Received: from mail-yx1-f49.google.com ([74.125.224.49]:53422)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xP1JZ-00000000OOO-0Ruw

for dave@doctor.nl2k.ab.ca;

Thu, 05 Nov 2026 11:31:56 -0600

Received: by mail-yx1-f49.google.com with SMTP id 956f58d0204a3-67921b515a7so2270048d50.2

for ; Thu, 05 Nov 2026 09:31:00 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1793899854; cv=none;

d=google.com; s=arc-20260327;

b=M9dDB8t4l7K4pEMhY4El0kbVN/1C1z++jE00F5eweZfGbfudWInONTIXmQr+ZgT9ul

QlHSFnTIej229uf3pyFiRYG+df3gb7jYMKUhPlUOVjN6wVW/WAmbBmPrq885aCqgzXJI

Naijg/ozE+b/ra5+OXG9OYU3hMBP764mN3MVRV6ptpsqcCAUv4YSiUWoa8t3s5sReNDc

/Ivrzv3cu6P3pC82nUh0yxj+jA95E50xuHsnPeiK+B2GKWnWU5Ez0dakaLMR2f7tPEh7

6akF4mJ5MzmLffS8mZf/MLh3x6a4ItP48/nXwdcBAqM56dhtNHYZUTG3T1wvlNtGyZA5

RovQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=GYoqRJ7/TzvjjUp24O8EUMdFyDgC73T8GcqVLxTaXvg=;

fh=DOfwldlz8T0KwF73H75UBVmx5OmMnxQr7pROXIi8QdY=;

b=cn3nNSm9/nd5r0xHV5IcVEgsD6ds6r+5AB7OKv9DYYP0TDWQCXCYdnJJXfDos43Qz3

zqjGtQ24gT93JcnK6b/XS3itK+ub2S2I7WWCk77JCKsVFfOXE8W6YFALMR739V2GMQ1s

NNFKRBKlr4zai0hEYKPBFXjLOsoh1iP8w64CDHGS/V3TbPo+3EOhkHuIAiyUl6d6ld/u

DjASzGuLIdcwRStuxaC0lPI4gI5uZ6JDUC7PIseojBgRQSMVwXidqRt6T5N9XPvvotKv

J+2oo+vFJkR2vR+Vjk2EWwokZ2NYRBUcLU6qNg4QJlxGmoxhrxga4bL8lpKrbXOKJRsr

zpzg==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1793899854; x=1794504654; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=GYoqRJ7/TzvjjUp24O8EUMdFyDgC73T8GcqVLxTaXvg=;

b=B4YeDy9tyt+i2h+o7/ltmMriNo1MB1+kFBJN5as1tlv3IHeDKKIQp2VSFnGMYUZLX3

lwVL1wfMJLePMsAKuL8KfZaSARjDbXPiwEQ+N5IOthuP6xB2mOlI+rih14RuUHJONuRw

AFB/ZbPVowzPEzYQ56sHnJe1IupyyIDgHFINITwZX8Ruo5rysOOY3l0njeNftvM+g9eF

RwqwQMJiG9NBR0rcSQpSNmnHwOcjWmubE/AKkuwueswbjNwXQMHYzBkpUFZZ+p/9TIl4

08FxPSXdtwqxCZCbAJ+Ijb3LMg6/60iQ852PxejK8bWK5MPcKt02TyM8a3XVkxf0QwqY

ghYQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793899854; x=1794504654;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=GYoqRJ7/TzvjjUp24O8EUMdFyDgC73T8GcqVLxTaXvg=;

b=vibVktKxoZAKM16JZ7TajX7v5jf1tIJ7WaNFqo6buLAbii3htOhcHgjrzRsYghXSQA

nm3S08r20Z15UtyanUNaFFM7s/1JqYwGvn6j4UFldJkgNCDrD1JcwSX6Sny89/wqQyDT

HPwJqilEDJUJC+UGJKbiOyQtt9ecdB78eI2YiTVli/9kZ1klSIKranA1avx827OQnEEB

o5So9RPQjYuHH3v9u/sgFwFSy8OWcoc9yjLgJf+fb+HkNFyA1/iznGk0DjvYxh4Kq1+/

G2h7tDaaUZzI/mRjQUJK8xges1Rd661xkAnlpLMF4oAwjJLveSVdvvBw3s0YvpegDSum

DADg==

X-Forwarded-Encrypted: i=1; AKwUvByC45JCL2kl8k1Hp/f5bSrfnmZy3UyM8OgmAElu3qOwpAKQT0bJQCuxsQw9TjlA6zmXqQ7d@doctor.nl2k.ab.ca

X-Gm-Message-State: APuU4Z+Tuh9DT0Zb2O0RDnQQYCR3sNZWWTkTohZz+hSwb9gVUEeqfIIn

kPIkKGcosdcGtZzivWvA8DmebxZwTTwSCQhp0olbUvpi5Dpuk6TKrUvp3s+/zRhJblM/UusjC+u

Baf1TjOyFt9nxO5QFtwuh2Xzz/CNM5Lc=

X-Gm-Gg: AYBFou3HVcaTgJUofh56gyzMINZ8nuLIKApVnHOtl7ivedSCgEhCWBjdYMVUhpR5O83

W2RQgOHzWv6bFtch+mb1aN3Kk7JXSUCLq96YDjETFx1GpPwtRJL47pXPOhkQIxCZuKaznWH6VRY

DEQsbmShyWQLVeaMENVpZhjY0/Ph/QCubm+0Tg4zw3uBFl4QJJ0fyOKy55mWQw1CDx+5RN1Yku7

z0m75lyAmIiqEh59uniVbouwFv5gc8ogpMv4bfsWE9DcWcpYXuKA4B0TQaseGA8KJRnMrgNLJqt

RvuXNGSZ+LRNtVaXQXKCFm8TFD3wwwHw4kZKLMyNQcRuDT+3I0WAMtWjUsCyjCDqvRXOFUF6uiI

8e7Kr4HAaflXmTHb389Ajm5zCDSVDwhftxs1DOWvagnHOtEX6gPl2ws39Rjdgt834vdE=

X-Received: by 2002:a05:690e:4503:10b0:671:506a:9fb5 with SMTP id

956f58d0204a3-67ba4fb4adbmr9296936d50.35.1793899853501; Thu, 05 Nov 2026

09:30:53 -0800 (PST)

MIME-Version: 1.0

Reply-To: aj1209479@gmail.com

From: "MRS.MARY NELSON"

Date: Thu, 5 Nov 2026 09:30:49 -0800

X-Gm-Features: AclHuK-5HqLbU2Sp0yMX4VPCKBFI8BTfQo4SDNLmRUUOLQ79a4r0AyqUjTYNPW8

Message-ID:

Subject: How are you doing today,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000087d97a065f8adb78"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 22.9

X-Spam_score_int: 229

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: How are you doing today, I want to inform you that i have

deposited your United Nations Compensation funds valued at $3.5,Million (Three

Million Five Hundred Thousand United States Dollars) to the U B [...]



Content analysis details: (22.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.224.49 listed in dnsbl.ahbl.org]

[74.125.224.49 listed in dnsbl.ahbl.org]

[74.125.224.49 listed in dnsbl.ahbl.org]

[74.125.224.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.224.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.224.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.224.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.224.49 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.224.49 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mailbanga2(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mailbanga2(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[aj1209479(at)gmail.com]

1.8 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 MILLION_USD BODY: Talks about millions of dollars

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.224.49 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.224.49 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FORM Lots of money if you fill out a form

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information

1.5 MONEY_ATM_CARD Lots of money on an ATM card

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.0 FILL_THIS_FORM Fill in a form with personal information

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} How are you doing today,



--00000000000087d97a065f8adb78

Content-Type: text/plain; charset="UTF-8"



How are you doing today,

I want to inform you that i have deposited your United Nations Compensation

funds valued at $3.5,Million (Three Million Five Hundred Thousand United

States Dollars) to the U B A BANK office so call Director of Operation U B

A Bank ATM CARD and solution center MR. ADAM JOHNSON, to send your ATM

MASTER CARD of $3.5,Million immediately you call him or email him, TEL:

+229 01 466 977 84 ,Email: aj1209479@gmail.com, email Him with your full

information.



Your Full Name.......

Country...........

Home address.........

Phone Number..................

Occupation..........

Sex............

Age..............

Marital status..........

Copy of your id or passport.....



Do let me know as soon as you have received your total fund of $3.5,Million

United States Dollars ATM MASTER CARD from the U B A Bank.



Mary Nelson.



--00000000000087d97a065f8adb78

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



How are you doing today,
I want to inform you that i ha=

ve deposited your United Nations Compensation funds valued at $3.5,Million =

(Three Million Five Hundred Thousand United States Dollars) to the U B A BA=

NK office so call Director of Operation U B A Bank ATM CARD and solution ce=

nter MR. ADAM JOHNSON, to send your ATM MASTER CARD of $3.5,Million immedia=

tely you call him or email him, TEL: +229 01 466 977 84 ,Email:
mailto:aj1209479@gmail.com">aj1209479@gmail.com, email Him with your fu=

ll information.

Your Full Name.......
Country...........
Home =

address.........
Phone Number..................
Occupation..........<=

br>Sex............
Age..............
Marital status..........
Copy=

of your id or passport.....

Do let me know as soon as you have rece=

ived your total fund of $3.5,Million United States Dollars ATM MASTER CARD =

from the U B A Bank.

Mary Nelson.




--00000000000087d97a065f8adb78--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Nov 2026 15:56:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xP5RY-00000000Ak4-2RGK

for dave@doctor.nl2k.ab.ca;

Thu, 05 Nov 2026 15:56:24 -0600

Resent-From: The Doctor

Resent-Date: Thu, 5 Nov 2026 15:56:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f199.google.com ([209.85.167.199]:44231)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xP01H-00000000Cp6-3JGA

for doctor@nk.ca;

Thu, 05 Nov 2026 10:08:57 -0600

Received: by mail-oi1-f199.google.com with SMTP id 5614622812f47-4fb73e868aaso3240019b6e.0

for ; Thu, 05 Nov 2026 08:08:02 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=escola-pr-gov-br.20260707.gappssmtp.com; s=20260707; t=1793894876; x=1794499676; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=iPYVd/X6Oi9yaxqwXcjhea7npW1IMOuC/fVkmmP+TPw=;

b=L8URb+s61MvVPUqatL7fStH9RM9/GEfbMBFkZc/qBoQ32x4GjqG5U+yETzF1BOiAMT

x9LEpTyooZ7O6Xl2V7940ss1o1DOlP1c+Zdid1ZVQN7E1I1WyNPkyzrUVsZoPkNWypC0

miEv7SVcizWvyXuEgEN5xSJCBf9y7ECK2LxbSod+2xgHC2lyfkdvcUzAzAAXHWdyGjd9

SNhV1baSyY4nDyCSG06PVed/0hlSIZOsASGBx7rdulsn/IoRlYLiKQjDLjPMmjd5mPXY

8HveVHDsEfq/ocQuITnc3l17nQzenrnS1o2V9p5K/q9HONEeCz0sS1BVoTNtRC4NtK8m

ulTQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793894876; x=1794499676;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=iPYVd/X6Oi9yaxqwXcjhea7npW1IMOuC/fVkmmP+TPw=;

b=W7fAFYW0Uc8DydBuH7OpFU/2xQs0KmnHaHF5rAhav374jzdy1MoMX9N3BSu7B4nbpO

UNdiyVM4Z/RfGnnrfNXxBgAgUqx4qJLU7dFd/hPQa8mjKwb7pEgdpY21yJHiQ3PHsccq

MQMdTjX4UwnKOdng6xa2XoQ/WNM64Kz9f61hIwSjl6V0GT1tYaknCVpboBknqGRj8IFa

j18XtOHqG7TyavVNVFhuEFldAuwACGiaxxhPHo6SXFBbi2WO78CBdnoiYL5oV47+3i9c

AKrLAvXTLlWltBnSHssSOnUTamh1PagDFUyWiyHTRuex9MjGZSJrp3Ne+Pw2+wPJCWSk

LqTA==

X-Gm-Message-State: APuU4Z+k7j0hiJFAkSD+v54iwHgmqRV7ANKBsC13gbdCR8viQwqAmP+9

6pJCJNVEAwXhk6g+Q0usE1AXjVluwBxBK6j57Vusb7jVPZY1JgmUEljWPnCkJvpK8CHSLFAliRM

o1dBMkiKCm+L/bm/7SuvIng==

MIME-Version: 1.0

X-Received: by 2002:a05:690e:4008:b0:67b:e431:4ad with SMTP id

956f58d0204a3-67be431183amr4466972d50.91.1793894428757; Thu, 05 Nov 2026

08:00:28 -0800 (PST)

Message-ID:

Date: Thu, 05 Nov 2026 16:00:28 +0000

Subject: =?UTF-8?B?VGh1aXMgbGFkZW4ga29zdCBkZSBoZWxmdCB2YW4gZWVuIHB1YmxpZWtlIGxhYWRwYWFs?=

From: Laadpaal Vergelijker NL

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000030e1f5065f8998be"

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: W[kw_2]ie el[kw_2]e[kw_2]kt[kw_2]ri[kw_2]sch r[kw_2]i[kw_2]j[kw_2]d[kw_2]t

en p[kw_2]ub[kw_2]l[kw_2]i[kw_2]e[kw_2]k la[kw_2]adt[kw_2], b[kw_2]e[kw_2]taal[kw_2]tg[kw_2]e[kw_2]m[kw_2]id[kw_2]de[kw_2]ld

[...]



Content analysis details: (8.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.199 listed in dnsbl.ahbl.org]

[209.85.167.199 listed in dnsbl.ahbl.org]

[209.85.167.199 listed in dnsbl.ahbl.org]

[209.85.167.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.199 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: plizondra.xyz]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: plizondra.xyz]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: plizondra.xyz]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.199 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.199 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: plizondra.xyz (xyz)]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 MANY_SPAN_IN_TEXT Many tags embedded within text

Subject: {SPAM?} =?UTF-8?B?VGh1aXMgbGFkZW4ga29zdCBkZSBoZWxmdCB2YW4gZWVuIHB1YmxpZWtlIGxhYWRwYWFs?=



--00000000000030e1f5065f8998be

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



V1trd18yXWllIGVsW2t3XzJdZVtrd18yXWt0W2t3XzJdcmlba3dfMl1zY2ggcltrd18yXWlba3df

Ml1qW2t3XzJdZFtrd18yXXQgIA0KZW4gcFtrd18yXXViW2t3XzJdbFtrd18yXWlba3dfMl1lW2t3

XzJdayBsYVtrd18yXWFkdFtrd18yXSwgIA0KYltrd18yXWVba3dfMl10YWFsW2t3XzJddGdba3df

Ml1lW2t3XzJdbVtrd18yXWlkW2t3XzJdZGVba3dfMl1sZCAgDQowW2t3XzJdLFtrd18yXTZba3df

Ml01IHBba3dfMl1lciBrW2t3XzJdV1trd18yXWhba3dfMl0uICANCk1ba3dfMl1lW2t3XzJddGVb

a3dfMl1lW2t3XzJdbiBlaVtrd18yXWdba3dfMl1lW2t3XzJdbiAgDQpsYVtrd18yXWFkcFtrd18y

XWFba3dfMl1hbCB0aFtrd18yXXVba3dfMl1pW2t3XzJdc2Rba3dfMl1hW2t3XzJdYWxba3dfMl10

ICANCmRhdCBuW2t3XzJdYWFyIDAsW2t3XzJdMjhba3dfMl0uIE9ba3dfMl12ZVtrd18yXXJlW2t3

XzJdZVtrd18yXW4gIA0KamFhW2t3XzJdcnNba3dfMl1jaFtrd18yXWVlW2t3XzJdbFtrd18yXXQg

IA0KZGFba3dfMl10aFtrd18yXW9uZFtrd18yXWVyW2t3XzJdZGVba3dfMl1uIGV1W2t3XzJdcm9z

W2t3XzJdLCBlbiB1ICANCnZlW2t3XzJdcltrd18yXXRyW2t3XzJdZVtrd18yXWt0IGVba3dfMl1s

W2t3XzJda2Ugb2Nba3dfMl1oW2t3XzJddFtrd18yXWVuZCAgDQptZVtrd18yXXRlW2t3XzJdZVtr

d18yXW52W2t3XzJdb1trd18yXWxba3dfMl1sZSBhW2t3XzJdY2Nba3dfMl11W2t3XzJdLg0KDQpW

W2t3XzJdZVtrd18yXXJba3dfMl1nZWxba3dfMl1pamsgbltrd18yXXUgIA0KZ3JhdFtrd18yXWlb

a3dfMl1zb1trd18yXWZba3dfMl1mZVtrd18yXXJ0W2t3XzJdZVtrd18yXXN2W2t3XzJdYW4gIA0K

Z2Vba3dfMl1jW2t3XzJdZVtrd18yXXJba3dfMl10W2t3XzJdaVtrd18yXWZba3dfMl1pY1trd18y

XWVba3dfMl1lcltrd18yXWRba3dfMl1laVtrd18yXW5ba3dfMl1zW2t3XzJddFtrd18yXWFba3df

Ml1sW2t3XzJdbFtrd18yXWFba3dfMl10W2t3XzJdZVtrd18yXXVyW2t3XzJdc2lba3dfMl1udVtr

d18yXXcgIA0KcmVnaVtrd18yXW9lW2t3XzJdbiBvbltrd18yXXRba3dfMl1kW2t3XzJdZVtrd18y

XWt3W2t3XzJdYXQgZVtrd18yXWVuICANCmxba3dfMl1hW2t3XzJdYVtrd18yXWRba3dfMl1wW2t3

XzJdYWFsIHZba3dfMl1vb3IgdXcgIA0Kc1trd18yXWlba3dfMl10W2t3XzJddVtrd18yXWFba3df

Ml10aWUga1trd18yXW9ba3dfMl1zdFtrd18yXS4NCk9ba3dfMl1mW2t3XzJdZmVydGVzIHZba3df

Ml1lW2t3XzJdcltrd18yXWdba3dfMl1lbFtrd18yXWlqW2t3XzJda2VuDQpVW2t3XzJdaXRba3df

Ml1zW2t3XzJdY1trd18yXWhyW2t3XzJdaWpba3dfMl12W2t3XzJdZVtrd18yXW4gwrcgIA0KTltr

d18yXWlba3dfMl1lW2t3XzJddG1ba3dfMl1lZVtrd18yXXIgIA0Kb25ba3dfMl10W2t3XzJddltr

d18yXWFba3dfMl1uW2t3XzJdZ2VuDQoNCg==

--00000000000030e1f5065f8998be

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




dding:20px;color:#1a1a1a">

W
"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;co=

lor:transparent">[kw_2]ie el
g:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]
pan>e
;overflow:hidden;color:transparent">[kw_2]kt
:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transp=

arent">[kw_2]ri
ht:0;max-height:0;overflow:hidden;color:transparent">[kw_2]sch r
n style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow=

:hidden;color:transparent">[kw_2]i
spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw=

_2]j
ight:0;overflow:hidden;color:transparent">[kw_2]d
-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:t=

ransparent">[kw_2]t en p
line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]=

ub
erflow:hidden;color:transparent">[kw_2]l
etter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparen=

t">[kw_2]i
max-height:0;overflow:hidden;color:transparent">[kw_2]e
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">[kw_2]k la
ing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]<=

/span>adt
ht:0;overflow:hidden;color:transparent">[kw_2], b
-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:t=

ransparent">[kw_2]e
height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]taal<=

span style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overf=

low:hidden;color:transparent">[kw_2]t g
tter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent=

">[kw_2]e
ax-height:0;overflow:hidden;color:transparent">[kw_2]m
"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;co=

lor:transparent">[kw_2]id
;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]
>de
verflow:hidden;color:transparent">[kw_2]ld 0
:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transp=

arent">[kw_2],
t:0;max-height:0;overflow:hidden;color:transparent">[kw_2]6
le=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidd=

en;color:transparent">[kw_2]5 p
cing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]=

er k
ight:0;overflow:hidden;color:transparent">[kw_2]W
-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:t=

ransparent">[kw_2]h
height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]. M
pan style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overfl=

ow:hidden;color:transparent">[kw_2]e
r-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[=

kw_2]t e
x-height:0;overflow:hidden;color:transparent">[kw_2]e
font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;col=

or:transparent">[kw_2]n ei
0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]
n>g
verflow:hidden;color:transparent">[kw_2]e
letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpare=

nt">[kw_2]n la
t:0;max-height:0;overflow:hidden;color:transparent">[kw_2]adp
tyle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hi=

dden;color:transparent">[kw_2]a
cing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]=

al th
eight:0;overflow:hidden;color:transparent">[kw_2]u
t-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:=

transparent">[kw_2]i
-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]s d<=

span style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overf=

low:hidden;color:transparent">[kw_2]a
er-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">=

[kw_2]al
x-height:0;overflow:hidden;color:transparent">[kw_2]t dat n
le=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidd=

en;color:transparent">[kw_2]aar 0,
spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw=

_2]28
eight:0;overflow:hidden;color:transparent">[kw_2]. O
ont-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;colo=

r:transparent">[kw_2]ve
ine-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]r=

e
erflow:hidden;color:transparent">[kw_2]e
etter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparen=

t">[kw_2]n jaa
t:0;max-height:0;overflow:hidden;color:transparent">[kw_2]r s
tyle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hi=

dden;color:transparent">[kw_2]ch
acing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2=

]ee
ght:0;overflow:hidden;color:transparent">[kw_2]l
size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tr=

ansparent">[kw_2]t da
e-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]t h=


flow:hidden;color:transparent">[kw_2]ond
etter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparen=

t">[kw_2]er
;max-height:0;overflow:hidden;color:transparent">[kw_2]de
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">[kw_2]n eu
ing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]<=

/span>ros
ht:0;overflow:hidden;color:transparent">[kw_2], en u ve
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">[kw_2]r
:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]
an>tr
;overflow:hidden;color:transparent">[kw_2]e
0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpa=

rent">[kw_2]kt e
ght:0;max-height:0;overflow:hidden;color:transparent">[kw_2]l
tyle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hi=

dden;color:transparent">[kw_2]ke oc
-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[k=

w_2]h
eight:0;overflow:hidden;color:transparent">[kw_2]t
t-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:=

transparent">[kw_2]end me
;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]
>t e
overflow:hidden;color:transparent">[kw_2]e
;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpar=

ent">[kw_2]n v
t:0;max-height:0;overflow:hidden;color:transparent">[kw_2]o
le=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidd=

en;color:transparent">[kw_2]l
ng:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]
span>le a
ht:0;overflow:hidden;color:transparent">[kw_2]cc
size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tr=

ansparent">[kw_2]u
eight:0;max-height:0;overflow:hidden;color:transparent">[kw_2].



V
"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;co=

lor:transparent">[kw_2]e
line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]=

r
rflow:hidden;color:transparent">[kw_2]gel
letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpare=

nt">[kw_2]ijk n
ht:0;max-height:0;overflow:hidden;color:transparent">[kw_2]u grat
an style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflo=

w:hidden;color:transparent">[kw_2]i
-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[k=

w_2]s o
-height:0;overflow:hidden;color:transparent">[kw_2]f
ont-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;colo=

r:transparent">[kw_2]fe
ine-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]r=

t
rflow:hidden;color:transparent">[kw_2]e
tter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent=

">[kw_2]s v
;max-height:0;overflow:hidden;color:transparent">[kw_2]an ge
yle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hid=

den;color:transparent">[kw_2]c
ing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]<=

/span>e
:0;overflow:hidden;color:transparent">[kw_2]r
e:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:trans=

parent">[kw_2]t
ht:0;max-height:0;overflow:hidden;color:transparent">[kw_2]i
yle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hid=

den;color:transparent">[kw_2]f
ing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]<=

/span>ic
t:0;overflow:hidden;color:transparent">[kw_2]e
ze:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tran=

sparent">[kw_2]er
ight:0;max-height:0;overflow:hidden;color:transparent">[kw_2]d
style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:h=

idden;color:transparent">[kw_2]e i
spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw=

_2]n
ight:0;overflow:hidden;color:transparent">[kw_2]s
-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:t=

ransparent">[kw_2]t
height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]a
n style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow=

:hidden;color:transparent">[kw_2]l
spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw=

_2]l
ight:0;overflow:hidden;color:transparent">[kw_2]a
-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:t=

ransparent">[kw_2]t
height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]e
n style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow=

:hidden;color:transparent">[kw_2]ur
-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[k=

w_2]s i
-height:0;overflow:hidden;color:transparent">[kw_2]n u
"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;co=

lor:transparent">[kw_2]w regi
ng:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]
span>o e
t:0;overflow:hidden;color:transparent">[kw_2]n on
-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:t=

ransparent">[kw_2]t
height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]d
n style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow=

:hidden;color:transparent">[kw_2]e
spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw=

_2]k w
height:0;overflow:hidden;color:transparent">[kw_2]at e
"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;co=

lor:transparent">[kw_2]en l
:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]
an>a
overflow:hidden;color:transparent">[kw_2]a
;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpar=

ent">[kw_2]d
0;max-height:0;overflow:hidden;color:transparent">[kw_2]p
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">[kw_2]aal v
cing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]=

oor uw s
x-height:0;overflow:hidden;color:transparent">[kw_2]i
font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;col=

or:transparent">[kw_2]t
ine-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]u=


flow:hidden;color:transparent">[kw_2]a
ter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent"=

>[kw_2]tie k
0;max-height:0;overflow:hidden;color:transparent">[kw_2]o
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">[kw_2]st
g:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]
pan>.




:inline-block;background:#022FAB;color:#fff;padding:12px 28px;text-decorati=

on:none;border-radius:4px;font-size:15px;font-weight:bold">O
font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;col=

or:transparent">[kw_2]f
ine-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]f=

ertes v
:0;overflow:hidden;color:transparent">[kw_2]e
e:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:trans=

parent">[kw_2]r
ht:0;max-height:0;overflow:hidden;color:transparent">[kw_2]g
yle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hid=

den;color:transparent">[kw_2]el
cing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]=

ij
ht:0;overflow:hidden;color:transparent">[kw_2]ken


lizondra.xyz#t/u/f5dd28f8231e760bf326" style=3D"color:#999">U
"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;co=

lor:transparent">[kw_2]it
;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]
>s
erflow:hidden;color:transparent">[kw_2]c
etter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparen=

t">[kw_2]hr
;max-height:0;overflow:hidden;color:transparent">[kw_2]ij
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">[kw_2]v
:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]
an>e
overflow:hidden;color:transparent">[kw_2]n =C2=B7
ps://plizondra.xyz#t/p/f5dd28f8231e760bf326" style=3D"color:#999">N
yle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hid=

den;color:transparent">[kw_2]i
ing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]<=

/span>e
:0;overflow:hidden;color:transparent">[kw_2]t m
ize:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tra=

nsparent">[kw_2]ee
eight:0;max-height:0;overflow:hidden;color:transparent">[kw_2]r on
pan style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overfl=

ow:hidden;color:transparent">[kw_2]t
r-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">[=

kw_2]v
height:0;overflow:hidden;color:transparent">[kw_2]a
nt-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color=

:transparent">[kw_2]n
e-height:0;max-height:0;overflow:hidden;color:transparent">[kw_2]gen=




ght=3D"1" style=3D"display:none" alt=3D"">



--00000000000030e1f5065f8998be--

Smart Simcha spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Nov 2026 15:57:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xP5SR-00000000BHv-0cqi

for dave@doctor.nl2k.ab.ca;

Thu, 05 Nov 2026 15:57:19 -0600

Resent-From: The Doctor

Resent-Date: Thu, 5 Nov 2026 15:57:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta808.enginemailer.net ([20.198.196.219]:4035)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOzS8-00000000NBb-3eay

for doctor@nk.ca;

Thu, 05 Nov 2026 09:32:34 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=em1; d=invitemetoyoursimchas.cloud;

h=From:Date:Subject:Message-Id:To:Reply-To:Feedback-ID:MIME-Version:

Content-Type:Content-Transfer-Encoding;

i=abigail.greene@invitemetoyoursimchas.cloud;

bh=r2bU5A+IayJaKRmSR4U0obERdTEmpbHWrorJznPvW6k=;

b=ldqxKcKwMpt5Ub2/cabNLAolWmSZoOn8aPh9JXBsnR5YQRJapnmPSjHOf09+OkaWdTR1dYcfQJ8M

QiS50wMiMZo+0DciLuDzazkeg6xKWuGN4sCrlSIfJc7c2BZrXROmRECTa68WEPXA2uL1IyxgFo/E

R7xtzgaOw1IIYvDE6mk=

From: Abigail Greene

Date: Thu, 05 Nov 2026 15:31:40 +0000

Subject: Planning A Simcha? Don't Forget This ...

Message-Id:

To: doctor@nk.ca

Reply-To: abigail.greene@invitemetoyoursimchas.cloud

X-Mailer: Enginemailer V1.0.0.0

X-Report-Abuse-At: abuse@enginemailer.com

X-Report-Abuse-Info: It is important to please include full email headers in

the report

X-Complaints-To: abuse@enginemailer.com

X-Source: Transactional

X-TxID: 597107207

X-Account-Type: F

X-System-Identity: 529168a5-89e2-48f3-8f67-011b98a7614c

X-Env: Prod

Feedback-ID: 0:529168a5-89e2-48f3-8f67-011b98a7614c:Transactional:enginemailer.org

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-Virtual-MTA: transactional2

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SmartSimcha NewsLetter Simcha Planner



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.198.196.219 listed in will-spam-for-food.eu.org]

[20.198.196.219 listed in will-spam-for-food.eu.org]

[20.198.196.219 listed in will-spam-for-food.eu.org]

[20.198.196.219 listed in will-spam-for-food.eu.org]

[20.198.196.219 listed in will-spam-for-food.eu.org]

[20.198.196.219 listed in will-spam-for-food.eu.org]

[20.198.196.219 listed in will-spam-for-food.eu.org]

[20.198.196.219 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.198.196.219 listed in dnsbl.ahbl.org]

[20.198.196.219 listed in dnsbl.ahbl.org]

[20.198.196.219 listed in dnsbl.ahbl.org]

[20.198.196.219 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.198.196.219 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.198.196.219 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.198.196.219 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.198.196.219 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.7 BAD_CREDIT BODY: Eliminate Bad Credit

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 URI_IMG_CWINDOWSNET Non-MSFT image hosted by Microsoft Azure infra,

possible phishing

Subject: {SPAM?} Planning A Simcha? Don't Forget This ...




/TR/xhtml1/DTD/xhtml1-strict.dtd'>
ml'>
utf-8' />
cale=3D1.0'/>SmartSimcha NewsLetter






background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

Hello,



xt-indent: 0px; background-color: rgb(255, 255, 255); margin: 0cm; font-fam=

ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



xt-indent: 0px; background-color: rgb(255, 255, 255); margin: 0cm; font-fam=

ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I am still waiting for your reply



xt-indent: 0px; background-color: rgb(255, 255, 255); margin: 0cm; font-fam=

ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



xt-indent: 0px; background-color: rgb(255, 255, 255); margin: 0cm; font-fam=

ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thanks,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Hassan Khan <Hassa=

nKhan82913@outlook.com>


Sent: 05 November 2026 10:29


To: Hassan Khan <HassanKhan82913@outlook.com>


Subject: Re: Let's Connect

 









nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

Hi,



font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,=

sans-serif; font-size:12pt; color:rgb(0,0,0)">

 



font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,=

sans-serif; font-size:12pt; color:rgb(0,0,0)">

Would you be interested in expanding your digital marketing services withou=

t increasing your workload?



font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,=

sans-serif; font-size:12pt; color:rgb(0,0,0)">

 



font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,=

sans-serif; font-size:12pt; color:rgb(0,0,0)">

We provide white-label SEO, PPC, and Social Media Marketing solutions, hand=

ling all the work behind the scenes while you focus on your clients and gro=

w your profits.



font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,=

sans-serif; font-size:12pt; color:rgb(0,0,0)">

 



font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,=

sans-serif; font-size:12pt; color:rgb(0,0,0)">

Interested? I'd be happy to share our packages and pricing.



font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,=

sans-serif; font-size:12pt; color:rgb(0,0,0)">

 



font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,=

sans-serif; font-size:12pt; color:rgb(0,0,0)">

Thanks,



font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,=

sans-serif; font-size:12pt; color:rgb(0,0,0)">














--_000_OS8PR01MB67058F5E8C64FBD24C317202E7772OS8PR01MB6705apcp_--