NetKnow Corporate Blog

Domain for Sale spam from Google Gmail Part 1

Posted by Dave Yadallee on Monday, February 23. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 11:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuaMr-000000008aM-1TX2

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 11:09:13 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 11:09:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f194.google.com ([209.85.210.194]:48296)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vua6E-000000007iS-0nZG

for root@nk.ca;

Mon, 23 Feb 2026 10:52:09 -0700

Received: by mail-pf1-f194.google.com with SMTP id d2e1a72fcca58-824af5e5c81so4350653b3a.0

for ; Mon, 23 Feb 2026 09:51:15 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1771869069; cv=none;

d=google.com; s=arc-20240605;

b=P25UZzIvyJJUQ4VwleeylMACBJrU75LV0thWVWXB7rK8DBYIk8r896ye0Xc0uaBR6d

axYe6nglt4e74heX1wLD3L0Dw2O2l4XEZGHu4FwgCIFOu0luMxpEtvWSgjHFT9oxrrDI

ZmNP79LsODpRdi+mY3KdPdm90XqseqzvpZipYmJOShU2krFWafv+piRZYkqjUt6TK1OW

nK1mANptjF/SHp5UdjQdtHi26NXiZOH2hO053xbJro380hHv1aRpCeSP5jSsZm3t/RFs

95lNkbFrPGpwA0ES/0gZoKKk1tawiBo7vnvOq9J1ockE/xjfeXEUJtSQbkSX7zajLusP

VTGw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=6tVUxxX2ItFl8HAz65WSMCKX1B+DGWFkWRG775BYTXw=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=LGJvRBjcJEdKnk31IU7ICazstgnkIn1AQFwkGYkaWpHT6DWbxfMEvVdP8ZDm2ZTapw

29If742VmfY7qaM3boicOIUIgQ53U0tf8UacLMKqalYknjfjGtII7i8pS7ImiN/4uAnS

g65IzMFW2+AdpEmG9gG170o0q9n7OfRe/hcqeda2EzcoTGZQGzSlXP5V9bBZeIxsR/ok

U7Cwlb3QNyd5oVUUYJe2k+scxqmo9YmMDBS5uqAQOHgKjYI1OhVDSi4kHgB2/OCpY9nI

AhQBemPBsbXGzYZuOE1+n7b0D0U6hh/tCVhmnAHuYeBPRMXWXnjndOqPEeF2xF5k8h/S

eBeQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1771869069; x=1772473869; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=6tVUxxX2ItFl8HAz65WSMCKX1B+DGWFkWRG775BYTXw=;

b=gT8tVhdO5+S55tVyNjQTrKIZN+MdPfx0iiRCXJ/UwyB2LOwqpkkk9AG4I6+xjtrd7o

Gc995MEGVJnouivdgFUJVtNVCJQVHCy7ILuwn1qXNWlHw0BWL7FC3tDyjdJYC0Ul9mDL

AMvuZooc7raJ5xYG+rSJ0KC3+yw1JHpy37TYljBzp+DkAljS5Rz/uEZcQpk5yJ2e9D4i

eAdvXiy4RmLxw0VmhHq50znYa5HhRIKy1HEaRdKF4oBGLFxWkxcOT/hC6NMlMbKS7m1y

Fj6pMmPFGZLWG+vbSz3DbgQrNvhy5aCTNse4Sh1y5eKJ4cN7ZIoZSjD9RMssTKjHtte9

hVng==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771869069; x=1772473869;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=6tVUxxX2ItFl8HAz65WSMCKX1B+DGWFkWRG775BYTXw=;

b=ngQIvr2YoKcleWpuneyTax7a/koOAqJPv8xdZvGHnktGXb3PZd33vHDamyhI3kk5Gb

YgAlRPJSJ2wk8ya7sxv07EwRK+LEpDMeDIc+7x5EzOPaigSIFGyfC6heYMulOsxU7PYH

dXiQsX1TWqhIx8TpDx/5JbrKWXl/31RUYNFqcT0jrsWMBdHox+lRt0efSK2dHkskn6Yu

l39m7+9NxVgOoFJSYrb8PoMdVwjc43aq0UL86v/zxphwPkh4vyACiefgjyxLyD7wPFdO

q4oe5CqtFSaQ9d6izf7N7yGtRrDSZzHjGmhLeFet0dQPcetd6Rk/NYORx3lRpeHv7TIx

nyaQ==

X-Gm-Message-State: AOJu0YwZf4s3Nfek1Hyw/LBRnAR1rOOVpO7CKrcGWilI99DezyeObArY

2X18luYWTbZJ/iHC5RBK2TsK1raqJOm6q58yyzBrilSdAQ53m9NLfpY72zRdU5h+27nG09sVN/U

4mjcQSw2hMqCuoVmAILnff2YEhlWj9fhULLdsoCi6+w==

X-Gm-Gg: AZuq6aK72RC3h/chwm3H7zbeDfQKRtBYKA3GY2Lho97CDBD6HHiYvW/8BNk85pgAyNL

VwDgYIekyaruh+4H019ce3HRUu+gPcyd+1x2rboFCYqfyhq21bhCxsEgsvIMxtghmCn8lld5YxA

DO7L6g/TOfMIg8WWPYcwgzSiQcrt96/MgizSjgZtZxNd6jMhFIIj59mEJ5ZrTPC41RX7gFlWEKB

KzJGE6W8NTqLS2bgeoK4jhaJGuGfvHZj8bmTlb5AXkxqI3NkvfMRafOwV35mcTfOYtX3DAHkCH2

ULOGO31sbEc=

X-Received: by 2002:a05:6a20:9d90:b0:390:ca32:da2c with SMTP id

adf61e73a8af0-39545ed46fdmr8221576637.24.1771869069206; Mon, 23 Feb 2026

09:51:09 -0800 (PST)

MIME-Version: 1.0

References:

In-Reply-To:

From: John Riley

Date: Mon, 23 Feb 2026 18:50:57 +0100

X-Gm-Features: AaiRm533sM3qpVqPijPjwjhhZEMAWb9do_GHHp_BV3rP2hRumJqwlX2T-uLyoS0

Message-ID:

Subject: Re: EDMONTON VOIP

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000756836064b816a3e"

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, This is our final follow up regarding the availability

of the domain name www.VoipEdmonton.com we have reduced the price one last

time to $200. This is an excellent opportunity to secure a valuable domain

that perfectly matches your business niche.

Domain for Sale spam from Google Gmail Part 2

Posted by Dave Yadallee on Monday, February 23. 2026

Content analysis details: (6.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

[209.85.210.194 listed in dnsbl.ahbl.org]

[209.85.210.194 listed in dnsbl.ahbl.org]

[209.85.210.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[johnriley.domain(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.194 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Re: EDMONTON VOIP

--000000000000756836064b816a3e

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,

This is our final follow up regarding the availability of the domain name

www.VoipEdmonton.com we have reduced the price one last time to $200.

This is an excellent opportunity to secure a valuable domain that perfectly

matches your business niche.

To acquire the domain, simply visit www.VoipEdmonton.com and claim

immediate ownership.

Don=E2=80=99t miss the chance to enhance your online presence and stay ahea=

d of

your competitors.

Kindly Regards.

On Sun, 25 Jan 2026, 18:46 John Riley, wrote:

> Hello,

>

> Are you looking to strengthen your brand and increase your online

> visibility?

>

> The premier domain

> www.VoipEdmonton.com is available for purchase at Godaddy.

>

> This domain would be really good for attracting clients looking for your

> VOIP IN EDMONTON

>

> If the domain is developed or redirected to your current website, it woul=

d

> be extremely beneficial to your company and services in terms of catching

> more leads and clients while retaining your brand identity.

>

> You can get this domain for $499 at www.VoipEdmonton.com and claim the

> immediate ownership

>

> thank you for your time and I look forward to your reply

>

> Best Regards,

>

> John.

>

--000000000000756836064b816a3e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,

>

This is our final follow up =

regarding the availability of the domain name
onton.com">www.VoipEdmonton.com we have reduced the price one last time=

to $200.

dir=3D"auto">This is an excellent opportunity to secure a valuable domain =

that perfectly matches your business niche.

v>

To acquire the domain, simp=

ly visit www.VoipEdmonton.com a=

nd claim immediate ownership.

auto">

Don=E2=80=99t miss the chance to enhance =

your online presence and stay ahead of your competitors.

uto">

Kindly Regards=

.

=3D"ltr" class=3D"gmail_attr">On Sun, 25 Jan 2026, 18:46 John Riley, <
href=3D"mailto:johnriley.domain@gmail.com">johnriley.domain@gmail.com&=

gt; wrote:

.8ex;border-left:1px #ccc solid;padding-left:1ex">

ir=3D"auto">Hello,

Are y=

ou looking to strengthen your brand and increase your online visibility?=C2=

=A0

The premier domain=

=C2=A0

t=3D"_blank" rel=3D"noreferrer">www.VoipEdmonton.com is available for p=

urchase at Godaddy.

This=

domain would be really good for attracting clients looking for your VOIP I=

N EDMONTON=C2=A0

If the =

domain is developed or redirected to your current website, it would be extr=

emely beneficial to your company and services in terms of catching more lea=

ds and clients while retaining your brand identity.
=

You can get this domain for $499 at
http://www.VoipEdmonton.com" target=3D"_blank" rel=3D"noreferrer">www.VoipE=

dmonton.com and claim the immediate ownership=C2=A0

to">
thank you for your time and I look forward =

to your reply

Best Regar=

ds,

John.

--000000000000756836064b816a3e--

Domain for Sale spam from Google Gmail Part 2

Posted by Dave Yadallee on Monday, February 23. 2026

Content analysis details: (7.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[johnriley.domain(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.194 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.194 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.194 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: EDMONTON VOIP

--00000000000090e3fd064b816968

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,

This is our final follow up regarding the availability of the domain name

www.VoipEdmonton.com we have reduced the price one last time to $200.

This is an excellent opportunity to secure a valuable domain that perfectly

matches your business niche.

To acquire the domain, simply visit www.VoipEdmonton.com and claim

immediate ownership.

Don=E2=80=99t miss the chance to enhance your online presence and stay ahea=

d of

your competitors.

Kindly Regards.

On Sun, 25 Jan 2026, 18:46 John Riley, wrote:

> Hello,

>

> Are you looking to strengthen your brand and increase your online

> visibility?

>

> The premier domain

> www.VoipEdmonton.com is available for purchase at Godaddy.

>

> This domain would be really good for attracting clients looking for your

> VOIP IN EDMONTON

>

> If the domain is developed or redirected to your current website, it woul=

d

> be extremely beneficial to your company and services in terms of catching

> more leads and clients while retaining your brand identity.

>

> You can get this domain for $499 at www.VoipEdmonton.com and claim the

> immediate ownership

>

> thank you for your time and I look forward to your reply

>

> Best Regards,

>

> John.

>

--00000000000090e3fd064b816968

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,

>

This is our final follow up =

regarding the availability of the domain name
onton.com">www.VoipEdmonton.com we have reduced the price one last time=

to $200.

dir=3D"auto">This is an excellent opportunity to secure a valuable domain =

that perfectly matches your business niche.

v>

To acquire the domain, simp=

ly visit www.VoipEdmonton.com a=

nd claim immediate ownership.

auto">

Don=E2=80=99t miss the chance to enhance =

your online presence and stay ahead of your competitors.

uto">

Kindly Regards=

.

=3D"ltr" class=3D"gmail_attr">On Sun, 25 Jan 2026, 18:46 John Riley, <
href=3D"mailto:johnriley.domain@gmail.com">johnriley.domain@gmail.com&=

gt; wrote:

.8ex;border-left:1px #ccc solid;padding-left:1ex">

ir=3D"auto">Hello,

Are y=

ou looking to strengthen your brand and increase your online visibility?=C2=

=A0

The premier domain=

=C2=A0

t=3D"_blank" rel=3D"noreferrer">www.VoipEdmonton.com is available for p=

urchase at Godaddy.

This=

domain would be really good for attracting clients looking for your VOIP I=

N EDMONTON=C2=A0

If the =

domain is developed or redirected to your current website, it would be extr=

emely beneficial to your company and services in terms of catching more lea=

ds and clients while retaining your brand identity.
=

You can get this domain for $499 at
http://www.VoipEdmonton.com" target=3D"_blank" rel=3D"noreferrer">www.VoipE=

dmonton.com and claim the immediate ownership=C2=A0

to">
thank you for your time and I look forward =

to your reply

Best Regar=

ds,

John.

--00000000000090e3fd064b816968--

Domain for Sale spam from Google Gmail Part 1

Posted by Dave Yadallee on Monday, February 23. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 11:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuaMn-000000008aI-46BQ

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 11:09:09 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 11:09:09 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f194.google.com ([209.85.214.194]:50430)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vua5z-000000007gj-2t37

for sales@nk.ca;

Mon, 23 Feb 2026 10:51:56 -0700

Received: by mail-pl1-f194.google.com with SMTP id d9443c01a7336-2aaf5d53eaaso30315295ad.0

for ; Mon, 23 Feb 2026 09:51:00 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1771869054; cv=none;

d=google.com; s=arc-20240605;

b=kLV9Mk6vTJUn9W+95z0Dqb73ZCmAXALB9dBTr4ui96ru74yPt/E5vCbTbDiwPG0Xzb

k66blu+FslZtju+YB2MtyeuNEx6BpD13VFy+4qVyNZY1p2Z8He+P+Vk/xmRkLJ5n6PqT

/UTWuicxR7amnXRiWmH0Zk4kS8riGxWrqnVoU29WjjYFQpv6MIUoewRX0Hv6i6hNy+zu

kDPDu7UC1IDUGi44HYnIAO00IcIBdcxDVzONvC1vg7cnIRgOMPoh1LHHkTyE6HCjsCrn

N3lbRn9g/m8k9pcVcTHvKvq+75xOS5Qw1xG/Irye5DGL2YIyN+G+sTb+hI84LSpjSukR

MOTA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=ARL/5QkPNbNM2pnclUuJOFiVFtSOBgsOzA2YawqGGLU=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=NTsGtdDDGfaPbqTyu2O2+sy2iNaFmDYrUd6isB/H7HfPIxklwXv4nLAvnCIagCa8Xb

Lyz0W61ncPPHMx8bUOLHoDfc+NaVqhk2dv+Iao45tDj1/mMPKA+Y5/Klq/Z3hjYIUIGm

iQ6efmNcFJHPXW2V8R4vvov9HZIZ907FwSPBsx9664OkjydmHLQAvyjbnKNXLsJ4LkgW

2yTiDfILbUy5qgwcJb1zb/b2s1TI1YfCr3piMLkyZ+OtpNwd2PyzGQbl2k9FztzEgy0y

OvY37sor0gl6UXY3cMLvLAUnPYKhNtBgbhoCivHwXCJT4w9luPbWAINuLA0ouU2X1NFn

u4EQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1771869054; x=1772473854; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=ARL/5QkPNbNM2pnclUuJOFiVFtSOBgsOzA2YawqGGLU=;

b=jPwtEv90hm7uM3W0xfABa2zsMt+eipo7ovF5zrOU/JY4+S1vsau7/uaexnTV8H0Ju/

2VCnWUdDhW09g2R3hpoYViH+uvNCIuZr0+xvm6IDXjAdInSrQpoBgkFpSsFj64p8RCCi

9sXzZ2q7h4ywYoctQwPbUPJN4StYzPjUdzt0uAUdeT2mRREcahopztVjgPrKr11kTd50

gBishoWXf/pxQs939pzAv3Lma6OY8bV3sDY0z/P11sCnzKPWJP6oLoCZetjL8bwN25fQ

5YQzdlFmAtAUlyOJwdOPFtEBdulMLxkSz6bSqx1uf0KmuIeVn1ZUmUmPP8ieV5LSMrBZ

h9NQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771869054; x=1772473854;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=ARL/5QkPNbNM2pnclUuJOFiVFtSOBgsOzA2YawqGGLU=;

b=teeFqW9qxgAiblQDDHF0xNezm14IWc6Zto2wzXyyWwE9lckpKMsa1Fky6n1t0USxtz

SD+p0eT8EGHkYphSL2ddPTmfFL3uQHstcQ3nCu7jDwMUvz9J9WGk9UTeJmchgFUDOPWC

Y3JowOz32kQPI6jdQnI5ssNmHp7343mqKfBMjSYS+Vclk59MyKjhM0cFYZ8N4riADgRz

5WYdGN/cuSi59edU+0wo9RfTQ6nAcIesdOn+LTzoYJgFJHk6y1OzxkqP7jkaMSMCWCGx

OtPHJuHivlIH5WkbDfyDSivr2ebyMUlkm/QBOVGdz9Kkw9ANT1lIQi8SbrSzSWm8YipA

XwUg==

X-Gm-Message-State: AOJu0YyJs3iFeVXhPFMeDkljeLh53UZ1ycieO2MWhv03w+3pQC+9OYQb

UPYxGSqD2ixYAONmcqImGiMkfSZ+CaTfHgwpEGc0FB9kVn9YWG80RlhNo/PSMK+d4zttEDPD7ID

/aW5hV26zDxDz51h+zGaN3Zy4vyfuUbeHpCQ5X32NbA==

X-Gm-Gg: ATEYQzzL8YJD2mw5doXHIjeFRlao2c/8c3MM6Tt+KOdcXL09bipSqgBw5jAI78Ws5Nh

mIJDzc7X47bxhNeIpPATbbDSe0zPIqaPq2n2zzM0l92MLLmCZRrkmp935bRzWFm+djKyY2vhgZh

4YFuQfFQy23uwAY5GdlKBnW5xMXj8f0iuiBldImxXzNQK4OslGWy4c73Az6xUlG1M+QEgvMFSYq

kB25mBfBo2HLQkF851085z9Et7nGgqXyYPY2dwbKz5fEEOA75S8RHGSDqcHOPiA2jnpIl40POzI

oh1CE/C+MVM=

X-Received: by 2002:a17:903:2f8b:b0:2aa:e6c1:cea9 with SMTP id

d9443c01a7336-2ad745a79bemr90139165ad.50.1771869054230; Mon, 23 Feb 2026

09:50:54 -0800 (PST)

MIME-Version: 1.0

References:

In-Reply-To:

From: John Riley

Date: Mon, 23 Feb 2026 18:50:42 +0100

X-Gm-Features: AaiRm531EzTCuVgJkEyzwmGulse93VqPKAjAehVXD47sNxot13AVwbtlohPYuCA

Message-ID:

Subject: Re: EDMONTON VOIP

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000090e3fd064b816968"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, This is our final follow up regarding the availability

of the domain name www.VoipEdmonton.com we have reduced the price one last

time to $200. This is an excellent opportunity to secure a valuable domain

that perfectly matches your business niche.

PayPal Phish from Google Gmail Part 4

Posted by Dave Yadallee on Monday, February 23. 2026

/InformAction">
tp://schema.org/Event">
ema.org/EventScheduled"/>
"http://schema.org/Organization">
Calendar"/>
4tl7ltt677qg2vjq9n2bjg"/>
r: #fff; line-height: 1px; height: 0; max-height: 0; width: 0; max-width: 0=

; opacity: 0; overflow: hidden;" itemprop=3D"name">NUDX-6729 updated for Re=

ceipt
e=3D"20260224T050000Z">
25T043000Z">
=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"body-container">

-[if mso | IE]>
=3D"presentation">=

=

ellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%=

;" class=3D"">

mscope itemtype=3D"http://schema.org/EmailMessage">

on">Your order is ready!

Thank you for choosing us. We=E2=80=99ve complet=

ed your Receipt Number: LVQN-4800, and it will be shipped out shortly.
Y=

ou can contact us at any time to check the status of your order.

Orders p=

laced within a short timeframe may be shipped together. If you have any que=

stions, feel free to reach out at 1-863- 409-5407.

Transaction Details:
r>Invoice date: 2026-02-24

Item: Command® Patrol Rifle
Ref Code: =

80998018
Quantity Ordered: 1x
Shipping: Free
Paid Through: PayPal<=

br>Amount Due: $1361.44

We look forward to serving you again. For any ass=

istance, call 1-863- 409-5218.

PayPal, LLC
Support Hours: 6 AM =E2=80=

=93 6 PM
Helpline: 1-863- 409-5407
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
>.
.
.
.
.
.
.
.
.
.
.
.
.
.

an>

ing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" clas=

s=3D"">

x; direction: rtl; font-size: 0; padding: 24px 32px; text-align: left; vert=

ical-align: top;" class=3D"main-container-inner">

ction: ltr; display: inline-block; vertical-align: top; width: 100%;overflo=

w: hidden; word-wrap: break-word;">
llspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main-column-t=

able-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-layout: fixe=

d;">

ign:top;">
resentation" width=3D"100%" style=3D"table-layout: fixed;">
r>

"font-size: 0; padding: 0; text-align: left; word-break: break-word;;paddin=

g-bottom:2px;">

ns-serif;font-weight: 400; font-size: 22px; line-height: 28px;color: #3c404=

3; text-decoration: none;" class=3D"primary-text" role=3D"presentation">
an itemprop=3D"name">NUDX-6729 updated for Receipt

k-word;;padding-bottom:24px;">

;font-style: normal; font-weight: 400; font-size: 14px; line-height: 20px; =

letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"prim=

ary-text" role=3D"presentation">
=3D"startDate" datetime=3D"20260224T050000Z">
te" datetime=3D"20260225T043000Z">Tuesday Feb 24, 2026 =

=E2=8B=85 12am =E2=80=93 11:30pm (Eastern Time - New York)

>

ak: break-word;;padding-bottom:24px;">

ns-serif;font-style: normal; font-weight: 400; font-size: 14px; line-height=

: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=

=3D"primary-text" role=3D"presentation">
0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;"><=

tr>

text-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased;=

margin: 0; padding: 0;">Organizer

: #3c4042;">
on-hover" style=3D"display: inline-block;;color: #3c4043; text-decoration: =

none;" href=3D"mailto:kannaaanya3@kasmar.org">Jekcnf Stock
itemprop=3D"organizer" itemscope itemtype=3D"http://schema.org/Person">
a itemprop=3D"name" content=3D"Jekcnf Stock"/>
ent=3D"kannaaanya3@kasmar.org"/>

>
ock;;color: #70757a; text-decoration: none;" href=3D"mailto:kannaaanya3@kas=

mar.org">kannaaanya3@kasmar.org

ont-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-=

bottom:24px;">

mal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: =

0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=

=3D"presentation">
ole=3D"presentation" style=3D"padding-bottom: 4px;">

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;=

font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;=

">Guests

(Guest list has been hidden at organizer's r=

equest)

--000000000000c62233064b81140d--

PayPal Phish from Google Gmail Part 2

Posted by Dave Yadallee on Monday, February 23. 2026

--000000000000c62233064b81140d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

=20

=20

PayPal Phish from Google Gmail Part 3

Posted by Dave Yadallee on Monday, February 23. 2026

=20

=20

PayPal Phish from Google Gmail Part 1

Posted by Dave Yadallee on Monday, February 23. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 11:09:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuaMP-000000008Z3-2MZw

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 11:08:45 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 11:08:45 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f74.google.com ([209.85.160.74]:52688)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuZj2-000000006ku-21hc

for doctor@nl2k.ab.ca;

Mon, 23 Feb 2026 10:28:14 -0700

Received: by mail-oa1-f74.google.com with SMTP id 586e51a60fabf-40f05300c94so46965235fac.1

for ; Mon, 23 Feb 2026 09:27:17 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1771867631; x=1772472431; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=EnP/hLpEZyk+711kzAtjL15m8/bffVxRttiThIWdAiY=;

b=CGCseWiUIrYduh49P/Lf0996nt+8hBlpisL2AjQklGd6L7rTIBMslyq1VSf4qRhkmo

deztrYhCmOVrCFioGRwNAkTRac8+GJLV5unFrDDfj7DrF/Ii+HmZ0P5+Vc9or4w8V+sd

MvTogQbqo4On85uLFWgYKa4B3d2Sjiwg7oISIfTOSx0eu8yVmds3zF6WNwyesvgf+2QZ

O4MFLg8OaNG6jJkOSABpUW8KNF4LjjHphk/C9Eu+rBL9yhZP2nrc5W17ewZxb+WM8fcZ

Bk2aJMWqL4NuX/yfO/K3nsnXIk170QHwnhT9a9CaPXd2NYU786fZv9TMKRHAJ61/cxpz

n24w==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kasmar-org.20230601.gappssmtp.com; s=20230601; t=1771867631; x=1772472431; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=EnP/hLpEZyk+711kzAtjL15m8/bffVxRttiThIWdAiY=;

b=EFJChg4nfZEvIPYrPcyB3h3uQQAbaC8NxYhI16UHdTD4Rw9G360Ytt5m78rFFVry/N

cRw6jvFnP1VM+d7E0r8HTbgWBzV9tdY3geA1KhJbHzfm5PSIUZ6SyE0M6J1v8vLhfCk8

6FpyF402Bs9tpACKU4/sWgLV00Ib11TN9afIuiEo64/oQvqf+UL8V647aQX0bf9mYOOB

r1CF/zSUcmPkdNwfvG2N9LbECiUcWNKu+/a/KlxC89kg83yqedMh/YQZQupiTm98HeSw

rnHWs5hcdJVXMF/17ALniSU2S/lLu4vSIzb3NHq3EIPUsR2yqWGV2nM6e1WcqPGKO8y+

z3Xg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771867631; x=1772472431;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=EnP/hLpEZyk+711kzAtjL15m8/bffVxRttiThIWdAiY=;

b=oIvPg6M0oYBJokBaHPagjlE1WcQpO4/+zbHgd97YkObgC+gLWRvDhavoEL+gxZ68zA

kCW6HlM7EkmfVYjCrxPRtJUgHBIuMkQDYPbtOCtbfyzRJSQhyFT585dCh8TyNYxngVVP

zoUz5arP9I8g00A8CPYGd+ubh05OyMJOITdIoGIsZvoqkf3YZ2mFfjGKDdHOzhYt08+W

4lsCYp6cwUYwwLuTqSeIziUyEe70omiAIEZbG4IWJUn+KanLu+qjvm1HAS5rdI0T9NuG

6mPj5QLnch3aeXVOBV1MtiNbY0v/YodDTbDg4XS/8qnGusotTIXQaGuz7fUUrSnDfcQs

l6fA==

X-Forwarded-Encrypted: i=1; AJvYcCUjU4+G0CY4aDFraO8/PwZVWmbiNMoyn1H3sI1sJa44nWpiSGaFHAdrex6p3jdWh3NUP18TGLo=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YwyRA8eUj/9M30aQfia1HgL/HH+t8PDAnVgb526kkSypurNlKjR

7Dv81uGJbX1WluuOgjGDdBRX7Q+QwMNliAQ/T8Z66qJucuzlf5mfqeXkFd51jZ46eVJunHMXRSc

Qf3ub/Namk73aji94j6ZJiz8cez/b/J2AAxk8XMHYb59EyQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:c82:b0:661:167b:72db with SMTP id

006d021491bc7-679c44e5a41mt8120323eaf.38.1771867631529; Mon, 23 Feb 2026

09:27:11 -0800 (PST)

Reply-To: Jekcnf Stock

Sender: Google Calendar

Message-ID:

Date: Mon, 23 Feb 2026 17:27:11 +0000

Subject: NUDX-6729 updated for Receipt

From: Jekcnf Stock

Content-Type: multipart/alternative; boundary="000000000000c62233064b81140d"

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Your order is ready! Thank you for choosing us. Weâ€™ve completed

your Receipt Number: LVQN-4800, and it will be shipped out shortly. You can

contact us at any time to check the status of your order. [...]

Content analysis details: (13.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.74 listed in dnsbl.ahbl.org]

[209.85.160.74 listed in dnsbl.ahbl.org]

[209.85.160.74 listed in dnsbl.ahbl.org]

[209.85.160.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.74 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.74 listed in will-spam-for-food.eu.org]

[209.85.160.74 listed in will-spam-for-food.eu.org]

[209.85.160.74 listed in will-spam-for-food.eu.org]

[209.85.160.74 listed in will-spam-for-food.eu.org]

[209.85.160.74 listed in will-spam-for-food.eu.org]

[209.85.160.74 listed in will-spam-for-food.eu.org]

[209.85.160.74 listed in will-spam-for-food.eu.org]

[209.85.160.74 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.74 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

0.1 TW_KC BODY: Odd Letter Triples with KC

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.74 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} NUDX-6729 updated for Receipt

--000000000000c62233064b81140d

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

WW91ciBvcmRlciBpcyByZWFkeSEgVGhhbmsgeW91IGZvciBjaG9vc2luZyB1cy4gV2XigJl2ZSBj

b21wbGV0ZWQgeW91ciAgDQpSZWNlaXB0IE51bWJlcjogTFZRTi00ODAwLCBhbmQgaXQgd2lsbCBi

ZSBzaGlwcGVkIG91dCBzaG9ydGx5LiBZb3UgY2FuICANCmNvbnRhY3QgdXMgYXQgYW55IHRpbWUg

dG8gY2hlY2sgdGhlIHN0YXR1cyBvZiB5b3VyIG9yZGVyLiBPcmRlcnMgcGxhY2VkICANCndpdGhp

biBhIHNob3J0IHRpbWVmcmFtZSBtYXkgYmUgc2hpcHBlZCB0b2dldGhlci4gSWYgeW91IGhhdmUg

YW55ICANCnF1ZXN0aW9ucywgZmVlbCBmcmVlIHRvIHJlYWNoIG91dCBhdCAxLTg2My0gNDA5LTU0

MDcuIFRyYW5zYWN0aW9uIERldGFpbHM6ICANCkludm9pY2UgZGF0ZTogMjAyNi0wMi0yNCBJdGVt

OiBDb21tYW5kwq4gUGF0cm9sIFJpZmxlIFJlZiBDb2RlOiA4MDk5ODAxOCAgDQpRdWFudGl0eSBP

cmRlcmVkOiAxeCBTaGlwcGluZzogRnJlZSBQYWlkIFRocm91Z2g6IFBheVBhbCBBbW91bnQgRHVl

OiAgDQokMTM2MS40NCBXZSBsb29rIGZvcndhcmQgdG8gc2VydmluZyB5b3UgYWdhaW4uIEZvciBh

bnkgYXNzaXN0YW5jZSwgY2FsbCAgDQoxLTg2My0gNDA5LTUyMTguIFBheVBhbCwgTExDIFN1cHBv

cnQgSG91cnM6IDYgQU0g4oCTIDYgUE0gSGVscGxpbmU6IDEtODYzLSAgDQo0MDktNTQwNyAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLg0KDQpOVURYLTY3MjkgdXBkYXRlZCBmb3IgUmVjZWlw

dA0KVHVlc2RheSBGZWIgMjQsIDIwMjYg4ouFIDEyYW0g4oCTIDExOjMwcG0NCkVhc3Rlcm4gVGlt

ZSAtIE5ldyBZb3JrDQoNCg0KDQpPcmdhbml6ZXINCkpla2NuZiBTdG9jaw0Ka2FubmFhYW55YTNA

a2FzbWFyLm9yZw0KDQo=

PayPal Phish from Google Gmail Part 4

Posted by Dave Yadallee on Monday, February 23. 2026

/InformAction">
"http://schema.org/Event">
schema.org/EventScheduled"/>
=3D"http://schema.org/Organization">
le Calendar"/>
feoaojb8jf2l36tfimvkai6l8"/>
olor: #fff; line-height: 1px; height: 0; max-height: 0; width: 0; max-width=

: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">DVZF-3451 updated for=

Order
me=3D"20260224T050000Z">
225T043000Z">
g=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"body-container">

-[if mso | IE]>
=3D"presentation">

=

ellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%=

;" class=3D"">

mscope itemtype=3D"http://schema.org/EmailMessage">

on">Date: 2026-02-24
Transaction Number: 948-TLMB

Order processing upd=

ate

Account Update,

We noticed an activity on your PayPal, LLC account =

that may need your attention. If you didn=E2=80=99t authorize this, please =

contact us immediately. A charge of $1169.55 is scheduled for today.
You=

r item has been successfully queued for processing.

Order Summary:
Pro=

duct: Titan® Tactical Handgun
Payment ID: 98287394
Quantity: 1x<=

br>Total Billed: $1548.77

Any concerns regarding this Transaction?
Rea=

ch us at { 863 409-5218 } for prompt assistance.

PayPal will never reque=

st sensitive information via email. Always call us directly for secure comm=

unication.

Gladly sent,
PayPal, LLC
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=

.
.
.
.
.
.
.
.
.
.
.
.
.
.

<=

/span>

pacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" c=

lass=3D"">

8px; direction: rtl; font-size: 0; padding: 24px 32px; text-align: left; v=

ertical-align: top;" class=3D"main-container-inner">

irection: ltr; display: inline-block; vertical-align: top; width: 100%;over=

flow: hidden; word-wrap: break-word;">
cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main-colum=

n-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-layout: f=

ixed;">

-align:top;">
=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;">
>

le=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;p=

adding-bottom:2px;">

o, sans-serif;font-weight: 400; font-size: 22px; line-height: 28px;color: #=

3c4043; text-decoration: none;" class=3D"primary-text" role=3D"presentation=

">DVZF-3451 updated for Order

reak-word;;padding-bottom:24px;">

rif;font-style: normal; font-weight: 400; font-size: 14px; line-height: 20p=

x; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"p=

rimary-text" role=3D"presentation">
p=3D"startDate" datetime=3D"20260224T050000Z">
ate" datetime=3D"20260225T043000Z">Tuesday Feb 24, 2026=

=E2=8B=85 12am =E2=80=93 11:30pm (Eastern Time - New York)

d>

eak: break-word;;padding-bottom:24px;">

ans-serif;font-style: normal; font-weight: 400; font-size: 14px; line-heigh=

t: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" clas=

s=3D"primary-text" role=3D"presentation">
"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;">=

text-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased=

;margin: 0; padding: 0;">Organizer

r: #3c4042;">
-on-hover" style=3D"display: inline-block;;color: #3c4043; text-decoration:=

none;" href=3D"mailto:manishchauhan9838sawarpue@vrscape.org">Kathryn Ramos=

.org/Person">
rop=3D"email" content=3D"manishchauhan9838sawarpue@vrscape.org"/>
iv>

over" style=3D"display: inline-block;;color: #70757a; text-decoration: none=

;" href=3D"mailto:manishchauhan9838sawarpue@vrscape.org">manishchauhan9838s=

awarpue@vrscape.org

padding: 0; text-align: left; word-break: break-word;;padding-bottom:24px;=

">

ight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color:=

#3c4043; text-decoration: none;" class=3D"primary-text" role=3D"presentati=

on">
ation" style=3D"padding-bottom: 4px;">

yle=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 7=

00;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Guests

<=

/td>

(Guest list has been hidden at organizer's request)

<=

/td>

>

--000000000000ab2623064b810bee--

PayPal Phish from Google Gmail Part 3

Posted by Dave Yadallee on Monday, February 23. 2026

.main-column-table-ltr {

padding-right: 32px !important;

}

.main-column-table-rtl {

padding-left: 32px !important;

}

.appointment-buttons th {

display: table-cell;

clear: none;

}

}

.primary-text {

color: #3c4043 !important;

}

.secondary-text,

.phone-number a {

color: #70757a !important;

}

.accent-text {

color: #1a73e8 !important;

}

.accent-text-dark {

color: #185abc !important;

}

.grey-button-text,

.attachment-chip a {

color: #5f6368 !important;

}

.primary-button {

background-color: #1a73e8 !important;

}

.primary-button-text {

color: #fff !important;

}

.underline-on-hover:hover {

text-decoration: underline !important;

}

.grey-infobar-text {

color: #202124 !important;

}

@media (prefers-color-scheme: dark) {

.primary-text:not([class^=3D"x_"]) {

color: #e8eaed !important;

}

.secondary-text:not([class^=3D"x_"]),

.phone-number:not([class^=3D"x_"]) a {

color: #9aa0a6 !important;

}

.grey-button-text:not([class^=3D"x_"]),

.attachment-chip:not([class^=3D"x_"]) a {

color: #bdc1c6 !important;

}

.accent-text:not([class^=3D"x_"]),

.hairline-button-text:not([class^=3D"x_"]) {

color: #8ab4f8 !important;

}

.primary-button:not([class^=3D"x_"]) {

background-color: #8ab4f8 !important;

}

.primary-button-text:not([class^=3D"x_"]) {

color: #202124 !important;

}

}

PayPal Phish from Google Gmail Part 2

Posted by Dave Yadallee on Monday, February 23. 2026

p {

display: block;

margin: 13px 0;

}

=20

=20

=20

=20

text-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased;= margin: 0; padding: 0;">Organizer

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;= font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;= ">Guests

text-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased= ;margin: 0; padding: 0;">Organizer

yle=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 7= 00;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Guests

text-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased;=

margin: 0; padding: 0;">Organizer

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;=

font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;=

">Guests

text-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased=

;margin: 0; padding: 0;">Organizer

yle=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 7=

00;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Guests