NetKnow Corporate Blog

Loan request spam Part 2

Posted by Dave Yadallee on Saturday, July 4. 2026

--0ba1e843b7735de6c56f6952a778506328

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Re:Good day,

I=E2=80=99m reaching out because you=E2=80=99re in my contacts and I want=

ed to re-introduce the funding solution we discussed. Good news: the loan=

program is still available, and we=E2=80=99re actively deploying capital=

right now.

If you=E2=80=99ve not secured funding yet, what=E2=80=99s holding you bac=

k from taking the next step? I can help you move quickly with structures =

tailored to growth capital, project finance, or working capital needs. We=

=E2=80=99re currently seeing strong uptake on our crypto secured loans wi=

th rates from 2.5% and streamlined approvals (often same day), alongside =

options from our private lender and institutional network.

If timing is the only thing in the way, let=E2=80=99s keep it simple repl=

y with one of the below:

=E2=80=9CInterested=E2=80=9D =E2=80=94 I=E2=80=99ll send indicative terms=

and timelines right away.

=E2=80=9CCall=E2=80=9D =E2=80=94 Share a suitable time and I=E2=80=99ll s=

chedule a quick 10=E2=80=9315 min call.

=E2=80=9CNot now=E2=80=9D =E2=80=94 Tell me when to circle back.

Opportunities don=E2=80=99t wait. Since you=E2=80=99re already in my netw=

ork, consider this your nudge to act=E2=80=94so you can lock in terms and=

focus on executing your plan.

Looking forward to your update.

Best regards,

Harry Schofield

Group Investment Director

--0ba1e843b7735de6c56f6952a778506328

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Arial, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM=

: none; FONT-WEIGHT: 400; COLOR: rgb(29,34,40); OUTLINE-WIDTH: medium !im=

portant; FONT-STYLE: normal; OUTLINE-STYLE: none !important; ORPHANS: 2; =

WIDOWS: 2; LETTER-SPACING: 0px; OUTLINE-COLOR: invert !important; BACKGRO=

UND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: no=

rmal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-dec=

oration-thickness: initial; text-decoration-style: initial; text-decorati=

on-color: initial' dir=3Dltr>

Re:Good day,

I=E2=80=99m reaching out because you=E2=80=99re in my contacts and I w=

anted to re-introduce the funding solution we discussed. Good news: the l=

oan program is still available, and we=E2=80=99re actively deploying capi=

tal right now.

If you=E2=80=99ve not secured funding yet, what=E2=80=99s holding you =

back from taking the next step? I can help you move quickly with structur=

es tailored to growth capital, project finance, or working capital needs.=

We=E2=80=99re currently seeing strong uptake on our crypto secured loans=

with rates from 2.5% and streamlined approvals (often same day), alongsi=

de options from our private lender and institutional network.

If timing is the only thing in the way, let=E2=80=99s keep it simple r=

eply with one of the below:

=E2=80=9CInterested=E2=80=9D =E2=80=94 I=E2=80=99ll send indica=

tive terms and timelines right away.

=E2=80=9CCall=E2=80=9D =E2=80=94 Share a suitable time and I=E2=

=80=99ll schedule a quick 10=E2=80=9315 min call.

=E2=80=9CNot now=E2=80=9D =E2=80=94 Tell me when to circle back=

.

Opportunities don=E2=80=99t wait. Since you=E2=80=99re already in my n=

etwork, consider this your nudge to act=E2=80=94so you can lock in terms =

and focus on executing your plan.

Looking forward to your update.

Best regards,

Harry Schofield

Group Investment Director

<=

/font>

--0ba1e843b7735de6c56f6952a778506328--

Loan request spam Part 1

Posted by Dave Yadallee on Saturday, July 4. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 04 Jul 2026 14:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wg791-000000008U5-27ZT

for dave@doctor.nl2k.ab.ca;

Sat, 04 Jul 2026 14:39:23 -0600

Resent-From: The Doctor

Resent-Date: Sat, 4 Jul 2026 14:39:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.255.237.43] (port=36125 helo=web09.123host.vn)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wg3fT-00000000Cnj-0rH6

for sales@nk.ca;

Sat, 04 Jul 2026 10:56:48 -0600

Received: from 82-132-245-87.dab.02.net ([82.132.245.87]:29162 helo=87.192.105.153)

by web09.123host.vn with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.2)

(envelope-from )

id 1wg3dO-0000000EFKl-373L;

Sat, 04 Jul 2026 23:54:35 +0700

Message-ID: <0ab5fc57a3674d42d17b32d6b277461e542f@argomanunggalgroup.com>

Reply-To: "Erick Hanns Harry /"

From: "Erick Hanns Harry /"

Subject: Re:Your loan request

Date: Sat, 4 Jul 2026 17:51:01 +0100

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="0ba1e843b7735de6c56f6952a778506328"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - web09.123host.vn

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - argomanunggalgroup.com

X-Get-Message-Sender-Via: web09.123host.vn: authenticated_id: supervisor@kinhtesovku.vn

X-Authenticated-Sender: web09.123host.vn: supervisor@kinhtesovku.vn

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 12.5

X-Spam_score_int: 125

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Re:Good day, Iâ€™m reaching out because youâ€™re in my contacts

and I wanted to re-introduce the funding solution we discussed. Good news:

the loan program is still available, and weâ€™re actively deploying capita

[...]

Content analysis details: (12.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.255.237.43 listed in dnsbl.ahbl.org]

[103.255.237.43 listed in dnsbl.ahbl.org]

[103.255.237.43 listed in dnsbl.ahbl.org]

[103.255.237.43 listed in dnsbl.ahbl.org]

[82.132.245.87 listed in dnsbl.ahbl.org]

[82.132.245.87 listed in dnsbl.ahbl.org]

[82.132.245.87 listed in dnsbl.ahbl.org]

[82.132.245.87 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.255.237.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.255.237.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.255.237.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.255.237.43 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[82.132.245.87 listed in will-spam-for-food.eu.org]

[82.132.245.87 listed in will-spam-for-food.eu.org]

[82.132.245.87 listed in will-spam-for-food.eu.org]

[82.132.245.87 listed in will-spam-for-food.eu.org]

[82.132.245.87 listed in will-spam-for-food.eu.org]

[82.132.245.87 listed in will-spam-for-food.eu.org]

[82.132.245.87 listed in will-spam-for-food.eu.org]

[82.132.245.87 listed in will-spam-for-food.eu.org]

[103.255.237.43 listed in will-spam-for-food.eu.org]

[103.255.237.43 listed in will-spam-for-food.eu.org]

[103.255.237.43 listed in will-spam-for-food.eu.org]

[103.255.237.43 listed in will-spam-for-food.eu.org]

[103.255.237.43 listed in will-spam-for-food.eu.org]

[103.255.237.43 listed in will-spam-for-food.eu.org]

[103.255.237.43 listed in will-spam-for-food.eu.org]

[103.255.237.43 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.255.237.43 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.255.237.43 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should

0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 FSL_HELO_BARE_IP_2 No description available.

1.9 REPLYTO_WITHOUT_TO_CC No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} Re:Your loan request

Chinese products spam

Posted by Dave Yadallee on Saturday, July 4. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sat, 04 Jul 2026 10:44:00 -0600

Received: from bg4.exmail.qq.com ([43.155.65.254]:56655)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wg3Sm-000000009hI-3Fko

for dave@nk.ca;

Sat, 04 Jul 2026 10:43:42 -0600

X-QQ-mid: esmtpgz11t1783183351t8e5bbb08

X-QQ-Originating-IP: ULIHibX/M++k73/mqBBQA6VjP+RjXtsfXhkfRk0DW6c=

Received: from localhost ( [8.134.71.30])

by bizesmtp.qq.com (ESMTP) with SMTP id 0

for ; Sun, 05 Jul 2026 00:42:31 +0800 (CST)

X-QQ-SSF: 0000000000000000000000000000000

X-QQ-GoodBg: 0

X-BIZMAIL-ID: 6936835071209469855

Mime-Version: 1.0

Date: Sun, 05 Jul 2026 00:42:31 +0800

X-Mailer: winmarketresearch/Win_Fendi3.3.3.JOJO

Zhang[youly.c@winresearchmarket]

X-Sender-ID: 317

From: JOJO Zhang

To: dave@nk.ca

Subject: =?UTF-8?q?Electron_Beam_Metrology_&_Inspection_Equipment_Market_Research_?=

=?UTF-8?q?Overview_|_Industry_Analysis_Reference_2026_=E7=94=B5=E5=AD=90?=

=?UTF-8?q?=E6=9D=9F=E8=AE=A1=E9=87=8F=E5=92=8C=E6=A3=80=E9=AA=8C=E8=AE=BE?=

=?UTF-8?q?=E5=A4=87=E6=95=B0=E6=8D=AE?=

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-QQ-SENDSIZE: 520

Feedback-ID: esmtpgz:winresearchmarket.com:qybglogicsvrsz:qybglogicsvrsz4b-0

Message-ID: mis_06A9B7103F9FF04D799A56D9@winresearchmarket.com

X-QQ-XMAILINFO: MbevGYHpOT03wrgyIITLTMLrEnG9uHBdj4nVwu/qRBum7IGOkFoHir07

irFqR5O9XW9jZ6WUsQTaajqv+30Ieg0Te0SfBiyzcYRQB8ao9xfX5Ln3NJShzxnxYY0R2cB

04k3elbodkp9XfDW+qUo55DIpZFbUdtcmtMAxNX5t6jHolljw78K9xk/oQzTJCqbpsYSwPf

4BcjHWA5KG6g4/hW6GqrTSx6xY8pJLL961xpZrOPa9r6ZzQEABM0FybfSqLjn6Kz6dPUFM/

RtreoGWq51woESt5SlzVGX7EYSLw0KZrGmlC6nkvYXihlzYGl5bTBhjdSU/xrCLyF2zjwSV

qhZz3r38pAiqi3+jcr8yPnbOsgnvP23vR+Yc3LDhSuUsM7dCksW2+rvYNeUnTAes+x8jsWL

loIJWfVDX0jA1Vbi2doeJ5XhFsea/xubppKTjIE7KsjejaKzSw3ibmqmOBCKD/DOUxdZrra

kilOi4Y0rpM9epFabPjsKoZp1VuBQVOFva/KBvQsRrQnjhrDbMVxzX2CZjKAoCwTS/nYr0O

aeE0sbmpnphOk55elqeFDJKBrBpZ98qT82q4Oi+dPmL6ofzHIFzapYHeOswX8SEMvpkSNsg

yk0FCK7KaVfRs8KqB+NK4Wq77rP/Iy9GqMR3pfu55gPpK84KdUIPQretjM71ErGUsytjmyy

tFhiaA0Yfd5oAIDT13wzp9bsjMU91FMOAt8akZr5rPzprtCxUYAzmV96hC2y/6PjMv/vvqG

m7pyjyyAPAVM/p8Ieu6rQXZsUtIO/ScY5Yc7XBD51yE0B7ZPU5oWxW2BdfTBdwZ6CiMngyt

6Lg8dyXpzW3v35BdBEMyL4bX8vBDggl8XwpFgAMklfORCkzDYDj1rotttCxhCoQK/pCnLTI

sWHBTF9OHwzaZ+A5MDHHfPzxb0vNmAA+7XeBJ3wbOzZ3u4AABOB1oCkZF9g1ji7gTTjY5Qa

Dsj6YsSPWxnfzLv2HaGMoo402NSBQ2AimB32frM+yqdwc5foev6F0GMJkVpbfeLOcc31QyQ

vYeOlMkhYvXt4YutoSQCzzQoEXnNfJZW8Gsk3qolwzV5EIOTS4Pgo8ro2X9KVIstacVr7Sf

zg/5BjH4ntOIE1SwRI6YEPVmFCi4Fn47gRKrTh6KoI0rI6vglZSNbC5CDlI32KSL6wvGwDa

k4j7N4IWqvHiMt72HzWqhCsE0re+740H5v4/u9ozTJUceZqjJsC4JHYGCT42UxiT7br3

X-QQ-XMRINFO: Nq+8W0+stu50tPAe92KXseR0ZZmBTk3gLg==

X-QQ-RECHKSPAM: 0

Dear Marketing Team,

I hope you are doing well.

I am reachi=

ng out to share our recently published report titled Global Market Outlook =

Report on Electron Beam Metrology & Inspection Equipment 2=

026, which we believe could provide significant value to you and your under=

standing of the evolving competitive landscape in this sector.

If you=

have further interest in this report or related reports, we would be happy=

to share the Sample Report and Quotation for your referen=

ce.

Major companies covered in the study include: Applied Materials, =

Hitachi High-Tech, ASML, KLA, Advantest, Holon Co. Ltd, Wuhan Jingce Electr=

onic Group, DJEL, Wellrun Microelectronics, Suzhou Siscantech, Beijing Heng=

ren......

This report will walk you through the Electr=

on Beam Metrology & Inspection Equipment market from the following=

aspects in: Consumption, Sales, Revenue, Price, Cost, Gross Margin, Market=

size, Market share, Growth Rate, Trends, etc. In addition, It contain the =

impact of the latest Geopolitical risks, Trade protectionism and US tariff =

policy on global supply chain.

This content is useful for your market=

research, sales and management teams. If this email reached the wrong pers=

on, Would you please forward this email to your relevant department manager=

?

Thank you very much for your assistance.

------------
Best=

regards | Mit freundlichen Gr=C3=BCen | =E6=9C=80=E9=AB=98=E3=81=AE=E6=95=

=AC=E6=84=8F | =E7=A5=9D=E5=A5=BD
JOJO Zhang | Global Sales Manager
E=

-mail: Jojo@winmarketresearch.com
Phone/WeChat/WhatsApp: +86-15812413698=

(7*24)
TEL: US: +1-888-365-4458(US) +1-202-499-1434(Int'L)
'Top Mark=

et Research And Consulting Company 2025' by Business Management Review.

Roller Wheels Ads spam from Google Gmail Part 3

Posted by Dave Yadallee on Saturday, July 4. 2026

ize:10pt;font-family:Raleway,sans-serif;color:rgb(61,101,255);background-co=

lor:transparent;vertical-align:baseline">@nikrollerads

-M-Fc68Xr3uGtKDlJcR0ByHNbRyuNtwC_WLzCTjEOCDAnibCsZKuo8bzPkdwOXHYmTNQ4oMxQeY=

AQ_84t4eDnAprg6t7YpqRf-ocLsxO6G2WYUy4iCWMdsRMTs5mQWJWewcIvXjdTrVsAWmwvMaEsM=

ajgmzq4-vcdraV93hYvuyXEi" alt=3D"">

"https://wearerollerads-com.hmailroute.net/AlH_SJcbbUQ_26C7FjIZGFiv3ijacVX0=

_K7x3iz9w6e0HRhrmrnyUEUHG11_j2iOZDkrKVbtQTACS0RmIqRElKzn0zaH5l57GnF7vMmcodi=

2j7LgIrHqmfwBF6lYoH9oydvoJARxDabtrDX7akKKJFFuU98CxMvcFgEVh9JdpqoajgmyAu8ZHI=

lqlr002Wu5V_BtCNMrbJCZzoKqPPOnAw4656nZex2uDUIgTsKneV" alt=3D"">
>

pBRrJuxaIwZfRUDtnOCU93WaOD7C6x8ZiWG9QBlxOO-k1iiyIYYP9PCX2fkHxE0xqlyHcRCS5Xt=

KHsPeZVlVDCGja4IZF28J4xcTvuw9rLq79Il6FMKqCcoChUCiSi3fkj5LrNvmOyntWZSKsxjbDV=

SDV-jUa2boWYEiDmsajgmUkC5jDtmPslVlKBYosgpSzUAPh9DbTv3v" alt=3D"">
te>

ahNsNPPvjniM5YYOGcgAQ016Ap9QsQHdEE9kFr3sHJKewgzvh3xm1AfU5T_Asq-x3kcQ-nnbpQi=

2mrbjacGl2WA9iN7uaS6N48tj9Z4K--aDpYe9BqqzG2jC3TuuzyurdCx7Hacg4LjzVIvxV4nHPa=

zZJU9IIS_ayaKftmMCgajgmsoSECRGqFpeG9svkP743LYSI3IOh8ggaK-M8z" alt=3D"">

--000000000000204b800655c6f68e--

Roller Wheels Ads spam from Google Gmail Part 2

Posted by Dave Yadallee on Saturday, July 4. 2026

\--000000000000204b800655c6f68e

Content-Type: text/plain; charset="UTF-8"

I'm sure you're busy, but if you could respond to my email below, I can

cross this off my list.

On Tuesday, June 30, 2026 at 4:52 AM, Niko wrote:

> I've reached out a couple times, but I haven't heard back. Let's take a

> chat

>

> On Sunday, June 28, 2026 at 3:46 AM, Niko wrote:

>

>> Hi, can we have a quick chat?

>>

>> I think we can offer you a very strong solution and would be happy to

>> discuss a possible integration

>>

>> On Friday, June 26, 2026 at 3:09 AM, Niko

>> wrote:

>>

>>> Hey, this is Nik from Roller. Could you please clarify whether you

>>> currently monetize your domains?

>>>

>>> --

>>>

>>> Teams : nik@rollerads.com

>>>

>>> Telegram : @nikrollerads

>>>

>>>

>>>

>>>

>>>

>>>

>>>

>>>

>>>

>>>

>>>

>>>

>>>

>>

>>

>

--000000000000204b800655c6f68e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

I'm sure you're busy, but if you could respond to my email below, I=

can cross this off my list.

On Tuesday, June =

30, 2026 at 4:52 AM, Niko <ni=

ko@wearerollerads.com> wrote:

tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I=

9;ve reached out a couple times, but I haven't heard back. Let's ta=

ke a chat ;)=20

On Sunday, June 2=

8, 2026 at 3:46 AM, Niko <nik=

o@wearerollerads.com> wrote:

yle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi, c=

an we have a quick chat?

I think we can offer you a very strong solu=

tion and would be happy to discuss a possible integration :)=20

On Friday, June 2=

6, 2026 at 3:09 AM, Niko <nik=

o@wearerollerads.com> wrote:

yle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

dir=3D"ltr">
Hey, this is Nik from Roller. Could you please clarify whe=

ther you currently monetize your domains?

ss=3D"gmail_signature_prefix">--

_signature" data-smartmail=3D"gmail_signature">

tr" style=3D"color:rgb(34,34,34);line-height:1.8;margin-top:0pt;margin-bott=

om:0pt">
rgb(0,0,0);background-color:transparent;vertical-align:baseline">Teams :=C2=

=A0
,204)" target=3D"_blank">
sans-serif;color:rgb(61,101,255);background-color:transparent;vertical-alig=

n:baseline">nik@rollerads.com

gb(34,34,34);line-height:1.8;margin-top:0pt;margin-bottom:0pt">
=3D"font-size:10pt;font-family:Raleway,sans-serif;color:rgb(0,0,0);backgrou=

nd-color:transparent;vertical-align:baseline">Telegram :=C2=A0
f=3D"https://wearerollerads-com.rmailroute.net/x/d?c=3D51984853&l=3D324=

92627-e514-479b-9c1a-7f23d37ddec8&r=3D44ed6dd5-5b51-4f06-8f4a-be37dfe50=

98a" style=3D"color:rgb(17,85,204)" target=3D"_blank">

Categories: Google Gmail Spam

0 Comments

Roller Wheels spam from Google Gmail Part 1

Posted by Dave Yadallee on Saturday, July 4. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 04 Jul 2026 07:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wg0TQ-000000005Go-1V8G

for dave@doctor.nl2k.ab.ca;

Sat, 04 Jul 2026 07:32:00 -0600

Resent-From: The Doctor

Resent-Date: Sat, 4 Jul 2026 07:32:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f194.google.com ([209.85.221.194]:49638)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfy8W-000000009bx-0hR6

for root@nl2k.ab.ca;

Sat, 04 Jul 2026 05:02:24 -0600

Received: by mail-vk1-f194.google.com with SMTP id 71dfb90a1353d-59ccf81e74bso500571e0c.3

for ; Sat, 04 Jul 2026 04:01:28 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783162882; cv=none;

d=google.com; s=arc-20260327;

b=Kt4WrLaUFS895dHUr730Qf2B+jMPsOgAqsjwDFdmT8cmhOAA7K4ccxWrUda19LqQQS

JaD749SZPrO4xzIXTPQI9GmlSSvaQHdWIVtorGDqfNCLAfkyZIbd3cBBXf+dsVAL8GEe

ttH0pbRyQgr2sv8Uwyz2tdfX6+Gdm3DpobR4/TzheLoPzicGWEJWG1ImFxdM6EFx4uVv

oEtLbW2hMeT+GEySdqMrf46gzOui4wrGTqfM3C1WMo8FtgbWHCE5sG4rAsVLZMZ5dARb

aJabJb5CTI2G/HJzVdzr+01ANdq0TzFL1iZ/80dz7dzEm/XVo3CY0y3QkNoDO4TkVpx2

Fa2Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:references:in-reply-to:from:mime-version

:dkim-signature;

bh=JEtRXy6b6mhz82c/YN4F/0Zh4wMcZO2XwRjtPgRniP0=;

fh=xlaqb4BBoLdJtBZev3L7vUQ7NrRWtYUi797wkNVG1OA=;

b=g1Us8HhpaOBIX6W4YHpAKhsAOJXFxSO7dWmRpIjOSLb3F3fwGS4vT17n5ePUFOOpVY

d3xH/sBlUXmBTUKn8N7iyxfDC7ylO4cndc1LSzfH9+tBLNp8Qz5bFFs+1j9uk49D+ChD

/lOXQnQAIH1EdHJ91iBznd1AY+0DdDQN8A9zCr1/g1yxOvweDUKEUDH0mZaWdoi+5mUn

OgNY1u8xAkKLiHqHn0LcwcwWPfihgw881XFA/i0P3B7E8f7Z37iSQyGVKKI0c1/3EFsg

ZWXaHkz0xzmKlpSC7KTq/bxW/QQT9lNzEt1tVpAcqlyK9if2hW7QfD+isI4Hkm+27IHv

X/cw==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wearerollerads.com; s=google; t=1783162882; x=1783767682; darn=nl2k.ab.ca;

h=to:subject:message-id:date:references:in-reply-to:from:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=JEtRXy6b6mhz82c/YN4F/0Zh4wMcZO2XwRjtPgRniP0=;

b=Cp8V+RMzddy3nlBMScyKlk80sazY4XJZtQxDlzHsJ5kYpj91uP6atcR7IEPsSNoJ8R

DBPk6PqfUTgEqyfcJ+N+djgnaVLzxlODWya52o7BsTqDBDq1hX5IgBk3I+54gt+PhEL8

sm3cvN20iaNEl2z87HO2Ei9B1ZAFodMlWGxK4=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783162882; x=1783767682;

h=to:subject:message-id:date:references:in-reply-to:from:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=JEtRXy6b6mhz82c/YN4F/0Zh4wMcZO2XwRjtPgRniP0=;

b=hSZBSJLq/4fcylmUHZvucf7+eOU7GWGx+8pI3UsA9C4rZZ/AuMJHGGfLA1DrjuABQE

16nSBRAgHzaJ6+TG0PZfpvBFQzENAEzOJwbWFn7InuAUCZIkQPXrAg/clOwrv/DQTdZ6

OybXQmr2/GOWP30ZYzdNe3/fYFvfXw9PWAs4l5jP21gr4qPwpv7g0ZzA792nMrTxscP1

g8aYeVR47gSqxHJkIqU3ITQolelo75m76IN9NWBEEhIrWhLIPX2pey7YSnc1TlA6HACm

JH5AAxj9gvytFTKimoASnjOi9+p+guBloOq7dATxGaBT5mULPEte7oijvKreWJEBFrEX

7Gug==

X-Gm-Message-State: AOJu0YyE3kQwUi5eG4HggxGoi1m0JNz6da7sAFNiBSliraDEAMRxjFaJ

7PhkZb7L3j47OITAPsf+tfGZDNDDxxUbvIlQwYGQNiNeTmmYuedd6gwfDsj5aVAM1Q1497JLRnZ

rfb9W6OZx4wha5s73Z9Gms8mnbjEBg4NNOUep0lPw7Nm/4ZOr8WH4ZA==

X-Gm-Gg: AfdE7cliwDkgBln+aczYVhMPHErBrqlspQLKtfiNfOQ23MdhEDtat7ho47fwAay6K1N

J33ug+GQY5Rjha3oyI2G5W9BRxO4JM04LlYV0Uvzm+0QdPXqZxsUB2xCkvwx5zTHZdQp6J7+tBg

G5/PZuZIPJSKHn7VN3m0NMiNFyqOOuDaxkZQuo+y2fkLxp5ECzxwxO0gEQw2siInV++yb7/cU9+

Uznph80P9ZwRTPQLwDrlqRNuI1jqIP/Kpbn2qwG0TDG8FSTnQg9/m7lGBSRpKoNFHpAVAILcrss

ox/+W2kobmnqumbfWBcyvpBnUw==

X-Received: by 2002:a05:6102:578b:b0:726:f965:722b with SMTP id

ada2fe7eead31-7427f7b1759mr812836137.21.1783162881457; Sat, 04 Jul 2026

04:01:21 -0700 (PDT)

Received: from 776393159873 named unknown by gmailapi.google.com with

HTTPREST; Sat, 4 Jul 2026 07:01:20 -0400

Received: from 776393159873 named unknown by gmailapi.google.com with

HTTPREST; Sat, 4 Jul 2026 07:01:20 -0400

MIME-Version: 1.0

From: Niko

In-Reply-To:

References:

Date: Sat, 4 Jul 2026 07:01:20 -0400

X-Gm-Features: AVVi8CdTUrFiVeKSALJdXTOvSNXDYpw21PKVgSymPSYlQPsRYixpbJnZwYSb0W4

Message-ID:

Subject: Re: Parker Roller Party

To: root@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000204b800655c6f68e"

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I'm sure you're busy, but if you could respond to my email

below, I can cross this off my list. On Tuesday, June 30, 2026 at 4:52 AM,

Niko wrote: > I've reached out a couple times,

but I haven't heard back. Let's take a > chat

> > On Sunday, June 28, 2026

at 3:46 AM, Niko wrote: > >> Hi, can we have a

quick chat? >> [...]

Content analysis details: (6.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

[209.85.221.194 listed in dnsbl.ahbl.org]

[209.85.221.194 listed in dnsbl.ahbl.org]

[209.85.221.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: hmailroute.net]

[URI: rmailroute.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.194 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: rmailroute.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.5 SMILEY BODY: Contains one or more Smileys

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.221.194 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.194 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Re: Parker Roller Party

Instagram followers phish from Google Gmail

Posted by Dave Yadallee on Saturday, July 4. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 22:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfsJy-00000000HAl-1IQ3

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 22:49:42 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 22:49:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f198.google.com ([209.85.128.198]:40996)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from <3cVlIag0JBZ4K8WMPNCPLSfcdEK8GJ.AMKQ8JCQLI.A8@maestro.bounces.google.com>)

id 1wfodr-00000000EIW-06GE

for sales@nk.ca;

Fri, 03 Jul 2026 18:54:07 -0600

Received: by mail-yw1-f198.google.com with SMTP id 00721157ae682-80c529f0448so1445907b3.0

for ; Fri, 03 Jul 2026 17:53:11 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783126385; x=1783731185; darn=nk.ca;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=hdXdrm3esRZO8s6qEECXhoPlo36E2/rphYZxU8e9dp8=;

b=FIgVofpuc7EpFDERFPZ0a0JbapbX1sDBpDXrmQOVt0+FDz0C6OhkMPgJ9oNePFchGt

bQe8gvYHfYAwDqs2xROiyAS7zLfoNmu0YUl7jycQWNOK+e3HxdmNTFPhtsEs0fdhWzMh

PCt7srAuuzjXtUyRvjp6hYAIM3HiQaa5OY81tbJIvBo8knS7yx8YInzWEDLQ6tJroPl8

CrVVO60CItiBxtq+VcP7FIFWWKljq0iJES/63xqnVul5J1CS5s0VAMwVIbRs8DZVhun6

nGsq6WKS5+i5wKPzbzOmiYhGXDk0E3zomeKvepGsNRlgxqr5EbNbbTHxCBNCFX7jg4/U

L3bA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783126385; x=1783731185;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=hdXdrm3esRZO8s6qEECXhoPlo36E2/rphYZxU8e9dp8=;

b=F0Qwf6SUCUC7tshXXRp34yPCx0Z7LEu16bgn4ij1oHBmjDBtDLxG7s/aOeqr/0EzLG

oRysT2gSGT01qM5Pc63CLnLU5J4azrBMiO6xyyItSAucXgXRIeK+IfeJomv5IXsrFM1S

SrXSMT7S5mS6QyfuSgreBpWLFdqkm/VSPoA9/U2zd+a8FMSHDAr0PmKTxTYnd5UQN0Vd

y7SNOasCHcphre0Oys9lyzN81Y5ZltA0K2EBiRxKlwKvH1KXQ3FpcTYeH17msMNmsrx5

0WpDxvJl3hHr5of5tTrIreaCdA2RjPGejFXXBHlShc4KAqRBTajV5UR3I3lQL97d+q4R

Xi7w==

X-Gm-Message-State: AOJu0Yzz+opQTsO6LkUAJFVgY2sHlqfBy0O+aKjYmHekqkiF11CDQTLL

paqoQwdxReHbJVEI/t0klPC9reqnRuTiBll0UTjxQTpvfrVNz1uWRFcwfrswnLxEvaMKpWQSq0i

TFvCctg==

MIME-Version: 1.0

X-Received: by 2002:a05:690c:d84:b0:80b:93b8:87e5 with SMTP id

00721157ae682-8171dfd3dcbmr16608417b3.1.1783126385071; Fri, 03 Jul 2026

17:53:05 -0700 (PDT)

Message-ID:

Date: Sat, 04 Jul 2026 00:53:05 +0000

Subject: Netknow Internet Service, Get More 100,000 Instagram Followers

From: mayorpernu745@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, Netknow Internet Service, Get More 100,000 Instagram Followers

Sorry to interrupt your time. We offer social media services, If you're interested,

please visit our Website. If you're not interested, please skip this step.

Content analysis details: (5.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.198 listed in list.dnswl.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: instatool.site]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mayorpernu745(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.198 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.198 listed in bl.score.senderscore.com]

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Netknow Internet Service, Get More 100,000 Instagram Followers

Hi, Netknow Internet Service, Get More 100,000 Instagram Followers

Sorry to interrupt your time.

We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.

We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )

Are you interested in a free trial ?

Special For You Bonus Extra $2 - $5 FREE BALANCE TODAY SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :

[ https://instatool.site/store/free/?netknowyeg ]

Take free trial service today only...!!

10 -101K Instagram Followers

- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest

Thank you,

Regards,

Copyright © 2014 - 2026 instatool.site

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on Friday, July 3. 2026

--_000_SEZPR01MB686520BB7AFC380417817CC0BDF42SEZPR01MB6865apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

Hello sales@nk.ca,

Just checking in quickly.

I can send our updated SEO proposal and pricing for your review.=

A short reply with =93Yes=94 or =93Sure
>=94 would be perfect.

Thanks,

Maria Garcia

--_000_SEZPR01MB686520BB7AFC380417817CC0BDF42SEZPR01MB6865apcp_--

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Web/SEO/App spam from Microsoft Outlook Part 1
Posted by Dave Yadallee on Friday, July 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 13:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfjc9-00000000H9d-1THv

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 13:31:53 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 13:31:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012061.outbound.protection.outlook.com ([52.103.43.61]:11231 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfihk-00000000DEI-4350

for sales@nk.ca;

Fri, 03 Jul 2026 12:33:47 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=A7ukawCiEoCHVxBMlK8z+1AhDTTSVGHWUs82rKhb86wvAAI/531nuTw9SIk6WbMMyv7X4jAR7m1rn9CDAjrQOL4g6UPcEbV+RjpIJr28AE9IV809iPxmOQyZwjp0u8WSqKX9o86ml+LCfdsCKo2wnqMHPPEtCOk5Y2l7BQshPBusj+y6PxCA8GsPkMrR08cl87Sk9EJ2ub7Ajsy25BaFAnMZYGhR0YaMDyKJYmhfqJ5Wu3CNv9Xm5l/6tvHyB9LEiiLIt5l9l8O5F92zB82GZL2RiLof9qxX1JgG/QJvwSojUbrXGs6VXrNBj/E15TgN3iNdMdopPbA8OX39t3Dr5g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=YhwTKH/7hOFgG1WRTe2Ff7f/0LEMpmMzKjO+5duxSPA=;

b=LAriS5RHqN/FZeFGFuq9G+WWCPhrzmnVAH+Itc6Qf2AQGRC106llgnPoUudllRWidSQKdMpH1pd5d3rnw3vRbAvPNqJnYRgGaVGMZYFL1NEKqeqDXFVlyZQ8o7KLA2wcu5Jw9Yo48D7NYfoRP8TnEoHuFj5j3CwaQhGJ0PRn3fzwAC6ix+BdlDnJB9yLGpXerHDevLO1bd/XmNtDXS0Pxy9oMVH1hvGOdPvMKOzY3+1+hEgdT9L8nrRoFFe7tPAzbq8jmpuUnYIOkFqEYRmvx+BSY4EULKfS+i3G0hb7MZLtBsinlelqJLp6p0uCjMOyomxlL1OddK1+Yfc8DjFQYQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=YhwTKH/7hOFgG1WRTe2Ff7f/0LEMpmMzKjO+5duxSPA=;

b=GewJPZ7IWuiJ6FTm5mtghwsnQndp9C+5qQVchNxl0/dyMQcOa/8Nb3pc17J+I+/8AKJYGJsYRNxfi2dGDF5haJaiC2p7Kc1jMIO6wkv+xqtq4fdseo0FO9evVtt8Cs79wURgKnVXkTKoNZl+/si67I/FIcevfZBkXAQfmsYt6S/alZ7t0IJlN6lw7g2JN9J33QN4w1Ux9V10Z5OBCLm2RAftsfHflUHjA8yUm85Ce+VcX2a/+JokBs3rwjxx1qh7YJ0kYPZHPnS7oXYj4Os9Eb9X4TTXymGRjUzPxNpYyD2ha5uVrv7SdnN3Iq+Ex2UsFdwq/1nyDahgSOp9nITLDQ==

Received: from SEZPR01MB6865.apcprd01.prod.exchangelabs.com

(2603:1096:101:23e::5) by SG2PPF424EB36EA.apcprd01.prod.exchangelabs.com

(2603:1096:f:fff6::419) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.11; Fri, 3 Jul

2026 18:32:39 +0000

Received: from SEZPR01MB6865.apcprd01.prod.exchangelabs.com

([fe80::6188:3e22:c3f:585f]) by SEZPR01MB6865.apcprd01.prod.exchangelabs.com

([fe80::6188:3e22:c3f:585f%5]) with mapi id 15.21.0181.010; Fri, 3 Jul 2026

18:32:39 +0000

From: Maria Garcia

To: "sales@nk.ca"

Subject: Re: Book a Free Strategy Call

Thread-Topic: Book a Free Strategy Call

Thread-Index: AQHdCxpTCPnvhj4hoEC6Q7sgDTybxw==

Date: Fri, 3 Jul 2026 18:32:39 +0000

Message-ID:

Accept-Language: en-US, en-IN

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR01MB6865:EE_|SG2PPF424EB36EA:EE_

x-ms-office365-filtering-correlation-id: 89cf9a85-1af1-46e5-9972-08ded9317655

x-microsoft-antispam:

BCL:0;ARA:14566002|38102599003|15080799012|20031999006|4140399003|2604032031799003|5062599005|25010399006|24121999003|22091999003|39105399006|8062599012|19110799012|31061999003|24071999003|8060799015|24021099003|55001999006|11031999003|3412199025|440099028|102099032|40105399003|26121999007|35041999009;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?fO9iefKUygVV1aDkSTGRDQuVlIG73KH8Eu/wwcc5LMPtJ1JdbjTVXB37?=

=?Windows-1252?Q?ENQT+OAXUwzL0vAzBHhW0torGeaNbdrhHjK9UR46JB5DmH8ZiRgxjOnA?=

=?Windows-1252?Q?v1fwdScznkQuYhJEQuOMuiu3Zq0CaQ85EbsPJ9KDZ/kcdOMgR+QB9vRE?=

=?Windows-1252?Q?27jndEz+ZrmOr1QZgu/CtqlRtaDR57VhXFEtAWKPgtaURIH11MLD34vo?=

=?Windows-1252?Q?m5isQf+R9dmbzK3e717aZrJZNejOEe8TfaRh11rP3B7mqAfuaSie7iKb?=

=?Windows-1252?Q?cwCtTUUzBQ32UKqaSzNUJ7wbNEXs6BQ7UGq4pyVYXbdihuBD1LFXV864?=

=?Windows-1252?Q?CDX7Xwa/5CelMHoSo82/rkVQrGoHPOwAT1ldVRX6PCFPAfN54MyEc0lF?=

=?Windows-1252?Q?iukEtGEJTnPJwrkJX6CSWUbsHCoAcIgtLAQ7LGILfuHli8TxEYSfF2pU?=

=?Windows-1252?Q?PKcoOm03eXAvWmbaNK3Nq7oy5mzrmQCTQIlWbzLkeDMginNA82PsREJn?=

=?Windows-1252?Q?0kXy7fCMG5z1ObKiuw/ft2y/z4oOh+sWW8IAnn45WuLmwz2/vikYNKYK?=

=?Windows-1252?Q?yG/jric26ke1NGBwL5uLrHdm6FuFUdS/WjIQpolOV4PMWxOZp6qqxUuG?=

=?Windows-1252?Q?AHbsvQYkn4gcUTAL4+d+7bmUQzkC7Z1kFvPUn2s/log9qQgkA2eCQJh4?=

=?Windows-1252?Q?sx29PS/Q7t1E8Luw2C8wIZ4rpcU8Jzdva8eTGBy0zSZN+FqRuu4xSpGq?=

=?Windows-1252?Q?ktKbgGG0fbalgTIL+iDcIHCtrWB9QUmZR9JsBvXEclFZlWZnUizjxxn4?=

=?Windows-1252?Q?6FucaELxk7KpysUoionJuVYCpo6QNX3jUnc9iAC/VsA5PT5QjCFGYGyg?=

=?Windows-1252?Q?x4WnmxdPRBp6cmi2HMUav8eans2eHJQyuKL90oUF7Dpjen4n3CSm1HfU?=

=?Windows-1252?Q?kiqkN0YC4w+ugfrzqSBH+COW4HvW/Yg5BbQPZwdaP9JMTqE8z9C8GABG?=

=?Windows-1252?Q?LOF4+zvNQBVNE/rHECpiF4EJjEmDkHwLBFRelCniG9lbFlKnBB65J/Cp?=

=?Windows-1252?Q?igoIcZv33RUv2P5BaiukEUUIb+XuTu/HAGkGNhlw4c/vE3ypOT00YVp4?=

=?Windows-1252?Q?whUdSbp/ulUAAP9IILwqi7Wcg8AXHCz4Gyo3bUxGPR117F7eCDvmNOn4?=

=?Windows-1252?Q?Wk5BMBfFhdp0Ujv+TWqz2RD9eUVyXOqI1dToF040u7q8fvUbfyhovqPx?=

=?Windows-1252?Q?QQb1tU3KX/HkfiwV/H3QzsSVH0wcrmsys/T2GFOtn7gxdwyXGD0kjsQc?=

=?Windows-1252?Q?gPGdbOoiQ5qhnru7tWpeSKY45P8oq2x3jACw5KgTtoQ9VFo6nEzeh+e9?=

=?Windows-1252?Q?yAYt7amEl6IdXRbXO/hOS4cuU2wl3bp2qh4=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?bQ/rAqMr9KKj4hsIwXVyXafrbUnSP4VCWwdHZy07O+TLDZHqwEliY7H4?=

=?Windows-1252?Q?bB1br0SyNEyB4HNFMoTnsIm2XHUndshdxTfQBlFSa1/6GxMeX6Bzoi1h?=

=?Windows-1252?Q?bIlYcubgkRqPFfsTBuEyyVGsOVN7AVDwdcY4iHSIWitMF74s2LC9HHDf?=

=?Windows-1252?Q?+HUUkWcJdo/WwtcUwqzdTsrbx0knuKhkwVZuR+q0gUX3WuPPBhp3wRuZ?=

=?Windows-1252?Q?RVi9ZA8spK+xcqKSHRnicewtMVHTkJwfgVLCmXXsnPT3Vk80wcwhhBsP?=

=?Windows-1252?Q?gH9oCoxGlR8WQ63Qo9yL9xdFSlFjcMl58ArC3IU1BkGOGV1ZgpHpaR3Q?=

=?Windows-1252?Q?F5lAYYUrTHky4WDAfWVJIScFR7BwErCW9im0f55m46wmiTWdIf8hqJPZ?=

=?Windows-1252?Q?QDxYKAcm/tT1HG3zoTWHehe58P28OCK5W5ZH4Aj6AtRtvMgMqRGqv0cW?=

=?Windows-1252?Q?8I8XkAUO68JXrmrUkSNvWuxWU7vsFmtPRi4pTVqV/xAorCLqcbD/8ntQ?=

=?Windows-1252?Q?UpeOpv5/4vSha3/l1MBVvZdpBHFvQcoEDeGvBv83yz0DJq7eA5uf6alg?=

=?Windows-1252?Q?1UTrpokCq7SwVpqxdJ6j+H9RuskZlncxCKDSeF4GeN1YT4VIn0Ls0OTf?=

=?Windows-1252?Q?FVgJPT9vkOdaWfrAwTyAq7cAAIXGA4/Qjjj5Ze3BCIpxnwZyRo1n7dVY?=

=?Windows-1252?Q?Z0U/kO6ouq2okCT1jNdc6hjO9FYvj12zSZOvfE3ZN725eydUwqSLChJJ?=

=?Windows-1252?Q?voJtO0XiGkKpHZH9K0q6H7My5mbCOVUsxFyqMRD9KHOcrF0b2+NpBxeq?=

=?Windows-1252?Q?ubhGBcNrAzSZhcSSoE3Iyyqp3U38w6iA+NsmVyek+kTlXGiBpo/uEY8H?=

=?Windows-1252?Q?w0+AzH/4bsRQk3V7ZdcsBXvV4aKwPSvBRWjYquYywiOXna9S/rKdCPV6?=

=?Windows-1252?Q?tUDrV2n3v6AekD8e24tTs/rju6bqxD09yTgzN8xaZC3ps+OAD3Vtef4T?=

=?Windows-1252?Q?9Bc2YAVtydTLB2XxOHU7MS3kVAB99+k4WPmali2FjbBRQBiSq44wRIug?=

=?Windows-1252?Q?SNocwSAeWy/7S4FlhyqLC92Jlxmt1LHZnqXbwqELFzuNRIaNAyR8clyx?=

=?Windows-1252?Q?rRp2i3pzW1mlHvKSM0WUaN8GWkIau4e0P/VSELkf7kddkcc1pL9m8GP3?=

=?Windows-1252?Q?c5e8BWAy/jYyke5jpMFLJrSNNrzlfCTPfL3UvJRN5v2zvxEc7qpEvaV3?=

=?Windows-1252?Q?L5AssVO+cHbMn8LEhlKb9X0ARuZs/84jQfj6WCfcvFmdzQ+nb9EKLCOm?=

=?Windows-1252?Q?kGA7zR5yMMx4dswAAr4asWxsCyR6PiDAzTcOFNgX4A4eXX6/TcGx3riF?=

=?Windows-1252?Q?dnC5u+rmXEe85kMn8naXgn7HatWxlvAYFUa0SLkAHkjfd1OTZ1KnH7ve?=

=?Windows-1252?Q?y+smy4uuRbX4b/SZUFnO7wP9rvnRcaZrMPLP8SxYxL8nLzrQbbsLMDQF?=

=?Windows-1252?Q?nThMvKJQ0ktafxoMZJOUvxioNex+kQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR01MB686520BB7AFC380417817CC0BDF42SEZPR01MB6865apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB6865.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 89cf9a85-1af1-46e5-9972-08ded9317655

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jul 2026 18:32:39.4526

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PPF424EB36EA

--_000_SEZPR01MB686520BB7AFC380417817CC0BDF42SEZPR01MB6865apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hello sales@nk.ca,

Just checking in quickly.

I can send our updated SEO proposal and pricing for your review.

A short reply with =93Yes=94 or =93Sure=94 would be perfect.

Thanks,

Maria Garcia

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Web/SEo/App spam from Google Gmail Part 2
Posted by Dave Yadallee on Friday, July 3. 2026

This is a multipart message in MIME format.

------=_NextPart_000_2A5E_01DD0B46.3131B3A0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Hi,

Are you planning to build a new website or redesign your existing one?

If yes, just reply with a few details about your business, and I'll share

the best solution for your needs. You can also share your contact number if

you'd prefer a quick discussion.

Best regards,

Nikita Ramani

------=_NextPart_000_2A5E_01DD0B46.3131B3A0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>
Hi,

class=3DMsoNoSpacing>
Are =

you planning to build a new website or redesign your existing one?

class=3DMsoNoSpacing>
If =

yes, just reply with a few details about your business, and I'll share =

the best solution for your needs. You can also share your contact number =

if you'd prefer a quick discussion.

class=3DMsoNoSpacing>
Best =

regards,
Nikita Ramani

------=_NextPart_000_2A5E_01DD0B46.3131B3A0--

Categories: Google Gmail Spam

0 Comments

Web/SEo/App spam from Google Gmail Part 1
Posted by Dave Yadallee on Friday, July 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 13:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfjbw-00000000H8n-2qrc

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 13:31:40 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 13:31:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f45.google.com ([209.85.216.45]:49449)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfiSF-00000000BuQ-18Wa

for sales@nk.ca;

Fri, 03 Jul 2026 12:17:45 -0600

Received: by mail-pj1-f45.google.com with SMTP id 98e67ed59e1d1-3811f512167so695429a91.3

for ; Fri, 03 Jul 2026 11:16:46 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783102601; x=1783707401; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=if0jsXGE0tSY9tnfGh2llPfdBiFEDiQ7tZPiZKdW2Jg=;

b=F3tT6495zg5Gt8extAPkaSKuyC61uTQ/qGxVgCruJJ/fNcd9o/5X8LOFv+n5iDqzzJ

7e8gSk5ldeW6EJ0nzfOOYa61OQ/fPDPo4PQLx1xikjEqPcO0zTcOwFTf0zFenQrxLNHp

a5xj71qaA+rQQ1f7F1b+pFMbB0dx+k6+8OgbIkuzGrRydOZhp6DGPzm5SO9eJDY7OLxd

duXXe7G0TU50RuHlpWdeMp3xRQT706TRbBUZoifNnhO2O5NUP8uxNRoWAD6EtMBnl2Ib

fAEcF3AU+D+g/fjlDx+/Nzgisj4AYlC/YoEOB6w05BcthGbG65OYsRI4AesUKiOC+zu6

8HYw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783102601; x=1783707401;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=if0jsXGE0tSY9tnfGh2llPfdBiFEDiQ7tZPiZKdW2Jg=;

b=DUcGP2Ze/DlD8q+S5KZT5g8zIsgpc3NMusOzqdjHp7F/OMWq/AofJ4/ehnlk8ii4+f

Dehda1d2Yd7j4XexeLGZP2+V9UkhhAF2XkLgsCAYxIGXA7vVU1UglqJiTbB69y5mg+RR

6tsO6HBbUtpAcKmeeIhrciKnvvCLvuHpEoqnWOhZAXAc1xZTWQ7yPYLRYaVMNJicb0wD

hCIdxnLIi89WXxBPFhGT/XH2Nw4ZPqDn39pdakRgI76nuTYfDQuuwFXq/dioh1aa9NGn

nlcHwMowIt872U8cDm1HIMrX9c0qZFIyPKdV+v6DnnxoUU7rTJX9gP4D8vZxcS7wD8SF

NLOQ==

X-Gm-Message-State: AOJu0Yzd8UoYnNqwRrp5tWN7izGO2q829ejnpPxM4D6VbmSg85H6bxB0

7Zf+osm0nGKqzDX+uWnCkV+/TFYKe3VveL/1uFHWiuG2ZEyi0EpoWZqWmS+BQKQuBZrj0tZa

X-Gm-Gg: AfdE7cmv522cboJiq/jC23WPLl+tRoS6XEL/rV2McYCHNBKxoN0vEb4vmDNWkNdcHc2

Eguwmili3dIxaA3vmgqs4vcQCXRQNV6jFjblLkoEmhq/ptlV4U8jKLawX3OVFj1vrVa/NSCRyCs

jCPZx/wqWWNOayUHUNTTFi2Ifw0lgwvYS2yKQrY7kTcsKQ59+0lUBlaGxAjvYSF+S/1odk6HTTu

WFXeZDfqhcw0/l7lIc8iJtjH9L7LlnjYFVwhTvvq+UO/wRPvmAl8/PrC1Cd9Pn4aT3zj4xW6iUa

UZ8gjUJVVwXOXA7Zq875HdvdR9mrZ0aGQmQcNake0nuwao8qmw5/Y31AKYFla04EwzARCCwxzI2

Sx0wQpn5ptHUF9Wb9xhL7mQH6qINtoMU683Oih1ehAFWpO5Xox9vMt6Xv90dHvkDD5R+wmrwHFO

+agy8vSVuBCRvJSAjb2pfF5J3+5g0EIrcG

X-Received: by 2002:a17:90b:4d0f:b0:381:e73:3c2e with SMTP id 98e67ed59e1d1-3829f4e8432mr562620a91.24.1783102600733;

Fri, 03 Jul 2026 11:16:40 -0700 (PDT)

Received: from DESKTOPOME7UO3 ([103.68.20.205])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-30f31e7a2a8sm7249491eec.25.2026.07.03.11.16.38

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 03 Jul 2026 11:16:40 -0700 (PDT)

From: "Nikita Ramani"

To:

Subject: ui/ux

Date: Fri, 3 Jul 2026 23:45:10 +0530

Message-ID: <2a5d01dd0b18$177977a0$466c66e0$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_2A5E_01DD0B46.3131B3A0"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0LEWbUZOu6iwsTSCqTwlMRHK8rag==

Content-Language: en-in

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, Are you planning to build a new website or redesign your

existing one? If yes, just reply with a few details about your business,

and I'll share the best solution for your needs. You can also share your contact

number if you'd prefer a quick discussion.

Content analysis details: (8.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.45 listed in dnsbl.ahbl.org]

[209.85.216.45 listed in dnsbl.ahbl.org]

[209.85.216.45 listed in dnsbl.ahbl.org]

[209.85.216.45 listed in dnsbl.ahbl.org]

[103.68.20.205 listed in dnsbl.ahbl.org]

[103.68.20.205 listed in dnsbl.ahbl.org]

[103.68.20.205 listed in dnsbl.ahbl.org]

[103.68.20.205 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.45 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.45 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.45 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.68.20.205 listed in will-spam-for-food.eu.org]

[103.68.20.205 listed in will-spam-for-food.eu.org]

[103.68.20.205 listed in will-spam-for-food.eu.org]

[103.68.20.205 listed in will-spam-for-food.eu.org]

[103.68.20.205 listed in will-spam-for-food.eu.org]

[103.68.20.205 listed in will-spam-for-food.eu.org]

[103.68.20.205 listed in will-spam-for-food.eu.org]

[103.68.20.205 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.45 listed in list.dnswl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.68.20.205 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.68.20.205 listed in sbl-xbl.spamhaus.org]

[103.68.20.205 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[nikitaramani418(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[nikitaramani418(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.45 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.45 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} ui/ux

Categories: Google Gmail Spam

0 Comments

Chinese Products spam
Posted by Dave Yadallee on Friday, July 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 11:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfhsJ-000000008Jx-2wQ1

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 11:40:27 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 11:40:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m25478.xmail.ntesmail.com ([103.129.254.78]:58714)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfh6f-00000000N1X-3G3k

for sales@nk.ca;

Fri, 03 Jul 2026 10:51:28 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_2297061_1442710002.1783097415960"

To: sales

Subject: =?UTF-8?B?V2hvbGVzYWxlIGFuZCBjdXN0b20tbWFkZSBmYXNoaW9uYWJsZSBqZXdlbHJ5IHdpdGggY29wcGVyIGFuZCB6aXJjb24/IENob29zZSBvdXIgY29tcGFueSE=?=

X-Priority: 3

MIME-Version: 1.0

Received: from gy003@saiyajewelry.cn( [10.139.4.160] ) by ajax-webmail ( [127.0.0.1] ) ; Sat, 4 Jul 2026 00:50:15 +0800 (GMT+08:00)

From: Joy

Date: Sat, 4 Jul 2026 00:50:15 +0800 (GMT+08:00)

X-WM-Tid: 0a9f28e359080a83kunm3823b3242e1794

DKIM-Signature: a=rsa-sha256;

b=ezdHN4FjInZkmHZN+Kvp6+e5LlEGB3S1I4Nf5TyfYCs/PCgeAfwX6dg6bOciQA/B/tZl6V3/REwFQPfVj2KtUBbvcw1/qATye4cyUYl8jvlZMLzTjanGGGK4IDbT4YgxO1TSyfclHYDnqL5uSc6Hz6ajfjs4hIjEOj7BsZyx41M8gT7egtrr7R+HE83EferHF/PwB8690Qxfx6mRIzq1Kc/vuFzRXVbc+FdzmuBmaFjJ52XVJXizyd93mtVoQFCksNJTqgszVToU3y9hTFqkpOA5nCCPYD5p3wrbsNNGx0ubQLXGOV1Utt3yHYNHmaXVA6AB1VigFD34EQHFJvy39A==; c=relaxed/relaxed; s=default; d=saiyajewelry.cn; v=1;

bh=jOPwkvU50it8+4cn8DzKUVJ8d4gf7I1G/neQGv41ml8=;

h=date:mime-version:subject:message-id:from;

Message-ID:

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Discover our eco-friendly copper and zircon jewelry, compliant

with international standards, offering quality craftsmanship, reliable logistics,

and a risk-free sample order process. Explore our colle [...]

Content analysis details: (6.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.129.254.78 listed in dnsbl.ahbl.org]

[103.129.254.78 listed in dnsbl.ahbl.org]

[103.129.254.78 listed in dnsbl.ahbl.org]

[103.129.254.78 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.129.254.78 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.129.254.78 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.129.254.78 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.129.254.78 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.129.254.78 listed in will-spam-for-food.eu.org]

[103.129.254.78 listed in will-spam-for-food.eu.org]

[103.129.254.78 listed in will-spam-for-food.eu.org]

[103.129.254.78 listed in will-spam-for-food.eu.org]

[103.129.254.78 listed in will-spam-for-food.eu.org]

[103.129.254.78 listed in will-spam-for-food.eu.org]

[103.129.254.78 listed in will-spam-for-food.eu.org]

[103.129.254.78 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[103.129.254.78 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.129.254.78 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.3 PLING_QUERY Subject has exclamation mark and question mark

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?B?V2hvbGVzYWxlIGFuZCBjdXN0b20tbWFkZSBmYXNoaW9uYWJsZSBqZXdlbHJ5IHdpdGggY29wcGVyIGFuZCB6aXJjb24/IENob29zZSBvdXIgY29tcGFueSE=?=

Hi there,

Let's be honest—when it comes to fashion jewelry, getting the right materials and craftsmanship saves you way more headaches than just chasing the lowest price. We focus on eco-friendly copper + zircon pieces, covering pretty much every style you can think of (bold, hip-hop, trendy, vintage, minimalist, cute—you name it). All items are finished with 14K gold, rose gold, or palladium white gold plating, ensuring both aesthetic appeal and compliance with export standards.

We use lead-free, nickel-free copper across the board. Our plating complies with REACH, RoHS, and California Proposition 65 standards. All test reports are uploaded as clear images on our Alibaba store homepage—you can see the key details (test items, dates, batch numbers) at a glance and screenshot them for your records. For customers in Europe/US (sensitive skin concerns) or Middle East/Latin America (hot & humid climates), we add extra pure water rinsing and nano-sealing before plating. Salt spray test data? Just ask, we'll send it over.

Here's our after-deals assure—no fine print: Before shipment, we'll share packing photos + plating thickness measurements for your confirmation. If you run into abnormal stone loss or plating peeling (not caused by mishandling), just send us the batch code and photos. We'll either replace the parts in your next order or credit the equivalent amount. No runaround, no blame game—just traceable batches and clear accountability.

You call the shots on logistics, we've got your back:

✅ Want to use your own freight forwarder? No problem. We'll handle export docs, booking, and loading—keeping you updated at every step.

✅ Prefer a hands-off approach? Our logistics partners provide DDP (duty-paid) door-to-door delivery to US, Europe, Middle East, Brazil, and India. You just give us the delivery address; we handle customs clearance, taxes, and final-mile delivery.

✅ Worried about visibility? You'll get a tracking number once we ship, plus proactive updates when your goods leave port, arrive, and clear customs. No guessing games.

We run on the same quality standards and data system. Factory audit? Anytime. Whether you want to send a third-party inspector (SGS/Bureau Veritas, etc.) or visit yourself, we'll arrange the full pickup-to-dropoff support (airport transfer, hotel booking, local transport, working meals). You just focus on checking the production line, reviewing craftsmanship, and feeling the product quality. Distance isnt the issue—transparency is.

We'll be at the Hong Kong Jewelry Show this September, displaying our latest eco-friendly copper & zircon collections, plating samples, and full test reports. If you're planning to attend, let us know your schedule and we'll reserve a private meeting area at our booth. Can't make it? No worries—browse our full catalog on Alibaba first:

https://ywqianju888.en.alibaba.com/?spm=a2700.micro_cgs_home.0.0.73c23e5fUQQ8Ou

Our "Certifications" section on the homepage has all test report images organized by market (Europe/US, Middle East, Latin America), with key compliance items highlighted for quick reference.

To make your first order risk-ziro: Sample fees are 100% refundable when you place a bulk order. See something you like? Just reply with Sample + Item Number, and I'll create a custom sample order link on Alibaba for you. I can also send you the factory audit booking link or set up a face-to-face meeting at the HK show—your call.

No fluff, no empty promises—just deliverables we can put in writing. We'd love to be the reliable backup (or main!) supplier in your jewelry supply chain.

Best regards,

subscribe

https://www.saiyajewelry.com/

Joy

Sales Manager

Yiwu Gangyuan Import and Export Co., Ltd

Email:gy003@saiyajewelry.cn

Phone/WA:+86 19906577316

Add:No. X4 North Fuli Road, Golden Triangle Industrial Zone, Suxi Town, Yiwu City, Zhejiang Province

Categories: Chinese Phish Spam

0 Comments

Web/SEo/App spam from Microsoft Outlook PArt 2
Posted by Dave Yadallee on Friday, July 3. 2026

--_000_KUZPR04MB91937A468D269A67C71CC91685F42KUZPR04MB9193apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi there,

I was impressed by the design of your website during my review. However, so=

me errors are preventing it from performing well on Google.

Can I send screenshot of these error?

If Interested, May I send you SEO proposal & price list?

Kind Regards,

--_000_KUZPR04MB91937A468D269A67C71CC91685F42KUZPR04MB9193apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi there,

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

I was impressed by the design of your website during my review. However, so=

me errors are preventing it from performing well on Google.

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Can I send screenshot of these error?

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

If Interested, May I send you SEO proposal & price list?

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Kind Regards,

--_000_KUZPR04MB91937A468D269A67C71CC91685F42KUZPR04MB9193apcp_--

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Web/SEo/App spam from Microsoft Outlook Part 1
Posted by Dave Yadallee on Friday, July 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 10:22:00 -0600

Received: from mail-japaneastazolkn19013085.outbound.protection.outlook.com ([52.103.43.85]:63015 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfgdl-00000000LQE-2skq

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 10:21:32 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=mqrQE0aYCAKITd+hcmmtCBqziMXZ1OzOkVq700Ql0bJKQe4cbOChgAcCvdKYq6BZEceZdY/LO2FwAqzgr3rtMuvgrDVbG3iFufgdj6WDr4295Ha1z4+Lj9FxEnJJtIWTAqkoixIY5B6DyIip8ghBDIfL69IOonPSF/LT2LqNPlvT/zp4zCPU8J6snh0KfF/blDRhxEte4t3M1VB4qzyhyaE05//7o8NUBO47Zdr/Imp1zPcYQonuZiVt1OW4BFInufDzeye3FwM+CMCADqIUcq6P87LF0MCDqB7YMCv88iZFG4JuLjtfIudhx/JHNn0XeLfJCsDh9Pa4UPqXUdKzUA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=X69MCkLsKX5Js1WAND6GKglol15q8DCZC7qZdTMuzds=;

b=m12Z2PwWHPHjkOEPeGnQe0wozJYM+SFUCWmSKVZDmcMa0RAg2x/lgiEgxa3Lys1DckMkRgU3r9/z90UbTip0yAZ54c3PgohZUGOgf/BNxzbXy9KIb2N0q8udAcWQO9AH9yuuNbDctqr0TkZ88TRcQkDf7oOGLF2+cT9J99l4bYA1XMKf5DaB7wbcG4i0yd2Y/hCMZ0bPS16jbvzeoRz6lAD+HHuAi4UZBd0BWkLkAavRRzSeZSa6UocVsCwzRDB0iShpOL9X0Ho6GEBuzBlUE3ARiP6ZYOT0bIg9N/7HgYGN5L6JJa7rbQDRTmNBjyX03HNuKoF9Sk1pcg8N5d5vvw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=X69MCkLsKX5Js1WAND6GKglol15q8DCZC7qZdTMuzds=;

b=T8s4XlLlYOiWMmhExsVLyQur0q6yeMVcURmYMQ2KvRxEskKDLdHdK/aMDlmL+zuv/EBJLPXCZeMLBRjDqwPvmA2NznxC7V95spEMehUM3O1zkqbutb1hctaAQkB2rVCF9hZbgas6+7Gztw78ljOkVk+MJzFsct9eqDU+CbfXXzb0jel+C6rBXZBPM1cYk6NqZ9z1lu2NbXxdWNhunJOK6VdhcDesMyBYvMRDblIyVjvUP1EWxEcjNR1ujP7o4tOC1IFxsIAEN9EwGo1PHviOrz9GxfFwJO7Ic938MmyF81Qj7MUMsy0KeQyfO2e67OVOk9wKTl//hLyPvyLj6EoWtw==

Received: from KUZPR04MB9193.apcprd04.prod.outlook.com (2603:1096:d10:58::7)

by PUZPR04MB6607.apcprd04.prod.outlook.com (2603:1096:301:fd::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.11; Fri, 3 Jul

2026 16:20:01 +0000

Received: from KUZPR04MB9193.apcprd04.prod.outlook.com

([fe80::f8d5:78da:502f:aad4]) by KUZPR04MB9193.apcprd04.prod.outlook.com

([fe80::f8d5:78da:502f:aad4%5]) with mapi id 15.21.0181.009; Fri, 3 Jul 2026

16:20:01 +0000

From: Rahat khan

To: Rahat khan

Subject: Re: Yes ?

Thread-Topic: Yes ?

Thread-Index: AQHdCwc2zMXcFXQFPES0ZQRI8caPkA==

Date: Fri, 3 Jul 2026 16:20:00 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KUZPR04MB9193:EE_|PUZPR04MB6607:EE_

x-ms-office365-filtering-correlation-id: 167d1f5a-c0e5-4eed-a06f-08ded91eee9d

x-microsoft-antispam:

BCL:0;ARA:14566002|55001999006|16051099003|8060799015|24021099003|8062599012|19110799012|15080799012|31061999003|22091999003|37011999003|24121999003|39105399006|704163111799003|2604032031799003|15030799006|4140399003|25010399006|40105399003|39145399003|41105399003|18071099003|11120399003|102099032|3412199025|440099028|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?VSyRU6ss9ymNbzqnXU1yw46Lqa+9m6jXJuoQyalqR1JahsNbPui5r48dda?=

=?iso-8859-1?Q?rNiwgtwR4j6U22BTF+4FV4TmZkbefkg5vDD5knqOGV8Ffb3/2IR3Uyjl2+?=

=?iso-8859-1?Q?CxQRtC11u/vMqzrqD9KEaRDLPc9CP6rmwF/Eo0WphNPfxSf5yryPllLJmo?=

=?iso-8859-1?Q?Zdg0jMUn2HsTbJs58SWsNrO8xoAKJsrBw8QaryDnJyG7vN09zSJQ5iioxY?=

=?iso-8859-1?Q?aP5aDhjNDAAjNdW829u+qNi2Xa4iDExV/K88s9Ss7Lb4DLgJi6wU/5dLGO?=

=?iso-8859-1?Q?K7DJqA/DI/R2tbWRsmpaW3zQZPso/yPnsCVbIWA8Z2S4OHFhtiNaxGG0Xy?=

=?iso-8859-1?Q?oetG32iaEh2j2c4JksuBWe8XzpkDNBl4CezgWNCK8gTbp3kW9P4BckWC6k?=

=?iso-8859-1?Q?j/e688zI+cnKo0D31ObDh9djfOIcj7rFiDVJ6AWBTLshu7ERU89k1qVI6q?=

=?iso-8859-1?Q?3xGWjdzgZceyGxUvTuA3NcJ8YdFfy0xl8PfWbf8PP3PAApNy3H8urejMJp?=

=?iso-8859-1?Q?cq7b/cIqOkVVfCccfQILyQ9cdj5Z3f5+4/haxFW18Hvo8b5CJWRZI1Oup+?=

=?iso-8859-1?Q?P0luESZu7nAzCtuCs6zdkEG7MTW0hYGHfrXTUmePAxMuMh1MbZL1Dz+rKO?=

=?iso-8859-1?Q?5l8Ir1UxVZj7i8CRX7YVMCC0VGKZJFtiRcu5pjezZ70YTwa/xUs+B85m6V?=

=?iso-8859-1?Q?6UPCHp7RtBm42f0oQ2dzy9LDrneAXtJNzeWzzKCiRAA9/sTv1OoB+CK0f3?=

=?iso-8859-1?Q?NJIdZdo0HK6wSF0fsvwG/YcmolofTb7S3v4FmlSgtz5OWLQqClQkZY+Ycs?=

=?iso-8859-1?Q?gqOxZlfh1DEVewws8nhbykGP5WggQ7n0doQi4nwLpY7qYqkYXsxWw0mYo/?=

=?iso-8859-1?Q?jyLY8tUE4rRsokbK7RN9LCNPHPShM8up0A7i7ESxeWoL82GqLp48ED7IM+?=

=?iso-8859-1?Q?ReuasKoQLcEsi/yzVfpdesC8dpHnUAb4KSCQ/BkDONf/dSVyH+Xk+5Er+V?=

=?iso-8859-1?Q?xFl07y6Un+jwUvCOInqDMJ5assyfe24e0z4Gnp9Yz9ti8fA1k4uTNxMwv6?=

=?iso-8859-1?Q?Dpdg4lD30ZLMapNv2sUnA0YjXQuIOVsRyqByW2kNfL46sDfL9lxStfBgRh?=

=?iso-8859-1?Q?9Dk1KCTafNyb919pAk64b1o2XRp2lmz/GXOtOWN4Z2bcLq6X6E93rvTAmR?=

=?iso-8859-1?Q?hz9i10ojJ6x6MvZDLmNqC8hEIOMl5YFlPMKeM9kyuKt0dxpt2D+jjMjh9g?=

=?iso-8859-1?Q?GO50t5AliwbO4SMgUh9ODiad6aYcXBhcBH2psnMXEDJrc3JNTXnxyq8n6H?=

=?iso-8859-1?Q?YD0mqfwWN7fIyzx97DX/VyMW3Cr8N61cGugOvYx6hLSQ475cNSYWPmENeb?=

=?iso-8859-1?Q?+0dfPLMXsPq9TGsKptDe0jKar+lnJ5Qg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?k+NjkDep4x+J0D6Dughvlowlb+1iLeudmQfFa3xst4pM00b/r+nM+EgJrY?=

=?iso-8859-1?Q?ZxHj8o/ANfWJKyytLNYAWBQ5Qc+QZkHXmhVuYSR1agxtAPHB0BR6RvbD3C?=

=?iso-8859-1?Q?fEl4su+fH71z2AI3XlyeKrjtPUdZS5FCgt6b28YeRXADf+suGEEbL+sbSF?=

=?iso-8859-1?Q?luRAPY7672YGrYZT4TmOYgLYmRKj75xrPBDniq1rsKArIlIQBZBF0afO3T?=

=?iso-8859-1?Q?B+C3SuHVnnRYu9kMQKOFKZJn454W7fPRrIpE87J66R3x9S1ank2orM2A9e?=

=?iso-8859-1?Q?8nuUF0FbHp1uaUdHpo8s4RgFJ1vYshgBeAA/+aTdDBjSXy1CBnSBFiplJQ?=

=?iso-8859-1?Q?GLg8Mu/qZo6FrGx6lXU2BVOnx86no6hDaUMK/tWPYTB8lkBCPBiqYV1Ciz?=

=?iso-8859-1?Q?oILoGSTKsdsFRiqjaF7OZa9ogeCHs2nWVIy6zeqIOPqTLIzE41fhZpdhAx?=

=?iso-8859-1?Q?hamw3MtuVv5E/N61Q56INqGeF25xU0ehb6K5dNxZqVdA2Hj/YW32gt7sLw?=

=?iso-8859-1?Q?cEaIKGfi9npViJSckIvoRCesSkGk4UqBCNzONKwa/kl5fyqwhlNL4c3F9/?=

=?iso-8859-1?Q?FGiAeO9ubK9czZ9Hf0KZW1ZYIlfhkIOHbLAelcbOaH3FcMubh1wgCVOPLl?=

=?iso-8859-1?Q?Czqb+cAWhzkdRbVwwrLTbxWeqmDRlEsKztIHrGV+XHVW9kGhUfQu2XY5+t?=

=?iso-8859-1?Q?aeVjx8msbE4SlfedputxDGJjnxOQzmWi+46avLidA8XR/hod8iU3ZO28vr?=

=?iso-8859-1?Q?coW8V5eFz+1go+K/+f3mBkhQxPqqF3wJ2kiK2KkezSFCS7XdiwBXpoP85W?=

=?iso-8859-1?Q?kaVX7rG1L73/xyH9Bqr3Z7ccJr248hEedUVRGyrM3SS+PKX9/2Uy4G1y74?=

=?iso-8859-1?Q?wPQpQetGDkSQlIxlkpMQ8lMkOOFljRKeaZs3Rn4pdiCuFhu3ptMX9udqHz?=

=?iso-8859-1?Q?qDIfnZBThW7ZSyYgUMAL/h+tXUwbRtjS8v1ICba0Wuh6TgtXDgn9UICarL?=

=?iso-8859-1?Q?DrEHE+A19ZfiBUQC+Uc5pdxvvEGOesNYNdWcXbMqZ2xx7lZ1xihA9xwnld?=

=?iso-8859-1?Q?fpIIhqLd58NZ7aQvskX5NRlEUJvRzCknt1W9XRY9pC7z1HKCDBqL5q/MS0?=

=?iso-8859-1?Q?TBnFt5tJrWBnxbWF6VKLxo/6AJEN/wjZIk0lkdtI49UnVlsy0n/y0JXbAA?=

=?iso-8859-1?Q?co0xj4HKQVUg6CRVkNjdAYBi6ETdOg4kfNn4ljf3eNDTxDPOD7kAld05DD?=

=?iso-8859-1?Q?Y1vN5iQUV77/zJDW/wM+lDOQSXycFZplKU9XxfOQMaWBUyCQvRoEITL0kf?=

=?iso-8859-1?Q?NbRg5Fn/nbFFeadnUwfadMPP4uzwFCsxnAW/BZ+p7yqMciVqoH/HvFzfKR?=

=?iso-8859-1?Q?S2E44KsyLdbP7Igkdm0bu+gCwfxUASPC5dsvigGU+ggbAQmT1eaagm3fT+?=

=?iso-8859-1?Q?DWked85tBBTUpCYNczBvp9xVUrygTkfrDto0Wf2hpMQWf9OUhCLDNVNJ2M?=

=?iso-8859-1?Q?FRfN3cuLysRL1stOx6WONC?=

Content-Type: multipart/alternative;

boundary="_000_KUZPR04MB91937A468D269A67C71CC91685F42KUZPR04MB9193apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KUZPR04MB9193.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 167d1f5a-c0e5-4eed-a06f-08ded91eee9d

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jul 2026 16:20:00.8339

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR04MB6607

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Dash One Phish From Google Gmail Part 2
Posted by Dave Yadallee on Friday, July 3. 2026

Auto-Submitted: auto-generated

X-ZohoSupport-Notification: system-generated

X-Auto-Response-Suppress: All

Original-Envelope-Id: 2d6f.39a6dc9.m1.dbf1f430-76f8-11f1-897d-963d1902c9da.19f28b95af3

X-JID: 2d6f.39a6dc9.m1.dbf1f430-76f8-11f1-897d-963d1902c9da.19f28b95af3

TM-MAIL-JID: 2d6f.39a6dc9.m1.dbf1f430-76f8-11f1-897d-963d1902c9da.19f28b95af3

X-App-Message-ID: 2d6f.39a6dc9.m1.dbf1f430-76f8-11f1-897d-963d1902c9da.19f28b95af3

X-Report-Abuse:

TM-Message-ID: <2d6f.39a6dc9.m1.dbf1f430-76f8-11f1-897d-963d1902c9da.19f28b95af3@desk-mailer.zohodesk.com>

X-Zoho-Virus-Status: 1

X-Zoho-AV-Stamp: zmail-av-0.2.10.1.5.2/283.63.57

Feedback-ID: zu08091226a2044efa8b97632d3f5711e10000d2decc9db979aaa588214d5dfbab9e3d8abe4d15ca107a28:ZohoMail

X-Zoho-CM-AccountID: bb06324efe2d273515a2966e4b62e1f1d02de3b720ecec2d31f8bb23a83fdf21

X-ZohoMailClient: External

X-Original-Sender: support@thetouchpointsolution.zohosupport.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@zohosupport.com header.s=1522905413783 header.b=Vd0oMETq;

arc=pass (i=1 spf=pass spfdomain=desk-mailer.zohodesk.com dkim=pass

dkdomain=thetouchpointsolution.zohosupport.com dmarc=pass fromdomain=thetouchpointsolution.zohosupport.com>);

spf=pass (google.com: domain of bounces+dbf1f430-76f8-11f1-897d-963d1902c9da_vt1@desk-mailer.zohodesk.com

designates 135.84.80.55 as permitted sender) smtp.mailfrom=bounces+dbf1f430-76f8-11f1-897d-963d1902c9da_vt1@desk-mailer.zohodesk.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=zohosupport.com

Precedence: list

Mailing-list: list g1@eyluldiler.com; contact g1+owners@eyluldiler.com

List-ID:

X-Spam-Checked-In-Group: servicedfdfdfrdff@eyluldiler.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,

List-Archive:

List-Subscribe: ,

List-Unsubscribe: ,

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi 'CTS Service Center' via atun66s3ccccccccdddd! We've received

your message (#149607) and our customer experience team is working hard to

address all inquiries as quickly as possible.Please note, weâ€™re a small

but mighty team, and while inquiries [...]

Content analysis details: (6.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[135.84.80.55 listed in dnsbl.ahbl.org]

[135.84.80.55 listed in dnsbl.ahbl.org]

[135.84.80.55 listed in dnsbl.ahbl.org]

[135.84.80.55 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[135.84.80.55 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[135.84.80.55 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[135.84.80.55 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[135.84.80.55 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.198 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eyluldiler.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

3.5 VOWEL_TOCC_7 To or Cc header with 7+ consecutive vowels

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.198 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.198 listed in bl.score.senderscore.com]

Subject: {SPAM?} Thanks for getting in touch! (#149607)

Hi 'CTS Service Center' via atun66s3ccccccccdddd!

We've received your message (#149607) and our customer experience team is working hard to address all inquiries as quickly as possible. Please note, we’re a small but mighty team, and while inquiries sent over the weekend will be reviewed promptly, they will be addressed during the business week. We appreciate your patience!

In the meantime, please visit our FAQ page for helpful information that may answer your question(s). While you're waiting, you can also take a look at our Encyclopedia of Uses and learn how to use TouchPoints in a variety of situations!

Thank you again for your email, and we will be in touch as soon as we can!

Sincerely,

Team TouchPoint

ilovetouchpoint.com

*TouchPoints™ are neuroscientific consumer devices. They are not a substitute for medical treatment nor are they intended to cure any medical condition.

Categories: Google Gmail Spam, Phish

0 Comments

Page 1241 of 1241, totaling 18606 entries

previous page

No entries to print

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	July '26					Forward →
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31