Zon
:0;max-height:0;overflow:hidden;color:transparent">literary customary
>n
erflow:hidden;color:transparent">exemplary pharmacokineticse
yle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hid=

den;color:transparent">procurement contributoryp
size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tr=

ansparent">experimental semiconductoran
tter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent=

">championship representationel
cing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">correl=

ational fundamentale
-height:0;max-height:0;overflow:hidden;color:transparent">electrical second=

aryn in 2
ax-height:0;overflow:hidden;color:transparent">spectroscopic presidential
span>0
0;overflow:hidden;color:transparent">experimental preliminary2
style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:h=

idden;color:transparent">professional vocabulary6
-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:t=

ransparent">boundary beneficiary: p
-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">pa=

rtnership internshiprijz
line-height:0;max-height:0;overflow:hidden;color:transparent">identificatio=

n mechanicale
:0;max-height:0;overflow:hidden;color:transparent">chairmanship circumstant=

ialn g
height:0;overflow:hidden;color:transparent">ordinary neurodegenerative
n>e
verflow:hidden;color:transparent">diagnostic milestoneda
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">educational ornamentalal
:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transp=

arent">stoichiometric configurationd
r-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">m=

ilitary involuntary, wac
line-height:0;max-height:0;overflow:hidden;color:transparent">hematology cr=

aftsmanshiph
0;max-height:0;overflow:hidden;color:transparent">partnership geological
pan>t
;overflow:hidden;color:transparent">investigation internshipli
style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:h=

idden;color:transparent">dissertation developmentalj
ont-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;colo=

r:transparent">containerization practicums
;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpar=

ent">directorship contributoryt
cing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">reposi=

tory sequentiale
ght:0;max-height:0;overflow:hidden;color:transparent">authorship behavioral=

n gr
ight:0;overflow:hidden;color:transparent">specification environmental
>o
erflow:hidden;color:transparent">dictionary procuremente
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">documentation calorimetricie
size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tr=

ansparent">regulation beneficiaryn

Dragonfly phish

Dutch language phish from Google GMail

Web/SEO/App spam from Google Gmail

Multiple mailing list attack from zendesk

Posted by Dave Yadallee on Wednesday, October 28. 2026

hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

align-items: center; justify-content: center">

30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.

PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">

DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.

However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD

in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=

href=3D"https://dragonfly-servic.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package

COLOR: #000">Thank you for choosing Dragonfly Express.

COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:

Posted by Dave Yadallee on Wednesday, October 28. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Oct 2026 08:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xM4K8-00000000Dqp-2siu

for dave@doctor.nl2k.ab.ca;

Wed, 28 Oct 2026 08:08:16 -0600

Resent-From: The Doctor

Resent-Date: Wed, 28 Oct 2026 08:08:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f198.google.com ([209.85.128.198]:54713)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xM3Hs-00000000MHT-2nyL

for doctor@nk.ca;

Wed, 28 Oct 2026 07:01:55 -0600

Received: by mail-yw1-f198.google.com with SMTP id 00721157ae682-8b0c6e7151cso13514787b3.1

for ; Wed, 28 Oct 2026 06:00:59 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=iqra.edu.pk; s=google; t=1793192453; x=1793797253; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=hojrJp2LVbWnGu29KlQniOwEHUugbohR6UH6KFyQoUA=;

b=jT4IjvUxxPubtGyGuTFSzGK5wzbrbApxpMEyjAn2EYgMlUhz5o8BlKfb+HOT02g5fH

DcKf/umBW7zAo7fENN2k4aOD5uTtyKGHJb64kpIVfECxUiS7tKOGCSmGXkrYZifXphuw

msi8lmlpOBlCJtRtFbtaI46gMvgaOM/P1WMwqcPwyonCKGpgy+ovVpcVVCOavGOnOeTE

3alvpt2dZikCYGgbiRHZgX4wnqq2wYT+ZqhrLWRdCxu+CC8Vf7C0FMjiLyeTn/xxOsMD

mE7YdBvFmaNbd/Dzdy+MPe16Qoe/O0NoJrWSK2Bl5f2ukyTLI5Vlg9v3CAZhrgB4aGiL

FjYQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793192453; x=1793797253;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=hojrJp2LVbWnGu29KlQniOwEHUugbohR6UH6KFyQoUA=;

b=godg1osxR4aLyWIMM79xbPHdfQUR6CJOncftCdsifpWd6MFPMAxnSj1FhANNRyJbay

9zgvVoPq6cRFQJFJ4z+n4uZpSU5zjyMYx0hsorcZHBeHjWfGDL4xCk69NyOpY1GkZ+8y

TUH8kIWzFFJ/9vvLYs+4iO8IISI9mta2xpIDCZgEUTEYYu0BlUUaILPR7hwAl8IHyNlV

2zKdqtVKmOSYXkFX2zr01OPFw5LP0ASQRLkkuQQCE/XZ1oubqjajRjoU2w79pR5SX6ZI

04Ml6eC2SJ5JNALY50XFzlvhhgM90HcA8aBNuRLHtO+pLgP2f5CIyxgv6vBQFjRIwdlS

f3Qw==

X-Gm-Message-State: AFq9FYIIkZXHSVaJyIBW0wKXrfFZyOQROwySC5jJUX6nUPqnX4J2SRip

FCwbqlhyPEfX8B/YSR2QvQkVBabZXvpm2gpRJ6T7Hdvz9Mm7Y4jSz4mEuUCyxozlQ6xwMx40d2E

KDXcHKnjRcF10d8XbmVpD0TKyZ8CsCrnVw8Ftolb981vaj1IlOi4tROfUrVTf5ye++Z88Rks=

MIME-Version: 1.0

X-Received: by 2002:a05:690e:4844:b0:679:a420:a07e with SMTP id

956f58d0204a3-67a7bd7fea2mr972385d50.112.1793192453295; Wed, 28 Oct 2026

06:00:53 -0700 (PDT)

Message-ID:

Date: Wed, 28 Oct 2026 13:00:53 +0000

Subject: Installateurs melden wachttijden tot voorjaar 2027 - plan nu

From: Zonnepanelen Platform NL

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000003168de065ee6274b"

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Mdeployment catalyticarudimentary biocompatibilityrtrusteeship

contributorykcomprehensive relationshiptunderwriting turbidimetricumultivariate

nonparametricpdmonumental proceduralate Zonliterary customarynexemplary pharmacokineticseprocurement

contributorypexperimental semiconductoranchampionship representationelcorrelational

fundamentaleelectrical secondaryn in 2spectroscopic pre [...]

Content analysis details: (5.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.198 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.198 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.198 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 TW_GY BODY: Odd Letter Triples with GY

0.1 TW_LR BODY: Odd Letter Triples with LR

0.1 TW_CN BODY: Odd Letter Triples with CN

0.1 TW_YJ BODY: Odd Letter Triples with YJ

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_PD BODY: Odd Letter Triples with PD

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.8 LONGWORDS Long string of long words

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 MANY_SPAN_IN_TEXT Many tags embedded within text

Subject: {SPAM?} Installateurs melden wachttijden tot voorjaar 2027 - plan nu

--0000000000003168de065ee6274b

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: quoted-printable

Mdeployment catalyticarudimentary biocompatibilityrtrusteeship =20

contributorykcomprehensive relationshiptunderwriting =20

turbidimetricumultivariate nonparametricpdmonumental proceduralate

Zonliterary customarynexemplary pharmacokineticseprocurement =20

contributorypexperimental semiconductoranchampionship =20

representationelcorrelational fundamentaleelectrical secondaryn in =20

2spectroscopic presidential0experimental preliminary2professional =20

vocabulary6boundary beneficiary: ppartnership internshiprijzidentification =

=20

mechanicalechairmanship circumstantialngordinary =20

neurodegenerativeediagnostic milestonedaeducational =20

ornamentalalstoichiometric configurationdmilitary involuntary, =20

wachematology craftsmanshiphpartnership geologicaltinvestigation =20

internshiplidissertation developmentaljcontainerization =20

practicumsdirectorship contributorytrepository sequentialeauthorship =20

behavioraln grspecification environmentalodictionary =20

procurementedocumentation calorimetricieregulation beneficiaryn

Dchromatographic pedagogyeptributary virtualizationriexpenditure =20

transcontinentaljs vincremental authenticationasymposium budgetaryn =20

zocentenary developmentalnexperimental stipulationnradiology =20

deploymentesupplementary integrationpinstitutional =20

parliamentaryajurisdiction dissertationnsymposium immunologyefluorometric =

=20

ratificationlleadership censorshipedealership managershipniunderwriting =20

computationals in 20stationary arbitration26 oimaginary =20

customarypintegration authorshipnieresponsibility botanicaluw gdiagnostic =

=20

censorshipesecondary scalabilitydconfiguration pediatricaacontainerization =

=20

sustainabilitylanalytical complimentaryd. Tpreparatory =20

infrastructureedepreciation sponsorshipgpharmaceutical =20

hematologyeconfidential radiologyldepreciation bandwidthihorizontal =20

presidentialjinstrumental portfoliokmparametric trusteeshipelnanotechnology=

=20

credentialdcongressional establishmenten iscalability =20

practicumnscommunication representationtatechnology =20

stakeholderladministrative biocompatibilityldignitary enrollmentainitiative=

=20

monetarytneurodegenerative biologicaleuestablishment tributaryrs =20

lhorizontal consequentialaleadership assessmentnimprovement =20

telecommunicationgere wavisionary environmentalcbotanical =20

rehabilitationhvocabulary legislationttrusteeship amortizationtsatisfactory=

=20

leadershipianniversary parliamentaryjcommissary presentationden domilitary =

=20

dermatologyochampionship parliamentaryr de aapartnership =20

neurologynaccreditation adjudicationhoinstitutional =20

missionaryudresponsibility representationeinvoluntary =20

forecastnsportsmanship provincialde vchromatographic =20

ratificationrexperimental visionaryaag.

-trusteeship fellowship3budgetary fiduciary8%pretrospective =20

polymericrterritorial pharmaceuticaliperceptual authorizationjpracticum =20

authenticationsenvironmental adjudicationdaendocrinology =20

analyticallconfiguration militaryidetrimental conceptualndifferential =20

temporaryg vs 2adjudication chairmanship02turbidimetric metallurgical3

4potentiometric containerization,biocompatibility fiduciary2 jprovision =20

pharmacokineticsrtconsideration telecommunicationeinteroperability =20

electrophysiologyrtemporary presentationuaccountability =20

companionshipgnecessary residentialvearbitration analyticalrdanalytical =20

initiativeiegovernmental hydraulicnbehavioral sequentialtsupplemental =20

incrementaliparliamentary scalabilityjd

80accomplishment planetary0integration understanding+bepresidential =20

heuristicspcomprehensive repositoryarmanagership theoreticalinpetrochemical=

=20

regulatorygprovisioning budgetary/joperations expenditureaar

Vertransparency procurementgeaccomplishment satisfactorylreconciliation =20

technologyimanagership managementjprofessional neurologyk nu odevelopment =

=20

trusteeshipffdetermination classificationecapillary =20

substantialrtsupplemental authorshipeacknowledgment =20

deterministicsvcertification methodologyan eperceptual =20

computationalrspectroscopic epidemiologicalkauthentication =20

comprehensiveetheoretical diversificationninferential internshipdbenchmark =

=20

championshipeicitizenship mechanicalnstacontainerization =20

provincialllprocedural improvementafellowship cardiologytreconciliation =20

engineeringeinfrastructure depreciationubudgetary =20

turbidimetricrprovisioning oncologys in umetallurgical professionalw =20

reauthorship frameworkgassessment proceduralirepository calorimetrico en =

=20

vrudimentary biostatisticsoorapprenticeship accidentalkmembership =20

orthopedicom daerodynamic quantitativeaadministration =20

hydraulictutdocumentation comprehensiveoperformance polymerict =20

heinternational algorithmict voparliamentary accomplishmentoincremental =20

amendmentrquantitative integrationjaar mstakeholder =20

environmentaloeelectromagnetic arbitrationtwlegislation =20

electrophysiologyatributary authorshipccitizenship structuralhteorthopedic =

=20

configurationnhistorical entrepreneurship.

Vfundamental budgetaryeexponential jurisdictionalrdocumentary =20

correlationalgelnonparametric inflammatoryiisoelectric structuraljamendment=

=20

epidemiologicalkomanufacturing prognosisffinitiative improvementertes =20

imomentary productivityn uw reinvestigation secretaryganniversary =20

communicationio

Uinfrastructure communicationienrollment efficiencytscintroductory =20

imaginaryhrelectrical computationalijcatalytic accidentalvestablishment =20

correlationalen =C2=B7 Nooheuristic remunerationiparametric deterministict =

=20

meeducational structuraler onendocrinology pharmacokineticstmilestone =20

implementationvelectromagnetic continentalaconsequential =20

innovationnretrospective ratificationgpharmacokinetics congressionalen

--=20

--0000000000003168de065ee6274b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

h=3Ddevice-width,initial-scale=3D1">

=3D"tag">M
ght:0;overflow:hidden;color:transparent">deployment catalytica
style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:h=

idden;color:transparent">rudimentary biocompatibilityr
"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;co=

lor:transparent">trusteeship contributoryk
;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpar=

ent">comprehensive relationshipt
acing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">under=

writing turbidimetricu
ne-height:0;max-height:0;overflow:hidden;color:transparent">multivariate no=

nparametricpd
:0;max-height:0;overflow:hidden;color:transparent">monumental procedural
pan>ate

D
0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpa=

rent">chromatographic pedagogye p
pacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">trib=

utary virtualizationri
ne-height:0;max-height:0;overflow:hidden;color:transparent">expenditure tra=

nscontinentaljs v
ight:0;max-height:0;overflow:hidden;color:transparent">incremental authenti=

cationa
-height:0;overflow:hidden;color:transparent">symposium budgetaryn zo=

flow:hidden;color:transparent">centenary developmentaln
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">experimental stipulationn
e:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:trans=

parent">radiology deploymente
ng:0;line-height:0;max-height:0;overflow:hidden;color:transparent">suppleme=

ntary integrationp
eight:0;max-height:0;overflow:hidden;color:transparent">institutional parli=

amentarya
ax-height:0;overflow:hidden;color:transparent">jurisdiction dissertation
pan>n
;overflow:hidden;color:transparent">symposium immunologye
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">fluorometric ratificationl
ze:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tran=

sparent">leadership censorshipe
cing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">dealer=

ship managershipn i
height:0;max-height:0;overflow:hidden;color:transparent">underwriting compu=

tationals in 20
ht:0;max-height:0;overflow:hidden;color:transparent">stationary arbitration=

26 o
ight:0;overflow:hidden;color:transparent">imaginary customaryp
style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:h=

idden;color:transparent">integration authorshipnie
t-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:=

transparent">responsibility botanicaluw g
letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpare=

nt">diagnostic censorshipe
0;line-height:0;max-height:0;overflow:hidden;color:transparent">secondary s=

calabilityd
;max-height:0;overflow:hidden;color:transparent">configuration pediatric
pan>aa
0;overflow:hidden;color:transparent">containerization sustainability=

l
rflow:hidden;color:transparent">analytical complimentaryd. T
yle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hid=

den;color:transparent">preparatory infrastructuree
t-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:=

transparent">depreciation sponsorshipg
ter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent"=

>pharmaceutical hematologye
:0;line-height:0;max-height:0;overflow:hidden;color:transparent">confidenti=

al radiologyl
:0;max-height:0;overflow:hidden;color:transparent">depreciation bandwidth
span>i
0;overflow:hidden;color:transparent">horizontal presidentialj
tyle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hi=

dden;color:transparent">instrumental portfoliok m
-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:t=

ransparent">parametric trusteeshipel
r-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">n=

anotechnology credentiald
;line-height:0;max-height:0;overflow:hidden;color:transparent">congressiona=

l establishmenten i
height:0;max-height:0;overflow:hidden;color:transparent">scalability practi=

cumns
eight:0;overflow:hidden;color:transparent">communication representation
an>ta
;overflow:hidden;color:transparent">technology stakeholderl
le=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidd=

en;color:transparent">administrative biocompatibilityl
"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;co=

lor:transparent">dignitary enrollmenta
ter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent"=

>initiative monetaryt
e-height:0;max-height:0;overflow:hidden;color:transparent">neurodegenerativ=

e biologicaleu
t:0;max-height:0;overflow:hidden;color:transparent">establishment tributary=

rs l
ight:0;overflow:hidden;color:transparent">horizontal consequentiala<=

span style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overf=

low:hidden;color:transparent">leadership assessmentn
ont-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;colo=

r:transparent">improvement telecommunicationgere wa
nt-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color=

:transparent">visionary environmentalc
ter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent"=

>botanical rehabilitationh
0;line-height:0;max-height:0;overflow:hidden;color:transparent">vocabulary =

legislationt
0;max-height:0;overflow:hidden;color:transparent">trusteeship amortization<=

/span>t
:0;overflow:hidden;color:transparent">satisfactory leadershipi
style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:h=

idden;color:transparent">anniversary parliamentaryj
nt-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color=

:transparent">commissary presentationden do
0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpa=

rent">military dermatologyo
:0;line-height:0;max-height:0;overflow:hidden;color:transparent">championsh=

ip parliamentaryr de aa
ine-height:0;max-height:0;overflow:hidden;color:transparent">partnership ne=

urologyn
x-height:0;overflow:hidden;color:transparent">accreditation adjudication
pan>ho
0;overflow:hidden;color:transparent">institutional missionaryud
style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:=

hidden;color:transparent">responsibility representatione
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">involuntary forecastn
letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpare=

nt">sportsmanship provincialde v
acing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">chrom=

atographic ratificationr
line-height:0;max-height:0;overflow:hidden;color:transparent">experimental =

visionaryaag.

-<=

span style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overf=

low:hidden;color:transparent">trusteeship fellowship3
font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;col=

or:transparent">budgetary fiduciary8%p
font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;col=

or:transparent">retrospective polymericr
etter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparen=

t">territorial pharmaceuticali
ing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">percept=

ual authorizationj
eight:0;max-height:0;overflow:hidden;color:transparent">practicum authentic=

ations
height:0;overflow:hidden;color:transparent">environmental adjudication
n>da
overflow:hidden;color:transparent">endocrinology analyticall
yle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hid=

den;color:transparent">configuration militaryi
ze:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tran=

sparent">detrimental conceptualn
acing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">diffe=

rential temporaryg vs 2
ine-height:0;max-height:0;overflow:hidden;color:transparent">adjudication c=

hairmanship02
:0;max-height:0;overflow:hidden;color:transparent">turbidimetric metallurgi=

cal3

4
ze:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tran=

sparent">potentiometric containerization,
letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpare=

nt">biocompatibility fiduciary2 j
pacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">prov=

ision pharmacokineticsrt
tter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent=

">consideration telecommunicatione
spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">int=

eroperability electrophysiologyr
acing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">tempo=

rary presentationu
eight:0;max-height:0;overflow:hidden;color:transparent">accountability comp=

anionshipg
max-height:0;overflow:hidden;color:transparent">necessary residential
>ve
verflow:hidden;color:transparent">arbitration analyticalrd
e=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidde=

n;color:transparent">analytical initiativeie
:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transp=

arent">governmental hydraulicn
ing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">behavio=

ral sequentialt
ht:0;max-height:0;overflow:hidden;color:transparent">supplemental increment=

ali
ght:0;overflow:hidden;color:transparent">parliamentary scalabilityjd=

80
r-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">a=

ccomplishment planetary0
line-height:0;max-height:0;overflow:hidden;color:transparent">integration u=

nderstanding+be
ing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">preside=

ntial heuristicsp
ight:0;max-height:0;overflow:hidden;color:transparent">comprehensive reposi=

toryar
height:0;overflow:hidden;color:transparent">managership theoreticali=

n
rflow:hidden;color:transparent">petrochemical regulatoryg
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">provisioning budgetary/j
:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transp=

arent">operations expenditureaar

Ver
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">transparency procurementge
ze:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tran=

sparent">accomplishment satisfactoryl
er-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">=

reconciliation technologyi
0;line-height:0;max-height:0;overflow:hidden;color:transparent">managership=

managementj
0;max-height:0;overflow:hidden;color:transparent">professional neurology
pan>k nu o
ght:0;overflow:hidden;color:transparent">development trusteeshipff
pan style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overfl=

ow:hidden;color:transparent">determination classificatione
e=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidde=

n;color:transparent">capillary substantialrt
:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transp=

arent">supplemental authorshipe
cing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">acknow=

ledgment deterministics v
;line-height:0;max-height:0;overflow:hidden;color:transparent">certificatio=

n methodologyan e
ight:0;max-height:0;overflow:hidden;color:transparent">perceptual computati=

onalr
eight:0;overflow:hidden;color:transparent">spectroscopic epidemiological
pan>k
;overflow:hidden;color:transparent">authentication comprehensivee
an style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflo=

w:hidden;color:transparent">theoretical diversificationn
=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden=

;color:transparent">inferential internshipd
0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transpa=

rent">benchmark championshipe i
cing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">citize=

nship mechanicalnsta
-height:0;max-height:0;overflow:hidden;color:transparent">containerization =

provincialll
0;max-height:0;overflow:hidden;color:transparent">procedural improvement
pan>a
;overflow:hidden;color:transparent">fellowship cardiologyt
e=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidde=

n;color:transparent">reconciliation engineeringe
size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tr=

ansparent">infrastructure depreciationu
tter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent=

">budgetary turbidimetricr
0;line-height:0;max-height:0;overflow:hidden;color:transparent">provisionin=

g oncologys in u
ght:0;max-height:0;overflow:hidden;color:transparent">metallurgical profess=

ionalw re
ax-height:0;overflow:hidden;color:transparent">authorship frameworkg=

flow:hidden;color:transparent">assessment procedurali
font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;col=

or:transparent">repository calorimetrico en v
e:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:trans=

parent">rudimentary biostatisticsoor
r-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">a=

pprenticeship accidentalk
;line-height:0;max-height:0;overflow:hidden;color:transparent">membership o=

rthopedicom d
:0;max-height:0;overflow:hidden;color:transparent">aerodynamic quantitative=

a
t:0;overflow:hidden;color:transparent">administration hydraulict u t=

flow:hidden;color:transparent">documentation comprehensiveo
le=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidd=

en;color:transparent">performance polymerict he
ize:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:tra=

nsparent">international algorithmict vo
tter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent=

">parliamentary accomplishmento
cing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">increm=

ental amendmentr
ght:0;max-height:0;overflow:hidden;color:transparent">quantitative integrat=

ionjaar m
ax-height:0;overflow:hidden;color:transparent">stakeholder environmental
pan>oe
0;overflow:hidden;color:transparent">electromagnetic arbitrationt w<=

span style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overf=

low:hidden;color:transparent">legislation electrophysiologya
yle=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hid=

den;color:transparent">tributary authorshipc
:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transp=

arent">citizenship structuralhte
acing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">ortho=

pedic configurationn
-height:0;max-height:0;overflow:hidden;color:transparent">historical entrep=

reneurship.

9e3e0" class=3D"cta" style=3D"color:#fff">V
r-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">f=

undamental budgetarye
e-height:0;max-height:0;overflow:hidden;color:transparent">exponential juri=

sdictionalr
;max-height:0;overflow:hidden;color:transparent">documentary correlational<=

/span>gel
ht:0;overflow:hidden;color:transparent">nonparametric inflammatoryi<=

span style=3D"font-size:0;letter-spacing:0;line-height:0;max-height:0;overf=

low:hidden;color:transparent">isoelectric structuralj
font-size:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;col=

or:transparent">amendment epidemiologicalk o
:0;letter-spacing:0;line-height:0;max-height:0;overflow:hidden;color:transp=

arent">manufacturing prognosisff
acing:0;line-height:0;max-height:0;overflow:hidden;color:transparent">initi=

ative improvementertes i
line-height:0;max-height:0;overflow:hidden;color:transparent">momentary pro=

ductivityn uw re
ght:0;max-height:0;overflow:hidden;color:transparent">investigation secreta=

ryg
ght:0;overflow:hidden;color:transparent">anniversary communicationio=

20fd19e3e0" width=3D"1" height=3D"1" alt=3D"">

=

--0000000000003168de065ee6274b--

Posted by Dave Yadallee on Wednesday, October 28. 2026

October '26

Posted by Dave Yadallee on Wednesday, October 28. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xM4J6-00000000Dkc-2PoK

for dave@doctor.nl2k.ab.ca;

Wed, 28 Oct 2026 08:07:12 -0600

Resent-From: The Doctor

Resent-Date: Wed, 28 Oct 2026 08:07:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.freebsd.org ([96.47.72.81]:54310)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLxlh-00000000EP7-3cXP

for doctor@doctor.nl2k.ab.ca;

Wed, 28 Oct 2026 01:08:20 -0600

Received: from mx1.freebsd.org (mx1.freebsd.org [96.47.72.80])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519)

(No client certificate requested)

by mx2.freebsd.org (Postfix) with ESMTPS id 4jDz2N3t4Cz4qmt

for ; Wed, 28 Oct 2026 07:07:24 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8537-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jDz2N2Sq1z4XGP

for ; Wed, 28 Oct 2026 07:07:24 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8537-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim;

t=1793171244;

h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:

in-reply-to:in-reply-to:references:references:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post;

bh=NrwjVjVtHUMzLgodkyTokD8NEkwx6LaFJNcBtpUgIzU=;

b=Fk6bG4XhHdYhoIFjebTRkwJrky1cVwdA/dqlPILH9zKQzET16zzsfyxMFLSjIjP4fDvDEB

/imzAHwJLTSbJl5ygJ2AFP3qGNgjJFw7Ef0I9GtpgJsOWjJhrK07Xs/3L87VvnQnVxriG+

qNVMvbjUzCf8JQZB6R7uGKZPqybViroNsunLCNrjgiCUNrdDvM/gt5R4ZGp5VVRnksk0xP

/ZVWBwhnxrsfa1qXp7pouz+73IeACuj9CCJ+z7poN+aJCGI3YtjRXLohlhxrynQNFPfKpU

8pWvqid5murJqSdUPUXQNrJs9qm5s4x3fxASFwHrzFXMO8Wl2GXd4pdIPDTCZg==

ARC-Seal: i=1; a=rsa-sha256; d=freebsd.org; s=dkim; cv=none; t=1793171244;

b=KhCdkUksqM6Cpbm3jbLh+rc0b4OZ+3dYzaAkSmZWeAKc7pco//k9YUFaCbVjLIZBSRBQzm

sGCj1SijL6AgGe8xrvgKYH+wJeGPk0FeT8TtuED1+tZMPplWObVlBBqV5uY5d7m+epqWKS

BhryonQOXF81BzqjkqXhj0JPIVmL0GQoqY65VdMV+8XGTVQD40ijfwWR39Wd2KZn5EQ+k6

Ej/ZJsKGrNhMdfUf7CEmfjUFCU4qSYvxKB9bbqh3iiZPOsvijZ1eRF2R9isA8SQMQIAwjh

9mS2/LYWdWLzs5bHEomz7h07EGBen2rUlF6JUqiG/wqflDfmRlGc7QsKmza3qg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;

s=dkim; t=1793171244;

h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:

in-reply-to:in-reply-to:references:references:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post:dkim-signature;

bh=NrwjVjVtHUMzLgodkyTokD8NEkwx6LaFJNcBtpUgIzU=;

b=iRevJ2UsFJcEEINh29WdmS6FOqhEDmhjpqgwzVuLttbbPvC02su1hsqUWy586cpNR4CLcW

YWXkIhgMYVl55zHt22t8TNtQTFDCL80JIvbjlmaiXFJtSIwkrApTd11/rVMfFc0CtajEl9

tEG0lHoBidOgbUolgaG7WvQkjYI6JTr/BqQ/USGqbyiNRdUE2V6ITNcVya4e3CkYUR4rax

KCdIHF6r01xzKM6lvwwmKF4N93jrmBmtOEqKlwXjlKBMkaJlhFcEhYktv5+4WqbJSltvCa

QKoLgwtZdsc5OtyqbuNJ3q2cwizL0HRPDyfXUnESD+HqWJ0azSOjwj96i7oNsA==

ARC-Authentication-Results: i=1;

mx1.freebsd.org;

dkim=pass header.d=oclc.org header.s=zendesk2 header.b=HXrlEoTS;

spf=pass (mx1.freebsd.org: domain of support@oclc.org designates 192.161.149.4 as permitted sender) smtp.mailfrom=support@oclc.org;

dmarc=pass (policy=quarantine) header.from=oclc.org

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jDz1P2h6rz6wxpK;

Wed, 28 Oct 2026 07:06:33 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8537@FreeBSD.org)

X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org

Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jDz1L5cGhz6wxts

for ; Wed, 28 Oct 2026 07:06:30 +0000 (UTC)

(envelope-from support@oclc.org)

Received: from mta-out4.pod19.use1.zdsys.com (mta-out4.pod19.use1.zdsys.com [192.161.149.4])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange secp256r1 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jDz1K61Gvz4VTm

for ; Wed, 28 Oct 2026 07:06:29 +0000 (UTC)

(envelope-from support@oclc.org)

Authentication-Results: mx1.freebsd.org;

dkim=pass header.d=oclc.org header.s=zendesk2 header.b=HXrlEoTS;

spf=pass (mx1.freebsd.org: domain of support@oclc.org designates 192.161.149.4 as permitted sender) smtp.mailfrom=support@oclc.org;

dmarc=pass (policy=quarantine) header.from=oclc.org

Received: from unknown (unknown [127.0.0.6])

by mta-out15.pod19.use1.zdsys.com (Zendesk) with HTTP

id 4ee8a926-1695-4736-98e2-709232f023b1;

Wed, 28 Oct 2026 07:06:29 +0000 (UTC)

Date: Wed, 28 Oct 2026 07:06:29 +0000

From: Support

Reply-To: Support

To: ARIN Ticketing System

Cc: Accounts Payable ,

Creative Commons ,

Brewster Kahle ,

Clement Erhardt Lehman ,

Answers ,

Admin ,

Pandas-dev ,

Helpdesk ,

Info ,

Contact ,

Freebsd-questions ,

Misc ,

Netbsd-users ,

Info ,

Info ,

Info ,

Support ,

Webmaster ,

Help ,

Drh ,

Info ,

Info ,

Info ,

Info ,

Support ,

Psf ,

Numpy-scipy ,

Executive-director ,

Gnu ,

Info ,

Press ,

Info ,

Arch-general ,

Apache ,

Users ,

Core ,

Php-webmaster ,

Pgsql-general ,

Info ,

Emaillist ,

Jenkins-infra ,

Cmake ,

Llvm-dev ,

Gcc ,

Info ,

Daniel ,

Press ,

Certbot-dev

Message-ID: <7YDVD6EWDM5_6ae19ef4edfca_fbe9aabf020105_sprut@zendesk.com>

In-Reply-To: <469309810.0.1793171173100@hive-mail-cron-job-29886186-cjnsp>

References: <7YDVD6EWDM5@zendesk.com>

<469309810.0.1793171173100@hive-mail-cron-job-29886186-cjnsp>

Subject: =?UTF-8?Q?Thank_you_for_your_OCLC_Support_Request_1030904_-_Re:?=

=?UTF-8?Q?_[ARIN-20261028.17]_FORMAL_CORPORATE_MEMORANDUM_=E2=80=94_Disput?=

=?UTF-8?Q?ed_Billing,_Suspension_of_Authorized_Credit_Arrangements,_Accoun?=

=?UTF-8?Q?ting_Demand_and_Preserva...?=

List-Archive: https://lists.freebsd.org/archives/freebsd-questions

X-BeenThere: freebsd-questions@freebsd.org

Sender: owner-freebsd-questions@FreeBSD.org

List-Id: User questions

List-Post:

List-Help:

List-Subscribe:

List-Unsubscribe:

List-Owner:

Precedence: list

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--==_mimepart_6ae19ef566f7_10518d07253";

charset=utf-8

Content-Transfer-Encoding: 7bit

X-Delivery-Context: rule-2-event-id-56892971665427

X-Zendesk-From-Account-Id: 7d4af63

Auto-Submitted: auto-generated

X-Auto-Response-Suppress: All

X-Mailer: Zendesk Mailer

X-Zendesk-Email-Id: 01M60N9SJDY2TWQC1671XYCFYH

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oclc.org; q=dns/txt;

s=zendesk2; t=1793171189; bh=NrwjVjVtHUMzLgodkyTokD8NEkwx6LaFJNcBtpUgIzU=;

h=date:from:reply-to:to:cc:message-id:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding;

b=HXrlEoTSICI8hbRZ5go1PwRI7QCIto5jnzybqBWCE8t4+lxiDL0eyJd4nvkgdz07KUVzK3fJ6UPMZdkRBS4giCXBOVO+W6j87LM7livIjP0tg/DB+ix1UXAfZ/1e7UeBwoitfWfk+YPa8NBrDoeNrU8iDZP9qyxflUImdQXgKkeOGBmKhzZnstLrgsYffjGrvRkb5EqNwt380+rQQ0HBBzIbnQkEBm8XCpTl8/u6h17n90e3zNhWfCGbbOuFdbW8tKLrDIbRDYcYICYzeoZ5AQLVplLRHC0kTKLpusEubuR81tQ2qerKfprS9Bmu/jsG7OOxfpZdHUXyGejPDx68FQ==

X-Spamd-Bar: /

X-Spamd-Result: default: False [-0.34 / 15.00];

SUSPICIOUS_RECIPS(1.50)[];

DWL_DNSWL_LOW(-1.00)[oclc.org:dkim];

URI_COUNT_ODD(1.00)[5];

RCVD_DKIM_ARC_DNSWL_MED(-0.50)[];

DMARC_POLICY_ALLOW(-0.50)[oclc.org,quarantine];

RWL_MAILSPIKE_EXCELLENT(-0.40)[192.161.149.4:from];

RCVD_IN_DNSWL_MED(-0.20)[192.161.149.4:from];

R_DKIM_ALLOW(-0.20)[oclc.org:s=zendesk2];

ONCE_RECEIVED(0.20)[];

R_SPF_ALLOW(-0.20)[+ip4:192.161.144.0/20];

MIME_GOOD(-0.10)[multipart/alternative,text/plain];

MANY_INVISIBLE_PARTS(0.05)[1];

XM_UA_NO_VERSION(0.01)[];

MLMMJ_DEST(0.00)[freebsd-questions@freebsd.org];

ARC_NA(0.00)[];

MIME_TRACE(0.00)[0:+,1:+,2:~];

FROM_EQ_ENVFROM(0.00)[];

FROM_HAS_DN(0.00)[];

RCPT_COUNT_TWELVE(0.00)[49];

RCVD_TLS_LAST(0.00)[];

TO_DN_ALL(0.00)[];

HAS_REPLYTO(0.00)[support@oclc.org];

TO_MATCH_ENVRCPT_SOME(0.00)[];

FREEMAIL_CC(0.00)[wikimedia.org,creativecommons.org,archive.org,gmail.com,pypi.org,python.org,kernel.org,linuxfoundation.org,alpinelinux.org,freebsd.org,openbsd.org,netbsd.org,cncf.io,docker.com,openjsf.org,npmjs.com,ruby-lang.org,perl.org,sqlite.org,mysql.com,gradle.com,mozilla.org,eff.org,wordpress.org,numfocus.org,gnu.org,fsf.org,debian.org,canonical.com,archlinux.org,apache.org,maven.apache.org,rust-lang.org,lists.php.net,postgresql.org,mariadb.org,eclipse.org,googlegroups.com,cmake.org,lists.llvm.org,gcc.gnu.org,openssl.org,haxx.se,letsencrypt.org];

ASN(0.00)[asn:14618, ipnet:192.161.149.0/24, country:US];

DKIM_TRACE(0.00)[oclc.org:+];

RCVD_COUNT_ONE(0.00)[1];

REPLYTO_EQ_FROM(0.00)[]

X-Rspamd-Queue-Id: 4jDz1K61Gvz4VTm

----==_mimepart_6ae19ef566f7_10518d07253

Content-Type: text/plain;

charset=utf-8

Content-Transfer-Encoding: quoted-printable

##- Please type your reply above this line -##

Your request (#1030904) about Re: [ARIN-20261028.17] FORMAL CORPORATE =

MEMORANDUM =E2=80=94 Disputed Billing, Suspension of Authorized Credit Ar=

rangements, Accounting Demand and Preserva... has been received and i=

s being reviewed by our support staff. =

=

If you would like to add further information to your query or have a ques=

tion, please reply to this email or click on the ticket number link above=

. =

Thank you,

OCLC Support

Did you know that if you
gin/registration?auth_origin=3D3770367%2Cfalse%2Ctrue&brand_id=3D3770367&=

return_to=3Dhttps://oclc.zendesk.com/hc/en-us/requests/new?ticket_form_id=

=3D360003003694;theme=3Dhc">register for an account you can review th=

e history of the support tickets you have submitted? You can also submit =

tickets here and get help suggestions. Click on this
elp.oclc.org/Librarian_Toolbox/Troubleshooting/How_can_I_get_an_OCLC_Supp=

ort_account">link for more info.

Because what is known must be shared.=C2=AE =

--------------------------------

This email is a service from OCLC Support.

[7YDVD6-EWDM5]=

----==_mimepart_6ae19ef566f7_10518d07253

Content-Type: text/html;

charset=utf-8

Content-Transfer-Encoding: quoted-printable

">

0;">

rande',Verdana,Arial,sans-serif; font-size: 12px; color:#444444;">

##- Please type your reply above this =

line -##

Your request (
c.zendesk.com/hc/requests/1030904">#1030904) about Re: [ARIN-20261=

028.17] FORMAL CORPORATE MEMORANDUM =E2=80=94 Disputed Billing, Suspensio=

n of Authorized Credit Arrangements, Accounting Demand and Preserva...
> has been received and is being reviewed by our support staff.

=

If you would like to add further information to your query or have a ques=

tion, please reply to this email or click on the ticket number link above=

.

Thank you,
OCLC Support

Did you=

know that if you
tration?auth_origin=3D3770367%2Cfalse%2Ctrue&brand_id=3D3770367&r=

eturn_to=3Dhttps://oclc.zendesk.com/hc/en-us/requests/new?ticket_form_id=3D=

360003003694;theme=3Dhc">register for an account you can review the h=

istory of the support tickets you have submitted? You can also submit tic=

kets here and get help suggestions. Click on this
.oclc.org/Librarian_Toolbox/Troubleshooting/How_can_I_get_an_OCLC_Support=

_account">link for more info.

Because what is known=

must be shared.=C2=AE

rande',Verdana,Arial,sans-serif; font-size: 12px; color: #aaaaaa;

margin: 10px 0 14px 0; padding-top: 10px; border-top: 1px solid #eeee=

ee;">

This email is a service from OCLC Support. Delivered by
tps://www.zendesk.com/support/?utm_campaign=3Dtext&utm_content=3DOCLC=

&utm_medium=3Dpoweredbyzendesk&utm_source=3Demail-notification" s=

tyle=3D"color:black;" target=3D"_blank">Zendesk

">[7YDVD6-EWDM5]

display:none">

//schema.org/ViewAction">
zendesk.com/hc/requests/1030904">
iew ticket">
=

----==_mimepart_6ae19ef566f7_10518d07253--

Categories: Spam and Phish

0 Comments

Multiple mailing list attack from zendesk
Posted by Dave Yadallee on Wednesday, October 28. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xM4J0-00000000Djz-3kNI

for dave@doctor.nl2k.ab.ca;

Wed, 28 Oct 2026 08:07:06 -0600

Resent-From: The Doctor

Resent-Date: Wed, 28 Oct 2026 08:07:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.freebsd.org ([96.47.72.81]:25819)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLxlB-00000000EJf-2JRg

for doctor@doctor.nl2k.ab.ca;

Wed, 28 Oct 2026 01:07:48 -0600

Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519)

(No client certificate requested)

by mx2.freebsd.org (Postfix) with ESMTPS id 4jDz1k1038z4psC

for ; Wed, 28 Oct 2026 07:06:50 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8536-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jDz1j696bz4VwR

for ; Wed, 28 Oct 2026 07:06:49 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8536-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim;

t=1793171209;

h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:

in-reply-to:in-reply-to:references:references:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post;

bh=GDSIh2VGKg60UMOI+zpuXW1WX0FT7tabDHRh4C6AXOc=;

b=FT2/P/GdoLtv2t0DVsm67mnDjTu/iLPzczEWYnFt7xrx421aPeBdtFNsbrTNBeUYFKPicQ

z0zOQF2QotzNOVlXR0gN57nAz98F0gj+hWJjxaNpNVD7i7zavRFUNj6DkkrAUBdyDRe2A9

ggOchYZKyhU5Df0DFF2FC4xfyBcWHKr/hIPjnZ3TiYhMiM2VneIsVLbDL35+y8yTgNsKK4

gJ63wvDtR5hnq5UMnCqrYxsTrMmVg7LzybmZ98iv2vKahkLYaJe+m6QH7aoYc0tyywYjpV

tJoc0GWaG5RjVmVju4hPR5lGrnRDsNQys8wNx5VVFvzu9hx0esFtCv7xNvxvgQ==

ARC-Seal: i=1; a=rsa-sha256; d=freebsd.org; s=dkim; cv=none; t=1793171209;

b=ucMJ0uMgGVKNBKB8npK00BRFhPLO9lHQMhdODB2MEmSOLQ+/X019i7n1aBZe96PR2HL7g4

sOLiWrc/Dbk6Y100WtB6ImGhLyxj4BKaMb2HZDKfBURIkiPTJV0NEpvYkw1lDE05C+eZwd

OD4g/LMG9iWtgL4rt6Mcu+i2sy/JkyySmCYgQVupA6jv/N6krMARoiyRmi2JWlR2CI+n7y

M6xg5wlb92+J6BYZhIIThqNOcDiT3wWXOzQoylJERL7ypZGZRuM9bDor+Fl6RF+e05A1tM

2p5odablLKHuNFKBCPicsVgBPgPruEaixPaCLSZUp/GhzBwcAEm0hyV+BMShXA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;

s=dkim; t=1793171209;

h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:

in-reply-to:in-reply-to:references:references:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post:dkim-signature;

bh=GDSIh2VGKg60UMOI+zpuXW1WX0FT7tabDHRh4C6AXOc=;

b=a7kFpmFzUtDtEN1Ydo4eFx/bEivjNa2za7dwADhv8JjA693sepVKDskiz1VEG8kVIODBs4

9BoB2R9SPgNx+l2mKnH8G3B9KILwyO4opYMjfP9/GFIv3wnupfByBWKlzmTznPtx4FXWPC

/QJv+ereTHP2dYxpmpNiojsMwz5Jo1exudPPs/Gl5r8mQ84ohMVNraLWaN/sNoP/22ATK6

LgH4na/0rQ62SQE25enlzu+pWoV/DMNrVXJUxXByp7zy3Y3SNnkh+zqD3GpNiqwMg+TiXZ

KXN0W3ZNEo+snhiJBEzZYbte2lffObDxry08cIxygaIKC7KIdc+sINr8hxz8jA==

ARC-Authentication-Results: i=1;

mx1.freebsd.org;

dkim=pass header.d=oclc.org header.s=zendesk2 header.b=kTnyDIqS;

spf=pass (mx1.freebsd.org: domain of support@oclc.org designates 192.161.149.13 as permitted sender) smtp.mailfrom=support@oclc.org;

dmarc=pass (policy=quarantine) header.from=oclc.org

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jDz186swqz6wxmC;

Wed, 28 Oct 2026 07:06:20 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8536@FreeBSD.org)

X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org

Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jDz172Jv6z6wxx1

for ; Wed, 28 Oct 2026 07:06:19 +0000 (UTC)

(envelope-from support@oclc.org)

Received: from mta-out13.pod19.use1.zdsys.com (mta-out13.pod19.use1.zdsys.com [192.161.149.13])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange secp256r1 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jDz1553zlz4V32

for ; Wed, 28 Oct 2026 07:06:17 +0000 (UTC)

(envelope-from support@oclc.org)

Authentication-Results: mx1.freebsd.org;

dkim=pass header.d=oclc.org header.s=zendesk2 header.b=kTnyDIqS;

spf=pass (mx1.freebsd.org: domain of support@oclc.org designates 192.161.149.13 as permitted sender) smtp.mailfrom=support@oclc.org;

dmarc=pass (policy=quarantine) header.from=oclc.org

Received: from unknown (unknown [127.0.0.6])

by mta-out15.pod19.use1.zdsys.com (Zendesk) with HTTP

id a5409a61-f908-4a66-be82-89c4b55f11d1;

Wed, 28 Oct 2026 07:06:16 +0000 (UTC)

Date: Wed, 28 Oct 2026 07:06:16 +0000

From: Support

Reply-To: Support

To: Clement Erhardt Lehman

Cc: Accounts Payable ,

Creative Commons ,

Brewster Kahle ,

Answers ,

Admin ,

Pandas-dev ,

Helpdesk ,

Info ,

Contact ,

Freebsd-questions ,

Misc ,

Netbsd-users ,

Info ,

Info ,

Info ,

Support ,

Webmaster ,

Help ,

Drh ,

Info ,

Info ,

Info ,

Info ,

Support ,

Psf ,

Numpy-scipy ,

Executive-director ,

Gnu ,

Info ,

Press ,

Info ,

Arch-general ,

Apache ,

Users ,

Core ,

Php-webmaster ,

Pgsql-general ,

Info ,

Emaillist ,

Jenkins-infra ,

Cmake ,

Api ,

Jlehman ,

Bakerdonelson ,

Jaslehman ,

Jaslehman ,

Dochsl ,

Dochsl

Message-ID:

In-Reply-To:

References:

Subject: =?UTF-8?Q?Thank_you_for_your_OCLC_Support_Request_1030903_-_FORMAL?=

=?UTF-8?Q?_CORPORATE_MEMORANDUM_=E2=80=94_Disputed_Billing,_Suspension_of?=

=?UTF-8?Q?_Authorized_Credit_Arrangements,_Accounting_Demand_and_Preser?=

=?UTF-8?Q?vation_of_Records?=

List-Archive: https://lists.freebsd.org/archives/freebsd-questions

X-BeenThere: freebsd-questions@freebsd.org

Sender: owner-freebsd-questions@FreeBSD.org

List-Id: User questions

List-Post:

List-Help:

List-Subscribe:

List-Unsubscribe:

List-Owner:

Precedence: list

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--==_mimepart_6ae19ee86557e_10f18d03039f";

charset=utf-8

Content-Transfer-Encoding: 7bit

X-Delivery-Context: rule-2-event-id-56892988546323

X-Zendesk-From-Account-Id: 7d4af63

Auto-Submitted: auto-generated

X-Auto-Response-Suppress: All

X-Mailer: Zendesk Mailer

X-Zendesk-Email-Id: 01M60N9EF5RCK1W3F4SX16Z1T6

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oclc.org; q=dns/txt;

s=zendesk2; t=1793171176; bh=GDSIh2VGKg60UMOI+zpuXW1WX0FT7tabDHRh4C6AXOc=;

h=date:from:reply-to:to:cc:message-id:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding;

b=kTnyDIqSty6Au4q6o/R3Ev8ljHeYQQ0dZlDFfyNZj/c+Ul2F/9ch/S7yrYNNH8HbVlhVj2l+4d5mxShx5Mr1gnSjaw6sWhhpfsF+VN5iBI7l9ZkLN/Fgu5vNJ1s73Qj+Uz5I351hzC9cXllOSYvH4gtX/ckwuL72JZ/gyFeDsYVNV7THJG+emdtDlFe71Iwv+Btth563FH0GrnGtond+ApInxRgY7TLpD2MbpxmHIzV2xLp/XKzXPa8goObfxexdUdbr/857oaBSeZI2KG4FQDgXWWAeiBCBiJ3FgkD19ryMseXUQ/CJc83pYTZmmA+Z4V4xzcHzBqLRA9QWQWAIzQ==

X-Spamd-Bar: /

X-Spamd-Result: default: False [-0.34 / 15.00];

SUSPICIOUS_RECIPS(1.50)[];

DWL_DNSWL_LOW(-1.00)[oclc.org:dkim];

URI_COUNT_ODD(1.00)[5];

RCVD_DKIM_ARC_DNSWL_MED(-0.50)[];

DMARC_POLICY_ALLOW(-0.50)[oclc.org,quarantine];

RWL_MAILSPIKE_EXCELLENT(-0.40)[192.161.149.13:from];

R_SPF_ALLOW(-0.20)[+ip4:192.161.144.0/20];

RCVD_IN_DNSWL_MED(-0.20)[192.161.149.13:from];

R_DKIM_ALLOW(-0.20)[oclc.org:s=zendesk2];

ONCE_RECEIVED(0.20)[];

MIME_GOOD(-0.10)[multipart/alternative,text/plain];

MANY_INVISIBLE_PARTS(0.05)[1];

XM_UA_NO_VERSION(0.01)[];

MIME_TRACE(0.00)[0:+,1:+,2:~];

FREEMAIL_TO(0.00)[gmail.com];

RCPT_COUNT_TWELVE(0.00)[49];

RCVD_TLS_LAST(0.00)[];

ARC_NA(0.00)[];

FREEMAIL_CC(0.00)[wikimedia.org,creativecommons.org,archive.org,pypi.org,python.org,kernel.org,linuxfoundation.org,alpinelinux.org,freebsd.org,openbsd.org,netbsd.org,cncf.io,docker.com,openjsf.org,npmjs.com,ruby-lang.org,perl.org,sqlite.org,mysql.com,gradle.com,mozilla.org,eff.org,wordpress.org,numfocus.org,gnu.org,fsf.org,debian.org,canonical.com,archlinux.org,apache.org,maven.apache.org,rust-lang.org,lists.php.net,postgresql.org,mariadb.org,eclipse.org,googlegroups.com,cmake.org,usaspending.com,bridgeport.edu,bakerdonelson.com,aol.com,gmail.com];

HAS_REPLYTO(0.00)[support@oclc.org];

TO_MATCH_ENVRCPT_SOME(0.00)[];

FROM_EQ_ENVFROM(0.00)[];

FROM_HAS_DN(0.00)[];

TO_DN_ALL(0.00)[];

MLMMJ_DEST(0.00)[freebsd-questions@freebsd.org];

RCVD_COUNT_ONE(0.00)[1];

ASN(0.00)[asn:14618, ipnet:192.161.149.0/24, country:US];

DKIM_TRACE(0.00)[oclc.org:+];

REPLYTO_EQ_FROM(0.00)[]

X-Rspamd-Queue-Id: 4jDz1553zlz4V32

----==_mimepart_6ae19ee86557e_10f18d03039f

Content-Type: text/plain;

charset=utf-8

Content-Transfer-Encoding: quoted-printable

##- Please type your reply above this line -##

Your request (#1030903) about FORMAL CORPORATE MEMORANDUM =E2=80=94 Di=

sputed Billing, Suspension of Authorized Credit Arrangements, Accounting =

Demand and Preservation of Records has been received and is being rev=

iewed by our support staff. =

=

If you would like to add further information to your query or have a ques=

tion, please reply to this email or click on the ticket number link above=

. =

Thank you,

OCLC Support

Did you know that if you
gin/registration?auth_origin=3D3770367%2Cfalse%2Ctrue&brand_id=3D3770367&=

return_to=3Dhttps://oclc.zendesk.com/hc/en-us/requests/new?ticket_form_id=

=3D360003003694;theme=3Dhc">register for an account you can review th=

e history of the support tickets you have submitted? You can also submit =

tickets here and get help suggestions. Click on this
elp.oclc.org/Librarian_Toolbox/Troubleshooting/How_can_I_get_an_OCLC_Supp=

ort_account">link for more info.

Because what is known must be shared.=C2=AE =

--------------------------------

This email is a service from OCLC Support.

[ZLV6V0-X42EP]=

----==_mimepart_6ae19ee86557e_10f18d03039f

Content-Type: text/html;

charset=utf-8

Content-Transfer-Encoding: quoted-printable

">

0;">

rande',Verdana,Arial,sans-serif; font-size: 12px; color:#444444;">

##- Please type your reply above this =

line -##

Your request (
c.zendesk.com/hc/requests/1030903">#1030903) about FORMAL CORPORAT=

E MEMORANDUM =E2=80=94 Disputed Billing, Suspension of Authorized Credit =

Arrangements, Accounting Demand and Preservation of Records has been =

received and is being reviewed by our support staff.

If you woul=

d like to add further information to your query or have a question, pleas=

e reply to this email or click on the ticket number link above.

r=3D"ltr">Thank you,
OCLC Support
Did you know that =

if you
h_origin=3D3770367%2Cfalse%2Ctrue&brand_id=3D3770367&return_to=3D=

https://oclc.zendesk.com/hc/en-us/requests/new?ticket_form_id=3D360003003=

694;theme=3Dhc">register for an account you can review the history of=

the support tickets you have submitted? You can also submit tickets here=

and get help suggestions. Click on this
/Librarian_Toolbox/Troubleshooting/How_can_I_get_an_OCLC_Support_account"=

>link for more info.
Because what is known must be =

shared.=C2=AE

rande',Verdana,Arial,sans-serif; font-size: 12px; color: #aaaaaa;

margin: 10px 0 14px 0; padding-top: 10px; border-top: 1px solid #eeee=

ee;">

This email is a service from OCLC Support. Delivered by
tps://www.zendesk.com/support/?utm_campaign=3Dtext&utm_content=3DOCLC=

&utm_medium=3Dpoweredbyzendesk&utm_source=3Demail-notification" s=

tyle=3D"color:black;" target=3D"_blank">Zendesk

">[ZLV6V0-X42EP]

display:none">

//schema.org/ViewAction">
zendesk.com/hc/requests/1030903">
iew ticket">
=

----==_mimepart_6ae19ee86557e_10f18d03039f--

Categories: Spam and Phish

0 Comments

nk.ca Credential phishing
Posted by Dave Yadallee on Wednesday, October 28. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Oct 2026 08:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xM4Ic-00000000Dgt-2CYF

for dave@doctor.nl2k.ab.ca;

Wed, 28 Oct 2026 08:06:42 -0600

Resent-From: The Doctor

Resent-Date: Wed, 28 Oct 2026 08:06:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cpanel01.tiki.id ([160.187.143.250]:47766)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLwrq-000000007uX-0ns7

for sales@nk.ca;

Wed, 28 Oct 2026 00:10:36 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tiki.id;

s=default; h=MIME-Version:Date:Content-Transfer-Encoding:Message-ID:Subject:

To:From:Content-Type:Sender:Reply-To:Cc:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Unsubscribe-Post:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=973CqT8LItKC6CB10jIqM4mYE+flU7tf3SRtLvTR0UE=; b=ENOYuyUeEJr98sGD2APaGxHJO5

jguJeiKkl08sZd9H54egIm13Ah9kr1zBDQHAIleJLn4nn7EbcaEHS2C68xFCSvcBLmJFLegx+e+6/

c35QnJAD7M9RpQG2CmhhcWqJPItu9DOjzEEwYuOQH6i2oE25eA30o6l8Y6Sf/eUqn96zlusHSe0uN

IvnOS0ofyFW1rzSRyZgyYi9ecbI71bpXQGuDNdFJu/FF+pNIGuZcygyB8syBEElhCoLprcVg9g09p

k5zu/rn6tOt+8kQC3BSw0ezyFzMd1qLN02DZnbDfaNb4hOdXMbgnmKwQGBznil6itlRwf4gCJg2it

rCyhaEsA==;

Received: from [14.102.84.90] (port=9277 helo=[127.0.0.1])

by cpanel01.tiki.id with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1)

(envelope-from )

id 1xLwqr-0000000HXZL-3gSX

for sales@nk.ca;

Wed, 28 Oct 2026 13:09:31 +0700

Content-Type: text/html

From: Nk

To: sales@nk.ca

Subject: INC00736544 - Inbound Message Error

Message-ID: <513a7b7d-6619-abec-a43c-c28f001f9f9b@tiki.id>

Content-Transfer-Encoding: quoted-printable

Date: Wed, 28 Oct 2026 06:07:06 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - cpanel01.tiki.id

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - tiki.id

X-Get-Message-Sender-Via: cpanel01.tiki.id: authenticated_id: marliani.fitria@tiki.id

X-Authenticated-Sender: cpanel01.tiki.id: marliani.fitria@tiki.id

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: INC00736544 - Inbound Message Error Expires in 24 hours

Content analysis details: (6.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.187.143.250 listed in dnsbl.ahbl.org]

[160.187.143.250 listed in dnsbl.ahbl.org]

[160.187.143.250 listed in dnsbl.ahbl.org]

[160.187.143.250 listed in dnsbl.ahbl.org]

[14.102.84.90 listed in dnsbl.ahbl.org]

[14.102.84.90 listed in dnsbl.ahbl.org]

[14.102.84.90 listed in dnsbl.ahbl.org]

[14.102.84.90 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.187.143.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.187.143.250 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.187.143.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.187.143.250 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[160.187.143.250 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.187.143.250 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} INC00736544 - Inbound Message Error

=20

padding: 0; background-color: #f4f5f7; font-family: Arial, Helvetica, =

sans-serif; color: #393a3d">
cellpadding=3D"0" border=3D"0" style=3D"background-color: #f4f5f7; padding:=

30px 10px">

cellspacing=3D"0" cellpadding=3D"0" border=3D"0" style=3D"max-width: 600px;=

width: 100%; background-color: #ffffff; border: 1px solid #e0e0e0"> =

=

color: #ffffff">

600"> INC00736544 - Inbound Message Error

0; font-size: 14px; line-height: 1.5"> Expires in 24 hours

style=3D"margin: 0 0 18px">Hello sales,
=

You have 8 pending messages marked with high importance that failed to your=

inbox today. Please review and release messages below.

style=3D"margin: 0 0 24px; text-align: left">
com.mx/mode/?x=3Dc2FsZXNAbmsuY2E=3D" style=3D"display: inline-block; =

background-color: #818589; color: #ffffff; padding: 12px 24px; font-family:=

Arial, Helvetica, sans-serif; font-size: 15px; font-weight: bold; =

text-decoration: none; border-radius: 4px" target=3D"_blank" =

rel=3D"noreferrer"> Review Now
This=

email is addressed to sales@nk.ca.
=

Thank you,
Nk Support Team=

#f7f7f7; border-top: 1px solid #e5e5e5; font-size: 12px; line-height: 1.6; =

color: #6b6c72"> Note: This alert is triggered when incoming messages are =

held and yet to be delivered to your inbox..

=

Categories: Phish

0 Comments

Chinese products spam
Posted by Dave Yadallee on Wednesday, October 28. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 27 Oct 2026 18:50:00 -0600

Received: from out0-36.static.mail.aliyun.com ([59.82.0.36]:24178)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLrrU-00000000MOz-0HMB

for dave@nk.ca;

Tue, 27 Oct 2026 18:49:55 -0600

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.9243578|0.185111;BR=01201311R441S74rulernew999_84748_200303;CH=yellow;DM=|AD|false|;DS=CONTINUE|ham_enroll_verification|0.384749-0.0200428-0.595209;FP=18080248917732304023|2|1|48|0|-1|-1|-1;HT=maildocker-contentspam011083099174;MF=ludy.ch@qydevelop.com;NM=1;PH=DS;RN=286;RT=0;SR=0;TI=SMTPD_---.jr.eEfS_1793148512;

Received: from DESKTOP-EGPU2OG(mailfrom:Ludy.ch@qydevelop.com fp:SMTPD_---.jr.eEfS_1793148512 cluster:ay29)

by smtp.aliyun-inc.com;

Wed, 28 Oct 2026 08:48:44 +0800

Date: Wed, 28 Oct 2026 08:48:32 +0800

From: Ludy.ch

Message-ID: <84EA4A68-EFC0-40E9-9539-6D3B2A49D995@qydevelop.com>

Subject: =?utf-8?B?5Y2K5a+85L2T6YeP5rWL5LiO5qOA5rWL6K6+5aSHIFNlbWljb25k?=

=?utf-8?B?dWN0b3IgTWV0cm9sb2d5ICYgSW5zcGVjdGlvbiBFcXVpcG1lbnQgTWFya2V0?=

=?utf-8?B?IDIwMjcgRm9yZWNhc3Q6IFVTRCAzNSwxMTkgTWlsbGlvbiBieSAyMDMyIGF0?=

=?utf-8?B?IDguNyUgQ0FHUg==?=

Disposition-Notification-To: Ludy.ch

X-Mailer: MailMasterPC/4.19.4.1001 (Win10 22H2)

X-MailMaster-ShowOneRcpt: 1

X-CUSTOM-MAIL-MASTER-SENT-ID: 0307BFEA-056A-410B-8ACE-79D36808CA33

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, The Global Semiconductor Metrology & Inspection Equipment

Market Research Report 2026-2032 has been published. The report covers revenue

forecasts, company share analysis, competitive landscape, growt [...]

Content analysis details: (8.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[59.82.0.36 listed in dnsbl.ahbl.org]

[59.82.0.36 listed in dnsbl.ahbl.org]

[59.82.0.36 listed in dnsbl.ahbl.org]

[59.82.0.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[59.82.0.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[59.82.0.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[59.82.0.36 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[59.82.0.36 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[59.82.0.36 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[59.82.0.36 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or

Generic rPTR

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_55 BODY: 5alpha-pock-5alpha

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?utf-8?B?5Y2K5a+85L2T6YeP5rWL5LiO5qOA5rWL6K6+5aSHIFNlbWljb25k?=

=?utf-8?B?dWN0b3IgTWV0cm9sb2d5ICYgSW5zcGVjdGlvbiBFcXVpcG1lbnQgTWFya2V0?=

=?utf-8?B?IDIwMjcgRm9yZWNhc3Q6IFVTRCAzNSwxMTkgTWlsbGlvbiBieSAyMDMyIGF0?=

=?utf-8?B?IDguNyUgQ0FHUg==?=

Hello,

The Global Semiconductor Metrology & Inspection Equipment Market Research Report 2026-2032 has been published. The report covers revenue forecasts, company share analysis, competitive landscape, growth factors, and key industry trends. The key findings are summarised below in three numbered points:

2027 market snapshot and growth forecast – According to the 2026-2032 forecast, 2027 is expected to be a key growth year for the global semiconductor metrology and inspection equipment market. The market was estimated at USD 17,175 million in 2025 and is projected to reach USD 35,119 million by 2032, with a CAGR of 8.7% from 2026 to 2032.

Companies covered – The report examines both established and emerging players, including KLA Corporation, Applied Materials, Lasertec, Hitachi High-Tech, ASML, Onto Innovation, ZEISS, Skyverse, Precision Measurement, Camtek, SCREEN Semiconductor Solutions, Toray Engineering, Merck(Unity Semiconductor SAS), YUWEITEK, Microtronic, DJEL, VPTek, RSIC, TZTEK(Muetec), MZSemi, GOVION, and others.

Segments and coverage – By type: Inspection Equipment and Metrology Equipment. By application: Wafer and Mask/Film. By category: Optical, E-beam, and Other. By division: Nanometer-level and Sub-nanometer-level. By region: North America (United States, Canada), Asia-Pacific (China, Japan, South Korea, Southeast Asia, India, Australia, Rest of Asia-Pacific), Europe (Germany, France, U.K., Italy, Netherlands, Nordic Countries, Rest of Europe), Latin America (Mexico, Brazil, Rest of Latin America), and Middle East & Africa (Turkey, Saudi Arabia, UAE, Rest of MEA). All figures are in million USD.

If this is relevant to your work, just reply with "sample" and I will provide you with a sample copy.

Best Regards,

Ludy Chen

Sales Manager | QY RESEARCH, INC.

Email: Ludy@qyresearch.com

Phone: +86-13602867335 (7×24) / +1-6262952442 (US)

QY RESEARCH, INC.

Categories: Chinese Phish Spam

0 Comments

Investment spam
Posted by Dave Yadallee on Tuesday, October 27. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 17:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLqU1-000000006Xz-0iOe

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 17:21:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 17:21:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from bsgw-00000288.cafe24.com ([118.219.235.58]:46808)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLoSM-000000008pW-0T8P

for support@nk.ca;

Tue, 27 Oct 2026 15:11:47 -0600

Received: from nexpa.co.kr ([::ffff:178.83.19.78])

(AUTH: LOGIN sour5406@nexpa.co.kr)

by bsgw-00000288.cafe24.com with esmtp; Wed, 28 Oct 2026 06:10:36 +0900

id 000000000867B5F3.000000006AE1134D.00019460

Reply-To: info@doha-consultant.com

From: doha consultant

To: support@nk.ca

Subject: Re: Re:Investment partnership

Date: 28 Oct 2026 06:10:37 +0900

Message-ID: <20261028061037.9D4B970681350B58@nexpa.co.kr>

Mime-Version: 1.0

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

Received-SPF: fail (Address does not pass the Sender Policy Framework)

SPF=FROM;

sender=sour5406@nexpa.co.kr;

remoteip=::ffff:178.83.19.78;

remotehost=;

helo=nexpa.co.kr;

receiver=bsgw-00000288.cafe24.com;

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings How are you doing? Do you need an investment partner

for any of your projects? I have many investors who are willing and able

to invest in your project.

Content analysis details: (9.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[118.219.235.58 listed in dnsbl.ahbl.org]

[118.219.235.58 listed in dnsbl.ahbl.org]

[118.219.235.58 listed in dnsbl.ahbl.org]

[118.219.235.58 listed in dnsbl.ahbl.org]

[178.83.19.78 listed in dnsbl.ahbl.org]

[178.83.19.78 listed in dnsbl.ahbl.org]

[178.83.19.78 listed in dnsbl.ahbl.org]

[178.83.19.78 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[118.219.235.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[118.219.235.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[118.219.235.58 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[118.219.235.58 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[178.83.19.78 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[178.83.19.78 listed in sbl-xbl.spamhaus.org]

[178.83.19.78 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[118.219.235.58 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[118.219.235.58 listed in wl.mailspike.net]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

Subject: {SPAM?} Re: Re:Investment partnership

Greetings

How are you doing? Do you need an investment partner fo=

r any of your projects? I have many investors who are willing and able to i=

nvest in your project.

Send me your WhatsApp number or Mobile number=

for faster communications

Warm regards,
Ahmed Ahn Abudadi
inv=

estment consultant

Categories: Spam and Phish

0 Comments

Negative reviews removal spam from Google Gmail
Posted by Dave Yadallee on Tuesday, October 27. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 17:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLqTp-000000006X8-0tUB

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 17:21:21 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 17:21:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f174.google.com ([209.85.160.174]:48534)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLmNf-00000000MhS-1I8x

for sales@nk.ca;

Tue, 27 Oct 2026 12:58:47 -0600

Received: by mail-qt1-f174.google.com with SMTP id d75a77b69052e-53381e53b80so3165351cf.1

for ; Tue, 27 Oct 2026 11:57:48 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1793127462; cv=none;

d=google.com; s=arc-20260327;

b=lSgr20zck1U4m7zr0H6idgMhlZehA4dyOOO1XepexYtNogXjWWsFK4/HOSLpePNp53

wI5OPjogjGDsTN2wevmy1w+0QgbiF7JsYLrZNexJE84/TBLF18qpDz+MUl6iwVMhdT4a

IOJXfQsoB+Ss/VPmq2ja9CUYNc9gWthGQosRpPdeIYSkNpxaff375qiX7odBMZjMsINv

lMY6o1iMbNlK3XDav0SDb0lqrZYlWkg9Y2BRykhcGvkHENZDLyAl7Qm1WHpRwEVyu3Od

7Mj8dt+4Qfs0LZSApR86mDud0YtgRrUznjQ7emg0Cyp59e6UgPRsWye1IpDYUenZln58

ggVA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=FexgfYdsx6uLI87rl+rGixmDQ9QScaXw15kUpsabWl4=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=ZxCMKOe1c9Xj/IzyMfPI17eD25vh55Qza6/q2d8rvDe/rdTZ+8ko7Xu0uqD1HyqTPI

0WL+wpPezWJtP8xKzhJtuewTwFgXs13w4YMR/LkjZBgjNYXYoeFl68jzYSgT2ZUlMKZB

fWXJ5gVcCqdUcX3fmqkISa+PTHOBwFKmGk/1WAZXLrkSNRiHq/vyJRQ3hCb7sirPSRVx

r4KXBJ6rcbtSHYyBNVuSpXefOYxcUQNZhEFhfBLMh+SHyaIhsuKPzo2p2iJM7Md66R1h

KpZdH9G+9uvQ/LcPWi6uCCPztoIdyeCNk56sPeniYXzD0XIv1y7KUEZrKpsCEL5oDC/t

CW5Q==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1793127462; x=1793732262; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=FexgfYdsx6uLI87rl+rGixmDQ9QScaXw15kUpsabWl4=;

b=e8+B3FmYHPqEvM2lZr/DVxRVbU4aMfVviWZwKksDzpNoVf8VMBBwBDPr3BSopk6eEj

DiZBBumIWYTVRP8u2jponDIiKRlD6KYkTFZOhiNL0quHznxt8YOr/ybqW6ztE7PSmS41

Q5utXdXjUHXcXa2TesTrAs+1Dm2jg8wZiEiYt41gaiCMkXq4A6Xpe9PMhI+qLj2DM52b

/LnB7ozYuReoXlDy/zarFoMyhlVF+I98ACfwzDiEP/+J1UVjWc1vpVk22sEvzFqhXGZn

9nWVhlmmVvvH7Nu4PJKWtVSXbIuB956EPagS7+HlGM5y190kiN1c7YBMvRqW6aut13t8

rwcg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793127462; x=1793732262;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=FexgfYdsx6uLI87rl+rGixmDQ9QScaXw15kUpsabWl4=;

b=aYF1hvuzzAzpwPtjLdD6fohOy/gXJarFiPIGbpRHYZXMaLgmD0sU2R7vq18Jyl14KM

N0v0nmKcGp9DFBPebjugVeV8YfbnX9XXjKacSnW2SRCbjq1EWIrDYKvY053bqbNsE1mC

lg3hj+8xofvMT2fiaBQ3t76uEy1HoAcnSc3Eb2FOfmm7VxOU2mf0olRKC4Vbs1kyYq8c

AI/dhwCUpN0jPiIkjM5pcl3ldYbWFh/rpQcPwQk2z2xizEndQ7B17mRheG41HoUIZlZ3

ro0E1CyL1mbzpjWzcoIZ/Yu693/sdPE8OrubOfAGhAk0ye7b85jE65JdqufpzceB6+PX

m/4w==

X-Gm-Message-State: AFq9FYK8f3ekVgl3iIzHp1pVX1DOizTKQGwwXKFhc1mJvY5/eYVxC6EU

usRCWqyaV+K/7+eYrRIBUN98mOaEHjfzKpcbCZmKIegdTrq8jOYD35KkZQ89peXRgNGUPQiocBo

2LX6dOyopLIHoYELr5ZGgoolpBFxtlZhYFA==

X-Gm-Gg: AYBFou2vJAa1B2grYIyD4BQioqBs8HBRUZkQSaNCHRaWy6f+WX90hgreGbMIo2KQ3EG

qmhJWVLjtJ+D75ZV/usdWqo7DsBAR4RF6jTfsKZD5dfd4fdq5aoB289PbP8AN4m0nHYM0PwzCkM

iypIYN72ABqoK0qddsyabIInE34RTxOXd41SDgC1f/dIiOCoFGLClqSSdsS7Tsc396++dpHuaB0

dOCkNhThYgTUBqpl1tNtGfylyL8qR7ToBOveasZ8Qok/NXTyppb9SYBHJ44h3NX9z8XC1Gsndxw

u9uhoeo71OV0xwu16LeQN7X3bjtvvQT5iJw0kJMSwFnsnvXja5QYmZAjq1p2Y6mI+x80UW3/xo7

uQ5f5VSc252VmO4Ruj2uQnO6BhtwfBkWJ6SzETNDoFzgBiosARxOcQlXBm3bF4wxsVM9R3Js=

X-Received: by 2002:a05:622a:4d3:b0:53e:35dc:9bd2 with SMTP id

d75a77b69052e-53fcd190e1fmr2983201cf.66.1793127462120; Tue, 27 Oct 2026

11:57:42 -0700 (PDT)

MIME-Version: 1.0

From: Ahmad

Date: Tue, 27 Oct 2026 23:57:28 +0500

X-Gm-Features: AclHuK-nw5CbDXp3eVvl4BYXU-_miS6b7FYAfxtj7_w8jRwHDEuExvuMVH46zc0

Message-ID:

Subject: Netknow Internet Service, Negative Reviews Removal

To: sales@nk.ca

Content-Type: multipart/related; boundary="0000000000006b211a065ed70549"

--0000000000006b211a065ed70549

Content-Type: multipart/alternative; boundary="0000000000006b211a065ed70548"

--0000000000006b211a065ed70548

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

.=E2=AD=90 1-Star Review Removal & Local Search Growth

I noticed some 1-star reviews on your Google Business Profile that may be

affecting customer trust and sales.

I help businesses with eligible Google review removal, reputation

management, local search visibility, and business growth.

=E2=9C=94 Fake, Spam & Policy-Violating Review Removal

=E2=9C=94 Text & Image Review Removal

=E2=9C=94 Google Reputation Management

=E2=9C=94 Local Search & Google Visibility Growth

=E2=9C=94 Improve Customer Trust & Online Presence

=E2=9C=94 No Upfront Payment =E2=80=94 Pay After Successful Removal

--0000000000006b211a065ed70548

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

.=E2=AD=90 1-Star Review Removal & Local Search Growt=

h
I noticed some 1-star reviews on your Google Business Pr=

ofile that may be affecting customer trust and sales.

">I help businesses with eligible Google review removal, reputation managem=

ent, local search visibility, and business growth.
=

=E2=9C=94 Fake, Spam & Policy-Violating Review Removal

"auto">=E2=9C=94 Text & Image Review Removal
=E2=

=9C=94 Google Reputation Management
=E2=9C=94 Local =

Search & Google Visibility Growth
=E2=9C=94 Impr=

ove Customer Trust & Online Presence
=E2=9C=94 N=

o Upfront Payment =E2=80=94 Pay After Successful Removal

:ii_1a17eb96c1ff320ba4b1" style=3D"max-width: 100%; height: auto;">

=

--0000000000006b211a065ed70548--

--0000000000006b211a065ed70549

Content-Type: image/jpeg; name="119232.jpg"

Content-Disposition: inline; filename="119232.jpg"

Content-Transfer-Encoding: base64

Content-ID:

X-Attachment-Id: ii_1a17eb96c1ff320ba4b1

...

Categories: Google Gmail Spam

0 Comments

Chinese products spam
Posted by Dave Yadallee on Tuesday, October 27. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 10:24:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLjyj-000000001I8-0ius

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 10:24:49 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 10:24:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [156.224.83.245] (port=14796 helo=mail-m83245.xmail.ntesmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLjKC-00000000BRJ-0pwo

for sales@nk.ca;

Tue, 27 Oct 2026 09:43:12 -0600

Content-Type: multipart/mixed; BOUNDARY="=_Part_858327_1936197749.1793115705284"

To: sales

Subject: =?UTF-8?B?UmU6IEZhY2lhbCBjbGVhbnNpbmcgYnJ1c2ggMjAyNiBvcmRlcnM=?=

X-Priority: 3

MIME-Version: 1.0

Received: from kero@svoov.cn( [10.176.93.68] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 27 Oct 2026 23:41:45 +0800 (GMT+08:00)

From: =?UTF-8?B?5p2o5pSA?=

Date: Tue, 27 Oct 2026 23:41:45 +0800 (GMT+08:00)

X-WM-Tid: 0aa17e064f340111kunm88c721b4ed837

DKIM-Signature: a=rsa-sha256;

b=Uc2Lh1YWbFVyfh+LxBJOdQ5m6dJTv4iHEVjoIxWXPFuLglVk2mqnKenI7ep5y/zWI+VZoTN5wLiP0LJAM8Lu13NofI78TVwGUUdP82PkCaF1lOVCGU9ApCe07KgrVqz8dhCfJL/AsH+fwMkdJ5ZrlM+SHOqVHj7oqRGbelvbZ/Y=; s=default; c=relaxed/relaxed; d=svoov.cn; v=1;

bh=zHJvcoSv52L3M9+tYZxSSA/ONkspOwb+L9ubMxVG08I=;

h=date:mime-version:list-unsubscribe:subject:message-id:list-unsubscribe-post:from;

Message-ID:

Hi Sales,

Please see the attached video of our this facial cleansing massage brush. Let's confirm the order soon?

Look forward to hearing from you.

Have a nice day.

Thanks,

Your Kero

ISO9001,BSCI approved Factory

CE & ROHS & FCC ,FDA CLASS 1 approved products

Shenzhen Svoov Technology Industrial Co.,ltd

Shenzhen Mebao Intelligent Technology Co.,Ltd

Add: 2nd Floor,Melwang Industrlal Park, No.18, Third Industrlal Zone, Shanmen Communlty, Yanluo Street, Bao'an District, Shenzhen , China

Website: www.svoov.cn

Mob.:18129843651

whatsapp.:18129843651

Your professional manufacturer of beauty care device

Categories: Chinese Phish Spam

0 Comments

Geek Squad phish from Google Gmail
Posted by Dave Yadallee on Tuesday, October 27. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 08:40:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLiM0-000000004HO-0PLX

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 08:40:44 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 08:40:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f173.google.com ([209.85.215.173]:54456)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLhdj-00000000Jgt-0rIn

for doctor@nl2k.ab.ca;

Tue, 27 Oct 2026 07:55:01 -0600

Received: by mail-pg1-f173.google.com with SMTP id 41be03b00d2f7-cd60c5da24cso2327258a12.0

for ; Tue, 27 Oct 2026 06:54:05 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1793109239; x=1793714039; darn=nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=PdC1S2RASnP1cCAbxJ3Z1xjKEPKGe7R1KYzzhMGq0/Y=;

b=LaAoFxf7Wov+U0bEmDpTlMC9uFNW8MzoMNo68byOCXCnU61u7928GJiA5tkwiF+4tk

JrNiTMqB7zaawF717vCkkE3BCTYAuXibm8BzymLoCpTvOFL6atYVAjuBMRgdduyff4Re

T8TWCnJwYCXNOp3wJ92LPgkDiT41p9QBNxBsXUoSUxvMb43RDYX051VlJoIRE7A5rHL2

VI06JRHMm+5henOklVXPYqzonq4wUc1YzPQYIzA9r9LZ+S1//4parItH6FYOafWW3LQw

/627eCsvHl2ioKzQvRkaQ3NY961riMcrHsaxNsOjw1KjtoQ3Gc8zHcn/bBHTYNU2qcu1

eBEA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793109239; x=1793714039;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=PdC1S2RASnP1cCAbxJ3Z1xjKEPKGe7R1KYzzhMGq0/Y=;

b=Uj3Z4KR9hcVbeT8LeEZzCV+YRPZuMh218Axf1FVJRWnJd9nbPku3lNC0ZaCI0Fr1AY

QzmHAC1IeYxF8DpBOCvTyAjllbv88bh+3+NMU3oy2JzGuFUFyUmZ171JFQ5CD5cQHGXG

WyUd5T2Bm3wRBQO63RxKeU0wOpy7yjunscoA0kQXA8PfoFv5rJVRkIZZTmbQ2u3A+nQo

hVhWKb54WwzSbzDMZcrwshwURvz1lQArA1kYzKn+KKDgIJyAUl6jKOhimUi5cv+wzxcE

YG/ZsR1CbSjzk9e/6aRK7ah9bu9IV4gdMWWn/BPHMpNoy1ccMzA72Fbz5eeU4Vc/mROF

Whow==

X-Gm-Message-State: AFq9FYIe1VKN9Z8mhSF7YPWdu4E3w5NqJ+76RyPaL0UuoZrCF97hI2G+

KFasVbCY/LbuEgjPpwOkeFBJlK6XpDmpM9Dyc2HvF4Wppv6unw8jcUW3AvVryoRxX+jOzA==

X-Gm-Gg: AYBFou10YU1Kg3oNx+tcIZ6hL5wxWazJEmHCPGJjqB/ww1Jd5bjMZ3/tvEnUOfGpLqh

dVq2bnCUe+XYZx1KRcO2XGpiKhZW8pKDhshlzX5i/8uVmhR9JkhwIBW1QGhLKJb6PeiB+Mm8Nxo

6WimA3cj9OuKMBKdZ66Ed0H9qG3omQ0pAzd976VQEs5U4LM5daOSXWeQSHhfbmQMnh60K46kdsZ

w4jJ5ccvO//jdFB5yiugOZrgw0Pl/dRmRERvnHjwubZMMmW0eSizOdA5xK7tWMwhFa0syfMNWL0

Vm8jGbIOt0676e4ekMvXn0gwclvaCk55MeMpwr10lxu4TbIXscqwDh0hvx2URkmuOJl7LVBAXRf

3XhzhUWK3kEtHNJo3vEG8JqzXkuEYAe3fOpDYm8cXMLaLU5iZc+hHY4wx9ZG6WFhO9tv5sFrwjN

irQWt8wpdeBvTdreOWdg0a20h/oCPW7CYlPBx2zTFV8SCKHeODGHbRz2/p89uC8XB+u39WI9XJG

9lyj2NP8ZYpzOSZg+7LCe5HLOJk/i3lZhxpFFkHigiEIK9IF3THiZauU+4l9VXOZqMr9JJ5c2vY

TI+kF5pHm5jo6OndP0ef

X-Received: by 2002:a05:6a21:ed0d:b0:3e2:ac98:68ab with SMTP id adf61e73a8af0-3e7cd59e425mr8331003637.54.1793109238991;

Tue, 27 Oct 2026 06:53:58 -0700 (PDT)

Received: from [172.22.49.100] ([43.156.168.212])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm2836645a12.14.2026.10.27.06.53.57

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 27 Oct 2026 06:53:58 -0700 (PDT)

Message-ID: <6ae0acf6.1bd81992.23d6a0.a7f5@mx.google.com>

Date: Tue, 27 Oct 2026 06:53:58 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============3078134093395888820=="

MIME-Version: 1.0

to: Doctor

from: Doctor

subject: Order processing details for Receipt (46N16KQG)

Importance: normal

Priority: normal

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Geek Squad Dear Doctor,

Content analysis details: (5.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.173 listed in dnsbl.ahbl.org]

[209.85.215.173 listed in dnsbl.ahbl.org]

[209.85.215.173 listed in dnsbl.ahbl.org]

[209.85.215.173 listed in dnsbl.ahbl.org]

[43.156.168.212 listed in dnsbl.ahbl.org]

[43.156.168.212 listed in dnsbl.ahbl.org]

[43.156.168.212 listed in dnsbl.ahbl.org]

[43.156.168.212 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.173 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[coulibalybouraima92(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[coulibalybouraima92(at)gmail.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.173 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.173 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.173 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_MXG_LOWER_HDR_SPAM Lower case header spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.9 URI_PHISH Phishing using web form

Subject: {SPAM?} Order processing details for Receipt (46N16KQG)

--===============3078134093395888820==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

Geek Squad

Dear Doctor,

This is an automated confirmation regarding the upcoming status of your active Geek Squad membership. Below is a summary of the account details and upcoming service schedule registered under your profile.

Receipt Date: Tuesday, October 27, 2026
Receipt No.: 46N16KQG
Token ID: 121499757-340ILP
Service Plan: GeekSquad Advanced Threat Protection
Service Term: Four Years
Renewal Amount: USD398.15

The information above represents the active preferences linked to your account. Standard processing will apply in accordance with your stored billing preferences and account settings.

If you need to adjust your subscription preferences, update payment details, or request account assistance, please reach out directly to the GeekSquad Support Team at (863)-409 8880.

Please note: Account administration and subscription services are managed exclusively through our dedicated online and telephone support channels. Physical storefronts are unable to modify account records.

Yours always,
Geek Squad Holdings
Service Support: (863)-409 8880

(c) 2026 Company, LLC. All rights reserved.

--===============3078134093395888820==--

Categories: Google Gmail Spam, Phish

0 Comments

Web/SEO/App spam from Google Gmail
Posted by Dave Yadallee on Tuesday, October 27. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 08:40:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLiLe-000000004Fz-25e7

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 08:40:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 08:40:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f197.google.com ([209.85.167.197]:56638)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLh0r-00000000GVv-0zf6

for sales@nk.ca;

Tue, 27 Oct 2026 07:14:51 -0600

Received: by mail-oi1-f197.google.com with SMTP id 5614622812f47-4ea2c058e67so6569800b6e.1

for ; Tue, 27 Oct 2026 06:13:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webandappdevelopments-com.20251104.gappssmtp.com; s=20251104; t=1793106829; x=1793711629; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=QtwfzxP94eW3D6lni5s1mGiSKGztN/zzaeUkrguBKZY=;

b=UG4t3h1P1XS6Ia176Swb2jbKySJjo3FXnC2glTR1Br2NN0Rznzm3sOZtr4Hcq9No0c

jA7U3ZTYogNcq+h+88+ZGRrn1988mluxbqlOWFxUcu+LugdtOfdXl9c4b2xElh9QMWMQ

tbf44irqi9WFflRQUl/eNgD++IQRvCrqJ7oTtHmkG5RmQhVUCgbbft0rPQtose/62Lra

kJ0SoACuGHjY2EVqMSQaALSaKvOEUnO1CrBTrnEtnPvg0vEsBypvZvY7p7P0cMJ5kk4U

FxzPSzDNVxAUQvLpUe+oiWHl1cOfQdOLvbWF8QopQ6eBCmOIk0al22xU7fgw23SMn8Sg

GJ2g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793106829; x=1793711629;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=QtwfzxP94eW3D6lni5s1mGiSKGztN/zzaeUkrguBKZY=;

b=SUbF/IRO48tQRqMqsiFlw8bF7ORFzKC32bnE/Z+mDYH1nlresQjuEMKr8HZPu8ZEN9

BzMeqSMJKLmAv+oW0whL1/dn1M+kRwU2r9hpPuZJUBb+nBNmGoON3/bu3+818xuRjj7i

UZguorSN4f1xpP68sCcb6Sx9umOLx54qvFzgD9RdI9z4mqZyPCrzNDF6ABksetGDpxHM

KT4+V0TNi8HMG68UDmrmGNToDHWIjBZe12QH+enjYBzNQhI5KltAoaqgVm2rQjEgKIwK

XRYdjodXMv4uCMnwoW9rhdGg9f/guSG7i5Xz/POsBx+DSpTPEI/FUdz5cULLmsQ8T0pb

gRaw==

X-Gm-Message-State: AFq9FYJ5vfDHa6GpTCqxrKaevv8zgrUhokmBql9jmCqj+8MzgIhe8TKe

oxlvPcl+PtLk2tlT3NV5D6JwCjBCJoZZCluz5xote1DrrWXyopZB+nvCSFf0ZsUaVuFLnBt0Yvq

FXfFXZfLTTRwbjJBOc0ytyA==

MIME-Version: 1.0

X-Received: by 2002:a53:ac98:0:b0:679:b50e:94 with SMTP id 956f58d0204a3-67a454363fcmr5603841d50.60.1793106487219;

Tue, 27 Oct 2026 06:08:07 -0700 (PDT)

Message-ID:

Date: Tue, 27 Oct 2026 13:08:07 +0000

Subject: www.nk.ca

From: skylar@webandappdevelopments.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000373b4c065ed22366"

--000000000000373b4c065ed22366

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Hi,

While looking at www.nk.ca, I noted a few potential improvements to content

structure, page speed, and visitor journeys.

Can I share a few practical ideas with you?

Thank you!

--000000000000373b4c065ed22366

Content-Type: text/html; charset="UTF-8"

Hi,

While looking at www.nk.ca, I noted a few potential improvements to content structure, page speed, and visitor journeys.

Can I share a few practical ideas with you?

Thank you!

--000000000000373b4c065ed22366--

Categories: Google Gmail Spam

0 Comments

Chinese products spam
Posted by Dave Yadallee on Tuesday, October 27. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 08:40:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLiLR-000000004F6-2OvD

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 08:40:09 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 08:40:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.74.211] (port=33503 helo=smtp74-211.mmglsmd.net)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLgo1-00000000FTO-1F20

for doctor@nl2k.ab.ca;

Tue, 27 Oct 2026 07:01:40 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.shinestarsteel.com; i=@hn.shinestarsteel.com;

q=dns/txt; s=umail; t=1793106031; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : list-unsubscribe : subject : from : date;

bh=k+Ir9hUEypO4RVrAySFJ3vDcBhSYYaH4/ZNruyEESNM=;

b=fqjch/kDf70YhpC/VEgohVuqvX1XwHtwBvX5IxEHDMNv7X0BMMlWElAu

D8I1q6f8g75hqm0b/5BNmH0jsM9jFeGBqd/FJsUwU6jPvxXjqqRaliig9P

yqoRYqSwl7Katx7W5KJaWEhv76eTdDB4nF5/Y2yxyGgCFIm7BZky4aTHY=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.shinestarsteel.com (Postfix) with ESMTP id iAgevNXMVCtL

for ; Tue, 27 Oct 2026 21:00:12 +0800

Content-Type: multipart/mixed; boundary="===============7548147829238471977=="

MIME-Version: 1.0

Message-Id: <20261027210012.01145-{13490:20261027155415-13490-57}-0072589@hn.shinestarsteel.com>

Reply-to: christy@threewaysteel.com

Subject: =?utf-8?q?Re_=3A_Steel_Structure_Supplier?=

From: christy@hn.shinestarsteel.com

To: doctor

Date: Tue, 27 Oct 2026 21:00:12 +0800

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Mail-ID: 6ae07639e1382308adcc8345

X-Spam_score: 12.1

X-Spam_score_int: 121

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Manager , Good day .This is Christy from Threeway Steel

in China. We are the steel pipe manufacturer since 1993. Not only we can

supply for the steel pipes & fittings & flanges directly , but also can supply

for the steel fabrications .

Content analysis details: (12.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.74.211 listed in dnsbl.ahbl.org]

[160.124.74.211 listed in dnsbl.ahbl.org]

[160.124.74.211 listed in dnsbl.ahbl.org]

[160.124.74.211 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.74.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.74.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.74.211 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.74.211 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: hn.shinestarsteel.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: shinestarsteel.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.124.74.211 listed in bl.score.senderscore.com]

0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist

[URI: ns4.dnsv2.com/101.227.168.55]

[URI: ns3.dnsv2.com/125.94.59.155]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?q?Re_=3A_Steel_Structure_Supplier?=

Dear Manager ,

Good day .This is Christy from Threeway Steel in China. We are the steel pipe manufacturer since 1993.

Not only we can supply for the steel pipes & fittings & flanges directly , but also can supply for the steel fabrications .

We can do any steel fabrications according to your drawing .

Any third party inspection and flexible payment terms Can be Accepted .

Hope Christy could have a new chance to assist your side working !

Best Regards,

Christy

Oversea Business Dpet |Carbon /Stainless Steel Division

Threeway Steel Co.,Ltd / Carbon Steel Manufacturer 30 years

Office:(86)731-88727983 | Skype ID: threeway_steel@outlook.com

Fax:(86)731-88678578 | Mobile /Whatsapp : (86)137-2386-9367

Email: christy@srtsteelpipe.com ; christy@threewaysteel.com

Categories: Chinese Phish Spam

0 Comments

Meta Ads phish from Google Gmail
Posted by Dave Yadallee on Tuesday, October 27. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 08:40:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLiLL-000000004Ed-2EWF

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 08:40:03 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 08:40:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl2-f8.google.com ([74.125.229.136]:44808)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLgZB-00000000Dps-2XTp

for sales@nk.ca;

Tue, 27 Oct 2026 06:46:16 -0600

Received: by mail-dl2-f8.google.com with SMTP id a92af1059eb24-1379d236149so1419243c88.1

for ; Tue, 27 Oct 2026 05:45:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=n-tinhochay-org.20251104.gappssmtp.com; s=20251104; t=1793105113; x=1793709913; darn=nk.ca;

h=content-type:mime-version:date:subject:to:from:reply-to:message-id

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=HSXWw8Bp/z1fD9yN9dwkSEnjlFnpkv/r3jVU6YGNTkg=;

b=OEEL9cUrGNpHM+hwzWzQn0Yp9qse6+ffnbJEjmBa6LzlY77ouxumHAlaGFEpghRXfP

rqIbsGv75hCuKlvp9agXezrGtsIRcNvFUsmYA8jgQoz9R1y5DhLJuvxKA5anxDGXs/X/

9GN55uJEvgvW418rFBptTYgyymYwoJIgT2RBitf/CXAa7qDtyxBIfPpfnihpDVna1RCe

ke6hirdfCOlGxGefD5Nak3Iaa8vhm1j3SAyelkB8NBwAr4ovYkPtxlrSf88mS9jsI8Z9

nr4pm1ohNPHRFueK3Y6J7Z4Qu1EwGb9baSiBQhDBDdwbQiTgrXuEMDE1aO2pshOSiiDl

bMDQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793105113; x=1793709913;

h=content-type:mime-version:date:subject:to:from:reply-to:message-id

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=HSXWw8Bp/z1fD9yN9dwkSEnjlFnpkv/r3jVU6YGNTkg=;

b=setLeeNkCMkOxndHH0w7uCDFD88C3IUgRDFc0V7WLgB4aLqCKiDpUB2EUQJ+iA7mme

SDH1vLH/PbLo8b0SW18+oDDKEXG4UoE6tJayXpZI+XhzNv/OeVHXZ3FHs3yFTahua4Rs

kgXCe+OlqbBiQP4Dg5WV9ZO49wIXZ49QX0TdNiD6V7ftPFMJ7o8Q9uBZ8/5BvQldn/1w

5oinAspOvHAmhzJd+QpkHznIKTQR9ekd6Gf31pVkRUEisJ97GL4Aiq4saS+yDS8e0DuD

FKsyr1MYvF3JrqUWr54WNrj3sF8jtzkhyhFL8QaCqK3uMH2iIIBbGPUFMennHKP0Fvr5

mJ4g==

X-Gm-Message-State: AFq9FYKzYs6pMOEJGw3Qnna3RA/v15PAlarnNbBHeP2/kYxpAaOcJcyA

wu/aCh9LHSuyWO01Y56z+FFIbFF8FdsNME+2hBuQCU7tXxtBK3KqyYGmTAk3jN/Mfd663odoO3X

rSxNarYgc+g==

X-Gm-Gg: AYBFou1DQwqTSgm7iel5R57E5W9v+7XN7ukA+Sb3IPBowbx+WNA1HmejwJDuQ2wCS87

S/IIJAM1kr+Mm7ubPbEmi/QPU6LQ5o0F2t0ktrgCQ63eDNaY3aBz/GwSV+KTf+UOuc1hgxP6gs1

eg38/fl7iymwmIyBw4EhduQXPSfE7c7ASMGOm57WGrSr3ksVRUCW1gREBvWZB/YQnoIvVPjWFTA

sdH2T6eJZ9s1rMvmdOomkPuxt951y7sTHRP1mKbLkbo1WvTdLlj0qa8l6/xDgg6rO5QHLuaqW2Z

SYM/qGE7xUt0fSI9kyqumWGI51rqF0wy8fj75cQ4S7P4UgLw3zf1y0h5jViwIUgro44qORs8MC4

PzKcm3sv9kmNDIAfv3zqNFirrqhg+fOP7Tlxjllrl/BvXsT2ehkarr1vvcuezdWoJ4jGnQ2+KXP

gHk+zHhEbZ90PcYLy4i41NA/X6tBx4fDCC++Loxs6MoW7c7CNSuqJapuJZUPBkom3GMQemrnSpw

tbIL/GNCX7sPo7cMiW/jQOCd7k7LtIg9dw41wpxzfeo8AD77bk7V1fvwxlFYG+tZzrkHlHJZ85L

xA==

X-Received: by 2002:a05:7022:1509:b0:16c:3408:760b with SMTP id a92af1059eb24-19937306c70mr14505525c88.32.1793105113110;

Tue, 27 Oct 2026 05:45:13 -0700 (PDT)

Received: from desktop-g9fbspf.domain ([42.118.130.103])

by smtp.gmail.com with ESMTPSA id a92af1059eb24-198a0d98660sm37447722c88.9.2026.10.27.05.45.11

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 27 Oct 2026 05:45:12 -0700 (PDT)

Message-ID:

Reply-To: <66.14697@wjd.ac.th>

From: MetaAdsSupport

To:

Subject: Copyright Concern Regarding Your Page Content

Date: Tue, 27 Oct 2026 19:45:08 +0700

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1be565dab62f78aaa8c30db500028fc0"

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Policy Violation Notice Hello Netknow Internet Service, We

received a report that content in an advertisement on your page may violate

our copyright policy. After reviewing the report, we found that [...]

Content analysis details: (5.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.229.136 listed in dnsbl.ahbl.org]

[74.125.229.136 listed in dnsbl.ahbl.org]

[74.125.229.136 listed in dnsbl.ahbl.org]

[74.125.229.136 listed in dnsbl.ahbl.org]

[42.118.130.103 listed in dnsbl.ahbl.org]

[42.118.130.103 listed in dnsbl.ahbl.org]

[42.118.130.103 listed in dnsbl.ahbl.org]

[42.118.130.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.229.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.229.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.229.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.229.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[42.118.130.103 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[74.125.229.136 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.229.136 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.229.136 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.229.136 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Copyright Concern Regarding Your Page Content

This is a multi-part message in MIME format.

--1be565dab62f78aaa8c30db500028fc0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

=0D=0APolicy Violation Notice =0D=0AHello Netknow Internet Service,=0D=0AWe=

received a report that content in an advertisement on your page may violat=

e our copyright policy. After reviewing the report, we found that you may h=

ave used intellectual property without permission from a third party.=0D=0A=

=0D=0AViolation Details=0D=0APage: Netknow Internet Service=0D=0A=0D=0AUsin=

g copyrighted content (images, videos, or audio) without permission.=0D=0AC=

reating content that may be confused with another brand.=0D=0ACopying or sh=

aring content without a license.=0D=0ANote: You must address this issue wit=

hin 24 hours of receiving this notice. Otherwise, your account or page Netk=

now Internet Service may be permanently disabled.=0D=0ASubmit an Appeal=0D=

=0A=0D=0AIf you believe this notice was sent in error, submit an appeal for=

review. However, if the issue is not addressed by the deadline, your accou=

nt may be permanently disabled.=0D=0AIf you need further assistance, please=

contact us.=0D=0A=0D=0A=0D=0ASincerely,=0D=0AJenaSupport Team

--1be565dab62f78aaa8c30db500028fc0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

; font-family: Arial, sans-serif; border-right: #ddd 1px solid; background:=

#fff; border-bottom: #ddd 1px solid; color: #1c1e21; padding-bottom: 24px;=

padding-top: 24px; padding-left: 24px; border-left: #ddd 1px solid; margin=

: auto; line-height: 1.6; padding-right: 24px; border-radius: 8px">=0D=0A
1 style=3D"font-size: 18px; border-bottom: #ddd 1px solid; font-weight: 600=

; color: #1c1e21; padding-bottom: 16px; text-align: left; padding-top: 16px=

; padding-left: 16px; margin: -24px -24px 20px; padding-right: 16px; backgr=

ound-color: #f5f6f7; border-radius: 8px 8px 0 0">Policy Violation Notice
h1>=0D=0A
Hello Netknow Internet Service,
=0D=0A
We received a repor=

t that content in an advertisement on your page may violate our copyright p=

olicy. After reviewing the report, we found that you may have used intellec=

tual property without permission from a third party.
=0D=0A

"border-top: #ddd 1px solid; border-right: #ddd 1px solid; border-bottom: #=

ddd 1px solid; padding-bottom: 16px; padding-top: 16px; padding-left: 16px;=

border-left: #ddd 1px solid; margin: 20px 0px; padding-right: 16px; backgr=

ound-color: #f9f9f9; border-radius: 6px">=0D=0A

; font-weight: 600; color: #1c1e21; margin: 0px 0px 12px">Violation Details=

=0D=0A
Page: Netknow Internet Service
=0D=0A

style=3D"padding-left: 20px; margin: 12px 0px">=0D=0A
Using copyrighted =

content (images, videos, or audio) without permission.
=0D=0A
Creati=

ng content that may be confused with another brand.
=0D=0A
Copying o=

r sharing content without a license.
=0D=0A
Note:<=

/strong> You must address this issue within 24 hours of re=

ceiving this notice. Otherwise, your account or page Netknow Internet Servi=

ce may be permanently disabled.
=0D=0A

t-align: center; margin: 24px 0px">
tion: none; font-weight: bold; color: white; padding-bottom: 12px; padding-=

top: 12px; padding-left: 20px; display: inline-block; padding-right: 20px; =

background-color: #1877f2; border-radius: 6px" href=3D"https://bio.site/cde=

gwixhc">Submit an Appeal
=0D=0A

ding-bottom: 14px; padding-top: 14px; padding-left: 14px; border-left: #187=

7f2 4px solid; padding-right: 14px; background-color: #f1f6fb; border-radiu=

s: 6px">=0D=0A
If you believe this notice was sent in error, submit an ap=

peal for review. However, if the issue is not addressed by the deadline, yo=

ur account may be permanently disabled.
=0D=0A
If you need furth=

er assistance, please contact us.
=0D=0A

x solid; border-right: medium none; border-bottom: medium none; border-left=

: medium none; margin: 24px 0px" />=0D=0A

color: #65676b; text-align: left">=0D=0A
Sincerely,
=

=0D=0A
Jena
Support Team

--1be565dab62f78aaa8c30db500028fc0--

Categories: Google Gmail Spam, Phish

0 Comments

Web//SEO/App spam from Google Gmail
Posted by Dave Yadallee on Tuesday, October 27. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 08:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLiL9-000000004Cr-2akr

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 08:39:51 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 08:39:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f180.google.com ([209.85.215.180]:47548)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLg43-00000000AmF-0Sd0

for sales@nk.ca;

Tue, 27 Oct 2026 06:14:05 -0600

Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-cc4aa0246b7so1726093a12.3

for ; Tue, 27 Oct 2026 05:13:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mindswebsolutiion-com.20251104.gappssmtp.com; s=20251104; t=1793103183; x=1793707983; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=WUZtj/koPLpYC+faVqVzkk7ln9Gu9VzSgP7r4hS7I9Q=;

b=sAl825XOShueGAK8RDoGifqfvDedkBrTjFpMx3mJh3Ha+x+OROVjgrW9uy+pvD9rP6

1fYWuDWfSKFSGtr5GZzLBOboh0EB7KpT499B2vBHxlhGqjLESfNJrHaqfofVH7Bt5lhE

3Cdin/pqsTN3gPQpMbVG34QbETKFEr6zXvSMzu2FMvcG1YjaxJdtmGbraLSTdOQGDCy4

OL4B6rj+ulYTX5VXGYdPhkAu9MML3ZJt2nzds4+j8NXtIESVRo5i4zoX4TGv6VUDjins

G/jwYiuinnian+IKXg63uEHSj5JRDEhOWaLs9XIDS4kOMsGJJazgbdv2sz2d5C4TP42N

8HIA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793103183; x=1793707983;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=WUZtj/koPLpYC+faVqVzkk7ln9Gu9VzSgP7r4hS7I9Q=;

b=X2UyzzWtH5EudORYbgWDdwM0A4g4hByI90yxNkP/MGtAdpkkyTCPr03/0wwhFbT+Ne

ptZkKU5PqjCEw7s+iyHLep21C0eRG3DdYouLVME3mS00F/d85L2zWW7IsUq3JoJqSvfk

9yugX+eZOmWaBVX49+Pw0rsyIAx1B7UPEoe///e63KcGpBVXJziYqWyWZNY7rvufGOjD

wqjkPd5DxAabopX9j1y2N73hvCmDiKW2XgCIQ3JrX3I6qkxfDrkXRF6+NfF5QYnI3nYX

Ul6q85asMAp52n929zxu0ctHQGkh472Bf39mPOjtyV6Tb7ZYopDFO0pmpzgU8zlwV0so

g69A==

X-Gm-Message-State: AFq9FYKE+F4B12+u/CwBOIULqYnAif6qrIt9ZKnCbyV/A4hATRVR8bnV

5FcG/wiGjth93FSRDnFJWk78kr0sLjSsXtOY1cJmid7h1Sxg+ReodUtHHEBTBnMTFhTufnkgIxy

iaY7rwv8=

X-Gm-Gg: AYBFou1qJRswC3Q2dkTBDq0CfYJ3lylSWlOeKtnsgG7RCpfkxsqcNbaL8WPhG9tROOh

Ojc46ts2QShdJEhlnTJ8RD4TYs9iu/nJoLehOkG6927xTe21WUYX1RB2z8LBDjZIlx8AgKwsfIQ

Rx9Rc9J6e+RUWrJMIJsWERog3A2KWtC+zR4HYJS8Zc5FP3HavEmhRsY9iNYY4gVplGeztZpimqR

Oh2pBzuaIi2niR5qvXq6UhAaBCmBHruQqGRcc6ShnJnovpA1HmFG3UmaXgc31enCRvMiowPfKUk

MMwGl+OfxaGZdaxOTxb39AVe2v4Vf1xd/E0jgmi7yl2SgwEqFUkwXBWjz5fngvPFIV2S+4POS6I

xHCtmaxpDrCj0brVB5NiGBg/M62D5hXHns2wNV2TklO62oas5xQJJuJKG59tujDJ3OSZeYfZJH3

JkWq2H+3f8O3aL8AcvBCasPs1SuvhxbqFn/JNEi0kxzLK3gmvN5+UTXjcSMR/gtdZy0zeS4CO6z

RfJauddKYU6Vh3QzIiqeAfSjmYMp40vTsj3tlDsbDDBV4OLDO27Qw3a8EYsNPS85fozRc6DcImf

GXrpCz2LXDffYSWB2WqpXsL3SZ8Q37OGUeLrwE6rKRMDe3fD

X-Received: by 2002:a17:90b:2e10:b0:3ac:7c52:faf6 with SMTP id 98e67ed59e1d1-3adea0b18dfmr7366198a91.1.1793103182838;

Tue, 27 Oct 2026 05:13:02 -0700 (PDT)

Received: from [127.0.0.1] ([103.106.232.8])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2eae6b7a216sm8173385ad.16.2026.10.27.05.13.01

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 27 Oct 2026 05:13:02 -0700 (PDT)

From: Lindy

To: sales@nk.ca

Subject: SEO Audit - www.nk.ca?

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Tue, 27 Oct 2026 12:13:01 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, Want to get your business on the 1st page of Google?

We specialize in grow your online presence.

Content analysis details: (8.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.180 listed in dnsbl.ahbl.org]

[209.85.215.180 listed in dnsbl.ahbl.org]

[209.85.215.180 listed in dnsbl.ahbl.org]

[209.85.215.180 listed in dnsbl.ahbl.org]

[103.106.232.8 listed in dnsbl.ahbl.org]

[103.106.232.8 listed in dnsbl.ahbl.org]

[103.106.232.8 listed in dnsbl.ahbl.org]

[103.106.232.8 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.180 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.180 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.106.232.8 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.180 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.180 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.180 listed in bl.score.senderscore.com]

Subject: {SPAM?} SEO Audit - www.nk.ca?

Hi,
Want to get your business on the 1st page of Google? We =

specialize in grow your online presence.
We offer affordable packages=

and proven results.
Contact us today for a cost and =

proposal
Sincerely,
Lindy,

Categories: Google Gmail Spam

0 Comments

Page 1362 of 1362, totaling 20430 entries

previous page

No entries to print