Grant opportunities spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 15:17:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vueE2-00000000OAj-2Z2o

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 15:16:22 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 15:16:22 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx1.syban.ca ([216.234.184.14]:23594)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vucan-00000000ITI-01bq

for doctor@nl2k.ab.ca;

Mon, 23 Feb 2026 13:31:53 -0700

Received: from mx1.syban.ca (mx1.syban.ca [127.0.0.1])

by mx1.syban.ca (Postfix) with ESMTP id 4fKXYR3vV0zFM91

for ; Mon, 23 Feb 2026 13:30:51 -0700 (MST)

Authentication-Results: mx1.syban.ca (amavis); dkim=pass (2048-bit key)

reason="pass (just generated, assumed good)" header.d=syban.ca

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=syban.ca; h=

content-transfer-encoding:content-type:mime-version:message-id

:date:subject:to:from:reply-to; s=dkim; t=1771878651; x=

1774470652; bh=Y9DyL+lp50Df6naPB+Gv6drAYHuc787C1s596EoUbNM=; b=q

reTQcts2iZe2IMJrJtwQA80jRup93R1xyupYzW2+Tn1W5OX5U6m8tqbosiSk4DSX

v7Cu9E6S57foUIr571x4MjH6+WeZ/k88p5DQcjjSVXhGdWosyaRrmHrLSFcaz532

m9525keD7BGiQTTtBauX33rMKYU5emc8Y7WqPzrdyoX4RZuJn+uL3YRgjmWPiWB2

dTLx79y0EVe6O5UiRuLkcdlCjvt6YFmB18RQYFr/ZB6+Qzcc9SwRwTg2IPmZz7dV

PMR/Hp76nJH0tgQD9ufGc+e7P4oCfHcqZJYxkTXp4psjGNWyLWxDhg2vXTdnp1Gw

2Y2M+bgyl11GMj6KligpA==

X-Virus-Scanned: amavis at mx1.syban.ca

Received: from mx1.syban.ca ([127.0.0.1])

by mx1.syban.ca (mx1.syban.ca [127.0.0.1]) (amavis, port 10026) with ESMTP

id hakSuLQlPhdl for ;

Mon, 23 Feb 2026 13:30:51 -0700 (MST)

Received: from ec2-54-226-129-179.compute-1.amazonaws.com (ec2-54-226-129-179.compute-1.amazonaws.com [54.226.129.179])

by mx1.syban.ca (Postfix) with ESMTPSA id 4fKXYQ5hvNzFM90

for ; Mon, 23 Feb 2026 13:30:50 -0700 (MST)

Reply-To: bizinfo@summitadps.com

From: NOTICE OF GRANT OPPORTUNITY

To: doctor@nl2k.ab.ca

Subject: GRANT

Date: 23 Feb 2026 20:30:49 +0000

Message-ID: <20260223190222.CE9522DD6E91819C@syban.net>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: In light of the global economic downturn, WelCome Trust is

providing grant opportunities to support individuals and households whose

businesses have been adversely affected. These grants are designed [...]



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

[54.226.129.179 listed in dnsbl.ahbl.org]

[54.226.129.179 listed in dnsbl.ahbl.org]

[54.226.129.179 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

Subject: {SPAM?} GRANT















In light of the global economic downturn, WelCome Trust is providing gra=

nt opportunities to support individuals and households whose businesses hav=

e been adversely affected. These grants are designed to aid in business rec=

overy, safeguard livelihoods, and bolster resilience. If your business has =

faced losses or disruptions, we encourage you to consider applying. For det=

ails on eligibility requirements and application processes, please contact =

Summit Advisory Partners by return mail.



Kind regards,
Barbara Kołodziej.









Cloud phishing from Google Gmail Part 3

Posted by Dave Yadallee on
.consequences li::before {

content: "=E2=9A=A0=EF=B8=8F";

font-size: 20px;

filter: drop-shadow(0 2px 2px #b33);

}



/ signature /

.signature {

margin: 20px 0 28px 0;

}



.signature p {

font-size: 16px;

color: #4e2e2e;

}



.signature .team {

font-weight: 800;

color: #8b1a1a;

margin-top: 12px;

font-size: 18px;

}



/ CTA button =E2=80=94 aggressive red /

.cta-block {

background: #b71c1c;

border-radius: 100px;

display: inline-block;

width: auto;

margin: 12px 0 20px 0;

box-shadow: 0 14px 24px -8px #7a2020;

transition: all 0.2s;

border: 1px solid #ffb7b7;

}



.cta-block a {

display: flex;

align-items: center;

gap: 20px;

padding: 18px 42px 18px 36px;

text-decoration: none;

color: white;

font-weight: 700;

font-size: 20px;

letter-spacing: 0.3px;

text-shadow: 0 2px 4px #5f0000;

}



.cta-block a span {

background: #ffffff;

color: #b71c1c;

padding: 6px 20px;

border-radius: 40px;

font-size: 16px;

font-weight: 800;

box-shadow: inset 0 -2px 0 #aaa;

}



.cta-block:hover {

background: #a11515;

transform: scale(1.01);

box-shadow: 0 18px 28px -6px #a14040;

}



/ footer /

.footer-links {

border-top: 2px solid #f0c0c0;

padding-top: 18px;

margin-top: 12px;

display: flex;

flex-wrap: wrap;

justify-content: space-between;

align-items: center;

color: #973d3d;

font-size: 14px;

}



.links a {

color: #a13232;

text-decoration: none;

margin-right: 22px;

font-weight: 600;

}



.links a:hover {

text-decoration: underline;

color: #c10000;

}



.copyright {

color: #ad5a5a;

}



hr {

border: none;

border-top: 3px dotted #d88;

margin: 16px 0 10px;

}



/ mobile /

@media (max-width: 650px) {

.alert-header {

flex-direction: column;

align-items: flex-start;

gap: 16px;

}

.usage-pill {

align-self: flex-start;

}

.account-detail {

flex-direction: column;

align-items: flex-start;

gap: 20px;

}

.plan-item {

gap: 24px;

}

.consequences ul {

grid-template-columns: 1fr;

}

.cta-block a {

padding: 15px 28px;

font-size: 18px;

flex-wrap: wrap;

justify-content: center;

}

}



Cloud phishing from Google Gmail Part 4

Posted by Dave Yadallee on














=E2=9A=A0=EF=B8=8F


CLOUD SECURITY =C2=B7 URGENT

DATA DELETION SEQUENCE =E2=80=94 ACTIVE














STORAGE LIMIT REACHED 100% FULL



Your cloud storage is currently at
r:#b71c1c;">100% capacity.
Uploads, backups, and synchronizatio=

n are restricted.




#ffcdcd; padding: 8px 16px; border-radius: 60px; color: #9f1b1b; font-weigh=

t: 600;">
x; border-radius: 30px; margin-right: 6px;">=E2=8F=B3 Don=E2=80=99t =

let years of memories disappear. Renew now
>.







0 GB


available of 500 GB
















Plan Type

Cloud Storage Plus





Current Status

=E2=9A=A0=EF=

=B8=8F EXPIRING SOON








-size: 14px; margin-right: 12px;">Final Date

February 24, 2026.
>











=E2=9B=94 WHAT HAPPENS IF YOU DON=E2=80=99T RENEW:





  • All photos and videos will be deleted


  • Contacts and calendar entries will be lost


  • Documents and app data will be removed


  • All device backups will be erased












Best regards,
Cloud Security Team
pan>











=F0=9F=94=A5 REACTIVATE STORAG=

E ACCESS Secure =E2=80=A2 Fast =E2=80=A2 Recommended








ont-weight: 500; border-left: 4px solid #e57373; padding-left: 16px;">This =

notification was sent to inform you of a critical storage issue.















Account =E2=80=A2
ref=3D"https://is.gd/g3xZUD">Support =E2=80=A2
/g3xZUD">Privacy =E2=80=A2 Unsubscribe=







=C2=A9 2026 Cloud Storage Services

















--000000000000a779fa064b830dcb--

Cloud phishing from Google Gmail Part 2

Posted by Dave Yadallee on









=3D1.0">

Cloud storage =C2=B7 urgent attention

















PayPal Phish from Google Gmail Part 2

Posted by Dave Yadallee on
--000000000000e2b2f5064b8250aa

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RGVhciBWYWx1ZWQgQ3VzdG9tZXIsIFdlIGFyZSBwbGVhc2VkIHRvIGluZm9ybSB5b3UgdGhhdCB5

b3VyIHJlY2VudCBCaXRjb2luICANCnB1cmNoYXNlIGZ1bmRlZCB0aHJvdWdoIHlvdXIgUGF5UGFs

IGFjY291bnQgaGFzIGJlZW4gY29tcGxldGVkIHN1Y2Nlc3NmdWxseSAgDQpvbiBGZWJydWFyeSAy

MywgMjAyNi4gT3JkZXIgUmVmZXJlbmNlOiBQUC0yMDI2LTY1ODMgQ3VzdG9tZXIgUmVmZXJlbmNl

OiAgDQpQQy03Mjg0OTEtR0ggQW1vdW50IFByb2Nlc3NlZDogJDg0OS4wMCBGdW5kaW5nIFNvdXJj

ZTogUGF5UGFsIEFjY291bnQgIA0KKOKAouKAojcyKSBTdGF0dXM6IFN1Y2Nlc3NmdWxseSBWZXJp

ZmllZCBUaGlzIGVtYWlsIHNlcnZlcyBhcyB5b3VyIG9mZmljaWFsICANCnJlY2VpcHQgYW5kIGNv

bmZpcm1hdGlvbiBvZiBwYXltZW50LiBLaW5kbHkga2VlcCB0aGlzIGRvY3VtZW50IGZvciBmdXR1

cmUgIA0KY29ycmVzcG9uZGVuY2Ugb3IgZmluYW5jaWFsIHJldmlldy4gU2hvdWxkIHlvdSBuZWVk

IGFzc2lzdGFuY2Ugb3Igd2lzaCB0byAgDQpkaXNjdXNzIHRoaXMgdHJhbnNhY3Rpb24sIHBsZWFz

ZSBjb250YWN0IEN1c3RvbWVyIFN1cHBvcnQgZGlyZWN0bHkgYXQgKzEgIA0KKDg1NikgODg2LTQy

NjEuIE5vdGljZSBpc3N1ZWQgb24gRmVicnVhcnkgMjMsIDIwMjYuIFN1cHBvcnQgQ29udGFjdDog

KzEgIA0KKDg1NikgODg2LTQyNjENCg0KT2ZmaWNpYWwgQmlsbGluZyBDb25maXJtYXRpb24gTm90

aWNlIOKAkyAkODQ5LjAwIEJpdGNvaW4gUHVyY2hhc2UgdmlhIFBheVBhbA0KVHVlc2RheSBGZWIg

MjQsIDIwMjYNCg0KDQoNCk9yZ2FuaXplcg0K4LiZ4Liy4Lii4LmE4Lie4LmC4Lij4LiI4LiZ4LmM

IOC4geC4sOC5hOC4iuC4ouC4p+C4h+C4qeC5jA0KMjE0MDJAdGhhbWFpLmFjLnRoDQoNCkd1ZXN0

cw0KKEd1ZXN0IGxpc3QgaGFzIGJlZW4gaGlkZGVuIGF0IG9yZ2FuaXplcidzIHJlcXVlc3QpDQoN

Cg==

--000000000000e2b2f5064b8250aa

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20

PayPal Phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 15:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vueDK-00000000O7d-37wG

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 15:15:38 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 15:15:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f202.google.com ([209.85.128.202]:58711)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <21402@thamai.ac.th>)

id 1vub6W-00000000AlN-2Lpb

for doctor@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 11:56:35 -0700

Received: by mail-yw1-f202.google.com with SMTP id 00721157ae682-79801df242bso67355907b3.1

for ; Mon, 23 Feb 2026 10:55:41 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1771872935; x=1772477735; darn=doctor.nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=m6aBSklg6UGwZKN2lSvlgZ4JE942pQAOYUls9DpMmfA=;

b=1y+ark5cDxXdlFuOhWdSHVQJZwUjzajidowExOrlBvQny3D+D1npR73Z5D2q7OwrfY

L1UozPRipjTg8UJw8mhJ50k5xEuVjLo3BtMsbg71Gc2weIso/JPeI2STKsKhK7eUOz+/

noTTtHlwYXsJBmY9BKi70FAJ0Ec0cR6+mbJArV2m9typMu+IqgOxXpXSWrFFvZKfZcE+

i3GWklDSP/cXvZC3RkXON//Ei+SQ4JNgiONq8rP9vnbD5mUs2Lo39V8oV2vTSiIuzbi1

nTk1aAqBa48CxbmnSBj1x95UQLLqhBVPm4Mgn6OTFpsXXOs5bxV19dhvUXJMeuo57aVV

lSTA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thamai-ac-th.20230601.gappssmtp.com; s=20230601; t=1771872935; x=1772477735; darn=doctor.nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=m6aBSklg6UGwZKN2lSvlgZ4JE942pQAOYUls9DpMmfA=;

b=YT9uyEvcus/aEjcK8uy1GseI0ucs0CuiWbH6Rf09qCpLf1kgDOErV2yhmlZ6IBEzHe

tBmjb4mDEpeMlBrIEYbI+HtyrCaa/5DRoGGo1nW3ln7v+ErAEruy8+6mPQLEY1niIqT3

8dOpjmw+bZDsSj43PZgY6uaM9sCIhgQoxiUDpDx5zirHfr3sGdCybdiZc03kThHP1e8e

0K4bBAJLu4Kc5E0rwAamhtAHQtd2tl+p4vgBsy9RW2jHhxfdhxUu6FDc7BxspMeRv3Ay

8OXFFuu0cPjatG/jdsuLZ98nu3VIE2TAk7HRk1YYurmf6u99PfVxOu33B7D9oDUqRmt9

VMEw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771872935; x=1772477735;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=m6aBSklg6UGwZKN2lSvlgZ4JE942pQAOYUls9DpMmfA=;

b=Yh9ttydLLJj9jhOtvHTpqcZhI0gtKINFMvzL6k11Q6h21/e6B9PzWRAm3JRuQaMf14

7EPdxj2dsOiSw8nDis8qBXm3SoWArnGngDyIa0WErA1MmKj1zQqFTW5ccV7sLsUmRs3F

FqKuQBORhuMlt7Ksu1ji2Vr0jqMokAyugny8lp1nEfmVZ3Elgb2g7v5KWgFn7NFvF6GK

VsrobiuKoHw2vbQ72NlXSdv3tE0o++4EFaeEkholTAtgAmp9vNT0bEhEt0M1XnWJAW1r

yZ7kKJiazzGRqrN4dZblYocaPOhCoctXz6hgBH7HeoAtJBfPUbIicThNxE9qKZi56Gc+

JYbw==

X-Forwarded-Encrypted: i=1; AJvYcCVTWlFFewAmbtSn8YuZovH2lTgUG+pj3f1HVarZ4OQbePeuY25l3I3bCJnW+bOHLc4sGKFZfbU=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxRivd9xSzf5RKm5f9HRAZcPw4/C9XoeKt/BvlgDbsVGv/r7We2

e+FGRVt0BzOcW7T0vEkUVWUxsT5QEnvm1GGGFaks/49yEbPjqlYZ6Yec/QkVEyOTlXBqTvLxlyW

Fz7y6VRCROsmeodL+WtsKtRYwy8cI1gWUURHp/9aMUI37xg==

MIME-Version: 1.0

X-Received: by 2002:a05:690c:c50d:b0:797:e4f4:729a with SMTP id

00721157ae682-79828cde14fmt95977687b3.3.1771872934908; Mon, 23 Feb 2026

10:55:34 -0800 (PST)

Reply-To: =?UTF-8?B?4LiZ4Liy4Lii4LmE4Lie4LmC4Lij4LiI4LiZ4LmMIOC4geC4sOC5hOC4iuC4ouC4pw==?=

=?UTF-8?B?4LiH4Lip4LmM?= <21402@thamai.ac.th>

Sender: Google Calendar

Message-ID:

Date: Mon, 23 Feb 2026 18:55:35 +0000

Subject: Official Billing Confirmation Notice - $849.00 Bitcoin Purchase via PayPal

From: =?UTF-8?B?4LiZ4Liy4Lii4LmE4Lie4LmC4Lij4LiI4LiZ4LmMIOC4geC4sOC5hOC4iuC4ouC4p+C4h+C4qQ==?=

=?UTF-8?B?4LmM?= <21402@thamai.ac.th>

Content-Type: multipart/alternative; boundary="000000000000e2b2f5064b8250aa"

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Valued Customer, We are pleased to inform you that your

recent Bitcoin purchase funded through your PayPal account has been completed

successfully on February 23, 2026. Order Reference: PP-2026-6 [...]



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

[209.85.128.202 listed in dnsbl.ahbl.org]

[209.85.128.202 listed in dnsbl.ahbl.org]

[209.85.128.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.202 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.202 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.202 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.202 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.202 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.202 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Official Billing Confirmation Notice - $849.00 Bitcoin Purchase via PayPal

Cloud phishing from Google Gmail Part 3

Posted by Dave Yadallee on














=E2=9A=A0=EF=B8=8F


CLOUD SECURITY =C2=B7 URGENT

DATA DELETION SEQUENCE =E2=80=94 ACTIVE














STORAGE LIMIT REACHED 100% FULL



Your cloud storage is currently at
r:#b71c1c;">100% capacity.
Uploads, backups, and synchronizatio=

n are restricted.




#ffcdcd; padding: 8px 16px; border-radius: 60px; color: #9f1b1b; font-weigh=

t: 600;">
x; border-radius: 30px; margin-right: 6px;">=E2=8F=B3 Don=E2=80=99t =

let years of memories disappear. Renew now
>.







0 GB


available of 500 GB
















Plan Type

Cloud Storage Plus





Current Status

=E2=9A=A0=EF=

=B8=8F EXPIRING SOON








-size: 14px; margin-right: 12px;">Final Date

February 22, 2026.
>











=E2=9B=94 WHAT HAPPENS IF YOU DON=E2=80=99T RENEW:





  • All photos and videos will be deleted


  • Contacts and calendar entries will be lost


  • Documents and app data will be removed


  • All device backups will be erased












Best regards,
Cloud Security Team
pan>











=F0=9F=94=A5 REACTIVATE STORAG=

E ACCESS Secure =E2=80=A2 Fast =E2=80=A2 Recommended








ont-weight: 500; border-left: 4px solid #e57373; padding-left: 16px;">This =

notification was sent to inform you of a critical storage issue.















Account =E2=80=A2
ref=3D"https://is.gd/sfbRtA">Support =E2=80=A2
/sfbRtA">Privacy =E2=80=A2 Unsubscribe=







=C2=A9 2026 Cloud Storage Services

















--000000000000481c67064b81f3cf--

Cloud phishing from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 15:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vueCw-00000000O6Y-0Gnn

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 15:15:14 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 15:15:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f71.google.com ([209.85.161.71]:44073)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuahE-000000009IA-3cRh

for sales@nk.ca;

Mon, 23 Feb 2026 11:30:24 -0700

Received: by mail-oo1-f71.google.com with SMTP id 006d021491bc7-679dcf1f680so3264859eaf.0

for ; Mon, 23 Feb 2026 10:29:30 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1771871365; x=1772476165; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=Zi6zgC8edmxVR269zIbEnrF325PN1I2s7BtGVVq9L5c=;

b=Do15HQfEv7ckFZBS1pieoL2tflx5MWIJaMdHkAQxEUWfk3rc0g0tn6lAJe1qwSGBk6

YoeqQM7Os5Ha9j3e8LXaB3d9HZpX7c+eWrQYHzXEkWd9KatbqwmmK1yWi5r2CiO6CPSV

OPLjTJ42NSfyflNixex9V+MehqaZC2KGzrx/IhJ3IVmsfJB/u7UIteyoRNRm/F78OVXw

Y+DdD+QmrvIu2a+F8/xNSBVIGiV587Qv1NAOqPhuUGRonboNxDTuTFFjK51DINaIwrmL

7RJ40tCFJrIeuJotUxKLQs/YcSyt/QGonbk1RfgBDW8krllLfoGIhO3wQ1OFfD2CHOEw

y49g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771871365; x=1772476165;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Zi6zgC8edmxVR269zIbEnrF325PN1I2s7BtGVVq9L5c=;

b=ffDxoJmeKQvPgnHifb+4eFkRjjvWF9X5Fr3Qphlvc7L5of8PBPUPFVkll2pILOKzes

IhY2EINgffSuzrgqtKFh38j6AczYYYw6S7ix0oXz63CXYlLhUsZfSGqVs4outhXyjcBd

MEwtth978W0ZpMXsMlnm8GMmrxCC0FIFLO4RG1T9pemgSnqDxNWV351ZcRiKmZtTEns4

h7XQpjk2anbvBWrak4nR9QAXxQCKrANPZJKe6MdZLVqhtkhOQxU2CWbTHaGFjz7Nqc+d

O3egNOFE59D583MWUJie+zX04Jy2MMk78wg9oKyhcXpdoIeSzzPI8f9L6iR0z+icld5+

qUAg==

X-Gm-Message-State: AOJu0YwPFqBE0dHCRPoWaKo9SjbrBE0NvOmVsKkQEem0uz2T+3d1J4Ny

LY1RZoAMCa4yv6/GHHObTyfK4yg8jJd3LJoIUAQrLCXEenquc5hc9FSkXmRoTK2/Z6NN3o8ALB9

pVLexODx3tQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:215:b0:662:fb4e:5f40 with SMTP id

006d021491bc7-679c44e3405mr5122376eaf.35.1771871364717; Mon, 23 Feb 2026

10:29:24 -0800 (PST)

Message-ID: <000000000000481c72064b81f3d2@google.com>

Date: Mon, 23 Feb 2026 18:29:24 +0000

Subject: Final Notice: 250GB Cloud Storage Renewal Failed

From: Account Security

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000481c67064b81f3cf"



--000000000000481c67064b81f3cf

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



4pqg77iPDQpDTE9VRCBTRUNVUklUWSDCtyBVUkdFTlQNCkRBVEEgREVMRVRJT04gU0VRVUVOQ0Ug

4oCUIEFDVElWRQ0KDQoNClNUT1JBR0UgTElNSVQgUkVBQ0hFRCAxMDAlIEZVTEwNCg0KWW91ciBj

bG91ZCBzdG9yYWdlIGlzIGN1cnJlbnRseSBhdCAxMDAlIGNhcGFjaXR5Lg0KVXBsb2FkcywgYmFj

a3VwcywgYW5kIHN5bmNocm9uaXphdGlvbiBhcmUgcmVzdHJpY3RlZC4NCg0K4o+zIERvbid0IGxl

dCB5ZWFycyBvZiBtZW1vcmllcyBkaXNhcHBlYXIuIFJlbmV3IG5vdy4NCg0KDQowIEdCDQoNCmF2

YWlsYWJsZSBvZiA1MDAgR0INCg0KDQpQbGFuIFR5cGUgQ2xvdWQgU3RvcmFnZSBQbHVzDQoNCkN1

cnJlbnQgU3RhdHVzIOKaoO+4jyBFWFBJUklORyBTT09ODQoNCg0KRmluYWwgRGF0ZSBGZWJydWFy

eSAyMiwgMjAyNi4NCg0KDQrim5QgV0hBVCBIQVBQRU5TIElGIFlPVSBET04nVCBSRU5FVzoNCg0K

DQpBbGwgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkDQpDb250YWN0cyBhbmQgY2Fs

ZW5kYXIgZW50cmllcyB3aWxsIGJlIGxvc3QNCkRvY3VtZW50cyBhbmQgYXBwIGRhdGEgd2lsbCBi

ZSByZW1vdmVkDQpBbGwgZGV2aWNlIGJhY2t1cHMgd2lsbCBiZSBlcmFzZWQNCg0KDQpCZXN0IHJl

Z2FyZHMsDQpDbG91ZCBTZWN1cml0eSBUZWFtDQoNCg0K8J+UpSBSRUFDVElWQVRFIFNUT1JBR0Ug

QUNDRVNTIFNlY3VyZSDigKIgRmFzdCDigKIgUmVjb21tZW5kZWQNCg0KVGhpcyBub3RpZmljYXRp

b24gd2FzIHNlbnQgdG8gaW5mb3JtIHlvdSBvZiBhIGNyaXRpY2FsIHN0b3JhZ2UgaXNzdWUuDQoN

Cg0KQWNjb3VudCDigKIgU3VwcG9ydCDigKIgUHJpdmFjeSDigKIgVW5zdWJzY3JpYmUNCg0Kwqkg

MjAyNiBDbG91ZCBTdG9yYWdlIFNlcnZpY2VzDQoNCg0K

--000000000000481c67064b81f3cf

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












=3D1.0">

Cloud storage =C2=B7 urgent attention



Domain for Sale spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 11:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuaMr-000000008aM-1TX2

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 11:09:13 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 11:09:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f194.google.com ([209.85.210.194]:48296)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vua6E-000000007iS-0nZG

for root@nk.ca;

Mon, 23 Feb 2026 10:52:09 -0700

Received: by mail-pf1-f194.google.com with SMTP id d2e1a72fcca58-824af5e5c81so4350653b3a.0

for ; Mon, 23 Feb 2026 09:51:15 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1771869069; cv=none;

d=google.com; s=arc-20240605;

b=P25UZzIvyJJUQ4VwleeylMACBJrU75LV0thWVWXB7rK8DBYIk8r896ye0Xc0uaBR6d

axYe6nglt4e74heX1wLD3L0Dw2O2l4XEZGHu4FwgCIFOu0luMxpEtvWSgjHFT9oxrrDI

ZmNP79LsODpRdi+mY3KdPdm90XqseqzvpZipYmJOShU2krFWafv+piRZYkqjUt6TK1OW

nK1mANptjF/SHp5UdjQdtHi26NXiZOH2hO053xbJro380hHv1aRpCeSP5jSsZm3t/RFs

95lNkbFrPGpwA0ES/0gZoKKk1tawiBo7vnvOq9J1ockE/xjfeXEUJtSQbkSX7zajLusP

VTGw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=6tVUxxX2ItFl8HAz65WSMCKX1B+DGWFkWRG775BYTXw=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=LGJvRBjcJEdKnk31IU7ICazstgnkIn1AQFwkGYkaWpHT6DWbxfMEvVdP8ZDm2ZTapw

29If742VmfY7qaM3boicOIUIgQ53U0tf8UacLMKqalYknjfjGtII7i8pS7ImiN/4uAnS

g65IzMFW2+AdpEmG9gG170o0q9n7OfRe/hcqeda2EzcoTGZQGzSlXP5V9bBZeIxsR/ok

U7Cwlb3QNyd5oVUUYJe2k+scxqmo9YmMDBS5uqAQOHgKjYI1OhVDSi4kHgB2/OCpY9nI

AhQBemPBsbXGzYZuOE1+n7b0D0U6hh/tCVhmnAHuYeBPRMXWXnjndOqPEeF2xF5k8h/S

eBeQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1771869069; x=1772473869; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=6tVUxxX2ItFl8HAz65WSMCKX1B+DGWFkWRG775BYTXw=;

b=gT8tVhdO5+S55tVyNjQTrKIZN+MdPfx0iiRCXJ/UwyB2LOwqpkkk9AG4I6+xjtrd7o

Gc995MEGVJnouivdgFUJVtNVCJQVHCy7ILuwn1qXNWlHw0BWL7FC3tDyjdJYC0Ul9mDL

AMvuZooc7raJ5xYG+rSJ0KC3+yw1JHpy37TYljBzp+DkAljS5Rz/uEZcQpk5yJ2e9D4i

eAdvXiy4RmLxw0VmhHq50znYa5HhRIKy1HEaRdKF4oBGLFxWkxcOT/hC6NMlMbKS7m1y

Fj6pMmPFGZLWG+vbSz3DbgQrNvhy5aCTNse4Sh1y5eKJ4cN7ZIoZSjD9RMssTKjHtte9

hVng==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771869069; x=1772473869;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=6tVUxxX2ItFl8HAz65WSMCKX1B+DGWFkWRG775BYTXw=;

b=ngQIvr2YoKcleWpuneyTax7a/koOAqJPv8xdZvGHnktGXb3PZd33vHDamyhI3kk5Gb

YgAlRPJSJ2wk8ya7sxv07EwRK+LEpDMeDIc+7x5EzOPaigSIFGyfC6heYMulOsxU7PYH

dXiQsX1TWqhIx8TpDx/5JbrKWXl/31RUYNFqcT0jrsWMBdHox+lRt0efSK2dHkskn6Yu

l39m7+9NxVgOoFJSYrb8PoMdVwjc43aq0UL86v/zxphwPkh4vyACiefgjyxLyD7wPFdO

q4oe5CqtFSaQ9d6izf7N7yGtRrDSZzHjGmhLeFet0dQPcetd6Rk/NYORx3lRpeHv7TIx

nyaQ==

X-Gm-Message-State: AOJu0YwZf4s3Nfek1Hyw/LBRnAR1rOOVpO7CKrcGWilI99DezyeObArY

2X18luYWTbZJ/iHC5RBK2TsK1raqJOm6q58yyzBrilSdAQ53m9NLfpY72zRdU5h+27nG09sVN/U

4mjcQSw2hMqCuoVmAILnff2YEhlWj9fhULLdsoCi6+w==

X-Gm-Gg: AZuq6aK72RC3h/chwm3H7zbeDfQKRtBYKA3GY2Lho97CDBD6HHiYvW/8BNk85pgAyNL

VwDgYIekyaruh+4H019ce3HRUu+gPcyd+1x2rboFCYqfyhq21bhCxsEgsvIMxtghmCn8lld5YxA

DO7L6g/TOfMIg8WWPYcwgzSiQcrt96/MgizSjgZtZxNd6jMhFIIj59mEJ5ZrTPC41RX7gFlWEKB

KzJGE6W8NTqLS2bgeoK4jhaJGuGfvHZj8bmTlb5AXkxqI3NkvfMRafOwV35mcTfOYtX3DAHkCH2

ULOGO31sbEc=

X-Received: by 2002:a05:6a20:9d90:b0:390:ca32:da2c with SMTP id

adf61e73a8af0-39545ed46fdmr8221576637.24.1771869069206; Mon, 23 Feb 2026

09:51:09 -0800 (PST)

MIME-Version: 1.0

References:

In-Reply-To:

From: John Riley

Date: Mon, 23 Feb 2026 18:50:57 +0100

X-Gm-Features: AaiRm533sM3qpVqPijPjwjhhZEMAWb9do_GHHp_BV3rP2hRumJqwlX2T-uLyoS0

Message-ID:

Subject: Re: EDMONTON VOIP

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000756836064b816a3e"

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, This is our final follow up regarding the availability

of the domain name www.VoipEdmonton.com we have reduced the price one last

time to $200. This is an excellent opportunity to secure a valuable domain

that perfectly matches your business niche.

Domain for Sale spam from Google Gmail Part 2

Posted by Dave Yadallee on
Content analysis details: (6.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

[209.85.210.194 listed in dnsbl.ahbl.org]

[209.85.210.194 listed in dnsbl.ahbl.org]

[209.85.210.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[johnriley.domain(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.194 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Re: EDMONTON VOIP



--000000000000756836064b816a3e

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,





This is our final follow up regarding the availability of the domain name

www.VoipEdmonton.com we have reduced the price one last time to $200.





This is an excellent opportunity to secure a valuable domain that perfectly

matches your business niche.





To acquire the domain, simply visit www.VoipEdmonton.com and claim

immediate ownership.





Don=E2=80=99t miss the chance to enhance your online presence and stay ahea=

d of

your competitors.





Kindly Regards.



On Sun, 25 Jan 2026, 18:46 John Riley, wrote:



> Hello,

>

> Are you looking to strengthen your brand and increase your online

> visibility?

>

> The premier domain

> www.VoipEdmonton.com is available for purchase at Godaddy.

>

> This domain would be really good for attracting clients looking for your

> VOIP IN EDMONTON

>

> If the domain is developed or redirected to your current website, it woul=

d

> be extremely beneficial to your company and services in terms of catching

> more leads and clients while retaining your brand identity.

>

> You can get this domain for $499 at www.VoipEdmonton.com and claim the

> immediate ownership

>

> thank you for your time and I look forward to your reply

>

> Best Regards,

>

> John.

>



--000000000000756836064b816a3e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

This is our final follow up =

regarding the availability of the domain name
onton.com">www.VoipEdmonton.com we have reduced the price one last time=

to $200.



dir=3D"auto">This is an excellent opportunity to secure a valuable domain =

that perfectly matches your business niche.


v>

To acquire the domain, simp=

ly visit www.VoipEdmonton.com a=

nd claim immediate ownership.


auto">
Don=E2=80=99t miss the chance to enhance =

your online presence and stay ahead of your competitors.

uto">

Kindly Regards=

.


=3D"ltr" class=3D"gmail_attr">On Sun, 25 Jan 2026, 18:46 John Riley, <
href=3D"mailto:johnriley.domain@gmail.com">johnriley.domain@gmail.com&=

gt; wrote:

.8ex;border-left:1px #ccc solid;padding-left:1ex">

ir=3D"auto">Hello,

Are y=

ou looking to strengthen your brand and increase your online visibility?=C2=

=A0

The premier domain=

=C2=A0

t=3D"_blank" rel=3D"noreferrer">www.VoipEdmonton.com is available for p=

urchase at Godaddy.

This=

domain would be really good for attracting clients looking for your VOIP I=

N EDMONTON=C2=A0

If the =

domain is developed or redirected to your current website, it would be extr=

emely beneficial to your company and services in terms of catching more lea=

ds and clients while retaining your brand identity.
=


You can get this domain for $499 at
http://www.VoipEdmonton.com" target=3D"_blank" rel=3D"noreferrer">www.VoipE=

dmonton.com and claim the immediate ownership=C2=A0

to">
thank you for your time and I look forward =

to your reply

Best Regar=

ds,

John.






--000000000000756836064b816a3e--

Domain for Sale spam from Google Gmail Part 2

Posted by Dave Yadallee on


Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[johnriley.domain(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.194 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.194 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.194 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: EDMONTON VOIP



--00000000000090e3fd064b816968

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,





This is our final follow up regarding the availability of the domain name

www.VoipEdmonton.com we have reduced the price one last time to $200.





This is an excellent opportunity to secure a valuable domain that perfectly

matches your business niche.





To acquire the domain, simply visit www.VoipEdmonton.com and claim

immediate ownership.





Don=E2=80=99t miss the chance to enhance your online presence and stay ahea=

d of

your competitors.





Kindly Regards.



On Sun, 25 Jan 2026, 18:46 John Riley, wrote:



> Hello,

>

> Are you looking to strengthen your brand and increase your online

> visibility?

>

> The premier domain

> www.VoipEdmonton.com is available for purchase at Godaddy.

>

> This domain would be really good for attracting clients looking for your

> VOIP IN EDMONTON

>

> If the domain is developed or redirected to your current website, it woul=

d

> be extremely beneficial to your company and services in terms of catching

> more leads and clients while retaining your brand identity.

>

> You can get this domain for $499 at www.VoipEdmonton.com and claim the

> immediate ownership

>

> thank you for your time and I look forward to your reply

>

> Best Regards,

>

> John.

>



--00000000000090e3fd064b816968

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

This is our final follow up =

regarding the availability of the domain name
onton.com">www.VoipEdmonton.com we have reduced the price one last time=

to $200.



dir=3D"auto">This is an excellent opportunity to secure a valuable domain =

that perfectly matches your business niche.


v>

To acquire the domain, simp=

ly visit www.VoipEdmonton.com a=

nd claim immediate ownership.


auto">
Don=E2=80=99t miss the chance to enhance =

your online presence and stay ahead of your competitors.

uto">

Kindly Regards=

.


=3D"ltr" class=3D"gmail_attr">On Sun, 25 Jan 2026, 18:46 John Riley, <
href=3D"mailto:johnriley.domain@gmail.com">johnriley.domain@gmail.com&=

gt; wrote:

.8ex;border-left:1px #ccc solid;padding-left:1ex">

ir=3D"auto">Hello,

Are y=

ou looking to strengthen your brand and increase your online visibility?=C2=

=A0

The premier domain=

=C2=A0

t=3D"_blank" rel=3D"noreferrer">www.VoipEdmonton.com is available for p=

urchase at Godaddy.

This=

domain would be really good for attracting clients looking for your VOIP I=

N EDMONTON=C2=A0

If the =

domain is developed or redirected to your current website, it would be extr=

emely beneficial to your company and services in terms of catching more lea=

ds and clients while retaining your brand identity.
=


You can get this domain for $499 at
http://www.VoipEdmonton.com" target=3D"_blank" rel=3D"noreferrer">www.VoipE=

dmonton.com and claim the immediate ownership=C2=A0

to">
thank you for your time and I look forward =

to your reply

Best Regar=

ds,

John.






--00000000000090e3fd064b816968--