NetKnow Corporate Blog

Urgency spam from Hungary

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 May 2026 05:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR6p4-000000006hX-3J9X

for dave@doctor.nl2k.ab.ca;

Sun, 24 May 2026 05:16:46 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 May 2026 05:16:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.szakrendelo16.hu ([109.74.55.102]:37554)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR18F-00000000Djo-0897

for www@nl2k.ab.ca;

Sat, 23 May 2026 23:12:19 -0600

Received: from mail.szakrendelo16.hu (localhost.localdomain [127.0.0.1])

by mail.szakrendelo16.hu (Proxmox) with ESMTP id 654F28DAE3;

Sun, 24 May 2026 04:36:32 +0200 (CEST)

X-Amavis-Modified: Mail body modified (using disclaimer) -

webmail.szakrendelo16.hu

X-Virus-Scanned: amavis at szakrendelo16.hu

Date: Sun, 24 May 2026 04:36:01 +0200 (CEST)

From: "Ms.Kadulina"

Reply-To: eaolifa@montevideo.com.uy

Message-ID: <270700411.278276.1779590161444.JavaMail.zimbra@szakrendelo16.hu>

Subject: Awaiting Your Response

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [192.168.7.14]

X-Mailer: Zimbra 8.8.15_GA_4717 (zclient/8.8.15_GA_4717)

Thread-Index: i2dbE8ilReJyEU+CO+bXCUH7gHtqNQ==

Thread-Topic: Awaiting Your Response

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I have an urgent opportunity for you that would be highly

beneficial. Please get back ASAP. I appreciate your quick response, Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag

a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai

bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ© [...]

Content analysis details: (7.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[109.74.55.102 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 REPLYTO_WITHOUT_TO_CC No description available.

1.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Awaiting Your Response

I have an urgent opportunity for you that would be highly beneficial. Please get back ASAP.

I appreciate your quick response,

Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ©dett informÃ¡ciÃ³t tartalmazhatnak. Az eredeti cÃmzetteknek szÃ¡nt informÃ¡ciÃ³k bÃ¡rmilyen formÃ¡jÃº illetÃ©ktelen felhasznÃ¡lÃ¡sa, megismertetÃ©se, publikÃ¡lÃ¡sa, tovÃ¡bbÃtÃ¡sa, vagy az azzal vÃ©gzett bÃ¡rmely mÃ¡s mÅ±velet szigorÃºan tilos. Amennyiben ezt a levelet sÃ©rÃ¼lten kapta meg vagy nem Ã–n annak valÃ³s cÃmzettje kÃ©rjÃ¼k, haladÃ©ktalanul tÃ¡jÃ©koztassa errÅ‘l a feladÃ³t Ã©s a levelet tÃ¶rÃ¶lje rendszerÃ©bÅ‘l

Urgency spam from Hungary

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 May 2026 05:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR6oy-000000006h1-3u00

for dave@doctor.nl2k.ab.ca;

Sun, 24 May 2026 05:16:40 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 May 2026 05:16:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.szakrendelo16.hu ([109.74.55.102]:59496)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR0nl-00000000Cq2-11XR

for sales@nk.ca;

Sat, 23 May 2026 22:51:10 -0600

Received: from mail.szakrendelo16.hu (localhost.localdomain [127.0.0.1])

by mail.szakrendelo16.hu (Proxmox) with ESMTP id 0B874921A3;

Sun, 24 May 2026 04:30:33 +0200 (CEST)

X-Amavis-Modified: Mail body modified (using disclaimer) -

webmail.szakrendelo16.hu

X-Virus-Scanned: amavis at szakrendelo16.hu

Date: Sun, 24 May 2026 04:30:21 +0200 (CEST)

From: "Ms.Kadulina"

Reply-To: eaolifa@montevideo.com.uy

Message-ID: <140265040.277818.1779589821126.JavaMail.zimbra@szakrendelo16.hu>

Subject: Awaiting Your Response

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [192.168.7.14]

X-Mailer: Zimbra 8.8.15_GA_4717 (zclient/8.8.15_GA_4717)

Thread-Index: T1ajz4VQI235zTfdZ5FmDEM1LYANwQ==

Thread-Topic: Awaiting Your Response

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I have an urgent opportunity for you that would be highly

beneficial. Please get back ASAP. I appreciate your quick response, Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag

a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai

bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ© [...]

Content analysis details: (8.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.9 REPLYTO_WITHOUT_TO_CC No description available.

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[109.74.55.102 listed in bl.score.senderscore.com]

Subject: {SPAM?} Awaiting Your Response

I have an urgent opportunity for you that would be highly beneficial. Please get back ASAP.

I appreciate your quick response,

Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ©dett informÃ¡ciÃ³t tartalmazhatnak. Az eredeti cÃmzetteknek szÃ¡nt informÃ¡ciÃ³k bÃ¡rmilyen formÃ¡jÃº illetÃ©ktelen felhasznÃ¡lÃ¡sa, megismertetÃ©se, publikÃ¡lÃ¡sa, tovÃ¡bbÃtÃ¡sa, vagy az azzal vÃ©gzett bÃ¡rmely mÃ¡s mÅ±velet szigorÃºan tilos. Amennyiben ezt a levelet sÃ©rÃ¼lten kapta meg vagy nem Ã–n annak valÃ³s cÃmzettje kÃ©rjÃ¼k, haladÃ©ktalanul tÃ¡jÃ©koztassa errÅ‘l a feladÃ³t Ã©s a levelet tÃ¶rÃ¶lje rendszerÃ©bÅ‘l

Urgency phish from Hungary

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 May 2026 05:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR6op-000000006gY-2RQf

for dave@doctor.nl2k.ab.ca;

Sun, 24 May 2026 05:16:31 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 May 2026 05:16:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.szakrendelo16.hu ([109.74.55.102]:59480)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR0nl-00000000Cq1-11Zq

for sales@netknow.ca;

Sat, 23 May 2026 22:51:10 -0600

Received: from mail.szakrendelo16.hu (localhost.localdomain [127.0.0.1])

by mail.szakrendelo16.hu (Proxmox) with ESMTP id 0B874921A3;

Sun, 24 May 2026 04:30:33 +0200 (CEST)

X-Amavis-Modified: Mail body modified (using disclaimer) -

webmail.szakrendelo16.hu

X-Virus-Scanned: amavis at szakrendelo16.hu

Date: Sun, 24 May 2026 04:30:21 +0200 (CEST)

From: "Ms.Kadulina"

Reply-To: eaolifa@montevideo.com.uy

Message-ID: <140265040.277818.1779589821126.JavaMail.zimbra@szakrendelo16.hu>

Subject: Awaiting Your Response

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [192.168.7.14]

X-Mailer: Zimbra 8.8.15_GA_4717 (zclient/8.8.15_GA_4717)

Thread-Index: T1ajz4VQI235zTfdZ5FmDEM1LYANwQ==

Thread-Topic: Awaiting Your Response

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I have an urgent opportunity for you that would be highly

beneficial. Please get back ASAP. I appreciate your quick response, Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag

a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai

bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ© [...]

Content analysis details: (8.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[109.74.55.102 listed in bl.score.senderscore.com]

Subject: {SPAM?} Awaiting Your Response

I have an urgent opportunity for you that would be highly beneficial. Please get back ASAP.

I appreciate your quick response,

Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ©dett informÃ¡ciÃ³t tartalmazhatnak. Az eredeti cÃmzetteknek szÃ¡nt informÃ¡ciÃ³k bÃ¡rmilyen formÃ¡jÃº illetÃ©ktelen felhasznÃ¡lÃ¡sa, megismertetÃ©se, publikÃ¡lÃ¡sa, tovÃ¡bbÃtÃ¡sa, vagy az azzal vÃ©gzett bÃ¡rmely mÃ¡s mÅ±velet szigorÃºan tilos. Amennyiben ezt a levelet sÃ©rÃ¼lten kapta meg vagy nem Ã–n annak valÃ³s cÃmzettje kÃ©rjÃ¼k, haladÃ©ktalanul tÃ¡jÃ©koztassa errÅ‘l a feladÃ³t Ã©s a levelet tÃ¶rÃ¶lje rendszerÃ©bÅ‘l

Urgency Spam from Hungary

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 May 2026 05:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR6oj-000000006gF-0i1b

for dave@doctor.nl2k.ab.ca;

Sun, 24 May 2026 05:16:25 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 May 2026 05:16:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.szakrendelo16.hu ([109.74.55.102]:35900)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR0l5-00000000Ce2-1zoN

for root@doctor.nl2k.ab.ca;

Sat, 23 May 2026 22:48:24 -0600

Received: from mail.szakrendelo16.hu (localhost.localdomain [127.0.0.1])

by mail.szakrendelo16.hu (Proxmox) with ESMTP id 7D88491562;

Sun, 24 May 2026 04:30:04 +0200 (CEST)

X-Amavis-Modified: Mail body modified (using disclaimer) -

webmail.szakrendelo16.hu

X-Virus-Scanned: amavis at szakrendelo16.hu

Date: Sun, 24 May 2026 04:29:55 +0200 (CEST)

From: "Ms.Kadulina"

Reply-To: eaolifa@montevideo.com.uy

Message-ID: <446864555.277807.1779589795581.JavaMail.zimbra@szakrendelo16.hu>

Subject: Awaiting Your Response

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [192.168.7.14]

X-Mailer: Zimbra 8.8.15_GA_4717 (zclient/8.8.15_GA_4717)

Thread-Index: eU+fOBNj/pU6GKETWCtY8AZIgnhFLQ==

Thread-Topic: Awaiting Your Response

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I have an urgent opportunity for you that would be highly

beneficial. Please get back ASAP. I appreciate your quick response, Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag

a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai

bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ© [...]

Content analysis details: (8.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[109.74.55.102 listed in bl.score.senderscore.com]

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

Subject: {SPAM?} Awaiting Your Response

I have an urgent opportunity for you that would be highly beneficial. Please get back ASAP.

I appreciate your quick response,

Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ©dett informÃ¡ciÃ³t tartalmazhatnak. Az eredeti cÃmzetteknek szÃ¡nt informÃ¡ciÃ³k bÃ¡rmilyen formÃ¡jÃº illetÃ©ktelen felhasznÃ¡lÃ¡sa, megismertetÃ©se, publikÃ¡lÃ¡sa, tovÃ¡bbÃtÃ¡sa, vagy az azzal vÃ©gzett bÃ¡rmely mÃ¡s mÅ±velet szigorÃºan tilos. Amennyiben ezt a levelet sÃ©rÃ¼lten kapta meg vagy nem Ã–n annak valÃ³s cÃmzettje kÃ©rjÃ¼k, haladÃ©ktalanul tÃ¡jÃ©koztassa errÅ‘l a feladÃ³t Ã©s a levelet tÃ¶rÃ¶lje rendszerÃ©bÅ‘l

Urgency spam from Hungary

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 May 2026 05:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR6od-000000006fu-2xFT

for dave@doctor.nl2k.ab.ca;

Sun, 24 May 2026 05:16:19 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 May 2026 05:16:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.szakrendelo16.hu ([109.74.55.102]:53504)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR0l5-00000000CgQ-1zsN

for root@nk.ca;

Sat, 23 May 2026 22:48:24 -0600

Received: from mail.szakrendelo16.hu (localhost.localdomain [127.0.0.1])

by mail.szakrendelo16.hu (Proxmox) with ESMTP id 59A899168E;

Sun, 24 May 2026 04:30:09 +0200 (CEST)

X-Amavis-Modified: Mail body modified (using disclaimer) -

webmail.szakrendelo16.hu

X-Virus-Scanned: amavis at szakrendelo16.hu

Date: Sun, 24 May 2026 04:29:55 +0200 (CEST)

From: "Ms.Kadulina"

Reply-To: eaolifa@montevideo.com.uy

Message-ID: <446864555.277807.1779589795581.JavaMail.zimbra@szakrendelo16.hu>

Subject: Awaiting Your Response

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [192.168.7.14]

X-Mailer: Zimbra 8.8.15_GA_4717 (zclient/8.8.15_GA_4717)

Thread-Index: eU+fOBNj/pU6GKETWCtY8AZIgnhFLQ==

Thread-Topic: Awaiting Your Response

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I have an urgent opportunity for you that would be highly

beneficial. Please get back ASAP. I appreciate your quick response, Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag

a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai

bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ© [...]

Content analysis details: (8.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[109.74.55.102 listed in bl.score.senderscore.com]

1.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Awaiting Your Response

I have an urgent opportunity for you that would be highly beneficial. Please get back ASAP.

I appreciate your quick response,

Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ©dett informÃ¡ciÃ³t tartalmazhatnak. Az eredeti cÃmzetteknek szÃ¡nt informÃ¡ciÃ³k bÃ¡rmilyen formÃ¡jÃº illetÃ©ktelen felhasznÃ¡lÃ¡sa, megismertetÃ©se, publikÃ¡lÃ¡sa, tovÃ¡bbÃtÃ¡sa, vagy az azzal vÃ©gzett bÃ¡rmely mÃ¡s mÅ±velet szigorÃºan tilos. Amennyiben ezt a levelet sÃ©rÃ¼lten kapta meg vagy nem Ã–n annak valÃ³s cÃmzettje kÃ©rjÃ¼k, haladÃ©ktalanul tÃ¡jÃ©koztassa errÅ‘l a feladÃ³t Ã©s a levelet tÃ¶rÃ¶lje rendszerÃ©bÅ‘l

Urgency spam from hungary

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 May 2026 05:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR6oT-000000006f9-0SeF

for dave@doctor.nl2k.ab.ca;

Sun, 24 May 2026 05:16:09 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 May 2026 05:16:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.szakrendelo16.hu ([109.74.55.102]:38404)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQzVu-000000009CY-2xAR

for doctor@doctor.nl2k.ab.ca;

Sat, 23 May 2026 21:28:39 -0600

Received: from mail.szakrendelo16.hu (localhost.localdomain [127.0.0.1])

by mail.szakrendelo16.hu (Proxmox) with ESMTP id 067768ED70;

Sun, 24 May 2026 04:13:16 +0200 (CEST)

X-Amavis-Modified: Mail body modified (using disclaimer) -

webmail.szakrendelo16.hu

X-Virus-Scanned: amavis at szakrendelo16.hu

Date: Sun, 24 May 2026 04:12:34 +0200 (CEST)

From: "Ms.Kadulina"

Reply-To: eaolifa@montevideo.com.uy

Message-ID: <1221514833.276705.1779588754184.JavaMail.zimbra@szakrendelo16.hu>

Subject: Awaiting Your Response

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [192.168.7.14]

X-Mailer: Zimbra 8.8.15_GA_4717 (zclient/8.8.15_GA_4717)

Thread-Index: Xo6lc8yo0y3z2O1/d/ESSk2Q/xCdxQ==

Thread-Topic: Awaiting Your Response

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I have an urgent opportunity for you that would be highly

beneficial. Please get back ASAP. I appreciate your quick response, Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag

a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai

bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ© [...]

Content analysis details: (8.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[109.74.55.102 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

1.9 REPLYTO_WITHOUT_TO_CC No description available.

1.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Awaiting Your Response

I have an urgent opportunity for you that would be highly beneficial. Please get back ASAP.

I appreciate your quick response,

Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ©dett informÃ¡ciÃ³t tartalmazhatnak. Az eredeti cÃmzetteknek szÃ¡nt informÃ¡ciÃ³k bÃ¡rmilyen formÃ¡jÃº illetÃ©ktelen felhasznÃ¡lÃ¡sa, megismertetÃ©se, publikÃ¡lÃ¡sa, tovÃ¡bbÃtÃ¡sa, vagy az azzal vÃ©gzett bÃ¡rmely mÃ¡s mÅ±velet szigorÃºan tilos. Amennyiben ezt a levelet sÃ©rÃ¼lten kapta meg vagy nem Ã–n annak valÃ³s cÃmzettje kÃ©rjÃ¼k, haladÃ©ktalanul tÃ¡jÃ©koztassa errÅ‘l a feladÃ³t Ã©s a levelet tÃ¶rÃ¶lje rendszerÃ©bÅ‘l

Urgency spam from Hungary

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 May 2026 05:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR6oZ-000000006ff-2BEH

for dave@doctor.nl2k.ab.ca;

Sun, 24 May 2026 05:16:15 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 May 2026 05:16:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.szakrendelo16.hu ([109.74.55.102]:57750)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQzVu-000000009DN-2xCp

for doctor@nk.ca;

Sat, 23 May 2026 21:28:43 -0600

Received: from mail.szakrendelo16.hu (localhost.localdomain [127.0.0.1])

by mail.szakrendelo16.hu (Proxmox) with ESMTP id C9B1F94225;

Sun, 24 May 2026 04:13:18 +0200 (CEST)

X-Amavis-Modified: Mail body modified (using disclaimer) -

webmail.szakrendelo16.hu

X-Virus-Scanned: amavis at szakrendelo16.hu

Date: Sun, 24 May 2026 04:12:34 +0200 (CEST)

From: "Ms.Kadulina"

Reply-To: eaolifa@montevideo.com.uy

Message-ID: <1221514833.276705.1779588754184.JavaMail.zimbra@szakrendelo16.hu>

Subject: Awaiting Your Response

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [192.168.7.14]

X-Mailer: Zimbra 8.8.15_GA_4717 (zclient/8.8.15_GA_4717)

Thread-Index: Xo6lc8yo0y3z2O1/d/ESSk2Q/xCdxQ==

Thread-Topic: Awaiting Your Response

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I have an urgent opportunity for you that would be highly

beneficial. Please get back ASAP. I appreciate your quick response, Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag

a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai

bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ© [...]

Content analysis details: (8.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[109.74.55.102 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

1.9 REPLYTO_WITHOUT_TO_CC No description available.

1.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Awaiting Your Response

I have an urgent opportunity for you that would be highly beneficial. Please get back ASAP.

I appreciate your quick response,

Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ©dett informÃ¡ciÃ³t tartalmazhatnak. Az eredeti cÃmzetteknek szÃ¡nt informÃ¡ciÃ³k bÃ¡rmilyen formÃ¡jÃº illetÃ©ktelen felhasznÃ¡lÃ¡sa, megismertetÃ©se, publikÃ¡lÃ¡sa, tovÃ¡bbÃtÃ¡sa, vagy az azzal vÃ©gzett bÃ¡rmely mÃ¡s mÅ±velet szigorÃºan tilos. Amennyiben ezt a levelet sÃ©rÃ¼lten kapta meg vagy nem Ã–n annak valÃ³s cÃmzettje kÃ©rjÃ¼k, haladÃ©ktalanul tÃ¡jÃ©koztassa errÅ‘l a feladÃ³t Ã©s a levelet tÃ¶rÃ¶lje rendszerÃ©bÅ‘l

urency spam frpm Hungary

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 May 2026 21:26:00 -0600

Received: from mail.szakrendelo16.hu ([109.74.55.102]:41108)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQzT3-0000000096T-0Z19

for dave@doctor.nl2k.ab.ca;

Sat, 23 May 2026 21:25:41 -0600

Received: from mail.szakrendelo16.hu (localhost.localdomain [127.0.0.1])

by mail.szakrendelo16.hu (Proxmox) with ESMTP id D0E6793BD1;

Sun, 24 May 2026 04:11:57 +0200 (CEST)

X-Amavis-Modified: Mail body modified (using disclaimer) -

webmail.szakrendelo16.hu

X-Virus-Scanned: amavis at szakrendelo16.hu

Date: Sun, 24 May 2026 04:11:42 +0200 (CEST)

From: "Ms.Kadulina"

Reply-To: eaolifa@montevideo.com.uy

Message-ID: <758229958.276613.1779588702043.JavaMail.zimbra@szakrendelo16.hu>

Subject: Awaiting Your Response

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [192.168.7.14]

X-Mailer: Zimbra 8.8.15_GA_4717 (zclient/8.8.15_GA_4717)

Thread-Index: Q9EHISPl+pfO3RaDIC0txG8QNY4o9Q==

Thread-Topic: Awaiting Your Response

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I have an urgent opportunity for you that would be highly

beneficial. Please get back ASAP. I appreciate your quick response, Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag

a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai

bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ© [...]

Content analysis details: (8.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[109.74.55.102 listed in bl.score.senderscore.com]

1.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Awaiting Your Response

I have an urgent opportunity for you that would be highly beneficial. Please get back ASAP.

I appreciate your quick response,

Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ©dett informÃ¡ciÃ³t tartalmazhatnak. Az eredeti cÃmzetteknek szÃ¡nt informÃ¡ciÃ³k bÃ¡rmilyen formÃ¡jÃº illetÃ©ktelen felhasznÃ¡lÃ¡sa, megismertetÃ©se, publikÃ¡lÃ¡sa, tovÃ¡bbÃtÃ¡sa, vagy az azzal vÃ©gzett bÃ¡rmely mÃ¡s mÅ±velet szigorÃºan tilos. Amennyiben ezt a levelet sÃ©rÃ¼lten kapta meg vagy nem Ã–n annak valÃ³s cÃmzettje kÃ©rjÃ¼k, haladÃ©ktalanul tÃ¡jÃ©koztassa errÅ‘l a feladÃ³t Ã©s a levelet tÃ¶rÃ¶lje rendszerÃ©bÅ‘l

Urgency spam from Hungary

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 May 2026 05:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wR6oZ-000000006ff-2BEH

for dave@doctor.nl2k.ab.ca;

Sun, 24 May 2026 05:16:15 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 May 2026 05:16:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.szakrendelo16.hu ([109.74.55.102]:57750)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQzVu-000000009DN-2xCp

for doctor@nk.ca;

Sat, 23 May 2026 21:28:43 -0600

Received: from mail.szakrendelo16.hu (localhost.localdomain [127.0.0.1])

by mail.szakrendelo16.hu (Proxmox) with ESMTP id C9B1F94225;

Sun, 24 May 2026 04:13:18 +0200 (CEST)

X-Amavis-Modified: Mail body modified (using disclaimer) -

webmail.szakrendelo16.hu

X-Virus-Scanned: amavis at szakrendelo16.hu

Date: Sun, 24 May 2026 04:12:34 +0200 (CEST)

From: "Ms.Kadulina"

Reply-To: eaolifa@montevideo.com.uy

Message-ID: <1221514833.276705.1779588754184.JavaMail.zimbra@szakrendelo16.hu>

Subject: Awaiting Your Response

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [192.168.7.14]

X-Mailer: Zimbra 8.8.15_GA_4717 (zclient/8.8.15_GA_4717)

Thread-Index: Xo6lc8yo0y3z2O1/d/ESSk2Q/xCdxQ==

Thread-Topic: Awaiting Your Response

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I have an urgent opportunity for you that would be highly

beneficial. Please get back ASAP. I appreciate your quick response, Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag

a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai

bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ© [...]

Content analysis details: (8.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[109.74.55.102 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

1.9 REPLYTO_WITHOUT_TO_CC No description available.

1.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Awaiting Your Response

I have an urgent opportunity for you that would be highly beneficial. Please get back ASAP.

I appreciate your quick response,

Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ©dett informÃ¡ciÃ³t tartalmazhatnak. Az eredeti cÃmzetteknek szÃ¡nt informÃ¡ciÃ³k bÃ¡rmilyen formÃ¡jÃº illetÃ©ktelen felhasznÃ¡lÃ¡sa, megismertetÃ©se, publikÃ¡lÃ¡sa, tovÃ¡bbÃtÃ¡sa, vagy az azzal vÃ©gzett bÃ¡rmely mÃ¡s mÅ±velet szigorÃºan tilos. Amennyiben ezt a levelet sÃ©rÃ¼lten kapta meg vagy nem Ã–n annak valÃ³s cÃmzettje kÃ©rjÃ¼k, haladÃ©ktalanul tÃ¡jÃ©koztassa errÅ‘l a feladÃ³t Ã©s a levelet tÃ¶rÃ¶lje rendszerÃ©bÅ‘l

Urgency spam from Hungary

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 May 2026 21:26:00 -0600

Received: from mail.szakrendelo16.hu ([109.74.55.102]:41108)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQzT3-0000000096T-0Z19

for dave@doctor.nl2k.ab.ca;

Sat, 23 May 2026 21:25:41 -0600

Received: from mail.szakrendelo16.hu (localhost.localdomain [127.0.0.1])

by mail.szakrendelo16.hu (Proxmox) with ESMTP id D0E6793BD1;

Sun, 24 May 2026 04:11:57 +0200 (CEST)

X-Amavis-Modified: Mail body modified (using disclaimer) -

webmail.szakrendelo16.hu

X-Virus-Scanned: amavis at szakrendelo16.hu

Date: Sun, 24 May 2026 04:11:42 +0200 (CEST)

From: "Ms.Kadulina"

Reply-To: eaolifa@montevideo.com.uy

Message-ID: <758229958.276613.1779588702043.JavaMail.zimbra@szakrendelo16.hu>

Subject: Awaiting Your Response

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [192.168.7.14]

X-Mailer: Zimbra 8.8.15_GA_4717 (zclient/8.8.15_GA_4717)

Thread-Index: Q9EHISPl+pfO3RaDIC0txG8QNY4o9Q==

Thread-Topic: Awaiting Your Response

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I have an urgent opportunity for you that would be highly

beneficial. Please get back ASAP. I appreciate your quick response, Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag

a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai

bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ© [...]

Content analysis details: (8.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.74.55.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

[109.74.55.102 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[109.74.55.102 listed in bl.score.senderscore.com]

1.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Awaiting Your Response

I have an urgent opportunity for you that would be highly beneficial. Please get back ASAP.

I appreciate your quick response,

Ms.Kadulina

Jelen elektronikus levÃ©lben rÃ¶gzÃtett informÃ¡ciÃ³ csak Ã©s kizÃ¡rÃ³lag a cÃmzett termÃ©szetes, illetve jogi szemÃ©lynek szÃ³l. A levÃ©l, Ã©s csatolmÃ¡nyai bizalmas, illetve jogszabÃ¡ly Ã¡ltal vÃ©dett informÃ¡ciÃ³t tartalmazhatnak. Az eredeti cÃmzetteknek szÃ¡nt informÃ¡ciÃ³k bÃ¡rmilyen formÃ¡jÃº illetÃ©ktelen felhasznÃ¡lÃ¡sa, megismertetÃ©se, publikÃ¡lÃ¡sa, tovÃ¡bbÃtÃ¡sa, vagy az azzal vÃ©gzett bÃ¡rmely mÃ¡s mÅ±velet szigorÃºan tilos. Amennyiben ezt a levelet sÃ©rÃ¼lten kapta meg vagy nem Ã–n annak valÃ³s cÃmzettje kÃ©rjÃ¼k, haladÃ©ktalanul tÃ¡jÃ©koztassa errÅ‘l a feladÃ³t Ã©s a levelet tÃ¶rÃ¶lje rendszerÃ©bÅ‘l

Nigerian spam from Amazon

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 May 2026 18:56:58 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQx8M-000000002qS-0dHm

for dave@doctor.nl2k.ab.ca;

Sat, 23 May 2026 18:56:02 -0600

Resent-From: The Doctor

Resent-Date: Sat, 23 May 2026 18:56:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from host11.hemoce.ce.gov.br ([177.71.135.216]:12581)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQx2w-000000002e4-1Qlu

for doctor@edmontonab.ca;

Sat, 23 May 2026 18:50:34 -0600

Received: from amzhmc25.sa-east-1.compute.internal (localhost [127.0.0.1])

by host11.hemoce.ce.gov.br (Proxmox) with ESMTP id 4492864BBE;

Sat, 23 May 2026 21:48:23 -0300 (-03)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=

hemoce.ce.gov.br; h=cc:content-transfer-encoding:content-type

:content-type:date:from:from:message-id:mime-version:reply-to

:reply-to:subject:subject:to; s=

8CED4552-0C26-11EC-BD26-AAECE3052A60; bh=mfXrMynkVW/DFiqXJuDED+n

43gdKNJiiE0bpN/l9UdM=; b=gm/akUjtWH/2NlIeUdUP/VyyNlm1Ohh1DWdHgnl

0h6e+aJqhSInDo/DGpIhrfdqiomNV92tE+aZwCdXbSlSmU5+YPwApE+tg1bbr4LH

Enc5UBJ+RazxPB6y7vJ5gr600Gmm3BJ96m5tHdN1s+HA5Wz0H/5zjY1ypLH9HJhP

sv19KIWyuVXkVzzSRk/7zHSKqHWs0NIaIqs1MubAAJ2XA5BFs796k8GyFRHZTA+o

TjmNVuXGCZeUbmQkyqvN61rYELPAopVwkNJkudfVVrfDpjOPZ+YinVc5k37cnRTN

ucwMC2eHxITS/HuCldeZVsfJ7FE+qeO+ojRA+aah5nLlaLA==

Received: from cldhmc04.hemoce.ce.gov.br (amzhmc11.hemoce.ce.gov.br [10.25.248.118])

(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))

(No client certificate requested)

by host11.hemoce.ce.gov.br (Proxmox) with ESMTPS id 4AB0C658B3;

Sat, 23 May 2026 21:48:17 -0300 (-03)

Received: from cldhmc04.hemoce.ce.gov.br (localhost [127.0.0.1])

by cldhmc04.hemoce.ce.gov.br (Postfix) with ESMTPS id 265872082066C;

Sat, 23 May 2026 21:48:16 -0300 (-03)

Received: from localhost (localhost [127.0.0.1])

by cldhmc04.hemoce.ce.gov.br (Postfix) with ESMTP id 992692096CC99;

Sat, 23 May 2026 21:48:15 -0300 (-03)

Received: from cldhmc04.hemoce.ce.gov.br ([127.0.0.1])

by localhost (cldhmc04.hemoce.ce.gov.br [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id b6LnZrgKTQha; Sat, 23 May 2026 21:48:15 -0300 (-03)

Received: from cldhmc04.hemoce.ce.gov.br (amzhmc11.hemoce.ce.gov.br [10.25.248.118])

by cldhmc04.hemoce.ce.gov.br (Postfix) with ESMTP id 659462096CC8C;

Sat, 23 May 2026 21:48:12 -0300 (-03)

Date: Sat, 23 May 2026 21:48:12 -0300 (BRT)

From: Maryam Mousavi

Reply-To: "mariabenxx@gmail.com"

Message-ID: <574738477.922329.1779583692367.JavaMail.zimbra@hemoce.ce.gov.br>

Subject: WARM GREETINGS

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-Originating-IP: [10.25.248.118]

X-Mailer: Zimbra 8.8.11_GA_3799 (zclient/8.8.11_GA_3799)

Thread-Index: K2weBO8WBGNoaohcZl/qEc7KWBJZMQ==

Thread-Topic: WARM GREETINGS

X-Spam_score: 12.5

X-Spam_score_int: 125

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings , My husband was a former senior military personnel

here in Iran, he was killed alongside his colleagues during the war. As his

younger wife, I needed to leave the country to search for a better life.

H [...]

Content analysis details: (12.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[177.71.135.216 listed in dnsbl.ahbl.org]

[177.71.135.216 listed in dnsbl.ahbl.org]

[177.71.135.216 listed in dnsbl.ahbl.org]

[177.71.135.216 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[177.71.135.216 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[177.71.135.216 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[177.71.135.216 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[177.71.135.216 listed in dnsbl.ahbl.org]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[177.71.135.216 listed in psbl.surriel.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[177.71.135.216 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[177.71.135.216 listed in will-spam-for-food.eu.org]

[177.71.135.216 listed in will-spam-for-food.eu.org]

[177.71.135.216 listed in will-spam-for-food.eu.org]

[177.71.135.216 listed in will-spam-for-food.eu.org]

[177.71.135.216 listed in will-spam-for-food.eu.org]

[177.71.135.216 listed in will-spam-for-food.eu.org]

[177.71.135.216 listed in will-spam-for-food.eu.org]

[177.71.135.216 listed in will-spam-for-food.eu.org]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 MONEY_NOHTML Lots of money in plain text

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 XFER_LOTSA_MONEY Transfer a lot of money

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} WARM GREETINGS

Greetings ,

My husband was a former senior military personnel here in Iran, he was kill=

ed alongside his colleagues during the war. As his younger wife, I needed =

to leave the country to search for a better life. He had other wives' dough=

, but I am the last and also, I am the closest person to him, for that reas=

on, I got to know all his dealings in the government. He amassed so much we=

alth from the government. He also has plenty of properties abroad and here =

in Iran.

I have $35 million in my custody and I want to move away with the money.

Due to the difficulty in moving funds here, I=E2=80=99ve found a diplomat w=

ho can help transfer the money to a safer country where it will be easier t=

o access. However, the only place this can be arranged is Oman, which is cl=

ose to Iran.

If you can make plans to travel to Oman as soon as possible, we can begin t=

he necessary arrangements right away.

Sincerely,

Maryam Mousavi=20

Email; mariabenxx@gmail.com

Web/SEO/app spam from Microsoft OutLook Part 1

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 May 2026 16:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQuXX-0000000019Y-0sF0

for dave@doctor.nl2k.ab.ca;

Sat, 23 May 2026 16:09:51 -0600

Resent-From: The Doctor

Resent-Date: Sat, 23 May 2026 16:09:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012063.outbound.protection.outlook.com ([52.103.43.63]:21224 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQqfJ-00000000Bfy-2Wvt

for root@nk.ca;

Sat, 23 May 2026 12:01:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=m4moJ2d7dz3yhca6fpxOFyHSu6cMOLraS+bZg7WpW2BIMd14/BzqMep7MlrqzjzVfBvYHFWXVChoGUpaYNOCyMeHUu9FDzjjCeQWwUiPpNwIYji+gcgKLchavzFTIq+QGM//cdVDs52VO2Ppk7rjdBi5RC9ioeMI2y8ELC8iDq5Rsq8f4grP1Jcq+ajXdBlH/9PWXjfoedoHNRiYrF7STd6WTlDnp/+dy/0maZUAkUFgO2fL2yGQjCaZe50I+AKKD5bf5QY5RvfxVNTRD3+IulNEltN1JTk5rY2t+B81R2fTaWtIw9gGeNM4WQGzSuaW9gTToFlQuhguLtpgl1PKQw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=2DQcSID+pj//aBRs8pSeekySO1mNa2Skggjj3R322Y0=;

b=kFcMstpl4JFr5w9NZUAEJGcNwCA4UzupGqJfJshMal2lIlqveSTmrnhJG54BhAN6PVm5xpx/CgagIguRCnwwwm25mY1iYWAFnA/GOGsXv3125fnewFJM6dylPgca9/lb2HlRhmUy8ZjnLyXKTCeFq8zVH1z5W/DPVjYkoRQnKVU7jUslWdvqEoJ1kyC8myoOGMjCpZ6BGkXMLx5A0I2CsR8xCm9ubWVfkqDrJskKHKRKVPvVPcaXviBQVcNKYmR8FVAGv40a9mG0M8llHcUyxEDzzFeopx80mrTn7YsPbJgubZeFXIC6lfloLUAfI1f53X47+/xfs8rDCLzE4hf5rA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=2DQcSID+pj//aBRs8pSeekySO1mNa2Skggjj3R322Y0=;

b=aTeoI8+ts3p/qvqS4XH/y150d7JNdvS14J7rhIglGUd0tHINIDdtpllg0J/ytBiLI6SMERFlxP07rHT5onP2slajuHqFeZYWLlbXi5O/txgEJIONgz2dNa4w3ecZD+yvoruQJ1BcWZiiO+KIgfZEwVXnrc85oYvhW2Z8CLclukFsqcEwByhy96UHa/wItBBl3ujQdjV1fZt9idwESivSCOsvKqKD+qYLkjyUaLi7+8D47U768DiHrQaFwMMCtLpFiNyDwXwl0HSe3/trlxCSUGjC8MmQR7bmL+zIPZtjgjDh7J7MWoBVU4reVpEG8UDAuFuD+KmhV6QBETdsDRBHeQ==

Received: from TYZPR04MB4221.apcprd04.prod.outlook.com (2603:1096:400:4::7) by

TYZPR04MB6862.apcprd04.prod.outlook.com (2603:1096:400:33f::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.48.18; Sat, 23 May

2026 18:00:06 +0000

Received: from TYZPR04MB4221.apcprd04.prod.outlook.com

([fe80::c9f3:2b54:1d61:40a8]) by TYZPR04MB4221.apcprd04.prod.outlook.com

([fe80::c9f3:2b54:1d61:40a8%3]) with mapi id 15.21.0048.016; Sat, 23 May 2026

18:00:06 +0000

From: Samuel Carter

Subject: Website Improvement Proposal

Thread-Topic: Website Improvement Proposal

Thread-Index: AQHc6tq74yWjsfKe0UmCvO0kkUWdD7Yb5jqe

Date: Sat, 23 May 2026 18:00:05 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR04MB4221:EE_|TYZPR04MB6862:EE_

x-ms-office365-filtering-correlation-id: ee55b9b2-ec86-481f-9e1d-08deb8f51e7c

x-microsoft-antispam:

BCL:0;ARA:14566002|8060799015|15080799012|15030799006|8062599012|19110799012|31061999003|20031999006|7071999006|2604032031799003|704163111799003|16051099003|55001999006|24021099003|39105399006|24071999003|22091999003|37011999003|24121999003|440099028|3412199025|102099032|43065399003|31055399003|40105399003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?nX/mv2V4bhNV7dQ1CnXFadteuXccWaEkIx7NRRzkpVfyPmiEHIQYymHPwS?=

=?iso-8859-1?Q?u9bxjDCGgNA3RvBR34K0wxIwFV1dFQ5t7HJn89hGNAK65sNqDpgiH8ZKz5?=

=?iso-8859-1?Q?VYfnQh3YHDzDyyLaW6KmAdc3gZklLSJtvojoJOcVGB37zAbStFlIy41RVG?=

=?iso-8859-1?Q?96MiwVUnk54RlGyI3CgTHhansMI9ShlXFsiRSCFsy/ehiaJwrRGtqI6vvW?=

=?iso-8859-1?Q?ERkweaY1XudeTkzBVpE0oo7p0yHUYszJP42Rj5VhDozZvWzrgsUkX6VoSP?=

=?iso-8859-1?Q?x9Kv9wLvxRI9QPp3/ozUbw5NbxdzfR/9ZCOMjk5Gdl3LvJrffrf7vLsc1o?=

=?iso-8859-1?Q?caCA7QaXfqIz6NfXq86E1ZkFRMDU0Rz6IIDILQvs6HgUjKiWJlHCnVVbuG?=

=?iso-8859-1?Q?7t57x6W3A9AdiRsRIEg6aT7L93aRAUYJQ9JO5zKLpUo3aJLmbG5o11AM1y?=

=?iso-8859-1?Q?D6UoFk7PrJOan/DGvzVw/9jgokL+JrwkNapk0Re5FOqLNvSITwNT/JHzmm?=

=?iso-8859-1?Q?YaBQvKA7TvNkl58JvWlZNxUKpGNjyaxlrgpTOZczQ7wof11ufqxwRjWNIr?=

=?iso-8859-1?Q?p/FympWyAddGurcLWSx5P9GZkvcjNkivGgdYBhTFr9ZWsKa5oIQ9zzuOqG?=

=?iso-8859-1?Q?fScHeWqN0YmJtvhqj0Tph5r2W4PzfxLcOUMJg3yghSuqIyEkTRXfJg5gr8?=

=?iso-8859-1?Q?VpksB76ZYwnWsRgJzq36W97AjS2AhLxx3QbcLnfrAd6/Wohygy+Rvcg9Ur?=

=?iso-8859-1?Q?fhD5UURXE+nWQ2SZ1SOxfohuiLD9YfEZ9yyD/ciPod886Ayg0irjde2DWT?=

=?iso-8859-1?Q?/+4D0Dkh0g9NvLftwgWQrebgskTsRNuPdy6LFvgxmeFeH8kn0CfsTOJ2ba?=

=?iso-8859-1?Q?Uf4c1eXCm6VX+Vywrh67DN+6i2PjdemajRSRlH15K1P10i6dmvgqX8wpvz?=

=?iso-8859-1?Q?YYDDTLJprZCwq3UR4dAbgw9o1tGuCJrHHuu7+C2FLHWn2XlLbPBu2y1N0+?=

=?iso-8859-1?Q?pM9IgRaxiQz3RY1CKM+4Eydj3Lsv+jtpkPxWApEqSz0WU9DJjPsOWjmCqk?=

=?iso-8859-1?Q?hdOZqt76jEhPEBOwvYikr3hmElK4fSvHb2TcBnHy508xr3G+ApCHRo6+yY?=

=?iso-8859-1?Q?yabasEY0cXwZ2EfPHSbP9B+HxgkwhT3LVq/A9KxgyqGLE829MAawg1deV1?=

=?iso-8859-1?Q?WAXzOxF49w6opuuXsqbYFKLJqNvEeCqZboKiRiydK9XpcG8n9/kQb5QY2D?=

=?iso-8859-1?Q?7IDRN8k0AwZKMTr12DikYsA91emq3md6LMWWRyt0xbqD8lh4XrnwkLn0pE?=

=?iso-8859-1?Q?IkFjzxBTG2MwfH6deMIBbtoVecow1gIGCfGNaw/O3DPRGbEastzMeGyN+L?=

=?iso-8859-1?Q?ZcfihN2tK4+vWl8Tx+BqIbl4qYSBcsuHhvl/DPkH/N2LnQQmLWyhapNLBC?=

=?iso-8859-1?Q?jLpP0Yw2cCizXos2?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?FfC/Yc7GkvNsvmggLFYQAr5ODOUmBwHfCwc6rq+vihE9JHPlsFG/dKpvKa?=

=?iso-8859-1?Q?kGcGb96YpKCTwAoZ1Jkwf7e0r+R4Lw6D85xwycVr3GLG8Upa5p9NsPE7GS?=

=?iso-8859-1?Q?W1PE45KW1DNRdfTtMIpO4dRouDVRRny58hyHvhy0+svUgtVJ2Vrp/1ZIqq?=

=?iso-8859-1?Q?NE4tWkeNjZ6iaQwcahkaZbfDae4bUTfuOJYtvhbAS4+Lht1OOAZ257fL1x?=

=?iso-8859-1?Q?vP6lwycLgkyKoW8j2XdWrxlz1fZsOyZLHyi/FTrzR1yYC/MIMlgn3z2cXt?=

=?iso-8859-1?Q?kj+6Pi8lZKNFYqyrYKQJTFxr6X3hRv6q2bGjLwdrfdDlrLa9fBzTG0eQzj?=

=?iso-8859-1?Q?KnCxqM2iFRq/VoREvked7zUZWrXG9c0UMyIKQTs8LpRjEZJGFZtIcDkGI/?=

=?iso-8859-1?Q?VsRFPIkmRMyI4F4bRdagT7TcwQVQ1Ww2X+z/V7x7EPh0Zz2RZ2PVpmnp5l?=

=?iso-8859-1?Q?9bh8/KfWYNntwEfiu9VYC/+C+mo5ZhPunvJSYzzbHrxWVDHF/n7/QISnEN?=

=?iso-8859-1?Q?lxi/Kf+NTckItj0QvFEb/GcClRLQQPlSh/2KOJT+NdM9h/wAwVWiWqK3Rh?=

=?iso-8859-1?Q?zfiVGbZWIXpm88rs63GJ+1xWkp4q56sBhsILlN4kyzjK5g8soobrCSah61?=

=?iso-8859-1?Q?WGLf891n26nRd79twrjqILFIq9ERD/wUQQdCE/ZgCNplHKpVUYDaAIB121?=

=?iso-8859-1?Q?VbGthLeJMA91SB8Z5fV5go6coaceFxd6QKKjUxU/sm7I+8AWhYExyGSepM?=

=?iso-8859-1?Q?sPJZMxz7O59j3283+4v0GOnY43/qTgYVT5lqnUeZQ+l/D1sfiAPlTM9bBn?=

=?iso-8859-1?Q?5ORLlEwd+1hI6utADryg+4i97I2iydiZEv89VcPh9hO0uISUIGdm5kArJ0?=

=?iso-8859-1?Q?+s2G9QIZ/QYlypt7BEgq0WBxe8PR3iEgOS3M/rzUHqIMXoIrGHEeuIi2Al?=

=?iso-8859-1?Q?p5eCbLT4CY6S4nTzs3jonHgRD45bAIQfbdxax5VL6RtvrvtnEJoB9nrJCN?=

=?iso-8859-1?Q?DQQG+iuFkx3gljV4UN0z2yOac2WUYBzW8M1/V0/LyWE8dwvS4/dZx7OQma?=

=?iso-8859-1?Q?NkgFK9qOAeruJzdlZ730PMwC+KHTzscJCcGDQWEXjG7lITOu7JRmpwPasX?=

=?iso-8859-1?Q?EHEOfiZ+Rkq9AST8YuRwZcCMeiGY7CdyVmrGgnefzQeDmuH7EQeEp6FaUh?=

=?iso-8859-1?Q?kiWcid4MoXM95OVDB8KP6W4Pmjx20dxicJgsRgb5SaxW9JR5VmpGcEJxUR?=

=?iso-8859-1?Q?H/vY1FNCKZt3MtpzyGf+2dBDkl2wTNS5nKgm1gLEA6pgkhICH6eau1wQRR?=

=?iso-8859-1?Q?47zrF/xYoMmMlF1CJG3nEzhq5id7QLaVVm/mBSAgdRhkeeqfMGRonMrEqZ?=

=?iso-8859-1?Q?7sp6egHko5dSbwWlLA1IXwHun9OGGdtYcHZtaX/3bFJFn/FkwdImocUE2o?=

=?iso-8859-1?Q?MBd7dImyC0KaiA01Cnz4YJmY+vJNSSKxD6i9GB4Fo7KDWYl7JoSDeTpUAe?=

=?iso-8859-1?Q?XO3N36yWE6uffaUcwYNoBJ?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR04MB4221AC148C1E2205CC805CF4880C2TYZPR04MB4221apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-c3e7a.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR04MB4221.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ee55b9b2-ec86-481f-9e1d-08deb8f51e7c

X-MS-Exchange-CrossTenant-originalarrivaltime: 23 May 2026 18:00:05.1117

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB6862

Web/SEO/app spam from Microsoft OutLook Part 2

Posted by Dave Yadallee on Sunday, May 24. 2026

--_000_TYZPR04MB4221AC148C1E2205CC805CF4880C2TYZPR04MB4221apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi,

Your website looks good overall, but it may not be ranking as strongly as i=

t could.

Can I send you a short report and pricing information?

Thanks!

Samuel

--_000_TYZPR04MB4221AC148C1E2205CC805CF4880C2TYZPR04MB4221apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Your website looks good overall, but it may not be ranking as strongly as i=

t could.

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Can I send you a short report and pricing information?

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks!

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Samuel

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

--_000_TYZPR04MB4221AC148C1E2205CC805CF4880C2TYZPR04MB4221apcp_--

Web/SEO/app spam from Microsoft OutLook Part 2

Posted by Dave Yadallee on Sunday, May 24. 2026

--_000_SEZPR01MB5045FDCAD6ABE2DBADE02DE09B0C2SEZPR01MB5045apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi

If you were on page #1, you'd get so many new customers every day.

Should I send you quotes with proposal & portfolio?

Thanks dear!

--_000_SEZPR01MB5045FDCAD6ABE2DBADE02DE09B0C2SEZPR01MB5045apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

If you were on page #1, you'd get so many new customers every day.

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Should I send you qu=

otes with proposal & portfolio?

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thanks dear!

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

--_000_SEZPR01MB5045FDCAD6ABE2DBADE02DE09B0C2SEZPR01MB5045apcp_--

Web/SEO/app spam from Microsoft OutLook Part 1

Posted by Dave Yadallee on Sunday, May 24. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 May 2026 16:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQuWp-0000000017r-3S8b

for dave@doctor.nl2k.ab.ca;

Sat, 23 May 2026 16:09:07 -0600

Resent-From: The Doctor

Resent-Date: Sat, 23 May 2026 16:09:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012057.outbound.protection.outlook.com ([52.103.66.57]:48623 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQpbX-00000000Ejw-1QiS

for sales@nk.ca;

Sat, 23 May 2026 10:53:49 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=YB1ezzTNVDn+gNyIs/LHybiYTr/i53iSOgQ+DN9oklhH4xje+GU8Ml0bxNp2YJFCxXUPD9EXP9SH2x7tGrN8iSfDio8H7dNob7ofNT44CRyZCyFPnTKSj0D4iKc0OOm213th2GAvIWLHCPVFQuNyGmMe9ZZfQ2x3MEPBaoPsY4rp7w/zQX1UAkcW44ZMcNetMmfuKcYzlqM2IOZRzQUuz/ETdjQI3X02T9yKQWU4lyJMY3wKt8d9V0nkPOKXAVx46JRhHx1+KEYz4dCFQ3OdwBksAya6R8uc1HcAJ81k3vCFfCSZ4yPocZ3ywIT+BZuC0dzhjSeA/RiRHF1TE7wuZQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=//fRzAlZYnb2NHa8sOyOgCGWt+/C/3U9ARE/tBjvCV4=;

b=e3vNDRzvtX/6afh0uXuzWngtaFyYSWI1WhBXoRY3vi9f1j20kP7lAWt/sC5Nwd3v4zfPyYF2b0Y5KZW6MwIg3FaKzp6suPjVal+v6C1I+pe8zBEBTdN2yAmkXotsJh+/TtHbbrIbFRvOLHgfOz4Hp3iPl4f7DyRD6uY3/OsL0a4NqRkVKTc0wYFxI5nD1Vw/LdZTmaQbkl4Cy1vMWK0qGGU/JWSxw6Q12Hp1k6cS6Pv2BBGDTdF+4kzx8AFtagDpuG+YJvo6Edav69f7iokmVNKA1kBo1zNe6HxUkisUynLZ4wFRK3LipW2Mh8xeCVPp3XLAzdXPPbd7xci9ak8sqQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=//fRzAlZYnb2NHa8sOyOgCGWt+/C/3U9ARE/tBjvCV4=;

b=cMdIYLvHUB9VNOhAokUe5ZWM0/5SytV4HM1/5okHvUmzHhhZokG9ysCPd5pvVTw1dK7GiT9mHJAEw0QGziXZQNCFr8kGG7FSlIqn9A2JQfnp8I/AGl6NHDgYFyNbyZctQnPZ0iEOwS4exKlHNZhyT2Qab+KKqtIuPv0slse1keqzmal6Lowwd09N2mXEaO2wzvBayxz97F3TGXroGXA1XH5R3rpgajHTgnHIJl+CXLz97tA9XcDO6P5rhckzAfvXR6c7EChAfxTQxQVujYC4BSHovbyv+ghGsk9eb+2SkwFxFEDcLgtDeEKZgvGOoH2l4XA2cUEG5AkMzbTRnUOWOA==

Received: from SEZPR01MB5045.apcprd01.prod.exchangelabs.com

(2603:1096:101:93::10) by TY1PPFAA1600831.apcprd01.prod.exchangelabs.com

(2603:1096:408::344) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.48.17; Sat, 23 May

2026 16:52:23 +0000

Received: from SEZPR01MB5045.apcprd01.prod.exchangelabs.com

([fe80::14a8:58b4:4a25:242]) by SEZPR01MB5045.apcprd01.prod.exchangelabs.com

([fe80::14a8:58b4:4a25:242%4]) with mapi id 15.21.0048.016; Sat, 23 May 2026

16:52:23 +0000

From: Kelvin Walls

To: Kelvin Walls

Subject: send...

Thread-Topic: send...

Thread-Index: AQHc6tMhd9cikrobe0aQTE1gxCgo6A==

Date: Sat, 23 May 2026 16:52:22 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR01MB5045:EE_|TY1PPFAA1600831:EE_

x-ms-office365-filtering-correlation-id: 2224dde9-7c98-4131-ed93-08deb8eba937

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|15080799012|31061999003|37011999003|36102599003|2604031031799003|55001999006|8060799015|8062599012|39105399006|16051099003|19110799012|2604032031799003|704163111799003|3412199025|440099028|102099032|18071099003|39145399003|41105399003|40105399003|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?/6qNMq+kSBfyVN751HaTz5ofrPtcO8uIKRn8EJRbaIZ+a1bDgv8nFt1mvH?=

=?iso-8859-1?Q?AMZjGH3zYnbneipZAhQoxXiSg2PHXwljdWrvS17A2tPCtiN9siJvlLWG0B?=

=?iso-8859-1?Q?gJmW6bgeUuMMaAZgfwIMPdlsQqDf/WumSsCfApw+nGZxGNzjIZEug3tJyd?=

=?iso-8859-1?Q?mz7gi2R+xpq8zXH3BSYyojpMOe7oBkMlFNzsZOE2h09RkmwauOq8GEYned?=

=?iso-8859-1?Q?j5GQstsJ18Ttmg7OjD807weP25pUiHQwAwJjdUUfjBVOvorRig4ir5IJ/v?=

=?iso-8859-1?Q?whRZL+jawO3Bauns/5QoAsHLQvflofKiaLN4lUsQbXaRYGMSMpBgAbog3C?=

=?iso-8859-1?Q?EGieWuy8dyLTVFaMA23rcdIEEfEfw1Af4qmgYpH67i+UHu1nEnSBrvGYEn?=

=?iso-8859-1?Q?Z8SptBjRckipMNexEJr/ZyIINqDgiygFW99LHgbV8PendZpqerS1P00398?=

=?iso-8859-1?Q?G8Tga+Xh8ir3IRZB92XzPFJGri9jCB2VlIba4d0f6t6VZYw5Xs3t5338UQ?=

=?iso-8859-1?Q?e5bYRgQUYh614XDabe+RWxTbnRI2RXGuL6lCNSGCkUF7Wu/d3Q4n0Hi+8K?=

=?iso-8859-1?Q?IDEiJzyS5dRrOqFRYg6bhozrn1VLlnXcBptu3i2EuBTN2iwYqHCdTOhdnw?=

=?iso-8859-1?Q?D03sKnYzlofdY4aPzoGdyYxeqr6nhuVR2aV4Whdi2Hg01TbrJbvP7Kinu8?=

=?iso-8859-1?Q?JfPJhRUMK4e8xkbpm9yqEO5OVS9E/kkklsYAg02eSMtbAp/o/66SXMFIR8?=

=?iso-8859-1?Q?dkloiOkcwIj/Wle7zvTXmOOg9oGUVBzgk91K4Xvvma2LyPvzP8vLgpVTb+?=

=?iso-8859-1?Q?0IMlyKb37VZ2mP0CfETrz8OF7e4BTfGl7dmMs0/A8WbBLjBRr3KnxCUXln?=

=?iso-8859-1?Q?6zy2+5hr2XsMuyl+oniB+VrbR/YG/y8iBvO7SWZ4cQaSIqnqI9/Wq1zamm?=

=?iso-8859-1?Q?Yd6cNtWDjzKw6O3bJdhxLhWM/zzADkXbU8pYohzSdQzIK8clydWOA8IltX?=

=?iso-8859-1?Q?Bct83c+Rx0QZ1rGMGnpM/myM8kJBt75la5GSB/XCNcfunCE4A5fkR06Rlt?=

=?iso-8859-1?Q?OJAdE4Gf4JjtDYrbkHBBTNgDuYjsYtvrwftBkWIXu+/ReCLwwDb+f8SudA?=

=?iso-8859-1?Q?69ilvqTFCvjL9WoYqphkaDZS+NRv+eXTkIPgmCm7/SUTxblTJ/hSPq9Fsd?=

=?iso-8859-1?Q?k38mlJjtoEYb0cILGRmLifoWf6jmFPzV6vGaU1yyPAq9HBe6OAAUWlNI2q?=

=?iso-8859-1?Q?tYCYJWawOU8oKX8CQckWM0PEafgIhvUawl/qTZ8gjoSAsFkGf8ZrB2MH4g?=

=?iso-8859-1?Q?XTEGNgvU1f80waJ1yyXhppxJvUvpfJWjEQhe15uv6RzT+2mxIQzbRzh8PW?=

=?iso-8859-1?Q?p3RLGGK9o1?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?3EEHK4EGW4ajDFiAasgQ1ogka5CnplreJE0m+O/6JyPkVo4SqPH/7mGOfL?=

=?iso-8859-1?Q?hlDP1tAb7GvWzVi/6YS3n5cfbaryo94QCJPC2X1i2oK5ihpCLbg026is+u?=

=?iso-8859-1?Q?TxMRo0A0ox3uKiGze0aw/6j4QAPj22CVS2i3DHNUeEBptJ0bRdAIj15LX+?=

=?iso-8859-1?Q?1vA0OxO7ab5ujMRKNh2ztWyJObWLSd4NqgS+105EuPqorsLugMilvY/rbl?=

=?iso-8859-1?Q?yYtX2g7afwYVC8u/f5J4um2Yx1qB2U57ZVYA2ThshNEQCLA/4sCOk1KT2t?=

=?iso-8859-1?Q?Eq2BEqN8tNMiXCep7kgjVHFdaBK5lv902zAwPU6VJ+Ukzscm+SGRT+3nzE?=

=?iso-8859-1?Q?OY8/YZWP8L2y7Sf5ocPEKaWuIPiiGyTgG4UXkemdbLAfomTFukJtUxzrdY?=

=?iso-8859-1?Q?me4pef37PrzLuiY5IFxZhUKfi1xScOvVowVPKKK9ny/8Lu4riuH35RMgEj?=

=?iso-8859-1?Q?psoE8Qk6f8h91wwbTnVRbCtuY/RV+kKE5qvWaWoi8wqh74RBLF/tprQLkY?=

=?iso-8859-1?Q?3gm6Y6DtR6TyFmlUFY/jtU9qv1rA804tJOyCbX7BWnBX8Uztk4Kz9b1Mru?=

=?iso-8859-1?Q?WoesJFUqtQwM3kN9V6hdYJanTeJ8kDEUn+xOmjTK/1AtHSE4lFBzgPcpSD?=

=?iso-8859-1?Q?vJzl1RDb23xtTmM8ualsLHUh8ahQiGEphjUnZwlkEUTcym/x1O55LL18WP?=

=?iso-8859-1?Q?UtGMlgWNHVqxmYkJh7H61sydM5ppyPc0Hg3KR4wX4W1wRuiSkL/qZllSP4?=

=?iso-8859-1?Q?EojcKnq3szVFRM7QfDRvlOzTPWP2W8W9dzrBf3aa67ohoJBQH2KIgeTDq5?=

=?iso-8859-1?Q?WgntzmxoXgD5BSt7mN5tXPR6o8UlsTOAi370psbbcjaELkymRspbfCqYve?=

=?iso-8859-1?Q?j2CmTz43Meqd0rvZvwlQb/iICRqvBhk4A5MGJHai8CPux/Z1glFROfgO+P?=

=?iso-8859-1?Q?kSVvjYW12H3ZrmYGDGKwHtFEPk/qVsEXC9/+s5l6E8SGVYIv8JoQL+h0uD?=

=?iso-8859-1?Q?xlYKen5OeMaVCjfYyrdUPQHBzCvFLVej1P1f/6ya22pvLgUYqTzuSYoc/t?=

=?iso-8859-1?Q?seNBvvMNrmyebd4lrxBz1e547z7s0d39rnsF+Rjvwz6mef6TeNUPYruula?=

=?iso-8859-1?Q?gVTq4v+M3OrtM7b6Ob4BY3aaYZ3IbxmwNUnSSd7KkE0WHf8jUnSzkgBYm6?=

=?iso-8859-1?Q?am4yLgfY0n5B5rF8tcaj0f3QsHYAqQt8Z8kOZB+wwv/qgcSYFMG3ntXToi?=

=?iso-8859-1?Q?btTH7l5zX9tzQwNZcLqA9TTBCwgOQh8tW4Zsu2XlhR7YHH1+X9eTSQrIY0?=

=?iso-8859-1?Q?2CGcSJd/v0eKzUGUPJk5G/6xcgtgNBxyZ8dwFmT9p4lLeTI1apvdgkX/on?=

=?iso-8859-1?Q?GFkSPGLu8cCP3LxCgZeeGDehhcR9z3gCHCW+LJqJDMg0YiIJUN/8MiQ9iP?=

=?iso-8859-1?Q?PU17vX2bnVJs/6QxKSQjM/HxOf1WDQu9xTqzqlM+B1LuFiNzn5bCJvQpUw?=

=?iso-8859-1?Q?dpXeNYfmiP1zLWJz9GMlSF?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR01MB5045FDCAD6ABE2DBADE02DE09B0C2SEZPR01MB5045apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB5045.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 2224dde9-7c98-4131-ed93-08deb8eba937

X-MS-Exchange-CrossTenant-originalarrivaltime: 23 May 2026 16:52:22.8524

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY1PPFAA1600831

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	May '26					Forward →
				1	2	3
4	5	6	7	8	9	10
11	12	13	14	15	16	17
18	19	20	21	22	23	24
25	26	27	28	29	30	31