Paypal cryptocurrency phish from Google Gmail Part 2

Posted by Dave Yadallee on
--000000000000f1f978064b93352e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



UGF5UGFsIFBheXBhbCBMTEMgRXhjaGFuZ2UgQ29uZmlybWF0aW9uIEhpLCBZb3VyIGV4Y2hhbmdl

IHJlcXVlc3QgZm9yICANCkNvaW5iYXNlIHZhbHVlZCBhdCAkNTQ3LjI5IGhhcyBiZWVuIHZlcmlm

aWVkLiBSZWZlcmVuY2UgQ29kZTogNmYxNjEzNTZiM2Q5ICANCkRhdGUgJiBUaW1lOiAyMDI2LTAy

LTI0IDIzOjA0OjUxIFdhbGxldCBBZGRyZXNzOiAgDQoxMjYwNjBkZC00MzlhLTRjMGUtOGMzNS1i

ODU5MTg5NzdhNGQgUXR5OiAwLjAxOSBJZiB0aGlzIGFjdGl2aXR5IHdhcyBub3QgIA0KaW5pdGlh

dGVkIGJ5IHlvdSwgcGxlYXNlIG5vdGlmeSB1cyBpbW1lZGlhdGVseS4gQ3VzdG9tZXIgU2Vydmlj

ZSBMaW5lOiB7ICANCjEtODEwLSAyOTMtMDM2NCB9IFBheXBhbCBTdXBwb3J0ICANClRlYW0gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4NCg0KQW4gYXJyYW5nZW1lbnQgbm8uIHs1Y2MxNzQz

IHdhcyBtYWRlIGJ5IG1lbWJlcg0KTW9uZGF5IEZlYiAyMyDii4UgMTFwbSDigJMgVHVlc2RheSBG

ZWIgMjQsIDIwMjYg4ouFIDEwOjMwcG0NCkNlbnRyYWwgVGltZSAtIENoaWNhZ28NCg0KDQoNCk9y

Z2FuaXplcg0KQWxleCBNYXRlZXINCnN1cHJhbWFpa2FsNEBhY2Nlc3NrZXltZi5vcmcNCg0K

--000000000000f1f978064b93352e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

















Paypal cryptocurrency phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 08:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuuVn-00000000OdZ-1Gso

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 08:39:47 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 08:39:47 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f74.google.com ([209.85.210.74]:53372)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vutyv-00000000NP7-3rDF

for root@nk.ca;

Tue, 24 Feb 2026 08:06:00 -0700

Received: by mail-ot1-f74.google.com with SMTP id 46e09a7af769-7d4beae6581so64841032a34.2

for ; Tue, 24 Feb 2026 07:05:03 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1771945497; x=1772550297; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=iHd9gDhz8w72phiMZvBMkDyzb1LEmL+hi70aFq0j+nQ=;

b=r/+wzgA8KL4PxfUR2EpfdgTQzlh2FKY3WFYEJo6YJRwU0/dC27/MLm8YTOfAak7dQn

A7mqUa0bhS3y+nLoUlS02kv+ybPD89NOTgOtJdF1OBg5woeLjgATYkAmDl/LDDS1zYpP

IHAlVxPVDtgjrKba34hdulKkhn0kS9aF3nvZ3sCbwbPLb7hFJTBQZXhDdDRCqsNEcR3M

hVTUfrpG0jRb6sytR3ze8FQgimBTe7ovuuR3Vff+J/9ybmDPtfJP9SnkodtbO2HPRS7h

iizsYZnbC5LxDoZqFvslYQRmVugihtaC6F9LmwVhwblAl754aLby+r3ZnAKQ5lUmlHXl

NzlQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=accesskeymf-org.20230601.gappssmtp.com; s=20230601; t=1771945497; x=1772550297; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=iHd9gDhz8w72phiMZvBMkDyzb1LEmL+hi70aFq0j+nQ=;

b=O+sKP9T48JjoGl2iRbizuRAETHNTQ7J0tREQvzo0udkQm2gC10RQZXTedazVado75g

xf3lBvnHC0M7LMTTyGT/9/psRxO6bTQEZ0qkcRNL32/dffBwEEcHuETjqX52+Nft6hJD

n2MGqDMgLtxXyvXLuktJG1pHcVoGuB1YdLOWxnFy2CJcPmvLJGgyUcugt+2peBhhqXvI

EvIQp9B8waAayDcW/ErJvD7vrIQXRdG8+ouCZ5Boq3NeN4v6ty2WIPKDVD6o5dT62yIK

W8O1s7BYZnrHDlNF01rUYDmldW6GuqCxXLc/nP29HC8onqOBa2iPtImBxslgdVLHn6S9

PZeQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771945497; x=1772550297;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=iHd9gDhz8w72phiMZvBMkDyzb1LEmL+hi70aFq0j+nQ=;

b=suwreVVHLDsA6lGO/QXN+0FadZPDM/RKFDTmKo/37tuD2GFi478PhitHOeYMEhlMG9

52PYkFAVIA/dPUD9mWPy8XCRz9d/CyIYaJxvJyUTaPRtztX23lmcpS1Yn2G4KRIqB7O+

ZjzgJ3FuX211zZ8HeIWAYqgQRUlXpJmKWzPSnQHc9eV/KDVvVckQZPJsAV6caQevgO+r

sz4D05R2Pq3AkMsy4BGwY7jv5UMSaTQZoEtSpcu39Li6VUIRwLW8uMsvtr9drHtBmi4g

1eEmEe+ugCukhPf9XKEUmnVwPcmM+EZjVosF/SvpSjUUDTlI7rFX1kMMenJMVcbFNQmg

xtpQ==

X-Forwarded-Encrypted: i=1; AJvYcCXMqJYrGVRlrnNfSYbRU55NV8npc4920DiZn1iCJAA4PHzCPj4epyXgcvndodmoLoG9JW+E@nk.ca

X-Gm-Message-State: AOJu0YwxfZFo5QgezrKKIzMd74A20x/fDIMEKy59ovS+1BA+JpVXQU3r

xgixmW5AOfW7LWHMxa1uWF2JgHB4TvMHWpsV6gFo95S1imVMPWe0F+sXKtxigPfwkg0JJ2MJi2v

u0w8EnXxGhDIPnSvwYOqGSpXajP8m5qiICCyCC1zhVR5Oqw==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:80c6:b0:678:1941:c633 with SMTP id

006d021491bc7-679c4257804mt10035432eaf.12.1771945497331; Tue, 24 Feb 2026

07:04:57 -0800 (PST)

Reply-To: Alex Mateer

Sender: Google Calendar

Message-ID:

Date: Tue, 24 Feb 2026 15:04:57 +0000

Subject: An arrangement no. {5cc1743 was made by member

From: Alex Mateer

Content-Type: multipart/alternative; boundary="000000000000f1f978064b93352e"

X-Spam_score: 9.4

X-Spam_score_int: 94

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PayPal Paypal LLC Exchange Confirmation Hi, Your exchange

request for Coinbase valued at $547.29 has been verified. Reference Code:

6f161356b3d9 Date & Time: 2026-02-24 23:04:51 Wallet Address: 126060 [...]





Content analysis details: (9.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.74 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.210.74 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.210.74 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.210.74 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.74 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.74 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} An arrangement no. {5cc1743 was made by member

Web/SEO/App spam from Microsoft Outlook Part 3

Posted by Dave Yadallee on
--_000_SJ2P220MB161036B68AC4DEA5E3D744EE8B74ASJ2P220MB1610NAMP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>








break-word">



Hi,
span>



 
>



Hope you are doi=

ng well. I am still waiting for your response.



 
>



Do let me know i=

f you are interested and I would be happy to share with you more details ab=

out our past work client testimonials and price list.



 
>



I am looking for=

ward to a positive response from you soon.



 
>



Thanks & Reg=

ards,



 
>



From: Sakshi Sin=

gh


Sent: Monday, January 26, 2025 5:01 PM


To: 'dave@doctor.nl2k.ab.ca' <dave@doctor.nl2k.ab.ca>


Subject: RE: Website Design & Development Proposal at low Cost
p>



 
>



Hello, &nbs=

p;        



  &nbs=

p;        



Hope you have a =

great day!!          
>



  &nbs=

p;        



We are a profess=

ional website development company, based in India with a str=

ength of 150+ employees and a great portfolio to boast about. We are differ=

ent because we provide the resources you need on a

short-term, long-term and hourly basis.      =

;    



  &nbs=

p;        



If you're really=

looking to build a pixel perfect decent website or want to re-de=

velop your previous website, then please share the details with us. We=

can assure you for a great design.      =

;    



  &nbs=

p;        



Our Develop=

ment Services/Resources include: -      =

    



  &nbs=

p;        



• &nb=

sp;   Website Design/Revamp/Upgrade   &n=

bsp;      



  &nbs=

p;  



• &nb=

sp;   Custom Web Based Software     =

;     



  &nbs=

p;  



• &nb=

sp;   Portal/Marketplace      =

    



  &nbs=

p;  



• &nb=

sp;   E-commerce development    &nb=

sp;     



  &nbs=

p;        



Just keep an ope=

n mind and If any of this sounds something of your interest, then feel shar=

e your requirements and I would be happy to send you details about our comp=

any, pricing along with an estimated

timeline for your project/s.       &nbs=

p;  



  &nbs=

p;        



Looking forward =

to hearing from you.         &=

nbsp;



  &nbs=

p;        



Warm Regards,&nb=

sp;         =



Sakshi
>



Business Develop=

ment manager



 
>











--_000_SJ2P220MB161036B68AC4DEA5E3D744EE8B74ASJ2P220MB1610NAMP_--

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content preview: Hi, Hope you are doing well. I am still waiting for your response.

Do let me know if you are interested and I would be happy to share with you

more details about our past work client testimonials and price list.



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.11.17 listed in dnsbl.ahbl.org]

[52.103.11.17 listed in dnsbl.ahbl.org]

[52.103.11.17 listed in dnsbl.ahbl.org]

[52.103.11.17 listed in dnsbl.ahbl.org]

[2603:10b6:a03:595:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:595:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:595:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:595:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.11.17 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.11.17 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.11.17 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.11.17 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:a03:595:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:595:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:595:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:595:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:595:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:595:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:595:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:595:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.103.11.17 listed in will-spam-for-food.eu.org]

[52.103.11.17 listed in will-spam-for-food.eu.org]

[52.103.11.17 listed in will-spam-for-food.eu.org]

[52.103.11.17 listed in will-spam-for-food.eu.org]

[52.103.11.17 listed in will-spam-for-food.eu.org]

[52.103.11.17 listed in will-spam-for-food.eu.org]

[52.103.11.17 listed in will-spam-for-food.eu.org]

[52.103.11.17 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.11.17 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[allin.sakshi1420(at)hotmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[allin.sakshi1420(at)hotmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.11.17 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} RE: Website Design & Development Proposal at low Cost



--_000_SJ2P220MB161036B68AC4DEA5E3D744EE8B74ASJ2P220MB1610NAMP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,







Hope you are doing well. I am still waiting for your response.







Do let me know if you are interested and I would be happy to share with you=

more details about our past work client testimonials and price list.







I am looking forward to a positive response from you soon.







Thanks & Regards,







From: Sakshi Singh

Sent: Monday, January 26, 2025 5:01 PM

To: 'dave@doctor.nl2k.ab.ca'

Subject: RE: Website Design & Development Proposal at low Cost







Hello,







Hope you have a great day!!







We are a professional website development company, based in India with a st=

rength of 150+ employees and a great portfolio to boast about. We are diffe=

rent because we provide the resources you need on a short-term, long-term a=

nd hourly basis.







If you're really looking to build a pixel perfect decent website or want to=

re-develop your previous website, then please share the details with us. W=

e can assure you for a great design.







Our Development Services/Resources include: -







Website Design/Revamp/Upgrade







 Custom Web Based Software







Portal/Marketplace







 E-commerce development







Just keep an open mind and If any of this sounds something of your interest=

, then feel share your requirements and I would be happy to send you detail=

s about our company, pricing along with an estimated timeline for your proj=

ect/s.







Looking forward to hearing from you.







Warm Regards,



Sakshi



Business Development manager

Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 05:59:00 -0700

Received: from mail-eastusazolkn19012017.outbound.protection.outlook.com ([52.103.11.17]:60835 helo=BL0PR03CU003.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vurzr-00000000B64-3YJq

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 05:58:51 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=q43rI8jriubICbixTr4A1kxLPy/izaLsLd1KIC7IdW36hl49yrIxJpw9BSVSQKFVrEh93llgsz9uWGHe5OQZQjGGCoWlMElNEjg4tV0kcxDsvvGETx4cwekPo9QUzcOXdhSzHJ0/Bwuje/hhblvghDp1J/CoKZLnUp5paRp2WLC1NO0aWTYtM9OxNTrqfQJgJAq/vUWfalJT3/thOXSQbkjyLnY7mtQfiMzIGuefwWlC8XgGORXcKPuwdOB3GlMc5ZmxIFV8ypkRq0KQmNWKd9c19wgyxs46ihUvjat2luqSNNwZASY5Y294OEcNVd8UMndgrLW/OgQI3exUA5G7sg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=elSKaicmkYw5Zl5HbRTd8xT0zAqKcO3jsmoYYKJHavM=;

b=HvgFfjsiXSaqqhJLKKC5vuauCnvgGYgI8JmWD3KTh4eCrIc2Bdt1ZruQqmAhzVa/yXWBal+5Lh5cFUMRiN1NAseko4PfQ77ZP9YibTpDA/doFwX5PFnrlLZMGQqD5ehcHtbZtgXfkHJ6CF8yIwl1brwB7zCw0ItQaNoqZbQRWazpuAD6zQFjsahHXSb/ec8AtrA5Exx4UeIqus5gKmr4pZ/3qs3Ck5P/FqsRPdSL0fZkPSHBemHAv2H0bsZkz1UPXccgNlgQiV6gSkvRqk0zOWLxIf2uET+aKcYn/Wd2X713iXpoEyWx1NJ7J36cjcxj3giH1rzHUXq9KZoRrJCgWQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=elSKaicmkYw5Zl5HbRTd8xT0zAqKcO3jsmoYYKJHavM=;

b=HJPpUb+POKIoITDtBZZXIm6wVhAS/MR5eO/YfeEg4xh3MlP3NilX65tXGFZXUcstRVEsEr0K1F+upvprakl0xOb7SXBhMYEEURyI/4wM/ha8aYCl9uGfYuJ/fnomPvFGoVbfQ1vTNTWaRHw1hpkPK67pMu8X1ck5EK67jcRrHv3KWpRmOMsIqbxjajpa1BQvfTobvp21wZom+zrq44gqkHYccDd1fLpf7BXlVP1qNQMJXwnEMsW0nVfZTKjTk0SrH0X96S1DucWiS7sHNdB++nm70mCx5MRKyX/tN55FM6xD0XUVr8ZD9UPkRAVj96IPOlCuLEnn1piZro8oud1A0Q==

Received: from SJ2P220MB1610.NAMP220.PROD.OUTLOOK.COM (2603:10b6:a03:595::14)

by SJ2P220MB1509.NAMP220.PROD.OUTLOOK.COM (2603:10b6:a03:58b::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.21; Tue, 24 Feb

2026 12:57:44 +0000

Received: from SJ2P220MB1610.NAMP220.PROD.OUTLOOK.COM

([fe80::625c:b565:bddb:bb72]) by SJ2P220MB1610.NAMP220.PROD.OUTLOOK.COM

([fe80::625c:b565:bddb:bb72%4]) with mapi id 15.20.9632.017; Tue, 24 Feb 2026

12:57:44 +0000

From: Sakshi Singh

To: "dave@doctor.nl2k.ab.ca"

Subject: RE: Website Design & Development Proposal at low Cost

Thread-Topic: RE: Website Design & Development Proposal at low Cost

Thread-Index: Adylh6hUBdFuE0jdSOKp40AS5/UUkA==

Date: Tue, 24 Feb 2026 12:57:44 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SJ2P220MB1610:EE_|SJ2P220MB1509:EE_

x-ms-office365-filtering-correlation-id: e0a0dcbe-9999-40a9-e68a-08de73a44d57

x-ms-exchange-slblob-mailprops:

gMiuAN0LASIPtJFHWBzvUtRfhjUdI+tGMwFFhjYo7H32GoFMenFLtq6rRTvnUdMdDYOB6hAnYmvAYaSxUpprFVUdk4vQJ/W+zgpCgapIISrZuLnDs2u8aXLgKyy7ZFu0idmnfpkcqpdvQ2NmHscVizR5pCLKRZSYZs1vs8VufXEGT6YN4t/YsJ8fEdQ9S2adf1a+g3mDuHn23tdi0onjPtxFfLmjTM5HsIwbGiklvbItg+dfY7Cd+OqwxUU6BpiDbWV4GOxgmU9d1bpmNal89ceFZVY2pz9EwsXXH4YiLR+Can4/RrHQixPWHf1XYwQmHGuX22JiZxYLHM48Yu5U7A3STdamtnn7Ipk89kGUsAHAQ742PWGYVL4fXRZay5nqBceUAaYhEKqqFOgIgrD7HAQ97RazDEyS3E9WSkGqJtlbW5rj6vMcIjGmuoZoKat86Q/PqqHz/ySmSOIipnr4zDNHib30vtcNJciB3BK2zaZj4MsJ+OFA3Ca7CCF1RIPQQCRl06u063XqfN2Lnzh6Hz50QxhdJEAy6SND34nSJPwzTRZl/WLUcfbVD6QDTFt7CTcZr0HToI1PK6QNX5KZVx1qMorOYcxTjp5T6rrDJv0NrPhloEhPJUYrkK3QaTlxXz9ZEcT1Cqwqs6oo7HxN88mEyobg7D8wTfOakDYM9PeIQOiNRPsRxbYyJrc2rv9Rhrn+QeRwydgM2VjUvMsD/w==

x-microsoft-antispam:

BCL:0;ARA:14566002|5062599005|461199028|12121999013|39105399006|13091999003|20031999003|19110799012|31061999003|8060799015|8062599012|15080799012|3412199025|440099028|102099032|30101999003|35041999009|40105399003|29125399003;

x-microsoft-antispam-message-info:

=?us-ascii?Q?YRK+u7wRp9f4nHVaS7BeXEDxHCnsuFAB/o1CI8JXznivbD5dJLr/7Bzw4Z5/?=

=?us-ascii?Q?WnZODhQtKxZTOanCANHozkGVFbi3zqJOPcgZrk7TKy/3chrYxEsg6bwB0OQh?=

=?us-ascii?Q?b9pLfi56O1oJrNbPm81YJr9X0NtAxFPki+mwXdep8OhQVTYaWzMkFDRPXRoR?=

=?us-ascii?Q?RFneGr97LEpTapDXi4f6SCAyy9THCv40bOf7WQOIfF2wEIVP6FmBXVYb5fyr?=

=?us-ascii?Q?w9f5JgsHTkYRY7Kkt5omlHNa9HhTQDX+JcwiQQTx2OTQggHyeDe91pWhFJEd?=

=?us-ascii?Q?fU8ck5kKC8iNyP6azL/4650NY4n/Yk9bYGubgqEC4qDp2D175EpLVl+jZcG+?=

=?us-ascii?Q?LI8STeSEUbBxR0SY7jodjmviWBrpjVLGA9tuqfhVmWchWgiCjL6bMltKTFdi?=

=?us-ascii?Q?a6La2gysRo0+UeBL8B2jvRhEGqHr1KWkkkSooUBc8752JSCLcKpJFk8fZcBg?=

=?us-ascii?Q?yNBMTJ/nT6ZDb9RcI7hWcCRyAvagPCIZDvnUmzFx1gsC4AMA0YM/5qTv//oX?=

=?us-ascii?Q?sRm3OCRWAp5OJz37QcyoWMCPSRHBFIg10qonOdxuHPNG1zzVwPZV1UVhQKjV?=

=?us-ascii?Q?XHUm4ei0zsK9a4KL/KOFp1yMhJW+PKaQ9Dt3n2ahhwOXfE7npm+RbED9yjq6?=

=?us-ascii?Q?EfnkIiiRP8178FqX1G3+K1OY6xbE2olLcAe9v0JKlWpiNRVqu8SnKaLiCXsC?=

=?us-ascii?Q?joJgUejPigC3u1bQIyb5TTlx079IqOyRn6d2tseA7czKqpFY1joJAnfla20z?=

=?us-ascii?Q?utz1bgnQj4Rv19QDImr5E3JFWWGg1iVzSzTv6u7hCPrVnsWOwuv7A44A0lcd?=

=?us-ascii?Q?v4u12XsTc28c215CEQi/UXB8KCt0rv9VxQAObSsgM4c4KFGw3cjN9J6+bOjV?=

=?us-ascii?Q?yltyBSsCE3QLbadK+Ve2+05pSz1ICT2T/CjgdJMLUf5TdB3AWAb66ai2q1S/?=

=?us-ascii?Q?55j4eUJnYM9PecL0JDUBfW+s6rVSIIP0tWhXU4K/K9U4sI8aA98FoL0tnWGR?=

=?us-ascii?Q?hzjT/4W708/iWAIqA2HhzcoHky4HBXcNRidY3ISKVIarBqK1eCpIhU4R9Xqk?=

=?us-ascii?Q?VYQrkDojNGeTSJOnly6spejYV5foxknZ2zxWCEav6zH8drR1UVCG+wlOEA61?=

=?us-ascii?Q?LYXIt7vsZmCJ3k0mBh3z0gA/xHTfthPXhpBq7uh2VUPCi0Hc8m3l9+bp30r6?=

=?us-ascii?Q?tBHVd37d2U5vd8gJRFDpUbAWGnrc07lmk2SyUKT7kzlmpoWKHitQXYUakiEt?=

=?us-ascii?Q?lAP50eoH8hCJv5Mm5fiRhoCIQSagakszuTNKRhIG2wHTjawhPaBp6PG9exoY?=

=?us-ascii?Q?cONhBxPZsB9uaqh2Ga4VTbfWhfLmOZCloX7PgqGmp53huFh38D86+Wt28Mb1?=

=?us-ascii?Q?1Zhd0ePb63PlK+Rf4jz9Bf+t5z3jBM1OledOKpqfqW1t4TIf6g=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?rxmVwBqvTxEfFXsHUpsbI0GU+SxuTUWfJ0AqRM595uwISw6Fc4rzFIWo/qyj?=

=?us-ascii?Q?tAWsFYXWjsKvcUy6opjePewDY+P3pxAW9zkzf3UMaZdy4rE+TtPoWGY8TSlB?=

=?us-ascii?Q?fcl5skkKln4yn5gPekOX2cP0C1ELhpKILE6YpJdVAnXocKMM8v3xqpt9v40M?=

=?us-ascii?Q?jR9j4jRv8T4anUHF8rqP/7c+JXChD+dMC706lshU6EvFCkXk+n1NuMxULClW?=

=?us-ascii?Q?txUtsUWb78y7IgWRzefxRKlhjJCXxDUyt6HgblsTumFIhBoZ+gflazp+GHvk?=

=?us-ascii?Q?AaY87joFHgVb/lVK99CIpJnYy1KQ7QHua3LvH1MNZSP8urTH3/sNyeNG0LjJ?=

=?us-ascii?Q?8Z+/SzfHS6J/aiszGt84P8zoUM4vQorPTsbIDSjxQukhXYrhm7yG3tMQX4nf?=

=?us-ascii?Q?IMdZq1xtzLml3LOhsKPFrxhmkGbawqLb3bHiZobcu3qM8UkgjHGDGUYco9wC?=

=?us-ascii?Q?BLbfThWuF8xD13V4ED/TpOT/ZJtYUEhfKB3ESe5obmZ1bn3qqfInvX0Mneko?=

=?us-ascii?Q?6iCpLZRe2gMI7bsw9gGvack2W6zYnn8GdPDG3IPszzG0xUsJnp5h7HHbDsxI?=

=?us-ascii?Q?pt83HEHv1rjm+pN7JMgWuUxRg2DY2SHEcC21A/lUxwALU61XJBGLMBZ3XXIt?=

=?us-ascii?Q?2HLLbksxieoZHWshoGi0oLENnZktYhD47LFiY2MKpfeGhwjLMAziuD27tvxq?=

=?us-ascii?Q?jdV6qdQ9aHgW7c+Nc+WvpafS07U4bYVsRrc050j3TtGBvoyixUMHxLUo7E5z?=

=?us-ascii?Q?ENBKdI2V8gduqzmD+rE4sHpxbmzLOAZEwxebOTedySf+c6dcMag7576iDJnE?=

=?us-ascii?Q?+NtYd56rg9BH8ZfIQM2pr3d0AOIPbO1HR/N4TGn2Tvymx13KyKlfgu9l4g7S?=

=?us-ascii?Q?xqJS5Y94fxuh+AzcW19vwHddID2W9Xb8rnykh5MGZwyiXU0Aq46OGU2WS9kK?=

=?us-ascii?Q?TV4FC3HGHoj5fG5HNozmoHta8HgzaYLxDiOOHnYFWk+rdMx31UGFQbSiI2iq?=

=?us-ascii?Q?15tVTYR69FitaB97Ax91LJJy+qjxKuYK9Vbf7kewb6v/lpbi/o/UfTC01MAM?=

=?us-ascii?Q?bEc/cyAswrORHHB1eq3QopVvkWC3C7Z/x4skB0NEhaWm15KO8UcwtBMf/1S0?=

=?us-ascii?Q?6H9rzjx5rCBbuIYThZ82gZUqo1LrjnmETv5dG0qFGODpYHdn6FJljm/REup1?=

=?us-ascii?Q?/19/sFFzlo35U7uJkx1syTBuDUMXyJwATMtqK0LC5HdpgT27E4zYFRSQkPrU?=

=?us-ascii?Q?qJWRG7b4Gp4tOVberNdXV7djxALc1QisukVFoKU9S/YlRVw1Pud8LMWlOapZ?=

=?us-ascii?Q?LyT3DLXXYfxWlNfvz+SFjTAD+0VHwKX9gB2H5wZlL42IPm0z4dDpY4v5+zsN?=

=?us-ascii?Q?2GjjB4e9BpjU0ov9SadFdDQFN5Dd?=

Content-Type: multipart/alternative;

boundary="_000_SJ2P220MB161036B68AC4DEA5E3D744EE8B74ASJ2P220MB1610NAMP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-df853.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SJ2P220MB1610.NAMP220.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e0a0dcbe-9999-40a9-e68a-08de73a44d57

X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Feb 2026 12:57:44.2338

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2P220MB1509

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

McAfee Phish from Google Gmail Part 4

Posted by Dave Yadallee on

/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Ellen Johnson: Status update notice Transaction"/>
mprop=3D"object" itemscope itemtype=3D"http://schema.org/Event">
rop=3D"eventStatus" content=3D"http://schema.org/EventScheduled"/>
mprop=3D"publisher" itemscope itemtype=3D"http://schema.org/Organization"><=

meta itemprop=3D"name" content=3D"Google Calendar"/>
=3D"eventId/googleCalendar" content=3D"Zv3Ee81v0KHI46014GxDYaI8Wf"/>
tyle=3D"display: none; font-size: 1px; color: #fff; line-height: 1px; heigh=

t: 0; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow: hidden;"=

itemprop=3D"name">Status update notice Transaction
=3D"true">
ble border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" =

align=3D"center" style=3D"width:100%;" class=3D"body-container">=


a-hidden=3D"true">  

tation" align=3D"center" style=3D"width:100%;" class=3D"">

yle=3D"" class=3D"" align=3D"left">
a.org/EmailMessage">

Status update notice Transa=

ction


=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"wi=

dth:100%;" class=3D"">
>

rder-radius: 8px; direction: rtl; font-size: 0; padding: 24px 32px; text-al=

ign: left; vertical-align: top;" class=3D"main-container-inner">

ign: left; direction: ltr; display: inline-block; vertical-align: top; widt=

h: 100%;overflow: hidden; word-wrap: break-word;">
adding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=

=3D"main-column-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;t=

able-layout: fixed;">
>

ng:0; vertical-align:top;">
g=3D"0" role=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;"=

>

reak-word;;padding-bottom:2px;">

', Roboto, sans-serif;font-weight: 400; font-size: 22px; line-height: 2=

8px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"=

presentation">Status update notice Transaction
n>

ft; word-break: break-word;;padding-bottom:24px;">

: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px;=

line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: =

none;" class=3D"primary-text" role=3D"presentation">
ue">
itemprop=3D"endDate" datetime=3D"20260225T012231Z">Tue=

sday Feb 24, 2026 =E2=8B=85 8:22pm (Eastern Time - New York)

td>

reak: break-word;;padding-bottom:24px;">

sans-serif;font-style: normal; font-weight: 400; font-size: 14px; line-heig=

ht: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" cla=

ss=3D"primary-text" role=3D"presentation">

Dear Servic=

e User,

Your recent subscription update has been completed s=

uccessfully.

The 60 Months membership under McAfee is now active.

=

Purchase Insights Dashboard

Transaction id- GDFU-=

7353-783
Purchased Service- Prime Protection Plan
Coverage Term- 60 M=

onths
Total Charged- USD428.66

For support, please call 81=

0 288 4505.

Thank you for choosing our services.

Thank=

fully,,
Michael Collins
Billing Team
810 288 4505=

=C2=A9 2026 McAfee LLC. All rights reserved.
2223 Avenida De La P=

laya; #203 Pompano Beach Fl 33308 Usa


cription" content=3D"Dear Service User,Your recent subscription update has =

been completed successfully.The 60 Months membership under McAfee is now ac=

tive.Purchase Insights DashboardTransaction id- GDFU-7353-783Purchased Serv=

ice- Prime Protection PlanCoverage Term- 60 MonthsTotal Charged- USD428.66F=

or support, please call 810 288 4505.Thank you for choosing our services.Th=

ankfully,,Michael CollinsBilling Team810 288 4505=C2=A9 2026 McAfee LLC. Al=

l rights reserved.2223 Avenida De La Playa; #203 Pompano Beach Fl 33308 Usa=

"/>

eft; word-break: break-word;;padding-bottom:24px;">

y: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px=

; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration:=

none;" class=3D"primary-text" role=3D"presentation">
llpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bo=

ttom: 4px;">


or: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing:=

antialiased;margin: 0; padding: 0;">Guests

(Guest li=

st has been hidden at organizer's request)


--00000000000076b010064b90f133--

McAfee Phish from Google Gmail Part 2

Posted by Dave Yadallee on




















=20



=20



=20

McAfee Phish from Google Gmail Part 3

Posted by Dave Yadallee on


=20

















McAfee Phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 05:54:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuruQ-000000008tq-1sIY

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 05:53:02 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 05:53:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f201.google.com ([209.85.167.201]:55709)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vurRr-000000005yl-43Xd

for root@nl2k.ab.ca;

Tue, 24 Feb 2026 05:23:41 -0700

Received: by mail-oi1-f201.google.com with SMTP id 5614622812f47-45f0bfd68a3so22120730b6e.3

for ; Tue, 24 Feb 2026 04:22:44 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1771935758; x=1772540558; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=LeMIi/VvblqBL8yZEWKVqc3H7+cLuZt2Gr4BBinqdLM=;

b=GNeoKoSo9b5t/Ni40UA99/u/OcV34g2dfC4DK9dngpohl6QfKxsGL9Y9GqZuPt4yBk

CZ4ABVsWlsBGH81YUNapbg5f0Ut1reiE5mVnV06JWnyMDba1gNu5rIvG7AFCrkAxf6Zw

JjTHlX1BWpoaXVYFHmAV3cVhE1hqZyRgM4n4i4I0YNJ3pC7Fc8szwTbDaYE8cJJqnuI1

/EYP4MliGSTi4UjukEMu7ujUt7X4XNNEK3zu9VlenlMYLBQLAWMcbt0EeJwY1yP0uclx

NkmQHRzX0/HQ+En5IhtQWlABGrj5siaZWfw8pUnJlkhv8FGoyOLg9YbhhLRv9WULKj4N

Jbjg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=hk28-org.20230601.gappssmtp.com; s=20230601; t=1771935758; x=1772540558; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=LeMIi/VvblqBL8yZEWKVqc3H7+cLuZt2Gr4BBinqdLM=;

b=BZiCvKmDB4eusaHJBLw5mM+K9VCBetRYqvTE/JsD7m+CvO1UT6my5B0Gch37wWfNb1

6kn4wEOoN27h2EGsKgPrEv1es9h9dvOcuBHFHYOoAPKnXeQlavMNr3R/LLpfcbyxZ16q

puuXkkX61v0K1ZdwRewg6b/t6qU2gWpTpC0IutY0jHfMhvfmF0cTLoRvzsKAMoWUwSlK

IzbfIVX2zhTg1RieFhWTWqI70vDMvQznRuh41uaBs/BLOUj8qMZ9ErktsDcugx2c+6aF

oZmDZ5WdZI5wjsVBS+doKzBfhVvkl9V9iUesZz/Nx3K79Ztxthl4rS/9ab9WQUJGm/9c

91ew==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771935758; x=1772540558;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=LeMIi/VvblqBL8yZEWKVqc3H7+cLuZt2Gr4BBinqdLM=;

b=n25t5wH12JffKu1FpaoRNnRM/d0o7CPHy2Z3nm+Zs/UdjhIXE3IKcDabx72PJgbEbW

tRgWCfVuUgqqv8T4tQo4FRG5k8OQs8wDMTakvb03A08JYsVAGd/6yqJLRYC0td34re0H

TWfbVicrHwuvA+AeLwv/3xoy7Cq8gg6AwP1SmT3+32qwh2vTGINaL7T/xr+yrC+1t0qV

vrq3njUgtddMlg6i9dx9pkY4VnHzXjjAsmGHnmHZ18dnlT+uM//ZeP/21hshaXIOOuFx

Sc4A1tZqjpT03oVKnF/SdRZDUciWUPKqP7ncAZHj9L6xDmn9Cc5ydO0AcPMGB0i2cUf2

fkPA==

X-Forwarded-Encrypted: i=1; AJvYcCX9TYfkYirD3JafVyWgyimilLK66xfPbgZB9ocSfbiaF/gSGVZQ0yCerH/jC4cwZK30Fcyo@nl2k.ab.ca

X-Gm-Message-State: AOJu0Yy6e7OQ12Qk1k0SEJb+gH3XigH2yj3XUHp8BS67gTvLKP6VBKj0

ax8Uje9Wv+9lPr9FfHFNaaXI4ComaEWSn8YSk/MjSkojXSngpoeBb9HIH1AqtskME16ioe1DwqO

QFB6WEAISI464YYlImnBBO9oshlM57TdkkfhfPXAydl524g==

MIME-Version: 1.0

X-Received: by 2002:a4a:e911:0:b0:679:a650:cc0e with SMTP id

006d021491bc7-679c44f4484mt7395847eaf.57.1771935758522; Tue, 24 Feb 2026

04:22:38 -0800 (PST)

Reply-To: Ellen Johnson

Sender: Google Calendar

Message-ID:

Date: Tue, 24 Feb 2026 12:22:38 +0000

Subject: Status update notice Transaction

From: Ellen Johnson

Content-Type: multipart/alternative; boundary="00000000000076b010064b90f133"

X-Spam_score: 13.6

X-Spam_score_int: 136

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Status update notice Transaction Status update notice Transaction

Tuesday Feb 24, 2026 â‹… 8:22pm Eastern Time - New York Dear Service User,Your

recent subscription update has been completed successfully.The 60 Months

membership under McAfee is now active.Purchase Insights DashboardTransaction

id- GDFU-7353-783Purchased [...]



Content analysis details: (13.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

[209.85.167.201 listed in dnsbl.ahbl.org]

[209.85.167.201 listed in dnsbl.ahbl.org]

[209.85.167.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.201 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_44 BODY: 4alpha-pock-4alpha

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.201 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.9 REPLYTO_WITHOUT_TO_CC No description available.

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Status update notice Transaction



--00000000000076b010064b90f133

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



U3RhdHVzIHVwZGF0ZSBub3RpY2UgVHJhbnNhY3Rpb24NCg0KU3RhdHVzIHVwZGF0ZSBub3RpY2Ug

VHJhbnNhY3Rpb24NClR1ZXNkYXkgRmViIDI0LCAyMDI2IOKLhSA4OjIycG0NCkVhc3Rlcm4gVGlt

ZSAtIE5ldyBZb3JrDQoNCg0KDQpEZWFyIFNlcnZpY2UgVXNlcixZb3VyIHJlY2VudCBzdWJzY3Jp

cHRpb24gdXBkYXRlIGhhcyBiZWVuIGNvbXBsZXRlZCAgDQpzdWNjZXNzZnVsbHkuVGhlIDYwIE1v

bnRocyBtZW1iZXJzaGlwIHVuZGVyIE1jQWZlZSBpcyBub3cgYWN0aXZlLlB1cmNoYXNlICANCklu

c2lnaHRzIERhc2hib2FyZFRyYW5zYWN0aW9uIGlkLSBHREZVLTczNTMtNzgzUHVyY2hhc2VkIFNl

cnZpY2UtIFByaW1lICANClByb3RlY3Rpb24gUGxhbkNvdmVyYWdlIFRlcm0tIDYwIE1vbnRoc1Rv

dGFsIENoYXJnZWQtIFVTRDQyOC42NkZvciBzdXBwb3J0LCAgDQpwbGVhc2UgY2FsbCA4MTAgMjg4

IDQ1MDUuVGhhbmsgeW91IGZvciBjaG9vc2luZyBvdXIgIA0Kc2VydmljZXMuVGhhbmtmdWxseSws

TWljaGFlbCBDb2xsaW5zQmlsbGluZyBUZWFtODEwIDI4OCA0NTA1wqkgMjAyNiBNY0FmZWUgIA0K

TExDLiBBbGwgcmlnaHRzIHJlc2VydmVkLjIyMjMgQXZlbmlkYSBEZSBMYSBQbGF5YTsgIzIwMyBQ

b21wYW5vIEJlYWNoIEZsICANCjMzMzA4IFVzYQ0KDQpPcmdhbml6ZXINCkVsbGVuIEpvaG5zb24N

CmFid3dhbHRlcnNAaGsyOC5vcmcNCg0KR3Vlc3RzDQooR3Vlc3QgbGlzdCBoYXMgYmVlbiBoaWRk

ZW4gYXQgb3JnYW5pemVyJ3MgcmVxdWVzdCkNCg0K

--00000000000076b010064b90f133

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

Questtrade Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 05:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vurtA-000000002Q8-1NSU

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 05:51:44 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 05:51:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail4.jurnalminang.com ([34.130.103.215]:40602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuqDx-000000003LL-2EfZ

for root@nk.ca;

Tue, 24 Feb 2026 04:05:13 -0700

Authentication-Results: mail4.jurnalminang.com;

auth=pass (login)

From: =?utf-8?B?bm8tcmVwbHk=?=

To: =?utf-8?B?cm9vdEBuay5jYQ==?=

Subject: =?utf-8?B?UXVlc3RyYWRlOiBZb3VyIFctOEJFTiBGb3JtIEhhcyBFeHBp?=

=?utf-8?B?cmVk?=

Date: Tue, 24 Feb 2026 11:04:15 +0000

Message-ID:

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64

X-Priority: 3 (Normal)

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)

Importance: Normal

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

Received: from localhost (Unknown [127.0.0.1])

by mail4.jurnalminang.com (Haraka) with ESMTPSA id 942B2463-E89B-498A-A371-E8647B3063FE.1

envelope-from

tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (authenticated bits=0);

Tue, 24 Feb 2026 11:04:15 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mail4.jurnalminang.com; h=Content-Transfer-Encoding: Content-Type:

MIME-Version: Message-ID: Date: Subject: To: From; q=dns/txt;

s=s20260223160; t=1771931056;

bh=yEyby3yHSY/3KEEgFdjeJHYaTS+gudE3iWsHIKh2rt0=;

b=j0JpLH3j9lYMv6TwJ0oAuvABXjdHL0lKbpASPrDa1fkDw49ccR/NGeKJGjYw+LSGOfPxQLhf7

WCsrwPDla6SHJPR7OB0ObzGi2oJNdOiWCdEbnMAYfQnqvQVfIic/x6uvMXHEFkso/oIlQkX154b

Q8ZXgXHdycdBQOR3oSV+jDg=

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Confirmation of Tax Form Expiration – W-8BEN Renewal Required

for 2026 Dear Questrade Client,



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

Subject: {SPAM?} =?utf-8?B?UXVlc3RyYWRlOiBZb3VyIFctOEJFTiBGb3JtIEhhcyBFeHBp?=

=?utf-8?B?cmVk?=







Confirmation of Tax Form Expiration – W-8BEN Renewal Required for 2026



Dear Questrade Client,



This notice is issued to formally confirm that the W-8BEN form previously provided for your account has expired and is no longer valid for tax compliance or reporting purposes. The W-8BEN is a required certification used to establish your status as a non-U.S. individual and to determine the appropriate withholding and reporting treatment under applicable tax regulations.



According to regulatory standards, W-8BEN forms are valid only for a limited period. Once this period ends, the form can no longer be relied upon to support reduced withholding rates or eligibility for tax treaty benefits. Our records indicate that your W-8BEN has reached the end of its validity and must be renewed.



Until a renewed and approved W-8BEN is received, regulatory requirements may require standard withholding treatment to be applied to your account. This may affect how certain payments, distributions, or account activities are processed during this period.



To restore compliant tax documentation status, you are required to submit a renewed W-8BEN that will generally remain valid for the applicable IRS validity period, provided your tax residency and personal information remain accurate. The renewal process must be completed through our secure documentation system:

Complete Update



Login with the email address you used to register to complete your application today, or your Questrade Username and password.

Thank you,

Questrade Team

Questtrade Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 05:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vurtA-000000002Q8-1NSU

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 05:51:44 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 05:51:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail4.jurnalminang.com ([34.130.103.215]:40602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuqDx-000000003LL-2EfZ

for root@nk.ca;

Tue, 24 Feb 2026 04:05:13 -0700

Authentication-Results: mail4.jurnalminang.com;

auth=pass (login)

From: =?utf-8?B?bm8tcmVwbHk=?=

To: =?utf-8?B?cm9vdEBuay5jYQ==?=

Subject: =?utf-8?B?UXVlc3RyYWRlOiBZb3VyIFctOEJFTiBGb3JtIEhhcyBFeHBp?=

=?utf-8?B?cmVk?=

Date: Tue, 24 Feb 2026 11:04:15 +0000

Message-ID:

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64

X-Priority: 3 (Normal)

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)

Importance: Normal

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

Received: from localhost (Unknown [127.0.0.1])

by mail4.jurnalminang.com (Haraka) with ESMTPSA id 942B2463-E89B-498A-A371-E8647B3063FE.1

envelope-from

tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (authenticated bits=0);

Tue, 24 Feb 2026 11:04:15 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mail4.jurnalminang.com; h=Content-Transfer-Encoding: Content-Type:

MIME-Version: Message-ID: Date: Subject: To: From; q=dns/txt;

s=s20260223160; t=1771931056;

bh=yEyby3yHSY/3KEEgFdjeJHYaTS+gudE3iWsHIKh2rt0=;

b=j0JpLH3j9lYMv6TwJ0oAuvABXjdHL0lKbpASPrDa1fkDw49ccR/NGeKJGjYw+LSGOfPxQLhf7

WCsrwPDla6SHJPR7OB0ObzGi2oJNdOiWCdEbnMAYfQnqvQVfIic/x6uvMXHEFkso/oIlQkX154b

Q8ZXgXHdycdBQOR3oSV+jDg=

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Confirmation of Tax Form Expiration – W-8BEN Renewal Required

for 2026 Dear Questrade Client,



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

Subject: {SPAM?} =?utf-8?B?UXVlc3RyYWRlOiBZb3VyIFctOEJFTiBGb3JtIEhhcyBFeHBp?=

=?utf-8?B?cmVk?=







Confirmation of Tax Form Expiration – W-8BEN Renewal Required for 2026



Dear Questrade Client,



This notice is issued to formally confirm that the W-8BEN form previously provided for your account has expired and is no longer valid for tax compliance or reporting purposes. The W-8BEN is a required certification used to establish your status as a non-U.S. individual and to determine the appropriate withholding and reporting treatment under applicable tax regulations.



According to regulatory standards, W-8BEN forms are valid only for a limited period. Once this period ends, the form can no longer be relied upon to support reduced withholding rates or eligibility for tax treaty benefits. Our records indicate that your W-8BEN has reached the end of its validity and must be renewed.



Until a renewed and approved W-8BEN is received, regulatory requirements may require standard withholding treatment to be applied to your account. This may affect how certain payments, distributions, or account activities are processed during this period.



To restore compliant tax documentation status, you are required to submit a renewed W-8BEN that will generally remain valid for the applicable IRS validity period, provided your tax residency and personal information remain accurate. The renewal process must be completed through our secure documentation system:

Complete Update



Login with the email address you used to register to complete your application today, or your Questrade Username and password.

Thank you,

Questrade Team

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 05:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vursl-000000001Cu-18pY

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 05:51:19 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 05:51:19 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f175.google.com ([209.85.210.175]:49562)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vup9f-000000000LE-1vym

for sales@nk.ca;

Tue, 24 Feb 2026 02:56:44 -0700

Received: by mail-pf1-f175.google.com with SMTP id d2e1a72fcca58-824adc96ad2so5353378b3a.3

for ; Tue, 24 Feb 2026 01:55:47 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mobileapps.agency; s=google; t=1771926941; x=1772531741; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=Ub6gbAm98UcziMsO+gETJ1VHSjjv2tmkCtpKPiu4HUQ=;

b=O4N6kWAs8/9Qna2/7r5QlrkvS4yn4wN9kTByrvNb0IDdE/Sz6ny9+lMt/ogzG6n+qK

0rn+AjC9KWVp8D9iWelLBwkdk6rb1t6MwAaMlV+6ixysG/0RvJ8pZa2gsV71CvIhPEqf

AjXtYAuywDvkx+hSR94uLtroxEHPUaIGVYZnRkLNvtY6Krxxyp36OdE6d5WB7GTXdF5O

U0E+Pp3T2uYi2BECqeuRA/1rxURdRyHzH65PgUNp5CT8nxXQup8zk1GnUirvl7l2yEzH

NOff8Hs7lJea6LE4EE+YSY+w4bSbYrl5EYZMVP0ZmZ17TctzaViEMUAO9YzLycKIY+lk

gNVA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771926941; x=1772531741;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=Ub6gbAm98UcziMsO+gETJ1VHSjjv2tmkCtpKPiu4HUQ=;

b=PypbcdRe3roSliDCEkIjBHbNUBb4cye/Ky28R+uLFq8g9eAOAYBR0kZFKZE7DdhpCR

QoyWXLuwAa7mG/6ZbB+S7GxG5srIfql7h5dBp0L6it8sEEAjxaA5dnR+HMuTeMuMq9cS

ZY2pD0E4jCf6R7z18nlw8cnTrtdymp6wcSk725866dSSjydWJS2SUx5BvbgBtJAxlMOA

N7hFUWmo7fYyKrmLFNZmVXNXZfgZevawAe5fQXuqVyqDcHoQfc6ZYGjHfJ/IItX/Mqf0

SVV3a7LJ4kESeL3osEpNxELvL6bhUxKD0cadmmZO0dnvSjXzO3acL2hnBFXpGjF39swY

26Pw==

X-Gm-Message-State: AOJu0Yx9SZ0Fc/vH8J9HPzZdJ8PzP06mi5pObQxi3xgFLHT8O8qtYfSN

ZHzh82w5N9mWkHtFYtuwycXfT26VIwKISxeVP1ChHLra6XcRaJLNDZzq4I5iZMcM0Cc1zg+5ZJo

XW8A0OBc=

X-Gm-Gg: ATEYQzx6nQu4GUoUFkxlLq2tCTsZvf3Nq7PqXcFMS6BW9+yBR7CeoknEbFrOYZSUSJx

VKzQmmAtH+NIcpMwVtVjdbCBM5l+WS9mCVO72imVrBWxltvFxivkYKkO42wy3CC3bUsFB0Zx2xL

sZL32zlzaYzZGe5LfV2tWycZqj0xgMeAgYP1qkapzOIC/mjrGXsWxC7OaVUfHJTL7ORibk0QPhV

gwIT44ZLyAHlkn51zPLjf+v1UOqTVV8w1tnaLzAHZck2bZocIGopNaOGVV9tQfr7at6kAUE7mwD

PL4opEjYfBkSNRRMkrykEX3u3M3uC+JaIMLIFqAJVTZOQjw/VKpc4wwGtgBIuPdkLml/NRDoyvx

uskuEZF0pFNeraTsbyAKhvZBy9QcbKRZ6GwOohkGOy8hqm20ZtiXG/EvNppNGzXDygsFc3MTlxc

/TgwSRGM9UbewZEib4IJRQeehGMdks6FV/KgosaBEXLFPeBUI=

X-Received: by 2002:a05:6a00:4b51:b0:81c:6ca8:7ff8 with SMTP id d2e1a72fcca58-826daa80912mr11295697b3a.61.1771926940576;

Tue, 24 Feb 2026 01:55:40 -0800 (PST)

Received: from Vikash ([2401:4900:1c22:2d11:c005:42f1:e91d:ae0d])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-826dd8fdb81sm10454135b3a.64.2026.02.24.01.55.39

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 24 Feb 2026 01:55:40 -0800 (PST)

From: "srutti"

To:

Subject: 1st page of google.

Date: Tue, 24 Feb 2026 15:23:48 +0530

Message-ID: <8ed001dca573$b0f52470$12df6d50$@agency>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_8ED1_01DCA5A1.CAAD6070"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdylT2rGuDvQpJYMQQ6J6NPtrVQd4A==

Content-Language: en-us



This is a multi-part message in MIME format.



------=_NextPart_000_8ED1_01DCA5A1.CAAD6070

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hey,



I was checking your website and saw you have a good design and it looks

great,but it's not ranking on Google and other major search engines.



I'm an SEO Expert and I helped over 250 businesses rank on the (1st Page on

Google, Yahoo and Bing). My rates are very affordable.



May I send you quote? If interested.







Thanks!

srutti,





SEO Marketing Specialists [INDIA]





------=_NextPart_000_8ED1_01DCA5A1.CAAD6070

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hey,

I was checking =

your website and saw you have a good design and it looks great,but it's =

not ranking on Google and other major search engines.

I’m =

an SEO Expert and I helped over 250 businesses rank on the (1st Page on =

Google, Yahoo and Bing). My rates are very affordable.

May I send =

you quote? If interested.


class=3DMsoNoSpacing>Thanks!
  srutti,


class=3DMsoNoSpacing>
SEO Marketing Specialists =

[INDIA]



------=_NextPart_000_8ED1_01DCA5A1.CAAD6070--



Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on


x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?enBlaGJHM3U4UlpxalRYNE8vcTRFeENVUDVUZFp6Z3lmUXZkMmVEN1I3c2px?=

=?utf-8?B?dTZGWUF2QkFyaGtTZERWVURaYk9vSGE4OCtvOFhmNUxQbHUwSHN0a2lCWU1G?=

=?utf-8?B?aDZLSHpJNUJqVkNleEpSRlVDa01VTGxxd1NTUkpmNGFMcElqdTFocVNNMjA3?=

=?utf-8?B?OVJNTnFDbjBHRXlUMmljUEs0K3dENFhwdTRiRTdYWG1udEk2dlloUmFrTXVE?=

=?utf-8?B?ZjhYNFpBVVZPOVVHWnFOM2xrckhoR2lqTG14c2IvNk1ySVh3eFJrS2F6YkNp?=

=?utf-8?B?cDdvTlFEZ2RmOUFlalpEOUZIbVloK0ZJeUoyNllrZFkxZlVDRTBJcXpwMjVk?=

=?utf-8?B?UUF2QkVsNFhhQU9CZ2ZLYnlmUnY1Yk9nNjBPeVV5cFpXYytVMnlBYWFERkwx?=

=?utf-8?B?Z2tlYWJxV3U2U1dKeTVFZUd4V1hicWVzZ0EyTTJqMGZuWkNZd1cydW1sdkFC?=

=?utf-8?B?K3U0amFiQTdoT2dHQitKNCtvRmdUL3ZSUXhweDY5azdId1FlMkdCTHVTRlVp?=

=?utf-8?B?TEIwbzhDbjNFdEczY2FyMzRXV1QzcC9salhvMFN5NHRxQ1hYekNQWCtZWFhX?=

=?utf-8?B?NEw5V1hsUzY2ci9wL2granJTQTJWbTUwUUg1T3ZKVW8vUGwvMUJRRldFYVNG?=

=?utf-8?B?SUdEb0NuV3BaN2RLYVNmbEhYSjRiNWg2TjJZUVVNV2RUZ2sxNEo4aEl5SDRa?=

=?utf-8?B?YklpcGcyczFyeWtrZmhYRm1DcFlaeEhReWIyeEZlaUVkYi9sUFpaSFdvcEVn?=

=?utf-8?B?NmpEWTdwa1VHMlZOV0dRcnpxRzM4RUpiN1RBZUdKY1FvU1FNS1l2ZGNyU1px?=

=?utf-8?B?MklLSDl1OFJsOUx3VVRTV2Eyb042ZG82SGN3ZWt2b0pKc1pYRlpNek1vdklY?=

=?utf-8?B?dmVMaEg1T3A4eUU1V0tFOHllVk5wYVpoYXdZNkNwVldIUGpRT0E3dkM3dEJy?=

=?utf-8?B?VUk5Z3A5bTBobFUzN2VyNWd0MjNELytnYWw0VlhCeWtRam5yWTZUS1VYOUJW?=

=?utf-8?B?QnNoVVBWV3luNnBBc1E1eldXMkpqbWErcFBZRUxEckJCMkViN1I5VG5VSm5m?=

=?utf-8?B?dWptMGVBZEgwZ0JmWjRWMkUxVWNiSkhwM3NUTmNPcWJZVWMvT2REZWpVcDgw?=

=?utf-8?B?eDVxZkM4UDBLWTBNUzd3UldhMjJ4blRnK2liY05xNW5KbnYyUFpzSmYwNVcz?=

=?utf-8?B?azFNK0NpMVh3a29WdE5QVCtLeElLdCtXZWZqNmlDcGdaajRNbW55eWh1NTJj?=

=?utf-8?B?OWFJZkljUWlscVdNNVpsdjE5MU5GbHA4TUJNNjdnM2VYQXB4YzlQdkkza0Vk?=

=?utf-8?B?a2F3RmhoNHJXY0JSak1YVVBtN3hJNUtPaW5wNW5iTFZCMTRVa2xKcnhtaDZv?=

=?utf-8?B?TjZTWHpaR3FuWjIrbW5EWTUrMTFBS2hGRk1CRjVzNnhGZlhMd1RWeXNJS2Jx?=

=?utf-8?B?V3VSVUNkblFCY3JNWEpPZWZtTEtVUklMdyt4NHdsVndDakVxcjlZWkRlOWdn?=

=?utf-8?B?aDJtQzRQOSttN2FKREpiNkRoOHVVS0pYNXA5YTY5bWZYWUgvK2syVnJMYktv?=

=?utf-8?B?cE5HWmFsMzdwdjJjMGlCYUlSdUxaMVFwMDVkVHEzQ2FNVDlyaStMdnR3a1g2?=

=?utf-8?B?eHR5ZlBwTGhRWWIxeW45d0YzMllCMmdHMjhJUm4vMDNHR0t0VjJ6UWtscEkr?=

=?utf-8?B?NU5jdWRKeE5pNGZoelkvbTRRRlBtd3hhbG9OOEg1Tlh6YW0xMWdoc2I1SzFD?=

=?utf-8?B?bytIbTJ0TzZPSStaNDR0d3BJejY4R3JOT1ZCOTlLNkN5d3lkNnNNMWs1TVBZ?=

=?utf-8?B?aE1BaGY5R0s2YkJoNmR0cFpPWkhucnVvSTlnZkMvV0xiOGFUTEZrTlNhOUhG?=

=?utf-8?B?TDBFOEZJdkFqYzBrcnlHZE05NmFXMTRzOGVwckZwYVRLQWNwbThDR0dqQTVF?=

=?utf-8?Q?dO7dazSVDQ3rvr2CKNwsb05bPSkBpkhW?=

Content-Type: multipart/alternative;

boundary="_000_SA1PR10MB783057C63A1945A2A76C4DDEB474ASA1PR10MB7830namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SA1PR10MB7830.namprd10.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0a8c4dbf-c8c1-4a39-4c08-08de737ebfd9

X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Feb 2026 08:28:55.4318

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS4PR10MB997669



Hi sales@nk.ca,



I hope you’re doing well. I wanted to follow up to see if you have had a chance to review my previous message.



If you’re interested, It would be great if you share the details of your requirement so that I can come up with my best solution accordingly & I can send you more details on the packages/action/Portfolio/past work details.



Best regards,



Ashi.









From: Ashi Agarwal

Sent: 05 January 2026 14:40

To: sales@nk.ca

Subject: Re-design & Development/Re-development



Hello,







I am Web Development Company in India and I work with 100+ experienced IT professionals.







In CMS website package, we will do following:







✅- Design/Re-design & Development/Re-development







✅- Logo Design (1 Unique Logo)







✅- Web Portal Development







✅- PHP Development







✅- E-Commerce Solutions







✅- CMS (Word Press), Magento...etc.







May I know if you are interested in any of these services?







Best Regards,



Ashi.

Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 05:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vurs3-00000000Ok5-2QGo

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 05:50:35 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 05:50:35 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northcentralusazolkn19010021.outbound.protection.outlook.com ([52.103.20.21]:4313 helo=CH1PR05CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vunni-00000000MMW-4A9o

for sales@nk.ca;

Tue, 24 Feb 2026 01:30:01 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=gpPLtSzv25rm1n9LtGv2Cnxh0VfbO8T1zvazVvSZCgY9DKBKNE7COPFm7RBNO6ZVVhqb/RNi9+MuMSrVL8GlNTXkt7vPzZxsRJVjOeIIO6JWx/OUagdhibOcgkKIPFgHQgJaN6soSg4D5RDdxBxNgDjlGqbSZX3kBgc+xWkKc5vWWes4SSECk3N88sBEj3stCaJZ1ebGQZRVil4+yMGgsbOPtk3Jd240jEk/hd9B1Z+8Nh00YZT/YyaJyXmQKMWEhZbqWIG2Yy363KdHXesSW4XxrsvgyXpQm+AVckedXILnnTbAFTQnqw5zsu31gnKqoUVhiyrnlGwrUn3zBJjGRw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=xOJWpXz/2jAA2wdjRKyd2124K0ntIGQyX01aEEqtK28=;

b=cYq3USa4Kb3Wzd6H8m+WS81omZkNdB/J186fDemFjJ+k0mcT0WhJsoFXADJTa+MTLhqqrZvloXqUGSP7AXuPVTqP0MYFAdZsWlWLBfQaEGRlltL6ombrUQG8WqL3UzgGIORj2DjZ7USHI2+BhpXAlIe+HQSCDuRSOxoV+fFC2rksQtUxSVu4W60sbQXV3K2hLLqqEPsFUzxt0OFmS70FhBnGuQa0DbLZ+wJ/6L7e+0IY0v5pRhfM/R/v80d6yitMQT8cjRNYWI7yE13Cla2s2f9b29EFB4WHLKrTiKXlWANW0U30VgWlDrh9UZkRpW6jmRIgPhF/d1GdhuC/0Iowig==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=xOJWpXz/2jAA2wdjRKyd2124K0ntIGQyX01aEEqtK28=;

b=hcSD/FwJ45x3cuWbixY8yD6BKnp9UY5G89GYhs2ceXtn4EC/Naq2msOzrEI9b6qyGBgTPMgmT3v8YRsxhhCB+0nzTSrg5O4WLYU9I4qb8a5P1xaFSW8hwWNUF4jhA/tBf36/KmsoGh91tMXyj/0JEO3N4RTFz5+kG8ZuGwtD2pi0swEq6NsQ9R4QJrfVB5MkGSt9/8J9Go1kbE4yZOkqJNknTW+iXIG2w6JEnAYWxo8nsIRMwCPVcjfSBb5iIM6mcQsVrT2/QBnMwA7V9ghBBWc0BP73gGsLdPHJgYaCKLJ5SV/50QntgsNnD0o9BK27B9uX4bAnmH/ssyoOQSN+GA==

Received: from SA1PR10MB7830.namprd10.prod.outlook.com (2603:10b6:806:3b1::8)

by DS4PR10MB997669.namprd10.prod.outlook.com (2603:10b6:8:31c::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.22; Tue, 24 Feb

2026 08:28:55 +0000

Received: from SA1PR10MB7830.namprd10.prod.outlook.com

([fe80::a34e:6857:e5b3:7331]) by SA1PR10MB7830.namprd10.prod.outlook.com

([fe80::a34e:6857:e5b3:7331%4]) with mapi id 15.20.9632.017; Tue, 24 Feb 2026

08:28:55 +0000

From: Ashi Agarwal

To: "sales@nk.ca"

Subject: Re: Design & Development/Re-development

Thread-Topic: Re: Design & Development/Re-development

Thread-Index: AdylZJEoH+hxLlrXRj2nbP0clCZ2TA==

Disposition-Notification-To: Ashi Agarwal

Date: Tue, 24 Feb 2026 08:28:55 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SA1PR10MB7830:EE_|DS4PR10MB997669:EE_

x-ms-office365-filtering-correlation-id: 0a8c4dbf-c8c1-4a39-4c08-08de737ebfd9

x-ms-exchange-slblob-mailprops:

B8gWPGiJ24QqcuRAOdqD5TMhpW3ct2Cz32r/u7e3Tj7FSLjOHG53bAHWLznc25wti56eYqzI0iXlIlEy73ZE8J8XRDVkIFUoOxCJZEuEdUu8yV+jvvG+5CV39QMTRpuPGco92LQmr5hlKo7N5ILTgJhIvMg3ymkxGEnzQJ/DnhWEEF+Y1PAoVcLgbJbEwExLIrks9ok+R2wkCycsqPbIEvkN2ecMOehL7Lorqn1bZbOXdyDoSggYEmrdOQOKI+Lfp8vqS4fGyauSsYQKCXM286hmxXBkR4q2PX3esA4Z3whSPhaYYuNIIn6C2OmLz6cbFkpxctIZUoLr6NneOFmciCUGwKuJ6UWqdTPfElTb1RfkMAo+DAM/AUPPlAM2fQFVK94tBLfCOUDKR5Jplbqt0lnTID6u1MfVcdA7co+uLztTy7ZLfFkyNGi1eKOG6z7b/MEcQZMKvoPoRVzL8V4ksz8ahQgSLtEL/+KM65/4le1BxziXmRMxpkKcUudZGTECYwR5Ud+F2E0TMATK2VmterjSqjLTlZbEugn+26UrGxi8eK2ic5G+bfv6QfBrof+RjutjcUVwB9cHtzxIJoKgmJPzZMwqo8s2OTVdln3GTbBWVLHvp+0PX0jBUe1oPZuL9n1aP6J73V/e55TnHT3zO16PwEK0UOCbPasaBUcHlhx9iicjdYtcS2Jul8f2wcwiditRoWOMwUk=

x-microsoft-antispam:

BCL:0;ARA:14566002|20031999003|39105399006|5062599005|31061999003|461199028|41001999006|19110799012|8062599012|8060799015|15080799012|13091999003|3412199025|440099028|102099032|35041999009|40105399003;

x-microsoft-antispam-message-info:

=?utf-8?B?ZjVMcTVNU1VEdjE2dTRrNjlQVTFvS00xc1R0VnBKWWM5ZE0zZnpWTnNoNGh6?=

=?utf-8?B?UktsUUpaVHBQOE9SM1Q4R3hQS0VENEN3dFNGNndqbEtTempHUUZkMU0vdXNp?=

=?utf-8?B?YVBxdkFsc3F3Wlp3cEN2QlhJYW4vVlJQSmhjOTNRcFJJL09NdEJYMG54Z3Fo?=

=?utf-8?B?N0UwbzIyQ1pyalVtSmdmNVdsOS9WZUYwWkRaNzNSS2dFTHdOZiszOGhOWlU0?=

=?utf-8?B?T0ZBRTBTVkxTeENBdzZCOXJYbE1zMDB2Y0tIRDQvdGhGaDZUeDFra0NaaStJ?=

=?utf-8?B?TkpRbTdZM0RHRURmSEhUNlhQbWRMeVNVNDcwT3daaE4veitCdEE0RnRNM3px?=

=?utf-8?B?WDBmVUxqQjV5bnFkcW5CbzB6Uk1seXowK0Q1TWJhbzZXWSt1dWkwVExLNlJo?=

=?utf-8?B?V0YvMkZoa29kdmRqUUlXbkFGc2JseE9kQi8xT21jOGpNeXRzcHhWbVB0WlMy?=

=?utf-8?B?YVBEU3BYSHBkQTBudHorbHc3ZkFhYjM1KzdQWWhNcHI1V2FpQXliRmJZQkEz?=

=?utf-8?B?SHB3L2tBb0FMY0FySXpubjVhYlhQK3dRZnNUdDl1WVM1eHBNWVVzV1l3Njdr?=

=?utf-8?B?aEF5d0lNZlk0aUpUWHNZRm9YWXF2SGRKNFlVMG1pNjZkZGkzclIxUGl0R2Uz?=

=?utf-8?B?NVR5Tlp1UWk1NHlsSHU3STFNLzBHRDRwWG5iS2RCMG4rTVV0WFFURkluOGNa?=

=?utf-8?B?c1pxbGplbWM0ZHQ0c0Q5OVFhWE9QUDRWMjFQc1VhU2ptdU1JbEtnRVMxOVlp?=

=?utf-8?B?aUQ0SWQ5UDR2ZTNFS3BlMTVzMEVpb09aajZWTHJVVWlaSS9qV2dManhMN3NM?=

=?utf-8?B?RE5ZM29XMEtNL0Y3UVQ0Q2dSQWl0SXNjbTlBQmI0c1psQTdMTGhJMDZxcDdy?=

=?utf-8?B?RUVYUHpwWXhORnZzQkZIdHduT09RVlEwWWxVN2lGMUd1Ry9hb2JEY2ZhV1Bh?=

=?utf-8?B?TkVzY3pUWU90cEpZNU9NQzJPd2JGVXhMRkE2YkQ5MEkrKzd0VkIwUXZPZTBZ?=

=?utf-8?B?Q21nWVhkb0VlaFJ0N3NzbHZUQk16RHBLRzYwNWViS202dEZTTCtyRkZqNHNq?=

=?utf-8?B?UExRdExSYW9MbWF6c3MwVXhzNDAxNzd1cWdNaTQva2NZc2Zlak9GQUhUOWdZ?=

=?utf-8?B?TG1EcFB6UXZDVjJYVHlkL0hPWEIxMnJiWDNWMVJrRlBzMk15bk8wcktKd01V?=

=?utf-8?B?VG1NZEFIc2Z4NWFTZEVuVG1aN2ZWS0JDVXJ3dHRFU0h4eHZFQ1QrY0lxNWx3?=

=?utf-8?B?NDh2eC9DNGVMOFRJU3daM0RLRlpWUXlpZ0pMNnhyYmpHZlpzaUkwZnIyalVC?=

=?utf-8?B?OWJOZzV0UVNSRkxUanhqQzljZk9XTTFrdjc1dUxKVG1vS05IK2xKdW9QZ0N6?=

=?utf-8?B?T3pPK1dHVTFRZm5DMUtrQmsxZDV1cUcyVnNERUtQNElYeEhrVk5Fb1F1alVw?=

=?utf-8?B?OXJYamxKOWRUNUhTL0pZVGJyaXdxZFRRcVY4STJkc0REejV6cWk4OUJFMkNj?=

=?utf-8?B?NE5SSEE3bXgvaktyMTNLTmtkeVUwNEhRQTMvRlVEVG40aDh3UXFIYUVSMFJM?=

=?utf-8?B?MVptZko1aW93VUNwSmYvVHF3d2Z5VFh0UWtPVjFGUU9XUjZNTGYvanZmaTgw?=

=?utf-8?B?MmswWUhZNGI0dFR2V256M1dmWHJoN0tPMTNyb05ZTU5oVnozb3NvRXdCZGtm?=

=?utf-8?B?Tjc0dE9HOWVKYU50QUJtb1RBSFVYZlNMYnU1TERpNUprY3RqOEwzUFZ5eWhI?=

=?utf-8?B?TGg5V3FCTE1sQ1RkQ3ltc1pOaXhQVVRGLzN4MENtOWFBYXIwNUg3RlZwbHAz?=

=?utf-8?B?T2NNamlMZ2taNFJaNmVxZz09?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

bill of Quantities spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 20:00:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuieN-000000004en-1RTX

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 19:59:51 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 19:59:51 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.virtualsoftech.in ([103.185.74.120]:18734)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vui78-000000003Dj-1G6C

for sales@nk.ca;

Mon, 23 Feb 2026 19:25:42 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=ootysavaari.com; s=default; h=Content-Type:MIME-Version:Message-ID:Date:

Subject:To:From:Reply-To:Sender:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=b1ZkHdsJGocj87NRbQps62vew2uEFyGVU07lJ/haoJ0=; b=W5qjUiiY9rrKRksxTY2DNK8pMI

z5zqvNGcR8YhNx5ms8ByKaLZbOI+LSY4P1UYjAyUAQaaN04ukWGaekhA/CileOnh2jZKgJBj6GApr

a1PjUzTtDKq/tSkXVU67ffo9GO/3nXBVhtexxoJ+HqePKT7CJ/iNJScH5F1guluBrvcQFaXo+5OrB

M1z9DUpWquv6z71/Cl5Sfw8o2QT09rPzZM4daa/x82F086pUvCdkgOhbLbmOqMOE20Wbjj9xDRZjI

XDxDAQeufLGOhBxTuGxHf9VdO1IIVRjQhC4McPr++cFLXWX7eQuKvTKbLZH3CBtLP139Zg78hGcaD

qo1XaPMQ==;

Received: from [185.101.38.56] (port=58599 helo=error-no-valid-domain.com)

by server.virtualsoftech.in with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.1)

(envelope-from )

id 1vui6J-000000004gg-0dc5

for sales@nk.ca;

Tue, 24 Feb 2026 07:54:38 +0530

Reply-To: thomas.seitz@gmx.com

From: info@ootysavaari.com

To: sales@nk.ca

Subject: Quotation Ref No: RFQ/BOQ/JSMRU/26-27/095512-02/20/26

Date: 23 Feb 2026 18:25:09 -0800

Message-ID: <20260223182506.537F368CE6BCE6C7@ootysavaari.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_C145EEA5.D9CF2DB5"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.virtualsoftech.in

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - ootysavaari.com

X-Get-Message-Sender-Via: server.virtualsoftech.in: authenticated_id: info@ootysavaari.com

X-Authenticated-Sender: server.virtualsoftech.in: info@ootysavaari.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear sir/Madam, We, kindly request your best competitive

offer for the attached Bill of Quantities (BOQ).



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.185.74.120 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.185.74.120 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.185.74.120 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.185.74.120 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Quotation Ref No: RFQ/BOQ/JSMRU/26-27/095512-02/20/26



Dear sir/Madam,



We, kindly request your best competitive offer for the attached Bill of Quantities (BOQ).



Please confirm receipt of this RFQ and your expression of Interest to quote by return email.



Your techno-commercial offer should include the following details:

• Data Sheet / Catalogue / Compliance Statement

• Consignment Weight and Dimensions

• Make and Country of Origin

• Delivery Terms and Availability



Appreciated to receive your earliest reply.

Regards



R.Singarajan.



Sales Engineer



Call : +971-80-6319375 / +971-46-1588872.





Tec Sol International L.L.C, P.O. Box 113603, Dubai

Tel: 04-2214307,04-2214363.



TecSol Mechanical Contg LLC, Box 15422, Ajman, 056-2550007