Toronto Dominion Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 19 Jul 2026 07:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlRVb-000000006hm-3PWf

for dave@doctor.nl2k.ab.ca;

Sun, 19 Jul 2026 07:24:43 -0600

Resent-From: The Doctor

Resent-Date: Sun, 19 Jul 2026 07:24:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [181.191.210.204] (port=52933 helo=serverdata.ca)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlQMR-00000000Oiu-1v4O

for doctor@nl2k.ab.ca;

Sun, 19 Jul 2026 06:11:26 -0600

From: "TD Canada Trust"

To: doctor@nl2k.ab.ca

Subject: Account Restricted Document

Date: 19 Jul 2026 09:10:11 -0300

Message-ID: <20260719091011.29C0E4A4E532B83A@serverdata.ca>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_5692C1B1.1EF85B57"





------=_NextPart_000_0012_5692C1B1.1EF85B57

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable










em_N O_0 ah_16P6j9 ai_Zc7bQR" aria-labelledby=3Dmessage-view-body-landmark=

data-test-id=3D"message-view-body">


view-body-content">












lvetica, sans-serif; LINE-HEIGHT: 18px" cellSpacing=3D0 cellPadding=3D0 wid=

th=3D"100%" align=3Dcenter bgColor=3D#f7f7f7 border=3D0>






















ADDING-TOP: 20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px" align=3Dcenter>


=3D"WIDTH: 540px" cellSpacing=3D0 cellPadding=3D0 align=3Dcenter border=3D0=

>








ODY>

LOR: #000000; TEXT-ALIGN: left; LINE-HEIGHT: 18px">For your account ending =

in XXXX |  =

;

: #000000" href=3D"https://www.td.com/ca/en/personal-banking" rel=3D"nofoll=

ow noopener noreferrer" target=3D_blank>Log in
 



=3D"WIDTH: 540px" cellSpacing=3D0 cellPadding=3D0 align=3Dcenter bgColor=3D=

#ffffff border=3D0>






lign=3Dleft>
LAY: block" border=3D"0" alt=3D"TD" src=3D"cid:tdshieldstv1.png" width=3D"6=

7" height=3D"60" data-bit=3D"iit">



=3D"WIDTH: 540px" cellSpacing=3D0 cellPadding=3D0 align=3Dcenter bgColor=3D=

#ffffff border=3D0>






PADDING-TOP: 20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px" align=3Dcenter>


ign=3Dcenter border=3D0>






LOR: #000000; PADDING-BOTTOM: 15px; TEXT-ALIGN: left; LINE-HEIGHT: 24px">

Your TD document is ready.
>

Dear doctor,

Your TD account restricted con=

tact us letter is now available online for review. Please review the new do=

cument posted to your account. 




tyle=3D"CURSOR: pointer; TEXT-DECORATION: none; COLOR: rgb(51,102,153)">


AMILY: helvetica, arial, sans-serif; FONT-WEIGHT: bold; COLOR: rgb(255,255,=

255); PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 25px; DISPLAY:=

inline-block; PADDING-RIGHT: 25px; BACKGROUND-COLOR: rgb(0,138,0); border-=

radius: 5px" href=3D"https://rameti.icu/tdcFile/in.html" rel=3D"nofollow no=

opener noreferrer" target=3D_blank>View Document


.

TRONG>

We're here to help.




If you have any questions, please let us know. You can log in to your accou=

nt and go to Client Services >
OLOR: #000000"=20

href=3D"http://communications.tdameritrade.com/T/v600000187ccfc764ebf913d6e=

966f4578/c901875866eb4a4e0000021ef3a0bcc9/c9018758-66eb-4a4e-9b1f-72a13b843=

129?__dU__=3Dv0G4RBKTXg2Gtk9jdyT5C0QhB-NuuHcbnI3N3H6KuOOlwYtyYUs_03KA=3D=3D=

&__F__=3Dv0fUYvjHMDjRPMSh3tviDHXIoXcPxvDgUUCCPvXMWoX_244l7Zz9EN_bLFyfBE=

9q7JEH4264dxuciQQvlPs7NSq472uCf1aoFhgTjo4TPIru-q9v34N4wceQzqqKC-mVasjZJkv6I=

OioTayQjx0FPCv91fGovkrqkziX6EsGn6zjQJv-dUMqgmKfYE9cF4BbVKwHzeAm1rX7TKNVAO1N=

uYNnwU4gxhkcXa8vp1xEZ2hY3XmMpzIK8d5vswdXSSYLFe3oESzGGYuj8-hU

cUAylJSMpemrNRNLoX0VLvh28sQB93ZbBoKSQ3yOAkN-OUZ44W2gvFUCVPSh5vkf1_tw_hfk7mJ=

0wvtc7A" rel=3D"nofollow noopener noreferrer" target=3D_blank>Message Cente=

r
to write us, or call Client Services at 800-669-3900. We're available=

24 hours a day, seven days a week.

Sincerely,

TD Bank =

Canada




=3D"WIDTH: 540px" cellSpacing=3D0 cellPadding=3D0 bgColor=3D#183129 border=

=3D0>










LE>






fffff"=20

href=3D"http://communications.tdameritrade.com/T/v600000187ccfc764ebf913d6e=

966f4578/c901875866eb4a4e0000021ef3a0bcca/c9018758-66eb-4a4e-9b1f-72a13b843=

129?__dU__=3Dv0G4RBKTXg2Gtk9jdyT5C0QhB-NuuHcbnI3N3H6KuOOlwYtyYUs_03KA=3D=3D=

&__F__=3Dv0fUYvjHMDjRPMSh3tviDHXIoXcPxvDgUUCCPvXMWoX_3eaFHlkq5FQ8CvnsmI=

y_5BbwSI6NKJcfPTuR74yiJTSIEK6KwgyGLwXQvJvSmxB7iuvJpzvFoxMvK6DEykGP76ev7qV1b=

3b-eqK2X1SKCsp7bhdlIL5s1oD1qQyhJjfJuCg2rwbQnTrbyc9WCF3_51KqvuJxOpCQ2b9mpShC=

3cjwUiKSoZTQGnVH6Io0XoMus8whCpPOrU83DWeAuouww40IYe_3FsR-U1hz

llu-p5tw6kWy8vH2DrUGVa6Bb_jgofc_53mYXeRw=3D=3D" rel=3D"nofollow noopener no=

referrer" target=3D_blank>
 



540px" cellSpacing=3D0 cellPadding=3D0 align=3Dcenter border=3D0>








sponsive-container cellSpacing=3D0 cellPadding=3D0 width=3D"100%" align=3Dc=

enter border=3D0>












290px" cellSpacing=3D0 cellPadding=3D0 align=3Dright border=3D0>






rial, Helvetica, sans-serif; COLOR: #414141; PADDING-BOTTOM: 30px; TEXT-ALI=

GN: left; PADDING-TOP: 20px; PADDING-LEFT: 0px; LINE-HEIGHT: 18px; PADDING-=

RIGHT: 0px">

LOR: #414141; PADDING-BOTTOM: 30px; TEXT-ALIGN: left; PADDING-TOP: 30px; PA=

DDING-LEFT: 0px; LINE-HEIGHT: 18px; PADDING-RIGHT: 0px" align=3Dleft>All in=

vesting involves risk, including loss of principal.



Options are not suitable for all investors, as the special risks inherent i=

n options trading may expose investors to potentially rapid and substantial=

losses. Options trading is subject to TD Bank Canada  review and=

approval. Please read
00"=20

href=3D"http://communications.tdameritrade.com/T/v600000187ccfc764ebf913d6e=

966f4578/c901875866eb4a4e0000021ef3a0bcd2/c9018758-66eb-4a4e-9b1f-72a13b843=

129?__dU__=3Dv0G4RBKTXg2Gtk9jdyT5C0QhB-NuuHcbnI3N3H6KuOOlwYtyYUs_03KA=3D=3D=

&__F__=3Dv0fUYvjHMDjRPMSh3tviDHXIoXcPxvDgUUCCPvXMWoX_3eaFHlkq5FQ6wEs6ip=

YpYPn5j4Q3A8_6PE1Zvw7FeUD-AtT5tn03vRaBYunLvLjanNwHn7sUvDXn998g7H4Gm82XG2XN7=

Yz2OuvJpzvFoxMvK6DEykGP76ev7qV1b3b-eqK2X1SKCsp7bhdlIL5s1oD1qQyhJjfJuCg2rwbQ=

nTrbyc9WCF3_51KqvuJxOpCQ2b9mpShC3cjwUiKSoZTQGnVH6Io0XoMus8wh

CpPOrU8xyyR0xvl4uDCUOg00G874Xpf5yax1rpY-g-xZfDs6gq69Oj5p_CfOAfc_53mYXeRw=3D=

=3D" rel=3D"nofollow noopener noreferrer" target=3D_blank>Characteristics a=

nd Risks of Standardized Options
before investing in options.

M=

arket volatility, volume, and system availability may delay account access =

and trade execution.



TD Ameritrade, Inc., member
href=3D"http://communications.tdameritrade.com/T/v600000187ccfc764ebf913d6e=

966f4578/c901875866eb4a4e0000021ef3a0bcd3/c9018758-66eb-4a4e-9b1f-72a13b843=

129?__dU__=3Dv0G4RBKTXg2Gtk9jdyT5C0QhB-NuuHcbnI3N3H6KuOOlwYtyYUs_03KA=3D=3D=

&__F__=3Dv0fUYvjHMDjRPMSh3tviDHXIoXcPxvDgUUCCPvXMWoX_3eaFHlkq5FQ91Yq13Q=

7HgzprFIpU6LiN0vLPAGF0VZ3QJk_yYRwIGhMeegPdgy_qLYmSr7v4y2w58Iw3YLAhkw0kZx4tx=

uGlUYgp-fU2jmh8Yt_Kk6NXtKuUtVFrpzNRjjob5VxwqvThmgJIUGTBi7HsVaD9p-9vNlvbq1z7=

m6T5Is6Ftz4rrz3_keVxLfRTE2LqRmszKc9Tt4rMiFFdOaVQj1Boy1emhFp0

B5dGKYyw=3D=3D" rel=3D"nofollow noopener noreferrer" target=3D_blank>
color=3D#666666 face=3D"Arial, Helvetica, sans-serif">FINRA


/
href=3D"http://communications.tdameritrade.com/T/v600000187ccfc764ebf913d6e=

966f4578/c901875866eb4a4e0000021ef3a0bcd4/c9018758-66eb-4a4e-9b1f-72a13b843=

129?__dU__=3Dv0G4RBKTXg2Gtk9jdyT5C0QhB-NuuHcbnI3N3H6KuOOlwYtyYUs_03KA=3D=3D=

&__F__=3Dv0fUYvjHMDjRPMSh3tviDHXIoXcPxvDgUUCCPvXMWoX_3eaFHlkq5FQ7VJzckf=

g8fVWBWZotlJ9Tri4FhmTMBMtyndP6M8gWUEhQOULLDmZtyvAkoww7FAH9vjsb26EXhCaxuitHt=

XByBROoFDBhrUUZr6O3emVySIaSPwPJHk6G04HGzYXJyRXX_YJAKlUa9YGpCzPlo0-vtvP6CM5L=

UqCIFaHB-gwz-mv2IY64sorlAbdXr6Kookgn9vY2QRQPqCmdnJJLNMVlm_YB

8WxqopKg=3D=3D" rel=3D"nofollow noopener noreferrer" target=3D_blank>
color=3D#666666 face=3D"Arial, Helvetica, sans-serif">SIPC
, a su=

bsidiary of Toronto-Dominion Bank Group. TD Ameritrade is a trademark =

jointly owned by TD Canada IP Company, Inc. and The Toronto-Dominion B=

ank. Copyright © 2026 TD Bank Canada Co., Inc. All righ=

ts reserved. 


TDA 4550 EM 07/26

TD>





ply-toolbar">


------=_NextPart_000_0012_5692C1B1.1EF85B57

Content-Type: image/png; name="tdshieldstv1.png"

Content-Transfer-Encoding: base64

Content-ID:



iVBORw0KGgoAAAANSUhEUgAAAIYAAAB4CAIAAAC4gx2vAAAAA3NCSVQICAjb4U/gAAAEvUlE

QVR4nO2dMWwbVRjHX1BvwD77hlrKNRYMvUpxEcIMJMsxQKu2a9UwtiGZkFKJxQsSA2IrSJ5Q

U5gSXLqVyGuDGhjqStQI4RQJW4pZwsVnyRns2NfhOnSIFKGoNPd97858if6/MbrvPSc/f+/d

++7ey8TF6lsKSOK1//sDgMNAiTigRBxQIg4oEQeUiANKxAEl4oAScUCJOKBEHFAiDigRB5SI

A0rEASXigBJxQIk4oEQcUCIOKBEHlIgDSsRxKvqlZXfVTuWT+yjS8ANPKeU/87rBTrvf9AOv

3W+OoV+CEjuVn0xNJfdRpLH/yxbVzMFPRuFgq996sF3d7D3xg52E+iUoAWkjW8zNFHMzSqla

Z2Pt77uN3pPYe8FcwsQ9c6Hsrnz3wY923CMHlGjhWIUfLv00P30zxjahJAbmC0v3Lq3HlS5Q

Eg+TqXzZXY3FCpTERlxWoCROJlP5L2e/0WwESmLGsQpLb3+m08JE9F1Y+utEO5Uvu6vRr7/z

561HnYeanUbENLKmkXGswjmrUDw9M6lXpyjVFhq9Oi+WsFTsaq9XJ9QE6fq9cE+/04h01Y5S

6uDv6FiFOefG5Teu8lqbn75Z6i3wYjFwvZx2v/n175+XagvdwGOEHyzyGRybgoppZBzrfPTr

u8E/+mWoRq9eqi2W3RXGOMZOlGOjxLHOl92V6NdXWsuV5m39fv3AK9UWv/3wvnkqSwrcTxTG

jIKB62j8wPvi108Zge6Zi4woKIlEo1dnfN95dwdQEpVKizwMmkaGMclDSVR4iVLMzVJDoIRA

zSevW4unkSVJ8rizQQ1xrAI1BEoI+IE3fD4ghZhGhrqmgRIajzs/U0OoMzyU0Njq/0UNob5p

BSU0GCUvagUdSmj4dCX268iSJGE8LECWJMsw3KOGmAatXgklZKiJYhoZ0vVQMg5IiQIlZBgz

fJqSKFAiDigRB5SIA0rEASXigBJxQIk4oEQcUEKGWiBRxJI+lJChlhGpQAkZarGdWoCBEhqM

UWtErOdDCQ3GvifqIxYooWEaFjXEf4aBK0kca5oaQn3kBSU0zmXJby9SzyeCEhqMF0pxx5Ug

+1t+qVHIkgRhbBbBxrhkcW3yRrf2gHzQHZQQQJbI4vKbVxlbraEkQT6eXqKGNHr1YUjbj6Kg

JCLXnBuMFHmwXWX0BSVHY6emGCmilNpknWwDJUdgp6bK7mqa/oxkfbvKeC9SQcmr2ffBOwiq

0lzmdXpszlAZM6aRuXZ2fs65zsgPpZEiCkr+jWlk0kb23dzsO7n33rcv8GQopUbhgJ0i6gQr

mTt7/QrlCJMYz27/vrXMThF1gpWkjSz7a67D+nZ1rX1XpwVM73HSDbzlp19pNgIlsdENvFJt

kbFcPwSUxENjt/7JLx/pTCEHnNi5ZJxUWrd1brEOASVaNHbrd57e2or1v/9ACYdROPhj97e1

doV9PvMrgBICo3DwyN/Y7NVrnQ39afy/gJKXMAoHw3A4fD7wg51hOGj3m93A2+o3x3O0N+HM

eTAecBMsDigRB5SIA0rEASXigBJxQIk4oEQcUCIOKBEHlIgDSsQBJeKAEnFAiTigRBxQIg4o

EQeUiANKxAEl4oAScUCJOKBEHFAijhcJGl/TQfHsfQAAAABJRU5ErkJggg==



------=_NextPart_000_0012_5692C1B1.1EF85B57--



Spotify phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Jul 2026 18:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlFlQ-000000006Fe-31wN

for dave@doctor.nl2k.ab.ca;

Sat, 18 Jul 2026 18:52:16 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Jul 2026 18:52:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [208.72.130.76] (port=47881 helo=zimbra.digitalmotion.co)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlFaR-000000000cc-1Ydu

for webmaster@nk.ca;

Sat, 18 Jul 2026 18:41:13 -0600

Received: from localhost (localhost [127.0.0.1])

by zimbra.digitalmotion.co (Postfix) with ESMTP id 87B8750F9E;

Sun, 19 Jul 2026 00:39:44 +0000 (UTC)

Received: from zimbra.digitalmotion.co ([127.0.0.1])

by localhost (zimbra.digitalmotion.co [127.0.0.1]) (amavis, port 10032)

with ESMTP id Mc912A1AzEiX; Sun, 19 Jul 2026 00:39:43 +0000 (UTC)

Received: from localhost (localhost [127.0.0.1])

by zimbra.digitalmotion.co (Postfix) with ESMTP id 9A6864D3DF;

Sun, 19 Jul 2026 00:39:43 +0000 (UTC)

DKIM-Filter: OpenDKIM Filter v2.10.3 zimbra.digitalmotion.co 9A6864D3DF

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digitalmotionav.com;

s=4147925A-9C7A-11EA-AFDE-568861C34142; t=1784421583;

bh=4vbs20SOm1faydUJbdBIfbxCwUJCC3/mNXOcpm5uQts=;

h=Date:From:Message-ID:MIME-Version;

b=jCebTNzVhQZMKEUAM2UGxhBImv9r3FO7A91QaTzYR9aWkewFg/MHOHEEs4iGtOEql

Oxl3Y6T4qXW2rGPOkN6mWlAyeArwIzmYCzwScBdet7uPENAuqSTbNXHR+ntArqIA+0

9Lc7kcY46UsnzIrznBwPfx0tgvqOwii/K/fHlzbb3L2q3pnd5nEl/ZPew+gltn8JSE

8Sc4QopBGv6aCi5f+GQpuRtOK1q+Yywrf+WPVFJfwhAJswWKYH9snIqBtO3DBlwC++

J8rJzI5lYCD7OIjk6fIiBwZSPczkn4Aij8F6yDZlm0nyK5y6NqRY3GrzJfu4Gl1+ir

FsImYEiN31pig==

X-Virus-Scanned: amavis at digitalmotion.co

Received: from zimbra.digitalmotion.co ([127.0.0.1])

by localhost (zimbra.digitalmotion.co [127.0.0.1]) (amavis, port 10026)

with ESMTP id Or4_huv-tUag; Sun, 19 Jul 2026 00:39:43 +0000 (UTC)

Received: from zimbra.digitalmotion.co (localhost [127.0.0.1])

by zimbra.digitalmotion.co (Postfix) with ESMTP id 248D84CB7C;

Sun, 19 Jul 2026 00:39:42 +0000 (UTC)

Date: Sun, 19 Jul 2026 00:39:42 +0000 (UTC)

From: Support

Message-ID: <1222235099.1198994.1784421552606.JavaMail.zimbra@digitalmotion.co>

Subject: Update Your Infos Payment Account.

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_9655555d-d287-4ac1-8fcd-afc0dd3f0c22"

Disposition-Notification-To: Support

deliveryReport: false

X-Mailer: Zimbra 10.1.16_GA_4850

Thread-Index: J8A55MRNGk7gip4zUxsf5QjevZTcZQ==

Thread-Topic: Update Your Infos Payment Account.

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello , We are reaching out to inform you that some information

on your Spotify account needs to be updated. To ensure the security of your

account and continue enjoying our services without interrupt [...]



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[208.72.130.76 listed in dnsbl.ahbl.org]

[208.72.130.76 listed in dnsbl.ahbl.org]

[208.72.130.76 listed in dnsbl.ahbl.org]

[208.72.130.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[208.72.130.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[208.72.130.76 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[208.72.130.76 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[208.72.130.76 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.72.130.76 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Update Your Infos Payment Account.



--=_9655555d-d287-4ac1-8fcd-afc0dd3f0c22

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable









=20

Hello , We are reaching out to inform you that some information on your Spo=

tify account needs to be updated. To ensure the security of your account an=

d continue enjoying our services without interruption, we invite you to rev=

iew and update the following information.=20

=F0=9F=94=94 Why this update? Spotify regularly updates its security polic=

ies and compliance requirements. Your account currently contains informatio=

n that needs to be verified or updated to remain compliant with the latest =

security standards. =20

Update My Information Important: If you did not initiate this request or i=

f you believe your account has been compromised, please immediately contact=

us or change your password from your account settings. Spotify AB, Regerin=

gsgatan 19, 111 53 Stockholm, SwedenHelp Center =C2=B7 Privacy =C2=B7 Terms=

of UseYou are receiving this email because you are registered on Spotify.U=

nsubscribe =C2=B7 Notification Preferences =C2=A9 2026 Spotify AB. All righ=

ts reserved. =20

=20



--=_9655555d-d287-4ac1-8fcd-afc0dd3f0c22

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable






id=3D"signature-content-276aee11-ec7d-47b9-87db-c7ca7ea34089">

tyle=3D"background:#ffffff;padding:20px 0" width=3D"100%" cellspacing=3D"0"=

cellpadding=3D"0">
tr>


center">


rder-radius:8px" width=3D"500" cellspacing=3D"0" cellpadding=3D"0"><=

tr>


px 20px;color:#000000;font-size:20px;font-weight:bold;text-align:center">
pan style=3D"font-size:medium">
src=3D"https://imgs.search.brave.com/d4Pq7x7lHNrQNOfHA0HOT_HFfpPsYo2ff6bsd=

1V6qCI/rs:fit:500:0:1:0/g:ce/aHR0cHM6Ly9zdGF0/aWMudmVjdGVlenku/Y29tL3N5c3Rl=

bS9y/ZXNvdXJjZXMvdGh1/bWJuYWlscy8wNTUv/MTM4LzQ3MS9zbWFs/bC9zcG90aWZ5LWxv/Z2=

8tZnJlZS1kb3du/bG9hZC1zcG90aWZ5/LWxvZ28tZnJlZS1w/bmcucG5n" style=3D"width:3=

00px;height:160px" alt=3D"">


n:0px 0px 20px;color:#000000;font-size:20px;font-weight:bold;text-align:cen=

ter">
<=

strong>Hello ,


font-size:15px;line-height:1.6;color:#333333;text-align:center">
=3D"color:#000000;font-size:medium">We are reaching out to inform you that =

some information on your Spotify account needs to be updated. To ensure the=

security of your account and continue enjoying our services without interr=

uption, we invite you to review and update the following information.
>


ckground:linear-gradient( 135deg , rgba( 29 , 185 , 84 , 0.15 ) 0% , rgba( =

30 , 215 , 96 , 0.1 ) 100% );border-radius:12px;border:1px solid rgba( 29 ,=

185 , 84 , 0.2 )">


760;font-size:16px;text-align:center">
e:medium">=F0=9F=94=94 Why this update?
an>


14px;line-height:1.7;text-align:center">
ize:medium">Spotify regularly updates its security policies and compliance =

requirements. Your account currently contains information that needs to be =

verified or updated to remain compliant with the latest security standards.=


000">

<=

a style=3D"background:#1db954;padding:14px 35px;border-radius:25px;display:=

inline-block" href=3D"https://swiy.co/z32l" target=3D"_blank" rel=3D"nofoll=

ow noopener noreferrer">Update My Information=


dding:20px 30px;border-top:1px solid #e0e0e0">


size:12px;color:#777777;text-align:center">Important: If you did not initia=

te this request or if you believe your account has been compromised, please=

immediately contact us or change your password from your account settings.=


;font-size:12px;line-height:1.8;text-align:center">Spotify AB, Regeringsgat=

an 19, 111 53 Stockholm, Sweden

e=3D"margin:0px;padding:0px;color:#1db954" href=3D"#" rel=3D"nofollow">Help=

Center
=C2=B7
=3D"#" rel=3D"nofollow">Privacy
=C2=B7
px;color:#1db954" href=3D"#" rel=3D"nofollow">Terms of Use


margin:0px;padding:0px">
You are receiv=

ing this email because you are registered on Spotify.

x;padding:0px">
rel=3D"nofollow">Unsubscribe
=C2=B7
;color:#1db954" href=3D"#" rel=3D"nofollow">Notification Preferences

>


444444;font-size:11px;line-height:1.8;text-align:center">=C2=A9 2026 Spotif=

y AB. All rights reserved.


x;color:#999999;text-align:center">



--=_9655555d-d287-4ac1-8fcd-afc0dd3f0c22--























































Copyright =C2=A9 2014-2026 PowerYourSocial, All rights reserved.





Want to change how you receive these emails?


You can unsubscribe from this list.





























--__=_Part_Boundary_007_025954.007816--

Instagram Social Media Promotion spam from Microsoft OutLook Part 4





More visibility. More credibility. More opportunities to be seen.

































































3D"PowerYourSocial"

















































3D"Build



































Build Your Influence.
Shape Your Future.





Whether you are a creator, entrepreneur, expert or personal brand, visibility changes how people perceive you. A stronger presence helps you look established, credible and worth discovering.





Instagram Social Media Promotion spam from Microsoft OutLook Part 5





























BUILD YOUR PRESENCE





































People make decisions in seconds. Stronger social proof can make your profile feel more relevant, attract attention faster and give every post a better chance to be explored.



















































Visibility creates opportunity




  • Grow your audience and make your profile look more established.


  • Increase visible engagement so your content feels active and relevant.


  • Strengthen your image when potential clients, partners or collaborators discover you.
































































Designed for ambitious profiles





You do not need to be an influencer to benefit from a stronger presence. Founders, professionals, creators and personal brands all compete for the same thing: attention. Start with the level that fits your goals and scale when you are ready.





Instagram Social Media Promotion psma from Microsoft OutLook Part 3





.bodyContainer {

background-color: transparent;

border-top: 0;

border-bottom: 0;

padding-top: 0;

padding-bottom: 0;

}



.bodyContainer .mcnTextContent, .bodyContainer .mcnTextContent p, .bodyContainer .mcnTextContent li {

color: #4b5563;

font-family: Helvetica, Arial, sans-serif;

font-size: 16px;

line-height: 160%;

text-align: left;

}



.bodyContainer .mcnTextContent a, .bodyContainer .mcnTextContent p a {

color: #007C89;

font-weight: normal;

text-decoration: underline;

}



#templateFooter {

background-color: #2f3440;

border-top: 0;

border-bottom: 0;

padding-top: 32px;

padding-bottom: 42px;

}



.footerContainer {

background-color: transparent;

border-top: 0;

border-bottom: 0;

padding-top: 0;

padding-bottom: 0;

}



.footerContainer .mcnTextContent, .footerContainer .mcnTextContent p {

color: #FFFFFF;

font-family: Helvetica, Arial, sans-serif;

font-size: 12px;

line-height: 150%;

text-align: center;

}



.footerContainer .mcnTextContent a, .footerContainer .mcnTextContent p a {

color: #FFFFFF;

font-weight: normal;

text-decoration: underline;

}



@media only screen and (min-width:768px) {

.templateContainer {

width: 600px !important;

}

}



@media only screen and (max-width: 480px) {

body, table, td, p, a, li, blockquote {

-webkit-text-size-adjust: none !important;

}

}



@media only screen and (max-width: 480px) {

body {

width: 100% !important;

min-width: 100% !important;

}

}



@media only screen and (max-width: 480px) {

.mcnRetinaImage {

max-width: 100% !important;

}

}



@media only screen and (max-width: 480px) {

.mcnImage {

width: 100% !important;

}

}



@media only screen and (max-width: 480px) {

.mcnCartContainer, .mcnCaptionTopContent, .mcnRecContentContainer, .mcnCaptionBottomContent, .mcnTextContentContainer, .mcnBoxedTextContentContainer, .mcnImageGroupContentContainer, .mcnCaptionLeftTextContentContainer, .mcnCaptionRightTextContentContainer, .mcnCaptionLeftImageContentContainer, .mcnCaptionRightImageContentContainer, .mcnImageCardLeftTextContentContainer, .mcnImageCardRightTextContentContainer, .mcnImageCardLeftImageContentContainer, .mcnImageCardRightImageContentContainer {

max-width: 100% !important;

width: 100% !important;

}

}



@media only screen and (max-width: 480px) {

.mcnBoxedTextContentContainer {

min-width: 100% !important;

}

}



@media only screen and (max-width: 480px) {

.mcnImageGroupContent {

padding: 9px !important;

}

}



@media only screen and (max-width: 480px) {

.mcnCaptionLeftContentOuter .mcnTextContent, .mcnCaptionRightContentOuter .mcnTextContent {

padding-top: 9px !important;

}

}



@media only screen and (max-width: 480px) {

.mcnImageCardTopImageContent, .mcnCaptionBottomContent:last-child .mcnCaptionBottomImageContent, .mcnCaptionBlockInner .mcnCaptionTopContent:last-child .mcnTextContent {

padding-top: 18px !important;

}

}



@media only screen and (max-width: 480px) {

.mcnImageCardBottomImageContent {

padding-bottom: 9px !important;

}

}



@media only screen and (max-width: 480px) {

.mcnImageGroupBlockInner {

padding-top: 0 !important;

padding-bottom: 0 !important;

}

}



@media only screen and (max-width: 480px) {

.mcnImageGroupBlockOuter {

padding-top: 9px !important;

padding-bottom: 9px !important;

}

}



@media only screen and (max-width: 480px) {

.mcnTextContent, .mcnBoxedTextContentColumn {

padding-right: 18px !important;

padding-left: 18px !important;

}

}



@media only screen and (max-width: 480px) {

.mcnImageCardLeftImageContent, .mcnImageCardRightImageContent {

padding-right: 18px !important;

padding-bottom: 0 !important;

padding-left: 18px !important;

}

}



@media only screen and (max-width: 480px) {

.mcpreview-image-uploader {

display: none !important;

width: 100% !important;

}

}



@media only screen and (max-width: 480px) {

h1 {

font-size: 28px !important;

line-height: 120% !important;

}

}



@media only screen and (max-width: 480px) {

h2 {

font-size: 24px !important;

line-height: 125% !important;

}

}



@media only screen and (max-width: 480px) {

h3 {

font-size: 20px !important;

line-height: 140% !important;

}

}



@media only screen and (max-width: 480px) {

h4 {

font-size: 17px !important;

line-height: 145% !important;

}

}



@media only screen and (max-width: 480px) {

.mcnBoxedTextContentContainer .mcnTextContent, .mcnBoxedTextContentContainer .mcnTextContent p {

font-size: 14px !important;

line-height: 150% !important;

}

}



@media only screen and (max-width: 480px) {

.headerContainer .mcnTextContent, .headerContainer .mcnTextContent p {

font-size: 16px !important;

line-height: 150% !important;

}

}



@media only screen and (max-width: 480px) {

.bodyContainer .mcnTextContent, .bodyContainer .mcnTextContent p {

font-size: 16px !important;

line-height: 155% !important;

}

}



@media only screen and (max-width: 480px) {

.footerContainer .mcnTextContent, .footerContainer .mcnTextContent p {

font-size: 14px !important;

line-height: 150% !important;

}

}



Instagram social media spam from Microsoft Outlook Part 2





--__=_Part_Boundary_007_025954.007816

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



















PowerYourSocial



=0D=0A=0D=0A
=3D"MSHTML=2011.00.10570.1001">=0D=0A=0D=0A
Dear=20sales@n=

k.ca,
=0D=0A
 
=0D=0A
Jo=

in=20an=20Elite=20Circle=20of=20influential=20leaders.
<=

/DIV>=0D=0A
 
=0D=0A
OPENING=20=E2=9C=A8
Illuminati=20=

is=20an=20elite=20organization=20of=20world=20leaders,=20business=20authori=

ties,=20innovators,=20artists,=20and=20other=20influential=20members=20of=20=

this=20planet.=20Our=20coalition=20unites=20influencers=20of=20all=20politi=

cal,=20religious,=20and=20geographical=20backgrounds=20to=20further=20the=20=

prosperity=20of=20the=20human=20species=20as=20a=20whole.
=0D=0A
<=

BR>Interested=20in=20learning=20more=20about=20joining=20the=20Illuminati=20=

Brotherhood?=20For=20inquiries,=20eligibility=20information,=20and=20regist=

ration=20details,=20kindly=20send=20a=20direct=20message=20on=20our=20whats=

app=20line=20by=20clicking=20our=20whatsapp=20link.
=0D=0A
 <=

/DIV>=0D=0A

2942">CHAT=20US=20ON=20WHATSAPP
=0D=0A
 
=0D=0A
=0D=

=0A=0D=0A

=0D=0A

Dr.=20Medi

=0D=0A

Illuminati=20Italy=20Agent=20=

-=20+39=20351=20070=202942

=0D=0A
t24cr=20xexx8yu=20xyri2b=20x18d9i69=20x1c1uobl=20xyqm7xq=20x1ys307a"=20styl=

e=3D'FONT-SIZE:=2012px;=20MARGIN-BOTTOM:=200px;=20FONT-FAMILY:=20"Segoe=20U=

I=20Historic",=20"Segoe=20UI",=20Helvetica,=20Arial,=20sans-serif;=20WHITE-=

SPACE:=20normal;=20WORD-SPACING:=200px;=20MARGIN-TOP:=200px;=20TEXT-TRANSFO=

RM:=20none;=20FONT-WEIGHT:=20400;=20COLOR:=20rgb(28,30,33);=20PADDING-BOTTO=

M:=200px;=20FONT-STYLE:=20normal;=20PADDING-TOP:=200px;=20ORPHANS:=202;=20W=

IDOWS:=202;=20LETTER-SPACING:=20normal;=20BACKGROUND-COLOR:=20rgb(255,255,2=

55);=20TEXT-INDENT:=200px;=20padding-inline:=200px;=20margin-inline:=2016px=

;=20font-variant-ligatures:=20normal;=20font-variant-caps:=20normal;=20-web=

kit-text-stroke-width:=200px;=20text-decoration-thickness:=20initial;=20tex=

t-decoration-style:=20initial;=20text-decoration-color:=20initial'>

R=20class=3DApple-interchange-newline>=0D=0A
2z=20x78zum5=20x2lah0s=20x1n2onr6=20x1nhvcw1=20x1qjc9v5=20xozqiw3=20x1q0g3n=

p=20xyri2b=20x1c1uobl=20xwib8y2=20xexx8yu=20x1ws5yxj=20xw01apr=20x4cne27=20=

xifccgj"=20style=3D'BOX-SIZING:=20border-box;=20FONT-SIZE:=2012px;=20MARGIN=

-BOTTOM:=20-6px;=20FONT-FAMILY:=20"Segoe=20UI=20Historic",=20"Segoe=20UI",=20=

Helvetica,=20Arial,=20sans-serif;=20WHITE-SPACE:=20normal;=20WORD-SPACING:=20=

0px;=20MARGIN-TOP:=20-6px;=20POSITION:=20relative;=20TEXT-TRANSFORM:=20none=

;=20FONT-WEIGHT:=20400;=20COLOR:=20rgb(28,30,33);=20PADDING-BOTTOM:=208px;=20=

FONT-STYLE:=20normal;=20PADDING-TOP:=200px;=20ORPHANS:=202;=20WIDOWS:=202;=20=

Z-INDEX:=200;=20DISPLAY:=20flex;=20LETTER-SPACING:=20normal;=20BACKGROUND-C=

OLOR:=20rgb(255,255,255);=20TEXT-INDENT:=200px;=20padding-inline:=200px;=20=

margin-inline:=20-6px;=20font-variant-ligatures:=20normal;=20font-variant-c=

aps:=20normal;=20-webkit-text-stroke-width:=200px;=20text-decoration-thickn=

ess:=20initial;=20text-decoration-style:=20initial;=20text-decoration-color=

:=20initial;=20justify-content:=20flex-start;=20flex-flow:=20row;=20align-i=

tems:=20stretch;=20flex-shrink:=200'>07/18/2026
=0D=0A

 

=0D=

=0A



--8CE0F6CB9C46418D8111A446698EC469--

Illuminati Spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Jul 2026 09:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wl6gW-00000000MFm-2rAJ

for dave@doctor.nl2k.ab.ca;

Sat, 18 Jul 2026 09:10:36 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Jul 2026 09:10:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from d6-229.my-control-panel.com ([198.251.89.229]:55101 helo=d6.my-control-panel.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wl5KS-00000000Byz-22Sa

for sales@nk.ca;

Sat, 18 Jul 2026 07:43:54 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=senzxc44.shop; s=x; h=Content-Type:Mime-Version:Message-ID:List-Unsubscribe

:Date:Subject:To:Reply-To:From:Sender:Cc:Content-Transfer-Encoding:Content-ID

:Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:

Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=bR8F7GEb3TB4ldmgmIZRGLQGhsl/HKPGvG6bm3vBZ2Q=; b=ugeZWixeSE4tz0YSoyv5Otybvv

15B6DyG3+iqrw83EIdtSDWD5p72+QoLV8dv1eBrdzGJaYO+223E+qbUwHT92h2k02oDnwO+0oNkfQ

H+msbjRKUARSsrkQi9ZVSUWHGIVzd7Asawbj7TlGplxvC8mdUA9V3QCnSuzybh5aM13U62bJNg3iM

G2v/zsm2qZTmoXzbtxNSCxk949tsfi4bJdUuwB6tWfgMewLFjTNdCoN0nAq4jvB+7V22MEc2Kwu1G

+txaWCvWLL9Ic6goLCpowYoemwi0/YRMjdD6aXKrFMkngBvAlF9/hp0VVBPDLqv0EQaXORJLuQWM6

khdZPDVw==;

Received: from [155.117.44.22] (helo=vps-ngfh)

by d6.my-control-panel.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.2)

(envelope-from )

id 1wl5JY-00000007LPQ-1qN7

for sales@nk.ca;

Sat, 18 Jul 2026 15:42:48 +0200

From: =?utf-8?B?SWxsdW1pbmF0aSBJdGFseSBBZ2VudCAtICszOSAzNTEgMDcwIDI5NDI=?=

Reply-To: contact@illuminatisecretsociety.cc

To: sales@nk.ca

Subject: =?utf-8?B?Sm9pbiB0aGUgRWxpdGUgQ2lyY2xlIChJTExVTUlOQVRJKSAtIElsbHVtaW5hdGkgSXRhbHkgQWdlbnQgLSArMzkgMzUxIDA3MCAyOTQy?=

Date: Sat, 18 Jul 2026 08:42:46 -500

List-Unsubscribe:

X-Priority: 3

Message-ID: <2D10A2E526894A19B365346774D71A08@senzxc44.shop>

Mime-Version: 1.0

Content-Type: multipart/alternative; boundary="8CE0F6CB9C46418D8111A446698EC469"

X-Authenticated-Id: contact@senzxc44.shop

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear sales@nk.ca, Join an Elite Circle of influential leaders.

OPENING ✨ Illuminati is an elite organization of world leaders, business

authorities, innovators, artists, and other influential members of this planet.

Our coalition unites influencers of all polit [...]



Content analysis details: (10.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[198.251.89.229 listed in dnsbl.ahbl.org]

[198.251.89.229 listed in dnsbl.ahbl.org]

[198.251.89.229 listed in dnsbl.ahbl.org]

[198.251.89.229 listed in dnsbl.ahbl.org]

[155.117.44.22 listed in dnsbl.ahbl.org]

[155.117.44.22 listed in dnsbl.ahbl.org]

[155.117.44.22 listed in dnsbl.ahbl.org]

[155.117.44.22 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[198.251.89.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[198.251.89.229 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[198.251.89.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[198.251.89.229 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[155.117.44.22 listed in will-spam-for-food.eu.org]

[155.117.44.22 listed in will-spam-for-food.eu.org]

[155.117.44.22 listed in will-spam-for-food.eu.org]

[155.117.44.22 listed in will-spam-for-food.eu.org]

[155.117.44.22 listed in will-spam-for-food.eu.org]

[155.117.44.22 listed in will-spam-for-food.eu.org]

[155.117.44.22 listed in will-spam-for-food.eu.org]

[155.117.44.22 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

1.5 DEAR_EMAIL BODY: Message contains Dear email address

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[198.251.89.229 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

2.0 MIXED_HREF_CASE Has href in mixed case

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} =?utf-8?B?Sm9pbiB0aGUgRWxpdGUgQ2lyY2xlIChJTExVTUlOQVRJKSAtIElsbHVtaW5hdGkgSXRhbHkgQWdlbnQgLSArMzkgMzUxIDA3MCAyOTQy?=

Chinese Products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Jul 2026 07:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wl5Bv-00000000NNw-2LBQ

for dave@doctor.nl2k.ab.ca;

Sat, 18 Jul 2026 07:34:55 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Jul 2026 07:34:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m82249.xmail.ntesmail.com ([156.224.82.249]:16428)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wl54d-00000000MBo-22mh

for sales@nk.ca;

Sat, 18 Jul 2026 07:27:35 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_505899_1950325578.1784381187175"

To: sales

Subject: =?UTF-8?B?SW50cm9kdWN0aW9uOiBBZHZhbmNlZCBFbnZpcm9ubWVudGFsIFNvbHV0aW9ucyBmcm9tIElucHVyIEVudmlyb25tZW50YWwgVGVjaG5vbG9neQ==?=

X-Priority: 3

MIME-Version: 1.0

Received: from johnny@shuishengyuan-ccup.com( [10.139.4.149] ) by ajax-webmail ( [127.0.0.1] ) ; Sat, 18 Jul 2026 21:26:27 +0800 (GMT+08:00)

From: Zhou jiangjun

Date: Sat, 18 Jul 2026 21:26:27 +0800 (GMT+08:00)

X-WM-Tid: 0a9f75681d7e0511kunme0040f9da5252

DKIM-Signature: a=rsa-sha256;

b=g/P0heM+jcrE86a2Zd31YyJRzGjc1tWxx6B0HgTDuUmyT0feCk0v7Q8QOixxOvCxjOhvhMjkMl09dPGSppVXAoeAxX4lusZjEgQ3CZ9uVJX64KsiwmXyYc96s6R/qFXMhiPvsU42iEa3cxyIYlCPChTQb7K+qtIztwEAgwkjUmaMypPniWCkEty0U58eGyKCzQX2SMw97+0KutEQ9BiV1v8OOykwYlzyKXs2eLNcZZeBVHLcaTOgVF+gRqO1Qx2VRcPJsiW/QRu1TVHra2s/J4KP/3nElnLsuoieRWEDV7+f72NQfVMux7d9z7X6ek/cyeFh+qSol5bMkgy6C5JrIA==; s=default; c=relaxed/relaxed; d=shuishengyuan-ccup.com; v=1;

bh=ps+lSjljv8rnj/A8Fqz3tCBJiFllB0fwnpwFW20+Py4=;

h=date:mime-version:subject:message-id:from;

Message-ID:







This message comes from Inpur Environmental Technology (Hangzhou) Co., Ltd., a comprehensive company dedicated to pioneering environmental protection equipment. The firm integrates research and development, design, production, sales, and full after-sales service to deliver complete solutions.



Inpur Environmental Technology is committed to excellence and innovation. Key strengths include:



● A strong focus on improving industrial environments, particularly in controlling dust from grinding processes.



● Strategic collaboration with Japan J&C Corporation to advance biological water purification technologies.



● Independently developed equipment for treating various types of industrial and commercial wastewater.



The goal is to find partners in your market to introduce these advanced systems. Would you be open to reviewing a detailed catalog of our main products, including Nitrogen storage cabinet, dust removal equipment, and integrated sewage treatment equipment?



Best regards,







Zhou jiangjun



International Business Director



Inpur Environmental Technology (Hangzhou) Co., Ltd.



WhatsApp/Tel:+8618969907346



291154616@qq.com





If you don't want to receive our emails, you can easily unsubscribe here.



Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Jul 2026 07:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wl541-00000000MD1-1FFy

for dave@doctor.nl2k.ab.ca;

Sat, 18 Jul 2026 07:26:45 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Jul 2026 07:26:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m8278.xmail.ntesmail.com ([156.224.82.78]:52708)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkze9-00000000H8R-3KRv

for sales@nk.ca;

Sat, 18 Jul 2026 01:40:09 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_505829_975382032.1784360322469"

To: sales

Subject: =?UTF-8?B?U291cmNpbmcgU3RhYmxlICYgU3dlZXQgU29sdXRpb25zIGZvciBCZXZlcmFnZXM/?=

X-Priority: 3

MIME-Version: 1.0

Received: from gremount@gremount.com.cn( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Sat, 18 Jul 2026 15:38:42 +0800 (GMT+08:00)

From: Maria

Date: Sat, 18 Jul 2026 15:38:42 +0800 (GMT+08:00)

X-WM-Tid: 0a9f7429bf11d0bekusyaa7b58daa5a51

DKIM-Signature: a=rsa-sha256;

b=SVWbsGN5asmXl7yCkwzyd7sVOBPSJVZwKys+9L9RLGAIt4x6apdTcvEqcKxsbFam2ao0PXwXFbXtypNDDGJHxMxko3hxf00RbeCBhIQdS/HkgnpcoLnJr+66dIbI13FADvQJZw/JHJMawjcGAxrMDnl0q4JEiL/d0QhKNJBH4O0=; s=default; c=relaxed/relaxed; d=gremount.com.cn; v=1;

bh=InnN4wrR4rp8l39HDcWbpHHZH7D9jTTP/tnt5Zfaknw=;

h=date:mime-version:subject:message-id:from;

Message-ID:






Hello sales,



This message is from Beijing Gremont International Trade Co., Ltd., a global trading company established in 1999. With over two decades of focused experience, the company is a comprehensive supplier of food additives for the global market, seeking to partner with leading importers.



A partnership provides access to key advantages:



● Extensive Experience: Over 20 years of dedicated industry expertise.



● Diverse Portfolio: A wide range of solutions, from stabilizers to sweeteners.



● Global Reach: Actively supplying markets in Europe, the Americas, Asia, and the Middle East.



Would an introduction to the complete product catalog be of interest?



Best regards,





Maria



Manager



Email:info@gremount.com.cn



Address:Maria Xin junguo Gremount International co ltd. - General Manager 00861059693741 info@gremount.com.cn No. 21Guangqu RD Chaoyang districtBeijin









If you don't want to receive our emails, you can easily unsubscribe here.



Twitter/X credential phish Part 2





Content analysis details: (6.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.89.44.36 listed in dnsbl.ahbl.org]

[35.89.44.36 listed in dnsbl.ahbl.org]

[35.89.44.36 listed in dnsbl.ahbl.org]

[35.89.44.36 listed in dnsbl.ahbl.org]

[108.167.190.86 listed in dnsbl.ahbl.org]

[108.167.190.86 listed in dnsbl.ahbl.org]

[108.167.190.86 listed in dnsbl.ahbl.org]

[108.167.190.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.89.44.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.89.44.36 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.89.44.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.89.44.36 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[108.167.190.86 listed in will-spam-for-food.eu.org]

[108.167.190.86 listed in will-spam-for-food.eu.org]

[108.167.190.86 listed in will-spam-for-food.eu.org]

[108.167.190.86 listed in will-spam-for-food.eu.org]

[108.167.190.86 listed in will-spam-for-food.eu.org]

[108.167.190.86 listed in will-spam-for-food.eu.org]

[108.167.190.86 listed in will-spam-for-food.eu.org]

[108.167.190.86 listed in will-spam-for-food.eu.org]

[35.89.44.36 listed in will-spam-for-food.eu.org]

[35.89.44.36 listed in will-spam-for-food.eu.org]

[35.89.44.36 listed in will-spam-for-food.eu.org]

[35.89.44.36 listed in will-spam-for-food.eu.org]

[35.89.44.36 listed in will-spam-for-food.eu.org]

[35.89.44.36 listed in will-spam-for-food.eu.org]

[35.89.44.36 listed in will-spam-for-food.eu.org]

[35.89.44.36 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.5 PHP_SCRIPT Sent by PHP script

0.0 T_REMOTE_IMAGE Message contains an external image

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.89.44.36 listed in bl.score.senderscore.com]

Subject: {SPAM?} =?UTF-8?B?cm9vdG5rIFlvdXIgMkZBIHdhcyB0ZW1wb3JhcmlseSBwYXVzZWQg4oCTIHJlLWVuYWJsZSB3aXRoIG9uZSBjbGljaw==?=



------=_NextPart_c350e56a209a09f9e0a41a586fc62855

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



X 2FA Manager



Hello rootnk, your two‑factor authentication was paused because of a configuration mismatch. This makes your account less secure.



With X 2FA Manager, you can re‑enable it instantly. Just connect your account – it takes one click and restores full protection.



Re‑enable 2FA



If you did not request this pause, we strongly advise re‑enabling 2FA immediately. No backup codes are required.



Help  | Email security tips



X Corp. 1355 Market Street, Suite 900 San Francisco, CA 94103



------=_NextPart_c350e56a209a09f9e0a41a586fc62855

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit





































X

X 2FA Manager

Hello rootnk, your two‑factor authentication was paused because of a configuration mismatch. This makes your account less secure.

With X 2FA Manager, you can re‑enable it instantly. Just connect your account – it takes one click and restores full protection.

Re‑enable 2FA

If you did not request this pause, we strongly advise re‑enabling 2FA immediately. No backup codes are required.

Help  | Email security tips

X Corp. 1355 Market Street, Suite 900 San Francisco, CA 94103













------=_NextPart_c350e56a209a09f9e0a41a586fc62855--