Microsoft Office 2024 phish
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 09 Nov 2026 17:08:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from)
id 1xQYTw-0000000096v-2EdX
for dave@doctor.nl2k.ab.ca;
Mon, 09 Nov 2026 17:08:56 -0600
Resent-From: The Doctor
Resent-Date: Mon, 9 Nov 2026 17:08:56 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [163.52.128.20] (port=57023 helo=softwareslicense.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xQTac-00000000M12-0GRT
for doctor@mail.nl2k.ab.ca;
Mon, 09 Nov 2026 11:55:28 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=mail.nl2k.ab.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=doctor@mail.nl2k.ab.ca;
bh=rehG654EdGDqW2OcQGp1CMLHhVg=;
b=fiKjd8JHlIUoGvbsDbuMHJQ5cm1WSD84kU94xlUrsDsQFY9SwQd24EYo8umFldRXC2GczhjeKvsz
SrQbmZGG5sBTIcdRWdYK3Z59x21QAIXgDq7QOYWxTai9gMcU6vC6liy9zEaU/vbLnH+Usih3zEjD
XrgeevGqIJS5jIFAKlcaSvG6DwhskjfYWVdofP8tdSO1+bPM2LtZMs1DwTeIPe2D4kcCiniBy5z6
MksOHzyoWBbtJ6ZbDWMxg6XmjheW4eYlKN3Ki9rn4hRPQGbvlmqQOAEnum2vqdSCUt/f0yuQqezZ
L9iyYSqMBWCtBaWDmATdXpcUb9E4E8wlUcAceg==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=mail.nl2k.ab.ca;
b=H6uQpj4R2eggcwV6Th2fORZlmEL6cYiDYJCuc5lF6QeAU+1nc1316sH8+QW9C+anrfnI0HJA0sBC
aMZPKp6+7TTYDWCxJoEQlOdvtM7lPpa0E5SCVBLrzgi3xfBELNGimWy9OIihwocHHVqBZ8fgPial
tvX/6tg09q0ljv4Ueqyvv2iUDduhV08G0IKFHSso+t3JCuhAAIZz36NmtTH8W+5ZoSOqALZQ++Y/
BKoRP7vXPrgt8ZjzE3/PrQBC69K4h82cWuHr5R4ya6QvpxS6UVBonuzG844Nu5lWdowLdPzsGYrR
SLiF0CLrK5LAINMLkbczZR6l3vI2w8FxSoWcBw==;
Date: 11-09-2026
From: Digital License Center
To: doctor@mail.nl2k.ab.ca
Cc: doctor@mail.nl2k.ab.ca
Subject: Microsoft Office 2024 – Get Your Lifetime License Today!
MIME-Version: 1.0
Content-Type: text/html
X-Spam_score: 11.0
X-Spam_score_int: 110
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Office 2024 for Windows & Mac KeyMart MICROSOFT OFFICE 2024
· WINDOWS & MAC Work Smarter. Achieve More.
Content analysis details: (11.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[163.52.128.20 listed in bl.score.senderscore.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: 89.252.175.132]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: 89.252.175.132]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
Subject: {SPAM?} Microsoft Office 2024 – Get Your Lifetime License Today!
Office 2024 for Windows & Mac
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 09 Nov 2026 17:08:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xQYTw-0000000096v-2EdX
for dave@doctor.nl2k.ab.ca;
Mon, 09 Nov 2026 17:08:56 -0600
Resent-From: The Doctor
Resent-Date: Mon, 9 Nov 2026 17:08:56 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [163.52.128.20] (port=57023 helo=softwareslicense.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xQTac-00000000M12-0GRT
for doctor@mail.nl2k.ab.ca;
Mon, 09 Nov 2026 11:55:28 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=mail.nl2k.ab.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=doctor@mail.nl2k.ab.ca;
bh=rehG654EdGDqW2OcQGp1CMLHhVg=;
b=fiKjd8JHlIUoGvbsDbuMHJQ5cm1WSD84kU94xlUrsDsQFY9SwQd24EYo8umFldRXC2GczhjeKvsz
SrQbmZGG5sBTIcdRWdYK3Z59x21QAIXgDq7QOYWxTai9gMcU6vC6liy9zEaU/vbLnH+Usih3zEjD
XrgeevGqIJS5jIFAKlcaSvG6DwhskjfYWVdofP8tdSO1+bPM2LtZMs1DwTeIPe2D4kcCiniBy5z6
MksOHzyoWBbtJ6ZbDWMxg6XmjheW4eYlKN3Ki9rn4hRPQGbvlmqQOAEnum2vqdSCUt/f0yuQqezZ
L9iyYSqMBWCtBaWDmATdXpcUb9E4E8wlUcAceg==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=mail.nl2k.ab.ca;
b=H6uQpj4R2eggcwV6Th2fORZlmEL6cYiDYJCuc5lF6QeAU+1nc1316sH8+QW9C+anrfnI0HJA0sBC
aMZPKp6+7TTYDWCxJoEQlOdvtM7lPpa0E5SCVBLrzgi3xfBELNGimWy9OIihwocHHVqBZ8fgPial
tvX/6tg09q0ljv4Ueqyvv2iUDduhV08G0IKFHSso+t3JCuhAAIZz36NmtTH8W+5ZoSOqALZQ++Y/
BKoRP7vXPrgt8ZjzE3/PrQBC69K4h82cWuHr5R4ya6QvpxS6UVBonuzG844Nu5lWdowLdPzsGYrR
SLiF0CLrK5LAINMLkbczZR6l3vI2w8FxSoWcBw==;
Date: 11-09-2026
From: Digital License Center
To: doctor@mail.nl2k.ab.ca
Cc: doctor@mail.nl2k.ab.ca
Subject: Microsoft Office 2024 – Get Your Lifetime License Today!
MIME-Version: 1.0
Content-Type: text/html
X-Spam_score: 11.0
X-Spam_score_int: 110
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Office 2024 for Windows & Mac KeyMart MICROSOFT OFFICE 2024
· WINDOWS & MAC Work Smarter. Achieve More.
Content analysis details: (11.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[163.52.128.20 listed in bl.score.senderscore.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: 89.252.175.132]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: 89.252.175.132]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
Subject: {SPAM?} Microsoft Office 2024 – Get Your Lifetime License Today!
KeyMart | ||||
MICROSOFT OFFICE 2024 · WINDOWS & MAC
| ||||
Microsoft Office 2024 WINDOWS & MAC · LIFETIME LICENSE Windows — Select Your License 30 PC – Lifetime ▾ 1 PC – Lifetime $35.00 2 PC – Lifetime 3 PC – Lifetime 5 PC – Lifetime 10 PC – Lifetime 20 PC – Lifetime 30 PC – Lifetime $170.00 Intermediate package prices are displayed on the product page. Select your preferred Windows quantity before checkout. href="http://89.252.175.132/4DMmsZ3464WplA123ohjtcezuov71FMFLWNTKFCRKUIU8732NZQW628W1"> CHOOSE YOUR WINDOWS LICENSE →
| ||||
MAC EDITION Office Home & Business 2024 for Mac
One-time price $140.00 1 Mac · Lifetime license href="http://89.252.175.132/4NJyeh3464ogII123tmxajtwvrm71MKHWQLSSIFJYOTM8732QLWT628D1"> GET THE MAC LICENSE →
| ||||
| ||||
Your Essential Office Applications Word Excel PowerPoint Outlook OneNote Access* Publisher* Teams*
| ||||
Fast & Convenient Digital Delivery
| ||||
Ready to Upgrade?
href="http://89.252.175.132/4NjAhW3464xdBE123cozvqaardy71NGVPXBFKIICRKJE8732BVNY628Y1"> SHOP WINDOWS href="http://89.252.175.132/4GsxrF3464gSzX123zbfxjiehlz71DRQXTYQBGELSOJL8732CSKR628K1"> SHOP MAC | ||||
KeyMart Genuine Digital Software Licenses Need assistance? support@keymart.net Windows and Mac editions are licensed and sold separately. Microsoft and Office are trademarks of Microsoft Corporation. KeyMart is an independent retailer and is not affiliated with or endorsed by Microsoft. You are receiving this email because you subscribed to our updates. Unsubscribe | Visit KeyMart © 2026 KeyMart. All rights reserved. |