Job Offer spam from Microsoft Outlook Part 3

Posted by Dave Yadallee on
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:273:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:273:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:273:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:273:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:273:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:273:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:273:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:273:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[40.107.75.79 listed in will-spam-for-food.eu.org]

[40.107.75.79 listed in will-spam-for-food.eu.org]

[40.107.75.79 listed in will-spam-for-food.eu.org]

[40.107.75.79 listed in will-spam-for-food.eu.org]

[40.107.75.79 listed in will-spam-for-food.eu.org]

[40.107.75.79 listed in will-spam-for-food.eu.org]

[40.107.75.79 listed in will-spam-for-food.eu.org]

[40.107.75.79 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.75.79 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Job Offer



--_000_TY0PR04MB6471EE1FD4DA8F7BA659696D99BAATY0PR04MB6471apcp_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



DQoNCkFydGh1ciBFbmdpbmVlcmluZyBDb21wYW55IFVTQSByZWNydWl0bWVudC4gSWYgeW91J3Jl

IGludGVyZXN0ZWQgaW4gam9pbmluZyBvdXIgdGVhbSwgcGxlYXNlIHNlbmQgeW91ciBSZXN1bWUv

Q1YgdG8gb3VyIG9mZmljaWFsIGVtYWlsIGFkZHJlc3M6IGNhcmVlckBhcnRodXItZW5naW5lZXIu

Y29tPG1haWx0bzpjYXJlZXJAYXJ0aHVyLWVuZ2luZWVyLmNvbT4gV2UgbG9vayBmb3J3YXJkIHRv

IGhlYXIgZnJvbSB5b3UhDQo=



--_000_TY0PR04MB6471EE1FD4DA8F7BA659696D99BAATY0PR04MB6471apcp_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i

dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyIgc3R5bGU9

ImRpc3BsYXk6bm9uZTsiPiBQIHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTowO30gPC9zdHls

ZT4NCjwvaGVhZD4NCjxib2R5IGRpcj0ibHRyIj4NCjxkaXYgY2xhc3M9ImVsZW1lbnRUb1Byb29m

IiBzdHlsZT0iZm9udC1mYW1pbHk6IEFwdG9zLCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01T

Rm9udFNlcnZpY2UsIENhbGlicmksIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAx

MnB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyI+DQo8YnI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9ImVs

ZW1lbnRUb1Byb29mIiBpZD0iU2lnbmF0dXJlIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBB

cHRvcywgQXB0b3NfRW1iZWRkZWRGb250LCBBcHRvc19NU0ZvbnRTZXJ2aWNlLCBDYWxpYnJpLCBI

ZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMTJwdDsgY29sb3I6IHJnYigwLCAwLCAw

KTsiPg0KPGJyPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTogQXB0b3MsIEFwdG9z

X0VtYmVkZGVkRm9udCwgQXB0b3NfTVNGb250U2VydmljZSwgQ2FsaWJyaSwgSGVsdmV0aWNhLCBz

YW5zLXNlcmlmOyBmb250LXNpemU6IDE2cHg7Ij4NCjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDAs

IDAsIDApOyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7Ij5BcnRodXIgRW5n

aW5lZXJpbmcgQ29tcGFueSBVU0EgcmVjcnVpdG1lbnQuIElmIHlvdSdyZSBpbnRlcmVzdGVkIGlu

IGpvaW5pbmcgb3VyIHRlYW0sIHBsZWFzZSBzZW5kIHlvdXIgUmVzdW1lL0NWIHRvIG91ciBvZmZp

Y2lhbCBlbWFpbCBhZGRyZXNzOg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDI0NSwg

NjYsIDQ3KTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyI+PGI+PGEgc3R5

bGU9ImNvbG9yOiByZ2IoMjQ1LCA2NiwgNDcpOyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBpZD0i

eF9tXy00ODcyMDQ4Njk3MzA4OTA1MjMyeF9tXzQ0MTUwNjgyMDUwNTc1MjA3bV81NDA5NTIwNDEz

NzQxODI3ODI3eF9tXy00NDk5MjE2NTcwODQzMDI3NTk0eF9tXy0xNzIyMDY3ODM0NDU5OTExOTM2

bV8yNDc3NTMyODQ3MDE1ODA2NTcyT1dBMTJlMjg4MjctZGRkMS0yYThjLTJkNWUtMmI5MTE0N2Q0

N2EzIiB0YXJnZXQ9Il9ibGFuayIgaHJlZj0ibWFpbHRvOmNhcmVlckBhcnRodXItZW5naW5lZXIu

Y29tIj5jYXJlZXJAYXJ0aHVyLWVuZ2luZWVyLmNvbTwvYT48L2I+PC9zcGFuPjxzcGFuIHN0eWxl

PSJjb2xvcjogcmdiKDAsIDAsIDApOyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1

NSk7Ij4mbmJzcDtXZQ0KIGxvb2sgZm9yd2FyZCB0byBoZWFyIGZyb20geW91ITwvc3Bhbj48L2Rp

dj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K



--_000_TY0PR04MB6471EE1FD4DA8F7BA659696D99BAATY0PR04MB6471apcp_--

Job Offer spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on


x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:TY0PR04MB6471.apcprd04.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(7416014)(1800799024)(366016)(41320700013)(42112799006)(786006)(27013499003)(38070700021)(8096899003);DIR:OUT;SFP:1102;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?ZW03L0xEMjNwOHBUMHR4QVZqZlJpYUppdzNuUlBNQWVPdjRPQTNyMVBkYjFr?=

=?utf-8?B?aXd0NitDMTRmMGdkWXlYY3V0aGpYQ3M4MkhNQzk4UEpoR1piWUFWTkFaU3lt?=

=?utf-8?B?NEltWnBzc3BNcU4yeVFCYjBBN1ZrdkVEQ2k2UEE0R1Jqd0ttLzlXK09jSGdm?=

=?utf-8?B?T2V2aDgrVDlrdGkwQ0RxaHRoblpnS3pmK0oyRUhqN1R1Q1VFV0ZSdnhPRnhU?=

=?utf-8?B?TEhGYWNSaUdoN2hGY0c2dzFDYUtoZ3NGOTBkUk1sNVVaRHc3TGw5c2JJTUor?=

=?utf-8?B?SE4xekJvY2N6S0RQSVdNVmtkcGhvTGZRY0g2WVF0OG81Sldpd1hSK1BJVEpZ?=

=?utf-8?B?RUNJVnhMTys4Q0M2UzNkY2ZYZDRPbHMrb0VkeGxOT0xZd3VwQnQrazFhTTUv?=

=?utf-8?B?YmVsZkVOV1NPbzN3Rk92cy9NUjdYTTNYVitTZ2R5WWtKcnUweHR4Zzh0QU9m?=

=?utf-8?B?RHhzcmJyNjhNOWNVaGZOV0ppK1lNNjZpUlNtY3Z1bGxVblpudWhHdEI2RFFC?=

=?utf-8?B?ME8vZHp2cElpUURpdG9qaHFZRVdCYzd4N0x5SmVhZ3VPRldlV2l2cks1VlpL?=

=?utf-8?B?SkQ4UHFPa1d0Rm56WUoxQTVjWEhNdXhCWW1xamJtMkhzSUVTSjdEYWxQWlIr?=

=?utf-8?B?VWtkNU1naXQ1VDU5UG81OTdsTWw4cy9DK29ESzhzdnJmbDBGejc0aTl0b3NP?=

=?utf-8?B?ak42T0pKY2c1TlgzaVJUSmRnbTdPejVkTXl6L1Ywc0ZNMHNVNHY1QzhrZG8x?=

=?utf-8?B?MlNtdDdTYm1tbHBqd3ZhWjBhSFc1RlVBK05ZQW5MWXBBUmlQOUprODREY1Mx?=

=?utf-8?B?bkloRWszVUg2QmpGSkExMm5uV3RjQk5qQi9VSk1HaytDUDU3S25rOFlnNEN0?=

=?utf-8?B?VDR5SDRPaTEzcGRoekgwZzNLQ09jNjQ4a0Z2U2llaUZNbmUyMXlUS3ZEUmNY?=

=?utf-8?B?YklXK0pVK1BzNTVEd3ZNZ250TW5VRFVvZy9nTmMzb0F0K3FTQzJsVGJsVCtu?=

=?utf-8?B?dUR1ZzRiOFZkS3R0Z0ZBTFkrZTVWbmhlM0duRDVMOE9kNjRXWDZtSmovUFZC?=

=?utf-8?B?RExhVlNwM1I1NGtrL2ZWYlR0TDluRWpOMitUZGNwaitram5sN21tNVlPNHho?=

=?utf-8?B?TlpyeUF0SHNyaGNGY0xpaVp5UFZheHp2eWRPVHUvS3BpTHAzSnFYMUpWUjJz?=

=?utf-8?B?cUpjMWpPUHV6TzFIcHBVVFZUNzRGZ1Zpb1Yxa2pXdENJZGkrNFFidU9VQy9h?=

=?utf-8?B?ZFllZmp4cU0xb2xXV3Jpd3VQcUdvUnRaOEo2VzdnV0hYUzFxWHdNdUlzc0Nz?=

=?utf-8?B?K3lzR21EeWE4YTBsbDZqanlWZ1RUZG85RmxrVXo3ekx0c1VFNjJ4ZG93OFpL?=

=?utf-8?B?NlZUU1lzeDBtSG5RYzk4UHZWcVVTMHMwY3dFWUszMXhzd3JNcnI4TW9mNGJv?=

=?utf-8?B?T1A4ekFvSFYzeDN4SjVOMTh5a2JVbWp1a2VPTXVCVGJUdmlKUGg3TVU1ZEFx?=

=?utf-8?B?TDJzeStobldXS0ZOQUhjcmltWVFlNmZET3pBc0JCSzJTdjZsSDd6RlRpRDIx?=

=?utf-8?B?WXdOdGpZYXo5WVg1T0tzRXVpZ2VJTXNQb1VyZWZiQnVYeEdIajZZbnlZOVd5?=

=?utf-8?B?dWhUTkZ5dUltdWlRMjdiY1pZdEhGYTZoSkhHTnFRYm02Smg4ZjR2ZStMckpP?=

=?utf-8?B?RDlLSEt5b2RsTDhpdG5uVDd6MnRIL0NyaVRJK1dsUFViMndHaGsydk16dktG?=

=?utf-8?B?N2txbzhsMHloMUlpVVd4dFBXQU1KVnAyRXVCaitvU3NQYlc2ekY4OU5MTDNF?=

=?utf-8?B?VmtYUkhPQUVuWkp3dEFxYnZwNGczWGJkcUxRZ1RGVkFCb0RGSE0yQ3p5RFBr?=

=?utf-8?B?azdOMzBIeTFxRmxoUWVLazJ0c1cxSkt4aEtJOWFPYUJuK1RZSDZmMCtlM0Vq?=

=?utf-8?B?Ym5rWVg2d2kwWjcvR1NEWG5lZFZ2UTdHTTNBUUFhOE9YcFc2UEpWVGo1ZXJx?=

=?utf-8?B?bk1PaGlabnFZQVZ3YlNwRjI4T3BObUtLMkVUVXJMZk9yNVBXYzljejcrR2Fz?=

=?utf-8?B?cllhWitSdmoyVW1jUStqK0txWFZWL2M5WnJBRzhMbkNuSHMzanI2ZUw2dHBD?=

=?utf-8?B?VHZzeTVuSWlxeDg3ZzVsQU9ONlNlUE9JWSs4NStoS29IZWszU0k5UytNa2VP?=

=?utf-8?B?OTlIa096ZTV2ajE4NCtnTmxGY1piK3pHSVB3SDJ0WmR4dS9hc01sZERNWkNY?=

=?utf-8?B?NnBFVytoalh0VzhLaFdXUmxWSjJ1RUN1b2NmT3l2SFNLbis2UkFQV3hBKytq?=

=?utf-8?Q?RsqqWAN2kp/4UhqPoD?=

Content-Type: multipart/alternative;

boundary="_000_TY0PR04MB6471EE1FD4DA8F7BA659696D99BAATY0PR04MB6471apcp_"

MIME-Version: 1.0

X-OriginatorOrg: huit.edu.vn

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY0PR04MB6471.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: b800dce6-c226-464b-32d0-08de497cf50b

X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Jan 2026 21:30:16.8841

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 2d6b939c-a2ef-4930-8bfd-58edbddd25e6

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: +gdS58AeroG57vdXaibAb0n0CmCeB49kwn/anowFQ7KKEnO2Qo8s9wnQJN5mep7CZEYwCc7i7bAdmWu/vjgulw==

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB7153

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Arthur Engineering Company USA recruitment. If you're interested

in joining our team, please send your Resume/CV to our official email address:

career@arthur-engineer.com


Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.107.75.79 listed in dnsbl.ahbl.org]

[40.107.75.79 listed in dnsbl.ahbl.org]

[40.107.75.79 listed in dnsbl.ahbl.org]

[40.107.75.79 listed in dnsbl.ahbl.org]

[2603:1096:400:273:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:273:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:273:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:273:0:0:0:11 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.107.75.79 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.107.75.79 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.107.75.79 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.107.75.79 listed in dnsbl.ahbl.org]

Job Offer spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 01 Jan 2026 16:07:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vbRk0-000000009rh-3vcm

for dave@doctor.nl2k.ab.ca;

Thu, 01 Jan 2026 16:06:00 -0700

Resent-From: The Doctor

Resent-Date: Thu, 1 Jan 2026 16:06:00 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazon11022079.outbound.protection.outlook.com ([40.107.75.79]:10798 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from <2005250384@huit.edu.vn>)

id 1vbQGF-000000004KL-49oM

for doctor@doctor.nl2k.ab.ca;

Thu, 01 Jan 2026 14:31:23 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=HEL9N2tczX6M9eTnUZrDhqqZ+tBih73CDHtsRZKykEY/q152rcyaCnr6z9b5JXv1rzfhWOjY1JoZKaS0gCys00bAAYrcseadPp1H0Cc+Tqd2TQFfIQQpmwmXFT+LsA8teZaTX6pVuVuisC6awhrqCxqJwKvQr/C6oxIOT5WP5MbveuVIm/WYXv8PVyC1635VGmRCBl0KA9xOozn/gwFjRqlEDI4HQCQFxTCOMKLerNgUkFYSUN78kXj9JLOY0AqXjyv+8EUriVQSZZSFytXNb9Ptas9HyuXYdhthf0hVv6DcIUUj2ZjRQfBvRt8YswE5Q1VKJ3RyUFy7wPcl2FoAzw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ezhoxq8sWhoxBopR5hDcLWOasuHjaq0JtCh/6nbW9Gw=;

b=kfHpHfK5NTa45YJK6OI4Qf+MMGGOO26S6izu7YU9pJqECdZ/YWk5v6i1EVr1o4mFqLCoEqR2VdYtNMQ+dbxLzansklZV2+hXFCJQ/bGRUeRJLbxVrR43oehhJdQXjO8VfrYMwvAHNWSQwK7qnSLF1PgyMuD1buv2EbiSRwseam/vreWG2rnM+JCnIv9JiH3TpiR43NN60mrsGKoZ4XE4w3CbCXgriGEHm3EySzrIzX3Jg6GlCT2GzB/Zczg6Deq6bvEoEERF+CHovmkbnOkiwYSxSlpf8jr2AwQ1/05UAWYhcPAl3nJOYSaqp7WljfMpu7oJqWXOsTm3urqnY4aUfA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=huit.edu.vn; dmarc=pass action=none header.from=huit.edu.vn;

dkim=pass header.d=huit.edu.vn; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=huit.edu.vn;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ezhoxq8sWhoxBopR5hDcLWOasuHjaq0JtCh/6nbW9Gw=;

b=j5lJaTh8Th8tewrOExUljLcfojEsV9zAk+is3gu/Z6mmgju58ILSEa4UGWH2qQ62uIog6KtmcJJnNLrVQ+JJ6u6+4IIuZkM6ETXqZAMR4HHDOmYnGp7DEf81g2NCoxfNDhkVjhmlcU41Q6Z427+3on8wEPSeNrOhGorfrseXAc/uuZpM39Q8Zk6ec2dWL+UUZPIRgtDcFK08vejAUmIaV4itVQwTB2Ug3Lhn/7c9nEk9WuPe/ZOJj7PX9CmigwYBJWQlZWaDAPmR2iEgndOE5ZuNUScdYcrCp/XdPEZLXKUrVVnucU4CHqhjPbmUDnt4CgbrOQ1AY6X/3fkleYdCCQ==

Received: from TY0PR04MB6471.apcprd04.prod.outlook.com (2603:1096:400:273::11)

by TYZPR04MB7153.apcprd04.prod.outlook.com (2603:1096:400:458::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9478.4; Thu, 1 Jan

2026 21:30:16 +0000

Received: from TY0PR04MB6471.apcprd04.prod.outlook.com

([fe80::c661:483f:8a13:3553]) by TY0PR04MB6471.apcprd04.prod.outlook.com

([fe80::c661:483f:8a13:3553%5]) with mapi id 15.20.9478.004; Thu, 1 Jan 2026

21:30:16 +0000

From: =?utf-8?B?UGjhuqFtIE5oxrAgUXXhu7NuaA==?= <2005250384@huit.edu.vn>

Subject: Job Offer

Thread-Topic: Job Offer

Thread-Index: AQHce2XSVQMU88SloUCmt5YVbDV+/w==

Date: Thu, 1 Jan 2026 21:30:16 +0000

Message-ID:



Accept-Language: vi-VN, en-US

Content-Language: vi-VN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=huit.edu.vn;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY0PR04MB6471:EE_|TYZPR04MB7153:EE_

x-ms-office365-filtering-correlation-id: b800dce6-c226-464b-32d0-08de497cf50b

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|376014|7416014|1800799024|366016|41320700013|42112799006|786006|27013499003|38070700021|8096899003;

x-microsoft-antispam-message-info:

=?utf-8?B?aEVvNXR0WVhYUCtmM3h0em56dVpwb0Rzdk5pcTJtS0ovTmtYMVJMcHlleUt6?=

=?utf-8?B?RFduRzQwenpGeVA4ZHlEUGE2eDJRVWUrWTlQSWhVVmtOZFd6VDFmSEMrQU9O?=

=?utf-8?B?T3hZQ3IwUnNhU3RsaU01R2JHVHJoWFhMYzZGcWh4R1MwaktPM08wQ0hockVq?=

=?utf-8?B?bmkyREVqNjVPVm1raWNRVm9iNzJiSklSY253cW12SDdXcC9WZkxiUnk0aENN?=

=?utf-8?B?SVpkRXNseVVtT091ZUpKSUVDUlhtaVFjKzY4U09UYW8vejhQdXA5VEdPY2ZO?=

=?utf-8?B?S0prRUc4V2kzdHo3WlFwRm9la2JwdFJaZ0FHcmlDU3VrQ3k3T0cvcjgzQlJP?=

=?utf-8?B?YmJ3Sy9PNDNURDlRbE5UOGlPUDB0ajR1eU1YR0dPbDVkaFZxb1dXRHUvMXh5?=

=?utf-8?B?THpkQWZCZEIzVDRYbE1BZFpyOWtqRnZPVXc0Yk5SalhpZUJJMnEvWS83VGhz?=

=?utf-8?B?d0ZOaks3ZEhzcFpwSnpobktzK0ZNeStMTTg3VFNOUzJtMERCYm1zOG1OdDVG?=

=?utf-8?B?Uk9QZDd1TnZhejJJYm9qcnlRQXUybmJHNFFNUXpXdlJFOC8zRDJlZmtibGZu?=

=?utf-8?B?TThNdUZmQmtSbm1FQ1NkQ3RlWWdjaXZMaEdSYzJJOWROQ0QzQzJmTncrMDJj?=

=?utf-8?B?bmJRQnNZeHdFaVZ3NlMzUGRQV3FmSGMrM2Y3RWc4NWw0RDYyL2x4RmRwWWpS?=

=?utf-8?B?WmhnZ1c3YUo4MGVISFpVNm50V3hLaGVtSUlkQmpjYnYydzVzZ3BuaEFodndh?=

=?utf-8?B?ZGtwbXYrUUxSYUZOS2FZNmFrS2cycHBTTDlIUXBnK2tiMXlCTENoZXQ3SndN?=

=?utf-8?B?UUVLRXduSnRjSDVtTjVDcThFMi9RQ1c5WHNNekdLOTF2aVh6MzhPcVB5U0oy?=

=?utf-8?B?MEN5VzVYekR6N3ArSXk5S1BYalN1aEoxeTBOaEowNVZpNnZrOTJxa2dTUVpk?=

=?utf-8?B?MWd4WTVsMFNFTFh5dHZVeWJ3ZVo3UnhpTzJXM2ZFbXdoWVdhbmlIS09GMnc3?=

=?utf-8?B?YjZoUXlCdlNwV0NFbHBKamltZDhwZXVaNHNVTUhvY1h6dFRvRXpjWGh5b2Ra?=

=?utf-8?B?aVIxRU5semNZOERXZmlQSDNEYWtuTkxnbFo5Uk5qQ3BMYk1CK2dwQ3A3N21M?=

=?utf-8?B?OER5eVNLdHpqNUE5MGZ6eDNHQ3JtazRrd1dVbDFSMkFkUzA4NE9aR1JsMkJD?=

=?utf-8?B?SEtLVXJydktBZXd3UUU1dDB4S0U5d3k4YlJ3U2lWV2pPR0l6WElrM1RZQ09T?=

=?utf-8?B?cUlEZHVISDF2Q1VBSVRYSEp5QlRwenRQbjRoaDI2YjVmUWdYQlhBWXVEb2lz?=

=?utf-8?B?dE5qTTBNd0YwcXhqSW5EM3dVYXJpOFZwWHRwRnMzbUYxajFKRU85cVBpNlVo?=

=?utf-8?B?cGVldkVJQzJ3c284alJ3WFErcFptN1hrMVd3Rm9HKzFJSGNYSlJzT2h0UUhS?=

=?utf-8?B?bVZ4NGt3OFFySzBkRE43NHRuYkl2Y1d6YnBsQ1dGRzVnUjd0NmFTZitPOTRM?=

=?utf-8?B?UXZZaUJjMnFSOVJqY2hlaGZtSUVMUXh0Z2F3amZQMXlmeGp5OENKSEU5ZVVN?=

=?utf-8?B?TC9pbGEyUkJzU0xnWWtJSlQ3RDQ3QzBsay9RWWgreFdSWjhPamNFVFpwZlN4?=

=?utf-8?B?K3RWWk9qM1Eydk9hQTZFTUgzMlkvOUtyYVlObVZRTG5YaEYwdHZ1ODVoaHJ3?=

=?utf-8?B?dVkzTjdKMHUwR3hJYXZUNUFaNkZYeWlTSW9Lb05WaHFnaG9nYWVYSXdDYlly?=

=?utf-8?B?eDd4WTByb2tFYlJJQVFWbzlCeTUzRXF3V3NZZWtIZXdHNWI2Zk1TMzIvZFht?=

=?utf-8?B?YjQ2dU5QNHJhN2ZTTWtiUjN5OEhWaGQrL3REb1htUkVaYitCeUthNlV3QmFl?=

=?utf-8?B?enJTcHJ4Z3ZacFA2VnJvRFd2UENjZWZqdDVuVVU5UlNJSHp2UllMYzFIRWdN?=

=?utf-8?B?SWhUcGRrT1lxSUJudnU4c0pZcG1nSGJYY3RMMFlsMzkvWUJ1Tm9NZlVhSWRE?=

=?utf-8?B?NHBJbkZycE1FVGdETzJTMHJJU2JhN29iMXdJaC8rU2V0UGZocGR0VWFaNTZy?=

=?utf-8?Q?dief+r?=

Web/SEO/App Spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 01 Jan 2026 10:06:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vbM6z-00000000P1N-2HbH

for dave@doctor.nl2k.ab.ca;

Thu, 01 Jan 2026 10:05:21 -0700

Resent-From: The Doctor

Resent-Date: Thu, 1 Jan 2026 10:05:21 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f70.google.com ([209.85.160.70]:58735)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vbL9q-00000000KpG-42NP

for root@nk.ca;

Thu, 01 Jan 2026 09:04:25 -0700

Received: by mail-oa1-f70.google.com with SMTP id 586e51a60fabf-3f55d1efcefso16885735fac.1

for ; Thu, 01 Jan 2026 08:03:26 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1767283400; x=1767888200; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=IwdaQWflSyVQlO64qsST80s+mXKguDimQ4GGMbp/wvM=;

b=TW1dynH6pj/z9XvL+v9zxUfQiTDw+XOqtdLoLYbedXAe0dXNBLlqcieycKBj9l5NSP

GXELKzjzvsv9L0HTfIz+SYLMligvrfO2dt5eqHqBUILTJALOZACbmoazNzn5jiCck++l

e3/UUTxvrYruyLdliK9MlXLzZFXVrAkEGK9p8hDlG1I/NVCUPsV6swfTL/zjOvJxu3yG

fDj52HcIVLhs8oIpP/q0YnSZI3ojxl7QE00hkXkZC1I69jsnTOg5V4H4LtPtyXy2ycLq

058bqNzKwKA5ENSdcFe81AK9FqQYXkEDhg+sqwh6hZlMVYIJkxAX9x2GzJ3/4kN5I1DE

fX0Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1767283400; x=1767888200;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=IwdaQWflSyVQlO64qsST80s+mXKguDimQ4GGMbp/wvM=;

b=TjRX0LolbYciCG3r0drlDMARULpBJWN3t8Q7CxHnYdnS72CZzX0dDse24P1UUgAk6S

2uosAgduyhdGJqyepfMBDgQdPSH0J1O1HORIvm9YEEFKl/lYtngN0zVa9lyjwMmJdKmS

ccWb1vZWili9sk34lYU3TWFsdgUZ0sFR9QUitFd4qBq+zT7HuRT5/4AbSldr0L9Yto29

4e6iyXcCmjFynaIThU4J2ov1IgzDIXREdrI9Cvm/ii2c6/bHSCPL6lY2VsrPDdlJzhJT

53y8PsyAnu0o6MUHU2/4T0W0I5ZGvt0DZzyeQFwXp4p9km1dX6Z6NU3TjA7PVxIS7fh+

eoCA==

X-Gm-Message-State: AOJu0YwRvaNW3neqdrU3GsUWZ1+rkbyg5orSB+5eslUHpGst2ge40rO0

0nqsA7PgvUPICJitTtiByMrjXnf5uHrnVwdTMKvP33tlaNKMcSOyYGy26V6CBIHZDlJF1tARAoJ

iIc4=

X-Google-Smtp-Source: AGHT+IHM00JEAhO/by9YDf6ODwn2h0MUxqnM61ZXpShQ/o6mNMUokmLCGLLdMo60oudQif+jAJKTg4Btbg==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:16a4:b0:659:9a49:8e91 with SMTP id

006d021491bc7-65d0ea5a26bmr18079963eaf.21.1767283400064; Thu, 01 Jan 2026

08:03:20 -0800 (PST)

Message-ID:

Date: Thu, 01 Jan 2026 16:03:20 +0000

Subject: Re: SEO 1st Page on Google ? root@nk.ca

From: anuragkumar92374@gmail.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000474698064755bbe6"

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Just checking in! We provide cost-effective SEO services

to help your business rank higher online. Can I send you a price list?



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.70 listed in dnsbl.ahbl.org]

[209.85.160.70 listed in dnsbl.ahbl.org]

[209.85.160.70 listed in dnsbl.ahbl.org]

[209.85.160.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.70 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.70 listed in will-spam-for-food.eu.org]

[209.85.160.70 listed in will-spam-for-food.eu.org]

[209.85.160.70 listed in will-spam-for-food.eu.org]

[209.85.160.70 listed in will-spam-for-food.eu.org]

[209.85.160.70 listed in will-spam-for-food.eu.org]

[209.85.160.70 listed in will-spam-for-food.eu.org]

[209.85.160.70 listed in will-spam-for-food.eu.org]

[209.85.160.70 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.70 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.70 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[anuragkumar92374(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[anuragkumar92374(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Re: SEO 1st Page on Google ? root@nk.ca



--000000000000474698064755bbe6

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,



Just checking in! We provide cost-effective SEO services to help your

business rank higher online.



Can I send you a price list?



Thanks,

Kundan,



On Fri, Dec 19, 2025, at 10:18 AM < > wrote:



Hi, root@nk.ca



I was checking your website on behalf of this email { root@nk.ca }, and saw

you have a good design and it looks great, but it's not ranking on Google

and other major search engines.



I'm a SEO Expert and I helped over 250+ businesses rank on the (1st Page on

Google). My rates are very affordable.



Can I send you a price list?



Thank You!

Kundan,



--000000000000474698064755bbe6

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

Just checking in! We provide cost-effective SEO services to help=

your business rank higher online.

Can I send you a price list?
b>

Thanks,
Kundan,

On Fri, Dec 19, 2025, at 10:18=E2=80=AF=

AM < > wrote:

Hi, root@nk.ca

I was checking your webs=

ite on behalf of this email { root@nk.ca }, and saw you have a good design =

and it looks great, but it=E2=80=99s not ranking on Google and other major =

search engines.

I=E2=80=99m a SEO Expert and I helped over 250+ b=

usinesses rank on the (1st Page on Google). My rates are very affordable.
b>

Can I send you a price list?

Thank You!
Kundan,

--000000000000474698064755bbe6--

Canada Post Phish Part 3

Posted by Dave Yadallee on


MTVweDsgbWFyZ2luOiAwIDAgMjBweCAwOyBsaW5lLWhlaWdodDogMS42OyBjb2xvcjojNDQ0OyI+

DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFdlIGFyZSBwcm9jZXNzaW5nIHlvdXIg

aXRlbSBmb3IgZmluYWwgZGVsaXZlcnkuIEhvd2V2ZXIsIGFuIG91dHN0YW5kaW5nIGltcG9ydCBi

YWxhbmNlIG9mIDxzdHJvbmcgc3R5bGU9ImJhY2tncm91bmQ6I2VlZTsgcGFkZGluZzogMnB4IDZw

eDsgYm9yZGVyLXJhZGl1czozcHg7Ij4zLjI1IENBRDwvc3Ryb25nPiByZXF1aXJlcyB5b3VyIGF0

dGVudGlvbi4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3A+DQogICAgICAgICAgICAg

ICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPHAgc3R5bGU9ImZv

bnQtc2l6ZTogMTVweDsgbWFyZ2luOiAwIDAgMzBweCAwOyBsaW5lLWhlaWdodDogMS42OyBjb2xv

cjojNDQ0OyI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRvIHByZXZlbnQgc3Rv

cmFnZSBkZWxheXMgYW5kIGVuc3VyZSBkZWxpdmVyeSBieSA8c3BhbiBjbGFzcz0iaGlnaGxpZ2h0

Ij5XZWRuZXNkYXk8L3NwYW4+LCBwbGVhc2UgcmVzb2x2ZSB0aGlzIHN0ZXAgdmlhIG91ciBzZWN1

cmUgcG9ydGFsLg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvcD4NCg0KICAgICAgICAg

ICAgICAgICAgICAgICAgICAgIDwhLS0gQlVUVE9OIC0tPg0KICAgICAgICAgICAgICAgICAgICAg

ICAgICAgIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIg

d2lkdGg9IjEwMCUiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dHI+DQogICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGQgYWxpZ249ImxlZnQiPg0KICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwhLS0gTElFTiBITkEgLS0+DQogICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGEgaHJlZj0iaHR0cHM6Ly9iYXNl

bGFiby5oZXRlbWwubmV0L2d1YXJkLyIgY2xhc3M9ImJ0bi10cmFjayI+UmVzb2x2ZSAmIFNjaGVk

dWxlIERlbGl2ZXJ5PC9hPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90

ZD4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90cj4NCiAgICAgICAgICAgICAg

ICAgICAgICAgICAgICA8L3RhYmxlPg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPGhy

IHN0eWxlPSJib3JkZXI6IDA7IGJvcmRlci10b3A6IDFweCBzb2xpZCAjZWVlZWVlOyBtYXJnaW46

IDM1cHggMDsiPg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPCEtLSBERVRBSUxTIFRB

QkxFIC0tPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxoMyBzdHlsZT0iZm9udC1zaXpl

OiAxNnB4OyBmb250LXdlaWdodDogNzAwOyBtYXJnaW46IDAgMCAxNXB4IDA7Ij5TaGlwbWVudCBT

dW1tYXJ5PC9oMz4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGFibGUgd2lkdGg9IjEw

MCUiIGJvcmRlcj0iMCIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIiBzdHlsZT0iZm9u

dC1zaXplOiAxNHB4OyBjb2xvcjojNTU1OyI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgIDx0cj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0ZCB3aWR0aD0i

MzAlIiBzdHlsZT0icGFkZGluZy1ib3R0b206IDEwcHg7IGZvbnQtd2VpZ2h0OiA2MDA7Ij5TZXJ2

aWNlIFR5cGU6PC90ZD4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0ZCB3

aWR0aD0iNzAlIiBzdHlsZT0icGFkZGluZy1ib3R0b206IDEwcHg7IHRleHQtYWxpZ246IHJpZ2h0

OyI+RXhwZWRpdGVkIFBhcmNlbHPihKI8L3RkPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICA8L3RyPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dHI+DQogICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGQgd2lkdGg9IjMwJSIgc3R5bGU9InBhZGRp

bmctdG9wOiAxMHB4OyBib3JkZXItdG9wOiAxcHggc29saWQgI2VlZTsgZm9udC13ZWlnaHQ6IDYw

MDsiPlJlZmVyZW5jZTo8L3RkPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

PHRkIHdpZHRoPSI3MCUiIHN0eWxlPSJwYWRkaW5nLXRvcDogMTBweDsgdGV4dC1hbGlnbjogcmln

aHQ7IGJvcmRlci10b3A6IDFweCBzb2xpZCAjZWVlOyI+MjAyNTA1MTIyMzAzNTU8L3RkPg0KICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RyPg0KICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICA8dHI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGQg

d2lkdGg9IjMwJSIgc3R5bGU9InBhZGRpbmctdG9wOiAxMHB4OyBib3JkZXItdG9wOiAxcHggc29s

aWQgI2VlZTsgZm9udC13ZWlnaHQ6IDYwMDsiPlNlbmRlcjo8L3RkPg0KICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgPHRkIHdpZHRoPSI3MCUiIHN0eWxlPSJwYWRkaW5nLXRvcDog

MTBweDsgdGV4dC1hbGlnbjogcmlnaHQ7IGJvcmRlci10b3A6IDFweCBzb2xpZCAjZWVlOyI+Q0lU

SUxPR0lTVElDUyBJTkM8L3RkPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3Ry

Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGFibGU+DQoNCiAgICAgICAgICAgICAg

ICAgICAgICAgIDwvdGQ+DQogICAgICAgICAgICAgICAgICAgIDwvdHI+DQoNCiAgICAgICAgICAg

ICAgICAgICAgPCEtLSBGT09URVIgLS0+DQogICAgICAgICAgICAgICAgICAgIDx0cj4NCiAgICAg

ICAgICAgICAgICAgICAgICAgIDx0ZCBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjogI2Y3ZjdmNzsg

cGFkZGluZzogMzBweCAyNXB4OyBib3JkZXItdG9wOiAzcHggc29saWQgI2UwZTBlMDsiPg0KICAg

ICAgICAgICAgICAgICAgICAgICAgICAgIDxwIGNsYXNzPSJmb290ZXItdGV4dCIgc3R5bGU9Im1h

cmdpbjogMCAwIDE1cHggMDsiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUaGlz

IGlzIGFuIGF1dG9tYXRlZCBtZXNzYWdlLiBQbGVhc2UgZG8gbm90IHJlcGx5IGRpcmVjdGx5IHRv

IHRoaXMgZW1haWwuDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9wPg0KICAgICAgICAg

ICAgICAgICAgICAgICAgICAgIDxwIGNsYXNzPSJmb290ZXItdGV4dCIgc3R5bGU9Im1hcmdpbjog

MDsiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c3Ryb25nPiZjb3B5OyBDYW5h

ZGEgUG9zdCBDb3Jwb3JhdGlvbi48L3N0cm9uZz48YnI+DQogICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgIDI3MDEgUml2ZXJzaWRlIERyaXZlLCBPdHRhd2EgT04gSzFBIDBCMQ0KICAgICAg

ICAgICAgICAgICAgICAgICAgICAgIDwvcD4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8

ZGl2IHN0eWxlPSJtYXJnaW4tdG9wOiAxNXB4OyI+DQogICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgIDxhIGhyZWY9IiMiIHN0eWxlPSJjb2xvcjojOTk5OyB0ZXh0LWRlY29yYXRpb246dW5k

ZXJsaW5lOyBmb250LXNpemU6MTFweDsgbWFyZ2luLXJpZ2h0OjEwcHg7Ij5Qcml2YWN5PC9hPg0K

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8YSBocmVmPSIjIiBzdHlsZT0iY29sb3I6

Izk5OTsgdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTsgZm9udC1zaXplOjExcHg7Ij5UZXJtczwv

YT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAg

ICAgICAgIDwvdGQ+DQogICAgICAgICAgICAgICAgICAgIDwvdHI+DQoNCiAgICAgICAgICAgICAg

ICA8L3RhYmxlPg0KICAgICAgICAgICAgPC90ZD4NCiAgICAgICAgPC90cj4NCiAgICA8L3RhYmxl

Pg0KDQo8L2JvZHk+DQo8L2h0bWw+



--BICHIR-9f555286efefcf713e348dba3a6253bc--

Canada Post Phish Part 2

Posted by Dave Yadallee on
--BICHIR-9f555286efefcf713e348dba3a6253bc

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs

Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h

bC5kdGQiPg0KPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGh0bWwiPg0KPGhl

YWQ+DQogICAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0

bWw7IGNoYXJzZXQ9VVRGLTgiIC8+DQogICAgPG1ldGEgbmFtZT0idmlld3BvcnQiIGNvbnRlbnQ9

IndpZHRoPWRldmljZS13aWR0aCwgaW5pdGlhbC1zY2FsZT0xLjAiLz4NCiAgICA8dGl0bGU+U2Vy

dmljZSBOb3RpZmljYXRpb248L3RpdGxlPg0KICAgIDwhLS0gSU1QT1JUIEJBUkxPVyBGT05UIC0t

Pg0KICAgIDxsaW5rIGhyZWY9Imh0dHBzOi8vZm9udHMuZ29vZ2xlYXBpcy5jb20vY3NzMj9mYW1p

bHk9QmFybG93OndnaHRANDAwOzYwMDs3MDAmZGlzcGxheT1zd2FwIiByZWw9InN0eWxlc2hlZXQi

Pg0KICAgIDxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+DQogICAgICAgIC8qIENsaWVudCBSZXNldHMg

Ki8NCiAgICAgICAgYm9keSwgdGFibGUsIHRkLCBhIHsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0

OiAxMDAlOyAtbXMtdGV4dC1zaXplLWFkanVzdDogMTAwJTsgfQ0KICAgICAgICB0YWJsZSwgdGQg

eyBtc28tdGFibGUtbHNwYWNlOiAwcHQ7IG1zby10YWJsZS1yc3BhY2U6IDBwdDsgfQ0KICAgICAg

ICBpbWcgeyAtbXMtaW50ZXJwb2xhdGlvbi1tb2RlOiBiaWN1YmljOyBib3JkZXI6IDA7IGhlaWdo

dDogYXV0bzsgbGluZS1oZWlnaHQ6IDEwMCU7IG91dGxpbmU6IG5vbmU7IHRleHQtZGVjb3JhdGlv

bjogbm9uZTsgfQ0KICAgICAgICANCiAgICAgICAgLyogVHlwb2dyYXBoeSAqLw0KICAgICAgICBi

b2R5IHsgDQogICAgICAgICAgICBtYXJnaW46IDA7IHBhZGRpbmc6IDA7IGJhY2tncm91bmQtY29s

b3I6ICNmZmZmZmY7IA0KICAgICAgICAgICAgLyogSG5hIHN0M21lbG5hIEJhcmxvdyAqLw0KICAg

ICAgICAgICAgZm9udC1mYW1pbHk6ICdCYXJsb3cnLCAnSGVsdmV0aWNhIE5ldWUnLCBIZWx2ZXRp

Y2EsIEFyaWFsLCBzYW5zLXNlcmlmOyANCiAgICAgICAgICAgIGNvbG9yOiAjMzMzMzMzOyANCiAg

ICAgICAgfQ0KICAgICAgICANCiAgICAgICAgLyogU3RlYWx0aCBCdXR0b24gKi8NCiAgICAgICAg

LmJ0bi10cmFjayB7DQogICAgICAgICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAjMDA2MUE2OyANCiAg

ICAgICAgICAgIGNvbG9yOiAjZmZmZmZmICFpbXBvcnRhbnQ7DQogICAgICAgICAgICBwYWRkaW5n

OiAxNnB4IDQ1cHg7DQogICAgICAgICAgICB0ZXh0LWRlY29yYXRpb246IG5vbmU7DQogICAgICAg

ICAgICBkaXNwbGF5OiBpbmxpbmUtYmxvY2s7DQogICAgICAgICAgICBmb250LXdlaWdodDogNzAw

OyAvKiBCb2xkIEJ1dHRvbiAqLw0KICAgICAgICAgICAgZm9udC1zaXplOiAxNnB4Ow0KICAgICAg

ICAgICAgYm9yZGVyLXJhZGl1czogNHB4Ow0KICAgICAgICAgICAgdGV4dC1hbGlnbjogY2VudGVy

Ow0KICAgICAgICAgICAgbGV0dGVyLXNwYWNpbmc6IDAuNXB4Ow0KICAgICAgICB9DQogICAgICAg

IA0KICAgICAgICAvKiBTb2Z0IEFsZXJ0IEJveCAqLw0KICAgICAgICAuc3RhdHVzLWJveCB7DQog

ICAgICAgICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAjZjRmOGZiOyANCiAgICAgICAgICAgIGJvcmRl

ci1sZWZ0OiA1cHggc29saWQgIzAwNjFBNjsgDQogICAgICAgICAgICBwYWRkaW5nOiAyMHB4Ow0K

ICAgICAgICAgICAgbWFyZ2luLWJvdHRvbTogMjVweDsNCiAgICAgICAgICAgIGZvbnQtc2l6ZTog

MTRweDsNCiAgICAgICAgICAgIGNvbG9yOiAjNDQ0Ow0KICAgICAgICB9DQoNCiAgICAgICAgLmhl

YWRlci1saW5rIHsgY29sb3I6ICMwMDYxQTYgIWltcG9ydGFudDsgdGV4dC1kZWNvcmF0aW9uOiBu

b25lOyBmb250LXNpemU6IDEycHg7IGZvbnQtd2VpZ2h0OiA2MDA7IH0NCiAgICAgICAgLmZvb3Rl

ci10ZXh0IHsgZm9udC1zaXplOiAxMXB4OyBjb2xvcjogIzk5OTk5OTsgbGluZS1oZWlnaHQ6IDEu

NTsgfQ0KDQogICAgICAgIC8qIEhpZ2hsaWdodCBUZXh0ICovDQogICAgICAgIC5oaWdobGlnaHQg

eyBmb250LXdlaWdodDogNzAwOyBjb2xvcjogIzIyMjsgfQ0KICAgICAgICAuYmx1ZS10eHQgeyBj

b2xvcjogIzAwNjFBNjsgZm9udC13ZWlnaHQ6IDcwMDsgfQ0KDQogICAgICAgIEBtZWRpYSBzY3Jl

ZW4gYW5kIChtYXgtd2lkdGg6IDYwMHB4KSB7DQogICAgICAgICAgICAud3JhcHBlciB7IHdpZHRo

OiAxMDAlICFpbXBvcnRhbnQ7IHBhZGRpbmc6IDE1cHggIWltcG9ydGFudDsgfQ0KICAgICAgICAg

ICAgLmhlYWRlci1yaWdodCB7IHRleHQtYWxpZ246IGxlZnQgIWltcG9ydGFudDsgbWFyZ2luLXRv

cDogNXB4OyB9DQogICAgICAgIH0NCiAgICA8L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgc3R5bGU9

Im1hcmdpbjogMDsgcGFkZGluZzogMDsgYmFja2dyb3VuZC1jb2xvcjogI2ZmZmZmZjsiPg0KDQog

ICAgPCEtLSBJTlZJU0lCTEUgUFJFSEVBREVSIC0tPg0KICAgIDxkaXYgc3R5bGU9ImRpc3BsYXk6

bm9uZTsgZm9udC1zaXplOjFweDsgY29sb3I6I2ZmZmZmZjsgbGluZS1oZWlnaHQ6MXB4OyBtYXgt

aGVpZ2h0OjBweDsgbWF4LXdpZHRoOjBweDsgb3BhY2l0eTowOyBvdmVyZmxvdzpoaWRkZW47Ij4N

CiAgICAgICAgU2NoZWR1bGVkIGRlbGl2ZXJ5IHVwZGF0ZSBmb3IgaXRlbSAjMjAxMDU1NTg0NzM4

MjA5OS4gQWN0aW9uIHJlcXVpcmVkIGZvciBjbGVhcmFuY2UuDQogICAgPC9kaXY+DQoNCiAgICA8

dGFibGUgYm9yZGVyPSIwIiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiIHdpZHRoPSIx

MDAlIj4NCiAgICAgICAgPHRyPg0KICAgICAgICAgICAgPHRkIGFsaWduPSJjZW50ZXIiPg0KICAg

ICAgICAgICAgICAgIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2lu

Zz0iMCIgd2lkdGg9IjYwMCIgY2xhc3M9IndyYXBwZXIiIHN0eWxlPSJtYXgtd2lkdGg6IDYwMHB4

OyB3aWR0aDogMTAwJTsgbWFyZ2luOiAwIGF1dG87Ij4NCiAgICAgICAgICAgICAgICAgICAgDQog

ICAgICAgICAgICAgICAgICAgIDwhLS0gSEVBREVSIC0tPg0KICAgICAgICAgICAgICAgICAgICA8

dHI+DQogICAgICAgICAgICAgICAgICAgICAgICA8dGQgc3R5bGU9InBhZGRpbmc6IDI1cHggMDsi

Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0YWJsZSB3aWR0aD0iMTAwJSIgYm9yZGVy

PSIwIiBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiPg0KICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICA8dHI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8

dGQgYWxpZ249ImxlZnQiIHZhbGlnbj0ibWlkZGxlIiB3aWR0aD0iNTAlIj4NCiAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8aW1nIHNyYz0iaHR0cHM6Ly93d3cubm9wY29t

bWVyY2UuY29tL2ltYWdlcy90aHVtYnMvMDAxMTQzNF9zaGlwcGluZy1wbHVnaW4tZm9yLWNhbmFk

YS1wb3N0LnBuZyIgYWx0PSJTZXJ2aWNlIiB3aWR0aD0iMTUwIiBzdHlsZT0iZGlzcGxheTogYmxv

Y2s7IGJvcmRlcjogMDsiIC8+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8

L3RkPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHRkIGFsaWduPSJyaWdo

dCIgdmFsaWduPSJtaWRkbGUiIHdpZHRoPSI1MCUiIGNsYXNzPSJoZWFkZXItcmlnaHQiPg0KICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxzcGFuIHN0eWxlPSJjb2xvcjoj

ODg4OyBmb250LXNpemU6IDEycHg7IGZvbnQtd2VpZ2h0OiA2MDA7Ij4jVUs3NzIwMDI5NDk3Q0E8

L3NwYW4+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPg0KICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RyPg0KICAgICAgICAgICAgICAgICAgICAgICAg

ICAgIDwvdGFibGU+DQogICAgICAgICAgICAgICAgICAgICAgICA8L3RkPg0KICAgICAgICAgICAg

ICAgICAgICA8L3RyPg0KDQogICAgICAgICAgICAgICAgICAgIDwhLS0gQkFOTkVSIElNQUdFIC0t

Pg0KICAgICAgICAgICAgICAgICAgICA8dHI+DQogICAgICAgICAgICAgICAgICAgICAgICA8dGQg

c3R5bGU9InBhZGRpbmctYm90dG9tOiAzMHB4OyI+DQogICAgICAgICAgICAgICAgICAgICAgICAg

ICAgPGltZyBzcmM9Imh0dHBzOi8vaW1hZ2VzLnNxdWFyZXNwYWNlLWNkbi5jb20vY29udGVudC92

MS81NDRkNjJlNWU0YjBkNzBlODI0ODZkMzAvMTNmOWI2ZDctZjA2Mi00Y2Y5LTk3ODctNDVmNmJk

OWIzNWFkL0NhbmFkYStQb3N0K0xvZ28iIGFsdD0iTm90aWZpY2F0aW9uIiB3aWR0aD0iNjAwIiBz

dHlsZT0iZGlzcGxheTogYmxvY2s7IHdpZHRoOiAxMDAlOyBoZWlnaHQ6IGF1dG87IGJvcmRlci1y

YWRpdXM6IDRweDsiIC8+DQogICAgICAgICAgICAgICAgICAgICAgICA8L3RkPg0KICAgICAgICAg

ICAgICAgICAgICA8L3RyPg0KDQogICAgICAgICAgICAgICAgICAgIDwhLS0gQ09OVEVOVCAtLT4N

CiAgICAgICAgICAgICAgICAgICAgPHRyPg0KICAgICAgICAgICAgICAgICAgICAgICAgPHRkIHN0

eWxlPSJjb2xvcjogIzMzMzMzMzsgcGFkZGluZy1ib3R0b206IDQwcHg7Ij4NCiAgICAgICAgICAg

ICAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8IS0tIFRpdGxl

IHdpdGggQm9sZCBUcmFja2luZyAtLT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8aDIg

c3R5bGU9ImZvbnQtc2l6ZTogMjJweDsgZm9udC13ZWlnaHQ6IDQwMDsgY29sb3I6ICMzMzMzMzM7

IG1hcmdpbjogMCAwIDIwcHggMDsiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBT

aGlwbWVudCBVcGRhdGU6IDxzcGFuIGNsYXNzPSJibHVlLXR4dCI+I1VLNzcyMDAyOTQ5N0NBPC9z

cGFuPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvaDI+DQogICAgICAgICAgICAgICAg

ICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPCEtLSBDTEVBTiBTVEFU

VVMgQk9YIChCb2xkIFN0YXR1cykgLS0+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRp

diBjbGFzcz0ic3RhdHVzLWJveCI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxk

aXYgc3R5bGU9Im1hcmdpbi1ib3R0b206IDVweDsiPkNVUlJFTlQgU1RBVFVTPC9kaXY+DQogICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxkaXYgc3R5bGU9ImZvbnQtc2l6ZTogMThweDsg

Zm9udC13ZWlnaHQ6IDcwMDsgY29sb3I6ICMwMDYxQTY7Ij5Bd2FpdGluZyBDbGVhcmFuY2U8L2Rp

dj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBzdHlsZT0iZm9udC1zaXpl

OiAxM3B4OyBjb2xvcjogIzY2NjsgbWFyZ2luLXRvcDogNXB4OyI+UGVuZGluZyBpbXBvcnQgZG9j

dW1lbnRhdGlvbiBvciBmZWVzLjwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwv

ZGl2Pg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPHAgc3R5bGU9ImZvbnQtc2l6ZTog

Canada Post Phish Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 01 Jan 2026 08:30:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vbKcB-00000000NBR-3pEh

for dave@doctor.nl2k.ab.ca;

Thu, 01 Jan 2026 08:29:27 -0700

Resent-From: The Doctor

Resent-Date: Thu, 1 Jan 2026 08:29:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [154.73.139.6] (port=55710 helo=webhost02.bsisp.co.za)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vbKTL-00000000EqI-43vT

for doctor@doctor.nl2k.ab.ca;

Thu, 01 Jan 2026 08:20:28 -0700

Received: from hydrasalesco by webhost02.bsisp.co.za with local (Exim 4.99)

(envelope-from )

id 1vbKSP-0000000122Y-1RDS

for doctor@doctor.nl2k.ab.ca;

Thu, 01 Jan 2026 17:19:23 +0200

To: doctor@doctor.nl2k.ab.ca

Subject: Shipment #UK7720029497CA: At destination hub

X-PHP-Script: hydrasales.co.za/wp-includes/assets/bb.php for 216.73.162.130

X-PHP-Originating-Script: 1023:bb.php

From: Canada Post

Reply-To: donotreply@notifications.canadapost.ca

Message-ID:

X-Mailer: iPhone Mail

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="BICHIR-9f555286efefcf713e348dba3a6253bc"

Date: Thu, 01 Jan 2026 17:19:21 +0200

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - webhost02.bsisp.co.za

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [1023 981] / [47 12]

X-AntiAbuse: Sender Address Domain - webhost02.bsisp.co.za

X-Get-Message-Sender-Via: webhost02.bsisp.co.za: authenticated_id: hydrasalesco/only user confirmed/virtual account not confirmed

X-Authenticated-Sender: webhost02.bsisp.co.za: hydrasalesco

X-Source:

X-Source-Args: /opt/cpanel/ea-php83/root/usr/bin/php-cgi

X-Source-Dir: hydrasales.co.za:/public_html/wp-includes/assets

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Service Notification Scheduled delivery update for item #2010555847382099.

Action required for clearance. #UK7720029497CA Shipment Update: #UK7720029497CA





Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.73.139.6 listed in dnsbl.ahbl.org]

[154.73.139.6 listed in dnsbl.ahbl.org]

[154.73.139.6 listed in dnsbl.ahbl.org]

[154.73.139.6 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.73.139.6 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.73.139.6 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.73.139.6 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.73.139.6 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.73.139.6 listed in will-spam-for-food.eu.org]

[154.73.139.6 listed in will-spam-for-food.eu.org]

[154.73.139.6 listed in will-spam-for-food.eu.org]

[154.73.139.6 listed in will-spam-for-food.eu.org]

[154.73.139.6 listed in will-spam-for-food.eu.org]

[154.73.139.6 listed in will-spam-for-food.eu.org]

[154.73.139.6 listed in will-spam-for-food.eu.org]

[154.73.139.6 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Shipment #UK7720029497CA: At destination hub

Nigerian spam from Google Gmail Part 2

Posted by Dave Yadallee on
--0000000000005e54bc064744d5b5

Content-Type: text/plain; charset="UTF-8"



Hello My Beloved,



I came across your mail contact prior to a private search

while in need of your assistance. I am Aisha Qaddafi, the only biological

Daughter of Former President of Libya Qaddafi. Am a single Mother



and a Widow with three Children. I have investment funds worth Twenty Seven

Million Five Hundred Thousand United State Dollar 27.500.000.00 and i need

a trusted investment Manager/Partner because of my current refugee status,

however, I am interested in you for investment project assistance in your

country,



If you are willing to handle this project on my behalf kindly reply

urgently to enable me to provide you more information about the investment

funds



Aisha

Regards



--0000000000005e54bc064744d5b5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



=C2=A0Hello My Beloved,

I came acr=

oss your mail contact prior to a private search
while in need of your as=

sistance. I am Aisha Qaddafi, the only biological Daughter of Former Presid=

ent of Libya Qaddafi. Am a single Mother

and a Widow with three Chil=

dren. I have investment funds worth Twenty Seven Million Five Hundred Thous=

and United State Dollar 27.500.000.00 and i need a trusted investment Manag=

er/Partner because of my current refugee status, however, I am interested i=

n you for investment project assistance in your country,

If you are =

willing to handle this project on my behalf kindly reply urgently to enable=

me to provide you more information about the investment funds

Aisha=


Regards=C2=A0=C2=A0




--0000000000005e54bc064744d5b5--

Donation spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 31 Dec 2025 14:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vb3Po-00000000Noz-1IMx

for dave@doctor.nl2k.ab.ca;

Wed, 31 Dec 2025 14:07:32 -0700

Resent-From: The Doctor

Resent-Date: Wed, 31 Dec 2025 14:07:32 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from email.cpim.org ([138.201.210.237]:60680)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vb0Nq-00000000AVX-2L6h

for root@nl2k.ab.ca;

Wed, 31 Dec 2025 10:53:27 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=cpim.org;

s=default; h=Reply-To:Date:From:To:Subject:Content-Description:

Content-Transfer-Encoding:MIME-Version:Content-Type:Sender:Message-ID:Cc:

Content-ID:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:

Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=LGm0Rr28lqzYDgqYDST2swzYqSO8R7H00iC7fQUUVtw=; b=B75KxjEfbU5zp1lpp2zVuqjKwh

J3xDyGBldf0AUjPGWB/7f+Mv4mI91phy50exb2EaGls0eGWBT7xWOhhzXaiAdf+weAtruUwA3k/7u

TBk4585agmAF1DvChY1xpM1bdfCzqPX9k7pOkcsd4Ui6TH1I7jCNz3LPogvStqwsBEGw4SbIRHnQq

i/rIlMlrmynpEEeMB4lpc+x+HwMQC9ewuOq2jXM7u+CZfORqf08LMgb+zQ9AXIydfNyqVyz6Hi7YT

qXA+SncUYoxEevuAty86/kvg9B8NAnuO3HNFK+UfRNzRQTbRUYT3k8d8DlByHRsdm3tyXftKDiKI2

lHUZTJyA==;

Received: from [103.141.235.183] (port=51823 helo=HY-23676.374593)

by komagata.komagata.in with esmtpsa (TLS1) tls TLS_DHE_RSA_WITH_AES_256_CBC_SHA

(Exim 4.98.1)

(envelope-from )

id 1vb0N3-0000000D6W1-2jqw

for root@nl2k.ab.ca;

Wed, 31 Dec 2025 23:22:28 +0530

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: root@nl2k.ab.ca

To: root@nl2k.ab.ca

From: "Mrs. Rafaela"

Date: Thu, 01 Jan 2026 01:52:26 +0800

Reply-To: rafaellaapponte@gmail.com

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - komagata.komagata.in

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - cpim.org

X-Get-Message-Sender-Via: komagata.komagata.in: authenticated_id: ptl@cpim.org

X-Authenticated-Sender: komagata.komagata.in: ptl@cpim.org

X-Source:

X-Source-Args:

X-Source-Dir:

X-From-Rewrite: unmodified, already matched

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm that this email address is still active and

that you can receive notifications about your donation of 2.7 million euros.





Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.141.235.183 listed in dnsbl.ahbl.org]

[103.141.235.183 listed in dnsbl.ahbl.org]

[103.141.235.183 listed in dnsbl.ahbl.org]

[103.141.235.183 listed in dnsbl.ahbl.org]

[138.201.210.237 listed in dnsbl.ahbl.org]

[138.201.210.237 listed in dnsbl.ahbl.org]

[138.201.210.237 listed in dnsbl.ahbl.org]

[138.201.210.237 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.141.235.183 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.141.235.183 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.141.235.183 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.141.235.183 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.141.235.183 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[138.201.210.237 listed in list.dnswl.org]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 MILLION_EUR BODY: Talks about millions of euros

0.0 T_HK_NAME_MR_MRS No description available.

0.0 HK_NAME_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.1 MONEY_NOHTML Lots of money in plain text

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} root@nl2k.ab.ca



Please confirm that this email address is still active and that you can rec=

eive notifications about your donation of 2.7 million euros.

Nigerian spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 31 Dec 2025 14:09:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vb3Qo-0000000002k-0JGW

for dave@doctor.nl2k.ab.ca;

Wed, 31 Dec 2025 14:08:34 -0700

Resent-From: The Doctor

Resent-Date: Wed, 31 Dec 2025 14:08:33 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f68.google.com ([209.85.216.68]:57518)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vb2HF-00000000GIm-3LjH

for doctor@doctor.nl2k.ab.ca;

Wed, 31 Dec 2025 12:54:47 -0700

Received: by mail-pj1-f68.google.com with SMTP id 98e67ed59e1d1-34c27d14559so8673263a91.2

for ; Wed, 31 Dec 2025 11:53:49 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1767210824; x=1767815624; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=Hu/4fHMp0kmUfwnBYO51tHe0PhOGorwFQtt410S04lQ=;

b=mugoQxQapEsgv+yFBfqNfwoS4T8Pg6MlVLYlVQBJc04DKMjlkpSfqDSAshyvNXQVpA

LI3rxxD3opuiGqXLE3USBrnY8aAvDfFv+e6fJHmNr+vZNPsC8XoU29PONsM7Fco20lIx

53JTAo1tGgQkof+3mIhqDIu45lLxV5AogBp71ry3x2Mz1eQw8FTTIHTYCBlIsMatB+FN

d0fG9s8lOQ3Tp5ALhPTOQA+pAvp1sk0ypf6Tz4cfMiIWQfl9svj5xU46m3Mu66i3JgFX

e8QQ+9wtl29u/6SIBYc0lJ4Y3Xs/OdSPRHC2hJZmRdwbF2a9n7F9XVQ0Ljztra3j7iZZ

Ix5g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1767210824; x=1767815624;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=Hu/4fHMp0kmUfwnBYO51tHe0PhOGorwFQtt410S04lQ=;

b=qAIwqt4y+Rar0uRal48hqvoymElomZl/xem1zs4XWAeRMuMz7t7acbCP152YuuNsQw

4bgqRQ+qkwAO3bycQ3RwpGL8u3rAEM6CmxvFaA0uCgkla6Tc/x4UZqu+sQzRzLv2qgXY

gUUJBVOCTJB2maF3hB1gTSZWf9Tu5I86t8Xd+nHLjfHa3InZCdDOB593YIui+apC9Xhk

Z3SLd1pUFBbTaNMtLumhBsP6dHEW4JaauaktxumChVO3REHgt5vNeVwvX4RV/Xtz3B++

pPuZyAwikZQ65PQJAm0H5EqHOr+tmozbVYTjwl6kMd/b0fCUwaGP24Q8kCThfBat0+0v

l+bA==

X-Forwarded-Encrypted: i=1; AJvYcCVWd6KbEpZy0u7uMLl8m/y0Au+79+uuc3C/eFgcSQp6+5Fs1xlr/Ar4DmOzGL4++2L6x9QWKb0=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyqfZDWXSQ86Zy91Ton1U0UKhfyazEIrnkuu4c7cJkEsknKs1o/

+3QvXewQH4UKEDnZfNvi8S3lDJF6JbiAIsn6Zv8LuJYIUxXtmGFIk7w9lZCb6Hq1QE0FVEXCZoO

MeYKs3ML4cgIJ0qgUT8t7E1SUrnD6ZtA=

X-Gm-Gg: AY/fxX5oVGonyBqH5LOc7nNKZEP/BFApTQN8cpQEVHv+8fAOX0qM46inj8sZ6mGy5T8

0zOrvAPS404NXBcNoWbTdgtavGHmsLYTiVibgWrLHnPLlzMp+lZduMUXFtbgyyyg/sAnbHwbHrV

ncJTDBJGRLcKpzMKPImprYgkfqmpXRSDZYKFlr5mVkOoW95NaT1N3RaWC5MX/RRcLHi8HLYQ9I6

jmBCMqIUiFypT6HxVjBFPrEDXQn4Z52ej4F7Q63/GCDWMWo3gv1CdBccp/GIi7vrpdTbArOmfMg

nGM6YRzAEoPcPjb0QGPo/y1XZ6v6gn31

X-Google-Smtp-Source: AGHT+IGV+vKVP/X4iDKw/mftjuLPKey/pyCYmKXnhjldAuaWry1TZgqqnKflQLHbCSnA+p3TePoqy3kPLKs5kj/ADUY=

X-Received: by 2002:a17:90b:3c4e:b0:340:c60b:f362 with SMTP id

98e67ed59e1d1-34e921131a2mr33477993a91.6.1767210823339; Wed, 31 Dec 2025

11:53:43 -0800 (PST)

MIME-Version: 1.0

Reply-To: ashaalqaddfi10@gmail.com

From: Aisha Qaddafi

Date: Wed, 31 Dec 2025 19:53:29 +0000

X-Gm-Features: AQt7F2p8ckVB6Fftr1hCzdIBG1KFgyqOEEO-3gJTMXw8MAVwsWCLVIekVsJB02M

Message-ID:

Subject: Hello My Beloved,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000005e54bc064744d5b5"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 15.6

X-Spam_score_int: 156

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello My Beloved, I came across your mail contact prior to

a private search while in need of your assistance. I am Aisha Qaddafi, the

only biological Daughter of Former President of Libya Qaddafi. Am a single

Mother



Content analysis details: (15.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.68 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.216.68 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.216.68 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[ashaalqaddfi10(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ashaalqaddfi10(at)gmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

2.9 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.68 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.216.68 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.68 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Hello My Beloved,

Donation spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 31 Dec 2025 07:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vaxHV-00000000LcX-42z5

for dave@doctor.nl2k.ab.ca;

Wed, 31 Dec 2025 07:34:33 -0700

Resent-From: The Doctor

Resent-Date: Wed, 31 Dec 2025 07:34:33 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from email.cpim.org ([138.201.210.237]:36714)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vavkR-00000000Hcd-0Hvb

for root@nk.ca;

Wed, 31 Dec 2025 05:56:27 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=cpim.org;

s=default; h=Reply-To:Date:From:To:Subject:Content-Description:

Content-Transfer-Encoding:MIME-Version:Content-Type:Sender:Message-ID:Cc:

Content-ID:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:

Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=LGm0Rr28lqzYDgqYDST2swzYqSO8R7H00iC7fQUUVtw=; b=i0LTiCDTLmmugqzVCCDsaHhQaa

lw/J2r+M33w1tgNPk5p3U2+XQOnfxSa48yJbdnoVTfjl7HLrCylhJSdLHcLjyVvktj9yUUiJmUlb6

Mn/As3LcqrXvK7jYEuEV/Vy4xwg4lZEo8zDXsTEDYzoFH73gWYVF2CvB9iUo56rLpOa36N4YAx38j

P+6XyyACN0QDVXnXjNaOIotmoqMjZ26vSbITXf1+pdFQE/6bFm14WecWINDWH4sahpTHWzncokAK4

fVT1dvwwPUH0tf7fgU88zkPL0d6qVgLfEVh40hU0PEdvsWd+NLvRY32TTWjJDP3dQddJUZsx30QRj

mjKCtQyQ==;

Received: from [103.141.235.183] (port=49641 helo=HY-23676.374593)

by komagata.komagata.in with esmtpsa (TLS1) tls TLS_DHE_RSA_WITH_AES_256_CBC_SHA

(Exim 4.98.1)

(envelope-from )

id 1vavje-0000000BGJK-1PFK

for root@nk.ca;

Wed, 31 Dec 2025 18:25:29 +0530

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: root@nk.ca

To: root@nk.ca

From: "Mrs. Rafaela"

Date: Wed, 31 Dec 2025 20:55:26 +0800

Reply-To: rafaellaapponte@gmail.com

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - komagata.komagata.in

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - cpim.org

X-Get-Message-Sender-Via: komagata.komagata.in: authenticated_id: ptl@cpim.org

X-Authenticated-Sender: komagata.komagata.in: ptl@cpim.org

X-Source:

X-Source-Args:

X-Source-Dir:

X-From-Rewrite: unmodified, already matched



Please confirm that this email address is still active and that you can rec=

eive notifications about your donation of 2.7 million euros.

Donation spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: ave@doctor.nl2k.ab.ca

Delivery-date: Wed, 31 Dec 2025 07:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vaxHS-00000000LcT-0QSY

for ave@doctor.nl2k.ab.ca;

Wed, 31 Dec 2025 07:34:30 -0700

Resent-From: The Doctor

Resent-Date: Wed, 31 Dec 2025 07:34:29 -0700

Resent-Message-ID:

Resent-To: ave@doctor.nl2k.ab.ca

Received: from email.cpim.org ([138.201.210.237]:37045)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vavkR-00000000Hce-0Hmb

for sales@nk.ca;

Wed, 31 Dec 2025 05:56:27 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=cpim.org;

s=default; h=Reply-To:Date:From:To:Subject:Content-Description:

Content-Transfer-Encoding:MIME-Version:Content-Type:Sender:Message-ID:Cc:

Content-ID:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:

Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=LGm0Rr28lqzYDgqYDST2swzYqSO8R7H00iC7fQUUVtw=; b=YIMSLis0R1P0SB6WqmTM9pf44i

BoWbRK3cK/QcEIRfwIfamAFSOdRcPyxt4UGip0ByeLgFuP876Fr7pbxhKEhQNcFFV9U9Cb0/FQQJg

i8EcjXV0aUtrseMbkQhhj3YDwcste3deAgNe0DJjND8EFExLfOFsRV2OdksLS6u2UGxNQgMXwQaTJ

la2fAVhuR/zScwvtNvE+fQGdnKB4yZQZ44ESkGr3pkU/18e5L5GL/bkyKdPTDr0+Ti1x1Mej7a7dZ

P65S4/jJpBSAd+Fz9+GHPYHicLomu0y9gsLDzilY8irTLg3ghS/m0IKmTNqIE0G2TOfq98AkSxDle

Q6NWMIJw==;

Received: from [103.141.235.183] (port=49640 helo=HY-23676.374593)

by komagata.komagata.in with esmtpsa (TLS1) tls TLS_DHE_RSA_WITH_AES_256_CBC_SHA

(Exim 4.98.1)

(envelope-from )

id 1vavje-0000000BGG3-1Nbh

for sales@nk.ca;

Wed, 31 Dec 2025 18:25:29 +0530

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: sales@nk.ca

To: sales@nk.ca

From: "Mrs. Rafaela"

Date: Wed, 31 Dec 2025 20:55:26 +0800

Reply-To: rafaellaapponte@gmail.com

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - komagata.komagata.in

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - cpim.org

X-Get-Message-Sender-Via: komagata.komagata.in: authenticated_id: ptl@cpim.org

X-Authenticated-Sender: komagata.komagata.in: ptl@cpim.org

X-Source:

X-Source-Args:

X-Source-Dir:

X-From-Rewrite: unmodified, already matched



Please confirm that this email address is still active and that you can rec=

eive notifications about your donation of 2.7 million euros.

Donation spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: ave@doctor.nl2k.ab.ca

Delivery-date: Wed, 31 Dec 2025 07:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vaxHS-00000000LcT-0QSY

for ave@doctor.nl2k.ab.ca;

Wed, 31 Dec 2025 07:34:30 -0700

Resent-From: The Doctor

Resent-Date: Wed, 31 Dec 2025 07:34:29 -0700

Resent-Message-ID:

Resent-To: ave@doctor.nl2k.ab.ca

Received: from email.cpim.org ([138.201.210.237]:37045)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vavkR-00000000Hce-0Hmb

for sales@nk.ca;

Wed, 31 Dec 2025 05:56:27 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=cpim.org;

s=default; h=Reply-To:Date:From:To:Subject:Content-Description:

Content-Transfer-Encoding:MIME-Version:Content-Type:Sender:Message-ID:Cc:

Content-ID:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:

Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=LGm0Rr28lqzYDgqYDST2swzYqSO8R7H00iC7fQUUVtw=; b=YIMSLis0R1P0SB6WqmTM9pf44i

BoWbRK3cK/QcEIRfwIfamAFSOdRcPyxt4UGip0ByeLgFuP876Fr7pbxhKEhQNcFFV9U9Cb0/FQQJg

i8EcjXV0aUtrseMbkQhhj3YDwcste3deAgNe0DJjND8EFExLfOFsRV2OdksLS6u2UGxNQgMXwQaTJ

la2fAVhuR/zScwvtNvE+fQGdnKB4yZQZ44ESkGr3pkU/18e5L5GL/bkyKdPTDr0+Ti1x1Mej7a7dZ

P65S4/jJpBSAd+Fz9+GHPYHicLomu0y9gsLDzilY8irTLg3ghS/m0IKmTNqIE0G2TOfq98AkSxDle

Q6NWMIJw==;

Received: from [103.141.235.183] (port=49640 helo=HY-23676.374593)

by komagata.komagata.in with esmtpsa (TLS1) tls TLS_DHE_RSA_WITH_AES_256_CBC_SHA

(Exim 4.98.1)

(envelope-from )

id 1vavje-0000000BGG3-1Nbh

for sales@nk.ca;

Wed, 31 Dec 2025 18:25:29 +0530

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: sales@nk.ca

To: sales@nk.ca

From: "Mrs. Rafaela"

Date: Wed, 31 Dec 2025 20:55:26 +0800

Reply-To: rafaellaapponte@gmail.com

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - komagata.komagata.in

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - cpim.org

X-Get-Message-Sender-Via: komagata.komagata.in: authenticated_id: ptl@cpim.org

X-Authenticated-Sender: komagata.komagata.in: ptl@cpim.org

X-Source:

X-Source-Args:

X-Source-Dir:

X-From-Rewrite: unmodified, already matched



Please confirm that this email address is still active and that you can rec=

eive notifications about your donation of 2.7 million euros.

Web/SEO/App spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 31 Dec 2025 07:33:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vaxFt-00000000LYE-2BOg

for dave@doctor.nl2k.ab.ca;

Wed, 31 Dec 2025 07:32:53 -0700

Resent-From: The Doctor

Resent-Date: Wed, 31 Dec 2025 07:32:53 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f195.google.com ([209.85.210.195]:55514)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vas42-000000008jp-3yy2

for root@nk.ca;

Wed, 31 Dec 2025 02:00:29 -0700

Received: by mail-pf1-f195.google.com with SMTP id d2e1a72fcca58-8035e31d834so8200342b3a.2

for ; Wed, 31 Dec 2025 00:59:30 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wordpressconsultants-net.20230601.gappssmtp.com; s=20230601; t=1767171564; x=1767776364; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=pIkTEiwgVAyWEYwX2TLsuvufpiEwt/rWZoRgMD7/gw8=;

b=LQ0oREVcV0macjOqLk+uuH+LAYROIB+frToI3E1tST6MeLZ23dUXm+ibd9B5kXd3Cf

Aw/9j25zsW5dSVu1MOypxtj/iMDHpDCN9XrSXUz+3ofEVo/TCJ/V6dNWC490Lu8hjD9c

jfKbdA6uwbBHNebdQkcLVjkarD5om8EByhYGVJAIiNdRPCIeTRsnLTwzeQdx0rcb6UIF

OUrTob4Af51RGwgG2kfK7aLIKuJ/OvxTW3UByteH2xrtt9MLzjmeTgASym8ArNWMX2+S

3bjDh1sRxLr0waWV5DWR0SoS1qKliQ6QVc2vpMSLNf44L82qpK7Ke1lkDx4XzJiPf2Fk

xhWA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1767171564; x=1767776364;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=pIkTEiwgVAyWEYwX2TLsuvufpiEwt/rWZoRgMD7/gw8=;

b=VHVxHucW6OzP1IA4bLaZoC3ZNqHcEYfVD7IlnAfZPzPk8hMtl14qagTOOVVtLcDaCq

o6S9X+/rnB5de1n64FKw2ih2MLnbfxoCl7eZOvvfebt1gl7KXTyDtldaVA2bzNqRQdIS

KmCWZRDHmYXRBwEAiZBp4MIIxuVKmUywznn/+TJHddlewrOz4i6tWGOOMqrNEDKYWNDX

2XkywCBnp0zcdByDPR2cXxZMVaidSxRF2g7afvzIKt8Vy4rUiXb8j0vLvq89QSuABjLM

Sy1YTZfjp05n4qlAf9fZZcYYISFX6tJgH0+rMjxOgAGL7GFv5240v0l31oeOPQhGb6Pt

Altg==

X-Gm-Message-State: AOJu0YxJO2WW7HL1s72djcdBXz/IuPGwltl3TAujb2L45MNWaCwwy44h

ckdwDBvGJDYpjq/6drLQpOpsF7W5m6rZbvc7u39SWVolQXYgdsxDTXukYwgxWwuUUbTBm2K2T4o

5BwzZCEo=

X-Gm-Gg: AY/fxX7vWW4UIridWFV3a7uOyAMbTmV8F10c5y4kw7SH74e9xapdsv5Ud4LmlAXBmQE

9/iGq266XRJj0b6Xy2vlrNQVFM+B75VeKtbWYlTEk8SAz8eqzUhg5agCLoItKiuLv+QY7qF0iQU

mIiJPFLCM3is2olSUcMavXOl4bG2QOGAnQp8oZN/KqEywxzn/43CX3kR8zxR03O0PpZp0ZPloT4

DBfD9RfAZK6QVypqUDdEwHA5qHKZWhKVZDjFlujfJ/s52Pud+8x/c2t89s8MliJpi7E7n1F6888

pU3nuvL/M9SFPmT50AMFhNJd7OTXY/OIy5UvVoipUM8A+wI0wDp95lPR34EYHVRDPm3GVzS2/i7

2+HYHXKIJgF3uYcb+aXE1olZomxpG4IekKLc6sDOdiVNkMPFjXTpkbnpgREF3kW/BCfcY8mkz+F

tdNHC0VaKYOqlFS5q8g7j+Ln304AMpPPKsLf5Qxjbp5as1

X-Google-Smtp-Source: AGHT+IEgnN+CiCMiRhkuzOV123226nFhohXsAaH+jN66cb1C7T/uTqYxoVbTfU4BgGxbnuQ3mSEaOw==

X-Received: by 2002:a05:6a00:158c:b0:806:12ff:3877 with SMTP id d2e1a72fcca58-80612ff38b5mr20807777b3a.4.1767171564400;

Wed, 31 Dec 2025 00:59:24 -0800 (PST)

Received: from Kanhaiya ([2401:4900:1c64:6ee1:295b:5f9:c613:cf0b])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7ff7e797ab9sm34582890b3a.59.2025.12.31.00.59.23

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 31 Dec 2025 00:59:23 -0800 (PST)

From: "Malti"

To:

Subject: Designer\Developer ?

Date: Wed, 31 Dec 2025 14:18:58 +0530

Message-ID: <1493d01dc7a33$c2760ef0$47622cd0$@net>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1493E_01DC7A61.DC2E4AF0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adx4xFw7Ltrw58fRQgC+GAa86HdPUA==

Content-Language: en-us

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I'm reaching out to see if there is anything that would

like to create Shopify & Wordpress, upgrade, repair, or redesign on your

website or Mobile App. I am a web designer/developer that can do just about

anything you can imagine at very affordable prices.



Content analysis details: (6.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

[209.85.210.195 listed in dnsbl.ahbl.org]

[209.85.210.195 listed in dnsbl.ahbl.org]

[209.85.210.195 listed in dnsbl.ahbl.org]

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[dnsbl.ahbl.org]

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[dnsbl.ahbl.org]

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[dnsbl.ahbl.org]

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[will-spam-for-food.eu.org]

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[will-spam-for-food.eu.org]

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[will-spam-for-food.eu.org]

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[will-spam-for-food.eu.org]

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[will-spam-for-food.eu.org]

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[will-spam-for-food.eu.org]

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[will-spam-for-food.eu.org]

[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]

[will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.195 listed in list.dnswl.org]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.195 listed in wl.mailspike.net]

0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too

expensive

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28 days

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Designer\Developer ?

Web/SEO/App spam from Google Gmail Part 2

Posted by Dave Yadallee on
This is a multi-part message in MIME format.



------=_NextPart_000_1493E_01DC7A61.DC2E4AF0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



I'm reaching out to see if there is anything that would like to create

Shopify & Wordpress, upgrade, repair, or redesign on your website or Mobile

App.



I am a web designer/developer that can do just about anything you can

imagine at very affordable prices.



Let me know what you think.



If interested. May I send you sample, Portfolio and company Details?



Thank you for your time and consideration.



Kind Regards,

Malti



Country-India









------=_NextPart_000_1493E_01DC7A61.DC2E4AF0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hello,

I'm reaching =

out to see if there is anything that would like to create Shopify & =

Wordpress, upgrade, repair, or redesign on your website or Mobile =

App.

I am a web designer/developer that can do just about =

anything you can imagine at very affordable prices.

Let me know =

what you think.

If interested. May I send you sample, Portfolio =

and company Details?

Thank you for your time and =

consideration.

Kind Regards,
Malti


class=3DMsoNoSpacing>Country-India


class=3DMsoNoSpacing> 



------=_NextPart_000_1493E_01DC7A61.DC2E4AF0--