NetKnow Corporate Blog

Project funding spam

Posted by Dave Yadallee on Tuesday, April 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Apr 2026 10:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wA9Jg-00000000PCk-2bnr

for dave@doctor.nl2k.ab.ca;

Tue, 07 Apr 2026 10:30:16 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Apr 2026 10:30:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from host.marineparedre.us ([91.226.198.33]:40828)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wA6O7-00000000MSG-3hDM

for sales@nk.ca;

Tue, 07 Apr 2026 07:22:49 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=marineparedre.us;

s=202602; t=1775566109;

bh=IrOaY6ptst8GAsTMLRaIRHdAaUp9rcx0tNu8UVmbMmY=;

h=From:Reply-To:To:Subject:Date:List-Unsubscribe:From;

b=MNa9RPD0j/SJ+V/o8hAQWbKh0y0Yt4hBmlsroSjOfFpIl+h0DDV0s+Ilf3PgwZcTw

1ncitV6+TnALKdylWcRcRaGjyK/qHgT3t7OYeSJ2FWYbR9A3thZVczA7M4OP5ilM9z

IGNH8OhB0+hP22Ukfpm5P5AYrKeKOccqY94Z4VFv7NOoyw5PjvQJAtNsbwpyBZbRCm

YEK0MztwVNfRgX/5rdEcJlwVWGSBo3knGgG8rGG+Vd3wZSEe1vi218pLawffm1Emhn

5unAL70f4l2CqiPEDX5xP4LIPjPsJdWZruydjT1IS+i9lMHQBMEeitljpYFKIYkGjv

PhVYAGqkSUw1A==

Received: from WIN-9QL4SDRB93L (unknown [80.76.49.213])

by host.marineparedre.us (Postfix) with ESMTPSA id 8E361CA04D

for ; Tue, 7 Apr 2026 14:48:29 +0200 (CEST)

From: =?utf-8?B?TWF4aW1pbGlhbiBCcm9nZXI=?=

Reply-To: micharm11@aol.com

To: sales@nk.ca

Subject: =?utf-8?B?Q2FsbCBtZSBhZnRlciByZWFkaW5nIHRoaXMgZW1haWw=?=

Date: Tue, 07 Apr 2026 05:48:28 -700

List-Unsubscribe:

X-Priority: 1

Message-ID: <1EE17E36F50B4FAFA547740FDAC22C0B@marineparedre.us>

Mime-Version: 1.0

Content-Type: multipart/alternative; boundary="46DAB199E44740FD8BFCBBF32152C7C9"

X-Spam_score: 19.0

X-Spam_score_int: 190

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, Do youâ€™ve a great project but are struggling to

secure funding? Weâ€™re here to help.

Content analysis details: (19.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[91.226.198.33 listed in dnsbl.ahbl.org]

[91.226.198.33 listed in dnsbl.ahbl.org]

[91.226.198.33 listed in dnsbl.ahbl.org]

[91.226.198.33 listed in dnsbl.ahbl.org]

[80.76.49.213 listed in dnsbl.ahbl.org]

[80.76.49.213 listed in dnsbl.ahbl.org]

[80.76.49.213 listed in dnsbl.ahbl.org]

[80.76.49.213 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[91.226.198.33 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[91.226.198.33 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[91.226.198.33 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[91.226.198.33 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[80.76.49.213 listed in will-spam-for-food.eu.org]

[80.76.49.213 listed in will-spam-for-food.eu.org]

[80.76.49.213 listed in will-spam-for-food.eu.org]

[80.76.49.213 listed in will-spam-for-food.eu.org]

[80.76.49.213 listed in will-spam-for-food.eu.org]

[80.76.49.213 listed in will-spam-for-food.eu.org]

[80.76.49.213 listed in will-spam-for-food.eu.org]

[80.76.49.213 listed in will-spam-for-food.eu.org]

[91.226.198.33 listed in will-spam-for-food.eu.org]

[91.226.198.33 listed in will-spam-for-food.eu.org]

[91.226.198.33 listed in will-spam-for-food.eu.org]

[91.226.198.33 listed in will-spam-for-food.eu.org]

[91.226.198.33 listed in will-spam-for-food.eu.org]

[91.226.198.33 listed in will-spam-for-food.eu.org]

[91.226.198.33 listed in will-spam-for-food.eu.org]

[91.226.198.33 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: marineparedre.us]

-0.0 SPF_PASS SPF: sender matches SPF record

0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28 days

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[micharm11(at)aol.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.0 MIXED_HREF_CASE Has href in mixed case

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} =?utf-8?B?Q2FsbCBtZSBhZnRlciByZWFkaW5nIHRoaXMgZW1haWw=?=

--46DAB199E44740FD8BFCBBF32152C7C9

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

=0D=0A
quiv=3DContent-type>=0D=0A=0D=0A=0D=0A
=3D"MSHTML=2011.00.10570.1001">=0D=0A=0D=0A

Hello,

=0D=0A=

=0D=0A

Do=20you=E2=80=99ve=20a=20great=20project=20but=20are=

=20struggling=20to=20secure=20funding?=20We=E2=80=99re=20here=20to=20help.<=

/P>=0D=0A

I'm=20Maximilian=20Broger,=20a=20Risk=20Manager=20with=20United=

=20Advisor=20Wealth.=20I=20work=20with=20committed=20project=20owners=20to=20=

connect=20them=20with=20real=20funding,=20no=20games,=20no=20fluff,=20just=20=

results.

=0D=0A

=F0=9F=93=9E=20Tel=20No.:=20+1=20(5=

20)=20200-2277
=F0=9F=93=A7=20Email:=20
.com">micharm11@aol.com

=0D=0A

Please=20note:=20I=20can=20only=

=20receive=20emails=20at=20this=20address.

=0D=0A

Looking=20forward=20=

to=20hearing=20from=20you.

=0D=0A

Best=20regards,
Maximilian=20Brog=

er
Risk=20Manager
United=20Advisor=20Wealth

--46DAB199E44740FD8BFCBBF32152C7C9--

Web/SEO/App Spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on Tuesday, April 7. 2026

Content-Type: multipart/alternative;

boundary="_000_PNXP287MB42643D9755EE3B58FD70D71CBA5AAPNXP287MB4264INDP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PNXP287MB4264.INDP287.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 9920a2cc-141d-48fe-0294-08de9484df87

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Apr 2026 09:05:53.9633

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PN2P287MB0496

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, I came across your website and wanted to reach out briefly.

Your site looks well-designed, but I noticed itâ€™s not currently ranking

on the first pages of Google for several important keywords. T [...]

Content analysis details: (7.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.67.24 listed in dnsbl.ahbl.org]

[52.103.67.24 listed in dnsbl.ahbl.org]

[52.103.67.24 listed in dnsbl.ahbl.org]

[52.103.67.24 listed in dnsbl.ahbl.org]

[2603:1096:c01:2c1:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:c01:2c1:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:c01:2c1:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:c01:2c1:0:0:0:11 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.67.24 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.67.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.67.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.67.24 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:c01:2c1:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:c01:2c1:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:c01:2c1:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:c01:2c1:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:c01:2c1:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:c01:2c1:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:c01:2c1:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:c01:2c1:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[52.103.67.24 listed in will-spam-for-food.eu.org]

[52.103.67.24 listed in will-spam-for-food.eu.org]

[52.103.67.24 listed in will-spam-for-food.eu.org]

[52.103.67.24 listed in will-spam-for-food.eu.org]

[52.103.67.24 listed in will-spam-for-food.eu.org]

[52.103.67.24 listed in will-spam-for-food.eu.org]

[52.103.67.24 listed in will-spam-for-food.eu.org]

[52.103.67.24 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.67.24 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[neetumishra2016(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[neetumishra2016(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Fw: SEO Boost with AI (ChatGPT & Gemini)

--_000_PNXP287MB42643D9755EE3B58FD70D71CBA5AAPNXP287MB4264INDP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hi,

I came across your website and wanted to reach out briefly.

Your site looks well-designed, but I noticed it=92s not currently ranking o=

n the first pages of Google for several important keywords. This means pote=

ntial customers may be missing your business when searching online.

We help businesses improve search rankings using AI-powered SEO strategies =

(ChatGPT & Google Gemini) along with proven optimization techniques. Our pr=

ocess boosts visibility on Google, Bing, and Yahoo, driving more organic tr=

affic and qualified leads.

We offer reliable SEO services at competitive pricing and can start as soon=

as you=92re ready.

Would you be open to a quick discussion?

WhatsApp: +91 9211383434

Best regards,

Web/SEO/App Spam from Microsoft Outlook Part 3

Posted by Dave Yadallee on Tuesday, April 7. 2026

--_000_PNXP287MB42643D9755EE3B58FD70D71CBA5AAPNXP287MB4264INDP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,

beddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size:=

12pt; color: rgb(0, 0, 0);">

I came across your website and wanted to reach out briefly.

beddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size:=

12pt; color: rgb(0, 0, 0);">

Your site looks well-designed, but I noticed it=92s not currently ranking o=

n the first pages of Google for several important keywords. This means pote=

ntial customers may be missing your business when searching online.

beddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size:=

12pt; color: rgb(0, 0, 0);">

We help businesses improve search rankings using AI-powered SEO strategi=

es (ChatGPT & Google Gemini) along with proven optimization te=

chniques. Our process boosts visibility on Google, Bing, and Yahoo, driving=

more organic traffic and qualified leads.

beddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size:=

12pt; color: rgb(0, 0, 0);">

We offer reliable SEO services at competitive pricing and can start as soon=

as you=92re ready.

beddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size:=

12pt; color: rgb(0, 0, 0);">

Would you be open to a quick discussion?

beddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size:=

12pt;">

WhatsApp:
blue;">
-55df-8d2345a76994" class=3D"x_x_x_x_x_x_x_OWAAutoLink" title=3D"https://wa=

.me/+919211383434" data-auth=3D"NotApplicable" style=3D"color: blue;">+9=

1

9211383434

beddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size:=

12pt; color: rgb(0, 0, 0);">

Best regards,

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

--_000_PNXP287MB42643D9755EE3B58FD70D71CBA5AAPNXP287MB4264INDP_--

Web/SEO/App Spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on Tuesday, April 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Apr 2026 07:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wA63F-000000008sr-2jK1

for dave@doctor.nl2k.ab.ca;

Tue, 07 Apr 2026 07:01:05 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Apr 2026 07:01:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southindiaazolkn19011024.outbound.protection.outlook.com ([52.103.67.24]:59941 helo=MA0PR01CU012.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wA2Po-000000008NW-1dtN

for doctor@netknow.ca;

Tue, 07 Apr 2026 03:08:17 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=J/rH8Cfl5q6s6Hc3UhZC64aoe/jxcOJMJUB5g5OuoufNm12qeeOEOpyLtvYnTupsFF6I5a8ICYNgUvB1HMvnHQaq8T+CBuIX/rTSVrS9efbbibRjW3JfJ6BCbgFhUasQ7eUtiXv/MiyHbfXoWnfkFW5NSX0laE1ZFfLBYE25LwqxDav0FfcvVqwUSp9aooYqRVCu+NFNNU+YDmk/34E4oLgbNqoGMa9BBSdkjS+F1CaGGHyzlNy9hZ9q6hvPeq6w8w+FuF1/0z1IscJoqnGWVQgi7lKA9FaB5uwf7XA1ZhIVSlIDc3ULUWbsHRAlOaia4OXz48tzu7hrSsCv/DOROw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=OtTM7LpW3Q3OcJynYPPFYfLYBN8+0rKkFMKLQOtsu8A=;

b=M5IKxK+xdfegRkb+fuSvFGDYHufTnlpbujfUgbmLzfMpbDHNz/809g+dRY3T0QREcNvPmlOFiVlneqqGrt9pxvkr384i3g9/8NpYmYW9vf31QIF12/jONCgkB8FCMqPoslsjZfTyenQxfP3eAJZm0tlFU8gRI9NqFQaBIfiHqS/ddYi3VupRB+T0FBUEYKpVrvzreuzdLB6At5M9kHPjTsLcG3qSMRRysHXSEFyPlm1HnuB3jMaRKByR5O2hrmEPQLaJ0gZi4y+TAU+MZhDW7zed7QOREpOAhBq4xUCwApT8gJpU2Md+f3dJbAsck0V8lyawTnTcpuWmKOhMLVfF7A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=OtTM7LpW3Q3OcJynYPPFYfLYBN8+0rKkFMKLQOtsu8A=;

b=N4v2fhkZeLxvgh11pGQa6tVXJrn26XLUqqdw9mL07GrPsEV0pVKudY0tK7UjGcg4FrTA+yMMZJrGLMB9+zj1B3HUs/YEn3/49A4yf0g/gutu5cpEwcaTWSWuEFWvKJ/dIoft4x71409EfSQPe6bFohiQ6ZPd3pyy2FBK3Dy3bcicvbeKDDOEXA6DTuHXWgzSd5lODo2dWmkKStwDxOaWtlfS7t//Uhkhgv8bDBB2lvgwE6l+mDV/btJW/5w3IrFyUZyNCyRWJOFNzVLuwCp6Zyxvtryxr/l41GxWR/we5GPU3VSVT+ckfro8Kj+1aKgRFmOBFjB4Khr693NlgRGLcg==

Received: from PNXP287MB4264.INDP287.PROD.OUTLOOK.COM (2603:1096:c01:2c1::11)

by PN2P287MB0496.INDP287.PROD.OUTLOOK.COM (2603:1096:c01:116::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9769.21; Tue, 7 Apr

2026 09:05:54 +0000

Received: from PNXP287MB4264.INDP287.PROD.OUTLOOK.COM

([fe80::d0e7:6680:ea13:5404]) by PNXP287MB4264.INDP287.PROD.OUTLOOK.COM

([fe80::d0e7:6680:ea13:5404%5]) with mapi id 15.20.9769.018; Tue, 7 Apr 2026

09:05:54 +0000

From: Neetu Mishra

Subject: Fw: SEO Boost with AI (ChatGPT & Gemini)

Thread-Topic: SEO Boost with AI (ChatGPT & Gemini)

Thread-Index:

AQHcg4mezVKFD/3ZxEKP2DHwwvO+obVP3ZL+gAQdMXOAGqJXeYAypq/FgB5DYLaAFEz4N4AAADPX

Date: Tue, 7 Apr 2026 09:05:53 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PNXP287MB4264:EE_|PN2P287MB0496:EE_

x-ms-office365-filtering-correlation-id: 9920a2cc-141d-48fe-0294-08de9484df87

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|8060799015|8062599012|15030799006|461199028|31061999003|12050799012|19110799012|9400799043|24071999003|39105399006|37011999003|24121999003|22091999003|20031999003|10035399007|34005399003|440099028|3412199025|12091999003|44111999015|102099032|56899033|35041999009|40105399003|31055399003|43065399003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?GOq2MDzFbyky39V/Bs+n3TX5mGoLzrqIgMEgJ8d8Ynmh8Id7PI7+TfAF?=

=?Windows-1252?Q?HKKswRRACy1gdfY7HsB1W9pM78+jo4j9Zjv0iQGJoAZpKcwrM0PZT+JW?=

=?Windows-1252?Q?CGXNmEmqwnUlLYvUPWSyvgE3OwEl0S38JoqCMe7gmiqJirGAh9npB5UD?=

=?Windows-1252?Q?KlgObur6qi7Zty2Xnp1lZ8iUioJx+PW4AaXx1ehUng+Zc/I7UAN0p5Dr?=

=?Windows-1252?Q?eWzhgVfLSR1kHNjSUwlZlFs/CWiQ38AJ8p/d/+F8A3N4xg9cL5aTtJHO?=

=?Windows-1252?Q?GCRMs0lB8mpU0zhZaqLKhAZe/AYMasHansigaO4q2Hlso7r/o7CF2IYv?=

=?Windows-1252?Q?GY4CngsV578GMni3MirPpvh7ZmwlHwXpRo2SOcaLpFHx6wOf/KEOkS83?=

=?Windows-1252?Q?CPNQ40OiaD4Sifx2/QMfyqOyzbOjPlKbt+ue/oBD+VGHwupxFm83lRU0?=

=?Windows-1252?Q?RN65g3mm0yOWJuHwmZ403EUAoCatnaMzqaepFZ2Mlx3XFGx/yD7eOBSf?=

=?Windows-1252?Q?OlFzVB6BfFSAmyCcgSWHzvZH0bQI5iAl5nayJklx7a3teIoEGUyB6u7Y?=

=?Windows-1252?Q?vrKnjDfX8Mj0G45QTSiexQnf6sF3tF93DG5atP1KDrnPcbSK3G2KqARa?=

=?Windows-1252?Q?5ejQMYYvOR7T9dDVGGg62Y9x+Hgzg5r+9BaRl4NUNSEa/sMAmAETmeGb?=

=?Windows-1252?Q?1sf+yS9t5xuGMAYBkWLk1nnJvBTN7jXhp2HdbSqqdM21y2iQsYnlcP3t?=

=?Windows-1252?Q?D1IRHMVtBOx9KtdKlh8GExaq7DdAN77XpCg+H0hL2qkxmyAjkyOWumWF?=

=?Windows-1252?Q?4ZcGdUW2Ig2pGKV9MENg7h6R3+i89g0zSFfL8Et2dRwm1OthAFLUO/HX?=

=?Windows-1252?Q?CbYWIdggdo4awDjEpI0z4isum5mL4UOwqq7SAQUF0Uyk6t1Hsg96hMkB?=

=?Windows-1252?Q?eNpS5BuUyhHHXznhrU+YfEn5N8hrvFWmkuTny92qnm+VgvNTGR5QHJk4?=

=?Windows-1252?Q?3fdndprjvw0B07uVXPpRhFwpbCAAuzxTf95FoEGspuJQwEXmQhqcH2lO?=

=?Windows-1252?Q?N0/na4QmG5L+FF1eXWs9xPsmBKloRAYicIz2ueuKsfwFDol8xge/7QKb?=

=?Windows-1252?Q?ddVlyRi7JfbGRO4jryhJQ89Bh1UKf7J3BYpAwTxEKIO/+BzyakCRAuKC?=

=?Windows-1252?Q?mtgkVkcX+5wM4iBkJmG7iYvkePKGnDx04TRNzpWW/wMYdNEbMtFCtU4w?=

=?Windows-1252?Q?ibGMJkfTMb6yf7SUknSiOp6TKXxO29SJykfZc1z6CYX8pju0lLEchIj9?=

=?Windows-1252?Q?QTCPfQIOOk+f8eNmHT5d+u233eUkjmds57hpMN4obruQTfPzT2KhNmgE?=

=?Windows-1252?Q?qarzGzW89EdarKtaRJI3EEz9/8BOO1jf1Rm61jw+x4iUuCGfnFlyCocE?=

=?Windows-1252?Q?YvMgnmWvlMeMNk/YusAM7862N8oSl/We6T7w6QwiBk0=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?NPWjfmzQUTwJhV5YBsYnRLSpfThjH8meJLoV+c///SQ3yLKpXNypiBla?=

=?Windows-1252?Q?WeHdDKNWzJgyhn5nIvfeZJIUSQAYV20wXo/V3HtgFrLIW9aorEtG74GH?=

=?Windows-1252?Q?feUPy0F1UzS+s2a/z38x/azzIDAOrxWDAF8JF+zDcYCW5pvbFuysqzVv?=

=?Windows-1252?Q?qaz3gLlqtF93jkzSNnxNBi/jDd5Gcoi/SdtSSJZC4sGGz6dz9YvYT6gT?=

=?Windows-1252?Q?1oEuIXGEbPBh/7gl6tSoX12+CqGgyO4m9s1qcY91rsmn2eVTJQOHQd29?=

=?Windows-1252?Q?taPxq9QDvzb7qFQ4sICfwnfwXdDl4ylJYsPKgOaJEXDr4OQYVv5UDecT?=

=?Windows-1252?Q?oXe84pyStGeVg0n7Mj3JIhUENLgBKajIv3yXAFK44BW/a6kxjIRlkfEO?=

=?Windows-1252?Q?scHshsLpBUDVN8gwZGZcsoer+W0Mnlk5BbTzgLAXhXFR3uAfnUOCaHG9?=

=?Windows-1252?Q?Fl0wDTIvzLzH5TGlo5X/kLtmd29aJgAel0ADS0tuD8UN4UPtdJuM9Giz?=

=?Windows-1252?Q?u7bmlUzb5Bpw4daAny7m+h6XVtE8imRJAYGYujgKLdJh5WSDNmZjH/oE?=

=?Windows-1252?Q?q3x+Xktd0/0TiKe2WW6+mBxiE1OYxI0TKJVfwV7+vcy+vwxsRbIARgZK?=

=?Windows-1252?Q?Gu3LaL+PGs/tX4V0JJZ3eGfUbM3eyM636Ux9SP5z7Ny/JZxngw5AHTRB?=

=?Windows-1252?Q?5dj8QV25KP3NPp52tGoZ4R/mljrYlWS3SSSR3E0Rh0fAT7ixYdK5frcu?=

=?Windows-1252?Q?NXs/ycIwJ/3etwI8OEeYvyP4IXdP+RjNXmwGrkIAy6LNBVzNJohb6pkw?=

=?Windows-1252?Q?jEWtEsEfLtT1lJGkbEF+/4VzgJZaBJuU/Izji8W8wf8MnvNSCc2Q45Yp?=

=?Windows-1252?Q?zNCf6odo4owOn5IaIU2ey6LT+HthZpkEAsyV8lfXdfC9vE1VIFFwc7kX?=

=?Windows-1252?Q?tzBr2NfUVOk8ESLd5ITS1Bcuv7P1aB7lretQg4MHjLolWTc0PHYLUiOO?=

=?Windows-1252?Q?zXnZ0vlmMgi8B13cyNii5VQnT3kxxGmcS/H881s4GSikO3tyZDRJtQi8?=

=?Windows-1252?Q?nZtp4apvEU2S9M/BYEqmFbFFFHpT5a87tWAGcdsHEYW0BDBNeo70oxnN?=

=?Windows-1252?Q?tOaAgf0GCo3ueCUADxHbP6vws86gTk65mllpxkiZk/kwF7gdrtE/d0LN?=

=?Windows-1252?Q?uJDnSFYB84bMDZGhmZHaycdOlPpZmgORjQsRhN8kP5BrNI9lhIFOene/?=

=?Windows-1252?Q?6eEltY44y/zDym6PbWUsAD2upABmLUfii2EDTeFhLDyCIMqE7kwAXayR?=

=?Windows-1252?Q?Y6wOH0jKCrNa4a71/L5vn0QG155Xrqm5/Rw1+LlKVt6UdMvzRsdyaEUe?=

=?Windows-1252?Q?6XhNhUMSpf/QJJ+TlH18owmSuzK9iS9yfP7P5qpj+nk+PDKiX3FljQpS?=

=?Windows-1252?Q?hu7G5PCu7dFt7/ZL7YVoVRSfMy4UodG2inWijuuM5lpd3ck3B+iyiGdt?=

=?Windows-1252?Q?wqCds2dx7J5NfRQup1INvb6uT+LrMvWesutmrAx+hCVRTUaL5g/9QvPj?=

=?Windows-1252?Q?djdk1YoF1RMrzAzS?=

Web/SEO/App spam from Google Gmail Part 1

Posted by Dave Yadallee on Tuesday, April 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Apr 2026 07:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wA62i-000000006X2-1OwI

for dave@doctor.nl2k.ab.ca;

Tue, 07 Apr 2026 07:00:32 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Apr 2026 07:00:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f71.google.com ([209.85.218.71]:52372)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wA1KO-000000002bs-3R4B

for sales@nk.ca;

Tue, 07 Apr 2026 01:58:38 -0600

Received: by mail-ej1-f71.google.com with SMTP id a640c23a62f3a-b8f848ebcbbsf362096366b.0

for ; Tue, 07 Apr 2026 00:57:40 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1775548653; cv=pass;

d=google.com; s=arc-20240605;

b=SSr82ZUtFpOZYyYpeZTNfzx/elEPtK7KeUVl5yyAwo6gqIUo/rGgZ4K63vz+HaPBGR

buOg7UqrMupBuGZ9Spj6UMqrtKnKLTvG7hixr791N8PSTCNqOcjZPPuWVLbGE6Afgqcl

+f+iZRRArq+0o7r42kxvm9YJtOhgBx5SdJyhhEFbYRpIX00O0VRGpCWVSXNp1IcKyKJz

fC91ylmfg7TtbtLh8XR/N2JObbjIS57RAuNZCWiEyKVq69VzV8CjWFO4pbJep/Eka6UJ

32r4MdULQaCtZPbHvCEuMlBafdWijprsjBfCexuGA+1Kr+cMSyBlnH1jxSzKf6Tj8Tz8

mM7Q==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature;

bh=c4SflvmTTVV4yJrwfg2TE19hhun32A/5ut1GlP/Z4lU=;

fh=mEfOwIUP5xvk+UeZvRi1+0dkPgMJqjbzp2o7PCKJolc=;

b=knQfivwSKGpJAcyyAI/gPbpnhzc4wQKvuhGZaZUCQytlU8wT3qr7a+LGwDojhr/FOx

w3FHS8L/j7vISNobiqk8lZMq8nvMqzk6z/d7IMng6LD+YWmFwNW3sF8bUZ0kcMFhDpKH

hMwTVz8H8sR0dnnvIFTz7U/wl8LDAsy6pMaRltr2e4M2b7I42ltQwgbBKd5Os5VRyHal

VsYGa4xNxcPOwYO99f7mrSmaDYJNPyYcm4Aj13Gjrka1+tJSD0KdOQwapApwQVA2r664

NhtZM8yrUTe+UWTvPzD9ezGNHdbjqcIhQYOjo8bojHUGjqzDgwpVsosbQX97/wRHlpA/

Xr6w==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b="JWnIl/Vm";

arc=pass (i=1);

spf=pass (google.com: domain of gracegabigail289@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=gracegabigail289@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfosys.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=knitinfosys.com; s=google; t=1775548653; x=1776153453; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=c4SflvmTTVV4yJrwfg2TE19hhun32A/5ut1GlP/Z4lU=;

b=QgBuVN9ttIa9zWcfQweF27i7NOH9oJwWqLdoCa3RG7TRWGNRzSsimwKINz9+3IksJz

4draybsPshY8TFgGmCG90ZkGB0R6sSIqjegPyip/Whg03Mk0EtdkhyqqQA/XMF2VRI14

Cu1GK3Z2ELDUt1hQ5OKCZKNTidEE0Nc2mfXj6Yf7E91RcRbQuM47XomM6GuG5IycnMgp

ShVKq5Z4ElwHclDeWrOj0gDRuMOCije6L5ZpPIc8LWhKoeqfiQZOoBf3AWGZiZXp/n7j

q0EyZcJXxx6p8D4/2rvv6w2HibAhoVQlIw/ZIlKJGw+YGhDXY9pTJ9GWzQlzKzKYCYor

+Fag==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1775548653; x=1776153453;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:sender:from:to:cc:subject:date:message-id

:reply-to;

bh=c4SflvmTTVV4yJrwfg2TE19hhun32A/5ut1GlP/Z4lU=;

b=UM6a6GFY2//t1eUSP9NjXx6f6VUDZdCk/Fju1tI6A0g22LJIXcIcMJIFei5dGp9AbT

kfwjWw943DH8DQ8MiCf1PIgWvO9M3IAhl5ZY5GZyCIYtnygClRi4MrKjmvfSMgvZHM5/

wJRcxN0a2/bn3WTtrc2SoWm7A7l68ChXJBAlVipS+2ZA3D8yJRTmAOd/dqfu9Qoupif3

pWbpqbRhR7xjx2g08Ox1PLklzjaGJbtXYjhRY/ukjQWgc+xtksPslCOiAYXSYfZK/dhL

0m/oQUGZ2UXtIFqsaP7O88R6WFmTBZywn4s0cpnUPrzY7uuxZnTwMKXgkxFuSG1M56wL

av2w==

Sender: gracegabigail50@knitinfosys.com

X-Forwarded-Encrypted: i=3; AJvYcCVDbtR/dcRq3tsgeF+6rvSCADDb3uwgkWdqR4exuZSqyQL88xKtdKfzTDG9DJP2XCRoZ3kOig==@nk.ca

X-Gm-Message-State: AOJu0Yy83eThi4zMtQFn93ionLluGNt1L7x0Whzq57bCAZ5jUj/ctYal

EBHhZHp0Do4EA8I5jZH5rE+JODKXmeYhBcbrNgRX3+/WQp+dhyhl9FqfBFgZPN9z5i0=

X-Received: by 2002:a05:6402:159b:b0:66d:3ebe:3f18 with SMTP id 4fb4d7f45d1cf-66e3f86bd00mr6423102a12.25.1775548652754;

Tue, 07 Apr 2026 00:57:32 -0700 (PDT)

X-BeenThere: gracegabigail50@knitinfosys.com; h="AYAyTiK1ez3rb+Uo09ylZ8aRxtLtI37xGyzvId6zOdg2ofHyEQ=="

Received: by 2002:aa7:c309:0:b0:668:4d46:1b09 with SMTP id 4fb4d7f45d1cf-66e0306bd78ls3115237a12.0.-pod-prod-05-eu;

Tue, 07 Apr 2026 00:57:13 -0700 (PDT)

X-Forwarded-Encrypted: i=3; AJvYcCWKhClMTmfqc2T9/R39IdsWNVVhjOsPrGsV1GZqpL3Jx7LxFc9PdGwj8Ra4WsAA8wn7xeMvlli5fl/zMgFxD8g=@knitinfosys.com

X-Received: by 2002:a17:907:96a4:b0:b97:7616:3362 with SMTP id a640c23a62f3a-b9c679aeab0mr710695566b.44.1775548633645;

Tue, 07 Apr 2026 00:57:13 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1775548633; cv=pass;

d=google.com; s=arc-20240605;

b=QiDzj8DvVtPPJiwzlmSRqvAyj853iqvXawN88ViVsDGf0DqsKEfzEx+ZZQN0do3Tb8

lqw1bKQ2cgXCuu2BLJARka18GdyjFsI0Yy61BeENVNep0x+F9mnf2FFog2IugPyKXclB

Sm/ALWGW0bLa1fA4ljh91VW8uiWtEjGTTK2YnOS+KStfH4N9SHczWrxiPFt48xzOcsp0

/VFv69FeoX8hEP0g6DAvDDgA7VYabHnPk/q2HU+vcRFXjREWLu/dXYY9kRi+M9+h5+5E

ip+5By/jp5NyzDu+7jV6LqMf6u3wJge6zDuq1MzemBEhlWmm/7jaqNYswP4Ohuq/9Z6m

INJg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=c4SflvmTTVV4yJrwfg2TE19hhun32A/5ut1GlP/Z4lU=;

fh=RKUblSCb5MMGL6OrSYQM0gthFhn1ktTmKEXPxzC6Bic=;

b=hLBIqWco+apUX57fEW/MuZk1HJ7iR1AG2f44cmpzHROU5y+6TASSkHxPmAOfJCOJsX

M+CbpgkQQj3Z+xNWGtMz0DNuT25+dQjSoPktuawy0P1RZyzX/O8ZPMGqOmsMqGTbAA7e

R8frHf/oOlg9/dLH0ZBAEhnwMVaaqL7oHcT9lz/B0YVM3CA9ASS/62Vh5OUKjGVGWYH/

AGQBRyuF+W/wShWGDflix7a/4DH219hSvmQCoClADjk6Fm38U9kS8Fqvgpiw42ZI6SzO

ElgJ44Yog5UWvufCCE5ox65LRd/VGQltA3fUTS2kuvZ7pD0dBvX8n7gqqrbXGq4q8PDp

RyMg==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b="JWnIl/Vm";

arc=pass (i=1);

spf=pass (google.com: domain of gracegabigail289@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=gracegabigail289@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfosys.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id a640c23a62f3a-b9cef849d76sor73850966b.17.2026.04.07.00.57.13

for

(Google Transport Security);

Tue, 07 Apr 2026 00:57:13 -0700 (PDT)

Received-SPF: pass (google.com: domain of gracegabigail289@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1775548633; cv=none;

d=google.com; s=arc-20240605;

b=WDQOiwAPaHzXSfjBfVpTD0y2MW6QiJT4OcBnuGdgU0IJ2CZ+jWsOBUbexpqVXIiL1X

yG1zIkEmsBNW5vGudUQCfDYiRjS+mbBBHM+ybhd1UUTAGRlrqO5JIkIBWYohPtdP6TIE

0/0UlJOP1qBmTlmythKGh7TYmphfOJ+15a+MsVVfi8VnysZpJy6ZNvqKUuYv5gN0QkfO

ttSWcy/IYv5tGlSol0KR5fZcz27HyX1FAbJM4QESs1OSJRjpHwAFxyfkBOl/ZSZB58i2

jC17ocMUL8iO2XEKGM+FukdCi7dLvqWUlR8LmI1pHfi5+AJZ2XwJAS53QUZh2T6pTxmv

AYEA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=c4SflvmTTVV4yJrwfg2TE19hhun32A/5ut1GlP/Z4lU=;

fh=RKUblSCb5MMGL6OrSYQM0gthFhn1ktTmKEXPxzC6Bic=;

b=PzjBvRSc5JzcekXxLk4gd2aaV6BPwNxI4NqKl3G+sr16tAfrNSMj18o+qRgXPTcW/H

dpPV4T333V1L3WdR0QhK8dqj+Wih+l3Zva4jTC6awU7H0N962gC58+R0ti09DfpDG1JD

xL43uzOu0Qg+2KkYdjLanZmP4qIJ9HS1gugcuStteJWfTTGP3qnPNTvoOXyQfyi1k4NK

7Sa8G1wG58/sWKQKqmRmZh3GJ+AfssWNYOVpoKp9NzZty0YZV1grE7dV7REP1ZeldUgR

DiS/H6cpt+MGVavUvtFd/WgXp31/Gr9VUyuxYpNycc9UdvnKZ6x9SiTUDsrKt57NSURq

57bg==;

darn=knitinfosys.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Forwarded-Encrypted: i=1; AJvYcCVuoKzOYN3MJtV0EVdxpMSox0y/PAV6FHuViZLRycnKNCh01U/nw2rwoniolRf4yyhkJ9BGHaO6jfVi2tm4zmw=@knitinfosys.com

X-Gm-Gg: AeBDiesIxr3eASYec42otQ04OPDIhiR7eSuJMF1EI3y2Id3H4VgaeTT1dpf9gEW2ZLU

KGCr/NpF2APolMKdEGx6FdGrUyWW3kdc2DsUJvEB4ay5P7WxSWpcR1IjwqqtO0wKaTH7zghUerk

X/f8I6VGISudUuxA0U6QpPZd/qFj+Se1Kwjv99+OeKhvhX8gUsmxRm656opltrpeAYzkbY8Ha2p

CIjhZRdPccA2b3DpdCd7UpFEZIRAgS6Of9fLT2c0u+0ZRJ/w6uER6L5q+zeUV/4h90t5gQw5un8

RuPFZuSByNKkAipRfEbCMq1H+0Azshq+a9M/lyfp

X-Received: by 2002:a17:907:1b09:b0:b9b:5164:906b with SMTP id

a640c23a62f3a-b9c672ae620mr729788166b.6.1775548632863; Tue, 07 Apr 2026

00:57:12 -0700 (PDT)

MIME-Version: 1.0

Web/SEO/App spam from Google Gmail Part 2

Posted by Dave Yadallee on Tuesday, April 7. 2026

From: Abigail Graceg

Date: Tue, 7 Apr 2026 13:27:01 +0530

X-Gm-Features: AQROBzCTX5zm9yry2oDOc-WwGT7NNTBLQf5TwwAWN2MwO9tITPJawGwAROD5jOQ

Message-ID:

Subject: Courier & Logistics // Restaurant Table Booking App

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000008b2187064eda2151"

Bcc: gracegabigail50@knitinfosys.com

X-Original-Sender: gracegabigail289@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20251104 header.b="JWnIl/Vm"; arc=pass

(i=1); spf=pass (google.com: domain of gracegabigail289@gmail.com

designates 209.85.220.41 as permitted sender) smtp.mailfrom=gracegabigail289@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfosys.com

Precedence: list

Mailing-list: list gracegabigail50@knitinfosys.com; contact gracegabigail50+owners@knitinfosys.com

List-ID:

X-Spam-Checked-In-Group: gracegabigail50@knitinfosys.com

X-Google-Group-Id: 544685554211

List-Post: ,

List-Help: ,

List-Archive:

List-Subscribe: ,

List-Unsubscribe: ,

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, Are you planning to develop a website, mobile app,

or custom software solution? Services include:

Content analysis details: (5.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.218.71 listed in dnsbl.ahbl.org]

[209.85.218.71 listed in dnsbl.ahbl.org]

[209.85.218.71 listed in dnsbl.ahbl.org]

[209.85.218.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.218.71 listed in will-spam-for-food.eu.org]

[209.85.218.71 listed in will-spam-for-food.eu.org]

[209.85.218.71 listed in will-spam-for-food.eu.org]

[209.85.218.71 listed in will-spam-for-food.eu.org]

[209.85.218.71 listed in will-spam-for-food.eu.org]

[209.85.218.71 listed in will-spam-for-food.eu.org]

[209.85.218.71 listed in will-spam-for-food.eu.org]

[209.85.218.71 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.71 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[gracegabigail289(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.71 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Courier & Logistics // Restaurant Table Booking App

--0000000000008b2187064eda2151

Content-Type: text/plain; charset="UTF-8"

Hello,

Are you planning to develop a website, mobile app, or custom software

solution?

Services include:

1. Logistics / Transportation Apps

2. On-Demand Service Apps

3. Cleaning Service Apps

4. Real Estate Apps

5. Booking / Delivery Apps

6. Healthcare & Medical Apps

7. E-commerce Apps

8. Staff Scheduling Apps

Custom apps for all industries

Please outline the key features and services you would like us to provide.

Kind regards!!

Abigail

--0000000000008b2187064eda2151

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,

Are you p=

lanning to develop a website, mobile app, or custom software solution?
<=

br>Services include:

erif">Logistics / Transportation Apps
sans-serif">On-Demand Service Apps
ans-serif">Cleaning Service Apps
-serif">Real Estate Apps
=

Booking / Delivery Apps
H=

ealthcare & Medical Apps
if">E-commerce Apps
Staff=

Scheduling Apps

Custom =

apps for all industries

Please outline the key features and services=

you would like us to provide.

Kind regards!!

=3D"verdana, sans-serif">Abigail

--0000000000008b2187064eda2151--

Web/SEO/App spam from Google Gmail Part 2

Posted by Dave Yadallee on Tuesday, April 7. 2026

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 00721157ae682-7a36e833ed3sor86062147b3.1.2026.04.07.00.54.43

for

(Google Transport Security);

Tue, 07 Apr 2026 00:54:43 -0700 (PDT)

Received-SPF: pass (google.com: domain of rehibkied@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1775548483; cv=none;

d=google.com; s=arc-20240605;

b=WwTmEFiHH/QlWa2vjmpqLIZa4NTCefuTEWU56IOZINvcXflBrbVEInVybYUfn24wFt

JgFpiSXpa6z8NBAJs09izSXhlrVnIRfQ4geuD+3RFS3D6cDHAkQpO0l8CFiw4vlFiCn+

tXV3tDBymgoqWqhaxebil3K+50hmMHc4wytGMLK6j9chroS2FI+3vvWwD5/ud6i6FUQ/

Myloeh1lRZZlBKbQQWubg0CKSHrgGe2yQqM01Q/viYjXdWoPtsE1XN27b6uGMGf4B+4X

3FTYE6nRkI28i+/fMIzGAsz0xfMl24WZbUhuwuhd5y4v/nufKeXm/Plii8CfmUyXrMo4

GyNQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=qkl7XzKaCt7f9b672uCKNHjkQfGUvqVbGUGpWfesBnI=;

fh=unkBz6Y+4L1Myhocdl5ZOmTdAQ3ll8KxEPl5zbvuCFU=;

b=e29YJX+daBN+z5OOXbdnR9MyOUbjPgDG/yqON+YpmgFBPeN5lP5H7iXRvP8FlHdzs2

ice6OcDZZhXVjDTv3kBwA+GpCl8Zq1I0LpaXmlzZFOhEOqI9o/UZSnn5idGMcbC1254n

f9THv1FUrTiPz/zD4WfN2+bjVIzdPEUakby7W04UFrQC5mJdzuwU5G1+FooSRb//r7Ng

w914qbDMFavPas8qFVaqaIjyAjxuGimFkxBVE4OKR7K21OnjboHYmixQFQe0y0ntMDig

1NApMeMe5Vwos/6+FUcPNbzJkAzZRPYPJJ0JI4sMADJ5oQLZlYBIRXmE4o4J/LqzpDrU

v0ng==;

darn=knitinfosys.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Forwarded-Encrypted: i=1; AJvYcCUetsgFRwtcfpxaAfZqgdtxERjmnSjp+87S4jvR+/dMpWq4BpNKw+RBa/JbBpFsHPGCIrQQCtPidIEkmg==@knitinfosys.com

X-Gm-Gg: AeBDieuR8LRUZeLMMUeZ0LLfVoolgWokd1Hd3Oy4qouYb6jIbViV7rg9LzdfA4bJ/L5

yI+gyir2hkXv8xeS1o29Ijiwua24YlJTLO2lGqOACaV6sxr9s1Vhe9cH2TmtuOhga7BXysNQa+G

vBhckXXIvghXrgmBlfzmhGkjpXHNr2JUJVNc3s5Oa0yO57x/dyelUxyzf3J52JlDkS99m66XVev

DG5NBwsN81rEAu8jc6DmYmRQEAe617KTH0KX00UfndFQ7j2FvdFQvMrhVvv01OGD4VzUBpvJcIU

ETz7zOLA4qlG/rrCkwfbJ/VIWHqJokIDNgEWtfl3

X-Received: by 2002:a05:690c:83:b0:79e:ce16:38b with SMTP id

00721157ae682-7a4d31e75afmr154106107b3.4.1775548483388; Tue, 07 Apr 2026

00:54:43 -0700 (PDT)

MIME-Version: 1.0

From: Rehib Kied

Date: Tue, 7 Apr 2026 13:24:31 +0530

X-Gm-Features: AQROBzBj6P0OlMOpm6rNFoKHlEgpz5eeWHcp1gQ5z1hsYLm3jh5AeXqdLFlUMK4

Message-ID:

Subject: Property Rental & Real Estate Marketplace App

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a24687064eda18d0"

Bcc: rehibkied50@knitinfosys.com

X-Original-Sender: rehibkied@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20251104 header.b=D0RpF4sa; arc=pass

(i=1); spf=pass (google.com: domain of rehibkied@gmail.com designates

209.85.220.41 as permitted sender) smtp.mailfrom=rehibkied@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfosys.com

Precedence: list

Mailing-list: list rehibkied50@knitinfosys.com; contact rehibkied50+owners@knitinfosys.com

List-ID:

X-Spam-Checked-In-Group: rehibkied50@knitinfosys.com

X-Google-Group-Id: 956714109285

List-Post: ,

List-Help: ,

List-Archive:

List-Subscribe: ,

List-Unsubscribe: ,

--000000000000a24687064eda18d0

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hii,

Do you want to turn your business idea into a website or mobile app?

We specialize in:

> =E2=9C=94 Logistics & Fleet Management Systems

> =E2=9C=94 On-Demand & Service Marketplace Apps

> =E2=9C=94 Cleaning & Home Services Platforms

> =E2=9C=94 Real Estate Applications

> =E2=9C=94 Booking & Delivery Platforms

> =E2=9C=94 Healthcare Systems

> =E2=9C=94 E-commerce Solutions

> =E2=9C=94 Staff & HR Management Software

> =E2=9C=94 Custom-Built Applications for Any Industry

Let us know the functionality and services you would like for your app.

Warms regards,

Rehib

--000000000000a24687064eda18d0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hii,

Do you want to turn your business idea into a=

website or mobile app?

We specialize in:

class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px sol=

id rgb(204,204,204);padding-left:1ex">=E2=9C=94 Logistics & Fleet Manag=

ement Systems
=E2=9C=94 On-Demand & Service Marketplace Apps
=E2=

=9C=94 Cleaning & Home Services Platforms
=E2=9C=94 Real Estate Appl=

ications
=E2=9C=94 Booking & Delivery Platforms
=E2=9C=94 Healthc=

are Systems
=E2=9C=94 E-commerce Solutions
=E2=9C=94 Staff & HR M=

anagement Software
=E2=9C=94 Custom-Built Applications for Any Industry<=

/blockquote>
Let us know the functionality and services you would like f=

or your app.

Warms regards,
Rehib=C2=A0

--000000000000a24687064eda18d0--

Web/SEO/App spam from Google Gmail Part 1

Posted by Dave Yadallee on Tuesday, April 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Apr 2026 07:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wA62c-000000006S2-1uX9

for dave@doctor.nl2k.ab.ca;

Tue, 07 Apr 2026 07:00:26 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Apr 2026 07:00:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f198.google.com ([209.85.128.198]:37920)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wA1Hw-000000002Qb-16ma

for root@nk.ca;

Tue, 07 Apr 2026 01:56:06 -0600

Received: by mail-yw1-f198.google.com with SMTP id 00721157ae682-7a3e1671a54sf7258437b3.0

for ; Tue, 07 Apr 2026 00:55:07 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1775548501; cv=pass;

d=google.com; s=arc-20240605;

b=kXCj9pEHFz1jRtSjjL7+pzyGUb3fI7UQNQDGVr+cQ91kYalTop/+yBo+bt60/TWnzy

XZjhAjIjnVD70rA5cyi6PpTgN8VVVQ7TwFvV2fnSxL8wIIYerBumeQ/rkNwTbLI2O0QY

fRSu0kos5Tyv6WDNEPu6WMdC2U/Teh4P9ZPiBo+LcHApGMis07jyhhTwthGEjZj7enY7

FOb0e2RFfKJwNW8glMgSdvl523WGvj1IGPKPLU790+jPxbVsq7eP7MuCQO+bgIb6WRZ9

3PCe1QJDewXNmTt3ooHEX0nytgHMlzaLgWXKrL5gLr/c6sXieLwjNr7Btby0JDTA8U/y

IMLQ==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature;

bh=qkl7XzKaCt7f9b672uCKNHjkQfGUvqVbGUGpWfesBnI=;

fh=sUuzOBAh+Br2/m/AUuHbG8A6ad0saGOSGnYL+gxXXFY=;

b=YoVRrttzJGhiIYtOuCjjZRj9j1mxc/p0LImj7heEhgBF03ULGcehEf2ytLb8bUn7+M

WMqG3TZ0PqvYKrHgN0HLt410y1MvI/hr5KZmHyyFaN0H/1gjY/MQpl0ycdf7um/yiEFh

2rpfSV0CbiVHCxKYBBNYtlVMUOgn8owQTFBZpXiIM3Fm4jgiGtc4xsJycXP/xVIftX0P

Fb/Ac6A6n3DotUc8YSEvHP0gjeOyMw+pxCT0BQ2L1Mjq5+6+W0UTXOvcir3t5V+61KCB

NBLgfBXE3Si1bbpyAkMTNF3N90oRl3RP2Erf4SiwRCa+ADliElPe6lBSUbrIvDTK8PBf

XZDA==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b=D0RpF4sa;

arc=pass (i=1);

spf=pass (google.com: domain of rehibkied@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=rehibkied@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfosys.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=knitinfosys.com; s=google; t=1775548501; x=1776153301; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=qkl7XzKaCt7f9b672uCKNHjkQfGUvqVbGUGpWfesBnI=;

b=m3udyEpkK78Ol0Ufteto3zwsHCvTSyvVzQQKeSy0e5txiWp4zW9DvgpEoAKYLsIA28

6Lm6B5Y0ZhLSeGTpnehhFikxLw1S/1vZNFYvVtTgiFYBrh3uBAq21I/RwuIJeVOddBKL

YpBhoXlAYxAMrguvL61SvelXuu3g3RA0oTi3Tybw1XUU7uF8vlBg6Yd17mlzrjKQ0wdE

HCdeN2o8f5cndGnabA4sV8EHtwUSmPmiKpcipl7LBwxYPI6pniUsTEOsNM/4/GLL4BkH

6oY6l/K6dCUGDBSdqa4czp1I6jbMxF6we2N+LbTi2yOe4KdGfJkRLuULTAI4yEPZRZMU

L16A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1775548501; x=1776153301;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:sender:from:to:cc:subject:date:message-id

:reply-to;

bh=qkl7XzKaCt7f9b672uCKNHjkQfGUvqVbGUGpWfesBnI=;

b=JFvdq6LlLbfZplXXwUGSlIpS24Ha+SFtLH+v+NXM4/1MZihsTIsgiLyxGVp0uHSiDm

R06xKTZNJmvi6fjbhmZ+YwcsIEudUhZg1UVQq0pWc5YBvhj1Bfp5mh6cAndbuRSCPnQ5

4Axs1cfOApJrf4bJ0XXbYWhlf5tbIu/7XM9ug6MOScpGMpMRzo/upxYKhJbYQclts7yl

4L+kTHHGBad6MR1BB2o9MfrDltUZmFBGkuPn8fGgdc4bThpmFZPA0d1dCW93Jy344j24

1CYyTShNhRags6jyrN3WfKZez/QsQr30kxbDC8v4k4V8N1RSRWCV2U2mIRzbgCYalmYN

6miw==

Sender: rehibkied50@knitinfosys.com

X-Forwarded-Encrypted: i=3; AJvYcCXGKI4RR2WWU+Rcqob/Nmzmz7Bd0l9yOE4K2nUy81RVYaBq6lRTR3cEcl8HQRUn8oDiA7WT@nk.ca

X-Gm-Message-State: AOJu0YxKVrKpdKZ6wJ8n2srXEeeE8NG43kALymZpYSbj2sTaOMFGWpnC

uLaS04u4bbDBT4wv1q9W6TJfMGWcyTLKTP2qEt4g1doq8XWP1UNUHsfqzzWAajNUAkc=

X-Received: by 2002:a05:690e:b49:b0:650:1c35:6f29 with SMTP id 956f58d0204a3-6504868de44mr9225668d50.2.1775548501406;

Tue, 07 Apr 2026 00:55:01 -0700 (PDT)

X-BeenThere: rehibkied50@knitinfosys.com; h="AYAyTiIo5pAZ9H7mWX2xfIXdt5Pstk8oKbPQgKdrqWBZfG9NcA=="

Received: by 2002:a53:df4a:0:b0:650:696e:fd3c with SMTP id 956f58d0204a3-650696f01ebls2211528d50.3.-pod-prod-07-us;

Tue, 07 Apr 2026 00:54:44 -0700 (PDT)

X-Forwarded-Encrypted: i=3; AJvYcCUeQmIaQ/umb+gbY2eYl9sn/Dq4gLzqIRbifIrHFA00HPZ2naLhL+HIQNZXa0BhL45TwzHAO28dAk87LQ==@knitinfosys.com

X-Received: by 2002:a05:690c:c64d:b0:79f:5ce4:d6a0 with SMTP id 00721157ae682-7a4d556f4edmr136147647b3.36.1775548483835;

Tue, 07 Apr 2026 00:54:43 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1775548483; cv=pass;

d=google.com; s=arc-20240605;

b=d3eL1IdjgV3lNHxFvzuleXOJUkr3yj70FLw7TQLn22Topk3YukuOGnneFX5tVq9c8m

z4gGqJDU+JIA4eBL7yRQXVFH4MxyFqAxBpa6vG8/UfixLLMm4PeTv7DjpBiCU4FVlsBg

fTaT4mNIxfRVEgtHXwXcpGNT1DdUQBQeJ1oxfLqR5kj46uBDh2CGH62FJUlCXYVAIl5Z

YxmJXku0DYan0ZIu/70WwfPQ9UM0EGCHCMBiPc1z1I/9laCkSUK+nw08AsJm8YWcYjb1

p0YTnzqUd8AQxeT/5ctGtUiqm6/cdZmGgZW0m4DssE6oUEf4CnYSYw8IZ6y9l3Hg3q6p

W2lA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=qkl7XzKaCt7f9b672uCKNHjkQfGUvqVbGUGpWfesBnI=;

fh=unkBz6Y+4L1Myhocdl5ZOmTdAQ3ll8KxEPl5zbvuCFU=;

b=gUN9V1oF5hpY77HNPsKN0ZBxVyO0GeMdelYi2E7cDZ3A8Rjey6ydnvKz458NdjOwzg

qKXSaSA15MJpUUSn3KDGV+FX2pPNt88lfCCYcjLO3XP87WqwDrybXetuHkcVsQ2CvFKA

1zkwRZ4oA0JwXQpS/4VBGkdXnEEuaA8hXW8lnUPIgdkEpYZTy5fTM9TaD7HGf3lsUM6f

Suf9CS5wdFJRcgjy0FLG8wD+v/BQ6w5NM8Fo5xENaHpwKlPHsvaGaciWI5IRIlNIZe76

W+vZT8LRYrohUtz31nCkpCTM1Xcgxi/W/Mpu2/C/Fbil37j0wIT8FVM/9s84Ug/cgLYX

l72A==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b=D0RpF4sa;

arc=pass (i=1);

spf=pass (google.com: domain of rehibkied@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=rehibkied@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfosys.com

Bitcoin phish Part 1

Posted by Dave Yadallee on Tuesday, April 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 06 Apr 2026 23:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w9zB1-00000000JXI-06vH

for dave@doctor.nl2k.ab.ca;

Mon, 06 Apr 2026 23:40:39 -0600

Resent-From: The Doctor

Resent-Date: Mon, 6 Apr 2026 23:40:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.makassarkota.go.id ([103.151.20.222]:49652)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w9yGQ-00000000EQ7-35mK

for sales@nk.ca;

Mon, 06 Apr 2026 22:42:18 -0600

Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 570B53C4FEAA

for ; Tue, 7 Apr 2026 12:26:06 +0800 (WITA)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dukcapil.makassarkota.go.id;

s=dkim; t=1775535969;

h=from:subject:date:message-id:to:mime-version:content-type:

content-transfer-encoding:list-unsubscribe;

bh=L6IFgwH20eIH2vec+46q/TCJ54dUUjaHNnuuXdwz8H8=;

b=RVFclG11Vgn9RLVJmciO1/1XU3LPiXp33G4P8v2KV3+H5qtgT5s1hFrrjopH0RB9twyG+E

QnNU3nTOGBwm89upCBJYFQyynPNEnSjpeqqNVhgDCw1vRFYddctAnLe/OTpK/9xNb1pX+q

5IK8vjP/pQ3bG+z8Af7MNZEGgLa5bwjdc0VS/4t0hJW/mFGiksXgPICleuOf3g4MRrlBNI

Ngl4lgeNtMVIOZEBfag/U1CUJutT8SKIcZFazheZSscLsEdSoLx4SCrcPuGjhUXBzboWfJ

jtl2uPO+jaCmjFEcu6Q49ifLcpRor+MmzdnMr6xdSylRkHIY19F0cOBY+jvO3g==

From: "Xrew Hati"

To: sales@nk.ca

List-Unsubscribe:

List-Unsubscribe:

Subject: We have your information

Date: 6 Apr 2026 21:26:06 -0700

Message-ID: <20260406212606.69388F5D97322B12@dukcapil.makassarkota.go.id>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Last-TLS-Session-Version: TLSv1.3

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Your device is infected with a trojan virus and we have your

private info out of your device. It previously was installed on a porn video

web page after which you've selected the video clip, your device was infected

by the virus and gathered all your contacts. Then, your camera started to

reco [...]

Content analysis details: (8.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.151.20.222 listed in dnsbl.ahbl.org]

[103.151.20.222 listed in dnsbl.ahbl.org]

[103.151.20.222 listed in dnsbl.ahbl.org]

[103.151.20.222 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.151.20.222 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.151.20.222 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.151.20.222 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.151.20.222 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.151.20.222 listed in will-spam-for-food.eu.org]

[103.151.20.222 listed in will-spam-for-food.eu.org]

[103.151.20.222 listed in will-spam-for-food.eu.org]

[103.151.20.222 listed in will-spam-for-food.eu.org]

[103.151.20.222 listed in will-spam-for-food.eu.org]

[103.151.20.222 listed in will-spam-for-food.eu.org]

[103.151.20.222 listed in will-spam-for-food.eu.org]

[103.151.20.222 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.3 LONGWORD BODY: Uses overlong words

0.6 J_CHICKENPOX_71 BODY: 7alpha-pock-1alpha

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.151.20.222 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.151.20.222 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[103.151.20.222 listed in bl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.151.20.222 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.151.20.222 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.2 PDS_BTC_ID FP reduced Bitcoin ID

1.0 BITCOIN_YOUR_INFO BitCoin with your personal info

1.0 BITCOIN_DEADLINE BitCoin with a deadline

Subject: {SPAM?} We have your information

Bitcoin Phish Part 2

Posted by Dave Yadallee on Tuesday, April 7. 2026

: 0px; letter-spacing: normal; font-family: "YS Text", Arial, sans-serif; f=

ont-size: 16px; font-style: normal; font-weight: 400; word-spacing: 0px; wh=

ite-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 2=

55); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-tex=

t-stroke-width: 0px; text-decoration-thickness: initial; text-decoration-st=

yle: initial; text-decoration-color: initial;'>

Your device is infected with a trojan virus and we have your private info
r>out of your device.

letter-spacing: normal; font-family: "YS Text", Arial, sans-serif; font-si=

ze: 16px; font-style: normal; font-weight: 400; word-spacing: 0px; white-sp=

ace: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); f=

ont-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;'>

It previously was installed on a porn video web page after which you've
=

selected the video clip, your device was infected by the virus and gathered=

all your contacts. Then, your camera started to record you soloing and =

also
recorded videos that you have seen.

letter-spacing: normal; font-family: "YS Text", Arial, sans-serif; font-si=

ze: 16px; font-style: normal; font-weight: 400; word-spacing: 0px; white-sp=

ace: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); f=

ont-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;'>

Well, If you ever wish us to wipe out all your details that we have got, we=

required $750 in Bitcoin to the below address (if you don’t know =

this,
search “how to buy Bitcoin” on Google or YouTube) .
>

letter-spacing: normal; font-family: "YS Text", Arial, sans-serif; font-si=

ze: 16px; font-style: normal; font-weight: 400; word-spacing: 0px; white-sp=

ace: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); f=

ont-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;'>

Bitcoin Address: bc1qs7jukfwkeqdsdf3em82l3qfcd2jelh8wjjqgur

letter-spacing: normal; font-family: "YS Text", Arial, sans-serif; font-si=

ze: 16px; font-style: normal; font-weight: 400; word-spacing: 0px; white-sp=

ace: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); f=

ont-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;'>

letter-spacing: normal; font-family: "YS Text", Arial, sans-serif; font-si=

ze: 16px; font-style: normal; font-weight: 400; word-spacing: 0px; white-sp=

ace: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); f=

ont-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;'>

Now you have 24hrs to make a payment. The moment we receive the transaction=

and payment receipt,i'm going wipe out this movie and everything completel=

y and you will never
hear from me anymore. Or else, please be sure that =

the evidence will be sent
out to all of your contacts including relative=

s, coworkers, Facebook and so
forth.

IMF spam part 2

Posted by Dave Yadallee on Tuesday, April 7. 2026

--_000_ddc91afdd7464cdd8ed4f262833eff27techlinkznet_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

ATTN BENEFICIARY

We are reaching out to inform you that you have been selected as a potentia=

l recipient FROM Finance and Remittance Department (IMF)My name is Ms.Krist=

alina Georgieva, and I currently serve as Director of the Finance and Remit=

tance Department within the International Wire Transfer/Telex Division at t=

he International Monetary Fund (IMF). I am reaching out in relation to a pe=

nding transaction in which you were listed as the beneficiary Of $8.7 Milli=

on USD.

Email: linagkrista@gmail.com

Please confirm your willingness to proceed under these terms, and I will sh=

are further instructions.

Faithfully Yours in Him.

Ms.Kristalina Georgieva.

Finance/Remittance Department Director,

International Monetary Funds, (IMF

--_000_ddc91afdd7464cdd8ed4f262833eff27techlinkznet_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

-family:Calibri,Helvetica,sans-serif;" dir=3D"ltr">

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

ATTN BENEFICIARY

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

We are reaching out to inform you that you have been selected as a potentia=

l recipient FROM Finance and Remittance Department (IMF)My name is Ms.Krist=

alina Georgieva, and I currently serve as Director of the Finance and Remit=

tance Department within the International

Wire Transfer/Telex Division at the International Monetary Fund (IMF). I a=

m reaching out in relation to a pending transaction in which you were liste=

d as the beneficiary Of $8.7 Million USD.

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

Email: linagkrista@gmail.com

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

Please confirm your willingness to proceed under these terms, and I will sh=

are further instructions.

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

Faithfully Yours in Him.

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

Ms.Kristalina Georgieva.

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

Finance/Remittance Department Director,

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

International Monetary Funds, (IMF

;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=

;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=

16px;">

--_000_ddc91afdd7464cdd8ed4f262833eff27techlinkznet_--

IMF spam part 1

Posted by Dave Yadallee on Tuesday, April 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: Dave@nk.ca

Delivery-date: Mon, 06 Apr 2026 17:10:00 -0600

Received: from mail.techlinkz.net ([103.38.184.12]:59802 helo=SVRSG002.techlinkz.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w9t4G-00000000IHu-397D

for Dave@nk.ca;

Mon, 06 Apr 2026 17:09:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; d=techlinkz.net; s=server1;

c=simple/simple; t=1775516898; h=from:subject:to:date:message-id;

bh=YRjWntfVbFb36rz+kAoecuKVN8cZrD4noo6N/1E9dec=;

b=XFbXdc66Iptqc/7xQss6KMhw7V10tE+4QJ8AVj01MRcRWlHYwTPsZyzxjkPZxBgCcRvRmi2mq5o

N+elSOGiM6NgQphvgJg68CRfbZPvss5mGf3IhPOT//R61j7rc6b+VbNrEH/bo9QiRm0LTovPLFUDE

icvSKrVPWzHegq6lCtodBko3HgrEFnDcOgcHtWROgJhhRfX8ZRXwHXYk8/lCcEu7YSWWu2APYjT14

lHaqElI+l9HlLDG+AE+FmKGpxbJOCoHNvuP4Onq5LVd/I+YXfCe20WQtvDrbZgMzVs3kcvbj4Qhv5

P5cojqTfdWHeHxc7PUrRsp/Aaj6JsXvNjLWw==

Received: from SVRSG002.techlinkz.net (172.16.101.102) by

SVRSG002.techlinkz.net (172.16.101.102) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1544.36; Tue, 7 Apr 2026 07:08:17 +0800

Received: from SVRSG002.techlinkz.net ([::1]) by SVRSG002.techlinkz.net

([::1]) with mapi id 15.02.1544.036; Tue, 7 Apr 2026 07:08:17 +0800

From: Goh Yenping

Subject: ATTN BENEFICIARY

Thread-Topic: ATTN BENEFICIARY

Thread-Index: AQHcxhowY98wCalbxUC1HdZoDTUsMA==

Date: Mon, 6 Apr 2026 23:08:17 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [98.97.79.82]

Content-Type: multipart/alternative;

boundary="_000_ddc91afdd7464cdd8ed4f262833eff27techlinkznet_"

MIME-Version: 1.0

X-Spam_score: 15.0

X-Spam_score_int: 150

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ATTN BENEFICIARY We are reaching out to inform you that you

have been selected as a potential recipient FROM Finance and Remittance Department

(IMF)My name is Ms.Kristalina Georgieva, and I currently [...]

Content analysis details: (15.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.38.184.12 listed in dnsbl.ahbl.org]

[103.38.184.12 listed in dnsbl.ahbl.org]

[103.38.184.12 listed in dnsbl.ahbl.org]

[103.38.184.12 listed in dnsbl.ahbl.org]

[98.97.79.82 listed in dnsbl.ahbl.org]

[98.97.79.82 listed in dnsbl.ahbl.org]

[98.97.79.82 listed in dnsbl.ahbl.org]

[98.97.79.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.38.184.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.38.184.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.38.184.12 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.38.184.12 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[98.97.79.82 listed in will-spam-for-food.eu.org]

[98.97.79.82 listed in will-spam-for-food.eu.org]

[98.97.79.82 listed in will-spam-for-food.eu.org]

[98.97.79.82 listed in will-spam-for-food.eu.org]

[98.97.79.82 listed in will-spam-for-food.eu.org]

[98.97.79.82 listed in will-spam-for-food.eu.org]

[98.97.79.82 listed in will-spam-for-food.eu.org]

[98.97.79.82 listed in will-spam-for-food.eu.org]

[103.38.184.12 listed in will-spam-for-food.eu.org]

[103.38.184.12 listed in will-spam-for-food.eu.org]

[103.38.184.12 listed in will-spam-for-food.eu.org]

[103.38.184.12 listed in will-spam-for-food.eu.org]

[103.38.184.12 listed in will-spam-for-food.eu.org]

[103.38.184.12 listed in will-spam-for-food.eu.org]

[103.38.184.12 listed in will-spam-for-food.eu.org]

[103.38.184.12 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

2.5 MILLION_USD BODY: Talks about millions of dollars

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 XFER_LOTSA_MONEY Transfer a lot of money

Subject: {SPAM?} ATTN BENEFICIARY