Arctic Wolf spam from Microsoft Outlook Part 2

Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

[52.101.85.103 listed in dnsbl.ahbl.org]

[52.101.85.103 listed in dnsbl.ahbl.org]

[52.101.85.103 listed in dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.101.85.103 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.101.85.103 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Arctic Wolf Dare 2 Compare $50 Offer





Hi Dave,



I have received your request to learn about Arctic Wolf solutions. We are looking forward to having a conversation with my local, experienced representatives to walk you through a 45-minute introduction demo of what we do and who are at Arctic Wolf.



Once the meeting takes place, the e-gift card will be sent to your email for taking the time to learn about us at Arctic Wolf and our solutions.



Wanted to see if you could provide some context for our meeting so the team can tailor the conversation a bit more towards your needs.





Company address & estimated # of employees?

Any cybersecurity initiatives top of mind?

Any tools in place currently?

Preferred technology/security partner?









Cheers,

Dante







Dante Selke / Sales Development Representative – Canada

dante.selke@arcticwolf.com / 507-272-8389



Arctic Wolf Networks Canada Inc.

619 Kumpf Dr

Waterloo, ON, N2V 1K8



Book a Meeting with Me! | Unsubscribe ☹





If you'd like me to stop sending you emails, please click here





------------------------------------------------------------------

This email and any attachments are for the expressed and sole use of the intended recipient(s) and contain information that may be confidential and/or legally privileged. Any disclosure, copying, distribution or use of this communication by someone other than the intended recipient is strictly prohibited. If you are not the intended recipient please delete this email immediately. Any information and services described herein are provided by Arctic Wolf Networks, Inc.

Arctic Wolf spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Mon, 30 Mar 2026 09:02:00 -0600

Received: from mail-westusazon11020103.outbound.protection.outlook.com ([52.101.85.103]:10879 helo=BYAPR05CU005.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7E74-000000001rw-3OXg

for dave@nk.ca;

Mon, 30 Mar 2026 09:01:19 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=BD16Z31gt4a25BYBJKhFlduHMwnCxzHRXrzzsziIP3KTS/HKq8sJIv/ha/HDYzA2IfpGFIBi/55jIXaoL76TcD87yBf60Yhl1BrBWclp4yJKPCXW5gnvQwu7aeAj04poRVaIJLXhqL1xj2bu8JyGKqEZpR5++7+vsyUa+NAzhxck+9fLgZeBLzL6CR9fWs/yQsNZbdyEzWFHKMshyohbFLW4jvpBS60Kd/HnmnJDZ72fuF41kzjG1BbOIDQxvnfIH65PBfB9rUJ5h01cvF1ExhHy7FlR5H2cLSVZZKfQf4w3ns9ME1z915t+eTQpAStay6S86Vd4r5AoqewLi38L5g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=MUeNh7U9oL3cQceTQE4st/yNIROFFN6v4ooxrf3jBDY=;

b=wr2ZRdPqDMNBI3vRVdXSTTB6DZhTDlvevv3M93JH8rxxFeyDmN9JnQ5YX0sfW4hEvSVYA8U9yh+GxLAfOKqSeUAaMGCxMOIopMXIHkWdLYlMdy9D7O08zdshWIQCDuwVoKoSxMin3SsfwqxbiymlHg3lAr29ErNkFgYbEkShszRlAo92UogAq1s7rngIADpfF1FsFC4OMyowlJ02E0pBg/yyB+4pWijkRra58PXPlVkvMaVmWdqdrH1N9DKCyCo133qbtbFUK9M1RiCgcsrKIkOqVf3KRZePqOK4x/W3qY6grSb3QBbwo8BuhaMipBy2Lt40I9o7k2UTfb5M7mebWg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=arcticwolf.com; dmarc=pass action=none

header.from=arcticwolf.com; dkim=pass header.d=arcticwolf.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arcticwolf.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=MUeNh7U9oL3cQceTQE4st/yNIROFFN6v4ooxrf3jBDY=;

b=nHe64bhZLnrRlAvguW+bWWnI0WKeOh2h5bjhLXrNPEttO0AszSeMONEDZq/wihc9+GDrAeU1OJXj5rXnqywjyWwPgE9hSn3XcljqVq67A4TcAU+AthXaXosLwMORVsXpS4+BY4w7qZwzmBmaZvjGzlACnyefOuTyRWNfC+A4Zx8N8A5QoZUHPjhVXcgBF7gVMNB4Aq0nf/PGVGONeJcSYt3T62S4QU7NtmdiMJ22oUx9r9klgeJhy/F2WD632Ve1XgyL2ZGCtcc+RnHYQr2J5RmgzgzViovQwhjOd8XogoUoIt+ORdI7cPmNoh2TWEaZ9BLvh1uGqrDbvSJQCxN66w==

Received: from SN7PR02MB10180.namprd02.prod.outlook.com

(2603:10b6:806:2aa::17) by PH7PR02MB9337.namprd02.prod.outlook.com

(2603:10b6:510:273::7) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.28; Mon, 30 Mar

2026 15:00:14 +0000

Received: from SN7PR02MB10180.namprd02.prod.outlook.com

([fe80::9380:61a6:ee81:37be]) by SN7PR02MB10180.namprd02.prod.outlook.com

([fe80::9380:61a6:ee81:37be%5]) with mapi id 15.20.9745.027; Mon, 30 Mar 2026

15:00:14 +0000

From: Dante Selke

To: "dave@nk.ca"

Subject: Arctic Wolf Dare 2 Compare $50 Offer

Thread-Topic: Arctic Wolf Dare 2 Compare $50 Offer

Thread-Index: AQHcv8ZEtb2D7RCDBUqDENElP82UyA==

Date: Mon, 30 Mar 2026 15:00:00 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=arcticwolf.com;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SN7PR02MB10180:EE_|PH7PR02MB9337:EE_

x-ms-office365-filtering-correlation-id: e6bd65b2-5fdf-4040-293a-08de8e6d0ca6

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|376014|3109299003|69100299015|4022899009|366016|1800799024|7049299003|3122999024|38070700021|8096899003|13003099007|18002099003|56012099003;

x-microsoft-antispam-message-info:

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

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SN7PR02MB10180.namprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(3109299003)(69100299015)(4022899009)(366016)(1800799024)(7049299003)(3122999024)(38070700021)(8096899003)(13003099007)(18002099003)(56012099003);DIR:OUT;SFP:1102;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?K0VpUzhTQlRCNUtsK04xM28ycnE3OG5VUHpaRDBockNSMm9BSHdNNnlkV2Qr?=

=?utf-8?B?c0lFQjhmV3B4dVZiN2pGY3FadE5wUGwxaEdiaGRrS2tERWprUWswTXZ1b1lF?=

=?utf-8?B?NEFBVS9yYWVidjR0UEhNZUNScnUxU0lhVmNrOUpGeEVYSGs4MGZQSlF4RmQ2?=

=?utf-8?B?eThKWkp1MHpwZ1I1SXVyL2F5RWIwUnN1dE9JSlZkbGM5UlgrRHJ5YUdtMTZZ?=

=?utf-8?B?NGRyUmd0blZpcDh6TG9iNlV4SlpjRkU3VTVLYUVvWWhqUG5WTmNTb2N2REdV?=

=?utf-8?B?d2VqOWxRc1NtUDd5cnYzbm9jUlJaUEc1elZQM3hsVHZTYXlFb0d2MkFxZVNN?=

=?utf-8?B?aGFHNnhHRzRzbzVoRlUvalZFNlRMZHRsT0FyRWtGUXV1L0pGRXlpd3N4a2ZB?=

=?utf-8?B?ZTlZaVU4b3ZoK1lHenVxekFTS3NOWlJKZTU3a0tJamtyRlZaek5QcWlIY2gy?=

=?utf-8?B?V3BBMnl6TFR4NDNDVjV1S0pGbVN1U3Nvang5MEJPYWRJeGpDRXZNSWZKYS9u?=

=?utf-8?B?UllGT3V2aXcyL3dnVkFpUmxhVGJGR3lRU2xYMFI1Q1k3cktFMTJFNFRWTTZ2?=

=?utf-8?B?Y214cHVMcy9laTh1QW9QTk1IRzdlSFE1MUgzclJzcEhQTTkwTWxnUjdqNEpJ?=

=?utf-8?B?WStSeW9UamNBb0VYYmlVYXd3dlh2T096VnpibDdmUDdHMVl6eHlZK0JvaFR6?=

=?utf-8?B?R01sRjRQbXQzUlJ6MStmbXhlMDhjeG12c3lkRjBWU2RxSGhEaDFEK0RKMVF5?=

=?utf-8?B?UmhnNVlINjNYMWNRZ0oyUkk0OGFDSVpUYmtkZUh1bWo0YU9mQ3lGemxiMmU2?=

=?utf-8?B?dXRaQ3JBK3JDZmZubDZvc2NSWjVhZkczWW1kNlpSZktJaDJlUWMxSjE2K051?=

=?utf-8?B?SGlUYVduNDBvSkwwTkVZVlhOL2NUSUNLM25ORVN1NlpJbEFNejV5RUY5OWhv?=

=?utf-8?B?UkV4blMxZHEzTzhPODMvUGNBOUF2RVlvVUcwSVF0bHFHQzJkQjRCcmNtYnNj?=

=?utf-8?B?bVRTK3BsOCtuMHBleTFrYWhRVU9DeHVMRlJPS2kwNFVDVlV4eEVsUmZjT3ZP?=

=?utf-8?B?QkZhRlVjazVreGliTENOWXdDeDZvMXBwQUo5UUVXKzhwWlJ6L3dkSHE4eUNk?=

=?utf-8?B?TDY5OXpPUVZCeEIxNjNlSkxzYlljQzBCdmFCZnoyOTJXQ0tlem92eERDek91?=

=?utf-8?B?dklHUHloeDFlRDI3eDBJdVUvcEVBdlNHM3RvZzVVZXBOcnI3WUVSM2RVdkl6?=

=?utf-8?B?dFl0TDRHQmJGS3l1R2tLdFUwV0Z3TU0rL0ltSmlSODFoZ0hQMDZscVAyUjRa?=

=?utf-8?B?cEFrUVF1OTMrSk9PT29namdIYjBWUERQVnAybGhyRklFR0htMWQ4eGJHcXRj?=

=?utf-8?B?QjlCSzB4K1dXVm1zcFFHZDUvaXc0OS81cFR4dmJ3cytuenRFZEFEZklRYWcy?=

=?utf-8?B?MzNaVG5RUUhwZ0NHS3dnVWEvOXJ5S3dRdEpubjNjL3FZK1czc0ZZSXlScXlR?=

=?utf-8?B?bFVUblhRZDQ1M1BqTWp2UkNZclJvb2xaYkJSRkUyZzNnYnN6SDc3TVlHQk0v?=

=?utf-8?B?SFlWVTlSN0xzZXpXeXVPdVdMZXBXYk5qSlNFZXZJaW01bHkwd1FHY25WbTZl?=

=?utf-8?B?Sm9COGkwSW5NTmJOY0oyNkk2UGdzNmJQRFJrR2graFhTWU9lOEFLL25JRmRk?=

=?utf-8?B?OWg0ak1wZzAyeE5tMGpqWVhNWG1GQ3U4RXBPblU5R01SQUI5aVFyZG0rNEti?=

=?utf-8?B?REJhcE5haWxJK2s4N1JFSk1VS3JYSWxvbi92ejhmVGVYeFJieXVWdC9hamhY?=

=?utf-8?B?L2g2dWpSbjU0S2JvdFNpd3VXOEc3NCtWZ08wTmtNUTUyUExNUDdNT244MjF6?=

=?utf-8?B?dVp2blEyM3UyS2t3bjB6MTBzakYzOHFkd05RMjBzOG5NK2Y5RXVQeXhtWThE?=

=?utf-8?B?THIrcFNtTE9SMm0zQ0NMcTRiRDkvN2Z3RnhxTkkwQVJaT0tRV01oMFFYSFNq?=

=?utf-8?B?SnpKVXViOEVSeWtUVWZ2dTVuNUF2RTdYakh3Vkt6aFJGaDliVW9teXdBMFdJ?=

=?utf-8?B?KyswV3FDMnBWQXI1RjI2TjExYmY1ak9GdUpZTzBvMWdwUWg0SkZZSFNxSFdJ?=

=?utf-8?B?OVBTVFNNdXg3UHozZ3QzN2JyYkJ1eWRRUFRGVjJxcktEdXYxNUVTbHI4eGlF?=

=?utf-8?B?aFNCMXJyc0h5YWhMT3BqaDdMT1pVclRZdlhKTzVaTzJuSG1jKzBQWWFHelRB?=

=?utf-8?B?MFlKZ3RpN1QyZmk3eEF3RDdKOG5Zd1VzWVVIZVNscXYxUzlQcGp5bzN5akJn?=

=?utf-8?B?SCtoQ242cjZ3cC9IdC92K2pqTmg4YTF0VWlkWStTZ0twUUdaQXdkZz09?=

Content-Type: multipart/alternative;

boundary="_000_SN7PR02MB10180994B68D75ADFA1C7F8438955ASN7PR02MB10180na_"

MIME-Version: 1.0

X-OriginatorOrg: arcticwolf.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SN7PR02MB10180.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: e6bd65b2-5fdf-4040-293a-08de8e6d0ca6

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Mar 2026 15:00:14.7522

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 066bffcc-c53d-4584-a5b7-9b9b750f7b29

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: j0bW9Y8uTId/VrdVpyVuF/V3N7MHmAtGS6PZ7TG89Ab/ml1mLgKKrGbq64hIN65qwg1vF1YrKdmTLwfmIsr9aosDu43NkHehPxITBixtOjo=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR02MB9337

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Dave, I have received your request to learn about Arctic

Wolf solutions. We are looking forward to having a conversation with my local,

experienced representatives to walk you through a 45-minute introducti [...]



Rabobank Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7Eny-00000000AbA-1oqg

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:45:30 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 09:45:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [82.223.245.29] (port=64527)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7DD6-00000000C30-26TH

for doctor@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 08:03:32 -0600

From: Rabobank

To: doctor@doctor.nl2k.ab.ca

Subject: Wij hebben opnieuw een ongeautoriseerde toestelregistratie waargenomen

Date: 30 Mar 2026 16:02:30 +0200

Message-ID: <20260330160230.D4EDDD8F24CA0FFE@rabobank.nl>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ongeautoriseerde toestelregistratie Ongeautoriseerde toestelregistratie





Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

[82.223.245.29 listed in dnsbl.ahbl.org]

[82.223.245.29 listed in dnsbl.ahbl.org]

[82.223.245.29 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

3.0 HTML_ENTITY_ASCII Obfuscated ASCII

Subject: {SPAM?} Wij hebben opnieuw een ongeautoriseerde toestelregistratie waargenomen



ING Logo

Ongeautoriseerde toestelregistratie



Op 30 maart 2026 hebben wij een nieuwe toestelregistratie waargenomen op uw rekening. Indien u dit zelf heeft gedaan, kunt u deze melding negeren.

Mutatierapport — CRM

Rabo

Dossier: CRM Mutatierapport

Beheerder: F. Clerqs

Datum: 30.03.2026

Status: In behandeling

Details:

Device: Samsung Galaxy S25, Android 14

Reg.: 30.03.2026 10:42

ISP: Orange Telekom

IP: 91.76.42.180

Locatie: Frankrijk, Paris, FR

IMEI: 3400-8730-7750-09



CRM v4.2 | Export: onbekend



Details van het toestel:



Datum en tijd: 30‑03‑2026 15:42

Device: Samsung Galaxy S25

Ip Adres: 91.76.42.180 (Frankrijk, Parijs, FR)

Browser: Safari

Imei: 3400-8730-7750-09



Uit veiligheidsoverwegingen hebben wij uw rekening per direct onder een verhoogde controle gesteld. Er is ter bescherming van uw gegevens en diensten een monitoring van 24 uur ingeschakeld.



Indien de recent geregistreerde telefoon niet door u is aangemeld of indien u deze activiteit niet herkent, verzoeken wij gelijk contact met ons op te nemen.







Bel ons op +31 20 - 369 299 2 (24/7 bereikbaar)

Nu bellen



Met vriendelijke groet,

Fraude Preventie Specialist – Rabo Nederland

Medewerker: Martijn de Ruiter

ING Symbool





© 2026 Rabo Bank N.V. – Croeselaan 18, 3521 CB Utrecht, Nederland

CAm inspector spam from OVH PArt 2









CamInspector - Field Inspections and Quotations Made Easy!




font-family:Arial, sans-serif;">


cellspacing=3D"0">








20px;">


border-radius:8px; overflow:hidden;">






























color:#003366; text-align:center; padding:20px;">


style=3D"margin:0;">CamInspector




style=3D"font-size:18px; margin:0;">The ultimate tool for field technicians=

and installers.




30px; color: #003366;">

Hi!



Tired of spending extra hours on quotations and inspection=

reports?



CamInspector helps you =

capture job details on-site and deliver a

=

professional PDF with photos, notes, quotation, and =

signatures =E2=80=94 right from your phone.







  • =F0=9F=93=B8 Photos and notes per =

    project stage


  • =F0=9F=93=84 =

    Quotations with units, margins, and taxes =E2=80=94 and =

    soon you will be able to geo-locate your suppliers


  • =F0=9F=96=8B=EF=B8=8F Signatures for =

    client and provider (optional)


  • =F0=9F=93=8C =

    Custom cover with client information


  • =F0=9F=93=A4 Export and share the PDF =

    from your device


  • =F0=9F=93=8A CRM =

    capabilities:
    classify projects (Editable / Sent / Won / Lost) and=

    soon you will be able to track performance








=

=F0=9F=9A=80Are you a materials supplier? Book a demo or =

reply to this email and we=E2=80=99ll show you how Cam Inspector can help

boost your sales and all the integration =

options we have.






30px 0;">Download the app today and create up to 10 projects for =

free!






margin-top:30px;">










id=3Dcom.australnetworks.caminspector" target=3D"_blank">


ges/generic/en_badge_web_generic.png"

=

style=3D"width:140px; margin-right:10px; vertical-align: middle;" =

alt=3D"Get it on Google Play" />




46515194?l=3Den-GB" target=3D"_blank">


src=3D"https://developer.apple.com/assets/elements/badges/download-on-the-a=

pp-store.svg"

style=3D"width:140px; vertical-align: =

middle;" alt=3D"Download on the App Store" />










cellspacing=3D"0" style=3D"margin-top:25px;">










role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" style=3D"margin:0=

auto;">




















align=3D"center" style=3D"padding:6px 0;">


href=3D"https://australnetworks.com/caminspector" target=3D"_blank"

style=3D"background-color:#003366; =

color:#ffffff; text-decoration:none; padding:12px 20px; border-radius:6px; =

display:inline-block; font-weight:bold;">

=

=F0=9F=8C=90 Website




style=3D"padding:6px 0;">


href=3D"https://australnetworks.com/caminspector/docs/index.html" =

target=3D"_blank"

style=3D"background-color:#0=

0b0ff; color:#ffffff; text-decoration:none; padding:12px 20px; =

border-radius:6px; display:inline-block; font-weight:bold;">

=F0=9F=93=9A Documentation






com/caminspector/#contacto" target=3D"_blank"

=

style=3D"background-color:#28a745; color:#ffffff; text-decoration:none; =

padding:12px 20px; border-radius:6px; display:inline-block; =

font-weight:bold;">

=F0=9F=93=85 Book a Demo












Professionalize your deliverables=

and close faster with Cam Inspector.






font-size:12px; color:#666;">

If you don=E2=80=99t want to =

receive more emails, you can


australnetworks.com/track/unsub?email=3Dsales%40nk.ca&lang=3Den"

target=3D"_blank" style=3D"color:#666; =

text-decoration:underline;">

unsubscribe

.




style=3D"background-color:#f0f0f0; padding:20px; text-align:center; =

font-size:12px; color:#666;">

=C2=A9 2026 Austral Networks =

SpA. All rights reserved.










email=3Dsales%40nk.ca&lang=3Den"

alt=3D"" width=3D"1" height=3D"1" =

style=3D"display:none;" />





CAm inspector spam from OVH PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7Enn-00000000Aam-0zS1

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:45:19 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 09:45:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-9ce2769b.vps.ovh.ca ([51.222.110.77]:56340 helo=mail.australnetworks.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7D95-00000000BhM-05eV

for sales@nk.ca;

Mon, 30 Mar 2026 07:59:14 -0600

Received: from mail.australnetworks.com (mail.australnetworks.com [127.0.0.1])

by mail.australnetworks.com (Postfix) with ESMTP id 4fktBJ6vQPz69Hs

for ; Mon, 30 Mar 2026 13:58:16 +0000 (UTC)

Authentication-Results: mail.australnetworks.com (amavisd-new);

dkim=pass (1024-bit key) reason="pass (just generated, assumed good)"

header.d=australnetworks.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=

australnetworks.com; h=content-type:mime-version:date

:content-transfer-encoding:message-id:subject:to:from; s=dkim;

t=1774879096; x=1777471097; bh=NPuxarvEwynG+C18FxFWNgtw79j7HCL0

KEx5HJHjwqw=; b=bymau3jXHh1I1ZkpDfo2R0V3onKXwjRtmXBUgnx+GVE2zg67

9F84A0O6pIbIWM97h4dx+tSwlqeX7leVcCIKJei9ON50iF05fY6BhnzQLGVSgb5e

ilDw++MhWxfkeUSbQSPmPTiuwmonSRfLRrRWE7yvLKhOwxZGR5ZxR7D8zXo=

X-Virus-Scanned: Debian amavisd-new at mail.australnetworks.com

Received: from mail.australnetworks.com ([127.0.0.1])

by mail.australnetworks.com (mail.australnetworks.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id k6XiSVq7ejmo for ;

Mon, 30 Mar 2026 13:58:16 +0000 (UTC)

Received: from [127.0.0.1] (vps-291fd459.vps.ovh.ca [51.161.34.69])

by mail.australnetworks.com (Postfix) with ESMTPSA id 4fktBJ59zTz69HG

for ; Mon, 30 Mar 2026 13:58:16 +0000 (UTC)

From: sales@australnetworks.com

To: sales@nk.ca

Subject: =?UTF-8?Q?Cam_Inspector_=E2=80=94_Field_inspection?=

=?UTF-8?Q?s=2C_quotations_=26_professional_PDF_del?= =?UTF-8?Q?ivery?=

Message-ID: <1912c7fb-991e-6cab-0917-c71e0ec4d9c9@australnetworks.com>

Content-Transfer-Encoding: quoted-printable

Date: Mon, 30 Mar 2026 13:58:16 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CamInspector - Field Inspections and Quotations Made Easy!

CamInspector



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?Q?Cam_Inspector_=E2=80=94_Field_inspection?=

=?UTF-8?Q?s=2C_quotations_=26_professional_PDF_del?= =?UTF-8?Q?ivery?=

Web/SEO/App spam from Microsoft Outlook Part 2

In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYSPR03MB7620:EE_|TYSPR03MB7619:EE_

x-ms-office365-filtering-correlation-id: 057cd4e5-2b17-470b-90d2-08de8e5f29da

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|10112599003|31061999003|39105399006|37011999003|461199028|15030799006|15080799012|19110799012|8060799015|8062599012|40105399003|51015399003|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

=?utf-8?B?YXJTM294NERzeGZZOVl1VlZsVHJIN0cwWHE4NG1qY3ZScUN1aUxLWTBGUXFH?=

=?utf-8?B?d083MFFybGFsODhzaDdXY2QvTFdPT2NBUHhKdHRFRzhDNkRGQ1V1Y3VpRUNT?=

=?utf-8?B?V1huUmJpSER4UXFndEF6czN3OENsakhqLytyd24rQzRXVVlSbjBod2luWnJX?=

=?utf-8?B?bU5tLzlXQURLSzRhdEpzbWJCeS9IQW5TM21mM2dHUFZaSEFXRTBXdzV0aklo?=

=?utf-8?B?RVMxcEhjckNpcmhkbUxEd2dtZmxRUUxlZjdDU3J5NGt1TnpJdElLUzhPd1Ro?=

=?utf-8?B?Q00xVWg3Y1J2aWRqd2U0WEZlVU5qTFZRc1ZlUFhuSU9ad0FhNEdWUDFRMFFm?=

=?utf-8?B?WVpKcmJjVnE2cnRXZkV1SE9sT3pid2FldmhVSTZmOFE4dWJIQXc3T0Z2Rzg0?=

=?utf-8?B?U3RPZmdmcy95RXJwKzRkUGZWUHd6d0F5dEMvNFhFcGZ6SkJud3NUY1ljMFBz?=

=?utf-8?B?emhtZWtPU0YwLzlncGV4RUJCK1hkV3RqNUtqYTdNL3ZNUjdBeDJ4dkZNenhP?=

=?utf-8?B?Tk5EWUJJZldNRWtCVnBNV21BVExVNDdlZnp2MVBEcWgvdzc5MzhFblRFNjZF?=

=?utf-8?B?c2VNZGdST1dpcFNpK2h6dHhDQWhMbXBoY085eW43VXlQRGRLb3FHVUtpKzF4?=

=?utf-8?B?SkhLMGJ5RE93ZmFDTlJFNzBMVWdNWWhZUEcycFFlWUtrWnMvZDdMTStlWTYv?=

=?utf-8?B?WkloNFVFUzBwNFk3MWs1RHBPTWNKT0hWQ2QzdU9EV3B3MTZmSDRwM0ZJbXRM?=

=?utf-8?B?OGc4S0VMcEVpVDQzNUU3cmt6UVJOd001NzlQYWRDTHM1T2R4VmlJUTNCQ0c0?=

=?utf-8?B?VHNmekJFM0lnQWt4Mk1RWGkyTkFZcjRydGRQQWZLQmFGcnZkcmNiYmJiaWow?=

=?utf-8?B?R3FmLzZQNXJLaVg1dDdBaFdaSlZvdm5ERkFORG1HL1pxa2d3LzdrNlp3RDIv?=

=?utf-8?B?dzRObm1JK2F3b1YvdkFIWGRrOFpsMVNTVDh3ZklodjgwNHhjNmZHRzBCQmMv?=

=?utf-8?B?TFpXdGsvMUJHUk9Fd0ZIci9zdElXODRVZGhtamhnVEp2ejVmTHdmbGtIcWUv?=

=?utf-8?B?bUdkS3l5MXpPRVNxb1d0akNrYTVVem9ISW45NEQ0ZFNQekZPWFVCVlFTd0Rk?=

=?utf-8?B?VHpLZDU3MlQxMHBOTzJZTjdFVXpJN0s0U25meWoxWEVzTlZyQ1lHN053clFy?=

=?utf-8?B?NTNacFczbGlaQzliTlNiZ0VQZzVtWVZDYnhPWkFWZ2Z2VGg1YjVJTVV1dW5S?=

=?utf-8?B?Vnh1YlNSR1AvcEsvSURPRStOcE9sSktqZUUrZXJRaWpxRFVpa09OMjVROXdn?=

=?utf-8?B?WHVPRHlVdVpreWphNWpPUXBKYVNzajFFSHozNWhUQ2dIVWhoaHdnM0RPY0Vq?=

=?utf-8?B?cGJOMGNtMERDSkc0Q3RKRG9uOHRWdDgrcFo3aUpTeWhmQnAxb2Joa2s5MS84?=

=?utf-8?Q?OMSLFM2g?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?TSs0aDBLR0JUME5qM0RXWjJLWkFDVVZjZHQrbmdmblZFaHl5RlNaMGlzQmls?=

=?utf-8?B?MnFKUTZtdTdNT2w0Uk0wRkxZcit1UUhMRXVXb3VmcFNUcFhDeXl3ZkFzL0ty?=

=?utf-8?B?L1IwQXpISlVkSFJSdVhLbWcrcGdTYzJZdDNZSnBqbnhMc1VMUU5tcGhtTjhk?=

=?utf-8?B?RmNKT0dyUzYrbCs3ekZkc1RYM2NkSFFwaDg4YnNMMHVzMk5LRkdMYUxBS3M5?=

=?utf-8?B?TnZIa1U3eHNqQjNiNlF2VWZqNEFmNzBaZXUxTEYvSTkrV01tYUNTRjJvUWlm?=

=?utf-8?B?VXA1ZEFEMDlNYTZhbEU1QWU2NkRodE9lTzFrUTNwK0JTMHJJRXJnQitteUdH?=

=?utf-8?B?RTkvZ2FqV0lBTnkxTFlnVnRyaThaYXNpZHEyYVE4Z3ZEb1JQMTN6enlYZ0o3?=

=?utf-8?B?QjBydXZndDlwb2VmZlRkeG1hajR2cHhkRFR5SU5ESW1nbTlLVEZTQ2ZLcGp6?=

=?utf-8?B?L0trOFQ1OWh0RVo4K3QrdGZVQUl1YzErakt4dXpLQ1lpRXg5dUJaSE5jQ0dX?=

=?utf-8?B?V1FodzF5VmM1QUJsZm5YbTRwMTl0OXI2ZXcrYTJsRUN6YW4zYWlEenN0U2NI?=

=?utf-8?B?aXNwWEp5Y3JzYXdJZmt2Q2hRUU1EWmZLcFQ4U3F3V2JoVmFDelUrMWhlbFNU?=

=?utf-8?B?M1JwWWc1aWFRQlJTTGZlcVF1K2ZuQlNMaWFzL2JTNmc1WVhvSzNmNVF2MFZt?=

=?utf-8?B?eFEvS3RHemIzTmY2ejR2eEVOUjdIOWx2THczS1J4ZkRJTTg1QkYzSkVyRUZG?=

=?utf-8?B?VGdTaTI0T2tOK2ZoVDlkYWJ6V29IREpRVEx3RHlpM2o1M3haN0tOYVp5UGdn?=

=?utf-8?B?N2JRMS9IdUZEdFp3SXFKT0FkMGRKTm5HOTJWSXRFTGp3QTVGNzM1VGFWZGlP?=

=?utf-8?B?TERyNjlsV0ZwbkJVaysrSTRlaDMxaktWVmZNamFobGN2WnBycWY0cmNBd09L?=

=?utf-8?B?QmRFcDU4eEVjWGc1MkxvUXlON210VjFZMS83VzVRZDV3YzhpNzJQeEd0bVNt?=

=?utf-8?B?eFI0NzVDOUlRWE5rY284Z1lTTmtPUEVmalpBTVVHRzBsdkxlNThPSW9IeHdI?=

=?utf-8?B?Z3V0WHVxWmZScFdEem1PTzVpMlJFaHRxT0ljTEk4K3BZa2M2cURxT293ZjNn?=

=?utf-8?B?cnVUUFFTNmg0cEFRWWVtY0w3cE5hVXovMEo2UUQwUFo3Nkl0R3hwNk5tNFBQ?=

=?utf-8?B?YzNFbFJqZ1BPa1dURm5vdU81VFdvTTZIaWh3VWxCbE5FS1BUTGJhdVNEL2ow?=

=?utf-8?B?bU5BTXJ3ODY5Q0NOV2M3eVN3NlIxRXNqS2RsNmFENnRpdVFLam5heU9aTklo?=

=?utf-8?B?TWp0c1lmOTdZSkNkL0RuODU0YzBvRS90Vld4cVdtMHl5MVVVbTlsSnllbHlh?=

=?utf-8?B?anI2bUhBUXB3Z1A1OU1Dem9oSC9ZWGR6RGgzYStCeHpKUHJIcS84bzJNR2lk?=

=?utf-8?B?eEVPTWs2dHFFd08zSWlzeUtJeVgyWjRuT0ZaYmlBV2hjci9laTVZQVMwa2NO?=

=?utf-8?B?WGx3NmhSeDE5TkRLdi9UNEFkeW9odUIwL0ZCM3k3MTExd0NBUmNhblQ2UG5G?=

=?utf-8?B?WGR6M1lsbjhGUmVYaWI4N0pMeTVUUXRKYkdGSTRHVC9HWDRueDlRV01nd25o?=

=?utf-8?B?dkEzQmxSenRJRFg2aU9WTVQzK3NDRDdBdVplVS8xY1FiZkhWcmw5QXltbnM1?=

=?utf-8?B?V0tDS053TEhERmhueFFUQU1mK2ZDVE0rRFZSbXZHQjJQVEdmbUI0djE2SnEx?=

=?utf-8?B?Q1BHV2QralA3bjVrNjVyeTFERHZQL21DL3V4K2tEQ20reDU3aElQMGZ4dnpL?=

=?utf-8?B?a1Ywd1kzTFhNNVY4Um1rM0g1MU4yRjZjc0tDMW5yaVNJRFhwQyt4Vy90ZFNa?=

=?utf-8?B?Nk5IMVZHTjRTQmhBSkIyWFpBNkdQK3RpT1NMOGVzdFRnVnBrTkl6N2tmTnhk?=

=?utf-8?Q?VFSrz9qCHd2Ow3qozoAAbvNbbAMhTs5u?=

Content-Type: multipart/alternative;

boundary="_000_TYSPR03MB76200E29CC673E4FDEDB35E69252ATYSPR03MB7620apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYSPR03MB7620.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 057cd4e5-2b17-470b-90d2-08de8e5f29da

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Mar 2026 13:20:50.7830

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYSPR03MB7619



--_000_TYSPR03MB76200E29CC673E4FDEDB35E69252ATYSPR03MB7620apcp_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



SGVsbG8sDQoNCkkgY2hlY2tlZCB5b3VyIHdlYnNpdGUgeW91IGhhdmUgYW4gaW1wcmVzc2l2ZSBz

aXRlIGJ1dCByYW5raW5nIGlzIG5vdCBnb29kIG9uIEdvb2dsZSwgWWFob28gYW5kIEJpbmcuDQoN

CldvdWxkIHlvdSBsaWtlIHRvIG9wdGltaXplIHlvdXIgc2l0ZT8gSSB3aWxsIGJlIGhhcHB5IHRv

IHNoYXJlIHdpdGggeW91IG91ciBwcmljaW5nIGFuZCBwcm9wb3NhbHMuDQoNCkxldCBtZSBrbm93

IElmIHlvdSBhcmUgaW50ZXJlc3RlZCwgSSB3aWxsIHNlbmQgeW91IG91ciBTRU8gUGFja2FnZXMg

YW5kIHByaWNlIGxpc3QuDQoNClRoYW5rcyzigILigILigILigIINCg==



--_000_TYSPR03MB76200E29CC673E4FDEDB35E69252ATYSPR03MB7620apcp_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



Hello,



I checked your website you have an impressive site but ranking is not good on Google, Yahoo and Bing.



Would you like to optimize your site? I will be happy to share with you our pricing and proposals.



Let me know If you are interested, I will send you our SEO Packages and price list.



Thanks,   

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7Ena-00000000AaU-16b3

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:45:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 09:45:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013083.outbound.protection.outlook.com ([52.103.74.83]:55162 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7CZ8-000000008zO-49eD

for sales@nk.ca;

Mon, 30 Mar 2026 07:22:14 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=AI01f4+cjDCuH4Rza5TzMNOxt0HCf9tffEKakL8fXSfedCOsxFE+8cBMRTCsHqtKOMg6aLisSuc6Pjkiwn1/K9CSPU4L1gdxcmaRQpDrdikbSVU/eqR840R3gnYW+sCKzzr8PLpn3Whtf8eEXChOcMsa0nx60jp8xTAjsbO3l2TM8UY5u+ppLBdQAOaSmKRwK/mVQLGthJ/KfAV8F0FMyBW/6OQRM3KXaOIxU3ImmSZm7vvXNFmXCuz9sWyuXGjA2K7y9wAXlj9DRPK7FEF9exSMFeLp/cEw8RIPSwzY33o2ye7WmaSCGvJC5XSQmwcRUFSzyTownnFVq+mOyA7ulg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=9Z7wokOPS61XvEr2hEksSb8wWvJ+fbzQV9KD4tI78kg=;

b=W0ZkH0U43qKIlrenymGg3ZQOteTmlfXyJBQLDQgUN5Q/aatFBuX/11tmxKRqGgDmG/jN0qHvDfRRHmcKrHSgDNoyP+3F4O1UaVjI0SwjA0SgqKsrz9Q84LpMwu6aGrHlaJJlnkUsMZ5E+qWeOELGaOSmr+Rh7xGRDzw8DFOTvJKuD2MqpZZ+RJgu69yRu+NtgzKFpE9+jEssDYKgxWSx3/lGMry9nl6J7a0wW2GW3I4kkzYw+aHONKrfGA0eDHOdT3grrmke3zv2iiSf5Q8dtfYAlVa8HUQ8t0d9VfdKyacT8LgwzaTIUPo2kYE7y0o6mwDLQyc97aFLi0P+HMepAw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=9Z7wokOPS61XvEr2hEksSb8wWvJ+fbzQV9KD4tI78kg=;

b=oyb9uEYji/fi5NcHtmeOYUSI6RMU57iZm6C0dwIsebQoXbJ2fH1ZMf3j8UMIjMUSSfdu76atAGiYuCMHbEOVtKhaVDbxS2phTLS6ol2XjSGn9TIJ0/z2d/mluurtmhxSzAHEdA8kg41CV3veeOYemaL2Dym5vDwvrHG7aYThtRNyaZyJUVVwf1haEJPuNJ17QPpp7QUVZw70gYxqXa7WR6SU+e//WVx0If2KC7rWrVnJilh4YGSmfaoEwvG4lthbJAOkkDNSGg3xPGJsVoiwc+9I/A0EmTD6mrtTSWoLvHMVQNS6F/O5uRTzXmZ6qoGhLfFx9I1i+JVTdyYKJ/StWQ==

Received: from TYSPR03MB7620.apcprd03.prod.outlook.com (2603:1096:400:431::13)

by TYSPR03MB7619.apcprd03.prod.outlook.com (2603:1096:400:412::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.28; Mon, 30 Mar

2026 13:20:50 +0000

Received: from TYSPR03MB7620.apcprd03.prod.outlook.com

([fe80::446b:6474:15d0:64d6]) by TYSPR03MB7620.apcprd03.prod.outlook.com

([fe80::446b:6474:15d0:64d6%4]) with mapi id 15.20.9745.027; Mon, 30 Mar 2026

13:20:50 +0000

From: Mariya Joseph

To: Mariya Joseph

Subject: Re:

Thread-Index: AQHctvPXigXIqI9EkkqZj5kaSDzNurW1h0ZcgAAB7B6AAACUZIARl1ZygAABA7k=

Date: Mon, 30 Mar 2026 13:20:50 +0000

Message-ID:



References:



































































































































Web/SEO/App spam from Microsoft Outlook Part 2

Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[2603:1096:308:0:0:0:0:273 listed in]

[dnsbl.ahbl.org]

[2603:1096:308:0:0:0:0:273 listed in]

[dnsbl.ahbl.org]

[2603:1096:308:0:0:0:0:273 listed in]

[dnsbl.ahbl.org]

[2603:1096:308:0:0:0:0:273 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[roshankumar6784(at)hotmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[roshankumar6784(at)hotmail.com]

1.2 MISSING_HEADERS Missing To: header

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.66.61 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Simple fixes to improve your website + SEO



--_000_PS1PPFFE521F52BD2B54773C0CEB5F70F44AB52APS1PPFFE521F52B_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

Would you be interested in building or rebuilding your website?

Provide Services:-

Redesigning =96 Brand New Design as per the latest market trends.

SEO (Search Engine Optimization) =96 Improve your website ranking on Google=

, increase organic traffic, and boost online visibility for better business=

growth.

Functionality =96 CMS, Newsletter Subscription, Ecommerce, Shopping Cart, P=

ayment Gateway, etc.

Landing Pages =96 Highly optimized landing pages for better conversion.

Responsive Designing =96 100% compatible with all devices like mobile, tabl=

et, laptop, desktop, and all web browsers.

If this sounds good, please share your requirements.

We offer competitive and flexible pricing.

Thanks & Regards,

Roshan





--_000_PS1PPFFE521F52BD2B54773C0CEB5F70F44AB52APS1PPFFE521F52B_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Hi,



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Would you be interested in building or rebuilding your website?
>


Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Provide Services:-



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Redesigning =96 Brand New Design as per the latest market trend=

s.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

SEO (Search Engine Optimization) =96 Improve your website ranki=

ng on Google, increase organic traffic, and boost online visibility for bet=

ter business growth.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Functionality =96 CMS, Newsletter Subscription, Ecommerce, Shop=

ping Cart, Payment Gateway, etc.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Landing Pages =96 Highly optimized landing pages for better con=

version.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Responsive Designing =96 100% compatible with all devices like =

mobile, tablet, laptop, desktop, and all web browsers.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

If this sounds good, please share your requirements.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

We offer competitive and flexible pricing.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thanks & Regards,


Roshan



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_PS1PPFFE521F52BD2B54773C0CEB5F70F44AB52APS1PPFFE521F52B_--

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 06:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7C2j-00000000Cip-2rz6

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 06:48:33 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 06:48:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012061.outbound.protection.outlook.com ([52.103.66.61]:37117 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7BUT-000000000VI-2H3g

for sales@nk.ca;

Mon, 30 Mar 2026 06:13:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=DUXT6uZW0XAlVGoVUsF0pmM3yBPgXuJU+2fTATSwbahdWN2RMhYX419IeuOvOLCSK1F0FTObUbopD3quHVxJLqYQAskg3kuSBZ+1E/L78tZXetNgpeVG2E/P4v7Lp3bLaykuW6vhpIuyRzGaIXGFLxNPNS6Hpa1RvJOnhava7pvQjZzux9H41wfykV4tzefdEjEOA1/ak01ZOxL7IzYHLunkcc/9Lw8g5mdEYuIMQp9hxDTKLuddm+aAQJtSKKskECMOQsgO4WE+FkUrJg+TyTZ2aKa5nmiEmR4w69gGGtb2EVjIqX3e63KhYyHHjv7MxlBRbEA3FfLxc6xedeRZgg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=LYJYZFV25MeaEJbG2LZ3nCLlO3x7LQHXFqGhPYNawL8=;

b=XcmoZgCx3d2DRya+EWKUKDbSVt7/9LxRS+GBQ9qbyKgZs6UhAlcrnSVUm5X3FK6lksIgWu0MjKA0dJmiRfARcFuVvcYAg7lPS+i2wPkBmTAQdDZYjWs+VbIAEaEnumHjRnEzDEU8400EGgu6Y7V0KJH97HPuvWvO1YqO7+DN1NfIjaYqA4JgqnT7IZBW1Gx8EIUooWLAzvWT9PrHObBA4Y2ioOOCSM2okucJ0LdPOLXEBMXLEBtxO3RaDiAgVVQp3Nxa1k1FP2jfdd8iMd2emh9Ia6elNYbdThwMAi/yjDfrfZd/oAQ7bjU79loYQFVjC9ebNH8/bl0+syR9j0zmYQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=LYJYZFV25MeaEJbG2LZ3nCLlO3x7LQHXFqGhPYNawL8=;

b=F7b1GB9fiQ02L5slpjjQhHPqE2oUlmoLhbJDpih78UEjs5B3ESXDoitYnafMfdOkVgH/lNRE8WtEuAHLNL2sbITU94uiezWsCZNOZghWZwm4cza9DLIfv2kfHU0MWxkwbtYV/Uy3mSTpxlYUkk6J6CikI8egxn362HlW5TwZ6bBohGp+ar8G7dmRpbHoAxK3RayHQsA09QPhvNHx4ZBNmz7HtuwnRx0Xj97TNynsOEFBy9Yq4NPQm/M3UZ1eDUjSRzjTmWxiYPppQEkrn3PjuN63lcdMOrbPZ+kSj8LsSszPgP+HkqkS73kze1yzi3vtMPPgUDVEjuJdgthwr/SgVQ==

Received: from PS1PPFFE521F52B.apcprd06.prod.outlook.com (2603:1096:308::273)

by SI2PR06MB5140.apcprd06.prod.outlook.com (2603:1096:4:1af::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.28; Mon, 30 Mar

2026 12:11:52 +0000

Received: from PS1PPFFE521F52B.apcprd06.prod.outlook.com

([fe80::bcc9:39d8:da93:ee62]) by PS1PPFFE521F52B.apcprd06.prod.outlook.com

([fe80::bcc9:39d8:da93:ee62%6]) with mapi id 15.20.9723.019; Mon, 30 Mar 2026

12:11:52 +0000

From: Roshan Kumar

Subject: Simple fixes to improve your website + SEO

Thread-Topic: Simple fixes to improve your website + SEO

Thread-Index: AQHcwD4ozW/ezUqM8U6MpSSuVkpVFA==

Date: Mon, 30 Mar 2026 12:11:51 +0000

Message-ID:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PS1PPFFE521F52B:EE_|SI2PR06MB5140:EE_

x-ms-office365-filtering-correlation-id: 624810e9-037a-4250-ca6d-08de8e5586e5

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|24121999003|15030799006|15080799012|8060799015|8062599012|22091999003|24071999003|31061999003|37011999003|461199028|20031999003|39105399006|12121999013|19110799012|440099028|3412199025|30101999003|12091999003|102099032|56001999003|56899033|40105399003|51015399003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?bGNHsVzkquCqVjoSmRqCgXGrjRpryGNV9TGe2B37Yx7xwn8Dtd+Rj9+U?=

=?Windows-1252?Q?L9r1dCzFuw1VyjEuil9FoTkxXM+MlAWoPyUBPdliGWBpD1XUPbrsu5Ls?=

=?Windows-1252?Q?UJWtpIwr1SNfnRQxzCA6wbYeTlkIyD4fQbDzbIt8OxRPAz3FPEse7s8N?=

=?Windows-1252?Q?BmrFjljQZEH2sczZJViGXd59FVIs/C5lLTSPRepikq3euOGl35Nkald7?=

=?Windows-1252?Q?GYqxI9Zn1JkVV90/se4KL40invFvB9It8oHGNNZ0OT58WNAe5P9WCvig?=

=?Windows-1252?Q?RbzdaxFwJFJU4EPPg502hb0qtVS964i1sSZeL/PBu6rdyLMm2AJcVIeU?=

=?Windows-1252?Q?fU9K9XRpAuCIULdOzVscZUkw3rDfYW8kN4amtXu6Rmk5detkFEsB4CqW?=

=?Windows-1252?Q?QDo38TaW07QlfTw6HRS/BZpVtx1CCyg/+QdAsLz5leU1A31ee7OOkHqf?=

=?Windows-1252?Q?FtNybWkwLstV2zzjp83RNsv8XoHUjezBLqBNNwctUoLa29LpMs5swu9B?=

=?Windows-1252?Q?rYqV736PyRE6TcqVmPY1iWekdZZ6FX04KkAE2b4E1/tO2D9VosBuR4MZ?=

=?Windows-1252?Q?hQXpzko4CtHOxmf+h2vJjWAwTEEPlOeimui7cZSiSx4t2YWsqPfaHt6b?=

=?Windows-1252?Q?/SZRZiZtYU8vjHqv7VBbKgaUVOwytqIDSSIZYQmuHlIqvgv0L2Ry0HUC?=

=?Windows-1252?Q?4ipnpPdVx6Qcxl/Ec/FyGq/BXd26rwmKQl0le0vILxwNIzge0b/Hen1V?=

=?Windows-1252?Q?Ta+rwnLf3gl8ORapgDfJ1smGvMUAlyhirTHSVaA9BpOxTWQKHW6UssY6?=

=?Windows-1252?Q?KvJCNp9KrpqG9gIiCZKKLbOQ187CCg0+wHoU5pRVT/Z++vIAZY+zXJom?=

=?Windows-1252?Q?LAPCHak+ZIT/pmvW7i3/ujGqRQudJCqbfxyrgUe3zJPXx2zsOuyHPJzw?=

=?Windows-1252?Q?WOjAbAKi1/evofqUHCmaLeSR6u0GGfb+8gvWWeJhZGjsUgjZq8bs88aE?=

=?Windows-1252?Q?TFJpkgfbGCvIqDwvz2ZFmoxOwr70cRktVyPq+8fvYBz+BNiedtZkhwYr?=

=?Windows-1252?Q?pjkNKiIBETDAdOdVr5gXi96tNys+60MVQHccsEFWL8jAFCjxhCDtkqMX?=

=?Windows-1252?Q?mz+kBLWTPOFxgZadZNrVY97kbRcIqNkVYR7WYj1xpf4sgmWGq3ivTcVd?=

=?Windows-1252?Q?5Xm7KfR0hOdLg6b8mLpwzWBMGZBycYlaehNB9ehQthOj3PoNdsa0xl0f?=

=?Windows-1252?Q?DlucQy8nDR0/tB1csr5PgvXYBWd8T7hjKeqpag3LYmJsNPL/abaHVphq?=

=?Windows-1252?Q?gboO7QTCcdmvrOv0LXINxsaIyfwibV8ncqemtJYUhrlNBETF?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?HU4lLuglOjRpOXOBA0jGufGxxGTtpmH1ruyPK0h/xL/G8UaywQEijApB?=

=?Windows-1252?Q?tzzFQhMYlGMhKfWfii6cx8XIYaI1/kQ+3L27hzyRgSvV6lxB7JZmduL1?=

=?Windows-1252?Q?iS22JX6qp+Js1wIhXCG21I+FkSZDtr7yx48tedtghmYYEl1hipPrtzSF?=

=?Windows-1252?Q?/u1PvGa4ccJEUac9bqzYGl3qoqUByenO/NQBrtx+o2nVRi6eJV6y5tny?=

=?Windows-1252?Q?VfDuWNDW2hdCf7t3iqND4VpLCPneqfE6NWp8RmnI3JCrp+2khb4vt+7e?=

=?Windows-1252?Q?aI08+BGHOGvRiqXgLetn+b2iQfnp7njgxRpFA1QUr2Z00wAB0h85exmQ?=

=?Windows-1252?Q?oghn3WDUUxQMlgilcZT/svWrVufP2TZpUPO4v6Hl4r8h9SLF28YMvIsc?=

=?Windows-1252?Q?lxr3+CbHLgM54tuhLjYMejH4bYDE/WbzDkRHnU3I6JLDHJhQ45Y8oUqz?=

=?Windows-1252?Q?jjSJ1hSYidQlSFGF4SIybD4fprotgw+bdFhKGijceNgIQirXjvzo+lth?=

=?Windows-1252?Q?d/CI45jDVeDrBLN0ki3/oHPebY3PVBooE0XhFHilDoCLhjlOEh+4+gaS?=

=?Windows-1252?Q?zNzk2jpo8C0OHJgDUdvwrIwpbs3PUtaa9apn/VOPWd+shDFcts3BsACl?=

=?Windows-1252?Q?SY/p5k38kBu8DZXeSryWUBczt4VLci1sb8O6eJLwacGPUH4OqKB8HvpQ?=

=?Windows-1252?Q?j1tKn6s8lkw7sthVeXb2a+szA+3YijZiPLCdx0A8NPNJfYBZSHoSW52K?=

=?Windows-1252?Q?X4xzjiRqDjyCj+d6mP/HlOD5Ix1fb4fbEboBQmbfifJ6UI3kC4euavDx?=

=?Windows-1252?Q?YGmgDCtrrlMdsURLRBzWaadUSuXpGU+eALzbnHZoc1PUCd1slNXCz4sw?=

=?Windows-1252?Q?8Dx4lzDmqj+CxUJswZvFLwKNH+zijz9xKqL590/4Fh26clcqi6/C+k8p?=

=?Windows-1252?Q?z9imx18J25pnC7BzT934vUU239gWDd9qN3380REhCmGLM/KUfPqc6SkB?=

=?Windows-1252?Q?PlpCgnCn0wUVHqjjV5rDMvf25Zt1sN/88W8nDpqNfbAiZ6nypfcr94dU?=

=?Windows-1252?Q?F8GWa1Y5Bb8SKlakl7CXYEB3HZlVS58piGou42VgB3MHzKoy3ImiOk+G?=

=?Windows-1252?Q?1vUrRsBHqwaQ1ZJaw2s5g05LowasWy/l9ateIQf8S5n5DiNWCVJ8nksB?=

=?Windows-1252?Q?lkjCphGjsA+Sx0mrpRleIKfWZJ/CyOTWDYd/wkdfVrfLozc961HPhfcG?=

=?Windows-1252?Q?t7yyrs39Qddt4xJt8q1FkiIdYvrSHi/AMi2LOfUuoCiK6Sf+wmClbxGG?=

=?Windows-1252?Q?UyFAysB3nJsn6t78iqKcQZPO1/EfRJqT9ug736pNviSUjjC0JUgBTJHX?=

=?Windows-1252?Q?c3aY7Syx2Th3YL06VAE/4VRWV3qESUZw2PEzwYA5ZS2Qvmgi83XqapHd?=

=?Windows-1252?Q?DVd5TCyLmf8q38gDq0O2yqKxq5SBxiZsuv1bjYqLv5SSt0G3n76Z5dUs?=

=?Windows-1252?Q?I91m47vRJ5X4fuK2TaF+LWiAmRHYFZ+GickKqudgDHfUhi5nTDYfK29B?=

=?Windows-1252?Q?iv9VV8cnTwpX+XUd?=

Content-Type: multipart/alternative;

boundary="_000_PS1PPFFE521F52BD2B54773C0CEB5F70F44AB52APS1PPFFE521F52B_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-25b72.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PS1PPFFE521F52B.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 624810e9-037a-4250-ca6d-08de8e5586e5

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Mar 2026 12:11:51.9699

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR06MB5140

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Would you be interested in building or rebuilding your

website? Provide Services:- Redesigning – Brand New Design as per the latest

market trends. SEO (Search Engine Optimization) – Improve yo [...]

business Valuation spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 06:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7C2c-00000000Bv8-0hcl

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 06:48:26 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 06:48:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f44.google.com ([209.85.219.44]:50572)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7BQg-000000000NI-02N3

for sales@nk.ca;

Mon, 30 Mar 2026 06:09:22 -0600

Received: by mail-qv1-f44.google.com with SMTP id 6a1803df08f44-8a23f802e0cso4003866d6.1

for ; Mon, 30 Mar 2026 05:08:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=teaminvesttheadvisory.com; s=google; t=1774872500; x=1775477300; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=On4yRDDkKxSH1BtxbEtoEGk0UEPefZD6FSaNIRJfSqI=;

b=ILqGEfDije9JMX1c0O/MDM4oYK8cJNkoPlJqcDK6Gd6y+gakB5G2rbASZrrjn863u7

yQRdqacjbyFXPWoGf1P4i/74a//Z6dsl5kqotNPGTqEMsL54VSTnLjv8CwPAxf+KIMRA

LXpsBxSZNPbYQSSkypfJiA0A0WgHta7Qq7K6GBeIVWI55fPTe2qfFKLB8M4421i/vUBT

UemxYafmdpK5yC8MKq8SGyCrg5KAfMHUm7wOFMF6RY1Cx7tiVE/7v6PFzBZqEftNJdCJ

6zT2RlW553XDXaDREh2QoIwUu0VglrfVmqDVugoMjJDnsnm4rLWghmW66Ogroc3c4iL/

C5Aw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774872500; x=1775477300;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state:from

:to:cc:subject:date:message-id:reply-to;

bh=On4yRDDkKxSH1BtxbEtoEGk0UEPefZD6FSaNIRJfSqI=;

b=mwzyAuPv2slirp1ySLIb8D5zV9uFwpel9phJ+ZkjynW10oBR41z+tkl92UMph7ahPw

x4tSWYR5gfTyVbN5HPJs0hmRJDQkCq1J4b4ElPaE8EBpuW9o+0TLKmNO6M+jb2DDRFEQ

jKK/QZZC1KVqwazDZ5Xc2q02OmzZSijL7CouiQk+MOecmND8Fq1Nz+fDrzPiV1npH6Za

S2rQlrSyWIYj7WR3Vm/pPxKovAiPVd2Hg83/o1H1xQrVRHXSGGEzt3Uugh642RRvOiKI

w+M7bohQx1CIkyIS+LmXgCOXJfqYaB4p2t9+UMjeTPalFKZ356ztEQ0kMyvc9OOW7KRq

i3+Q==

X-Gm-Message-State: AOJu0YwZuh0plIbwrTFAXeJIkOTY+9idZMHbg8GaLeWDVaS1RprTI5t9

vuL5ntLe8PrTGRnMxsu365yQKmytnerka3GCSbqP2/tbjzGwxGkJtqKz5RPd5vBzjGvgglhw6Rl

hL77mEg==

X-Gm-Gg: ATEYQzw8oIPe7/ho1RmF/VfH6yGExTw2i34brFRqYlXNDGZ/WWaPK9DTQnipOtgFZz9

IaOH5evAMWMd3FIFT7Vix85kw2EiLpfZoEXwUcGHldm+LQgQ1WsD8a2/sgbSrkDwmDOvKlVatOM

EeRclGI/0zY407fpuBx6ccSLsnrUGRzf8sIH9Dv+bSdkhyg3I7/oBEGdMifWC4fJCIgfpz+tcOx

b9er3j5necSbH6f6w4trt5XdoJQeHNHPSraZ+ZJLOQr5vTCVrdxUsBKy8Es7RHZ53AApVt3Z2Kv

A3qdq3CWdiZ588P0n0TnMCxGE2pXLMCJ6ZbJ+fjau6VJO/XHACTzgZMQeRpR9HEaDS85rNXW3r0

YAMJWHc/fkhEv1BtL/lQuNCmpqtcbXsUr5hFqcbBIHAUrRV2KpvrHiv484JLv1Ye0OCB2wiKmQ4

77koJDWR8u/Y7WSq77HxGLQbpCNnLTJtoBZIam5OGhpt4OXrH/u8AAnikErNFERNBoZ51iRhi7q

2keBom7XYcYs4h+qtk1BX+LZamEE4ECQVNW1SvAzo65oy6z+uNG/XXyZtj2ZCRYsXvh5au46Y/Q

G6WyUQRNKui8hXI=

X-Received: by 2002:ad4:596b:0:b0:89a:14ef:8eab with SMTP id 6a1803df08f44-89ce8dc03bamr164033846d6.41.1774872499357;

Mon, 30 Mar 2026 05:08:19 -0700 (PDT)

Received: from 019d3ea5-11b1-70eb-a522-1577e231f612.local (ec2-3-12-146-113.us-east-2.compute.amazonaws.com. [3.12.146.113])

by smtp.gmail.com with ESMTPSA id 6a1803df08f44-89ecc1908f0sm66249196d6.20.2026.03.30.05.08.18

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 30 Mar 2026 05:08:19 -0700 (PDT)

Message-ID:

<019d3ea5-11b1-70eb-a522-1577e231f612@teaminvesttheadvisory.com>

In-Reply-To:

<019d1fe8-7f25-7687-a9e3-e9250ff65909@teaminvesttheadvisory.com>

References:

<019d1fe8-7f25-7687-a9e3-e9250ff65909@teaminvesttheadvisory.com>

From: Oliver Bogner

To: sales@nk.ca

Subject: Re: Selling Netknow Internet Knowledge

Content-Transfer-Encoding: quoted-printable

Date: Mon, 30 Mar 2026 12:08:18 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Just checking in Best, Oliver Bogner Managing Partner | The

Advisory Investment Bank Top 3 Lower Middle Market Investment Bank on Axial

- 2025 List 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO A: 269 S Beverly

Dr. Beverl [...]



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

[209.85.219.44 listed in dnsbl.ahbl.org]

[209.85.219.44 listed in dnsbl.ahbl.org]

[209.85.219.44 listed in dnsbl.ahbl.org]

[3.12.146.113 listed in dnsbl.ahbl.org]

[3.12.146.113 listed in dnsbl.ahbl.org]

[3.12.146.113 listed in dnsbl.ahbl.org]

[3.12.146.113 listed in dnsbl.ahbl.org]

business Valuation spam from Google Gmail Part 2

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.44 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.44 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.44 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.44 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.44 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.44 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 LOTS_OF_MONEY Huge... sums of money

2.3 MONEY_NOHTML Lots of money in plain text

Subject: {SPAM?} Re: Selling Netknow Internet Knowledge



Just checking in



Best,



Oliver Bogner

Managing Partner | The Advisory =

Investment Bank

Top 3 Lower Middle Market Investment Bank on Axial - 2025 =

List

2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

A: 269 S Beverly Dr. Beverly Hills, CA 9021



On Tue, March 24, 2026 12:53 =

PM, Oliver Bogner

[development@teaminvesttheadvisory.com]> wrote:



> Greetings,

>=20

> We potentially have an interested buyer for Netknow Internet Knowledge.

>=20

> I'm Oliver Bogner, Managing Partner at The Advisory Investment Bank =

(Top 5 Lower Middle Market, 2025). I've been in your shoes as an operator =

and sold my past companies; now I head up the Advisory, where we help other=

founders like us exit. I've been featured on Forbes 30 under 30 2 times, =

INC 5,000 CEO, and many more.

>=20

> Valuations in your space are very high=

right now - companies doing $1M in profit get valuations up to 12 x.

>=20

> Do you have some time next week to connect?

>=20

>=20

> Best,

>=20

> Oliver Bogner

> Managing Partner | The Advisory Investment Bank

> Top 3 Lower Middle Market Investment Bank on Axial - 2025 List

> 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> A: 269 S Beverly Dr. =

Beverly Hills, CA 9021

>=20

>

Telnet communications phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 Mar 2026 22:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7463-00000000MNI-3hiB

for dave@doctor.nl2k.ab.ca;

Sun, 29 Mar 2026 22:19:27 -0600

Resent-From: The Doctor

Resent-Date: Sun, 29 Mar 2026 22:19:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [193.206.153.114] (port=52994 helo=mx1.le.infn.it)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w72wY-00000000JS5-3WQU

for sales@nk.ca;

Sun, 29 Mar 2026 21:05:45 -0600

Received: from mx1.le.infn.it (localhost.localdomain [127.0.0.1])

by mx1.le.infn.it (Proxmox) with ESMTP id 9FE491214EA;

Mon, 30 Mar 2026 05:04:36 +0200 (CEST)

Received: from mailssl.le.infn.it (mailssl.le.infn.it [192.84.152.71])

by mx1.le.infn.it (Proxmox) with ESMTP id 8633B1214E9;

Mon, 30 Mar 2026 05:04:36 +0200 (CEST)

Received: from webmail.le.infn.it (webmail1.le.infn.it [193.206.153.152])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256)

(Client did not present a certificate)

(Authenticated sender: depaolis)

by mailssl.le.infn.it (Postfix) with ESMTPSA id 7CCA43000368;

Mon, 30 Mar 2026 05:04:36 +0200 (CEST)

MIME-Version: 1.0

Date: Sun, 29 Mar 2026 22:04:36 -0500

From: TELNET COMMUNICATIONS

To: undisclosed-recipients:;

Subject: ' Re-validate Your Telnet Email Account Now '

Message-ID:

X-Sender: email@telnetcommunications.com

Content-Type: multipart/alternative;

boundary="=_73bca9b86a90000b1938281798bd42b9"



--=_73bca9b86a90000b1938281798bd42b9

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset=US-ASCII;

format=flowed



Your Telnet Email Address is due for re-validation, only if you wish to

continue using the Telnet email / webmail services.

You'll no longer be able to send & receive emails if you don't

re-validate your Telnet email account immediately. Re-validate Your

Telnet Email Account Here [1]



-------------------------



(c)2026 Telnet Communications Ltd.







Links:

------

[1] https://telnetcommunications-email-revalidate.netlify.app/

--=_73bca9b86a90000b1938281798bd42b9

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8




=3DUTF-8" />
eva,sans-serif'>



























t-size: 10pt; font-family: verdana,geneva,sans-serif;">Your Telnet Email Ad=

dress is due for re-validation, only if you wish to continue using the Teln=

et email / webmail services.



t-size: 10pt; font-family: verdana,geneva,sans-serif;">You'll no longer be =

able to send & receive emails if you don't re-validate your Telnet emai=

l account immediately.



: 0px;">

tyle=3D"background-color: #0052cc; color: #ffffff; border-radius: 3.01px; f=

ont-size: 14px; text-decoration-color: currentcolor; text-decoration-line: =

none; text-decoration-style: solid; font-weight: 600; margin: 0px; vertical=

-align: baseline; padding: 4px 10px; line-height: 1.42861; display: inline-=

block; min-height: 1.42861em; border: 1px solid transparent;" title=3D"Re-v=

alidate Your Telnet Email Account Here" href=3D"https://telnetcommunication=

s-email-revalidate.netlify.app/" rel=3D"noopener">Re-validate Your
yle=3D"font-size: 10pt; font-family: verdana,geneva,sans-serif;">Telnet
pan>Email Account Here

-height: 2.1429; min-height: 0px;">


=3D"color: #999999; background-color: #999999; min-height: 1px; border: med=

ium;" />



rdana, geneva, sans-serif; color: #34495e;">©2026 Telnet Communication=

s Ltd.











--=_73bca9b86a90000b1938281798bd42b9--



Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 Mar 2026 22:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w745u-00000000MKE-459I

for dave@doctor.nl2k.ab.ca;

Sun, 29 Mar 2026 22:19:18 -0600

Resent-From: The Doctor

Resent-Date: Sun, 29 Mar 2026 22:19:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out203-205-221-240.mail.qq.com ([203.205.221.240]:36487)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w72JO-00000000HoT-2lxY

for root@nk.ca;

Sun, 29 Mar 2026 20:25:18 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=foxmail.com;

s=s201512; t=1774837448;

bh=UXHx9ucifMGd3O7Nz+eXX38iiuVY1SiqwkH/qLbb1tc=;

h=From:Subject:Date:To;

b=DjR+LbZNPGMBCSRb19GnQc3eYcLKD/r6tNVzaNEfbBe+aZwjkaZqrRxZnFcBuLND9

OuJ19wEl9RSCaMs3xvZL+wIMq1iyTdp6sih9x/OXXp8U1XStm4UoUQJEqI1QnzEjYU

LRT6WdCdMKuNOMD5mmGDpuuZTs8ZQPaHKVdLSG88=

X-QQ-XMRINFO: MPJ6Tf5t3I/ylTmHUqvI8+Wpn+Gzalws3A==

X-QQ-XMAILINFO: OemBQX/oPQM7LjPPt3tlSWKLw6ZiQ7+lQEGslLh3d6Gi4ZhP5uMEdbmaKEfe8p

2X1BVRTcIAbEvSWRKrxhoHNonpJMBqOxPTNoeGO9PLSK4/OFYu2s4oS1NV2DxG4ENYBwQw+sLgGD3

Plkpqp0I2lYOjYWS0Lbe+SfDRnWYmjpYMa5rcpn7GOGZ7HAOjx5yakEPaB4EImkkFMoQRrl6rxmmi

1dT9l7nFeMXiDwx0r1ZZwl78D9vedB+2sNzxRLGN44aFR/z8mc+BmXSMads5elxhdbitlNKAUIpGH

mGF9HzObQL++qcVgVYkQijUBwm4fRuGufTBrJ6mplbdkZ3xafXgqedBEr/kwIk+gIhzPc9Lpn63hX

o1SxUtknZr7JADJsZTHtc6lgr++llrcThWhaNCaYG3sMi5cXNoNl9tSBNj0eiJ7uJ6kB2iYRbGdN+

sFYxVCqbe/zg0iqEexyY3CPHsnZRSh9oYuJHQlBPBZGDaivlKqEZyVbKPo5If9Rdx7tpHAW7M6rga

3PQzWYRZDuI9UCRuqUoj6AC8sm02C6BYTJm3P5Hkq1OvKLtrMcVKg0Cd6zg8Wehq3IJ8z4u93udxO

0CW2hZWqhTEI7x5HdanNgzKrnbP40Am7X5MX0rH5ZVlPEHVc7QM51KKD5rVd73+Fyxx4E1fDDrN7w

5sqW96kIcYa/jOeulhFTbZW3ccW0u7riZz7p0OKNoOZOFJ/RVvtCOSQ5fk2c3WT3HOFmPlF8sR9QH

2T0+zdd8xQ8FftSoF3XT30lvpm+rhs4Pbkd8qLAvSMaEOYzX/VpTs9EehZ6nFgGzj9F1LMmrtZ1Vd

+AiftHqEkW637R5Xo2LgJzoL+WafrOtnwCa2p8DpswdLXdj8zA7pehePxoFVHxvk+qnX6Qn2cL3TZ

MYc/4P0mgCqWZ5DaKfR97tCgHviXE/mMfKcVGKNMqij19kZc8E5yI/4bqVgt/Dpku25o2I+VLiOZS

/R3HUjSLy2DK/ZcjtO7RxAdJ1NdJIi1PThW/VgdqcYtT7GOglTDB5vAHXfUwewjn8vc8xEaQAmf+2

HudZUiIpYsQ9u1hiaxNuHygg77RgeJoxdJFgjBaaZPKmCkI6ypvTevMzpruFZn27+75k8znp0uO2P

B+IbhMd2fsUjOCLPjXzWU5wbMTIIeh12T4Cs2ZJoyfd6kZ2tAIfodP5aOi03znspqNSZcJzpFUWD+

uMEAkc0XxOVQA8526GVTF9NszLXizAfjTckdWVWDCFeARPpIUuNVFP8ihIx7g8RNHZpWDm4szsPB2

NxHqwewgICErHWNy67huLnUv7/jMS6UhpviiHMeScbpPY57ExKwLxNvrEKzZeiGcBr9KppV7OTcj6

4aUp+XIhZwr73INEpzMYi1MuoK2rieRvHf9vcOQ==

From: "=?utf-8?B?bG9ybmEuZ2xvYmFsd2l0cy5z?="

Subject: =?utf-8?B?V2hvIElzIENvbXBldGluZyB3aXRoIE5LIFBBUlRT?=

=?utf-8?B?IElORFVTVFJJRVMgPyDigJQgQ3VzdG9tcyBEYXRh?=

=?utf-8?B?IEhhcyB0aGUgQW5zd2Vy?=

Mime-Version: 1.0

Content-Type: multipart/related;

type="multipart/alternative";

boundary="----=_NextPart_69C9DEB7_56DAB440_5B55F075"

Content-Transfer-Encoding: 8Bit

Date: Mon, 30 Mar 2026 10:23:51 +0800

X-Priority: 3

Disposition-Notification-To: "=?utf-8?B?bG9ybmEuZ2xvYmFsd2l0cy5z?="

Message-ID:

X-QQ-MIME: TCMime 1.0 by Tencent

X-Mailer: QQMail 2.x

X-QQ-Mailer: QQMail 2.x

X-QQ-mid: xmseza56-0t1774837431tmbdx1al3

To: "=?utf-8?B?cm9vdA==?="

X-Spam_score: 14.9

X-Spam_score_int: 149

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Director, We can help you track your customers’ real

trade records, including their historical purchasing volumes, supplier structure,

and pricing trends. This enables you to assess buyer quali [...]



Content analysis details: (14.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[203.205.221.240 listed in dnsbl.ahbl.org]

[203.205.221.240 listed in dnsbl.ahbl.org]

[203.205.221.240 listed in dnsbl.ahbl.org]

[203.205.221.240 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[203.205.221.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[203.205.221.240 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[203.205.221.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[203.205.221.240 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[203.205.221.240 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lorna.globalwits.s(at)foxmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 DYN_RDNS_AND_INLINE_IMAGE Contains image, and was sent by dynamic

rDNS

3.9 IMG_DIRECT_TO_MX No description available.

3.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr

1)

0.4 AC_FROM_MANY_DOTS Multiple periods in From user name

Subject: {SPAM?} =?utf-8?B?V2hvIElzIENvbXBldGluZyB3aXRoIE5LIFBBUlRT?=

=?utf-8?B?IElORFVTVFJJRVMgPyDigJQgQ3VzdG9tcyBEYXRh?=

=?utf-8?B?IEhhcyB0aGUgQW5zd2Vy?=



ear Director,

We can help you track your customers’ real trade records, including their historical purchasing volumes, supplier structure, and pricing trends. This enables you to assess buyer quality, identify customers with genuine purchasing power, and pinpoint the best timing to initiate cooperation.



Data example: HS Code 3902



If you are interested, we can have an approximately 15-minute online meeting to provide a free demonstration for your reference.



Best regards,







Lorna



Sales Manager

+86 15269112253(WhatsApp) lorna@globalwits.com

No.2 Guanzhuang Road, Chaoyang District,Beijing, P R China





TD Phish Part 1 from amazon

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 Mar 2026 15:35:00 -0600

Received: from s1.email.freshdesk.com ([18.235.53.110]:51101)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w6xlc-000000004zq-1z00

for dave@doctor.nl2k.ab.ca;

Sun, 29 Mar 2026 15:34:03 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1774820036;

s=fdusmail; d=freshdesk.com;

h=MIME-Version:Date:From:Reply-To:To:Message-ID:Subject:Content-Type:Content-Transfer-Encoding;

bh=6f4clJvceZiH7H/fsT3KS1Xm3Pq6A8W7SfgEF2nuTCU=;

b=j2SCLnvBnWBreLb5HCu8g7wYmK2nD1CK+jsfhv/6knVfsY/kWZMyYNjbJsIEN4bv

02wpC2lj8TK7wAeeexs8XuNkFjCs5ZutYzDi0hOkLdXUMQzJXWXYs0xtIqXgoIefWDI

oVe0ttrCm0hsAznIcnqappyTlIXC3Af7/o6/V9v/OrrstNaPJMSTFNiiVIlLnDWNnGm

9rfteuMI9+n6e2Z/toN7R8NomVxf42mrEkco7hEQvWOeYNat3yuW1fSmIz1gjA3HQCn

AUndiCS8wSIR1JufOSCGpCdt16y0j945eNZGozkmv7HJqLkmV21iXw6oZzCK0HoFJB+

9eFrz5Ey1Q==

MIME-Version: 1.0

X-Received: from ip-172-16-35-218.ec2.internal (EHLO freshdesk.com) ([172.16.35.218])

by smtpout.freshdesk.com (Freshworks SMTP Server) with ESMTPA ID c41b53d7.

for ;

Sun, 29 Mar 2026 21:33:02 +0000 (UTC)

Date: Sun, 29 Mar 2026 21:33:02 +0000

From: Default

Reply-To: Default

To: dave@doctor.nl2k.ab.ca

Message-ID: <69c99a8e885c2_1eaec865c44322128ec.sidekiq-frequent-fd-poduseast1-main5-green-689646bb86-tprwv@outbound-email.freshdesk.com>

Subject: TdBank : Important Account Security Message !

Content-Type: multipart/alternative;

boundary="--==_mimepart_69c99a8e8dc8f_1eaec865c443221293e";

charset=UTF-8

Content-Transfer-Encoding: 7bit

sent-on: 2026-03-29 21:33:02 +0000

X-FUP-PRIORITY: 5

X-SDS-INFO: M7eV1faaifXHdckHJRbKE2p5zRKSdXsRFsvhDxRIvYsMEKKBwbUMq21Nkdtwb6sKXEJ1aEVtk9e7g0O5ysTS3xnU90lLWVkP0eG3bO3Bdhc-5DrZSpR4iQfToF4nTO30H9y-vHy7r5ThuKxuzTsElZWhjEOhuiY76nFARulw5-WAvmVm6KztZWrT_VEPszFab4LObZuAxsFX6BqukWAX8w

X-MESSAGEID: Fr7DWki/ZfAnxG8VXSPJswOmvfgpgWnxN1ssCoidqVMF8294VftqeCIp/IT344zCARntiK/wb+V0X/fuSSiQCMxP4sGL88Xw2FmxkXKpX2qkuZ7fLxdqJ53Yf28GnwqbAybBAQDbH+P6Cg7Xt761EBFkjic10uiXH6nxnBp+86Q=

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: TD Bank Dear Customer, We would like to inform you that a

secure message containing important updates regarding your account has been

sent to you.



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[18.235.53.110 listed in dnsbl.ahbl.org]

[18.235.53.110 listed in dnsbl.ahbl.org]

[18.235.53.110 listed in dnsbl.ahbl.org]

[18.235.53.110 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[18.235.53.110 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[18.235.53.110 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[18.235.53.110 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[18.235.53.110 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} TdBank : Important Account Security Message !





----==_mimepart_69c99a8e8dc8f_1eaec865c443221293e

Content-Type: text/plain;

charset=UTF-8

Content-Transfer-Encoding: quoted-printable



TD Bank =0D

=0D

Dear Customer, =0D

=0D

We would like to inform you that a=C2=A0secure message=C2=A0containing i=

mportant updates regarding your account has been sent to you. =0D

=0D

For your protection, we use secure messaging to promptly notify you of a=

ny changes or activities related to your account security. =0D

=0D

View Secure Message =0D

=0D

This secure message contains sensitive information regarding your bankin=

g account. Please sign in to your online banking portal to review the com=

plete details. =0D

=0D

Thank you for choosing our banking services. =0D

=0D

Sincerely, =0D

=0D

Customer Security Department =0D

=0D

=C2=A9 2026 Secure Bank. All rights reserved.=0D

=0D

=0D

=0D

=0D

TD Phish Part 2 from Amazon

----==_mimepart_69c99a8e8dc8f_1eaec865c443221293e

Content-Type: text/html;

charset=UTF-8

Content-Transfer-Encoding: quoted-printable




boto, Helvetica Neue, Arial, sans-serif; font-size:14px;">=0D

=0D

=0D

=0D

=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255)'>
order: 0px; font: inherit; margin: 0px; padding: 0px; vertical-align: bas=

eline; color: rgb(0, 128, 0)">
erit; font-variant: inherit; font-weight: inherit; font-stretch: inherit;=

font-size: 26px; line-height: inherit; font-family: inherit; font-optica=

l-sizing: inherit; font-size-adjust: inherit; font-kerning: inherit; font=

-feature-settings: inherit; font-variation-settings: inherit; font-langua=

ge-override: inherit; margin: 0px; padding: 0px; vertical-align: baseline=

; color: inherit">TD Bank
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px 0px =

12px'>Dear Customer,
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px 0px =

12px'>We would like to inform you that a=C2=A0secure message=C2=A0=

containing important updates regarding your account has been sent to you.=

=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px 0px =

18px'>For your protection, we use secure messaging to promptly notify you=

of any changes or activities related to your account security.
=0D

=0D


st-asian: inherit; font-variant-alternates: inherit; font-variant-positio=

n: inherit; font-variant-emoji: inherit; font-stretch: inherit; font-size=

: 14px; line-height: inherit; font-family: "system-ui", -apple-system, Bl=

inkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, Ubuntu, Cantarell, "He=

lvetica Neue", Arial, "sans-serif", serif, EmojiFont; font-optical-sizing=

: inherit; font-size-adjust: inherit; font-kerning: inherit; font-feature=

-settings: inherit; font-variation-settings: inherit; font-language-overr=

ide: inherit; margin: 20px 0px; padding: 0px; vertical-align: baseline; c=

olor: rgb(68, 68, 68); background-color: rgb(255, 255, 255)'>
ttps://email.mail.track123.com/c/eJwczDFuxSAMANDTwPYjMASnA0OX3AMMJFYJfAWU=

qrev2vEtL_kVN4ogs9eI1hltDcjTB8RYVg0FQwH8wITBhXUrjhzFYo1kDwqcMoAatTKwbHn7I=

6lEMaVVC6uuwHWZd6AvDWahfsnqzznfQ5hPAbuAPRDlMV7fOb5qP7gtvVVuWcA--OoC9pnk7Q=

9-j59x8pNvboewKvVamXob_-nj4TcAAP__4wI80A" rel=3D"noreferrer" style=3D"bor=

der: 0px; font-style: inherit; font-variant: inherit; font-weight: bold; =

font-stretch: inherit; font-size: inherit; line-height: inherit; font-fam=

ily: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; fo=

nt-kerning: inherit; font-feature-settings: inherit; font-variation-setti=

ngs: inherit; font-language-override: inherit; margin: 0px; padding: 12px=

22px; vertical-align: baseline; background: rgb(22, 163, 74); color: rgb=

(255, 255, 255); text-decoration-line: none; border-radius: 6px; display:=

inline-block" target=3D"_blank" title=3D"https://email.mail.track123.com=

/c/eJwczDFuxSAMANDTwPYjMASnA0OX3AMMJFYJfAWUqrev2vEtL_kVN4ogs9eI1hltDcjTB8=

RYVg0FQwH8wITBhXUrjhzFYo1kDwqcMoAatTKwbHn7I6lEMaVVC6uuwHWZd6AvDWahfsnqzzn=

fQ5hPAbuAPRDlMV7fOb5qP7gtvVVuWcA--OoC9pnk7Q9-j59x8pNvboewKvVamXob_-nj4TcA=

AP__4wI80A">View Secure Message
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px 0px =

12px'>This secure message contains sensitive information regarding your b=

anking account. Please sign in to your online banking portal to review th=

e complete details.
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px 0px =

12px'>Thank you for choosing our banking services.
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px'>Sin=

cerely,
=0D


=0D

Customer Security Department
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255)'>=C2=A9 2026 Secu=

re Bank. All rights reserved.
=0D

=0D

=0D

=0D


=0D

=0D

=0D

=0D

=0D

=0D


tktid"; min-height:0px; height:0px; opacity:0; max-height:0px; line-heigh=

t:0px; color:#ffffff'>3363855:1598476
=0D

=0D

=



----==_mimepart_69c99a8e8dc8f_1eaec865c443221293e--