Donation spam Part 2

Posted by Dave Yadallee on
--_000_f5eae35f5a4b41ed8babf94d315ac439nuevoleongobmx_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








-family:Calibri,Helvetica,sans-serif;" dir=3D"ltr">




, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", Not=

oColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiS=

ymbols;">Mrs maria has a donation of 3.5m for you. Reply 
f=3D"mailto:mfrancafissolo00@gmail.com" target=3D"_blank" rel=3D"noopener n=

oreferrer" style=3D"color: rgb(17, 85, 204); font-family: "Google Sans=

", Roboto; font-size: 14px; text-align: center;">mfrancafissolo00@gmai=

l.com
ca, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Em=

oji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji=

", EmojiSymbols;"> for

more details
rif; font-size: 16px;">
a, sans-serif; font-size: 16px;">
, Helvetica, sans-serif; font-size: 16px;">


">


;">


;">


;">


;">


;">


;">






















serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji"=

, NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", E=

mojiSymbols;">









:#000000; font-family:Calibri,Helvetica,sans-serif">






:#000000; font-family:Calibri,Helvetica,sans-serif">






:#000000; font-family:Calibri,Helvetica,sans-serif">






:#000000; font-family:Calibri,Helvetica,sans-serif">






:#000000; font-family:Calibri,Helvetica,sans-serif">






:#000000; font-family:Calibri,Helvetica,sans-serif">






:#000000; font-family:Calibri,Helvetica,sans-serif">






:#000000; font-family:Calibri,Helvetica,sans-serif">






:#000000; font-family:Calibri,Helvetica,sans-serif">






t-size:16px">







t-size:12pt">





































































--_000_f5eae35f5a4b41ed8babf94d315ac439nuevoleongobmx_--

Donation spam Part 1

Posted by Dave Yadallee on
ozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Dec 2025 11:33:00 -0700

Received: from correo-saliente3.nl.gob.mx ([200.188.22.136]:36560)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZCbw-00000000OoJ-0HTH

for dave@doctor.nl2k.ab.ca;

Fri, 26 Dec 2025 11:32:34 -0700

Received: from GENL-SWEXCH02.genl.nl.gob (10.231.2.11) by

GENL-SWEDGE02.genl.nl.gob (172.16.0.35) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1748.37; Fri, 26 Dec 2025 12:31:29 -0600

Received: from GENL-SWEXCH05.genl.nl.gob (10.231.2.14) by

GENL-SWEXCH02.genl.nl.gob (10.231.2.11) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.12; Fri, 26 Dec 2025 12:31:28 -0600

Received: from GENL-SWEXCH05.genl.nl.gob ([fe80::8ce:f0dd:1f20:ed63]) by

GENL-SWEXCH05.genl.nl.gob ([fe80::8ce:f0dd:1f20:ed63%17]) with mapi id

15.02.1258.012; Fri, 26 Dec 2025 12:31:28 -0600

From: Claudia Alvarado Rodriguez

To: Claudia Alvarado Rodriguez

Subject: Re: Hello

Thread-Topic: Hello

Thread-Index: Adx2lYFNhuCmlZ+92EmZ2Y7OnUBwZgAAFTb+

Date: Fri, 26 Dec 2025 18:31:28 +0000

Message-ID:

References: <9a5b51bcc8b243bf97467e2b11fbc365@nuevoleon.gob.mx>,,,<508f1ea886a64fc2beb7fd7fcce6ec92@nuevoleon.gob.mx>,<8802d2d8ea874c2897a7af4c14b49162@nuevoleon.gob.mx>,<99eb63469a5040abace42bb6acde850a@nuevoleon.gob.mx>,<9dc8a20620d043579b5125a0d43cf062@nuevoleon.gob.mx>,<4a6c46ce5e384af1a12fd1ffc60e9002@nuevoleon.gob.mx>,<0d142bc41498450cbc4b3f47013661c9@nuevoleon.gob.mx>

In-Reply-To: <0d142bc41498450cbc4b3f47013661c9@nuevoleon.gob.mx>

Accept-Language: es-ES, en-US

Content-Language: es-ES

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [212.102.39.67]

Content-Type: multipart/alternative;

boundary="_000_f5eae35f5a4b41ed8babf94d315ac439nuevoleongobmx_"

MIME-Version: 1.0

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Mrs maria has a donation of 3.5m for you. Reply mfrancafissolo00@gmail.com

for more details Mrs maria has a donation of 3.5m for you. Reply mfrancafissolo00@gmail.com

for more details



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[200.188.22.136 listed in dnsbl.ahbl.org]

[200.188.22.136 listed in dnsbl.ahbl.org]

[200.188.22.136 listed in dnsbl.ahbl.org]

[200.188.22.136 listed in dnsbl.ahbl.org]

[212.102.39.67 listed in dnsbl.ahbl.org]

[212.102.39.67 listed in dnsbl.ahbl.org]

[212.102.39.67 listed in dnsbl.ahbl.org]

[212.102.39.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[200.188.22.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[200.188.22.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[200.188.22.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[200.188.22.136 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.102.39.67 listed in will-spam-for-food.eu.org]

[212.102.39.67 listed in will-spam-for-food.eu.org]

[212.102.39.67 listed in will-spam-for-food.eu.org]

[212.102.39.67 listed in will-spam-for-food.eu.org]

[212.102.39.67 listed in will-spam-for-food.eu.org]

[212.102.39.67 listed in will-spam-for-food.eu.org]

[212.102.39.67 listed in will-spam-for-food.eu.org]

[212.102.39.67 listed in will-spam-for-food.eu.org]

[200.188.22.136 listed in will-spam-for-food.eu.org]

[200.188.22.136 listed in will-spam-for-food.eu.org]

[200.188.22.136 listed in will-spam-for-food.eu.org]

[200.188.22.136 listed in will-spam-for-food.eu.org]

[200.188.22.136 listed in will-spam-for-food.eu.org]

[200.188.22.136 listed in will-spam-for-food.eu.org]

[200.188.22.136 listed in will-spam-for-food.eu.org]

[200.188.22.136 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Re: Hello



--_000_f5eae35f5a4b41ed8babf94d315ac439nuevoleongobmx_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Mrs maria has a donation of 3.5m for you. Reply mfrancafissolo00@gmail.com<=

mailto:mfrancafissolo00@gmail.com> for more details

Chinese products spam part 3

Posted by Dave Yadallee on
ZWZ0O21zby1wYWdpbmF0aW9uOndpZG93LW9ycGhhbiI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl

PSJtc28tYmlkaS1mb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O1NvdXJjZSBIYW4g

U2FucyZxdW90OywmcXVvdDtzZXJpZiZxdW90OzsgbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk65a6L

5L2TO21zby1iaWRpLWZvbnQtZmFtaWx5OuWui+S9kzttc28tZm9udC1rZXJuaW5nOjBwdCI+YmVs

bG93IHNvbWUgb2Ygb3VyIHNraW4gY2FyZSBhbmQgY29sb3IgY29zbWV0aWNzIHByb2R1Y3QgZm9y

IHlvdXIgcmVmZXJlbmNlLgogICAgICAgPG86cD48L286cD48L3NwYW4+PC9wPiAKICAgICA8cCBj

bGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0ibGVmdCIgc3R5bGU9InRleHQtYWxpZ246bGVmdDttc28t

cGFnaW5hdGlvbjp3aWRvdy1vcnBoYW4iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWJp

ZGktZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTb3VyY2UgSGFuIFNhbnMmcXVv

dDssJnF1b3Q7c2VyaWYmcXVvdDs7IG1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OuWui+S9kzttc28t

YmlkaS1mb250LWZhbWlseTrlrovkvZM7bXNvLWZvbnQta2VybmluZzowcHQiPnNob3VsZCBhbnkg

dGhlbSBjYXRjaCB5b3VyIGV5ZXMsd2UnZCBiZSBkZWxpZ2h0ZWQgdG8gcHJvdmlkZSB5b3Ugd2l0

aCBtb3JlJm5ic3A7CiAgICAgICA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+IAogICAgIDxwIGNsYXNz

PSJNc29Ob3JtYWwiIGFsaWduPSJsZWZ0IiBzdHlsZT0idGV4dC1hbGlnbjpsZWZ0O21zby1wYWdp

bmF0aW9uOndpZG93LW9ycGhhbiI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tYmlkaS1m

b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O1NvdXJjZSBIYW4gU2FucyZxdW90Oywm

cXVvdDtzZXJpZiZxdW90OzsgbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk65a6L5L2TO21zby1iaWRp

LWZvbnQtZmFtaWx5OuWui+S9kzttc28tZm9udC1rZXJuaW5nOjBwdCI+aW5mb3JtYXRpb24gYW5k

IHNhbXBsZXMuCiAgICAgICA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+IAogICAgIDxwIGNsYXNzPSJN

c29Ob3JtYWwiIGFsaWduPSJsZWZ0IiBzdHlsZT0idGV4dC1hbGlnbjpsZWZ0O21zby1wYWdpbmF0

aW9uOndpZG93LW9ycGhhbiI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tYmlkaS1mb250

LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O1NvdXJjZSBIYW4gU2FucyZxdW90OywmcXVv

dDtzZXJpZiZxdW90OzsgbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk65a6L5L2TO21zby1iaWRpLWZv

bnQtZmFtaWx5OuWui+S9kzttc28tZm9udC1rZXJuaW5nOjBwdCI+d2UgbG9vayBmb3J3YXJkIHRv

IHRoZSBwb3NzaWJpbGl0eSBvZiBzdGFydGluZyBhJm5ic3A7YnVzaW5lc3MgcmVsYXRpb25zaGlw

IHdpdGggeW91LgogICAgICAgPG86cD48L286cD48L3NwYW4+PC9wPiAKICAgICA8cCBjbGFzcz0i

TXNvTm9ybWFsIiBhbGlnbj0ibGVmdCIgc3R5bGU9InRleHQtYWxpZ246bGVmdDttc28tcGFnaW5h

dGlvbjp3aWRvdy1vcnBoYW4iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWJpZGktZm9u

dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTb3VyY2UgSGFuIFNhbnMmcXVvdDssJnF1

b3Q7c2VyaWYmcXVvdDs7IG1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OuWui+S9kzttc28tYmlkaS1m

b250LWZhbWlseTrlrovkvZM7bXNvLWZvbnQta2VybmluZzowcHQiPkJlc3QgcmVnYXJkcywKICAg

ICAgIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4mbmJzcDsmbmJzcDsKICAgICA8aW1nIHNyYz0iaHR0

cHM6Ly9kb3dubG9hZC5vZmZpY2UuMTYzLmNvbS9jb3dvcmstc3RvcmFnZS9hZ2VudCUyRjIwMjUl

MkYxMiUyRjAyJTJGNDY0YzRiNzMwODIzNDg3NzkxMTZiYWZlMzhkMjBlYWEucG5nP1NpZ25hdHVy

ZT1GWThrcUJQeDhNdVZnanZKVXhFMzZyaTR1dGI4NWFTUW1ja3BUTlY5dXdnJTNEJmFtcDtFeHBp

cmVzPTIwODAwMTgzOTUmYW1wO05PU0FjY2Vzc0tleUlkPTBjZDc5NmQwNGEzYTQ1ZGJhMmVmOTRh

MmYyYTBjMjE4IiBkYXRhLXRpbWVkYXRlPSIxNzY0NjU4Mzk1NTMwIiB3aXJ0ZS1vcmlnaW4tc3Jj

PSJodHRwczovL2Rvd25sb2FkLm9mZmljZS4xNjMuY29tL2Nvd29yay1zdG9yYWdlL2FnZW50JTJG

MjAyNSUyRjEyJTJGMDIlMkY0NjRjNGI3MzA4MjM0ODc3OTExNmJhZmUzOGQyMGVhYS5wbmc/U2ln

bmF0dXJlPUZZOGtxQlB4OE11VmdqdkpVeEUzNnJpNHV0Yjg1YVNRbWNrcFROVjl1d2clM0QmYW1w

O0V4cGlyZXM9MjA4MDAxODM5NSZhbXA7Tk9TQWNjZXNzS2V5SWQ9MGNkNzk2ZDA0YTNhNDVkYmEy

ZWY5NGEyZjJhMGMyMTgiPjxzcGFuIGRhdGEtbWNlLXR5cGU9ImJvb2ttYXJrIiBpZD0ibWNlXzNf

c3RhcnQiIGRhdGEtbWNlLXN0eWxlPSJvdmVyZmxvdzpoaWRkZW47bGluZS1oZWlnaHQ6MHB4IiBz

dHlsZT0ib3ZlcmZsb3c6IGhpZGRlbjsgbGluZS1oZWlnaHQ6IDBweDsiPjwvc3Bhbj4KICAgIDwv

ZGl2PgogICAgPGRpdiBjbGFzcz0ic3Vic2NyaWJlQnIiPgogICAgIDxpbWcgc3JjPSJodHRwczov

L2Rvd25sb2FkLm9mZmljZS4xNjMuY29tL2Nvd29yay1zdG9yYWdlL2FnZW50JTJGMjAyNSUyRjEy

JTJGMDIlMkY1NzQxYTIyNTVjN2Y0M2UxOTZhOTE5M2M0YTY0MmY1OS5wbmc/U2lnbmF0dXJlPWxs

dVJ5N3clMkZNT0VwM3FUWVdDTzR1azF4Z1ZpcW9OMEZqNkwzTDVBVWFCUSUzRCZhbXA7RXhwaXJl

cz0yMDgwMDE4NDExJmFtcDtOT1NBY2Nlc3NLZXlJZD0wY2Q3OTZkMDRhM2E0NWRiYTJlZjk0YTJm

MmEwYzIxOCIgZGF0YS10aW1lZGF0ZT0iMTc2NDY1ODQxMTgxNyIgd2lydGUtb3JpZ2luLXNyYz0i

aHR0cHM6Ly9kb3dubG9hZC5vZmZpY2UuMTYzLmNvbS9jb3dvcmstc3RvcmFnZS9hZ2VudCUyRjIw

MjUlMkYxMiUyRjAyJTJGNTc0MWEyMjU1YzdmNDNlMTk2YTkxOTNjNGE2NDJmNTkucG5nP1NpZ25h

dHVyZT1sbHVSeTd3JTJGTU9FcDNxVFlXQ080dWsxeGdWaXFvTjBGajZMM0w1QVVhQlElM0QmYW1w

O0V4cGlyZXM9MjA4MDAxODQxMSZhbXA7Tk9TQWNjZXNzS2V5SWQ9MGNkNzk2ZDA0YTNhNDVkYmEy

ZWY5NGEyZjJhMGMyMTgiPjxzcGFuIGRhdGEtbWNlLXR5cGU9ImJvb2ttYXJrIiBpZD0ibWNlXzRf

c3RhcnQiIGRhdGEtbWNlLXN0eWxlPSJvdmVyZmxvdzpoaWRkZW47bGluZS1oZWlnaHQ6MHB4IiBz

dHlsZT0ib3ZlcmZsb3c6IGhpZGRlbjsgbGluZS1oZWlnaHQ6IDBweDsiPjwvc3Bhbj4KICAgICA8

YnI+CiAgICAgPHA+PC9wPiAmbmJzcDs8c3BhbiBkYXRhLW1jZS10eXBlPSJib29rbWFyayIgaWQ9

Im1jZV8xX3N0YXJ0IiBkYXRhLW1jZS1zdHlsZT0ib3ZlcmZsb3c6aGlkZGVuO2xpbmUtaGVpZ2h0

OjBweCIgc3R5bGU9Im92ZXJmbG93OiBoaWRkZW47IGxpbmUtaGVpZ2h0OiAwcHg7Ij48L3NwYW4+

CiAgICA8L2Rpdj4gCiAgICA8ZGl2IGNsYXNzPSJzdWJzY3JpYmVCciI+CiAgICAgJm5ic3A7CiAg

ICA8L2Rpdj4gJm5ic3A7CiAgICA8YnI+CiAgIDwvZGl2PgogICA8ZGl2IGNsYXNzPSJtYWlsU2ln

bmF0dXJlQnIiPgogICAgPGJyPgogICA8L2Rpdj4KICAgPGRpdiBjbGFzcz0ibWFpbC1zaWduYXR1

cmUiIGRlbHdob2xlPSJ0cnVlIj4gCiAgICA8ZGl2IGNsYXNzPSJsaW5neGktc2lnbmF0dXJlLWNv

bnRhaW5lciIgc3R5bGU9ImZvbnQtZmFtaWx5OiBQaW5nRmFuZyxTb3VyY2UgSGFuIFNhbnMsc2Fu

cy1zZXJpZjsiPiAKICAgICA8dGFibGUgc3R5bGU9ImJvcmRlci1jb2xsYXBzZTogY29sbGFwc2U7

d2lkdGg6IDEwMCU7dGV4dC1zaXplLWFkanVzdDpub25lICFpbXBvcnRhbnQ7dGFibGUtbGF5b3V0

OiBmaXhlZDsiIGNsYXNzPSJtY2UtaXRlbS10YWJsZSI+IAogICAgICA8dGJvZHkgc3R5bGU9InRl

eHQtc2l6ZS1hZGp1c3Q6bm9uZSAhaW1wb3J0YW50O3dvcmQtd3JhcDpicmVhay13b3JkOyB3b3Jk

LWJyZWFrOmJyZWFrLWFsbDsiPiAKICAgICAgPC90Ym9keT4gCiAgICAgPC90YWJsZT4gCiAgICAg

PGRpdiBpZD0ibGluZ3hpLXNpZ25hdHVyZS12Mi1ibG9jayIgc3R5bGU9IndpZHRoOiAxMDAlO3Rl

eHQtZGVjb3JhdGlvbjogbm9uZTt0ZXh0LXVuZGVybGluZTogbm9uZTsiPiAKICAgICAgPGRpdiBp

ZD0ibGluZ3hpLXNpZ25hdHVyZS12Mi1jb250ZW50IiBpdGVtaWQ9ImlkIiBzdHlsZT0ibWF4LXdp

ZHRoOiA5NSU7Zm9udC1zaXplOiAxNHB4O2xpbmUtaGVpZ2h0OiAxNnB4O2NvbG9yOiAjN0E4NTk5

O3BhZGRpbmc6IDE2cHggMTZweCA0cHggMHB4O21hcmdpbi1sZWZ0OiAwcHg7IiBpdGVtcHJvcD0i

OTE3NzAxNiI+IAogICAgICAgPGRpdiBzdHlsZT0iY29sb3I6ICMyMzJENDc7Ym9yZGVyOiBub25l

O21hcmdpbi1ib3R0b206NHB4O2ZvbnQtc2l6ZTogMTZweDtsaW5lLWhlaWdodDogMjBweDt0ZXh0

LXVuZGVybGluZTogbm9uZTtmb250LXdlaWdodDogYm9sZGVyOyIgaXRlbWlkPSJuYW1lIj4KICAg

ICAgICBzaW5keQogICAgICAgPC9kaXY+IAogICAgICAgPGRpdiBzdHlsZT0iYm9yZGVyOiBub25l

O21hcmdpbi1ib3R0b206OHB4O3RleHQtdW5kZXJsaW5lOiBub25lOyI+CiAgICAgICAgc2luZHlA

bWlhb291LmNvbQogICAgICAgPC9kaXY+IAogICAgICA8L2Rpdj4gCiAgICAgPC9kaXY+IAogICAg

PC9kaXY+CiAgIDwvZGl2PgogICA8ZGl2PgogICAgPHNwYW4gaGFkc3Vic2NyaWJlPSIxIj48L3Nw

YW4+CiAgIDwvZGl2PgogICA8ZGl2IGNsYXNzPSJhdXRvLW9wcy1zaWduYXR1cmUtcG9zaXRpb24i

IHN0eWxlPSJkaXNwbGF5OiBub25lOyI+PC9kaXY+CiAgIDxkaXYgY2xhc3M9ImF1dG8tb3BzLXNp

Z25hdHVyZS1wb3NpdGlvbiIgc3R5bGU9ImRpc3BsYXk6IG5vbmU7Ij48L2Rpdj4gCiAgIDxpbWcg

d2lkdGg9IjEiIGhlaWdodD0iMSIgc3JjPSJodHRwczovL2x4LWFyaWVzLXN0YXItbWFpbC5xaXll

LjE2My5jb20vYXBpL3B1Yi9lZG0vcmVhZD9za2lwPXRydWUmYW1wO3NpZ249VjIua2VzMWMwMXNT

VWNYSmRid1hJdUdXWnlzY1N1VzlXVk5RcUVIVmdaZlIxMnZGeGtLTi1nTDdsZzBpODRqdjFhdUhI

eDktQ2dHSERjX0tBLXBTME1kd3ciPgogIDwvYmxvY2txdW90ZT4KICA8YnI+CiA8L2JvZHk+Cjwv

aHRtbD4=

--=_Part_115295_426628720.1766768512440--

Chinese products spam part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Dec 2025 10:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZBl2-00000000F1Z-3ZCO

for dave@doctor.nl2k.ab.ca;

Fri, 26 Dec 2025 10:37:44 -0700

Resent-From: The Doctor

Resent-Date: Fri, 26 Dec 2025 10:37:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m128174.netease.com ([103.209.128.174]:42710)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZBDF-00000000D3K-02YN

for root@nk.ca;

Fri, 26 Dec 2025 10:02:57 -0700

Content-Type: multipart/alternative; BOUNDARY="=_Part_115295_426628720.1766768512440"

To: root

Subject: =?UTF-8?B?Y29zbWV0aWNzIHByb2R1Y3Q=?=

X-Priority: 3

MIME-Version: 1.0

Received: from sindy@miaoou.com( [10.139.4.208] ) by ajax-webmail ( [127.0.0.1] ) ; Sat, 27 Dec 2025 01:01:52 +0800 (GMT+08:00)

From: sindy

Date: Sat, 27 Dec 2025 01:01:52 +0800 (GMT+08:00)

X-WM-Tid: 0a9b5b9c0d970263kunm69f8d743226e1

DKIM-Signature: a=rsa-sha256;

b=HL4aPYsRkuxWZ67y5wedHOP1z6asz1wxzDHaO4Ie4y2IR9+pmTuxr6dgkMd2TUl5oTKbqtn56xL73R6+gqZcN5w/37q4KZSKBSQcJrYLycuoFYQgKDyPZ48ZSayHGlHiwU1hY3KzZb/CXi7m9qCVvD0saA+kLVUCGB67+vmWLAU=; s=default; c=relaxed/relaxed; d=miaoou.com; v=1;

bh=pxHWY9KhK2S/JU9Sa648+BZYCwbW4B6/M8wtLjQtJSY=;

h=date:mime-version:subject:message-id:from;

Message-ID:

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Thanks for your time, We make OEM ODM orders and we also

have our own brand OG, I noticed your company in the same market. We believe

our products could be a great fit for your needs. Bellow is our b [...]



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.209.128.174 listed in dnsbl.ahbl.org]

[103.209.128.174 listed in dnsbl.ahbl.org]

[103.209.128.174 listed in dnsbl.ahbl.org]

[103.209.128.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.209.128.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.209.128.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.209.128.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.209.128.174 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.209.128.174 listed in will-spam-for-food.eu.org]

[103.209.128.174 listed in will-spam-for-food.eu.org]

[103.209.128.174 listed in will-spam-for-food.eu.org]

[103.209.128.174 listed in will-spam-for-food.eu.org]

[103.209.128.174 listed in will-spam-for-food.eu.org]

[103.209.128.174 listed in will-spam-for-food.eu.org]

[103.209.128.174 listed in will-spam-for-food.eu.org]

[103.209.128.174 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 J_CHICKENPOX_42 BODY: 4alpha-pock-2alpha

0.6 J_CHICKENPOX_102 BODY: 10alpha-pock-2alpha

0.6 J_CHICKENPOX_63 BODY: 6alpha-pock-3alpha

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} =?UTF-8?B?Y29zbWV0aWNzIHByb2R1Y3Q=?=



--=_Part_115295_426628720.1766768512440

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: base64



IFRoYW5rcyBmb3IgeW91ciB0aW1lLApXZSBtYWtlIE9FTSBPRE0gb3JkZXJzIGFuZCB3ZSBhbHNv

IGhhdmUgb3VyIG93biBicmFuZCBPRywKSSBub3RpY2VkIHlvdXIgY29tcGFueSBpbiB0aGUgc2Ft

ZSBtYXJrZXQuCldlIGJlbGlldmUgb3VyIHByb2R1Y3RzIGNvdWxkIGJlIGEgZ3JlYXQgZml0IGZv

ciB5b3VyIG5lZWRzLgpCZWxsb3cgaXMgb3VyIGJlc3Qgc2VsbGVyLGFueSBpbnRlcmVzdGVkLHdl

IGNhbiBzZW5kIGZyZWUgc2FtcGxlcyBmb3IgeW91IHRvIGNoZWNrLgpUaGFua3MsCiAgCiBzaW5k

eQpzaW5keUBtaWFvb3UuY29tCgoKCgoKCgoKCuWcqDIwMjUtMTItMjTvvIxzaW5keSA8c2luZHlA

bWlhb291LmNvbT4g5YaZ6YGTOi0tLS0t5Y6f5aeL6YKu5Lu2LS0tLS0KIOWPkeS7tuS6uu+8miBz

aW5keSA8c2luZHlAbWlhb291LmNvbT4KIOWPkeS7tuaXtumXtDogMjAyNeW5tDEy5pyIMjTml6Ug

5ZGo5LiJCiDmlLbku7bkurrvvJogW3Jvb3QgPHJvb3RAbmsuY2E+XQog5Li76aKY77yaIEnigJl2

ZSBiZWVuIHRoaW5raW5nIGFib3V0IHlvdXIgbGF0ZXN0IHByb2plY3QKCiBkZWFyIHNpci9tYWRh

bSwKVGhpcyBpcyBTaW5keSwgZnJvbSBtaWFvb3UgY29zbWV0aWNzIGNvLixsdGQKQXJlIGFyZSBs

b29raW5nIGZvciBoaWdoLXF1YWxpdHkgcHJvZHVjdHMgYXQgcmVhc29uYWJsZSBwcmljZT8Kd2Ug

YXJlIGEgbW9yZSB0aGFuIDIwIHllYXJzIGNvc21ldGljcyBmYWN0b3J5IGluIGNoaW5hLgpiZWxs

b3cgc29tZSBvZiBvdXIgc2tpbiBjYXJlIGFuZCBjb2xvciBjb3NtZXRpY3MgcHJvZHVjdCBmb3Ig

eW91ciByZWZlcmVuY2UuCnNob3VsZCBhbnkgdGhlbSBjYXRjaCB5b3VyIGV5ZXMsd2UnZCBiZSBk

ZWxpZ2h0ZWQgdG8gcHJvdmlkZSB5b3Ugd2l0aCBtb3JlIAppbmZvcm1hdGlvbiBhbmQgc2FtcGxl

cy4Kd2UgbG9vayBmb3J3YXJkIHRvIHRoZSBwb3NzaWJpbGl0eSBvZiBzdGFydGluZyBhIGJ1c2lu

ZXNzIHJlbGF0aW9uc2hpcCB3aXRoIHlvdS4KQmVzdCByZWdhcmRzLAogIAoKCiAKIAogCgoKCiBz

aW5keQpzaW5keUBtaWFvb3UuY29tCgoKCgoKCgoK

Chinese products spam part 2

Posted by Dave Yadallee on


--=_Part_115295_426628720.1766768512440

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



PGh0bWw+CiA8aGVhZD48L2hlYWQ+CiA8Ym9keT4KICA8ZGl2PgogICAmbmJzcDsKICAgPHAgY2xh

c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tYmlkaS1mb250LXNp

emU6MTAuNXB0OyBmb250LWZhbWlseTomcXVvdDtTb3VyY2UgSGFuIFNhbnMmcXVvdDssJnF1b3Q7

c2VyaWYmcXVvdDs7bXNvLWZhcmVhc3QtZm9udC1mYW1pbHk65a6L5L2TO21zby1iaWRpLWZvbnQt

ZmFtaWx5OiDlrovkvZM7bXNvLWZvbnQta2VybmluZzowcHQiPlRoYW5rcyBmb3IgeW91ciB0aW1l

LAogICAgIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4gCiAgIDxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz

cGFuIGxhbmc9IkVOLVVTIj5XZSBtYWtlIE9FTSBPRE0gb3JkZXJzIGFuZCB3ZSBhbHNvIGhhdmUg

b3VyIG93biBicmFuZCBPRyw8L3NwYW4+PC9wPiAKICAgPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw

YW4gbGFuZz0iRU4tVVMiPkkgbm90aWNlZCB5b3VyIGNvbXBhbnkgaW4gdGhlIHNhbWUgbWFya2V0

LgogICAgIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4gCiAgIDxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz

cGFuIGxhbmc9IkVOLVVTIj5XZSBiZWxpZXZlIG91ciBwcm9kdWN0cyBjb3VsZCBiZSBhIGdyZWF0

IGZpdCBmb3IgeW91ciBuZWVkcy4KICAgICA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+IAogICA8cCBj

bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+QmVsbG93IGlzIG91ciBiZXN0IHNl

bGxlcixhbnkgaW50ZXJlc3RlZCx3ZSBjYW4gc2VuZCBmcmVlIHNhbXBsZXMgZm9yIHlvdSB0byBj

aGVjay4KICAgICA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+IAogICA8cCBjbGFzcz0iTXNvTm9ybWFs

Ij48c3BhbiBsYW5nPSJFTi1VUyI+VGhhbmtzLAogICAgIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4g

Jm5ic3A7PHNwYW4gZGF0YS1tY2UtdHlwZT0iYm9va21hcmsiIGlkPSJtY2VfMV9zdGFydCIgZGF0

YS1tY2Utc3R5bGU9Im92ZXJmbG93OmhpZGRlbjtsaW5lLWhlaWdodDowcHgiIHN0eWxlPSJvdmVy

ZmxvdzogaGlkZGVuOyBsaW5lLWhlaWdodDogMHB4OyI+PC9zcGFuPiZuYnNwOwogICA8aW1nIHNy

Yz0iaHR0cHM6Ly9kb3dubG9hZC5vZmZpY2UuMTYzLmNvbS9jb3dvcmstc3RvcmFnZS9hZ2VudCUy

RjIwMjUlMkYxMiUyRjAyJTJGNDVkM2FhZDdhZjc5NGEyMjhkYzg0NjBiNzc3YzIyMGIucG5nP1Np

Z25hdHVyZT1mbXc1dTJoOGdldDFKZ1k0UGpRM1Rla2klMkZUUVhRUFlDaHBETTYlMkJjU3g3NCUz

RCZhbXA7RXhwaXJlcz0yMDgwMDE4NjgxJmFtcDtOT1NBY2Nlc3NLZXlJZD0wY2Q3OTZkMDRhM2E0

NWRiYTJlZjk0YTJmMmEwYzIxOCIgZGF0YS10aW1lZGF0ZT0iMTc2NDY1ODY4MTg0OCIgd2lydGUt

b3JpZ2luLXNyYz0iaHR0cHM6Ly9kb3dubG9hZC5vZmZpY2UuMTYzLmNvbS9jb3dvcmstc3RvcmFn

ZS9hZ2VudCUyRjIwMjUlMkYxMiUyRjAyJTJGNDVkM2FhZDdhZjc5NGEyMjhkYzg0NjBiNzc3YzIy

MGIucG5nP1NpZ25hdHVyZT1mbXc1dTJoOGdldDFKZ1k0UGpRM1Rla2klMkZUUVhRUFlDaHBETTYl

MkJjU3g3NCUzRCZhbXA7RXhwaXJlcz0yMDgwMDE4NjgxJmFtcDtOT1NBY2Nlc3NLZXlJZD0wY2Q3

OTZkMDRhM2E0NWRiYTJlZjk0YTJmMmEwYzIxOCI+PHNwYW4gZGF0YS1tY2UtdHlwZT0iYm9va21h

cmsiIGlkPSJtY2VfMl9zdGFydCIgZGF0YS1tY2Utc3R5bGU9Im92ZXJmbG93OmhpZGRlbjtsaW5l

LWhlaWdodDowcHgiIHN0eWxlPSJvdmVyZmxvdzogaGlkZGVuOyBsaW5lLWhlaWdodDogMHB4OyI+

PC9zcGFuPgogIDwvZGl2PgogIDxkaXYgY2xhc3M9Im1haWwtc2lnbmF0dXJlIiBkZWx3aG9sZT0i

dHJ1ZSI+IAogICA8ZGl2IGNsYXNzPSJsaW5neGktc2lnbmF0dXJlLWNvbnRhaW5lciIgc3R5bGU9

ImZvbnQtZmFtaWx5OiBQaW5nRmFuZyxTb3VyY2UgSGFuIFNhbnMsc2Fucy1zZXJpZjsiPiA8IS0t

IOagt+W8j+S4gO+8jOWujOaVtOeJiCAtLT4gCiAgICA8dGFibGUgc3R5bGU9ImJvcmRlci1jb2xs

YXBzZTogY29sbGFwc2U7d2lkdGg6IDEwMCU7dGV4dC1zaXplLWFkanVzdDpub25lICFpbXBvcnRh

bnQ7dGFibGUtbGF5b3V0OiBmaXhlZDsiIGNsYXNzPSJtY2UtaXRlbS10YWJsZSI+IAogICAgIDx0

Ym9keSBzdHlsZT0idGV4dC1zaXplLWFkanVzdDpub25lICFpbXBvcnRhbnQ7d29yZC13cmFwOmJy

ZWFrLXdvcmQ7IHdvcmQtYnJlYWs6YnJlYWstYWxsOyI+IAogICAgIDwvdGJvZHk+IAogICAgPC90

YWJsZT4gPCEtLSDmoLflvI/kuozvvIzml6DlpLTlg48gLS0+IAogICAgPGRpdiBpZD0ibGluZ3hp

LXNpZ25hdHVyZS12Mi1ibG9jayIgc3R5bGU9IndpZHRoOiAxMDAlO3RleHQtZGVjb3JhdGlvbjog

bm9uZTt0ZXh0LXVuZGVybGluZTogbm9uZTsiPiAKICAgICA8ZGl2IGlkPSJsaW5neGktc2lnbmF0

dXJlLXYyLWNvbnRlbnQiIGl0ZW1pZD0iaWQiIHN0eWxlPSJtYXgtd2lkdGg6IDk1JTtmb250LXNp

emU6IDE0cHg7bGluZS1oZWlnaHQ6IDE2cHg7Y29sb3I6ICM3QTg1OTk7cGFkZGluZzogMTZweCAx

NnB4IDRweCAwcHg7bWFyZ2luLWxlZnQ6IDBweDsiIGl0ZW1wcm9wPSI5MTc3MDE2Ij4gCiAgICAg

IDxkaXYgc3R5bGU9ImNvbG9yOiAjMjMyRDQ3O2JvcmRlcjogbm9uZTttYXJnaW4tYm90dG9tOjRw

eDtmb250LXNpemU6IDE2cHg7bGluZS1oZWlnaHQ6IDIwcHg7dGV4dC11bmRlcmxpbmU6IG5vbmU7

Zm9udC13ZWlnaHQ6IGJvbGRlcjsiIGl0ZW1pZD0ibmFtZSI+CiAgICAgICBzaW5keQogICAgICA8

L2Rpdj4gCiAgICAgIDxkaXYgc3R5bGU9ImJvcmRlcjogbm9uZTttYXJnaW4tYm90dG9tOjhweDt0

ZXh0LXVuZGVybGluZTogbm9uZTsiPgogICAgICAgc2luZHlAbWlhb291LmNvbQogICAgICA8L2Rp

dj4gCiAgICAgPC9kaXY+IAogICAgPC9kaXY+IDwhLS3lip7lhazlk4HniYwtLT4gCiAgIDwvZGl2

PgogIDwvZGl2PgogIDxkaXY+IDxzcGFuIGhhZHN1YnNjcmliZT0iMSI+PC9zcGFuPgogIDwvZGl2

PgogIDxkaXYgY2xhc3M9ImF1dG8tb3BzLXNpZ25hdHVyZS1wb3NpdGlvbiIgc3R5bGU9ImRpc3Bs

YXk6IG5vbmU7Ij48L2Rpdj4KICA8ZGl2IGNsYXNzPSJhdXRvLW9wcy1zaWduYXR1cmUtcG9zaXRp

b24iIHN0eWxlPSJkaXNwbGF5OiBub25lOyI+PC9kaXY+IAogIDxpbWcgd2lkdGg9IjEiIGhlaWdo

dD0iMSIgc3JjPSJodHRwczovL2x4LWFyaWVzLXN0YXItbWFpbC5xaXllLjE2My5jb20vYXBpL3B1

Yi9lZG0vcmVhZD9zaWduPVYyLmtlczFjMDFzU1VjWEpkYndYSXVHV2FibzY2VVFQRXNKV2RWV3Fq

OGUzNEN2RnhrS04tZ0w3bGcwaTg0anYxYXVISHg5LUNnR0hEY19LQS1wUzBNZHd3Ij4KICA8YnI+

CiAgPGJyPuWcqDIwMjUtMTItMjTvvIxzaW5keSAmbHQ7c2luZHlAbWlhb291LmNvbSZndDsg5YaZ

6YGTOgogIDxibG9ja3F1b3RlIGlkPSJpc1JlcGx5Q29udGVudCIgc3R5bGU9InBhZGRpbmctbGVm

dDoxZXg7IG1hcmdpbjogMHB4IDBweCAwcHggMC44ZXg7IEJPUkRFUi1MRUZUOiAjY2NjIDFweCBz

b2xpZCI+CiAgIC0tLS0t5Y6f5aeL6YKu5Lu2LS0tLS0KICAgPGJyPjxiPuWPkeS7tuS6uu+8mjwv

Yj4gc2luZHkgJmx0O3NpbmR5QG1pYW9vdS5jb20mZ3Q7CiAgIDxicj48Yj7lj5Hku7bml7bpl7Q6

PC9iPiAyMDI15bm0MTLmnIgyNOaXpSDlkajkuIkKICAgPGJyPjxiPuaUtuS7tuS6uu+8mjwvYj4g

W3Jvb3QgJmx0O3Jvb3RAbmsuY2EmZ3Q7XQogICA8YnI+PGI+5Li76aKY77yaPC9iPiBJ4oCZdmUg

YmVlbiB0aGlua2luZyBhYm91dCB5b3VyIGxhdGVzdCBwcm9qZWN0CiAgIDxicj4KICAgPGJyPgog

ICA8ZGl2IGNsYXNzPSJtYWlsU2lnbmF0dXJlQnIiPgogICAgPGRpdiBjbGFzcz0ic3Vic2NyaWJl

QnIiPgogICAgICZuYnNwOwogICAgIDxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO

LVVTIj5kZWFyIHNpci9tYWRhbSw8L3NwYW4+PC9wPiAKICAgICA8cCBjbGFzcz0iTXNvTm9ybWFs

IiBhbGlnbj0ibGVmdCIgc3R5bGU9InRleHQtYWxpZ246bGVmdDttc28tcGFnaW5hdGlvbjp3aWRv

dy1vcnBoYW4iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWJpZGktZm9udC1zaXplOjEw

LjVwdDtmb250LWZhbWlseTomcXVvdDtTb3VyY2UgSGFuIFNhbnMmcXVvdDssJnF1b3Q7c2VyaWYm

cXVvdDs7IG1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OuWui+S9kzttc28tYmlkaS1mb250LWZhbWls

eTrlrovkvZM7bXNvLWZvbnQta2VybmluZzowcHQiPlRoaXMgaXMgU2luZHksIGZyb20gbWlhb291

IGNvc21ldGljcyBjby4sbHRkCiAgICAgICA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+IAogICAgIDxw

IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJsZWZ0IiBzdHlsZT0idGV4dC1hbGlnbjpsZWZ0O21z

by1wYWdpbmF0aW9uOndpZG93LW9ycGhhbiI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28t

YmlkaS1mb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O1NvdXJjZSBIYW4gU2FucyZx

dW90OywmcXVvdDtzZXJpZiZxdW90OzsgbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk65a6L5L2TO21z

by1iaWRpLWZvbnQtZmFtaWx5OuWui+S9kzttc28tZm9udC1rZXJuaW5nOjBwdCI+QXJlIGFyZSBs

b29raW5nIGZvciBoaWdoLXF1YWxpdHkgcHJvZHVjdHMgYXQgcmVhc29uYWJsZSBwcmljZT8KICAg

ICAgIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4gCiAgICAgPHAgY2xhc3M9Ik1zb05vcm1hbCIgYWxp

Z249ImxlZnQiIHN0eWxlPSJ0ZXh0LWFsaWduOmxlZnQ7bXNvLXBhZ2luYXRpb246d2lkb3ctb3Jw

aGFuIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1iaWRpLWZvbnQtc2l6ZToxMC41cHQ7

Zm9udC1mYW1pbHk6JnF1b3Q7U291cmNlIEhhbiBTYW5zJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7

OyBtc28tZmFyZWFzdC1mb250LWZhbWlseTrlrovkvZM7bXNvLWJpZGktZm9udC1mYW1pbHk65a6L

5L2TO21zby1mb250LWtlcm5pbmc6MHB0Ij53ZSBhcmUgYSBtb3JlIHRoYW4gMjAgeWVhcnMgY29z

bWV0aWNzIGZhY3RvcnkgaW4gY2hpbmEuCiAgICAgICA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+IAog

ICAgIDxwIGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJsZWZ0IiBzdHlsZT0idGV4dC1hbGlnbjps

Meta Verified Phish Part 3

Posted by Dave Yadallee on


=09=09

=09=09=09
e=3D"font-size:14px">
o">
=3D"vertical-align: inherit;">The verification process includes the followi=

ng:

=09=09=09


    =09=09=09=09

  • ">
    auto">Only authorized=C2=A0=


    r=3D"auto">
    t style=3D"vertical-align: inherit;">administrator (Admin)
    ont>
    it;">=C2=A0acco=

    unts can complete the verification process.
    an>


    • =09=09=09=09

  • ">
    auto">Once approved, the blue badg=

    e will automatically appear everywhere next to your Page name.
    >


    • =09=09=09




=09=09=09
auto; border:undefined">

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09

=09=09=09

style=3D"font-size:14px">
app.easyassist.site/index.php/campaigns/vl390gd1rs8b4/track-url/ln27481lxv7=

f9/4479dcdf9d3aa01e9cd73fe5d49dad1a2c47617f" style=3D"font-size:14px; text-=

decoration:none; font-weight:bold; color:#ffffff; padding:12px 20px; displa=

y:inline-block" target=3D"_blank">
l-align: inherit;">
t;">Submit Application=C2=A0<=

/td>

=09=09=09=09=09


=09=09=09
ng>
"auto">Note
font><=

font dir=3D"auto">=C2=A0:
font>


=09=09=09
dir=3D"auto">- Please=C2=A0=

respond =

within=C2=A0
yle=3D"vertical-align: inherit;">
-align: inherit;">48 hours ; failure to complete within the specified time =

will result in the temporary suspension of the Blue Badge.
ont>


=09=09=09
dir=3D"auto">Sincerely,
nt>


=09=09=09
dir=3D"auto">Facebook Copyright Te=

am


=09=09=09=C2=A0

=09=09

=09=09

=09=09=09
ding:16px 24px; text-align:center; border-bottom-left-radius:8px; border-bo=

ttom-right-radius:8px">

=09=09=09

=09=09=09

=09=09

=09




campaigns/vl390gd1rs8b4/track-opening/ln27481lxv7f9" alt=3D"" />







--_=_swift_1766757725_ebb25019da3302f7c5ad2d5ef6ad1265_=_--



Meta Verified Phish Part 2

Posted by Dave Yadallee on
=C2=A92025 Meta Platforms, Inc., Note: Me=

ta Business Support=C2=A01 Meta Way,

Menlo Park, CA 94025

[https://app.=

easyassist.site/index.php/campaigns/vl390gd1rs8b4/track-url/ln27481lxv7f9/b=

e6d9b8cc4b3dd55978b50df767394dd090f86a9]

This is an automated email =

=E2=80=93 please do not reply.=C2=A0=C2=A0



--_=_swift_1766757725_ebb25019da3302f7c5ad2d5ef6ad1265_=_

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable









=09Your account has met the requirements to receive the Meta Verifie=<br /><br /> d badge.






n" style=3D"background-color: #f4f5f7" width=3D"100%">

=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

Meta Verified Phish Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Dec 2025 08:21:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ9cP-000000002AR-3mNH

for dave@doctor.nl2k.ab.ca;

Fri, 26 Dec 2025 08:20:41 -0700

Resent-From: The Doctor

Resent-Date: Fri, 26 Dec 2025 08:20:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.82.133.55] (port=40490 helo=smtp.helpzonepr.site)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ8PB-00000000BgY-17fZ

for doctor@nk.ca;

Fri, 26 Dec 2025 07:03:05 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim; d=socicalcourseramedia.site;

h=Message-ID:Date:Subject:From:Reply-To:To:MIME-Version:Content-Type;

i=support@socicalcourseramedia.site;

bh=uDuHg5jPbwvuJnk+31nQHBd/dHO9fOOgbUbTbHDHLZU=;

b=fg8s8o+mmRoyH3odq5GXbMO0dzvmltvc6re8CfjyaQiSEMzVS40aJKMtcePudzp+X0O1Q9j+V8B7

VVeIkR0rwj6lHp0+Xeq/5TW4FA6H6f7RuhfsCzEmyuYYIXiZ12QWKR8Ubbe0k4ehfTQQ8FYBQ2sh

AgvslSrC0cRDclgqnp4=

Message-ID:

Date: Fri, 26 Dec 2025 14:02:05 +0000

Subject: Your account has met the requirements to receive the Meta Verified

badge.

From: Facebook

Reply-To: Facebook

To: "doctor@nk.ca"

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="_=_swift_1766757725_ebb25019da3302f7c5ad2d5ef6ad1265_=_"

Feedback-ID: vl390gd1rs8b4:regular:xj3325s88j81a:nb046fj4p14ff

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Meta Verified LIFETIME FREE BLUE BADGE VERIFICATION FOR YOUR

FACEBOOK PAGE Dear Manager,



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.82.133.55 listed in dnsbl.ahbl.org]

[103.82.133.55 listed in dnsbl.ahbl.org]

[103.82.133.55 listed in dnsbl.ahbl.org]

[103.82.133.55 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.82.133.55 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.82.133.55 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.82.133.55 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.82.133.55 listed in dnsbl.ahbl.org]

4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist

[URI: easyassist.site]

1.4 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: app.easyassist.site]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.82.133.55 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.82.133.55 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.82.133.55 listed in sa-accredit.habeas.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.82.133.55 listed in will-spam-for-food.eu.org]

[103.82.133.55 listed in will-spam-for-food.eu.org]

[103.82.133.55 listed in will-spam-for-food.eu.org]

[103.82.133.55 listed in will-spam-for-food.eu.org]

[103.82.133.55 listed in will-spam-for-food.eu.org]

[103.82.133.55 listed in will-spam-for-food.eu.org]

[103.82.133.55 listed in will-spam-for-food.eu.org]

[103.82.133.55 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[103.82.133.55 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.82.133.55 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.82.133.55 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Your account has met the requirements to receive the Meta Verified

badge.





--_=_swift_1766757725_ebb25019da3302f7c5ad2d5ef6ad1265_=_

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Meta Verified

=09=09=C2=A0



LIFETIME FREE BLUE BADGE VERIFICATION FO=

R YOUR FACEBOOK PAGE



Dear Manager,



=09=09We'd like to inform yo=

u that your page is eligible to receive a

blue badge. Following a review =

and evaluation process, Meta has

confirmed that your Facebook Page is=

=C2=A0ELIGIBLE TO RECEIVE A FREE

LIFETIME BLUE BADGE=C2=A0. To activate a=

nd display the badge on your Page,

you will need to complete an additiona=

l verification step to ensure

ownership and security.



=09=09THE MEA=

NING OF THE BLUE BADGE=C2=A0:



- It verifies=C2=A0THE AUTHENTICITY=

=C2=A0of the page and helps customers

distinguish official accounts from =

fake ones.

- It increases credibility in brand communication and supports=



communication and customer support efforts.



THE VERIFICATION PROCE=

SS INCLUDES THE FOLLOWING:=20



=09* Only authorized=C2=A0ADMINISTRATOR (=

ADMIN)=C2=A0accounts can complete the

verification process.

=09* Once =

approved, the blue badge will automatically appear everywhere

next to you=

r Page name.



=09=09Submit Application=C2=A0

[https://app.easyassist=

.site/index.php/campaigns/vl390gd1rs8b4/track-url/ln27481lxv7f9/4479dcdf9d3=

aa01e9cd73fe5d49dad1a2c47617f]



NOTE=C2=A0:

- Please=C2=A0respond wi=

thin=C2=A048 HOURS ; FAILURE TO COMPLETE WITHIN THE

SPECIFIED TIME WILL R=

ESULT IN THE TEMPORARY SUSPENSION OF THE BLUE

BADGE.

Sincerely,

Faceb=

ook Copyright Team

=C2=A0=20

Web/SEO/App Spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
--_000_SI2PR01MB4547CA81668FC3294FA0490AD6B0ASI2PR01MB4547apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>












ng:0in">Hi,




ng:0in">I was just wondering if you had a chance to review the previous ema=

il I sent to you.




ng:0in">I understand the value of your time so I’d like to know what&=

#8217;s the best way to reach you and when can we discuss this in more deta=

il?




ng:0in">Waiting,




ng:0in">………………………R=

30;…………………………&#=

8230;…………………………=

…………………………̷=

0;…………………………=

230;………




ng:0in">From: Shawn [shawnmaxit@outlook.com]




ng:0in">Sent: Friday, November 08, 2022, 2:40 PM




ng:0in">To: root@nk.ca




ng:0in">Subject: Re-design




ng:0in"> 




xt 1.0pt;padding:0in">Hi,




xt 1.0pt;padding:0in"> 




xt 1.0pt;padding:0in">I'm an SEO Expert. I found your details on Google sea=

rch.




xt 1.0pt;padding:0in"> 




xt 1.0pt;padding:0in">When I visited your website
er:none windowtext 1.0pt;padding:0in"> www.nk.ca, 
color:#002060">I saw that Google search results didn't

show you at the top. I can take care of things for you and increase the re=

venue of your company.




quot;,sans-serif;color:#385723;border:none windowtext 1.0pt;padding:0in">&n=

bsp;




quot;,sans-serif;color:#385723;border:none windowtext 1.0pt;padding:0in">We=

can move your website to the first page of Google 1st page. Yahoo etc.
an>




xt 1.0pt;padding:0in"> 




xt 1.0pt;padding:0in">Am I allowed to provide you with an estimate and pric=

ing list? if interested




xt 1.0pt;padding:0in"> 




xt 1.0pt;padding:0in">Best wishes




xt 1.0pt;padding:0in"> 




quot;,sans-serif;color:#002060;border:none windowtext 1.0pt;padding:0in">No=

te: -
0pt;padding:0in"> I will be happy to send you our 
tyle=3D"font-family:"Calibri",sans-serif">Pricing

and Package details.











--_000_SI2PR01MB4547CA81668FC3294FA0490AD6B0ASI2PR01MB4547apcp_--

Web/SEO/App Spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Dec 2025 08:21:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ9bs-0000000027X-1o0N

for dave@doctor.nl2k.ab.ca;

Fri, 26 Dec 2025 08:20:08 -0700

Resent-From: The Doctor

Resent-Date: Fri, 26 Dec 2025 08:20:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013075.outbound.protection.outlook.com ([52.103.74.75]:7332 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ78k-000000008Cx-2crj

for root@nk.ca;

Fri, 26 Dec 2025 05:42:03 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=il4YEa0UmHR2yfZTomx1qEWOnLX7r56US5O9q3z9tYabAkvMxAG9Dl2UoS6DUOAFEX7T/oGs7+B0ViDUUdrIW/iOa866dKiDxml38qQkB3ZDiaLVonOvW+84uR9IX5NNYHECnWjVBxRAZ+3Qvk2JPGR2ttGSGuhfL0Qh5oNX3HzCRklKolTqrKyUNxv24rKumrLyw6ZidIigqmLfqlEqsDe4zqvvELUXGQVKS4o6DG6hdshrMI3f/3RhmtbtzVzUEERyF6M8cqeMjAeHxZqOmpq12MxRh2kxpwZ3VsiA75C4H5lS+LRwIxKfKZjqtM17Dwa3KhnOs28e3oZUf74xQQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=x66E9WzLYNIKalMtSkiPVaz/KBxXXK4gVMJFOfQH9yE=;

b=f9ypoUHgeCfIpXhDK+OgtJ5RwUykNVRiJT94vnxhmc3hbjDCe88y+Ua8JKeNBQePZT4l/yfq0d7PRdzdzvSuAZuXl+qxpmDd3EVEyUYMYhgknQC44i44Q2t2zRCGHgZ7FTs5pDNmZbnzN+frSllxOwk6IHP+tcl6ejgdDNHJuXRB/0rinVNbTidR7uTwgwVe1N2Kstspimc4RvfaC0TEjAekn6CEQIWbw6T+av/v6nxdYvEzD26Nj+u99YyaL9J1m5OfuJi5hfqysKPN7JYJXhEzVCQnJvKuKYeEU+wpXUQgmaALuth/IZoS+L1OJAECYasMoSa16+piz5+ruUDkJg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

Received: from SI2PR01MB4441.apcprd01.prod.exchangelabs.com

(2603:1096:4:1b0::8) by KL1PR01MB4789.apcprd01.prod.exchangelabs.com

(2603:1096:820:bc::12) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9456.11; Fri, 26 Dec

2025 12:40:58 +0000

Received: from SI2PR01MB4547.apcprd01.prod.exchangelabs.com

([fe80::6fd0:763c:f1ce:a093]) by SI2PR01MB4441.apcprd01.prod.exchangelabs.com

([fe80::6fd0:763c:f1ce:a093%6]) with mapi id 15.20.9456.008; Fri, 26 Dec 2025

12:40:57 +0000

From: Shawn it.



To: "root@nk.ca"

Subject: Review of my previous email

Thread-Topic: Review of my previous email

Thread-Index: Adx2YwFLbCT4oLTCTv2TE09Z1t9CRw==

Date: Fri, 26 Dec 2025 12:39:49 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR01MB4441:EE_|KL1PR01MB4789:EE_

x-ms-office365-filtering-correlation-id: 74a21fef-847f-44e4-da34-08de447c047b

x-microsoft-antispam:

BCL:0;ARA:14566002|41001999006|31061999003|15080799012|461199028|39105399006|8062599012|19110799012|13091999003|8060799015|5062599005|1602099012|102099032|40105399003|3412199025|10035399007|4302099013|440099028|26104999006;

x-microsoft-antispam-message-info:

=?us-ascii?Q?VpS+jM0yxt2w3PoIRG7EEOfNmx9+UQGDZxH+9sXGFnTfkO6WIip4Oq3g6IcC?=

=?us-ascii?Q?BIIbNG+zZbcTDPlXVKJTW9daZUMEeD2l7lmLv+SV0YzWhkxMkdkEljkzSYF2?=

=?us-ascii?Q?Pu13dWxHg3YQEQTyOnPUlXVT7ECm9Pj3KRjmHDSpDsrJHUQL67/2af62TyNj?=

=?us-ascii?Q?vdC8uUlg418OdkNrxww5Ri1ALl4QOVkfg9a9aYpfMDIa5jpai/NfrJ/TY3ai?=

=?us-ascii?Q?OvkVrw1fLap+b/AWUFLq0W15C8prDGCtkwEu1yuQd8mWZGB97DIQboTWZJTt?=

=?us-ascii?Q?RVIy8q7+CT6309KJ9FR64WVnTS9gL1+Njb9i72o35/pxUtQofYHJ+1qxwbsm?=

=?us-ascii?Q?lGyQFG5skzde6PVN4otRQgCgrcKAWJtuIuUzkKtt5vG3oG7Vp53MY2jlbtE7?=

=?us-ascii?Q?IEyEMwwEy8EzqfqCDVPUKnyJnL/rfDyfMnAS8caA+DjI4sv8bziJXVngrjOo?=

=?us-ascii?Q?Dj1FwbJzMKPR94rkYcLGBXJwKIojFjfcchbRxRQSNl5gI8KEpLe9ez5Ak1Ye?=

=?us-ascii?Q?72XiOx4TTo7dIzktClu7FAUQyVx5U5x75Oztz9TY985no+iPiOURlAWVLVPM?=

=?us-ascii?Q?+WQ1+IHURxClS68HWttChPG9JY+LaBL5gE4OQkwnhC1mFxIxx6ZWXNxcUYEv?=

=?us-ascii?Q?dJpr1LyxjFYe5w7L+YO/PHw2tDCXV8arGiftgj3Ezd9evKhQp94fCkJlmLfu?=

=?us-ascii?Q?FZxiVGqCEnmw2ou7hccfl3z6DJ4WyuInsAmzJH1H3UEtGsDmEKj5uj3ADUA+?=

=?us-ascii?Q?dLveKibeS9oW+ErmXIlOhEV8uSFMjT7xWLxzJ1X2pZh+JSBrbwIOQrdfSqvK?=

=?us-ascii?Q?SEgncNnovsNfn14WW/IGoFBiHbETsWcTGzOUnXlUMJ2QaNeQWYOy4Z+32nPa?=

=?us-ascii?Q?uYvEX6evIb4sDis2FK4mpkDc9RwcwgRDu6SSVFoxivkIjljq3yu/MTxE82Ky?=

=?us-ascii?Q?6ezwNq/ASPQrUnknWGgLsHO1lbxs+zAx8Bb8s67a+b9/Cym+qTkKKAR9Tv3W?=

=?us-ascii?Q?VqCt7oo9+ElQgbqtA2Y6Hvd3pvS8pLFsxb9aTulL1ZF0fYFJqveAvGQJBr9m?=

=?us-ascii?Q?MoqmMvCPq6W8FOtfhnGu3CjrLE0Zf7vOdC3raEPnOtwksa7Lc6NVvIDzaF1W?=

=?us-ascii?Q?t1cl9WHp4jHgqL0dLbrhenthzbYvoIoCQzsYOn3J+lCg0k0jVsoKLqTDWwFJ?=

=?us-ascii?Q?R3jhJDOkvDjrlNWBMNaWH5ZN2/XsLYSGvel6ubQ8HisSvPQ0JdcOFu2RTNsh?=

=?us-ascii?Q?6d2lR1fQFSntYkyoE8PLTq3MZNH16U7ViLoLNEpDUlsV+l/srxk7DB0Fft0J?=

=?us-ascii?Q?FApgS5ec+TYwkZouoToMh1BeM7Sjdacf2exiOrL6PE1qH/Mcz3t2hiTegqkP?=

=?us-ascii?Q?unzY8LuPGimsiM90ib2HCIQl7qUS?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?FR2tnsD1pdZ8PEoA58J2OUYzlHK4LjD4B3z42Ul3Ky2f4IkayiC1Q1mVT0Nj?=

=?us-ascii?Q?2xub83VSjWAV7Ix9ceAq/aseDdPHTQ+jIEBr9veSkBPk3XwLuKwHWYaaPWYg?=

=?us-ascii?Q?n4uWaqnVaKntxnfO5A4x9VXA64PpJ8LWpKiNDuNydLalvVhUFptzMD383o6m?=

=?us-ascii?Q?grVqt3dGm/rnsoBJPz5dkvbhWjbeR36GRHsifHxKkcTSbDPTPzd/m8Da0V4Y?=

=?us-ascii?Q?Tm18z9smNea/F7P6XF7io0OrLUvr4x9PM3rqO/o57rvx6GF+dVCLwiQjULF6?=

=?us-ascii?Q?g8xuvtgPLsIjmz4akJ/BzbKUDYkD/wCgrxR0FNRvOuslHHZyI7LX2fc4XgF1?=

=?us-ascii?Q?0xbuIFnZ/ObvUf6OnWedp24KpRnIADeRi5y89jWEeo4LQQ0c8g1cpk3IwAgW?=

=?us-ascii?Q?Q3qTwUzL2awKILIfdEgFket3/uRBEVjacjRx2bJp46ScilpvqEjF/6oCFQmw?=

=?us-ascii?Q?T8m1SSonvG7fufMWPgwuIvj4hB2cyA42lNMH0QMT8mn4U5PRskebP9aoHJ/I?=

=?us-ascii?Q?xDLHprce8cir7qHjUcdd5ZdWgj2nCr+gJ1frX8ORcvBlGLsVQ01O3nqhLv03?=

=?us-ascii?Q?5y8B5MIOigT8RbL9qH4SEazlgp8kZOkGqPzJKKcKxnVWYA8qICgfctuwRp6m?=

=?us-ascii?Q?wTjuR+nG8MzIIqRLKrT+o08sPGHCCpjLyknWXUz6rrljhRu1mPeLokW/XSpj?=

=?us-ascii?Q?NjD9rjxGj7bfd99sAyjhPiqd4cqY5L14naUGv6ZOb/p0Gge4Rwy9II9twpUw?=

=?us-ascii?Q?OJ7dFzMzrwuugOpaaP+ifLEckD9fwoHdnXtYv9FBm4/3jVuOKn5bUbwnetyF?=

=?us-ascii?Q?5O0TLot8mh6G0brr4/iTF9kKYt9V8C4vTuhS5P4VOc+pOq2mSo/EkUfteomq?=

=?us-ascii?Q?DAnTcbPEBl0+cG1+lrNAUVu34qkF4K8LVIoKjwyViuxG7EJjVv2T1x45rHaV?=

=?us-ascii?Q?BIBWUcCIYkyKf3/oMS9mMMpPwwQcz+TWxC8pIvfc5vwGgu76w2OT2yhjsPOd?=

=?us-ascii?Q?5H/ZGu+kn+aha59jr3H4SnH9iUusAcssNRS2/RHY7x6k4IkXoGhmmA2vz0TE?=

=?us-ascii?Q?r+16UWTQq9KfAvb3z52ZLe4DG8aRg0g/Ap0Gas6kXxEExj+RUq0=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR01MB4547CA81668FC3294FA0490AD6B0ASI2PR01MB4547apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-5f51e.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR01MB4441.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 74a21fef-847f-44e4-da34-08de447c047b

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Dec 2025 12:39:49.8420

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR01MB4789



--_000_SI2PR01MB4547CA81668FC3294FA0490AD6B0ASI2PR01MB4547apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,



I was just wondering if you had a chance to review the previous email I sen=

t to you.



I understand the value of your time so I'd like to know what's the best way=

to reach you and when can we discuss this in more detail?



Waiting,



...........................................................................=

...........................................................................=

..................



From: Shawn [shawnmaxit@outlook.com]



Sent: Friday, November 08, 2022, 2:40 PM



To: root@nk.ca



Subject: Re-design







Hi,







I'm an SEO Expert. I found your details on Google search.







When I visited your website www.nk.ca, I saw that Google search results did=

n't show you at the top. I can take care of things for you and increase the=

revenue of your company.







We can move your website to the first page of Google 1st page. Yahoo etc.







Am I allowed to provide you with an estimate and pricing list? if intereste=

d







Best wishes







Note: - I will be happy to send you our Pricing and Package details.

Web/SEO/App Spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Dec 2025 08:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ9bM-0000000024K-1o0b

for dave@doctor.nl2k.ab.ca;

Fri, 26 Dec 2025 08:19:36 -0700

Resent-From: The Doctor

Resent-Date: Fri, 26 Dec 2025 08:19:36 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f43.google.com ([209.85.208.43]:56777)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ5wy-000000005CP-32en

for sales@nk.ca;

Fri, 26 Dec 2025 04:25:49 -0700

Received: by mail-ed1-f43.google.com with SMTP id 4fb4d7f45d1cf-64b560e425eso9151148a12.1

for ; Fri, 26 Dec 2025 03:24:43 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=bestdgital-com.20230601.gappssmtp.com; s=20230601; t=1766748275; x=1767353075; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=iB0v40QXUaBLr5bD2cLS1r/70WB9cS5/aDS4hJQG+sU=;

b=dEz4xtxHEKHyizJGVUOeuRqHoWIOaKXGRYzNQtTR3DiYQZyDYDwDx/AvxlMw6uwogU

BfaCBdAJsinEgk6b/+t3MgNrz7MZoCrGufeLW2dRRRIaLHSzuN4SnMBA5UIty9ipqxUu

qJEC1WKdSOQNuJ8eRbuhBUF3mYvkA28ag8Thd7JzcAVUs0+gNqhr05KWCd5Pw/6s7ONS

EaGVAS5/D5X9h6LQrfpTeOBLmEeFE4EySU1bcfsi70HU1Ub+Zt96iLC2HtGV8yIbO+xa

4zzSNeACZh0CmjEsoZrJTOv4m0EvtA0lnyaU4XBrBf9H6hjae53lXo5H5BdKDal8D+uV

Ij0g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1766748275; x=1767353075;

h=to:subject:message-id:date:from:sender:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=iB0v40QXUaBLr5bD2cLS1r/70WB9cS5/aDS4hJQG+sU=;

b=VSWeWffP+LIQN/X6sqN3acrq948s/8XeswpkFSQeOG039GTcUMzyEORQx2TtTM+yLn

3q/U72FLHm+g3H+5fUNka1Xt70yIrHNiV82am+283/wKK53QmxHTNtHxekLUzEOc/1Kd

IgCHorCXmjtVaeeBJ50ZTOPTopdqSHHhvHK+BfYTJ2bZUSgM3R1PXYeg1EXC4ALsj6dw

eEcS4CUw83QrpbEu9acqV9m/yIA+9olvNvDMlcgquvT8c8Jl0D8z0rC9bD6haGhpApQz

z2C5aTmN63nPvuE8FFs/7zD1g/DzXhxEXm186AZrJo3iNBSMqVHTYodSHfF06dOmfHR2

k3Vw==

X-Gm-Message-State: AOJu0YyQDNthRTCnze5ovahATWTtoyhb0fDf0zlLe15ucFDBFRQdW7Sy

uZYqdJL4AvtbKt7xuh3y9E50g3G2Z2AkCHWpYKjoAS1QUW/B/P76vHm4ryjEvmv5q+0x5I9CJCa

U2QzRwOkrW4oAQicEcxVB+ZFQ/5k5a/bHVMeTKL4hIJwC5uanD2ij

X-Gm-Gg: AY/fxX4h9ikf3qF67/LW6p6kmQ+hX1Ub6eV5Lvih+RjnQRCP5zu8bVtDpZnwtif9p4B

kZ9oUN8GstLu0T3TAADICAPwvfurQGOgttJsRIuNkqpIQNnLM9ijxpUrVpITS9Ft46bg9Wnn+ko

kEA4LwIMzwKbwweWeggvJzDvL67zGoHvHEMlsvzgXDFfk5V4hoZBFlhgk/C1dI8s9R4p9Z+sN+E

mP0wG1UjluZWgSlzbwzVwbfi+r36TYM7C+IJs8KrplwAcHjcyHWN7LaGUV96++6DYIOK4G4irgC

vyqoLmTOEmYiaYo+gKWuc+88sbgirRomWdnzb3sjEJp+X+Jhj7Ob

X-Google-Smtp-Source: AGHT+IGTUcCIPtT0v8EKqn1GqSOgOt0qeXWjpqK+JVcQqmPIxu4KMOREgUQunWb5zPsxaVjO05WxeeUjFdjLRMx9NbM=

X-Received: by 2002:a05:6402:5108:b0:649:b4d8:7946 with SMTP id

4fb4d7f45d1cf-64b8edb3335mr18995004a12.23.1766748275155; Fri, 26 Dec 2025

03:24:35 -0800 (PST)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Fri, 26 Dec 2025 06:24:32 -0500

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Fri, 26 Dec 2025 06:24:31 -0500

MIME-Version: 1.0

Sender: Mike

From: Mike

Date: Fri, 26 Dec 2025 06:24:32 -0500

X-Google-Sender-Auth: FQmrcIqZw16qJQkGMIKGANByb_g

X-Gm-Features: AQt7F2p7r5mSZW3Fv064S4BtfTKS_hC1FjmnumFwZyAaYS_cgDXDHKMExG8K0G0

Message-ID:

Subject: Re: nk.ca: Fix Site Issues.

To: Sales

Content-Type: multipart/alternative; boundary="0000000000005932990646d92302"



--0000000000005932990646d92302

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello greetings!!



How is it possible that your website =E2=80=9Cnk.ca =E2=80=

=9D is having

so many Technical errors and not well optimized for Google?



We have audited your site from an online marketing perspective & would be

happy to share the findings in a free of cost, no obligations report*.



If this is of any interest to you, reply to this email as =E2=80=9C**send =

me more

details=E2=80=9D* and one of our representatives will be in touch to discus=

s the SEO

audit report, **our methodologies, pricing, past work details through our

corporate email account.







I look forward to a positive response.







Best Regard,



Mike Brits | SEO Expert



***************************************************************************=

******

[image: beacon]



--0000000000005932990646d92302

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




cm 0.0001pt;background-image:initial;background-position:initial;background=

-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial;font-size:12pt;font-family:"Times New Roman","=

;serif"">Hello greetings!!
r>






background-image:initial;background-position:initial;background-size:initia=

l;background-repeat:initial;background-origin:initial;background-clip:initi=

al;font-size:11pt">
>How is it possible that your website=C2=A0
ly:georgia,serif">=

=E2=80=9Cnk.ca=E2=80=9D
=3D"font-size:12pt">=C2=A0 is

having so many Technical errors and not well optimized for Google?

n>






background-image:initial;background-position:initial;background-size:initia=

l;background-repeat:initial;background-origin:initial;background-clip:initi=

al;font-size:11pt">
>We have audited your site from an online marketing perspective

& would be happy to share the findings in a free of cost,
style=3D"font-family:georgia,serif">
red;background:yellow">no obligations report
size:12pt">.





If this is of any interest to you, reply to this email as
"background:aqua">=E2=80=9C
pt;color:red;background:aqua">send me more

details=E2=80=9D
n> and one of our

representatives will be in touch to discuss the SEO audit report,
span>our methodologi=

es, pricing, past work details th=

rough our corporate

email account.






font-size:11pt">=

=C2=A0






font-size:11pt">I =

look

forward to a positive response.=C2=A0
ont-family:georgia,serif">






font-size:11pt">=

=C2=A0






font-size:11pt">Be=

st

Regard,
an>






font-size:11pt">
"color:black">Mike Brits | SEO Expert
pt">






font-size:11pt;font-family:Calibri,"sans-serif"">
olor:black;font-family:georgia,serif">*************************************=

********************************************








GaJjXsBHoRdnLlcuGxuLul3uYPGPMmdamwHRR01Wwqdmp7nsTFywDIyaKTkuv5z7Fk5e4KQl6eS=

9Z-jqz02falXLkNsmHUpeUmKYf8k6csi-1vbWFTJDM_HvjVFMX5Y64MyoNin5ysEDsA" width=

=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:none!impo=

rtant;">



--0000000000005932990646d92302--

Web/SEO/App Spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.66.59 listed in dnsbl.ahbl.org]

[52.103.66.59 listed in dnsbl.ahbl.org]

[52.103.66.59 listed in dnsbl.ahbl.org]

[52.103.66.59 listed in dnsbl.ahbl.org]

[2603:1096:101:2a4:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:2a4:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:2a4:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:2a4:0:0:0:13 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.66.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.66.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.66.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.66.59 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:2a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[stringnguyenk(at)outlook.com]

1.0 SAVE_PERCENT BODY: Save some percentage

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.66.59 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Re: Bookkeeping, social media ??



--_000_SEZPR01MB73155FFA72E3F9C6C0100721ACB0ASEZPR01MB7315apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I sent you an email on Friday and just wanted to follow up.



Limited-Time Discount: Save 20% on all Virtual Assistant & Remote Support S=

ervices.



Bookkeeping, social media, calls, Leads, CRM tools, data entry, emails, des=

ign, websites, apps, SEO, digital marketing, and video editing, RPO, LPO, m=

ore.



Happy to schedule a quick call or share our pricing and packages=97whicheve=

r works best for you.



Thank you,

Stringn

VA Team!!



--_000_SEZPR01MB73155FFA72E3F9C6C0100721ACB0ASEZPR01MB7315apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi, 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I sent you an email on Friday and just wanted to follow up.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Limited-Time Discount: Save 20% on all Virtual Assistant & Remote Suppo=

rt Services.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Bookkeeping, social media, calls, Leads, CRM tools, data entry, emails, des=

ign, websites, apps, SEO, digital marketing, and video editing, RPO, LPO, m=

ore.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Happy to schedule a quick call or share our pricing and packages=97whicheve=

r works best for you.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Stringn



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

VA Team!!








--_000_SEZPR01MB73155FFA72E3F9C6C0100721ACB0ASEZPR01MB7315apcp_--

Web/SEO/App Spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Dec 2025 08:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ9bE-00000000241-3C4q

for dave@doctor.nl2k.ab.ca;

Fri, 26 Dec 2025 08:19:28 -0700

Resent-From: The Doctor

Resent-Date: Fri, 26 Dec 2025 08:19:28 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012059.outbound.protection.outlook.com ([52.103.66.59]:4591 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ5jR-000000004jx-23cW

for root@nk.ca;

Fri, 26 Dec 2025 04:11:52 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=DIKxMktq3J9NX8RkpZbo9QqWKFtGA52Q8hBhlrLNdChaKRTD98Nq/oqx5C5MsOiIZFAkP0XJU0h98IQ4fY2cGxUwplyGieGMIZRQXlbq9bGMM2Dao0DF3ENNz2yeFrQxlsDJUCtC9bnZbv6QOk3akJ1Dit8wNvSPxEIeNfjlQY3c8N8jE1CaV50zaZ/phIwesS6Y1LnVFzVsnIqceHtffarKhBlT6N/tCszCqqv5EfW29MJxFibUPGqnVpHzp/m96+o1QC3hrgz7pbNGAuS9uOFz6Ds+DICKV8oHUO6fdn7/9AdKV+CDXbSPrpL/pFfdo8MIY1I2AwSTCgV4iJ8VpQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=u4be3FhLTwVModYr1KEdNUi96Cx52adNv1fx5AfpBGg=;

b=TJptGCSzckeucL0o16Q9NyeiMDaE1/w3fxWrMkJax5xT8Lgzasb0/uOjChsn538DqB/Ahsz381qnX5LBQRckR76T6JUHsOzunSXZ3ecTEFU+dGJau2snKbPrmmllkySrVV6nzupJ341EvKboeu1J5BSBOvQl/OYgJu7VjJM6Y7qEYl7yiOsM+k+I7JXhDWF/1dnl7GmTHT3jAzS1rQu+7iN5lCKH/Kbt5s4psiXfh/x6tVBlR3wwMNh9k8Du9slj2l+LZsu4LAIFGtKWUTXFmhNbE2+BYfcNJQUA0SGXfzRKfOg2KxM1diPweV+azGGqRRiVfTBkIRyihapiKcEpsw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=u4be3FhLTwVModYr1KEdNUi96Cx52adNv1fx5AfpBGg=;

b=RQ6w+z/g3engs+kFxGltWA1UcBpzjpc2z0mjAAI6KvJdKDNtv4hRFSnLuHSiYSJ79X5SBw3RoepBSPlvabjFZm1hPJkxAx1dmcCXBvF8H9iYowlbGMPMu+XAkQlrLNV07ngOhp7NHcMRbUNgumlVkt199+Dehghvef1Jy4OtHCPUW1t/VpoiQ6+ewIThTA3FWtMEAcwZIM/Xcx9Aud2MI2JOLygj7e/JlPrNHtVTUSHLV8JOoOHbqc5zEmh08jeDvSaXfeYvEjTKawqxCKbPHEUzfxfJ2drSaKahth/udcG0As7rCm3aRA5t3cgxpRLa4GLKHTYDBYYlj0s60hBTOQ==

Received: from SEZPR01MB7315.apcprd01.prod.exchangelabs.com

(2603:1096:101:2a4::13) by TY0PR0101MB4215.apcprd01.prod.exchangelabs.com

(2603:1096:400:1b8::6) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9456.11; Fri, 26 Dec

2025 11:10:16 +0000

Received: from SEZPR01MB7315.apcprd01.prod.exchangelabs.com

([fe80::6395:e9a:4c1f:987]) by SEZPR01MB7315.apcprd01.prod.exchangelabs.com

([fe80::6395:e9a:4c1f:987%6]) with mapi id 15.20.9456.008; Fri, 26 Dec 2025

11:10:15 +0000

From: String nguyenk

Subject: Re: Bookkeeping, social media ??

Thread-Topic: Bookkeeping, social media ??

Thread-Index: AQHcdlgGjq6FYxVDu0KtpVtZBy/sKg==

Date: Fri, 26 Dec 2025 11:10:11 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR01MB7315:EE_|TY0PR0101MB4215:EE_

x-ms-office365-filtering-correlation-id: 065a52bb-5849-4dda-fb5b-08de446f5688

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|15080799012|20031999003|31061999003|461199028|8060799015|8062599012|19110799012|39105399006|3412199025|39145399003|41105399003|40105399003|440099028|12091999003|102099032|56899033;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?syF/ncrXT+XWcs6toqZLBLww/47dglNalgT8fe+EKBdyFg7ZwhJHX1Bc?=

=?Windows-1252?Q?uOl1DALJK652/GEz/d+Vb+48Y/cx855KphuljvXh1LyYgIaBVErXINCi?=

=?Windows-1252?Q?KBlHqi8Pfpf2za/fxHgIWwDyspP18JfIBUxmx7HAqw8T4yEwA/EuxS5E?=

=?Windows-1252?Q?zBRSLbCEttJA+2+aOsciWITnZlmqhDWTuonw3Y0RnoSI9FVIbSpiLJp/?=

=?Windows-1252?Q?YBX6flGaeVnJ4J+DLrOPgaVn5ksgXzfhFgYzW3jAR68S/7tZxVOAGeYf?=

=?Windows-1252?Q?v24769uqgjAd0iA0V0DS6FqUcnFeIpeLw9LLzPJ25IalAgRGY3zV+Bfq?=

=?Windows-1252?Q?yPhor2Hu5q4IiHupvHIQOm6vG8zPNkx5YUcH81c1WA5OXydqrUDY+ELO?=

=?Windows-1252?Q?zEIBfZRhbXwAw5C1gXQQuOS59534OimJ0RzDpsMbg4tXx2qQNDlFpUJw?=

=?Windows-1252?Q?E5i4XEJqdwzGLeJy6oNB8HP+baj7dCAOvEymnba65kuUUabGC/9u+zNi?=

=?Windows-1252?Q?H+jItSr/KTWeISmIdulH9xdyLACSrmaCLACvIta6gUuiInCS7EN9EavL?=

=?Windows-1252?Q?/+uYSCVCraGyTwgo/eqp/Z1GUuUEo5Eoey/QeiOP6jGgCI5Bd1WzLqZc?=

=?Windows-1252?Q?PqJa8hm1QIMPVdpL+Apjs6zrvHqQiFAqJkG4G6CLePH36Snbb4+DUMus?=

=?Windows-1252?Q?lOnaTtbaFWUlYe0sFZwN1hlrjDMzL7yAPyXk9L3wW3Eje+R1HKN5RWIt?=

=?Windows-1252?Q?2yw8zEF4PLJiAQPVf1139n0WmhSc18TRiBA+wg7LC8zt5vkQBZlOpE+F?=

=?Windows-1252?Q?3M22qbnAuBrtP5kW3mHr+nD6fvcW0LMpjKwAte2HMiTvUpg+zM5FN2e6?=

=?Windows-1252?Q?1Y1/a6JV0gq+yRI5lOfsE169lcdDmHA4V/gpQVNOe5KzsDbusNLaUku9?=

=?Windows-1252?Q?x0cVW3gZeShBUMwL4Qo16AQpN+bz7Bq5IBxFknKaLIQ/4fxUcf7Uri1M?=

=?Windows-1252?Q?blKoKHzQ8pYlTmcmoKgVzhDMgjM6hcmfN5NCfy9DRXtAakY2JQNWnsRL?=

=?Windows-1252?Q?kN1Wbs1NSPjSOlPr5Q7vMfFWbuOwtJ+mwJX+5jtiB8NzSDqIdeKDnazK?=

=?Windows-1252?Q?JJRktOMRiWEXNUuWrY95sPoQ2gGVkFabriYZeq3L6jMx6eM7X0L+ELyh?=

=?Windows-1252?Q?eyaQnltb+eIuGnU8+PkdSfVAIEe+85LM7RX7WTkL30CcInQT9+qz0g0e?=

=?Windows-1252?Q?YVf+QHxOtEW4Y+htsHQ4jkjIp8/PD8Xlp5/r83GcF9RwKCGc59TLVRsP?=

=?Windows-1252?Q?KFCpE4AKDsAqi8AuzeqBMS61a2iJWXulyXXPV71AKJOaAptXV4eQVMua?=

=?Windows-1252?Q?pqMofwN/SX2sHiTCX9RaMqM+tdtxKjgz1UgBGwnc5dstM4xq/8tqpHnb?=

=?Windows-1252?Q?W749l9hZrwiFG9LFStxX1g=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?mwqHwZ6B8DR1ojwF+bp9na1qjP+CC6W9xyEmbqp16xqVk9Sp5siZHzUz?=

=?Windows-1252?Q?T8aOfM0NpWAPwQQ437HlR11BHGnTIupP9Q194N4+m1IYuT+und5KFmsG?=

=?Windows-1252?Q?FPOZx4IIG0aahtNNuWhuNeLQC1rbr/dfVYkYAgpI63lkfg1elOYoRkEP?=

=?Windows-1252?Q?4ZIf3pPCSDXwRx/oISuraBk6g5QZBaB1f61KKk6jou/N6oa0U7Ql376Y?=

=?Windows-1252?Q?6JQdQqiEG0FsjKekwsl0IOTJXh6dbP/x5Vp/VQN/6D6+GP+ymDSmq90g?=

=?Windows-1252?Q?e2uBaSm72YGkg559o4Z+TVlrrhG/lremj43NjvMsxSTObVQ/p8xTsMIi?=

=?Windows-1252?Q?BxRQ0Nd/LStnnrwGREKzlPl+nT4hRvrcT9AzZqdIs+upAuSsH57BIEtv?=

=?Windows-1252?Q?Amou/YfACM40O3BSZlkBUQtcDO24yHI7opsWBps5TFFoPphPXt3kVSGk?=

=?Windows-1252?Q?XbQeKi7NyUeNLQnBwOEzTZIyvr8ygYRQjBi8o46fE+166fwbFsK0cfrH?=

=?Windows-1252?Q?82k3mtN856lRowhyWDL9M24a+da6+n/CJLGKnJf/6oIbEtbof8oefTSp?=

=?Windows-1252?Q?DcAtEHvWdF/7cXTh8tCswMoJctxRJYIvesEF/b2wD2SNxAJq14fTjFUF?=

=?Windows-1252?Q?UQZ7vW+iR8dHECzjkj0Y0zVjwodq7UNOExf83EKo5nGkFZwENaRKZYK7?=

=?Windows-1252?Q?qo0gYokBZV/tBhMgd+prT/W7Js79H9JhRs62pFV01R7kauiRkIQlvSxD?=

=?Windows-1252?Q?KyE7SqXosxW4FXIeNHD5PoFaFslv8FOji5I1D2gMdr8TcdhXXxicTvrz?=

=?Windows-1252?Q?qvfxxJH8iynEkMDT56dUbH40VBFqK5ORDynD3Eg/D/ufcO3FFKvcuGv4?=

=?Windows-1252?Q?Yn17C33A1fb6gTb5taUj5FRlr1x/60Ywftm/NkQxy9z5ZV43S2eyra2R?=

=?Windows-1252?Q?71CT2dWI01V1qh16xWDhXUBEKp2HFCBaTHf7hE0yq7nzWTfNWfHbkg27?=

=?Windows-1252?Q?Mff7/AbIOw6onS4bsTNYxixNZmLulR33m2G8J5iQNza+yRLXmIto8Cah?=

=?Windows-1252?Q?uVsVYjkQlSOCYB4sx4n+Ey4Lwru4d+txxvEp1cudyzVCIESJdSiTCrVf?=

=?Windows-1252?Q?fLpVDnzkjYTGEJ2tADTl2708Cx6c2zDM9Uh3nqn3dQN3hUIIqvy8VY0H?=

=?Windows-1252?Q?YCcLCegriXfMn0GAbffZM/y7W3pm7tEbkbYVU4fZU8Y309GTe9MIRIJ5?=

=?Windows-1252?Q?5DM2p+G192aTA1zlk/UdKA5TOAOvXYlyVJ+0YNSU0hhN1SeA96iz0S2h?=

=?Windows-1252?Q?yYjx7mXPA3W9OJOE3ZcGGJdDeGSTHz8StTmzWJ6RjdlJz1u/9tjmOrDb?=

=?Windows-1252?Q?PqfxcWxC9gQHXCh9JHsHqmJiKktvJTb/q8MyCjg4WWlDfYVfym3KNqqR?=

=?Windows-1252?Q?6AhfmXhzAAvS1upJc6NFRRfpL/E2NsK4ZKQxp/C+sLxGPo2IeLRwXeUP?=

=?Windows-1252?Q?G0TWPDyL?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR01MB73155FFA72E3F9C6C0100721ACB0ASEZPR01MB7315apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB7315.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 065a52bb-5849-4dda-fb5b-08de446f5688

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Dec 2025 11:10:11.2023

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR0101MB4215

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I sent you an email on Friday and just wanted to follow

up. Limited-Time Discount: Save 20% on all Virtual Assistant & Remote Support

Services.

Virtual Assistant spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Dec 2025 08:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ9b0-000000001xU-0GUW

for dave@doctor.nl2k.ab.ca;

Fri, 26 Dec 2025 08:19:14 -0700

Resent-From: The Doctor

Resent-Date: Fri, 26 Dec 2025 08:19:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f69.google.com ([209.85.210.69]:51625)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ5VP-000000004Di-06h1

for root@nk.ca;

Fri, 26 Dec 2025 03:57:20 -0700

Received: by mail-ot1-f69.google.com with SMTP id 46e09a7af769-7c70268301aso7065314a34.3

for ; Fri, 26 Dec 2025 02:56:22 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1766746576; x=1767351376; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=CkEHIgLm4NCRs6V992KAvFU+J4hrrYdj1yYHqshCWU0=;

b=Wa/1orZNW7rd+rBwGQs53IJh32eBL4G9ZnhtrjL4mMkzFCSJrumrRtyIzfVnPg5/PP

r2SuIuZ3Rb+Bwd8KZxehjymTr1bk5/FC05ozeKth0TcLRJy6zCduzY44pEf928ScVXEM

KO3wP7ziFrVkeZNPfUIcZQSUxg81k6jvljte5ESsFOb75B4RwXE6FJFcqKH3El/TeHj0

0kG5BiCgobcEcFk62mTH+PssauXz3fMQ1mIyHEG7bFloZCpYFWAQEe/7S3ogWF1ro2eG

NJWPDoD8HnnSFCIcjg2GxnEihjwgnvxrEorLVkzRr7IVRx/3aiEx1xE0wR254hXSKID8

FYbg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1766746576; x=1767351376;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=CkEHIgLm4NCRs6V992KAvFU+J4hrrYdj1yYHqshCWU0=;

b=FSLXnDEDENgj00BOWj4DooA7sOOwDgFy/qw1fiqsEwZxmP2+yCn2sLYZ+NhCwRGOaU

eQveAANNiUej7P9156AChiB2R13UOyQF/j8HvKuCNLcGhIEdSxGkzr9qRQ5/rqZjDmP2

S/3yda9cWxj59DShZMLNCNoAwpNUwgAIZdA7Gj8Af9HBHEXgrTF0TmlW/dqUclOOtJVl

Ekf98n9l+6K5bWwTwQn4dWhOEIWoHZxOhZ0zZ40Uig32WFEPr63fZT8m7/RpYJ2dSOJd

s5WzQdeE1pObAQrQOpqm9uCxNpMK3GRLk1auOV34XVcftuIIRjnILz2onspw8B1NqZgB

yDHQ==

X-Gm-Message-State: AOJu0Yz74j960+MJwlBVNAzzsRjM4ZKYD7l8Yjf+ZLoPYRfNsKNWcd4q

ygKTkS2scGpV2xy+jyeFbEs0z7/fS8NSItoeXvzbqs5ErfDSE9KmC2npQxpbDT5NWK5kkxwyr+w

CdM0=

X-Google-Smtp-Source: AGHT+IGb3w0sSWpgiXqBx1AXOSW/TF23D9KGhB1U3GjDD49zT9TGvNWeJx2KLyVr4XAip2wrHqspQ0p5xA==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:812:b0:657:5723:76c8 with SMTP id

006d021491bc7-65d0e962961mr9449692eaf.6.1766746576594; Fri, 26 Dec 2025

02:56:16 -0800 (PST)

Message-ID:

Date: Fri, 26 Dec 2025 10:56:16 +0000

Subject: Re: VA discuss ? root@nk.ca

From: ravikumar849562@gmail.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="0000000000001b2ebe0646d8be1b"



--0000000000001b2ebe0646d8be1b

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,

I sent you an email on Friday but didn't hear back.

Happy to schedule a quick call.

Thank you!

Kundan

VA Team!!





On Fri, Dec 12, 2025, at 9:43 AM, < > wrote:



Hi, root@nk.ca



Are you looking to hire an affordable Remote Virtual Assistant?

Limited-time offer: Save 20%



We support Virtual Assistant services Social Media Marketing ,Bookkeeping,

CRM, lead generation, calls, email management, SEO, digital marketing,

design, and more.



Would you like me to share our pricing and packages, or schedule a quick

call to discuss this week or next week?



Thanks,

Kundan

VA Team!!



--0000000000001b2ebe0646d8be1b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,
I sent you an email on Friday but didn=E2=80=99t hear back.
Happy=

to schedule a quick call.
Thank you!
Kundan
VA Team!!


=

On Fri, Dec 12, 2025, at 9:43=E2=80=AFAM, < > wrote:

Hi, root@nk.ca<=

br>
Are you looking to hire an affordable Remote Virtual Assistant? Limi=

ted-time offer: Save 20%

We support Virtual Assistant services Socia=

l Media Marketing ,Bookkeeping, CRM, lead generation, calls, email manageme=

nt, SEO, digital marketing, design, and more.

Would you like me to s=

hare our pricing and packages, or schedule a quick call to discuss this wee=

k or next week?

Thanks,
Kundan
VA Team!!

--0000000000001b2ebe0646d8be1b--

Donation spam Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Dec 2025 05:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vYkPL-00000000NAT-1Kk7

for dave@doctor.nl2k.ab.ca;

Thu, 25 Dec 2025 05:25:31 -0700

Resent-From: The Doctor

Resent-Date: Thu, 25 Dec 2025 05:25:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vpn.ledick.de ([85.16.135.70]:51482)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vYi0g-00000000G8h-0nKT

for root@nl2k.ab.ca;

Thu, 25 Dec 2025 02:52:03 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ledick.de;

s=s1; h=MIME-Version:Content-Type:Reply-To:Message-ID:Date:Subject:To:From:

Sender:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=yZIc0GlbpwU1fMDyGz71uYuc55Hbu8u3auNCGYyoeaE=; b=n9wsiXYuSCSDz6mZ3+hbpHx/wH

19E7n91I+CyUnNs2p+YR3lnW/SDq5DuBjxvDb17Sb/I11qSlXJypPjehaGoLo/EeIkcTCj8nOAk1O

3Np6M/XoiGUDmUZMkAP65sy66h9NImTy4sWqItrduB6Co5f2lO5+838D1nQjJ7UpgtQ8FSSyB2YBI

/UjRpC0IpdKIpqKt6oc4dq27WPGPE46N4pi3wxCoLy6PomsiN6kxWz9aSpnqHJi8Sa8lJcEjVMAHM

KJF4S21/HO52QoeHIGNR3vBFlhyJqjg8HpztUU7vU77zh+m2o3DFSSMOWyUElpOLGb9FzbA6aguLs

fpyFw9Tg==;

Received: from hvexchange ([172.16.1.251]:27764 helo=vpn.ledick.de)

by vpn.ledick.de with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1vXfvH-000000007Iq-1mmc;

Mon, 22 Dec 2025 14:26:03 +0100

Received: from hvExchange.lfg.local (172.16.1.251) by hvExchange.lfg.local

(172.16.1.251) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.36; Mon, 22 Dec

2025 14:25:46 +0100

Received: from hvExchange.lfg.local ([fe80::8bd6:aa22:36f9:419b]) by

hvExchange.lfg.local ([fe80::8bd6:aa22:36f9:419b%12]) with mapi id

15.02.1544.036; Mon, 22 Dec 2025 14:25:46 +0100

From: Feyna Carstens

To: Feyna Carstens

Subject: HELLO

Thread-Topic: HELLO

Thread-Index: AdxzRnsHWArNMBknx0iE23vCwEhzJA==

Date: Mon, 22 Dec 2025 13:25:46 +0000

Message-ID: <709414230f4c4f22b41802137068977b@ledick.de>

Reply-To: "mfrancafissolo00@gmail.com"

Accept-Language: en-AU, de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [212.102.39.209]

Content-Type: multipart/alternative;

boundary="_000_709414230f4c4f22b41802137068977bledickde_"

MIME-Version: 1.0

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Mrs maria has a donation of 3.5m for you . Reply for more

details. Mrs maria has a donation of 3.5m for you . Reply for more details.





Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[212.102.39.209 listed in sbl-xbl.spamhaus.org]

[212.102.39.209 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[212.102.39.209 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[85.16.135.70 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[85.16.135.70 listed in sa-accredit.habeas.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[85.16.135.70 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[85.16.135.70 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mfrancafissolo00(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

Subject: {SPAM?} HELLO

padding:20px 24px">

=09=09=09

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

ight:bold">Meta Verified=


style=3D"color:#6b7280">=C2=A0


=09=09=09


=09=09=09


ont-size:18px">=

Lifetime Free B=

lue Badge Verification for Your Facebook Page
span>



=09=09=09
dir=3D"auto"><=

font style=3D"vertical-align: inherit;">Dear Manager,<=

/font>

=3D"font-size:14px">
style=3D"vertical-align: inherit;">
al-align: inherit;">We'd like to inform you that your page is eligible to r=

eceive a blue badge. Following a review and evaluation process, Meta has co=

nfirmed that your Facebook Page is=C2=A0
>
uto">eligible to receive a free li=

fetime blue badge
ont style=3D"vertical-align: inherit;">
rtical-align: inherit;">=C2=A0. To activate and display the badge on your P=

age, you will need to complete an additional verification step to ensure ow=

nership and security.


=09=09=09
:#e5e7eb; border-radius:6px; border:undefined" width=3D"100%">

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

>
rtical-align: inherit;">
nherit;">The meaning of the blue badge=


to">=C2=A0:
font>


=09=09=09=09=09=09


=09=09=09=09=09=09
;">- It verifie=

s=C2=A0
=3D"vertical-align: inherit;">
ign: inherit;">the authenticity
ir=3D"auto">
nt style=3D"vertical-align: inherit;">=C2=A0of the page and helps customers=

distinguish official accounts from fake ones.<=

br />

=09=09=09=09=09=09
;">- It increas=

es credibility in brand communication and supports communication and custom=

er support efforts.


=09=09=09
Mon Tue Wed Thu Fri Sat Sun
← Back December '25 Forward →
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30 31        

Archives

Categories

Syndicate This Blog

  • XML

Blog Administration

Open login screen

Powered by

NetKnow Navigation

Home


VPNs


Dialup Service


Web Design


Web Hosting


E-Commerce


Server Colocation


Domain Registration


Web Mail


Support


Testimonials




Client List


FAQs


Interested in NetKnow Services?


Links


Disclaimer


Acceptable Use


Security





Technorati Profile







AddThis Feed Button

Remote RSS/OPML-Blogroll Feed

No RSS/OPML feed selected

Error

serendipity error: could not include serendipity_plugin_statistics:9cbc0e29a86fd9359ac6748399d6ba5b - exiting.

addthis





AddThis Social Bookmark Button









Blog Grade for www.nk.ca/blog

Empire Avenue





Error

serendipity error: could not include serendipity_plugin_freetag:6c39baf097de002d8b1c2e33b9661474 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:f520e0fa688ba61bd1ed85c0fd80d550 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:b18e142d4998b6b0092d068ad858683d - exiting.

Syndicate This Blog

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:7aefbb7ca9b764849be35e938b6fc9b2 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:c7a92f670894afa9e3097574359fe38d - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:8b72cc4261ddc7ff15df253b17c29c23 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:a0bd1a65cd9ff1c3e289829cc26557c4 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:dcd26c048e45c234c054530ef1492953 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:6d4c66aeb83aeb9524a7cc609051cf0f - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:acc1042e790905e499445a6890081492 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:158fb50035b12269ec43107b29253af3 - exiting.

Error

serendipity error: could not include serendipity_plugin_topreferers:6b7e3336713d0a60294c7e310ca5cf1a - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:d3f047ee6f925c138fae56dcd7a99400 - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:5544ace5c8b19bb8592464810b48df10 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:5624ac0b69cdbe32d0cdc40814d7eb41 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:b8387d3a378247c1c9ede46fffb084e1 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:bacdc0652131449ebc68ebde2bcb9ce2 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:8c84ca587b64b627d986e9d5ce98ead1 - exiting.