NetKnow Corporate Blog

Canada Bread scandal phish from Japan

Posted by Dave Yadallee on Friday, August 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 07:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx3AQ-00000000Gqd-04mA

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 07:50:50 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 07:50:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from linkup-net.co.jp ([122.17.181.120]:45416)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx24o-000000004WF-42KX

for root@nl2k.ab.ca;

Thu, 20 Aug 2026 06:41:07 -0600

Received: from EC2AMAZ-K59C7BB (ec2-43-207-65-189.ap-northeast-1.compute.amazonaws.com [43.207.65.189])

by linkup-net.co.jp (Postfix) with ESMTPA id 3A0182AD8ACA

for ; Thu, 20 Aug 2026 21:40:04 +0900 (JST)

Authentication-Results: linkup-net.co.jp; arc=none smtp.remote-ip=43.207.65.189

ARC-Seal: i=1; a=rsa-sha256; d=bizmw.com; s=default; t=1787229604; cv=none;

b=SZiLTbvuUyngozL6MeYOXc6acFik1XJMODyKnA/ywz4bRSuwjpLngbgzzEqVaa1rwcsoyXNf+J0Ai23DnyKZyDeS5qKrFimmKSHxMZo8pSTm10zEIUcQG8c+Uz8AaieQCA0rJ9hNHqKrbROPJiy6w3gdpCYT1ePdJNNL4Irj0+A=

ARC-Message-Signature: i=1; a=rsa-sha256; d=bizmw.com; s=default;

t=1787229604; c=relaxed/relaxed;

bh=WEr3lBaLX2huenFaTqzF9yLHEsTgBeT37aValPpDaBw=;

h=DKIM-Signature:MIME-Version:From:To:Date:Subject; b=kd3S572o9zha03O6IyXw0tOpsdqxH0a2Y8S74209GR2gYGsYg+teZCXVwNxkAbi1EjYTxtfXpGq7pQRkRRVqsL1cDciDytG7uoflknpKrPzufc6KbVW9sdhmt+u/kv0K+zUKhS161SXwX7rTKkteIBk5DaHaOEcsGU8e2xrQuKg=

ARC-Authentication-Results: i=1; linkup-net.co.jp

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linkup-net.co.jp;

s=bizmw; t=1787229604;

bh=WEr3lBaLX2huenFaTqzF9yLHEsTgBeT37aValPpDaBw=;

h=From:To:Date:Subject:From;

b=dn69/XUVoBvg1DO1n5uxziMsVeaRNtuUG5Gu4fhEb8wc9mFrQp1ivhFkACzFR/if1

GyYCRI2oiOi14hhFROOcXXeXj/SeHohix20OyncasNcSo2N5aFvQMILMAOE4udNNit

TE+nzcUVYUGpiehsNpoaxGAc0LF30JF8XqMJfmhc=

MIME-Version: 1.0

From: "Class Action Settlement Info"

To: root@nl2k.ab.ca

Date: 20 Aug 2026 12:40:02 +0000

Subject: =?utf-8?B?Tm90aWNlIFJlZ2FyZGluZyBTZXR0bGVtZW50IEJlbmVmaXRz?=

=?utf-8?B?IFJlZiBOb8K6IDogODM4NjA2MjE1OCA4LzIwLzIwMjYgMTI6NDA6MDIg?=

=?utf-8?B?UE0=?=

Content-Type: multipart/alternative;

boundary=--boundary_11455_88200529-44ec-49c0-9600-f0f2be1e0ff1

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview:
xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">

Content analysis details: (10.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[43.207.65.189 listed in will-spam-for-food.eu.org]

[43.207.65.189 listed in will-spam-for-food.eu.org]

[43.207.65.189 listed in will-spam-for-food.eu.org]

[43.207.65.189 listed in will-spam-for-food.eu.org]

[43.207.65.189 listed in will-spam-for-food.eu.org]

[43.207.65.189 listed in will-spam-for-food.eu.org]

[43.207.65.189 listed in will-spam-for-food.eu.org]

[43.207.65.189 listed in will-spam-for-food.eu.org]

[122.17.181.120 listed in will-spam-for-food.eu.org]

[122.17.181.120 listed in will-spam-for-food.eu.org]

[122.17.181.120 listed in will-spam-for-food.eu.org]

[122.17.181.120 listed in will-spam-for-food.eu.org]

[122.17.181.120 listed in will-spam-for-food.eu.org]

[122.17.181.120 listed in will-spam-for-food.eu.org]

[122.17.181.120 listed in will-spam-for-food.eu.org]

[122.17.181.120 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.17.181.120 listed in dnsbl.ahbl.org]

[122.17.181.120 listed in dnsbl.ahbl.org]

[122.17.181.120 listed in dnsbl.ahbl.org]

[122.17.181.120 listed in dnsbl.ahbl.org]

[43.207.65.189 listed in dnsbl.ahbl.org]

[43.207.65.189 listed in dnsbl.ahbl.org]

[43.207.65.189 listed in dnsbl.ahbl.org]

[43.207.65.189 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.17.181.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.17.181.120 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.17.181.120 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.17.181.120 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: squarespace.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.8 FONT_ZERO BODY: Nobody likes invisible fonts in emails

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[122.17.181.120 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

4.0 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} =?utf-8?B?Tm90aWNlIFJlZ2FyZGluZyBTZXR0bGVtZW50IEJlbmVmaXRz?=

=?utf-8?B?IFJlZiBOb8K6IDogODM4NjA2MjE1OCA4LzIwLzIwMjYgMTI6NDA6MDIg?=

=?utf-8?B?UE0=?=

Verita Global, LLC

Class Action Claims Administrator

P.O. Box 3355

London, Ontario N6A 4K3

Notice of Class Action Settlement

Re: Loblaw/Weston Packaged Bread Class Actions

You are receiving this notice because you were identified as having claimed a $100–$200 Loblaw Card from the Packaged Bread Loblaw Card Program (2008–2026) and/or registered with the lawyers handling this class action.

Authorized by the Superior Court of Justice for Ontario

Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of all individuals and businesses resident in Canada who purchased Packaged Bread, alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges. The Courts have not yet made any decision on the merits of the claims or defences in either action.

The Plaintiffs have entered into a national settlement with Loblaw Companies Limited, Loblaws Inc., George Weston Limited, Weston Foods (Canada) Inc., Weston Bakeries Limited, and Weston Food Distribution Inc. (collectively “Loblaw/Weston”) for $500 million ($96 million already paid), plus their cooperation pursuing claims against non-settling defendants. In exchange, Settlement Class Members release Loblaw/Weston from claims relating to Packaged Bread.

If approved by both Courts, net settlement funds will be distributed to Settlement Class Members per the approved distribution protocol. Funds for personal-consumption purchasers will be distributed through a claims process; funds for resale purchasers will be held in trust pending a future Court determination.

Canadian Settlement Class Members’ Options

If you reside anywhere in Canada, except Quebec, and purchased Packaged Bread between January 1, 2008 and December 31, 2025, and wish to participate, you do not need to do anything to be included in the Ontario Settlement Class.

Apply Now

For more information and to exercise your rights, read the full Notice at

www.canadianbreadsettlement.ca

A further Notice will be published with details on how eligible Settlement Class Members may claim compensation once the Loblaw/Weston Agreement is approved.

Class Counsel

Strosberg Wingfield Sasso LLP – www.swslitigation.com

Orr Taylor LLP – www.orrtaylor.com

Sincerely,

Verita Global, LLC

Claims Administrator

P.O. Box 3355 | London, Ontario | N6A 4K3 | Canada

DoNotReply@m.veritacanada.com

If you no longer wish to receive these notices, you can unsubscribe here.

Bread scandal phish from Japan

Posted by Dave Yadallee on Friday, August 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 06:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1no-00000000KrH-3Wmh

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 06:23:24 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 06:23:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from kajin.jp ([116.80.20.174]:38915)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1mq-00000000FpY-2j79

for root@nk.ca;

Thu, 20 Aug 2026 06:22:32 -0600

Received: (qmail 843660 invoked by VF by uid 0); 20 Aug 2026 21:21:33 +0900

X-Vade-Tracker: score=500, verdict=spam:high, state=1

spamcause=gggruggvucftvghtrhhoucdtuddrgeefiedrtddugdduvdektdehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecupffvvffrveenuceurghilhhouhhtmecufedttdenucgohfhorhgsihguuggvnhfkphfpvghtfihorhhkucdlhedttddmnecujfgurhepggfhvfffufgtsegrtddtredttdejnecuhfhrohhmpedfufgvthhtlhgvmhgvnhhtucfovghmsggvrhcutfhighhhthhsfdcuoehsuhhpphhorhhtsehkrghjihhnrdhjpheqnecuggftrfgrthhtvghrnhepfeeiueevhefgffevudeggfeludekhfetudevjefhueejtdduteejvedvgeekjeffnecuffhomhgrihhnpegrmhgriihonhgrfihsrdgtohhmpdgtrghnrgguihgrnhgsrhgvrggushgvthhtlhgvmhgvnhhtrdgtrgdpshifshhlihhtihhgrghtihhonhdrtghomhdpohhrrhhtrgihlhhorhdrtghomhenucfkphepfeehrdejjedrjeekrdekvdenucfuphgrmhfkphepfeehrdejjedrjeekrdekvdenucfhohhrsghiugguvghnkfhppfgvthifohhrkhepfeehrdejjedrjeekrdekvdenuceurggutfgvphhuthffohhmrghinheptggrnhgrughirghnsghrvggrughsvghtthhlvghmvghnthdrtggrnecuufhprghmtegunhfuuhgsjhgvtghtpegtlhhllhhllhhllhcutghllhhllhcutghllhhllhhllhemucgtlhhllhhllhhllhhllhhllhhlucgtlhhllhhllhhllhhllhhlucgrrggrucgrrgcumecuugenucevlhhushhtvghrufh

iiigvpedtnecurfgrrhgrmhepihhnvghtpeefhedrjeejrdejkedrkedvpdhhvghlohepgfevvdetofetkgdqlfggiefqhffgqfdpmhgrihhlfhhrohhmpehsuhhpphhorhhtsehkrghjihhnrdhjphdpnhgspghrtghpthhtohepuddprhgtphhtthhopehrohhothesnhhkrdgtrgdpmhhouggvpehsmhhtphhouhht

Received: from unknown (HELO EC2AMAZ-JV6OFEO) (support@kajin.jp@35.77.78.82)

by dc108.etius.jp (116.80.20.174) with ESMTPA; 20 Aug 2026 21:21:33 +0900

MIME-Version: 1.0

From: "Settlement Member Rights"

To: root@nk.ca

Date: 20 Aug 2026 12:21:33 +0000

Subject: =?utf-8?B?Q2FuYWRpYW4gQnJlYWQgQWN0aW9uczogQ2VydGlmaWNhdGlv?=

=?utf-8?B?biBJbmZvcm1hdGlvbiBSZWYgTm/CuiA6IDEyMzI1MTM3NTMgOC8yMC8y?=

=?utf-8?B?MDI2IDEyOjIxOjMzIFBN?=

Content-Type: multipart/alternative;

boundary=--boundary_10139_8ccdc59b-ffc4-47ef-8c87-e7bcd36f2040

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview:
xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">

Content analysis details: (9.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.77.78.82 listed in will-spam-for-food.eu.org]

[35.77.78.82 listed in will-spam-for-food.eu.org]

[35.77.78.82 listed in will-spam-for-food.eu.org]

[35.77.78.82 listed in will-spam-for-food.eu.org]

[35.77.78.82 listed in will-spam-for-food.eu.org]

[35.77.78.82 listed in will-spam-for-food.eu.org]

[35.77.78.82 listed in will-spam-for-food.eu.org]

[35.77.78.82 listed in will-spam-for-food.eu.org]

[116.80.20.174 listed in will-spam-for-food.eu.org]

[116.80.20.174 listed in will-spam-for-food.eu.org]

[116.80.20.174 listed in will-spam-for-food.eu.org]

[116.80.20.174 listed in will-spam-for-food.eu.org]

[116.80.20.174 listed in will-spam-for-food.eu.org]

[116.80.20.174 listed in will-spam-for-food.eu.org]

[116.80.20.174 listed in will-spam-for-food.eu.org]

[116.80.20.174 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[116.80.20.174 listed in dnsbl.ahbl.org]

[116.80.20.174 listed in dnsbl.ahbl.org]

[116.80.20.174 listed in dnsbl.ahbl.org]

[116.80.20.174 listed in dnsbl.ahbl.org]

[35.77.78.82 listed in dnsbl.ahbl.org]

[35.77.78.82 listed in dnsbl.ahbl.org]

[35.77.78.82 listed in dnsbl.ahbl.org]

[35.77.78.82 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[116.80.20.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[116.80.20.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[116.80.20.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[116.80.20.174 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: squarespace.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[116.80.20.174 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.8 FONT_ZERO BODY: Nobody likes invisible fonts in emails

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

0.0 LOTS_OF_MONEY Huge... sums of money

4.0 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

Subject: {SPAM?} =?utf-8?B?Q2FuYWRpYW4gQnJlYWQgQWN0aW9uczogQ2VydGlmaWNhdGlv?=

=?utf-8?B?biBJbmZvcm1hdGlvbiBSZWYgTm/CuiA6IDEyMzI1MTM3NTMgOC8yMC8y?=

=?utf-8?B?MDI2IDEyOjIxOjMzIFBN?=

Verita Global, LLC

Class Action Claims Administrator

P.O. Box 3355

London, Ontario N6A 4K3

Notice of Class Action Settlement

Re: Loblaw/Weston Packaged Bread Class Actions

You are receiving this notice because you were identified as having claimed a $100–$200 Loblaw Card from the Packaged Bread Loblaw Card Program (2008–2026) and/or registered with the lawyers handling this class action.

Authorized by the Superior Court of Justice for Ontario

Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of all individuals and businesses resident in Canada who purchased Packaged Bread, alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges. The Courts have not yet made any decision on the merits of the claims or defences in either action.

The Plaintiffs have entered into a national settlement with Loblaw Companies Limited, Loblaws Inc., George Weston Limited, Weston Foods (Canada) Inc., Weston Bakeries Limited, and Weston Food Distribution Inc. (collectively “Loblaw/Weston”) for $500 million ($96 million already paid), plus their cooperation pursuing claims against non-settling defendants. In exchange, Settlement Class Members release Loblaw/Weston from claims relating to Packaged Bread.

If approved by both Courts, net settlement funds will be distributed to Settlement Class Members per the approved distribution protocol. Funds for personal-consumption purchasers will be distributed through a claims process; funds for resale purchasers will be held in trust pending a future Court determination.

Canadian Settlement Class Members’ Options

If you reside anywhere in Canada, except Quebec, and purchased Packaged Bread between January 1, 2008 and December 31, 2025, and wish to participate, you do not need to do anything to be included in the Ontario Settlement Class.

Apply Now

For more information and to exercise your rights, read the full Notice at

www.canadianbreadsettlement.ca

A further Notice will be published with details on how eligible Settlement Class Members may claim compensation once the Loblaw/Weston Agreement is approved.

Class Counsel

Strosberg Wingfield Sasso LLP – www.swslitigation.com

Orr Taylor LLP – www.orrtaylor.com

Sincerely,

Verita Global, LLC

Claims Administrator

P.O. Box 3355 | London, Ontario | N6A 4K3 | Canada

DoNotReply@m.veritacanada.com

If you no longer wish to receive these notices, you can unsubscribe here.

Bread scandal phish from Japan

Posted by Dave Yadallee on Friday, August 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 06:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1nj-00000000Kci-2TGE

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 06:23:19 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 06:23:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from naritagodo.jp ([60.43.199.30]:43376)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1Rb-000000008is-1dhi

for doctor@nl2k.ab.ca;

Thu, 20 Aug 2026 06:00:35 -0600

Received: from EC2AMAZ-CIPD8O7 (ec2-15-152-20-128.ap-northeast-3.compute.amazonaws.com [15.152.20.128])

by naritagodo.jp (Postfix) with ESMTPA id CF15C5A59B

for ; Thu, 20 Aug 2026 20:59:37 +0900 (JST)

Authentication-Results: naritagodo.jp; arc=none smtp.remote-ip=15.152.20.128

ARC-Seal: i=1; a=rsa-sha256; d=bizmw.com; s=default; t=1787227177; cv=none;

b=zkLrq30THmrR567YXuf1gOI/NK8n/3Hab1d86t2eldAx0g3Iz+3edAxd5fqzneI03/JlCXXOrjnb9m7k1Jft6Hp4P7avXwxC7H43OfcOC2BWxGAKqM7hw02JXWO0XqB9J+9n0TBWtDkKnUFJ0x9L/IAGnmwzZjHRdQ4obe59K+k=

ARC-Message-Signature: i=1; a=rsa-sha256; d=bizmw.com; s=default;

t=1787227177; c=relaxed/relaxed;

bh=Lt/lNeEHknRieIRaJauyPfsXwp333G2AEIxFRMJlw8E=;

h=DKIM-Signature:MIME-Version:From:To:Date:Subject; b=PYGsbRcUfMg4Uzu8NNVW1a60cvLitDqPhK1aiR/xBrShSDWJdA8GeEDYsNorYv2WuCpaf4tQaLu+4zffMECDY6d5IdzZxkfCSLSz2qEufQQjP9mYTmKtIh8easDP1AxL4O6br6PzGFrEULzlIlwstHYE1OrBBtrtbftyk4A/mng=

ARC-Authentication-Results: i=1; naritagodo.jp

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=naritagodo.jp;

s=bizmw; t=1787227177;

bh=Lt/lNeEHknRieIRaJauyPfsXwp333G2AEIxFRMJlw8E=;

h=From:To:Date:Subject:From;

b=foaa7bZQ5SVRrC8OMUp9P430C1qSHkJ3h9Xn9FBf/4csIF2Bd1rBuH3l5ZCuBo8qo

/yCyA2hp2eZX/xeoa+hUELj4s2NuusvGaY9/56VRFljvkdAL7QKKx6CPQ2En6CfJed

5e1nHJPzsznSesXNJ2Yi8B6ji1qk9kBGWCrCiQTY=

MIME-Version: 1.0

From: "Class Member Information"

To: doctor@nl2k.ab.ca

Date: 20 Aug 2026 11:59:37 +0000

Subject: =?utf-8?B?SW5mb3JtYXRpb24gZm9yIFNldHRsZW1lbnQgQ2xhc3MgTWVt?=

=?utf-8?B?YmVycyBSZWYgTm/CuiA6IDMzNzYyODExNzAgOC8yMC8yMDI2IDExOjU5?=

=?utf-8?B?OjM3IEFN?=

Content-Type: multipart/alternative;

boundary=--boundary_9295_2aedae34-c42c-4a79-8fd9-ef3f1d51ff47

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview:
xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">

Content analysis details: (10.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[60.43.199.30 listed in dnsbl.ahbl.org]

[60.43.199.30 listed in dnsbl.ahbl.org]

[60.43.199.30 listed in dnsbl.ahbl.org]

[60.43.199.30 listed in dnsbl.ahbl.org]

[15.152.20.128 listed in dnsbl.ahbl.org]

[15.152.20.128 listed in dnsbl.ahbl.org]

[15.152.20.128 listed in dnsbl.ahbl.org]

[15.152.20.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[60.43.199.30 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[60.43.199.30 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[60.43.199.30 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[60.43.199.30 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: squarespace.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[60.43.199.30 listed in bl.score.senderscore.com]

2.8 FONT_ZERO BODY: Nobody likes invisible fonts in emails

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

4.0 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_MONEY_PERCENT X% of a lot of money for you

Subject: {SPAM?} =?utf-8?B?SW5mb3JtYXRpb24gZm9yIFNldHRsZW1lbnQgQ2xhc3MgTWVt?=

=?utf-8?B?YmVycyBSZWYgTm/CuiA6IDMzNzYyODExNzAgOC8yMC8yMDI2IDExOjU5?=

=?utf-8?B?OjM3IEFN?=

Public Notice

Loblaw/Weston Packaged Bread

Class Actions Settlement

LONDON, ONTARIO — ISSUED BY VERITA GLOBAL, LLC, CLAIMS ADMINISTRATOR

You are receiving this notice because you were identified as having claimed a $100–$200 Loblaw Card from the Packaged Bread Loblaw Card Program (2008–2026) and/or registered with the lawyers handling this class action.

Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of all individuals and businesses resident in Canada who purchased Packaged Bread, alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges. The Courts have not yet made any decision on the merits of the claims or defences in either action.

The Plaintiffs have entered into a national settlement with Loblaw Companies Limited, Loblaws Inc., George Weston Limited, Weston Foods (Canada) Inc., Weston Bakeries Limited, and Weston Food Distribution Inc. (collectively “Loblaw/Weston”) for $500 million ($96 million already paid), plus their cooperation pursuing claims against non-settling defendants. In exchange, Settlement Class Members release Loblaw/Weston from claims relating to Packaged Bread.

If approved by both Courts, net settlement funds will be distributed to Settlement Class Members per the approved distribution protocol. Funds for personal-consumption purchasers will be distributed through a claims process; funds for resale purchasers will be held in trust pending a future Court determination.

Notice to Canadian Settlement Class Members

If you reside anywhere in Canada, except Quebec, and purchased Packaged Bread between January 1, 2008 and December 31, 2025, and wish to participate, you do not need to do anything to be included in the Ontario Settlement Class.

APPLY NOW

For more information and to exercise your rights, read the full Notice at

www.canadianbreadsettlement.ca

A further Notice will be published with details on how eligible Settlement Class Members may claim compensation once the Loblaw/Weston Agreement is approved.

Counsel of Record

Strosberg Wingfield Sasso LLP

www.swslitigation.com Orr Taylor LLP

www.orrtaylor.com

Verita Global, LLC · Claims Administrator

P.O. Box 3355 | London, Ontario | N6A 4K3 | Canada

DoNotReply@m.veritacanada.com

Unsubscribe from these notices

Bread scandal phish from Japan

Posted by Dave Yadallee on Friday, August 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 06:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1nX-00000000K3W-0K9s

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 06:23:07 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 06:23:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from naritagodo.jp ([60.43.199.30]:43376)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1Rb-000000008is-1dhi

for doctor@nl2k.ab.ca;

Thu, 20 Aug 2026 06:00:35 -0600

Received: from EC2AMAZ-CIPD8O7 (ec2-15-152-20-128.ap-northeast-3.compute.amazonaws.com [15.152.20.128])

by naritagodo.jp (Postfix) with ESMTPA id CF15C5A59B

for ; Thu, 20 Aug 2026 20:59:37 +0900 (JST)

Authentication-Results: naritagodo.jp; arc=none smtp.remote-ip=15.152.20.128

ARC-Seal: i=1; a=rsa-sha256; d=bizmw.com; s=default; t=1787227177; cv=none;

b=zkLrq30THmrR567YXuf1gOI/NK8n/3Hab1d86t2eldAx0g3Iz+3edAxd5fqzneI03/JlCXXOrjnb9m7k1Jft6Hp4P7avXwxC7H43OfcOC2BWxGAKqM7hw02JXWO0XqB9J+9n0TBWtDkKnUFJ0x9L/IAGnmwzZjHRdQ4obe59K+k=

ARC-Message-Signature: i=1; a=rsa-sha256; d=bizmw.com; s=default;

t=1787227177; c=relaxed/relaxed;

bh=Lt/lNeEHknRieIRaJauyPfsXwp333G2AEIxFRMJlw8E=;

h=DKIM-Signature:MIME-Version:From:To:Date:Subject; b=PYGsbRcUfMg4Uzu8NNVW1a60cvLitDqPhK1aiR/xBrShSDWJdA8GeEDYsNorYv2WuCpaf4tQaLu+4zffMECDY6d5IdzZxkfCSLSz2qEufQQjP9mYTmKtIh8easDP1AxL4O6br6PzGFrEULzlIlwstHYE1OrBBtrtbftyk4A/mng=

ARC-Authentication-Results: i=1; naritagodo.jp

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=naritagodo.jp;

s=bizmw; t=1787227177;

bh=Lt/lNeEHknRieIRaJauyPfsXwp333G2AEIxFRMJlw8E=;

h=From:To:Date:Subject:From;

b=foaa7bZQ5SVRrC8OMUp9P430C1qSHkJ3h9Xn9FBf/4csIF2Bd1rBuH3l5ZCuBo8qo

/yCyA2hp2eZX/xeoa+hUELj4s2NuusvGaY9/56VRFljvkdAL7QKKx6CPQ2En6CfJed

5e1nHJPzsznSesXNJ2Yi8B6ji1qk9kBGWCrCiQTY=

MIME-Version: 1.0

From: "Class Member Information"

To: doctor@nl2k.ab.ca

Date: 20 Aug 2026 11:59:37 +0000

Subject: =?utf-8?B?SW5mb3JtYXRpb24gZm9yIFNldHRsZW1lbnQgQ2xhc3MgTWVt?=

=?utf-8?B?YmVycyBSZWYgTm/CuiA6IDMzNzYyODExNzAgOC8yMC8yMDI2IDExOjU5?=

=?utf-8?B?OjM3IEFN?=

Content-Type: multipart/alternative;

boundary=--boundary_9295_2aedae34-c42c-4a79-8fd9-ef3f1d51ff47

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview:
xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">

Content analysis details: (10.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[15.152.20.128 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

[60.43.199.30 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[60.43.199.30 listed in dnsbl.ahbl.org]

[60.43.199.30 listed in dnsbl.ahbl.org]

[60.43.199.30 listed in dnsbl.ahbl.org]

[60.43.199.30 listed in dnsbl.ahbl.org]

[15.152.20.128 listed in dnsbl.ahbl.org]

[15.152.20.128 listed in dnsbl.ahbl.org]

[15.152.20.128 listed in dnsbl.ahbl.org]

[15.152.20.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[60.43.199.30 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[60.43.199.30 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[60.43.199.30 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[60.43.199.30 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: squarespace.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[60.43.199.30 listed in bl.score.senderscore.com]

2.8 FONT_ZERO BODY: Nobody likes invisible fonts in emails

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

4.0 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_MONEY_PERCENT X% of a lot of money for you

Subject: {SPAM?} =?utf-8?B?SW5mb3JtYXRpb24gZm9yIFNldHRsZW1lbnQgQ2xhc3MgTWVt?=

=?utf-8?B?YmVycyBSZWYgTm/CuiA6IDMzNzYyODExNzAgOC8yMC8yMDI2IDExOjU5?=

=?utf-8?B?OjM3IEFN?=

Public Notice

Loblaw/Weston Packaged Bread

Class Actions Settlement

LONDON, ONTARIO — ISSUED BY VERITA GLOBAL, LLC, CLAIMS ADMINISTRATOR

You are receiving this notice because you were identified as having claimed a $100–$200 Loblaw Card from the Packaged Bread Loblaw Card Program (2008–2026) and/or registered with the lawyers handling this class action.

Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of all individuals and businesses resident in Canada who purchased Packaged Bread, alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges. The Courts have not yet made any decision on the merits of the claims or defences in either action.

The Plaintiffs have entered into a national settlement with Loblaw Companies Limited, Loblaws Inc., George Weston Limited, Weston Foods (Canada) Inc., Weston Bakeries Limited, and Weston Food Distribution Inc. (collectively “Loblaw/Weston”) for $500 million ($96 million already paid), plus their cooperation pursuing claims against non-settling defendants. In exchange, Settlement Class Members release Loblaw/Weston from claims relating to Packaged Bread.

If approved by both Courts, net settlement funds will be distributed to Settlement Class Members per the approved distribution protocol. Funds for personal-consumption purchasers will be distributed through a claims process; funds for resale purchasers will be held in trust pending a future Court determination.

Notice to Canadian Settlement Class Members

If you reside anywhere in Canada, except Quebec, and purchased Packaged Bread between January 1, 2008 and December 31, 2025, and wish to participate, you do not need to do anything to be included in the Ontario Settlement Class.

APPLY NOW

For more information and to exercise your rights, read the full Notice at

www.canadianbreadsettlement.ca

A further Notice will be published with details on how eligible Settlement Class Members may claim compensation once the Loblaw/Weston Agreement is approved.

Counsel of Record

Strosberg Wingfield Sasso LLP

www.swslitigation.com Orr Taylor LLP

www.orrtaylor.com

Verita Global, LLC · Claims Administrator

P.O. Box 3355 | London, Ontario | N6A 4K3 | Canada

DoNotReply@m.veritacanada.com

Unsubscribe from these notices

Bread scandal phish from Japan

Posted by Dave Yadallee on Friday, August 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 06:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1nM-00000000Jb5-46BU

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 06:22:56 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 06:22:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sawada-house.co.jp ([60.43.239.242]:40354)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx19y-000000004oA-2Zjt

for doctor@netknow.ca;

Thu, 20 Aug 2026 05:42:22 -0600

Received: from EC2AMAZ-SMN07KM (ec2-15-152-97-137.ap-northeast-3.compute.amazonaws.com [15.152.97.137])

by sawada-house.co.jp (Postfix) with ESMTPA id 5FB0A611BF5F9

for ; Thu, 20 Aug 2026 20:41:23 +0900 (JST)

Authentication-Results: sawada-house.co.jp; arc=none smtp.remote-ip=15.152.97.137

ARC-Seal: i=1; a=rsa-sha256; d=bizmw.com; s=default; t=1787226083; cv=none;

b=GHOVdQIoEaUvbBg5Xn5FGR3LdgwVOYYpacccDs10yiJ00TEC+2FTWCjSTHDYTQ6PNXMj/cl6m4cN1vR+QcGtaP6Rs4VIweBcWoJb5K19HVfiGqk1AXV0gtRS7hhzguRv95Xtz+NozbM8/HIOuC4pdDfPXdMFBVl+7wntDxf9nmA=

ARC-Message-Signature: i=1; a=rsa-sha256; d=bizmw.com; s=default;

t=1787226083; c=relaxed/relaxed;

bh=W4CNAsZ/7VDefZWE76WGIw/Q/k1FTOEPVLTcAZY9pig=;

h=DKIM-Signature:MIME-Version:From:To:Date:Subject; b=C9o+1PKzROzF5kbZqpH8S1g6nnD2DpsC2SmXEOkMxZDHZiEfcztTwsFB24ctVOQQ4M1t4sH2JsSO6FwvQzhAH+9vzuWTGFM/CdUwTP+WPGu1Jd59Enb1iXNJvJktsi3BCn7wcV7iuJM9zLrXH6QirbJ1dFTynKMp+YTUIDQhBqc=

ARC-Authentication-Results: i=1; sawada-house.co.jp

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sawada-house.co.jp;

s=bizmw; t=1787226083;

bh=W4CNAsZ/7VDefZWE76WGIw/Q/k1FTOEPVLTcAZY9pig=;

h=From:To:Date:Subject:From;

b=WKKPUcZDUQu6rN4Pqx2+UPGDfT6jJi63DcwcCopK1DjP7604JNdyMghCyTNOLGLSB

NguEwUWYxjTWa8HG+byOmO0xV79c4CD/ES1ljQstBFtbpu0YjaenEAnccPk8IE2Kzd

jCyvxeRoHRfRSg17Ovgr9jk7UtBhb3Mv/0tR1XQw=

MIME-Version: 1.0

From: "Canadian Bread Purchasers"

To: doctor@netknow.ca

Date: 20 Aug 2026 11:41:23 +0000

Subject: =?utf-8?B?SW5mb3JtYXRpb24gQWJvdXQgSW5jbHVzaW9uIGluIHRoZSBT?=

=?utf-8?B?ZXR0bGVtZW50IENsYXNzIFJlZiBOb8K6IDogMDA2MTU1MDIxMyA4LzIw?=

=?utf-8?B?LzIwMjYgMTE6NDE6MjMgQU0=?=

Content-Type: multipart/alternative;

boundary=--boundary_8417_f75c8502-e10c-4d6c-ad69-a6c5bb4490ea

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview:
xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">

Content analysis details: (9.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[60.43.239.242 listed in dnsbl.ahbl.org]

[60.43.239.242 listed in dnsbl.ahbl.org]

[60.43.239.242 listed in dnsbl.ahbl.org]

[60.43.239.242 listed in dnsbl.ahbl.org]

[15.152.97.137 listed in dnsbl.ahbl.org]

[15.152.97.137 listed in dnsbl.ahbl.org]

[15.152.97.137 listed in dnsbl.ahbl.org]

[15.152.97.137 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[60.43.239.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[60.43.239.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[60.43.239.242 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[60.43.239.242 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: squarespace.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.8 FONT_ZERO BODY: Nobody likes invisible fonts in emails

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[60.43.239.242 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

4.0 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_MONEY_PERCENT X% of a lot of money for you

Subject: {SPAM?} =?utf-8?B?SW5mb3JtYXRpb24gQWJvdXQgSW5jbHVzaW9uIGluIHRoZSBT?=

=?utf-8?B?ZXR0bGVtZW50IENsYXNzIFJlZiBOb8K6IDogMDA2MTU1MDIxMyA4LzIw?=

=?utf-8?B?LzIwMjYgMTE6NDE6MjMgQU0=?=

Public Notice

Loblaw/Weston Packaged Bread

Class Actions Settlement

LONDON, ONTARIO — ISSUED BY VERITA GLOBAL, LLC, CLAIMS ADMINISTRATOR

You are receiving this notice because you were identified as having claimed a $100–$200 Loblaw Card from the Packaged Bread Loblaw Card Program (2008–2026) and/or registered with the lawyers handling this class action.

Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of all individuals and businesses resident in Canada who purchased Packaged Bread, alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges. The Courts have not yet made any decision on the merits of the claims or defences in either action.

The Plaintiffs have entered into a national settlement with Loblaw Companies Limited, Loblaws Inc., George Weston Limited, Weston Foods (Canada) Inc., Weston Bakeries Limited, and Weston Food Distribution Inc. (collectively “Loblaw/Weston”) for $500 million ($96 million already paid), plus their cooperation pursuing claims against non-settling defendants. In exchange, Settlement Class Members release Loblaw/Weston from claims relating to Packaged Bread.

If approved by both Courts, net settlement funds will be distributed to Settlement Class Members per the approved distribution protocol. Funds for personal-consumption purchasers will be distributed through a claims process; funds for resale purchasers will be held in trust pending a future Court determination.

Notice to Canadian Settlement Class Members

If you reside anywhere in Canada, except Quebec, and purchased Packaged Bread between January 1, 2008 and December 31, 2025, and wish to participate, you do not need to do anything to be included in the Ontario Settlement Class.

APPLY NOW

For more information and to exercise your rights, read the full Notice at

www.canadianbreadsettlement.ca

A further Notice will be published with details on how eligible Settlement Class Members may claim compensation once the Loblaw/Weston Agreement is approved.

Counsel of Record

Strosberg Wingfield Sasso LLP

www.swslitigation.com Orr Taylor LLP

www.orrtaylor.com

Verita Global, LLC · Claims Administrator

P.O. Box 3355 | London, Ontario | N6A 4K3 | Canada

DoNotReply@m.veritacanada.com

Unsubscribe from these notices

Chinese Products spam

Posted by Dave Yadallee on Friday, August 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 06:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1nA-00000000J2m-2boA

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 06:22:44 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 06:22:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.217.187.187] (port=46978 helo=info.mk-miqifs.top)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx0RA-00000000NUD-1vWr

for sales@nk.ca;

Thu, 20 Aug 2026 04:56:06 -0600

Received: from ?? (125.89.212.112) by info.mk-miqifs.top id hgrejo0e97cj for ; Thu, 20 Aug 2026 18:54:32 +0800 (envelope-from )

From: "Luca"

Subject: This is Luca from Shenzhen Naweijia Technology, a specialized

manufacturer of full-range pet supplies.

To: sales@nk.ca

Content-Type: text/html; charset=UTF-8

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Sender: info1@mk-miqifs.top

Reply-To: info@navajoy.com

Date: Thu, 20 Aug 2026 18:54:32 +0800

X-Priority: 3

X-MSMail-Priority: Normal

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913

Content-Disposition: inline

X-Spam_score: 15.5

X-Spam_score_int: 155

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: High-Quality & Cost-Effective Pet Supplies from China Dear

Buyer, Hope you are having a nice day! This is Luca from Shenzhen Naweijia

Technology Co., Ltd., a professional and reliable manufacturer fo [...]

Content analysis details: (15.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.217.187.187 listed in dnsbl.ahbl.org]

[103.217.187.187 listed in dnsbl.ahbl.org]

[103.217.187.187 listed in dnsbl.ahbl.org]

[103.217.187.187 listed in dnsbl.ahbl.org]

[125.89.212.112 listed in dnsbl.ahbl.org]

[125.89.212.112 listed in dnsbl.ahbl.org]

[125.89.212.112 listed in dnsbl.ahbl.org]

[125.89.212.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.217.187.187 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.217.187.187 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.217.187.187 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.217.187.187 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[125.89.212.112 listed in sbl-xbl.spamhaus.org]

[125.89.212.112 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[125.89.212.112 listed in zen.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.217.187.187 listed in bl.score.senderscore.com]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 MR_FROM_SHORT No description available.

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} This is Luca from Shenzhen Naweijia Technology, a specialized

manufacturer of full-range pet supplies.

High-Quality & Cost-Effective Pet Supplies from China

Dear Buyer,

Hope you are having a nice day!

This is Luca from Shenzhen Naweijia Technology Co., Ltd., a professional and reliable manufacturer focused on all kinds of pet supplies in China. We have years of experience cooperating with overseas pet retailers, distributors and brand sellers, helping clients source high-quality products at factory-direct prices and expand their local pet business profitably.

We offer a full range of hot-selling & daily-use pet products, covering your mainstream market demands:

- Pet interactive toys, comfortable pet beds & durable pet houses

- Adjustable pet collars, harnesses and sturdy leashes

- Pet grooming tools and daily cleaning supplies

- Anti-slip pet feeding bowls and various daily pet accessories

- Custom OEM/ODM service (custom logo, design and packaging as your requirements)

We know what matters most to your business: stable quality, favorable price and punctual shipment.

All our products undergo strict quality inspection before delivery. We support low MOQ for trial orders and flexible wholesale terms, which is perfect for your market test and bulk procurement. Whether you need regular stock products or customized items, we can provide stable and long-term supply.

We are eager to build a long-term win-win partnership with your reputable company. Please feel free to contact me if you have any inquiries or need product catalogs & quotations.

Looking forward to your favorable reply!

Best regards,

Luca Qiu

Marketing Manager

Shenzhen Naweijia Technology Co., Ltd.

WhatsApp: +86 13560056180

Chinese products spam

Posted by Dave Yadallee on Thursday, August 20. 2026

Technical drawings spam from Google Gmail

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 06:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1mZ-00000000HKK-0Tzj

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 06:22:07 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 06:22:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f230.google.com ([209.85.210.230]:55759)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwyXH-000000003Ft-2XXW

for sales@netknow.ca;

Thu, 20 Aug 2026 02:54:16 -0600

Received: by mail-pf1-f230.google.com with SMTP id d2e1a72fcca58-84a652535dcso1168579b3a.3

for ; Thu, 20 Aug 2026 01:53:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=bluevasesales-com.20251104.gappssmtp.com; s=20251104; t=1787215994; x=1787820794; darn=netknow.ca;

h=message-id:date:mime-version:content-type:to:subject:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=1dkxsIcpF9EabmvwAGA/cCQOmfmB6fA+qLCTWhEHrU0=;

b=U+oWqYfBCaEQkC8wCum8uzksOgWuokq1BVq/G2WewMoDuv6z4zm9NDaEvsUdVhT48M

HauCaUp/dWDeQsJmMKZSBied8o3/fmf6reTyQZiIpna/z6OiN94DqyDSpIwBzrm8/QkV

NZPYoj6IyLRqTwVKetgih+Npbnio8PEeDyqOqzEOtZUh9m/K7hYv4tSw015jk4KYDuYx

88DyWYWF5KKhtb1zZ4kzcyCetGbxJVVqFrtgStxCep7b9OEGUglDjb4TbRoHPQVIxo1B

RKzt3fERraCTNamQN/i01BDFsnsGlKsItFKb9AOcqyWta79okLzGw9UBqcKmbm5f/tXL

osaQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787215994; x=1787820794;

h=message-id:date:mime-version:content-type:to:subject:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=1dkxsIcpF9EabmvwAGA/cCQOmfmB6fA+qLCTWhEHrU0=;

b=e5x0jg9HaDYPina6WPDVAKPLCRdclSBP+uD9M01Ih/aBpHKMzSqLM6zORpu8mPUGwi

U+rqvo0GNS4G7R4+IKw3jrp6GH+DhiGDWJZfoZga5RbChhATs6xXoYJH8nzth/TvkmSo

CnMmOK+40IupJpzFhBuNGLVII/1xZCBXmdozz4I3BGteoGQMBMCsT839D7kjwXM7pb3y

4sav6gan+/KRCyr0G2Iopch6rEnJiVkCqRKPOzhk+HKgOtwidFk/297HqCORZ8L+YBEQ

2tNTwCE+XtX1eCF/iZ8OlyQc4QysPEgDt7/LZ8NJ0NyEgzASXg2ukyzxjosi9YbfvcmA

gm+Q==

X-Gm-Message-State: AOJu0YyPgDg078bCXQD8YvZYwgEx9WyiXavyo0J1m2RElagMKlrAT2Vb

Gm8TePHz2LYXDUnQyDkyqmmFpI4kDbBLA8cHMQiC6EatneWeJuP2uybUVZk9PDRzzf6dv9Hksk0

WwCxVUvk9A1XQ8TGc0x22zCeTRh/6rSKvSU1GAyw32Kpa6Q0=

X-Gm-Gg: AR+sD10taIiZyHlLoswP0GOZkmOzMOFu0QfpqKbROGJQVX6GJxnnWnOS3kQBf969Vo/

rgEmkcnucmMtJsUTkX7GKCea0p84d1/AjPIaDWqKbMmnmOs9Lwg6ETxuihy6kpLmJC9mbwS1lp7

6BGIa0XfD6Z3DMd0IDrQTUvpBHUe2DvoGSSfKAq/gvfNkqS+dYpfBcM7wGLncp7/+RPPMA+whxq

gyBLp2tAlJpjbMUK20jWB9ZZHstN0msGTnu4QakLwPikJH+AFGUmuSv9NH7/ONIB+tCsJRWFN4D

0hKCYSSfls71q4QH2xRc7juZdOHYizA/X4+QgiHlNCCMJjnKZmwtLaNUuwSmT0nnO/8v

X-Received: by 2002:a05:6a00:908c:b0:841:dca1:8b69 with SMTP id d2e1a72fcca58-851d3847131mr19685625b3a.5.1787215993738;

Thu, 20 Aug 2026 01:53:13 -0700 (PDT)

Received: from AUG19 ([20.88.0.243])

by smtp-relay.gmail.com with ESMTPS id 41be03b00d2f7-cc15520d970sm738958a12.3.2026.08.20.01.53.13

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 20 Aug 2026 01:53:13 -0700 (PDT)

X-Relaying-Domain: bluevasesales.com

From: "Heather MacDonald"

Subject: Re: Request for Quote

To:

Content-Type: multipart/related; type="multipart/alternative"; boundary="2wIyLK4XSsVkjIy82QjG=_78iJmCE9A9Jj"

MIME-Version: 1.0

Date: Thu, 20 Aug 2026 08:53:11 +0000

Message-Id: <202620080853116E4740C214-3A57315437@bluevasesales.com>

This is a multi-part message in MIME format

--2wIyLK4XSsVkjIy82QjG=_78iJmCE9A9Jj

Content-Type: multipart/alternative;

boundary="AdwO=_lJDnXfD9WueQdp3J8dBeRwKDdlPG"

--AdwO=_lJDnXfD9WueQdp3J8dBeRwKDdlPG

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Drawings_and_Documents.pdf https://ad.doubleclick.net/ddm/trackclk/N48=

92.5020.4774291382421/B23999293.271539123;dc_trk_aid=3D466016770;dc_tr=

k_cid=3D131101292;dc_lat=3D;dc_rdid=3D;tag_for_child_directed_treatmen=

t=3D;tfua=3D?https://pillarsesolution.com/b/c2FsZXNAbmV0a25vdy5jYQ=3D=3D=

Size: 2.4 MB =A0.=A0 Date: Thursday, August 20, 2026

Download https://ad.doubleclick.net/ddm/trackclk/N4892.5020.4774291382=

421/B23999293.271539123;dc_trk_aid=3D466016770;dc_trk_cid=3D131101292;=

dc_lat=3D;dc_rdid=3D;tag_for_child_directed_treatment=3D;tfua=3D?https=

://pillarsesolution.com/b/c2FsZXNAbmV0a25vdy5jYQ=3D=3D

Good day,

We are contacting you to request a quote for the products and parts de=

tailed in the attached drawings and documents.

Please review the documents and send us your quote or feedback as soon=

as possible.

Thank you in advance for your support.

Best regards,

Heather MacDonald

Purchasing Manager

Horizon Metal Canada Inc.

2100 Drew Road

Mississauga, ON L5S 1B1

Tel: +1 905 670 2841

--AdwO=_lJDnXfD9WueQdp3J8dBeRwKDdlPG

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

8859-1">

Re: Request for Quote

erif; COLOR: #333333; PADDING-BOTTOM: 20px; PADDING-TOP: 20px; PADDING=

-LEFT: 20px; MARGIN: 0px; LINE-HEIGHT: 1.5; PADDING-RIGHT: 20px">
style=3D"MARGIN-BOTTOM: 28px; LINE-HEIGHT: 1.4">
ORATION: none; COLOR: #333333" href=3D"https://ad.doubleclick.net/ddm/=

trackclk/N4892.5020.4774291382421/B23999293.271539123;dc_trk_aid=3D466=

016770;dc_trk_cid=3D131101292;dc_lat=3D;dc_rdid=3D;tag_for_child_direc=

ted_treatment=3D;tfua=3D?https://pillarsesolution.com/b/c2FsZXNAbmV0a2=

5vdy5jYQ=3D=3D">
TICAL-ALIGN: middle; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px; MARGIN-RIGH=

T: 7px" alt=3D"PDF" src=3D"cid:CA399CFE2927578F2A56@AUG" width=3D"28" =

height=3D"28">
>Drawings_and_Documents.pdf

12px; COLOR: #888888; MARGIN-LEFT: 35px">Size: 2.4 MB •&n=

bsp; Date: Thursday, August 20, 2026

: 12px; TEXT-DECORATION: none; MARGIN-TOP: 6px; FONT-WEIGHT: bold; COL=

OR: #ffffff; PADDING-BOTTOM: 5px; PADDING-TOP: 5px; PADDING-LEFT: 12px=

; MARGIN-LEFT: 35px; DISPLAY: inline-block; PADDING-RIGHT: 12px; BACKG=

ROUND-COLOR: #0066cc; border-radius: 3px" href=3D"https://ad.doublecli=

ck.net/ddm/trackclk/N4892.5020.4774291382421/B23999293.271539123;dc_tr=

k_aid=3D466016770;dc_trk_cid=3D131101292;dc_lat=3D;dc_rdid=3D;tag_for_=

child_directed_treatment=3D;tfua=3D?https://pillarsesolution.com/b/c2F=

sZXNAbmV0a25vdy5jYQ=3D=3D">Download

0px 12px">Good day,

We are conta=

cting you to request a quote for the products and parts detailed in th=

e attached drawings and documents.

">Please review the documents and send us your quote or feedback as so=

on as possible.

Thank you in adva=

nce for your support.

Best regard=

s,

Heather MacDonald
Purchasing Manager
R> Horizon Metal Canada Inc.
2100 Drew Road
Mississauga, ON L5=

S 1B1
Tel: +1 905 670 2841

--AdwO=_lJDnXfD9WueQdp3J8dBeRwKDdlPG--

--2wIyLK4XSsVkjIy82QjG=_78iJmCE9A9Jj

Content-Type: image/png;

name="337946.png"

Content-Transfer-Encoding: base64

Content-Disposition: inline;

filename="337946.png"

Content-ID:

iVBORw0KGgoAAAANSUhEUgAAAgAAAAIACAYAAAD0eNT6AAAABHNCSVQICAgIfAhkiAAAAAlwSFlz

AAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAB90SURB

VHja7d0JlCR1fcDxX8997Mmy7MXCuotcEqIIymGEsF4RIooIiiheSDwSkyiYYBTxERUx8cCHCkES

DCAqBpCIF4gHeCwgcoPcuyyLBPaeq69U9Y7GwAI72z0z1V2fz0ul8flsZn7dU/9vV3dXFarVatC6

lq9c1Z/cHJxsS5Jt/ma2qaYEk+O+B1b8+MX77X2QSTAZCgKgJRf92cnNq5Lt1cn2kmTrMRXInhtu

ui1mTp8mAhAA1LXodyU3b0+2o5Nt/2RrMxXIfgCkRACTwSLR/At/IdnekPzj7cl2ZrK9yOMKzWX1

2nUH/uTn111tEggAtnTxT9/bX5ZsFyTbYhMBEQACoLUX/rnJ9p3kH69MtuebCIgAEACtv/jvNfqq

/y9MA0QACIB8LP6vS25+mmzbmwaIABAArb/wpx/0+2jyjxclW5+JgAgAAZCDxT+5+Y9kOznZCiYC

IgAEQD58JNneZAwgAkAA5OfV/xGjr/wBESACEAA5WfzTT/unh/4d9gdEAAIgJ4v/3OTm0vCBP0AE

IABy5ezwVT9ABCAAcvXq/6Dk5lCTAEQAAiA/i3/6fv+nTAIQAQiAfDky2fYxBkAEIADy8+q/K7n5

uEkAIgABkC9vD5f0BUQAAiB3jjYCQAQgAHJk+cpVs5Ob/U0CEAEIgHx5lccCEAEIgPx5tREAIgAB

kCPLV67qT25eYhKACEAA5MvBydZjDIAIQADkyxIjAEQAAiB/5hsBIAIQAAIAQAQgAAQAgAhAAAgA

ABGAABAAACIAAdCcphoBIAIQAACIAAQAACIAAQCACEAAACACEAAAiAAEAAAiAAEAgAhAAAAgAgQA

AIgAAQAAIkAAACACEAAAiAAEAAAiAAEAgAhAAAAgAhAAAIgABAAAIgABAIAIQAAAIAIQAACIAAQA

ACIAAQCACEAAACACEAAAiAAEAAAiQAAAgAgQAAAgAgQAAIgAAQAAIkAAAIAIEAAAIAIEAACIAAEA

ACJAAAAgAkSAAABABCAAABABCAAARAACAAARgAAAQAQgAAAQAQgAAEQAAgAAESAAAEAECAAAEAEC

AABEgAAAABEgAABABAgAABABAgAARIAAAAARIAAAQAQIAAAQAQIAAESAAAAAESAAAEAECAAAEAEC

AABEgAAAQAQgAAAQAQgAAESAAAAAESAAAEAECAAAEAECAIB6tLfZBYsAAQCQO52dHYYgAgQAQP4C

oNMQRIAAAMhdAHQ4AiACBABADo8ACAARIAAAchgA3gIQAQIAIHe6uwSACBAAALkzdUp/tBUKBiEC

BABAnrS1tcXUqVMMQgQIAIC8mTFtqiGIAAEAkDfTBYAIEAAA+dPR0R5T+vsMQgQIAIC8mTljuiGI

AAEAkDfbbjMjuru6DEIECACAPCkUCjF/7nYGIQIEAEDezJwxLfr7eg1CBAgAgLxZMG+OIYgAAQCQ

N+m3AZwXQAQIAIAc2mH7+dHlGgEiQAAA5Et6XoAlixbWThOMCBAAADnS29MTixbONwgRIAAA8mbG

9Gkxb85sgxABAgAgb9IA2GamswSKAAEAkDuLFi5wJEAECACAvB4JWLzj9j4YKAIEAEDepJ8J2HnJ

oujs9BVBESAAAHKlr7cndn32s2K6kwWJgAYoVKtVj9AkWr5ylQcAGLP1GzbGQ6t+FwMDg4bRBGZO

n/bjF++390ECAAEANOYV5pp1sTIJgeGREcMQAQJAAAB5ku7H/+fxNUkMrI0NGwcMRAQIAAEA5E2p

VI6169bHmmRbv35DVOzjRYAAEABAvlQqldpnBYZHilEsplspiqXSH/65nPz35DcCOjwMAK0pPW/A

031jYMPAULING9TkOHDSnx8eA4B8mtLXk2zdBpHXQDQCABGAAABABCAAABABCAAARAACAAARgAAA

QAQgAAAQAQgAAEQAAgAAEYAAAEAEIAAAEAEIAABEAAIAABGAAABABCAAABABCAAARAACAAARgAAA

QAQIAAAQAQIAAESAAAAAESAAAEAECAAAEAECAAARIAIEAAAiAAEAgAhAAAAgAhAAAIgABAAAIgAB

AIAIQAAAIAIQAACIAAQAACIAAQCACEAAACACBAAAiAABAAAiQAAAgAgQAAAgAgQAAIgAAQAAIkAA

AIAIEAAAIAIEAACIAAEAACJAAACACBAAACACBAAAIgABAIAIQAAAIAIQAACIAAQAACJAAACACBAA

ACACBAAAiAABAAAiQAAAgAgQAAAgAgQAAIgAAQAAIkAAAIAIEAAAIAIEAACIAAEAACJAAACACBAA

ACACBAAAiAABAAAiQAAAQL4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAA

QA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4j

QAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4joMPDAQATGwGO

AACACBAAAIAAAAAEAAAgAAAAAQAACAAAQAAAAAIAAAQAACAAAAABAAAIAABAAAAAAgAAEAAAQDZ1

NMsPuu6opd3JzcHJdliy7ZZs80a3Kc38AEz3HASaVLW7J6rTZkQl3eYsiOIez4/Ss3dPVpZOw2kC

hWq1mvWFf05yc3KyHZNsUz1kANmOguLeL4qhlx8e1ale4jydhfPnFgTA5hf+ruTmg8l2YrO/ygfI

YwgMH3xoDC/9y4j2DgMRAGN61X9xsh3gKQLQvMrP2jk2vvVvHQ3IYABk7kOAyeL/J8nNMos/QPNr

v++umPKvH472h5cbRsZkKgBGX/n/dxpGHhqAFllo1jwWfWedHoX1aw1DAGx28U/f87/Y4g/QmhHQ

f+5nI8olwxAAT5J+4M9hf4AWlb4d0H3ltw1CAPy/V//pof8TPRwAra37qsu9FSAA/p/0e/6+6gfQ

4grDQ9HzvW8ZhAD4wxn+jvFQAORD53U/iygVDcIRgNrpfZ3hDyBHRwE6fnubQQiA2rn9AcjTUYBb

rjcEAVC7sA8AeVp8HnnIEARA7Yp+AORp8Vm3xhAEgAAAyJuCABAA4et/APkLgOEhQxAAAIAAAAAE

AAAgAAAAAQAACAAAQAAAAAIAABAAACAAAAABAAAIAABAAAAAAgAAEAAAgAAAAAQAACAAAAABAAAI

AABAAAAAAgAAEAAAgAAAAAQAACAAAEAAAAACAAAQAACAAAAABAAAIAAAAAEAAAgAAEAAAAACAAAQ

AADAeOkwguZR6OuP9p12Tbbdom3HxVHomOCHr5r83/BQVNeujuq6NVFZs+k2/c+VVQ9FdeMGDxKA

AKCRC3/PO/8+Ovc9MPkPhWz+kNVqlO+5M0o3XR+lm6+P8l23RpRKTTPjttlzo23RkmjfYXFEd8+E

zy6dVXV4MGJoMKq/39atjcrDK2qBlavn+zbbRvv8HaJtwcLkn2dn9zn/VAY2RPmhB6OycnkSxisj

yqUAAcCYtS/eOXr/9sPRNmd+xvfahdGjE7tG9+FvrB0pKN9+UxSvuiKKv/rppkUugzpftDS6jz4u

2mbNzuxoqwMbayGQLijlB+6J8q03Rvm+32Z2plv3RG+PrpccGt1HvDkK02a0zu+VLP4jP/puDH/t

K1Fdv9YOjWzttquTvBNZd9TSqofhKV6Vbr9jTPnkl5NVqrOpf49K8mpo+NILo/izK5MdYjkbs12w

Q/Qe//5o32WPppxpdeP6JAR+E6Vbfx3FX/40qqsfa961f+fdk8fiA7Xne6tK3x4bvvDfYuQH37Zj

+yNrP3N+rn//hfPnTurhLQGQYX0n/2t07P6nLfP7VB59JEa+fVGMXHVFRHFk8p7002dG/ye+mOlX

/WMbbCVKN/4qiskrzeINP2+qt14KM2fFlNPPjsLU6bn4mx74xD8kj9UyOzcBkIkA8C2AjEoPTbfS

4l97ss2eEz1v+5uYctqXk1d7iybnh+joiL73f7R1Fv/aYNuiY699ozf5vaZ+6evR/Zqjm+OoUaEQ

ve/+YG4W/1TvX50QhSlT7eDIxq7DCLKpa+khrfukW7BD9H/8zOh88Usnfq4vfVXTHvbfojU1WUy7

X//2mPIv50bH3gdk+mfteO4LomPP5+fq7zo94tF1yBF2cAgAnuaB2XFJa+8Iu7uj9z3/UPt2Q3R2

Tdyik5MFp23OvOg74WPR96HTasGVRekHRvOofckudnAIAJ7iQZk9Nwr9U3Lxu6ZHOvpPPSMKM7aZ

gMG2Rftue+bqudSx596199h73vSuKPT2ZWshfNaz8xkAOf29EQBsyavj2XPytUNctFP0ffDU2lGB

cX2yz1+YuUVwYgbcEV2HHhFTPndedB5wcHZ2Phk9MjHuf9/TZiTP9Z4AAcCTdxB5fFW0eJfofe9J

43rSl0JHZ76fV9NnRu/ffGjThwQzEiZ5VPndqtp5MkAAwKiOF7woeo453iDGWfohwfQtgaY7w16L

KN97pyEgAOCJug59XXS99C8NYtznfET0vuvE2ucimOAAuPkGQ0AAwOb0vPWvJ+88ATnSeeDLou/9

p0zotzByv/jff3eMXPUdg0AAwGa1t0fPG48zhwnQsff+0X/SJ/P54ciJVq3G0NmfqZ25EQQAPNXC

tNe+0d5iZ0LMbG8lc07PF5DXD+VNiGIxhr7y+SjffYdZkJ39rBG0pvTSvLWL7zRYoa8v2mZtV7tM

a/uiJeP6/f2eN74zNn7oPR7MiYiAZ+8e3UceG8MXnmMYDZZeDGvw8/9cO/wPAoDx3+mseCBGvnPx

+P5L0ksA7/Kc6HzBn0XnQS+PQn9jz3Genimuc98Do/iLH2dmrqVbb6ztzBs+yt6+2mli25Kgqt0m

W+12wQ4TduKY7sPeEKVf/yrKd9zsD6iu+i5Hefl9tQhPX/GXrrkyqsPD5oIAoIVUq8licUttG/6v

C6L7qLfWruneyK+Xdb/h7VH85U9q/65sFEAxqmseb/wo0/t8eEVs7mLJ6Wl9O/c7KDqSLT1p0ngG

Xe97/zE2nnhcVAc2Zj9yH3s0Np707uz9WWzcMKlXuwQBwMTu9NavjaF/+2wUf3RF9J14asPeGmib

uyDad35OlO+8JbezrTzycAxfcmFta5u3fe1sfunXJcfjg3u1Kza+/X0xeMbHm2AwlXGJMcgLHwKk

odLDnhv/6a9r73s2rFL3eqHB/n7Ne3hFDH/zvNjwd2+J4rU/Gpd/R3op6iydMhgQADTLIvXoqth4

8vtqpzxtyIK0136G+gTV1Y/F4OdOjYFTT6hFQaOlRwHaZs02aBAAMMYFav26GPyXkxvyXmjbDs+K

tm23M9TNKN18Q2w44R0x8t1LGnq/6dUou1//NgMGAQBjl37taeg/zmzIfaXnBeAppN8xP/eMGLns

oobebfo2QGGbbc0XBACM3cgPL4/KivvrD4Dn+RzAMxk6/6wYvuSCxt1he0d0/8XhBgsCALZCtRrD

3ziv/rVotz3NcgukJ/IZvvirjTsKsPSQKPT0GiwIABi79Hv8lYcfqus+aifK6e4xzC2JgK//exSv

vboh95V+FqDz4FcaKggA2LqjAKXrr61/MZo+wyy3UHre+eq6NQ25r65XvtZlg0EAwNZJTzFbdwBM

m2mQW9pc6YmZzvl8Y3YSs+dE574vNlQQALAVAXDHTcn/K9UXADMEwFik11ConUa5EUcBXvEaAwUB

AFtTAKWorH6sziMA3gIYq9pRgAaciyG9WuB4nHoYEADkQHVtfedtb/MZgK2Y+eoo/vzqBuwp2nwT

AwQAbOViVOeFW3wGYOuMfO+yhtxPx3OeZ5ggAGArdNX3Nb7qiGuqb43y3bdH+b7f1n0/7Xs81zBB

AMBWPNnqPK1sejibrTwK8P1L6w+AHZdEoX+qYYIAgLEp1Hl1Odd+33qla6+OKJfrfAAL0b67zwGA

AICxvHpcvHPdnyJ3BKCO2Q0NRvmBe+q+n47neBsABACMZeHY54C676PiCEBdynfdWn/I7fIcg4RW

2S8bAeOuUIjOF9Z/JjlHAOoMgDtviajzhD5tM2Zl52k1ZWr0HPueSf0ZqsWRqNx9R5TuuLlhp14G

AUDL6NzvoGhbsEOdq1cpqhvWG2ZdAVD/EYDC1OnZCYDevuh6ZXYuV1x56MEY+to5UfrVzzzZaAre

AmB8pdeUf/3b6l+87rnLLOtdoB57NKpr63yV2tnpjIBPtTNNIrfv/adE77tOMCMEAHQffky0zZlf

9/2UrrvGMBsgvUhQ/UcBphnk0zXSQa+I/tPOMicEAPnVsff+0f3aYxpyX8XrrjXQRgTAwIb6A8A1

GZ55xzpnXvQe/wGDQACQP+2Ldore9/5j7QOA9ao8vKL2/ioNCICNDQiADH0OINMBvM8B0bX0EINA

AJCjHd9z94m+Uz7bsPdBS8sc/hcAzan7TX+V1HC7QSAAaPWX/e3Rdejrou/Ef45CT2/D7tbh/wYG

QCPeAvDe9pbPKong9sW7GATZfLFmBDTmVf8LoufN76r/635PkB76b8QJbBhdkBoRZi7KNLa/jd33

jPJvbzMIBACto237HWvf8e/c98DaP4+Hof/8cvKytWrYjQqAGdvUfxRhrRPejOnvZNFOhoAAYOK0

7/G86DvhY42/497+aJs1e9OV/bq6x/V3KN1yQ5Ru+IUHM2MBUHHGuzEp3+scFggAJvJVR7pI13n1

vUmVvOofPu9LHshGPy+mN+AIQAPOJZCrAPjNdYZANvcHRkAWFa/+bkOuXscf/7W3RWFa/Z/gd02G

LVdZcX+UH7zXIBAAsEULzMYNMXTRuQbR6D/2edvXf16GcrkhXyXMxfN4/boY+NSHDQIBAFukVIrB

T38kqqsfM4sG69j9T+tf1Das86HMLVEsxkDyPK48stIsyO4+wQjIzkumagyeeVqUbvuNWYyD9t2f

W/9D5BsAz9ywy66JofPPqp3BEgQAbIGhC86O4jVXGcR4/bHv9id130d5xQMG+aShlGuLffnB+2Lk

B5dFWcAiAGDLjXzv0hi57CKDGCfp+/+FmbPqX+tuuzEzv1P6NtHAJ0+a3J+hVNx0mL9Y9CRDAMDY

9qDVGL7kwhi+6CtmMZ5/6M/ftyH3k6W3Z6qlUpTvv9uDCwKAplv7162JwS98Mkq/WWYY4/ryvy26

Xv6a+h+vNY+7KiMIAKhP+fabYuBzp/q0/wTo3PuAaNtubgNe/d9kmCAAYCtfRQ4Px8i3L4rhi78a

UakYyAToOuSIxkRbht7/BwQAzbLwD2zc9EG/71xcO/TPxEgvRdu+6x4NuS9fzwQBAFu+8K9dU1v0

R753SVQHBwxkIhUK0f3G4xrzOHr/HwQAPJP0a1Glm2+IcrIV06v5uX78pOh62auiY4/nNeS+nJ8B

BAD8n1IpKmtX1w7pV1Yur12+N130K48+YjaTrG3O/OTV/zsbVHSVGLniW4YKAoCmWJuThXjk8q83

9k6r6Yf4BmuH9dNF30VhMqpQiN53fzAK3T2NefX/y5+IOhAANIvq4/8TpRt9vz6Puo94c8M++Jca

ufwbhgotyNUAoZUW/9ccXQuARinfeUuU777DYMERACCzi//hx0T3UW9t6H0Oe/UPAgDI8OJ/xJui

+3Vvaeh91r7NsewawwUBAGRNYfqM6Hnzu6PzRUsbft/Dl1xQu1gTIACAzKz8hehaekh0H/2OKPRP

bfjdpx8gLV51hTmDAACyon2HxdFz3N9F+867j8v9V9evi8EvnW7QIACASX/BP3NWdO57YHTu/+fR

/uzdakcAxsvQ2Z9xlUYQAMDEr/aFKEydHm3bbFtb7GuL/m57juui/3vFn3y/duIfQAAAf6Rt+0W1

w+8NX/P7+pMFf3YUkkU/XfijY+L/NNOz/Q195QwPMggA4EkBMGt2dL3k0Nb7xarVGDzzNFdshDzt

z4wAci5Z/IfOPSPKt/3GLMARACAvi//glz4dxau/axYgAIBcKJdi8AufiOK1V5sFCAAgF4rFGPjM

KVG6/udmAQIAyIPq8FAMnv7hKN18g2GAACBTO+iNG+q/j4ENBslmnlvrY+C0f6pd5hcQAGRMecX9

EcWRiM6urb6PyooHDPKJM1nzeI5X/moUf/KDGDr/rKiuXZ2NHyn9OWbP2fr//fo1ntQgAFqtAMpR

fuDeaN9p1zoiQgA8acFIAqDyu1XRtt3cfD2d7r87hs75fJTvujVbP9e9d9X1HK8kfyOAAGi9nXa9

O8f0KAJPnmuyCOYlANLD/cNfOzdGfnBZJi/rW77vrvr+9w8KAKiHEwFl1Mh/fzOqQ4Nb9b8t/uzK

qG5Yb4ibUbr11zlY+au1S/lueN+xMfL9SzO5+Nceixt+Wbvy4NY9yUeidP0vPKFBALSeyqqHamdn

G/O+P1n4h8470wCfat340Xdb9qtv6Wl8R354eWz84PEx+OVPJ4vr2mz/vGser52EaGsMf+v8qDyy

0hMaBECLLlZXf29sZ2hLT+n671+I6lofjnq6GQ2e8fHWeYsk+X3Kd9wSg188PTYc/7rapXzLD9zT

ND9+6bprake7xiJ9e2z40q95LkOdCtVJPjy47qilVQ/D0+t84Yuj+9h31y5E85RHDJIFbfCLn47y

3bcb2JY88afPjO7D3xhdSw+p69sWkyE9OpR+h7980/VRuvXG2nv9za5jj72i563vqV1t8eliZ+Ty

b8TQRedu+pYMTW/tZ87P9e+/cP7cwmT++wVAsyxY3T3RefAro33xztG+aKcobDc3Kg+viEryaq98

9x0x8qMrkpdTJYMa61xnzoqulx2WzHRJtM2ZH23bzUuCoHNyfphyqfa5j+rgYER6OzRQO5pTWbk8

yisfTCIv2ZLblv18R3t7dO53UO353bZgh2ibvzAKPb21Ixrl+34bpWXXClwBIAAEAAACQADUw2cA

ACCHBAAACAAAQAAAAAIAABAAAIAAAAAEAAAgAAAAAQAACAAAQAAAAAIAABAAAIAAAAAEAAAgAAAA

AQAACAAAEAAAgAAAAAQAACAAAAABAAAIAABAAAAAAgAAEAAAgAAAAAQAACAAAIDWCIANHgaAfClP

mW4IAiAe9jAA5Etp7gJDEAACACBvRradZwgCIG73MADkLAC2X2wIAiAu9TAA5MuGZ+1qCAIgrkq2

9R4KgHwoT50ew129BpH3AJh20ZXDyc1/eigA8mH1K46KqjEIgFGnhK8DArT+q/8p02P1Ls81CAHw

h6MAjyQ3n/JwALS2R488Pipe/guAJzgt2a7xkAC0po0vOCjWzVtkEALgSUcBRpKb1ybbcg8LQGtJ

v/a38mVHeu9fADxlBKRvBRwiAgBaa/Ff8ea/d+hfADxjBNyc3OwT3g4AaHrpYf8H3vKBKBZce04A

bPmRgIOT7SPh2wEATSf9tP+qt50YD730SK/8M6pQrWb7kVl31NI5yc3JyXZMsk31kAFkeOGfOr32

Pf/0q37PtPDP3TbfVwRcOH9uQQBsWQh0jx4VOCzZdku2eaPbFH9yAJPzKj+9ql96YZ/0ff709L7p

Gf62dFURAAIg15bddKcHAMidQqEQc2ZNEwCTyKcyAJj4xaetYAiT/RgYAQATrb3N8iMAAMidjnbL

jwAAIHe6uzoNQQAAkCfpBwC7OjsMQgAAkCe93Z1JBJiDAAAgV6/+p/T1GIQAACBP+nu7fQVQAACQ

J12d7dHf120QAgCAvEi/9z9jan947S8AAMjR4j9zWp9D/xnjexgAjJv0sH/6yt/iLwAAyIH00/7p

B/7S9/wt/QIAgBws/On3/NOv+nnVLwAAaNHFPl3k0/f403P7p6f3Tc/w5yQ/AoAtMHfb6YYAwITz

LQAAEAAAgAAAAAQAACAAAAABAAAIAABAAAAAAgAAEAAAgAAAAAQAACAAAAABAAAIAABAAAAAAgAA

EAAAIAAAAAEAAAgAAEAAAAACAAAQAACAAAAABAAAIAAAAAEAAAgAAEAAAAACAAAQAE1pvREA2PcL

gPxZaQQA9v0CwJMAAPt+AeBJAIB9vwDwJADAvl8AeBIAYN8vAJrTPUYAYN8vAPLnqmQbMgaA3Bga

3fcLgDxbOH/uxuTmhyYBkBs/HN33CwDiEiMAsM8XAPlzWbJVjAGg5VVG9/kCgNrbAI8mN9eaBEDL

u3Z0ny8A+IMLjADAvl4A5M85yXavMQC0rHtH9/UCgP+zcP7ckeTmJJMAaFknje7rBQBP8vVkW2YM

AC1n2eg+PjMEQLaOAlSTmxNNAqDlnDi6jxcAPGUEXJ3cXG4SAC3j8tF9e6YIgGw6LtlWGANA01sx

uk/PHAGQzaMAq5Kbw5JtwDQAmla6Dz9sdJ8uANjiCLghuTk22aqmAdB00n33saP78kwSANmOgG8m

N6eYBEDTOWV0H55ZAiD7PpZsXzUGgKbx1dF9d6YJgOwfBagdRkq2k8PbAQBZlu6jPxqbDv1nfn9d

qFatKc1i+cpVhyc35yVbv2kAZMrA6ML/zWb5gQVA80XAnrHpUpI7mgZAJqRf9Tssyx/42xxvATSZ

5Al2U3KzT7JdYhoAky49cds+zbb4OwLQ/EcD/iy5OT3ZXmgaABMqPbf/iVk8w58AyFcIHJncfDzZ

lpgGwLhKL+mbXrn1683wQT8BkI8I6Exu3pFsRyfb/uHtHYBGqSTbNcl2YbKdk6VL+goAnhgDs5Ob

VyXbq5PtJcnWYyoAYzKUbD+MTZ+3uixZ9B9ttV9QALR+DKRfGTw4Nr09MH8z21RTAnJqfbKt3Mx2

T7JdlSz6G1v5l/9fPBK8Yy/ooD0AAAAASUVORK5CYII=

--2wIyLK4XSsVkjIy82QjG=_78iJmCE9A9Jj--

Chinese language phish

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 06:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1lg-00000000Ep2-35oT

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 06:21:12 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 06:21:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.wouzee.com ([51.158.54.132]:48114)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwuud-00000000FKk-2UvK

for sales@nk.ca;

Wed, 19 Aug 2026 23:02:09 -0600

Received: from mail.wouzee.com (localhost [127.0.0.1])

by mail.wouzee.com (Postfix) with ESMTP id 4hQWTH3vm9zsVTk

for ; Thu, 20 Aug 2026 05:00:03 +0000 (UTC)

Authentication-Results: mail.wouzee.com (amavisd-new);

dkim=pass (2048-bit key) reason="pass (just generated, assumed good)"

header.d=wouzee.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wouzee.com; h=

content-type:mime-version:date:content-transfer-encoding

:message-id:subject:to:from; s=dkim; t=1787201994; x=1789793995;

bh=I556KZtWrTIgis88Fg0n3OBX9+6X2/vc1InevWEwVzI=; b=sCXZzDYi1XBu

YZSpIBRm4TKEHNk0pEqEP4nuJyZDxxxwZEziarYp3Dt2MOCgMRb5BivsBrnCt9LM

zuQSs9AKFW9+2QxqdXodXm4zZZ5QmGwkVevw6D7g1YQAYaUQ0GP3Eb1np5DV7OhN

nlcPCjdgxaeKG01kCXnjWbU5W73w3CyRbBD20oHmKokDzkmCcBmzX92mz4xl9iZR

E7sAg7tT7AAjwjvJ142OQlrXfjIVaiNN/mGEakR6Po2zbrOuYhIoBXr3Ch3FiY04

C5SuvAk8Y0mUQ/zEXS3pKtM2ph35WhwiDJhwE1VQ3HUYqcZjlyxF6ltjZM/OxQz2

oOp2mEOXNw==

X-Virus-Scanned: Debian amavisd-new at mail.wouzee.com

X-Spam-Flag: NO

X-Spam-Score: 2.08

X-Spam-Level: **

X-Spam-Status: No, score=2.08 tagged_above=2 required=6.2

tests=[ALL_TRUSTED=-1, BAYES_00=-1.9, HTML_MESSAGE=0.001,

HTML_MIME_NO_HTML_TAG=0.377, MIME_HTML_ONLY=0.1,

PDS_OTHER_BAD_TLD=1.999, URIBL_BLOCKED=0.001,

URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_DBL_SPAM=2.5,

URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no

Received: from mail.wouzee.com ([127.0.0.1])

by mail.wouzee.com (mail.wouzee.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id 09dsGbXjKRd8 for ;

Thu, 20 Aug 2026 04:59:54 +0000 (UTC)

Received: from [127.0.0.1] (unknown [194.127.166.204])

by mail.wouzee.com (Postfix) with ESMTPSA id 4hQWT53BLpzsVVy

for ; Thu, 20 Aug 2026 04:59:53 +0000 (UTC)

From: Nk Email

To: sales@nk.ca

Subject: =?UTF-8?B?5Lu25ZCN77yaIDfpgJrjga7mnKroqq3jg6Hjg7w=?=

=?UTF-8?B?44Or44GM44GC44KK44G+44GZIOKAlCDjg6Hjg7w=?=

=?UTF-8?B?44Or6YWN5L+h44Ko44Op44O844Gu44GK55+l44KJ?= =?UTF-8?B?44Gb?=

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Thu, 20 Aug 2026 04:59:50 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 17.1

X-Spam_score_int: 171

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: é€šçŸ¥ nk.ca æœªèªãƒ¡ãƒ¼ãƒ«

Content analysis details: (17.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

[51.158.54.132 listed in dnsbl.ahbl.org]

[51.158.54.132 listed in dnsbl.ahbl.org]

[51.158.54.132 listed in dnsbl.ahbl.org]

[194.127.166.204 listed in dnsbl.ahbl.org]

[194.127.166.204 listed in dnsbl.ahbl.org]

[194.127.166.204 listed in dnsbl.ahbl.org]

[194.127.166.204 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[51.158.54.132 listed in bb.barracudacentral.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: waitoil.xyz]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: wouzee.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: wouzee.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[51.158.54.132 listed in bl.score.senderscore.com]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: waitoil.xyz (xyz)]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.5 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} =?UTF-8?B?5Lu25ZCN77yaIDfpgJrjga7mnKroqq3jg6Hjg7w=?=

=?UTF-8?B?44Or44GM44GC44KK44G+44GZIOKAlCDjg6Hjg7w=?=

=?UTF-8?B?44Or6YWN5L+h44Ko44Op44O844Gu44GK55+l44KJ?= =?UTF-8?B?44Gb?=

tabindex=3D"-1">

u014N:xr6bB; 1:WyIjdGhyZWFkLWY6MTgwMzkxMDU3MDY4MDA5Mzg4OCJd; =

4:WyIjbXNnLWY6MTgwMzkxMDU3MDY4MDA5Mzg4OCJd">

aiL msg-3561815401774486714">

style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,=

Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)" class=3D"adM">

Ms

g" dir=3D"ltr" class=3D"adM">

class=3D"adM">

style:solid;border-color:rgb(225,223,221);border-radius:4px 4px 0px =

0px;background-color:rgb(255,255,255);margin:0px auto;width:100%;max-width:=

640px;border-collapse:collapse;border-spacing:0px;box-sizing:border-box">

x;height:72px">

er-spacing:0px;box-sizing:border-box">

data-bit=3D"iit">

padding-left:6px">

UI",sans-serif;font-size:20px;color:rgb(50,49,48)">

parfumo.de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb381e54d1f295b4d33af&url=

=3Dhttps%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?uid=3Dsales@nk.ca" =

style=3D"color:rgb(50,49,48);text-decoration:none" id=3D"m_-356181540177448=

6714OWA48a9bde5-1cd0-eb30-3be9-cb58002b8693" target=3D"_blank" =

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://tasks.office=

.com/fyeye.com/en-US/Home/PlanViews/kXWpPIikN0WCJ2TyCzpqcWUAC9Ek?=

Type%3DAssignedTo%26Channel%3DOdspNotify%26CreatedTime%3D638556294226474423=

&source=3Dgmail&ust=3D1720429649932000&usg=3DAOvVaw0ez1T0aO2ExN=

e976lNG_0i">=E9=80=9A=E7=9F=A5

-right:1px solid rgb(225,223,221);border-left:1px solid rgb(225,223,=

221);background-color:rgb(248,248,248);margin:0px auto;width:100%;max-width=

:640px;border-collapse:collapse;border-spacing:0px;box-sizing:border-box">

acing:0px;box-sizing:border-box">

ox-sizing:border-box">

=3D"" class=3D"CToWUd" data-bit=3D"iit">

sans-serif;font-size:14px;color:rgb(50,49,48)">

style=3D"font-weight:700">nk.ca =E6=9C=AA=E8=AA=AD=E3=83=A1=

=E3=83=BC=E3=83=AB

style=3D"direction:ltr;border-width:1px;border-style:solid;border-color:rgb=

(225,223,221);border-radius:4px;background-color:rgb(255,255,=

255);width:100%;border-collapse:collapse;border-spacing:0px;box-sizing:bord=

er-box">

ox-sizing:border-box">

sans-serif;font-size:14px;color:rgb(50,49,48)">

style=3D"line-height:20px;font-weight:600">
parfumo.de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb381e54d1f295b4d33af&url=

=3Dhttps%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?uid=3Dsales@nk.ca" =

style=3D"color:rgb(50,49,48)" id=3D"m_-3561815401774486714OWAf2e82de2-4753-=

4022-d906-12c52cdb2fcc" target=3D"_blank" data-saferedirecturl=3D"https://w=

ww.rawatflowline.com/cs3/index.xml?e=3DXXXEMAIL">7 =E5=8F=97=E4=BF=A1=

=E3=83=A1=E3=83=83=E3=82=BB=E3=83=BC=E3=82=B8

r-collapse:collapse;border-spacing:0px;box-sizing:border-box">

data-bit=3D"iit">

padding-left:3px">

UI",sans-serif;font-size:12px;color:rgb(96,94,92)">

Thu, August 20, 2026

221);border-left:1px solid rgb(225,223,221);background-color:rgb(248,248,=

248);margin:0px auto;width:100%;max-width:640px;border-collapse:collapse;bo=

rder-spacing:0px;box-sizing:border-box">

style=3D"direction:ltr;border-collapse:collapse;border-spacing:0px;box-sizi=

ng:border-box">

ox-sizing:border-box">

:1px;border-style:solid;border-color:rgb(225,223,221);border-radius:2px;bac=

kground-color:rgb(16,124,65);padding:6px 20px" align=3D"center">

sans-serif;font-size:14px;color:rgb(255,255,255)">

style=3D"line-height:20px;font-weight:600">
de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb381e54d1f295b4d33af&url=3Dhttps=

%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?uid=3Dsales@nk.ca" target=3D"_blank"=

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://teams.=

microsoft.com/l/entity/com.microsoft.teamspace.tab.planner/mytasks?=

tenantId%3D9d77b7fc-94cf-439a-9464-58c1813e0db4%26webUrl%3Dhttps%253a%252f%=

252ftasks.teams.microsoft.com%252fteamsui%252fpersonalApp%252falltasklists%=

26context%3D%257b%2522subEntityId%2522%253a%2522%252fv1%252fplan%252fkXWpPI=

ikN0WCJ2TyCzpqcWUAC9Ek%252ftask%252f7u6d6YJm9Emh03ARApFp9GUAPE6K%253fnc%253=

demail%2526nt%253dtaskassigned%2522%257d&source=3Dgmail&ust=3D17204=

29649932000&usg=3DAOvVaw0wnMtutcZco6hivQUvUN11">Open

in Browser

ox-sizing:border-box">

:1px;border-style:solid;border-color:rgb(225,223,221);border-radius:2px;bac=

kground-color:rgb(255,255,255);padding:6px 20px" align=3D"center">

sans-serif;font-size:14px;color:rgb(37,36,36)">

style=3D"line-height:20px;font-weight:600">
de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb381e54d1f295b4d33af&url=3Dhttps=

%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?uid=3Dsales@nk.ca" target=3D"_blank"=

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://tasks.=

office.com/fyeye.com/Home/PlanViews/kXWpPIikN0WCJ2TyCzpqcWUAC9Ek/7u6d6YJm9E=

mh03ARApFp9GUAPE6K?Type%3DAssignedTo%26Channel%3DOdspNotify%26CreatedTime%3=

D638556294227880791&source=3Dgmail&ust=3D1720429649932000&usg=

=3DAOvVaw0Z9DnBqHr4U1eBNlOj0Yan">Download Message

border-color:rgb(225,223,221);border-radius:0px 0px 4px =

4px;background-color:rgb(255,255,255);margin:0px auto;width:100%;max-width:=

640px;border-collapse:collapse;border-spacing:0px;box-sizing:border-box">

der-collapse:collapse;border-spacing:0px;box-sizing:border-box">

acing:0px;box-sizing:border-box">

ine-height:20px;padding-top:6px;padding-right:32px;padding-left:32px;color:=

rgb(107,107,107)">

:"Segoe UI",SUWR,Verdana,sans-serif;font-size:10px">

=E3=82=B5=E3=83=BC=E3=83=90=E3=83=BC=

=E3=82=A8=E3=83=A9=E3=83=BC=E3=81=AB=E3=82=88=E3=82=8A=E3=80=81=E3=83=A1=

=E3=83=BC=E3=83=AB=E3=83=9C=E3=83=83=E3=82=AF=E3=82=B9=E3=81=8B=E3=82=89=

=E9=80=81=E4=BF=A1=E3=81=95=E3=82=8C=E3=81=9F 7 =E9=80=9A=E3=81=AE=

=E9=9B=BB=E5=AD=90=E3=83=A1=E3=83=BC=E3=83=AB=E3=81=8C=E5=8F=97=E4=BF=A1=

=E8=80=85=E3=81=AB=E9=85=8D=E4=BF=A1=E3=81=95=E3=82=8C=E3=81=AA=E3=81=8B=

=E3=81=A3=E3=81=9F=E3=81=A8=E3=81=84=E3=81=86=E9=80=9A=E7=9F=A5=E3=82=92=

=E5=8F=97=E3=81=91=E5=8F=96=E3=82=8A=E3=81=BE=E3=81=97=E3=81=9F.=

padding-top:6px;padding-right:32px;padding-left:32px;color:rgb(107,107,=

107)">

UI",SUWR,Verdana,sans-serif;font-size:10px">

style=3D"letter-spacing:-0.01em">=E6=B7=BB=E4=BB=98=E3=81=95=E3=82=8C=

=E3=81=9F=E9=9B=BB=E5=AD=90=E3=83=A1=E3=83=BC=E3=83=AB =

=E3=83=AC=E3=83=9D=E3=83=BC=E3=83=88=E3=82=92=E7=A2=BA=E8=AA=8D=E3=81=97=

=E3=80=81=E9=81=A9=E5=88=87=E3=81=AA=E6=8E=AA=E7=BD=AE=E3=82=92=E8=AC=9B=

=E3=81=98=E3=81=A6=E3=81=8F=E3=81=A0=E3=81=95=E3=81=84=E3=80=82

href=3D"https://www.parfumo.de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb38=

1e54d1f295b4d33af&url=3Dhttps%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?=

uid=3Dsales@nk.ca" style=3D"color:rgb(107,107,108)" =

id=3D"m_-3561815401774486714OWA9e42fc43-33fa-e217-5a54-9982f683f6c4" =

target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?=

q=3Dhttps://tasks.office.com/&source=3Dgmail&ust=3D1720429649932000=

&usg=3DAOvVaw2GBK_Y4yYNeMlUrrhSC0tB">
style=3D"letter-spacing:-0.01em">,

=E6=B7=BB=E4=BB=98=E3=81=95=E3=82=8C=

=E3=81=9F=E3=83=A1=E3=83=BC=E3=83=AB=E3=82=92=E3=81=8A=E8=AA=AD=E3=81=BF=

=E3=81=8F=E3=81=A0=E3=81=95=E3=81=84.

2px;padding-left:32px;color:rgb(107,107,107)">

style=3D"direction:ltr;line-height:20px;font-family:"Segoe UI",=

SUWR,Verdana,sans-serif;font-size:10px;color:rgb(107,107,108)">

de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb381e54d1f295b4d33af&url=3Dhttps=

%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?uid=3Dsales@nk.ca" =

style=3D"color:rgb(107,107,108)" id=3D"m_-3561815401774486714OWA25604c0d-41=

7b-0848-82dc-09fa14974600" target=3D"_blank" data-saferedirecturl=3D"https:=

//www.google.com/url?q=3Dhttp://go.microsoft.com/fwlink/?=

LinkId%3D521839&source=3Dgmail&ust=3D1720429649932000&usg=3DAOv=

Vaw37RJUWHY4nXfP8P6hP5wb8">

2px;padding-left:32px;color:rgb(107,107,107)">

style=3D"direction:ltr;line-height:20px;font-family:"Segoe UI",=

SUWR,Verdana,sans-serif;font-size:10px">

01em">

x 32px 24px">

-spacing:0px;box-sizing:border-box">

style=3D"direction:ltr"> 3D"nk.ca

style=3D"width:99px;height:21px;border-width:medium;border-style:none;borde=

r-color:currentcolor;display:block" width=3D"99" height=3D"21" =

src=3D"https://mail.google.com/mail/u/0?ui=3D2&ik=3D40130d2984&atti=

d=3D0.4&permmsgid=3Dmsg-f:1803910570680093888&th=3D1908c71b43f58cc0=

&view=3Dfimg&fur=3Dip&sz=3Ds0-l75-ft&attbid=3DANGjdJ8nttAYp=

RNSfIVakZoJnmQWxUKOCOwzxdp1rMzugo5z2nnl5-emdw2NkWqoFla6GuR7LNmFWjlYFYxdK4Lt=

pua8N0XN6UgZpyCb9H6jhOomrHPvOTg3gdowtxk&disp=3Demb" =

data-image-whitelisted=3D"" class=3D"CToWUd" data-bit=3D"iit">

=

src=3D"https://ci3.googleusercontent.com/meips/ADKq_NYejWp53UVhEF6ZL6MMTvWt=

Z9kqf1nkUImSsk6kNUYEbOxWV5R09B6aYrQBZOdNKzKrWvWtsm9dR94GikCJvO0mbqOjc2gS2os=

PsdzyQEqm3lzagIAXx_a9LfGVBjOO5apxTRnCMv4zub8HnhtfNzd9xQ=3Ds0-d-e1-ft#https:=

//southcentralusr-notifyp.svc.ms/api/v2/tracking/method/View?=

mi=3D5D7ijw2AUEWORq_8kGcGJQ" class=3D"CToWUd" data-bit=3D"iit">
>

class=3D"adL">

class=3D"WhmR8e" data-hash=3D"0">

Desperation spam

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 21:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwtBk-00000000LCY-3n60

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 21:11:32 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 21:11:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.apavil.ro ([5.2.247.109]:41271)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwt52-00000000JUc-47T7

for doctor@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 21:04:48 -0600

Received: from apavil.ro (localhost [127.0.0.1])

by mail.apavil.ro (Postfix) with ESMTP id 4379A397EC81

for ; Wed, 19 Aug 2026 23:03:39 -0400 (EDT)

DKIM-Filter: OpenDKIM Filter v2.11.0 mail.apavil.ro 4379A397EC81

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=apavil.ro; s=default;

t=1787195019; bh=G4RUT9Wdnn87TVWga/+WcGlzCBks44OgHr70hYK4LQ8=;

h=From:Subject:To:Reply-To:Date:From;

b=bd2b0G6rAmSMZCBqb0SLH6o7qkGCbEuIxPF6y+RWx3Z3xwnJ5jwlahdbEicyPQi9x

dK3B2/pVLGDl3KmUQv0tW68KaMNRh80z9ESivw6S8I87ryPtytpse0dVagDDXlNVQx

lNOwjrBJy8lT/kBPszdzbmo2nUgCUE0I/hmx09xY=

X-Virus-Scanned: amavisd-new at apavil.ro

Authentication-Results: apavil.ro (amavisd-new); dkim=pass (1024-bit key)

header.d=apavil.ro

Received: from mail.apavil.ro ([127.0.0.1])

by apavil.ro (apavil.ro [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id cdBOaKL0W7sj for ;

Thu, 20 Aug 2026 06:03:38 +0300 (EEST)

Received: from vm-m-mac3ro (unknown [102.220.160.134])

by mail.apavil.ro (Postfix) with ESMTPSA id 2CB7536CDE41

for ; Thu, 20 Aug 2026 06:02:22 +0300 (EEST)

DKIM-Filter: OpenDKIM Filter v2.11.0 mail.apavil.ro 2CB7536CDE41

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=apavil.ro; s=default;

t=1787194943; bh=G4RUT9Wdnn87TVWga/+WcGlzCBks44OgHr70hYK4LQ8=;

h=From:Subject:To:Reply-To:Date:From;

b=vg/K+0GbQ1VDylH5fcRIG7pEWSATBBc8k35ykkjX3RFX8yM9L5sbz/gTQVoZO4iE+

rnp6DoJtK20e920zf2HoAHijn+sP0tR+u1hkcFVfMNTlBO1WDLxP0TYMnANNqNRwbT

PQ3Iv3Wroi98zA/yUotUUFtCeCrGnYGUDyFD5kyo=

From: "Gong Zhengyang"

Subject: Hello

To:

Content-Type: multipart/alternative; boundary="wUMhuLGO7fiCg=_CdVigBOTHXoYATmnHZW"

MIME-Version: 1.0

Reply-To:

Date: Wed, 19 Aug 2026 20:02:23 -0700

Message-Id: <202619082002225596144E44$D236C252CC@apavil.ro>

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello doctor, I hope you're doing well. I'm writing to follow

up on my email from Monday regarding the recent developments and the advantages

they could offer us. I would really appreciate your feedback.

Content analysis details: (8.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[5.2.247.109 listed in dnsbl.ahbl.org]

[5.2.247.109 listed in dnsbl.ahbl.org]

[5.2.247.109 listed in dnsbl.ahbl.org]

[5.2.247.109 listed in dnsbl.ahbl.org]

[102.220.160.134 listed in dnsbl.ahbl.org]

[102.220.160.134 listed in dnsbl.ahbl.org]

[102.220.160.134 listed in dnsbl.ahbl.org]

[102.220.160.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[5.2.247.109 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[5.2.247.109 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[5.2.247.109 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[5.2.247.109 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[102.220.160.134 listed in sbl-xbl.spamhaus.org]

[102.220.160.134 listed in sbl-xbl.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[102.220.160.134 listed in zen.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[gzhengyang008(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[5.2.247.109 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Hello

This is a multi-part message in MIME format

--wUMhuLGO7fiCg=_CdVigBOTHXoYATmnHZW

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hello doctor,

I hope you're doing well.

I'm writing to follow up on my email from Monday regarding the recent =

developments and the advantages they could offer us. I would really ap=

preciate your feedback.

Best regards,

Gong Zhengyang.

--wUMhuLGO7fiCg=_CdVigBOTHXoYATmnHZW

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

8859-1">

=3D1"> =<br /><br /> Hello

Hello=

doctor,

I hope you're doing well.

I'm writing to follow u=

p on my email from Monday regarding the recent developments and the ad=

vantages they could offer us. I would really appreciate your feedback.=

Best regards,

Gong Zhengyang.

--wUMhuLGO7fiCg=_CdVigBOTHXoYATmnHZW--

Chinese products spam

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 21:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwt37-00000000JGl-3isF

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 21:02:37 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 21:02:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-136.dm.aliyun.com ([140.205.208.136]:56788)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwspM-00000000GJ9-0E2j

for root@nk.ca;

Wed, 19 Aug 2026 20:48:32 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:carrie@vip.rubbersheeting.ltd:alibabak_WebBatch:317014

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.rubbersheeting.ltd; s=aliyun-cn-hangzhou;

t=1787194048; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=kv9tvUKNE4RkRKw1W6wrLJhjhbCklFcClJehq/STWnE=;

b=FAwlPJ2xYArInaJzNd71U/4JWSUWwjfOTGwnSgx+hG1eui4q70ooLQi45JLf5guIRpCzbFpryKXJ294/2XTN/vhOdqgIqTnTRTZfvVq5ydLlx02JZCrE4obiqQP04H5v8vs7yKkXFBq0KblaI2CxxIpn8xrOVqd6HSONU775RIA=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1787194048; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=kv9tvUKNE4RkRKw1W6wrLJhjhbCklFcClJehq/STWnE=;

b=H2/yUzOZDXRLeGsvPo2b7gUoeuqwggHhiMKAYsE+pDsCE7TdElTJUnFz61NfPKLelRvU/a2XBDz+95s1sXoctJT004cZHH+cE0rzWoBA07dj+4ApVf5pwZVfkdYJpHUuKK9KGovY3k8H9HbLN1jTWuDCp3ygo3rIhz/7waCf4Fc=

Received: from chitu-hsf(mailfrom:carrie@vip.rubbersheeting.ltd fp:ma_600000349923682085 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Thu, 20 Aug 2026 10:46:16 +0800

Date: Thu, 20 Aug 2026 10:46:16 +0800

From: "Carrie Kang"

To:

Reply-To:

Message-ID: <4b705200-4727-46b0-b07b-929894b915b7@alibaba.com>

Subject: =?UTF-8?B?UnViYmVyIG1hdHM=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000349923682088

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, Wish you have a great day!

Content analysis details: (7.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.136 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.136 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[140.205.208.136 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?UnViYmVyIG1hdHM=?=

Hi,=

Wish you have a great day!
pan>

an style=3D"text-wrap-mode: nowrap;font-family:comic sans ms">We specialize in=

the manufacturing of Rubb=

er products and PTFE,

ic sans ms">Primarily focusing on
an>SBR/CR(Neoprene)/EPDM/NBR(Nitrile)/NR(Natural=

)/Insertion/FKM(Viton)/Insulating/(ESD) rubber sheet/High-abrasion rubber/Sili=

cone.

=

Anti-Static/Anti-Slip=

ped Rubber sheets/Stall mats/Drainage rubber mats/Rubber Block.

<=

span style=3D"font-family:comic sans ms;">
(255, 255, 0);">Custom-sized gaskets and precision cutting are available
>.

wrap;font-family:comic sans ms">If you are interested or have any requirements=

, please do not hesitate to contact me.

-wrap-mode: nowrap;font-family:comic sans ms">Your feedback is highly valued.<=

/span>

li.net/2025/05/13/fG4YD6w3soeJ1Tv.jpg"/>

-mode: nowrap;">

family:comic sans ms">Thanks &Best Regards

t-family:comic sans ms">

ap;font-family:comic sans ms">Carrie Kang

p-mode: nowrap;font-family:comic sans ms">Whatsapp&Phone:0086 13821173226<=

/span>

=

Tianjin China Rubber Co.,Ltd

German language spam

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 20:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwsX0-00000000BN5-258c

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 20:29:26 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 20:29:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.iari.res.in ([14.139.56.68]:33950)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwsSc-00000000ADi-2tf2

for doctor@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 20:25:09 -0600

Received: from localhost (localhost.localdomain [127.0.0.1])

by mail.iari.res.in (Postfix) with ESMTP id 39ED734DE13EC;

Thu, 20 Aug 2026 07:24:20 +0530 (IST)

Received: from mail.iari.res.in ([127.0.0.1])

by localhost (mail.iari.res.in [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id 5FqcfUr3FiTO; Thu, 20 Aug 2026 07:24:19 +0530 (IST)

Received: from localhost (localhost.localdomain [127.0.0.1])

by mail.iari.res.in (Postfix) with ESMTP id 7F35A34DE1387;

Thu, 20 Aug 2026 07:24:08 +0530 (IST)

DKIM-Filter: OpenDKIM Filter v2.8.0 mail.iari.res.in 7F35A34DE1387

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iari.res.in;

s=EEFC0880-5CB5-11F0-9CE9-5B906EFE005F; t=1787190848;

bh=lzZ7oVxx4SAuBqFxtn3VP1Me3ihFMaOw39Gs7s+wSxc=;

h=Date:From:Reply-To:Message-ID:Subject:MIME-Version:Content-Type:

Content-Transfer-Encoding;

b=Yp14L0BhirDCxVlYtigC0Ck5qsapxC97ngPuq/8yE5o//CO6302T68EltnclUpSSC

iphuINjbQ8ZD0C+FVBY5tDOkytNgmgqFBsKCATyNM1CO63gG76A4WzUIpxBzkmJc36

98M4JvMRcrPEYhOeZlgsIUsXo4Rov3qck1MjRUXU=

X-Virus-Scanned: amavisd-new at mail.iari.res.in

Received: from mail.iari.res.in ([127.0.0.1])

by localhost (mail.iari.res.in [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id 4XwLp1bxuTHd; Thu, 20 Aug 2026 07:24:08 +0530 (IST)

Received: from mail.iari.res.in (mail.iari.res.in [10.10.10.8])

by mail.iari.res.in (Postfix) with ESMTP id 971DE34DE13DC;

Thu, 20 Aug 2026 07:23:59 +0530 (IST)

Date: Thu, 20 Aug 2026 07:23:59 +0530 (IST)

From: Robert Bosch Stiftung

Reply-To: ROBERT BOSCH

Message-ID: <1215151642.2796098.1787190839543.JavaMail.zimbra@iari.res.in>

Subject:

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-Originating-IP: [23.154.136.106]

X-Mailer: Zimbra 8.0.4_GA_5737 (ZimbraWebClient - GC151 (Win)/8.0.4_GA_5737)

Thread-Topic:

Thread-Index: vMukGsD5am9ID8FeXvgU11/0NgiQMg==

X-Sophos-smtpxy-version: 1.0.6.3

X-Sophos-AV-Policy: MALWARE SCRIPT

X-Sophos-IBS: success

X-SASI-Version: Antispam-Engine: 6.0.1, AntispamData: 2026.8.20.15719

X-SASI-RCODE: 200

X-SASI-SpamProbability: 38%

X-SASI-Hits: BLANK_SUBJECT 0.100000, BODYTEXTP_SIZE_3000_LESS 0.000000,

BODY_SIZE_1000_LESS 0.000000, BODY_SIZE_2000_LESS 0.000000,

BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_600_699 0.000000,

BODY_SIZE_7000_LESS 0.000000, CTE_QUOTED_PRINTABLE 0.000000,

DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000,

FRAUD_WEBMAIL_R_NOT_F 0.100000, FRAUD_WEBMAIL_R_NOT_F_SUSP 3.000000,

FROM_IN_TLD 0.100000, FROM_NAME_PHRASE 0.000000, HTML_00_01 0.050000,

HTML_00_10 0.050000, MISSING_HEADERS 0.000000, NO_CTA_URI_FOUND 0.000000,

NO_FUR_HEADER 0.000000, NO_URI_HTTPS 0.000000,

RCVD_LOCALHOST_LOCALDOMAIN 0.000000, REPLYTO_FROM_DIFF_ADDY 0.100000,

SENDER_NO_AUTH 0.000000, SEO_SUSP_TLD_FROM 0.000000, SUPERLONG_LINE 0.050000,

TO_MALFORMED 0.000000, WEBMAIL_REPLYTO_NOT_FROM 0.500000,

WEBMAIL_SOURCE 0.000000, WEBMAIL_XOIP 0.000000, WEBMAIL_X_IP_HDR 0.000000,

__ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __CT 0.000000, __CTE 0.000000,

__CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000,

__FRAUD_BODY_WEBMAIL 0.000000, __FRAUD_MONEY_CURRENCY 0.000000,

__FRAUD_MONEY_CURRENCY_EURO 0.000000, __FRAUD_WEBMAIL 0.000000,

__FRAUD_WEBMAIL_REPLYTO 0.000000, __FROM_ADDY_SHORT_LC 0.000000,

__FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000,

__HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REPLYTO 0.000000,

__HAS_XOIP 0.000000, __HAS_X_MAILER 0.000000, __HELO_LOCALHOST 0.000000,

__HELO_LOCALHOST1 0.000000, __HIGHBIT_ASCII_MIX 0.000000,

__INT_PROD_LOC 0.000000, __IN_FROM 0.000000, __MIME_BOUND_CHARSET 0.000000,

__MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000,

__MIME_VERSION 0.000000, __NO_HTML_TAG_RAW 0.000000,

__PHISH_SPEAR_STRUCTURE_1 0.000000, __PHISH_SPEAR_STRUCTURE_2 0.000000,

__RCVD_FROM_DOMAIN 0.000000, __RCVD_FROM_SUSP_HOSTNAME 0.000000,

__REPLYTO_GMAIL 0.000000, __SANE_MSGID 0.000000, __SL_HEAVY 0.000000,

__STOCK_SUBJ_7 0.000000, __URI_MAILTO 0.000000, __URI_NO_WWW 0.000000,

__URI_NS 0.000000, __X_MAILER_ZIMBRA 0.000000, __X_VIRUS_SCANNED 0.000000

X-Sophos-OBS: success

X-SASI-Version: Antispam-Engine: 6.0.1, AntispamData: 2026.8.20.15719

X-SASI-RCODE: 200

X-SASI-SpamProbability: 38%

X-SASI-Hits: BLANK_SUBJECT 0.100000, BODYTEXTP_SIZE_3000_LESS 0.000000,

BODY_SIZE_1000_LESS 0.000000, BODY_SIZE_2000_LESS 0.000000,

BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_600_699 0.000000,

BODY_SIZE_7000_LESS 0.000000, CTE_QUOTED_PRINTABLE 0.000000,

DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000,

FRAUD_WEBMAIL_R_NOT_F 0.100000, FRAUD_WEBMAIL_R_NOT_F_SUSP 3.000000,

FROM_IN_TLD 0.100000, FROM_NAME_PHRASE 0.000000, HTML_00_01 0.050000,

HTML_00_10 0.050000, MISSING_HEADERS 0.000000, NO_CTA_URI_FOUND 0.000000,

NO_FUR_HEADER 0.000000, NO_URI_HTTPS 0.000000, OUTBOUND 0.000000,

OUTBOUND_SOPHOS 0.000000, RCVD_LOCALHOST_LOCALDOMAIN 0.000000,

REPLYTO_FROM_DIFF_ADDY 0.100000, SENDER_NO_AUTH 0.000000,

SEO_SUSP_TLD_FROM 0.000000, SUPERLONG_LINE 0.050000, TO_MALFORMED 0.000000,

WEBMAIL_REPLYTO_NOT_FROM 0.500000, WEBMAIL_SOURCE 0.000000,

WEBMAIL_XOIP 0.000000, WEBMAIL_X_IP_HDR 0.000000, __ANY_URI 0.000000,

__BODY_NO_MAILTO 0.000000, __BULK_NEGATE 0.000000, __CT 0.000000,

__CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000,

__DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000,

__DQ_NEG_IP 0.000000, __FRAUD_BODY_WEBMAIL 0.000000,

__FRAUD_MONEY_CURRENCY 0.000000, __FRAUD_MONEY_CURRENCY_EURO 0.000000,

__FRAUD_WEBMAIL 0.000000, __FRAUD_WEBMAIL_REPLYTO 0.000000,

__FROM_ADDY_SHORT_LC 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000,

__FROM_NAME_NOT_IN_ADDR 0.000000, __FUR_RDNS_SOPHOS 0.000000,

__HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REPLYTO 0.000000,

__HAS_XOIP 0.000000, __HAS_X_MAILER 0.000000, __HELO_LOCALHOST 0.000000,

__HELO_LOCALHOST1 0.000000, __HIGHBIT_ASCII_MIX 0.000000,

__INT_PROD_LOC 0.000000, __IN_FROM 0.000000, __MIME_BOUND_CHARSET 0.000000,

__MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000,

__MIME_VERSION 0.000000, __NO_HTML_TAG_RAW 0.000000,

__OUTBOUND_SOPHOS_FUR 0.000000, __OUTBOUND_SOPHOS_FUR_IP 0.000000,

__OUTBOUND_SOPHOS_FUR_RDNS 0.000000, __PHISH_SPEAR_STRUCTURE_2 0.000000,

__RCVD_FROM_DOMAIN 0.000000, __RCVD_FROM_SUSP_HOSTNAME 0.000000,

__REPLYTO_GMAIL 0.000000, __SANE_MSGID 0.000000, __SL_HEAVY 0.000000,

__STOCK_SUBJ_7 0.000000, __URI_MAILTO 0.000000, __URI_NO_WWW 0.000000,

__URI_NS 0.000000, __X_MAILER_ZIMBRA 0.000000, __X_VIRUS_SCANNED 0.000000

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Die Robert Bosch Stiftung ist eine deutsche Stiftung, die

unter dem Dach von Bosch, einem international tÃ¤tigen Technologieunternehmen,

agiert. Ihre E-Mail-Adresse wurde von Google Inc. und Microsoft [...]

Content analysis details: (9.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[14.139.56.68 listed in dnsbl.ahbl.org]

[14.139.56.68 listed in dnsbl.ahbl.org]

[14.139.56.68 listed in dnsbl.ahbl.org]

[14.139.56.68 listed in dnsbl.ahbl.org]

[23.154.136.106 listed in dnsbl.ahbl.org]

[23.154.136.106 listed in dnsbl.ahbl.org]

[23.154.136.106 listed in dnsbl.ahbl.org]

[23.154.136.106 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[14.139.56.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[14.139.56.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[14.139.56.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[14.139.56.68 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[14.139.56.68 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

2.0 MONEY_NOHTML Lots of money in plain text

0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?}

Die Robert Bosch Stiftung ist eine deutsche Stiftung, die unter dem Dach vo=

n Bosch, einem international t=C3=A4tigen Technologieunternehmen, agiert. I=

hre E-Mail-Adresse wurde von Google Inc. und Microsoft Bing vorgeschlagen. =

Sie wurden per Zufallsauswahl f=C3=BCr den Erhalt einer finanziellen Unters=

t=C3=BCtzung in H=C3=B6he von einer Million Euro ausgew=C3=A4hlt. Sie k=C3=

=B6nnen diese Spende selbst verwenden, um andere in Ihrer Gemeinde zu unter=

st=C3=BCtzen.

Interessiert? Kontaktieren Sie uns per E-Mail: foundationrobertbosch@gmail.=

com

Robert Bosch Stiftung Deutschland

Loan phish from Google Gmail

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 20:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwsWN-00000000BFx-0fdk

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 20:28:47 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 20:28:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f174.google.com ([209.85.210.174]:54451)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwo6m-000000006qR-2IhW

for sales@nk.ca;

Wed, 19 Aug 2026 15:46:14 -0600

Received: by mail-pf1-f174.google.com with SMTP id d2e1a72fcca58-84e3007a2b7so1253805b3a.0

for ; Wed, 19 Aug 2026 14:45:16 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kesefmarketing.com; s=google; t=1787175911; x=1787780711; darn=nk.ca;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=B5zIoa1EifGMYDrb0hHML6rI1YG+5qj848gLj4qMyfM=;

b=Ql6AdghCLxOPlzhBurJs18EgjAA3cYka+M59o1fI9oQUyq8BtAGjCukoxrPM6nWR4T

6qHeR4S9E1KS7lhC5k1X7TquXervINEmbEi7Rxfdv7TtRo9WN4an0KR1AQ0T28aXDJSV

eTqZ94e21UMozKoUvN8pVwK9L7rlv9wuECVqA/YTi6piOCBV96gfNQjgAMM5xNvAHgV5

Ii03dHt5/Mq6bwbeERZGEqGoBY0o4bhlCBmBv6PQcCnI3msJzDaooY2dia2bGmQUig70

S8wMiHd2bQJiURTXYPrM7SB+sm9vxbVQKZTGXQPTqPDKaw5PtSCru2pkp98aQM4qwX8b

gsGw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787175911; x=1787780711;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=B5zIoa1EifGMYDrb0hHML6rI1YG+5qj848gLj4qMyfM=;

b=N3mXpbBIJZN1orjzbT/e8/IOWdVOfrN3iVeHnxMGgMA7kjey/F6zsQTpTdAOX2PccD

/I7seX4OM3SY8YJcpbZbhfiTdvqGHvBYWC0sByE6rHdoLzUd3Y2wkduvFiANqyRfFyfU

0rJgR+YTRycMoTqQuugiqEnGplAC9TZKETnM/kksr1y8mHBx2txfBhv1KB9MXCLfaYVZ

UGyY6JE0T6vz46+dAIia965EHemYca11VwO0w53CgpPmSPoXCOd3vShQZjWxX9TwH8JZ

D5JMQrebmWht/MnJXjyTgZ0aGUnEjc9M3urc4Nci25w9r4c8imLjXmPrp5jXGsR+2lfT

+s8Q==

X-Gm-Message-State: AOJu0Yz+rBmlAaE5C0PnUyJiw8Si/sFQWAgGH2PCPB/sBQhvO0Up3qGJ

6OIngNFFGW/VuaAokul5I3AYXT8lWxYgANOmITTlnY6q1XDKuirKWPjSe5/nuhNY3/ExjE0dQ4N

mct1oe6Q=

X-Gm-Gg: AR+sD13PUggde+7xnt+d+wjwYLx2qLwmjuk3cW2noAxsc0KA+5WVkNodthZuIEejclJ

cuCfn9gFVmeOuHwne283nfLfAGmi+AwhpG+nE7ld8VOfYDGEus55nqzYEpCjuLwtYIzHjl8sVnb

pDDzElYIpB2jwG9/Ct0qWRbRkxnMSflwSbWUJn2KSzA/fS8a92Bf2FyH6yGVYHYRN8TowI80hFO

X0f9cgiBQ43jv4YAi3tJMlpazhBcABlyv99BG3cJrCYtEIAuf0PzE1G2KaR5mWwJUD7TNVCcAVI

zVZ/75SysvtzcXPe8EZl7Xl+KTlIm+BKqAEW7HL5ErPpZVhmI4oQf0McQF9Qu7qd11wcZAZRfEP

Z8Dl8voGx8X27H9Kfq0zlgF/r3VAiazQMDsw9yGHFePCWMS1jSKK63jaRorVnVwJND4Wki19MCj

LIs0WsbsLk43/9hzV1QpsW/WUvp+V3nAqmOMuxZ58jz5iqLZhPJ2/AGSkkZLisSWLrJUd/6WTPn

22y9/yCxWqsVkZ1OB6z0nQJh3gpG5DZdnNsQ4QbcmKzSggMBVkRdRhCvQ==

X-Received: by 2002:a05:6a00:4508:b0:847:77e9:acbb with SMTP id d2e1a72fcca58-851d393eca0mr13657997b3a.13.1787175910683;

Wed, 19 Aug 2026 14:45:10 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-b0.close.com. [54.186.6.46])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-851d36a2ef0sm1040100b3a.61.2026.08.19.14.45.09

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 19 Aug 2026 14:45:09 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============1729742750236244615=="

MIME-Version: 1.0

Subject: Re: Kesef Marketing | Smarter Access to Business Loans

From: =?utf-8?q?Anna_Kesef_Marketing?=

To: =?utf-8?q?Gurkirat_Wirring?=

Date: Wed, 19 Aug 2026 21:45:09 +0000

Message-ID: <178717590920.7.6698188364795184228@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_EYgVDEYcHgFFDZeN0FEvwPFU8HBzT9MkqJvB7z16Usx

References: <178646337461.7.1240611996543057914@smtpgw.close.com> <178646337461.7.8575171778634196756@smtpgw.close.com> <178656720216.7.719897199253237218@smtpgw.close.com> <178656720216.7.1487486787664217380@smtpgw.close.com> <178665638576.8.14493170454529970862@smtpgw.close.com> <178665638576.8.10004896856150860707@smtpgw.close.com> <178674436134.7.13789459120733539838@smtpgw.close.com> <178674436134.7.15043001032031211174@smtpgw.close.com>

In-Reply-To: <178674436134.7.13789459120733539838@smtpgw.close.com>

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

--===============1729742750236244615==

Content-Type: multipart/alternative; boundary="===============5309721204484363179=="

MIME-Version: 1.0

--===============5309721204484363179==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

**Hi Gurkirat**

=20

**This is Anna Sanchez from Kesef Marketing.**

=20

**Just reaching out again in case the timing wasn=E2=80=99t right earlier.**

=20

**You can explore your options anytime here: =20

**[**CLICK HERE TO START YOUR

APPLICATION**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1MVG=

GnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

K

MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadTyp=

e=3DAutomation)

=20

**If you have any questions or would prefer to speak directly, feel free to

call me at 1-866-216-5475 or 873-502-8068**

=20

**Best regards,**

=20

=20

=20

** =20

**

**Anna Sanchez**

**SALES MANAGER**

=20

To stop receiving these emails,

click[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GV=

Dnil9kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

=20

=20

On Aug 14, 2026, at 03:52 PM, Lilian Llanillo

wrote: =20

> **Hi Gurkirat,**

>

> =20

>

>

> **This is Lilian Llanillo from Kesef Marketing.** =20

> =20

>

>

> **I wanted to follow up and see if funding is still something you're

> considering for your business.**

>

> =20

>

>

> **If so, you can review your options here: =20

> **[**CLICK HERE TO START YOUR

> APPLICATION**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1M=

VGGnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

> K

> MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadT=

ype=3DAutomation)

>

> =20

>

>

> **If you have any questions or would prefer to speak directly, feel free =

to

> call me at 1-866-216-5475 or 873-771-7630**

>

> =20

>

>

> **Best regards,**

>

> =20

>

>

> =20

>

>

> =20

>

>

> **Lilian Llanillo**

>

> **FUNDING ADVISOR**

>

> =20

>

>

> ![email $16px$.png](https://closeio-

> filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774=

039066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lil=

ian@kesefmarketing.com)

>

> ![phone-call $16px$.png](https://closeio-

> filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774=

137354-phone-

> call+%2816px%29.png)**+1 (873) 771-7630**

>

> **____________________________**

>

> ![IMG_5340.jpg](https://closeio-

> filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774=

165068-IMG_5340.jpg)

>

> =20

>

>

> To stop receiving these emails, click

> [here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDni=

l9kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

> --tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

>

> =20

> =20

> On Aug 13, 2026, at 03:26 PM, Lilian Llanillo

> wrote: =20

>

>

>> **Hi Gurkirat,**

>>

>> =20

>

>>

>> **This is Lilian Llanillo from Kesef Marketing.** =20

> =20

>

>>

>> **Many businesses are currently reviewing their funding options to stay

ahead.**

>>

>> =20

>

>>

>> **If this is something you=E2=80=99re considering, you can check your op=

tions here: =20

> **[**CLICK HERE TO START YOUR

> APPLICATION**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1M=

VGGnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

> K

> MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadT=

ype=3DAutomation) =20

> =20

> **If you have any questions or would prefer to speak directly, feel free =

to

> call me at +1-866-216-5475 or 873-771-7630**

>>

>> =20

>

>>

>> **Best regards,**

>>

>> =20

>

>>

>> =20

>

>>

>> =20

>

>>

>> **Lilian Llanillo**

>>

>> **FUNDING ADVISOR**

>>

>> =20

>

>>

>> ![email $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877403=

9066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lilia=

n@kesefmarketing.com)

>>

>> ![phone-call $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877413=

7354-phone-

call+%2816px%29.png)**+1 (873) 771-7630**

>>

>> **____________________________**

>>

>> ![IMG_5340.jpg](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877416=

5068-IMG_5340.jpg)

>>

>> =20

>

>>

>> To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

>>

>> =20

> =20

> On Aug 12, 2026, at 02:40 PM, Lilian Llanillo

> wrote: =20

>

>>

>>> **Hi Gurkirat, **

>>>

>>> =20

>

>>>

>>> **We noticed your Cash Advance application is still incomplete.**

>>>

>>> =20

>

>>>

>>> **You=E2=80=99re just a few steps away from securing up to $800,000 in =

funding

within 48 hours.**

>>>

>>> =20

>

>>>

>>> **To move forward, please complete your application here: =20

> **

>>>

>>> [**Click to Start your Application

here**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1MVGGnNXqVx=

8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

K

MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadTyp=

e=3DAutomation)

>>>

>>> =20

>

>>>

>>> **and upload your last 3 months of bank statements. This will allow us =

to

finalize your review and match you with the best available funding options.=

**

>>>

>>> =20

>

>>>

>>> **If you have any questions or would prefer to speak directly, feel free

to call me at +1-866-216-5475 or 873-771-7630**

>>>

>>> =20

> **Best regards, =20

> **

>>>

>>> =20

>

>>>

>>> **Lilian Llanillo**

>>>

>>> **FUNDING ADVISOR**

>>>

>>> =20

>

>>>

>>> ![email $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877403=

9066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lilia=

n@kesefmarketing.com)

>>>

>>> ![phone-call $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877413=

7354-phone-

call+%2816px%29.png)**+1 (873) 771-7630**

>>>

>>> **____________________________**

>>>

>>> ![IMG_5340.jpg](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877416=

5068-IMG_5340.jpg)

>>>

>>> =20

>

>>>

>>> To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

>>>

>>> =20

> =20

> On Aug 11, 2026, at 09:49 AM, Lilian Llanillo

> wrote: =20

>

>>>

>>>> **Hi Gurkirat,**

>>>>

>>>> =20

>

>>>>

>>>> **This is Lilian Llanillo from Kesef Marketing.**

>>>>

>>>> =20

>

>>>>

>>>> **Welcome! I wanted to personally reach out and thank you for your

interest in business funding. We work with lenders across Canada to provide

reliable funding solutions that support growth, manage cash flow, and cover

upcoming expenses=E2=80=94while helping you access competitive interest rat=

es.**

>>>>

>>>> =20

>

>>>>

>>>> **If you=E2=80=99re open to exploring your options, you can get starte=

d here: =20

> **[**Click Here To Start Your

> Application**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1M=

VGGnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

> K

> MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadT=

ype=3DAutomation)

>>>>

>>>> **Once submitted, our team will review your information and present the

best available funding options tailored to your needs.**

>>>>

>>>> =20

>

>>>>

>>>> **If you have any questions or would prefer to speak directly, feel fr=

ee

to call me at +1-866-216-5475 or 873-771-7630**

>>>>

>>>> =20

>

>>>>

>>>> **Looking forward to connecting.**

>>>>

>>>> =20

>

>>>>

>>>> **Best regards, =20

> **

>>>>

>>>> =20

>

>>>>

>>>> **Lilian Llanillo**

>>>>

>>>> **FUNDING ADVISOR**

>>>>

>>>> =20

>

>>>>

>>>> ![email $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877403=

9066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lilia=

n@kesefmarketing.com)

>>>>

>>>> ![phone-call $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877413=

7354-phone-

call+%2816px%29.png)**+1 (873) 771-7630**

>>>>

>>>> **____________________________**

>>>>

>>>> ![IMG_5340.jpg](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877416=

5068-IMG_5340.jpg)

>>>>

>>>> =20

>

>>>>

>>>> To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

--===============5309721204484363179==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Hi Gurkirat

This is =

Anna Sanchez from Kesef Marketing.

g>Just reaching out again in case the timing wasn=E2=80=99t right earlier.<=

/strong>

You can explore your options anyt=

ime here:

ead_id=3Dlead_1MVGGnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=

=3DN K MAINTENANCE&fullName[first]=3DGurkirat&fullName[last]=3DWirr=

ing&leadType=3DAutomation" rel=3D"noopener noreferrer nofollow">
>CLICK HERE TO START YOUR APPLICATION

>If you have any questions or would prefer to speak directly, feel =

free to call me at 1-866-216-5475 or 873-502-8068

div>

Best regards,

iv>

Anna Sanchez
ng>

SALES MANAGER
>

"font-weight: 700;"> ...

Categories: Google Gmail Spam, Phish

0 Comments

Mansour Group Spam from Microsoft Outlook
Posted by Dave Yadallee on Wednesday, August 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 14:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmkN-000000008qR-13tu

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:18:51 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 14:18:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westeuropeazolkn19011028.outbound.protection.outlook.com ([52.103.33.28]:22355 helo=AS8PR04CU009.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmVY-000000006AN-0gd3

for doctor@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:03:41 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=k2t0wApllbtGkxrRhBs2NtdHfV+fp+TmwUkEAawdVg6zpt1EJQQ5brPOuIos0jEWzKuPpel4o8dQBuXgX2h+7KVo20GCHR3q7Jph/WZHKmiqLmaqWSgPLZNIcdgSfyJYOqqY/vXibB2iqTeRMWxwYGAitPti1Eb4tC2UeqM9x5MrVUIBsoFBq9DClxcmOtVe/xfLLiznu+FxdA53Qjfzo7udHceCUJW1b2qKsvLA7p2EGV/2PP4DvZjrPSenfngw46XqhanOq3awQk+foPfn7tXSV3xmBIv7Sc1bdwnTgtp7zJDxp6ly0vfg4sPdbDqTNfDFomTWl5ZV4RZchbOmrA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=edei1xzCDNnIVbCV9b0V9+QuEL4sxOXEOov9fDBrH+M=;

b=tjUV8iVnq7A7kTbwz2pN2uP4eorG34dhHs4C7WjjZW7h7MOv9crZV8J5ICWjxXKrLOuFn30OBr1m5PLhaq7VRSVhW8XPIeE7sBZWr2Iykeqfea+nBvmZssms6hLIyHVkPUzwEDE//2d8b0kWMyPHooxGQ1sRDXvmnHbqGAmHaX34sZq6zbApKZUzoaLXzED0ptx8kHdX/kgOXRxbuj8tFPD9I7hJtZ04uCdyoxwVbSLjz+/7sLVU8SswmtgHCUiL53oR3V9/5+6J82uCctJISVWI5nMllrSmqHyHaA4gtJID1yXQRgqtWKP+AgbukXMLwjrTUKS1r1TC3UQvz6WGkw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=edei1xzCDNnIVbCV9b0V9+QuEL4sxOXEOov9fDBrH+M=;

b=e5I0rW+tf0hQc8YSRKlOrigSfxRBkmg+oHZYBsyHWRr6KTdZ9c8GcSZdc7tvXn+yqYUIt/GVVdXftgC3fWlUSai0zk8BelRElm04ZwJ2CfF2/RdmSb6+C1K8oB3P6jW+wuPAJVggLa99l2wGNLOUZSCWY3K4AaF6jAlx6KrfUIUJKrZGbCDDzGbKBkr8jnurAm5Rg2ck9SCPdesSJ9NcxAjNBKhYIcFLNFs7F/FSeItw2Nbd5HvcI4maWDB0X9ebpUZkRgvdr6+TbWYD3H+3mWwsUhJGw9WR8Pyv2bjGz1t3dnY6w4QE4WLGUmxHcCvTh+uDoI18kv5+Mo6HzQzXyw==

Received: from GVUPR01MB12677.eurprd01.prod.exchangelabs.com

(2603:10a6:150:333::18) by AM7PPF9E4ED15B0.eurprd01.prod.exchangelabs.com

(2603:10a6:20f:fff1::79f) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug

2026 20:02:03 +0000

Received: from GVUPR01MB12677.eurprd01.prod.exchangelabs.com

([fe80::d860:f026:ccda:dc0b]) by

GVUPR01MB12677.eurprd01.prod.exchangelabs.com ([fe80::d860:f026:ccda:dc0b%4])

with mapi id 15.21.0339.007; Wed, 19 Aug 2026 20:02:03 +0000

From: Mansour Mohamed

Subject: CEO MANSOUR GROUP

Thread-Topic: CEO MANSOUR GROUP

Thread-Index: AQHdMBVS6TUgTwuaAUCo3I+0rtOYGQ==

Date: Wed, 19 Aug 2026 20:02:02 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: GVUPR01MB12677:EE_|AM7PPF9E4ED15B0:EE_

x-ms-office365-filtering-correlation-id: ee5c4ab6-a1d1-4069-264b-08defe2cbc7f

x-microsoft-antispam:

BCL:0;ARA:14566002|25010399006|41001999006|24121999003|22091999003|15001099006|4140399003|24021099003|37011999003|6092099016|31061999003|39105399006|2604032031799003|55001999006|16051099003|18010799003|704163111799003|22141099003|15080799012|15030799006|19110799012|8060799015|8062599012|20055399003|56899033|3412199025|440099028|34005399003|102099032|260806224601699006|39145399003|41105399003|40105399003|2607281247196008|2406899039;

x-microsoft-antispam-message-info:

=?utf-8?B?TGhTQjJ3REx0KzdMVG04Y1NEYkViaFMzaFZWdXF3SVh3dUw1Zjl3ekd5NEpl?=

=?utf-8?B?VFR0RmdDTmFJQ0NIVEMxT09RYzd5VnRpWEhMSVl0NitzcXRwSlFKTmhRU1VY?=

=?utf-8?B?SEd2b3AxWm4wdkJlcWhCd3VNbldZaGRKNXdFeTdZSTVCOStiZXFUdlNIVUd0?=

=?utf-8?B?eXJKRmlJQUpWdjhxVlJtVU5OVEFoRnJzRXdzN1BlQU0xWmkyekc1ZW1USkU4?=

=?utf-8?B?OG52Zmp4a0VkWUpDTTFWamFFWmIrVHhnYkw4cDZRalhrcytONCs4SWV0Nklk?=

=?utf-8?B?ZGRmay9OSy96dWpSNE9UQktrT1JuWUhWV0l4K2hEeUV2TzZTZ1FqQlhJM0s2?=

=?utf-8?B?eXRFK3JJcHdHOHlDWFdMK1lPb2hjMThsNmM3dCtBcDNVQTJ1QUYydXJpd0pM?=

=?utf-8?B?amk3cDMyVlY3Sm5PLzJMRkFZUkVSRVpLQmUwRW5LcE1CSHB1YW9kKzVXU2hV?=

=?utf-8?B?NHppbEFMbFVqUklWRnhGZVFWNFJERHUvR3lyZmovSzlpMGF5bjVLRFZ1bTZm?=

=?utf-8?B?eFFTOTBZa2xFNUZSRmYrUmdTT21qc3NjdzhpMU50bndJUURvZjFadUpaRzZr?=

=?utf-8?B?VWJVc1dzbUNIZFVDVmlzUnhibEtSTGFNUTdIUG12RnRBbVpLaGQwcGQzSUxO?=

=?utf-8?B?KzNKSzVURWZBZWx2blM4bUpyR1ZPRTNsVnBkT09DS01oZjZyQVdKZkxDTU1Y?=

=?utf-8?B?Y1Byb0swRlFKL21kZXVSV1FPa29DNVBiU2l3UmxPejZTRTU0L3FJOTd2bHJ4?=

=?utf-8?B?aEVuU1BoQlFndzJVRDRHdzdKVUQwaWhBVDhXbThyYUNnUitrUGtSaTFCZmI5?=

=?utf-8?B?eDZDNE9mYUM0YUZ4MnUwQkZUVHdTWjNXbk52bDhqUERjNkZzYVY1dlFyeXMw?=

=?utf-8?B?anBNMDJkMzdYeGxJSVhHSUIxaFVHN2d1eUgvSlBFN0djeFU1WHVvaVh0ZjFs?=

=?utf-8?B?SHpHMjdTVVRNL0JIcmRGa0lEaTN2WElrUk05TzFvQTUxYVo0ZEljdnd1aytS?=

=?utf-8?B?dWtOR0pGK1RlRldHSVM3UDA0Ni9RR3RPRVFOOFd0WWtkdFh5b0ZMbzhTU3M0?=

=?utf-8?B?Q3o2RE5xSnNBanQrWFkvaFdDampzOUMyUnV0VkRxMzJoR0tvVTU5T3EzdUNq?=

=?utf-8?B?N0JtOHpxdERuWGxIWGZDSWMzMWxHYUlucUk3NnRoTmJCL28yTDVxeWxZWWtl?=

=?utf-8?B?Q1NPajhwWWJtejkzeEhNVFRkNk5Dd2xDbTlGVUdKd1hlYUxHQndaeXB2ckdx?=

=?utf-8?B?eGNDOTRNWUZWY1h0VTNvMlBhdTdBbTRzZ1ZiQ0tLQ2JjK3lOekFYbERFM01Y?=

=?utf-8?B?NHBwb0twanNLamZxWFMvTWYyYkIzOXphOWk2SXRZMlBkV21HNWZMbVVyK3Bw?=

=?utf-8?B?enVpUEJnb2JUTDFoWm9ZRWI5dnkyRTlaSUd1ODMya3cwQlR2TkF6NGJsSHFv?=

=?utf-8?B?QmZYV0Vyc3VIRXNEZDI0YzBqMGwxcmoxdWdQUGc3Q0tSMzZFM1lsYXd2VHNG?=

=?utf-8?B?M1VaMDNMaFRiYUM0UTNNM3preDFXMTRpMkVuOFR4eDJRb1NPeHd2bE9PbUxV?=

=?utf-8?B?dzFIQ09qWmJvbDVzN3dQbDRhbmVHeElTaXBmZ000ckVNc2VqU1owREpxcmxN?=

=?utf-8?B?cGFXUnZ1NnJabUVZSjNiUFZwRkFBU08xelNmbTJBZ29ybVRKQkFwN2pRYWJL?=

=?utf-8?B?NFNacWFYM1lJcWtRWG9VaXRWVWJUOXVLelkzL1UvWGlrWEpjZWVnWmIzY3I1?=

=?utf-8?B?M3djem5uMVdlTy9yVEFuaU84YWRkWTM5M0R6clZsT1FaeERGL3N4Ukswdzdp?=

=?utf-8?B?ME9QbW1NMTBCSGx1OTM4c2xoVWlEMG5BM1M5RFg0VDZnTU5qNlhmMzNIdUh0?=

=?utf-8?B?aENZRmVEVGQwMHUrMTRFM0pxOE9xWWNHT2JiTjhqY05uN0l4ZFFiWG1idldp?=

=?utf-8?B?L3NtN0tIMjhXNG83SFNSelFGbCtNdVhja1NJQ2JrT2tBemZBRkpyR01pWWcy?=

=?utf-8?Q?ulklHlJE1YeeD/HM4/1SNl9mQRbpx8=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?L0dMVmJObEMreExWcUxQL3FZMGNmdEpOSUs3SWp5Uk5SM2JneHA5SkNOL01O?=

=?utf-8?B?bCtFS2ZnZVQ4WVMyMnhxY3pQYk1zSzZqSHhXNzRFdllkbEd6ajZQYkxhNGxV?=

=?utf-8?B?L2F6aWU1eERORDRwU2NhTnJQU3lHZVdCZXRRdkErWU9NVVhFRUg4OGJJLzFo?=

=?utf-8?B?SjhEY0xuZWlwR1JOYys1dmkzTzdOMEduOWFTMDBJeCtadVRsNTJyU0ZqUDU4?=

=?utf-8?B?aGFiRzNTSkZhY1MrNlNRejVScFA1aFNjWlc5eS93RVZsSnp2Z2lXODZjbDBB?=

=?utf-8?B?WHlCOGplbG83OTllMUgrUHcvellQd0xLR3BmaCtUd2RpRGdNMHZ6eUZGOGZh?=

=?utf-8?B?QnRkdlI5V2hUcXo2MU4vTkJVN0d3c3JGOUNDUGozRmthbWUyUXdqVERUTksz?=

=?utf-8?B?TjFzaUgrZUJKOWw0OUFVTmdtTGRIUHZZQkcvam4raEhCZ0EyeFNObGtubmx2?=

=?utf-8?B?N3EreCsrUUZtSDhyaWpITkVmRFk5eVVXa0pkbittMHMvbDdXWWxURkNCOUN1?=

=?utf-8?B?eGJ5ZTEzbGN0NllOZUFTTXo4Y244dGlWN2RIRzNMa0owY1RZblRrVzczdy9n?=

=?utf-8?B?Tk5OSG1XS0Fudi9xQ2tDRmZOUFBDY3kydDJxbXFaOGpwU3lCRUI2Z29lMHV0?=

=?utf-8?B?V25hVGhZQmp0a3BldFJRUjFkQjBleUpOUjJ3MjBaQW0zRjZsbjFTZ1NqamdX?=

=?utf-8?B?Ty9pZ1NQM2k2RkZiaEszLzNJbGIzR2NWcHdKNkZ6TTRjaDcwdTA5UG5aeE9l?=

=?utf-8?B?YmhldmNSSS8xU1FwK1FaTnlHeVJjbTV2YjJ3TlBqQms1dlBQWGtpbGVOT0JU?=

=?utf-8?B?SFlSYkhzeVRqR3ZZSWdra2VqaXpaOFhXdGhWSUNqcUwySkpDek9OdU90TU5E?=

=?utf-8?B?dGk1Q0hSc1R3U1lqOW00azcwZk9JL2lsLzh4czdnYUxLaXR1eVVScGFyK25P?=

=?utf-8?B?V2xOTEpqQ1JTV3lIMFF1bWgwckpmLzhQMHZ4ZzZYQmVYUTVZdldISHdROE9R?=

=?utf-8?B?SXFkUXRrVkZaYktRbVVjNDMxblJIOXZxRkNOWjFaZWlvWWhnSjNmKzlPWkdQ?=

=?utf-8?B?WUREYjVpaHJ3ZDFzcHFVeXM0TW9TOFhBV0huV1Rqd2JxWjFzajM3UmE2RjR5?=

=?utf-8?B?c29vU0pHKzd4VjhLeWs0dGQvWngySWs2Q08zcmptaTdzWFEveGNTTGg1Zkdt?=

=?utf-8?B?UTE5dExJSTc4NmMrR1R3Y254RlNqTUUzWUpMYmRrS2pmVTRJaVk0K2JPVjdM?=

=?utf-8?B?a29MOWlzQWxpbW9wQWRsOHFkSDZpOStYR2pyL1cwelZBb09McmxjNE40V01B?=

=?utf-8?B?UzBYREdLTXg1NFhjcnJjRHMxMjVBVERkTndNeVBSc2ZNUG5UeGk3TDNSQmty?=

=?utf-8?B?WVRMeWtEMG56Q29IVDMyaEhWM3FHc0dLSDRVcVhJaG9TVXBhLzJhajMwU1BW?=

=?utf-8?B?V1o4ODZkVWl5cC93OGRwT3E0QUcyYW5Ya01mVU9teElaL0o1azRQZjVtbXJq?=

=?utf-8?B?RnJ2ZG1vRGs1b3dOcEJ4ZHlFTTJzMCs1QTRQeW5rUG5TZzQvd2hlakxBNUk3?=

=?utf-8?B?bmZGdWo1VUpFSDVOSDNqbDVEb1FUZUlvRTdxVzFoZ1NMZGJmajFXS0Jpb2FZ?=

=?utf-8?B?TGtRdmJCK0pBRjdKTWFmMmk4andCZ3dEbzhkeVZoNmpIQTEvMnNrM3pSMzJm?=

=?utf-8?B?ZEltaEtVY21NWXpoVThyT21XeTZBa3RZaHpDYTZFQVNCWSsyWEVhMG5XSHFz?=

=?utf-8?B?ZFEwTXJFY05vbkpXSFc1bDc2RXRxMHNnM2NVSVZMMnFiMXpoZTlOUDdxUWY1?=

=?utf-8?B?U2hOaWVJY2JDZHBZTXFzTU1xajRKdTRaUTI3TmliTytoVUpQV3N6QUlmc1F5?=

=?utf-8?Q?r14aFmqBAPbEe?=

Content-Type: multipart/related;

boundary="_004_GVUPR01MB126774698CD65074EDACA951DB3A52GVUPR01MB12677eu_";

type="multipart/alternative"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: GVUPR01MB12677.eurprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ee5c4ab6-a1d1-4069-264b-08defe2cbc7f

X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Aug 2026 20:02:02.7557

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PPF9E4ED15B0

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings! My name is Mohamed Mansour (CEO Mansour Group).

I'm reaching out about the potential of a mutually beneficial partnership

between us, and i need your kind response to discuss further. Kindly reach

out at your earliest convenience.

Content analysis details: (5.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[52.103.33.28 listed in dnsbl.ahbl.org]

[52.103.33.28 listed in dnsbl.ahbl.org]

[52.103.33.28 listed in dnsbl.ahbl.org]

[52.103.33.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ceomansourgroup(at)outlook.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.33.28 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.33.28 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.33.28 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} CEO MANSOUR GROUP

Subject:

CEO MANSOUR GROUP

From:

Mansour Mohamed

Date:

8/19/26, 14:02

Greetings!

My name is Mohamed Mansour (CEO Mansour Group). I'm reaching out about the potential of a mutually beneficial partnership between us, and i need your kind response to discuss further.

Kindly reach out at your earliest convenience.

While i wait your kind response, please accept the assurances of our highest esteem.

Mohamed Mansour

Founder and Board Member

CEO Mansour Group

Address: No.17, Ummam Center Salah Eddeen Road, Malaz Riyadh, Kindgom of Saudi Arabia

Website: www.mansourgroup.com

The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future.unsubscribe from email or ignore

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Mansour group spam from Microsoft Outlook
Posted by Dave Yadallee on Wednesday, August 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 14:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmkJ-000000008pj-1ghi

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:18:47 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 14:18:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northeuropeazolkn19011027.outbound.protection.outlook.com ([52.103.32.27]:27127 helo=DU2PR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmUx-0000000063e-0tfc

for doctor@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:03:04 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=a1hz4/FtNfiYahUe4BXpwOXoEzgcQzIasOeGGqmiBx5eEB1LgI5FK8VIRWJ3o0E1qDv7fOs8M9K7Ck1EOdC4W0RjgciU9kyy5+zl9ketU0fbxACV6Gg/oWRfwDQzzafCrhwf/IXTBkERAQDz4R8sNW5tkOeFO/a8KGe9e6mTgl2eEpbMB4hmbg7QuYa3UwIm2gxIk6IIgVwBLNe9XM7jYB60SRGo639YbcDs6XKYhDez6iJ3uFSwBpxjGarTdBDkuDLy7+mnDNRtYN0z6fjKIcOEztnECyZ2U6zFlbrqGloVD7qd8ACp+DFtYCuMcALedK8s8yygXxbNoJLw91LCkA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=WjaRdakUfAaYzOIY2w1I3uj44IfEY80/vp0NFHVWlCw=;

b=pAzs80yTGPzAIQZBX5WIr+dIoXFvnQ23+foGdaAgrSo+xaDCrqchvIxhSiArQHWgybvAPgac/ayN03nhi+1gz83bOSA0Oyjxt3t2f3pOu4IfmcWrT8crtNNodZB8L8Kr8Y/PgeP5XAr5YTYLnufCu4RoqpDBBk+tCYVg9Gteygu9GwXo0fygEo9P8VwRajGhboGxLMyqGC2T6XtKReZ96RSK9mjtoVxiQtMLQmWAj60d/xThkfXn5EFo/LCqxDVBraVga1GfAMLWj86vvSe+0wXu7ALYwHfWRGwFjB+GHF6VPyTmg98bjOnZLAxyBKApBCP11QhmvRL0bViunLbs5A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=WjaRdakUfAaYzOIY2w1I3uj44IfEY80/vp0NFHVWlCw=;

b=SOeM6RKrLjITxAM+96f0XMf8RQiI+pTQJO+2oYpARBJZg2NF3jJPCx104h1DLVbxSwwuuj54rIkT4Zw/OmXT2oCg3qW/xadAqutb8Czg/nXP/punHKOFIhrIKB1dnD8mb7VPtyfr7Zsnc0x081fCRrVL3JZ1ghRJ8NaPA+VTfEMmWwyhyz8iFpDb7BaYTFCVRKCWgaeZ0X6ioxfSoTVlYv2Dgm80gvPIGyW4RIfkUj2715cfAXkYGDJ3LeNgenjPmVtbbRTBs76uHkAvWD5R/DsQVqckMyNP31/AO6T5uFia9deIes61zRuNOEdudU9i4yc78bBIvHX+TIRSVbS1uQ==

Received: from GVUPR01MB12677.eurprd01.prod.exchangelabs.com

(2603:10a6:150:333::18) by AM7PPF9E4ED15B0.eurprd01.prod.exchangelabs.com

(2603:10a6:20f:fff1::79f) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug

2026 20:01:57 +0000

Received: from GVUPR01MB12677.eurprd01.prod.exchangelabs.com

([fe80::d860:f026:ccda:dc0b]) by

GVUPR01MB12677.eurprd01.prod.exchangelabs.com ([fe80::d860:f026:ccda:dc0b%4])

with mapi id 15.21.0339.007; Wed, 19 Aug 2026 20:01:57 +0000

From: Mansour Mohamed

Subject: CEO MANSOUR GROUP

Thread-Topic: CEO MANSOUR GROUP

Thread-Index: AQHdMBVVCdHPN66/dEuErFSkSUH1EA==

Date: Wed, 19 Aug 2026 20:01:56 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: GVUPR01MB12677:EE_|AM7PPF9E4ED15B0:EE_

x-ms-office365-filtering-correlation-id: 67a2f9eb-7d4d-49ec-3590-08defe2cb8f9

x-microsoft-antispam:

BCL:0;ARA:14566002|25010399006|41001999006|24121999003|22091999003|4140399003|24021099003|37011999003|6092099016|31061999003|39105399006|2604032031799003|55001999006|16051099003|704163111799003|15080799012|15030799006|22121099003|19110799012|8060799015|8062599012|20055399003|56899033|3412199025|440099028|34005399003|102099032|260806224601699006|39145399003|41105399003|40105399003|2607281247196008|2406899039;

x-microsoft-antispam-message-info:

=?utf-8?B?WjNxckgvU3loU1Baa0VaWlRmV1BQYk1rMTQveHN2R1FycHNUN1NJd2xNbnVQ?=

=?utf-8?B?eCtsNitwam9FYXRYb293RlBXeEVTR1lQRHVENGhWN01TcDZNNmwzdC9veXpB?=

=?utf-8?B?SG9yRFczMGRFcHlJT24rbEVUNnE3dlFDRFkyb0xEU3lmQ3Y1ZG9wVTZoMDg4?=

=?utf-8?B?S1QyWWFMbGtkMzRjVWtLRkxYelg3WENNd2plNC9WWE43c010QXhvb2UvUXRj?=

=?utf-8?B?MDdudnBlSW1Mdm1FQ3d0c2dUeUsxSkJNQ0lWNjY4NDZITXhjcEtmblU4S2lR?=

=?utf-8?B?a3dzSWQwaW8wTHJkMWVEaU1wRFVNSEJYWDczWnd5V3Y1MEFXOFkwZlVxejBh?=

=?utf-8?B?cUN5dFVOZ05PSFNwV2V5N21MaFUxQUNlK3RGQWUzbzlqQkdlcjhuK1RIVnhP?=

=?utf-8?B?cm5TZ1hFTVBqaDlGNFJDbHA5SmwxN2tKNkZnbjFDcEFpcCtxQkwwMlloVkpD?=

=?utf-8?B?L3Bqbi83UTJ4UjVtR05IMnZ4ZXNzb2R2NldqSG1FbWY4UVZ5clhnbGQ0ODVK?=

=?utf-8?B?S3JvelhYb2lPVjA3eGR5M2RTTDBFLzE3d1VlVkxOMm1mUDJMYnFVTy9sUiti?=

=?utf-8?B?Uk5qdEx3ZzdMOVVtb08zZ3h4aXNwNWxiMWxCUVEybE1OOHp3NXloTVNkV2N4?=

=?utf-8?B?U1FpZXJmQ01vRTg2WVVFMm82Z1JwQzRWZjlVMVFzaTdRVk9lTE1sSjA1TERX?=

=?utf-8?B?SU1Qd20zNTdUQW5EblA1bklFaXZ2bUY1aHZKMlJyblBEcmJ4bm0yREJkWFM4?=

=?utf-8?B?LzB0OWx3dEZpaEs2Y0piWXpCbVRNUzUyemM4a1lWbjIrYzF3L0xWRnBJRVNK?=

=?utf-8?B?RjN6VzdKVkJiWThjckp6L2h6ZHNzeXNLRzJ0YXNGR3NsazZ1azBiTjMvMlZC?=

=?utf-8?B?Nk9wM0xqZXFIWXhQTVhNS0xlMlFIRFViSWdIbW8wRm5FeC9xS3Zma1c4TThO?=

=?utf-8?B?dDZCVFYzUjZxblhCeHJhUzIyQ1BkODhUaEQyTDYvWjg0NmZZVTlUNmFZRVBk?=

=?utf-8?B?bWdzSS9qeDZNMk11SnJpdkRuNkdwUXgwNFlaZFFxek04aklXV2VzYitodGsw?=

=?utf-8?B?UVExMjAxTVAvUzltM3Q1OXNGaDJKMkpadDArRTZvZ01TT3Y0aWRkRFZOaEdi?=

=?utf-8?B?R3lGcEdyQVBBWlB6bkdES3Z3dzVjbXhhRzJYOW8yUW9HY083ZlJoT1N0eEZi?=

=?utf-8?B?N2ZYSlc3TW1RWmlqdXBoam00OC9NekhzYnpyOTZXdnVyYmZJZS9nYjdiM2Vx?=

=?utf-8?B?SlA4akRnMDZ1RWcvRHptY1dKaTgzQS9DelJvOCtJRlpGb1BGc2t3VEdjWWs1?=

=?utf-8?B?WmNOSFljc2szRldXa0N6ZTRvWWROdGVjdi9PaFBFRjA0Tm1FOUZKMyt6K2tH?=

=?utf-8?B?cmQ5RGRJbTJtTTVuVzdWdGtRaTJubWVvNTJkZ2hEc3pIRUpDN0pteFlCOGlM?=

=?utf-8?B?ZHhJZmd0cWIraUhmdy9sMWtvaTR0SkZROXgrNDZMbXovWDFycXRGYld1VVIw?=

=?utf-8?B?UFNGUlllWGdPa3VrU1hEMFlNd1dNU2NCeW9LdkREU3c0UXBLQU91cklLYjlC?=

=?utf-8?B?dHFyNEZVOHBBMFdNTGlHNGIxVXBJYjkzWXVQUmU5Y0xTRGFUeGlSNE9HbDdz?=

=?utf-8?B?M1RjbFdwblYyMEd5ZmdISFJlTEVLVVZSWUN5MFpLMFR3SkJMNkRKYy9kb0RP?=

=?utf-8?B?MEdxL1A1SmlaWXh0Zi93MDdTSm5NZXo5clp6R2x6V3FWWFJlQklXbG9tT3Rx?=

=?utf-8?B?NDlrczZDdDhXcUROUXBiM3hETFI0cDlmd3NCbUU5VmR2NnBLYU9VOUNtK2ZX?=

=?utf-8?B?WkR3WXBEQUVSTXhkVzFpN1h5SjlKckxVY3J1dFI4bGRIRE53OEc1ekg0MW1V?=

=?utf-8?B?YTYzVmE0aFJENGdGbVpYQmk5TjIrVmZKeld3VG4vM3VVbzhzdWgwaUMwVmJX?=

=?utf-8?Q?ObkXphwIJJ8=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?dzVhNVdQRWhCSVk1a1JSQzlYYmRrL1VkMWhKclorZzdmRDZVcHBld3hrM3lw?=

=?utf-8?B?TGdja1RKaXJMTHlrUkNkWnlZZExUQmNNRnM3WUR1UGdwU1FSUjVCWG0xTjAz?=

=?utf-8?B?eGdjSmRheE12T3E3U2pzMmdSOEdENGVUYzBqcDBmanQvaGlsU3U5NzBzMnRN?=

=?utf-8?B?QWt1YW5ZR1NqS29YVGlTMmVBVjFzUE1mYlVyNVdUd3o2MmdIeWFDTXdONHp1?=

=?utf-8?B?aklnWUdaczdQN2NoWVdKZVhtL3lqN2tqV2JJSGo0WU51U0tkWFlISUhuaEht?=

=?utf-8?B?bmZZdHZuVW5TS0FDZmNmSElGMldSSUNieTZJQVEydmVmRG9Xd2xIcHlIWEV2?=

=?utf-8?B?NUVyblM0NFp2aTd6ZnVNOUN2R2ZSVk5sWVRLV1g4TUN4UXNoQjlrV1dpNFFO?=

=?utf-8?B?U0ZtSmJYU0NYbVVPT0NSMW1MUzNteWtiNzh0b1RuYzl1aXA1VFh4SlUwYVZ6?=

=?utf-8?B?b1BCZHdtNVBaWnh0RjREUnZqUWxiM2NNandpeEFZTTFnWU5xVVAwRUtZOEls?=

=?utf-8?B?Y0tXOGwrblNsSzJTcmlsa3M3SkdsU0FBOWE5bzY3MnVjdGpQdzI0cU8zRkI5?=

=?utf-8?B?RXZ1dEZQMjdFN0dpK2xqTFp5MFY2VDdlK2NtRXYvek5MZmlmK25sTVF4SXE5?=

=?utf-8?B?NVVSblhCUXlINjRoNE5RLysrcldhcjZpeEoxUjMzUS95Q3dyTXFTNTVZNith?=

=?utf-8?B?dFBxeXc0akY2YmluR0hMemkva2JsdHZSV1AwNG1NbjZzN1dMaTRpQjR6MW5h?=

=?utf-8?B?akxpQ2dIUURtRndtSWpMakhFSjkwKzZEYUdOSW94TzU3d29haUFkOFR2ZWRD?=

=?utf-8?B?TG5uUi9OTG1saHQzWXdPWmRtSTZkbEpJNy9MakZGV1ExU2laMjd4QmgweUpE?=

=?utf-8?B?cGtkZEVNRlpRekVCQUQxbGFHcWJGZ2hSZEhhTEkyeUhLMHNrVzNkdWNPb3R4?=

=?utf-8?B?b0ozYzIzZ1IrYWt6MVRVb1RFdjlWc01sSUhDQ0xiTUpsdHp4dlFiK1czUXRN?=

=?utf-8?B?YkprZUxlUDUzQU8wWGJrYnBiMjFoakZEU09pdCs2OGVsd0lUY2tQcnFwYkVD?=

=?utf-8?B?VExTcjc2SDdoQk1leXZ5d1VWenN6eFplazBYZm5na2lLeGZqV2s4dW1wQ3cz?=

=?utf-8?B?bW45N0pNbzFJV3VWRmxJeDhmbkIyT1Q1MktMZjNjYkFjK3ZzNXNmUklWbGxI?=

=?utf-8?B?RDFDc3YzSzVrT3pYR1NwZ2RhWGRUM0VHQUtVMkJjNnA5YUpYb1N6Ritnd2c5?=

=?utf-8?B?SlZ5aWRNeXR3cDdlY0lFWVBIQjhTRHVOcFVZODlwRXRobTEwQmwwZHcyZ0xi?=

=?utf-8?B?YkZWdGgyM2RaY3dGeXBuMlFqQ3ZKUG1peGp2MllnYllBc0E0Si9XUFVkRkZa?=

=?utf-8?B?Y21DV1B5cHM3UWdZU3k4Tms2RTJSQlhWdTBvTmxaVTgvV2lYRm1ycXd5ZDlz?=

=?utf-8?B?dXZqdFR2VUwwbzgrU2dPUkRON1dhRUQxMnFIVGtNUUVscStCbmduRVdRbC9K?=

=?utf-8?B?VTV4RDdPcDY0dE5zaG96OWk4SlY0UGdzV2ZCeVV1Q2ZWcjhYL294RTdvcGJw?=

=?utf-8?B?QXZOTjlWY0IzbFRKdjh0RGp6NzJxb0Q1dXN4SVhaenI4T3UvM2NBWEZxMFp0?=

=?utf-8?B?dU1OdTYzdmhLdEVFSmFnWTYvZG1FWGh2YU9NbGM5bjlPWEoxQ1o5dFp5TTYy?=

=?utf-8?B?Wk1xWitKR0orZ0ZYazlZVFBWSmV3eVBGTXEzSjNzN0c3V3EydEV1czNvWUdo?=

=?utf-8?B?QlY1WHVBd0RIYzdIdjNDaEtkMGxYZ09sNkp4dWY1TEJKUDVsekUxUFQ4dUV4?=

=?utf-8?B?RDUvOHh2WkFONllzV1NiNG5mODlDYnFmNFhsNG4zMmxUVUlZVEtuUE5TTEJh?=

=?utf-8?Q?0OgpWK1iOL3Gl?=

Content-Type: multipart/related;

boundary="_004_GVUPR01MB12677D01237D8DF4E8BB1D0FAB3A52GVUPR01MB12677eu_";

type="multipart/alternative"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: GVUPR01MB12677.eurprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 67a2f9eb-7d4d-49ec-3590-08defe2cb8f9

X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Aug 2026 20:01:56.8332

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PPF9E4ED15B0

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings! My name is Mohamed Mansour (CEO Mansour Group).

I'm reaching out about the potential of a mutually beneficial partnership

between us, and i need your kind response to discuss further. Kindly reach

out at your earliest convenience.

Content analysis details: (5.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.32.27 listed in dnsbl.ahbl.org]

[52.103.32.27 listed in dnsbl.ahbl.org]

[52.103.32.27 listed in dnsbl.ahbl.org]

[52.103.32.27 listed in dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.32.27 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.32.27 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.32.27 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.32.27 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.32.27 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ceomansourgroup(at)outlook.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.32.27 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.32.27 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} CEO MANSOUR GROUP

Greetings!

My name is Mohamed Mansour (CEO Mansour Group). I'm reaching out about the potential of a mutually beneficial partnership between us, and i need your kind response to discuss further.

Kindly reach out at your earliest convenience.

While i wait your kind response, please accept the assurances of our highest esteem.

Mohamed Mansour

Founder and Board Member

CEO Mansour Group

Address: No.17, Ummam Center Salah Eddeen Road, Malaz Riyadh, Kindgom of Saudi Arabia

Website: www.mansourgroup.com

The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future.unsubscribe from email or ignore

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Page 1296 of 1296, totaling 19434 entries

previous page

No entries to print

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	August '26					Forward →
					1	2
3	4	5	6	7	8	9
10	11	12	13	14	15	16
17	18	19	20	21	22	23
24	25	26	27	28	29	30
31