Web/SEO/App Spam from Microsoft Outlook Part 3

From: Babita Smith



Sent: Tuesday, December 9, 2025 3:37 PM



To: sales@nk.ca



Subject: Great Results to Your Clients?







Hi,



I=92d like to follow-up on my last email.



I=92d like to send you our proposal and Price list.



Thank you!





From: Babita Smith



Sent: Friday, December 5, 2025 3:26 PM



To: sales@nk.ca



Subject: Great Results to Your Clients?







Hello,



We specialise in helping businesses appear on Google=92s first page for the=

ir niche keywords. This can significantly increase traffic, leads, and enqu=

iries.



If you=92re interested, I can send over our affordable SEO packages.



Best,



Babita



--_000_DU0P191MB299373A062306FD01E6BF7EBADA1ADU0P191MB2993EURP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">





Hi,sales@nk.ca





ANY UPDATE





Can I send packages and a Price with great proposals?





Best Regards,








From: Babita Smith



Sent: Tuesday, December 9, 2025 3:37 PM



To: sales@nk.ca



Subject: Great Results to Your Clients?



 



Hi,



I=92d like to follow-up on my last email.



I=92d like to send you our proposal and Price list.



Thank you!








From: Babita Smith



Sent: Friday, December 5, 2025 3:26 PM



To: sales@nk.ca



Subject: Great Results to Your Clients?



 



Hello,



We specialise in helping businesses appear on Google=92s first p=

age
 for their niche keywords. This can significantly increase=

traffic, leads, and enquiries.



If you=92re interested, I can send over our affordable SEO packa=

ges.



Best,



Babita









--_000_DU0P191MB299373A062306FD01E6BF7EBADA1ADU0P191MB2993EURP_--

Web/SEO/App Spam from Microsoft Outlook Part 2



X-OriginatorOrg: sct-15-20-8534-20-msonline-outlook-f08eb.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DU0P191MB2993.EURP191.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: fa1ad1ac-2508-4996-b39e-08de38a12092

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Dec 2025 10:36:22.0470

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM8P191MB1282

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi,sales@nk.ca ANY UPDATE Can I send packages and a Price

with great proposals?



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:10:5a7:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:5a7:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:5a7:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:5a7:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:5a7:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:5a7:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:5a7:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:5a7:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[52.103.32.24 listed in will-spam-for-food.eu.org]

[52.103.32.24 listed in will-spam-for-food.eu.org]

[52.103.32.24 listed in will-spam-for-food.eu.org]

[52.103.32.24 listed in will-spam-for-food.eu.org]

[52.103.32.24 listed in will-spam-for-food.eu.org]

[52.103.32.24 listed in will-spam-for-food.eu.org]

[52.103.32.24 listed in will-spam-for-food.eu.org]

[52.103.32.24 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2603:10a6:10:5a7:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:5a7:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:5a7:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:5a7:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[52.103.32.24 listed in dnsbl.ahbl.org]

[52.103.32.24 listed in dnsbl.ahbl.org]

[52.103.32.24 listed in dnsbl.ahbl.org]

[52.103.32.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2603:10a6:10:5a7:0:0:0:19 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2603:10a6:10:5a7:0:0:0:19 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2603:10a6:10:5a7:0:0:0:19 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2603:10a6:10:5a7:0:0:0:19 listed in]

[dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.32.24 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.32.24 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[brittenhamzella93(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[brittenhamzella93(at)hotmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Great Results to Your Clients?



--_000_DU0P191MB299373A062306FD01E6BF7EBADA1ADU0P191MB2993EURP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,sales@nk.ca



ANY UPDATE



Can I send packages and a Price with great proposals?



Best Regards,

Web/SEO/App Spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Dec 2025 04:25:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTemt-000000004i6-2SNE

for dave@doctor.nl2k.ab.ca;

Thu, 11 Dec 2025 04:24:47 -0700

Resent-From: The Doctor

Resent-Date: Thu, 11 Dec 2025 04:24:47 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northeuropeazolkn19011024.outbound.protection.outlook.com ([52.103.32.24]:38553 helo=DU2PR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTe2w-00000000AA2-0K3Z

for sales@nk.ca;

Thu, 11 Dec 2025 03:37:29 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=RouhvoIJtBpDTn5dTwIWlGQGym5EVTABdv6w0NoRv3kGKBzy7CRxxcbrvOePxQE8xaHhDxghLW3V2HpSFKyvphtcyoC+F4LpG0k+/YZVCHZzi/JZOx37g6FH1ISj050bdOebVV+wXanyYpdhvOu07EQamc2rCyHedVK5a5fUtFtBdmUQn5IhTrFUT+3sruidCqBHE7WncvaeG/EO7ahRcQC79dcO81xAxO6Ck1qX1wxfbo/mNgDtYIdBoTf+jwGu/Mq94hcFqtvwat4lYW5Ldt1LChDonMRCe9slLWv3WTwAldrqYA+4uCU4yBX07qyPkwpVvUqQ02RJZ0+C80Wwdg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=bQmlXZd5HCNJJIgnF5ZnopqRxRcAaJkisGtJG12OMWo=;

b=YGNgYqilmXAob9R0ClogKZKkraKDvSq669iPZMJ4hj3lNA25ZifXKkY2sxQ6xyqCiV8uCbKrd7atC2egSve119sjLy7a5Ets0yz7CEvgx+aPOY/vPn+lOz0CsggLrzPk29PlmePvNPF3aSou1R8VjEhWHprbSPhtk1gJKaO3n2PhT5tJte/1bazpLWfPSp6izhBAbHu80D6CHpPN/euOblbYK0QIY5r0sytonWyFDvXrD6zDxJzX7dWAelpZ6L4D1dbNYlsbCR9mRw45a6BRiTUXoQfjPwbeXyBjac7pSqPffTiETkrXqNL5unVuvjCMDiZw3rraZafDpQnBjq7WuA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=bQmlXZd5HCNJJIgnF5ZnopqRxRcAaJkisGtJG12OMWo=;

b=Pht9m62TNWHl1o4a5PkeCktVI4TIMaJIbHL8rM8QQo2CZjpYLBZLQfcNzwSfuhz1T8PNayc2CPDFlbQyMwrm6c7MBitc036p96LNYELWTU4/UHDjct/Ql9gZoUlhBzRhMTwrHT3Y+U04F7oPXiZjECmIcfO3XlgsvxNPVnnAg6pCT/UJFChptzDpHbf7ddBWoLOe9oWabdmMrWtmxDJKCFuErb7mQpxKgROrfgZxZHuMWODtJccgJmON3Lwtbf+tPBV4rx56IeQu+1nLCi9KQAww0h0ZY43g5hRaPhh45VXTZoXLo9UgUiq5Rl545E6u4PBp6mYE/cWUtI7rkQRA/A==

Received: from DU0P191MB2993.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:5a7::19)

by AM8P191MB1282.EURP191.PROD.OUTLOOK.COM (2603:10a6:20b:1ea::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9412.9; Thu, 11 Dec

2025 10:36:23 +0000

Received: from DU0P191MB2993.EURP191.PROD.OUTLOOK.COM

([fe80::ec:b83:4418:ba80]) by DU0P191MB2993.EURP191.PROD.OUTLOOK.COM

([fe80::ec:b83:4418:ba80%4]) with mapi id 15.20.9412.005; Thu, 11 Dec 2025

10:36:22 +0000

From: Babita Smith

To: "sales@nk.ca"

Subject: Great Results to Your Clients?

Thread-Topic: Great Results to Your Clients?

Thread-Index: AQHcaon+SWKZOwYksEKf+ZYKnWBKuQ==

Date: Thu, 11 Dec 2025 10:36:22 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DU0P191MB2993:EE_|AM8P191MB1282:EE_

x-ms-office365-filtering-correlation-id: fa1ad1ac-2508-4996-b39e-08de38a12092

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|5062599005|51005399006|38102599003|31061999003|15080799012|19110799012|8060799015|8062599012|461199028|40105399003|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?8I0z0LhXld25S7f99KC4qI/BOYVsUG7xBWBGl7ZhIEgBlIBWRq4xGtZw?=

=?Windows-1252?Q?Z2uskjHIiUNHPa8Mr3oltTpuFTmDR619RUxOZ6VSZdp5GS9hatTKrLw9?=

=?Windows-1252?Q?XG7+M8Z7rDNDWrUu+5jWbUs1kX6XVTy01Oqc6Mj5SDuGGHxZ9uGtj8nA?=

=?Windows-1252?Q?m++Hk/kVls7RFCA1cVpxIAwkizimKCpNrEOA1P8XzGdp2BksmAsX1Sc/?=

=?Windows-1252?Q?7uMfooVRUw0S6MKznVPXqtVRqYkohaQmhgI5IDU0jaHBKiBzAnlYlyyP?=

=?Windows-1252?Q?IzXZZZqffv3UOKxo98Y66PAAHP0lPNOsvnpQOZoVHaNKIWTk8u0e3nuU?=

=?Windows-1252?Q?dG9VpGw31HxI71B8QkLMc+i1jUKJIHEL9X1VBglZxcVkl0mAtfJHIicQ?=

=?Windows-1252?Q?PQPG5GkugrsTWlaFsMJk11VqlWv8kxlHrY/cO7LPylS+CDHZF584NvE0?=

=?Windows-1252?Q?c6XLs1Ipg0Z+/C9GWsp5PzvkkHkBket+sosA4pUXSaTMRdyEyRfBS3UW?=

=?Windows-1252?Q?36KH9heR4ZAHfgWP6v+m3vCNPZl+LsPDyN/Y9JQE++7H95Z5GoifM7/C?=

=?Windows-1252?Q?bgoAvuYcU8vk7lSL3u5sCp3V5q2xbtfYgLmrj5jtolWintMw4RHog3YM?=

=?Windows-1252?Q?9YwlH6eYBE1b724l1jcDHNI8OvR/VwKi9cbBUxNlA2Yjt8Nts1T1Znfs?=

=?Windows-1252?Q?Hbhwzpyapqq3rwSRGgG7EpqS2Dj7F6/g2E3W6qSb2II5o8d7tmib10IT?=

=?Windows-1252?Q?YJwhJSRGR4hD9VpPexRptNvJ54IpFW9/w1ZCgoj4xgzbGOAZplcTdX/S?=

=?Windows-1252?Q?Hx5jFAXsQvpWJESHK+9qLKyGoIrbVByMQntpdIZRMgUk824Oke3TApHm?=

=?Windows-1252?Q?zVHsYFIoJGQxst0K6u7FcPh6tZuZKSc03GsEteqY6ryh4Vxbb3RSdziQ?=

=?Windows-1252?Q?AOkEofmyB2hptn4IkYTi4zoIJM0hGQiQTXhEGCX5IY2D77n7CPC7fnHo?=

=?Windows-1252?Q?mYeJFCYQ5ejdVQkc2T3XzbQHJhdkIKVlLjp1AeYlSVpP4NR7ncFWRyz6?=

=?Windows-1252?Q?dKsIOh16fi+TxiCZXuUmUSIaYmRShTZ771bI5lLE2CQWbC5eK/WimgE+?=

=?Windows-1252?Q?6G7mTH2AoA8Xq161gf4lafYLkudF5EEFer4EiP2WA1cEFt4yF19J9sYN?=

=?Windows-1252?Q?LRx375Ioj3Iq656ujltBDsTO92OuAuAl875e5GyBW5TOm6kseWqcNIW7?=

=?Windows-1252?Q?XW1gtggsc92Lc6Wo2lYFfqvHBvzcCV+vAL47XsBVudWB2Tsr8mORLZIY?=

=?Windows-1252?Q?m2W0orYiZtrkHjotJmrTz1y7pXY=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?een4xKiO6/59FA4Jaoyr6nv4fOpXgmmgmR0wSVpi975U+WCqyYSP9DHD?=

=?Windows-1252?Q?5DuLUPsYwVzNF7U6WbPoMaMReFN66ZZV7WlJkyEtPKHeGVICSx8ScQ6R?=

=?Windows-1252?Q?aX7Ll5ZYbKmTRYOogTqc5Tjm/GyEdIS/NWInwA1cSkkePunJWF6W760Q?=

=?Windows-1252?Q?a15odF5F6z8wqfVBeDTnorPmyKCtxKHyFdczcsfDjT83MyLgIIesnrvu?=

=?Windows-1252?Q?zBttw+8b1el30wi4YxdXyUrBDCcyHgQ1UHCd78ZK/cbFDvE0GB223vJa?=

=?Windows-1252?Q?hWwpFPaDzg3Zh9rDbEs0LAhukS+jNR8KK/C/QeOoe4i3jGF4qEDoixco?=

=?Windows-1252?Q?v4vAyZA2RxomjuqUPbXFNysGjuaAcWdIaEyAVBSHhSIVksaSliC76rZA?=

=?Windows-1252?Q?oVVH85VYni/5+aW1VGThfbHkglTtNRY6oPL67HAf+D9xXcoFdQFFvtI4?=

=?Windows-1252?Q?0D5XgJM0vBt8BxZUIBLUji+i3K8M34VJJp1AYtouYsHnHd+PZMliRY4e?=

=?Windows-1252?Q?HrFX3Hdns+io9VImFIybzKynHbvWa+R9hxb2ysKG8vtEcb2AI0Uqdt3L?=

=?Windows-1252?Q?I2fZ72tYpXaRCmatlojyg9qJzsnyIKX4uEpiegwOJ93oY0QTF+Ubnfbe?=

=?Windows-1252?Q?J3/5jQcxaUNXVwvi8pNklutswxrKnsTwLBx+I798SKvSSJvvKVxJtdq+?=

=?Windows-1252?Q?y6Mjtenm0X2nfJ+tD27NRBmOvT/Ify6p35rcxXSnvDRHzTsptK0XZLAf?=

=?Windows-1252?Q?68lYAHOoWgGNqbQP7bHdzIiw2PV6NhmUrSejS+nhpoxoqDZ2WkcwEkGb?=

=?Windows-1252?Q?O9aP5ch30Qpxaa6ExXFilJTfcb7IQQ658jMeKkiuhxC+peAHSvdzIPh0?=

=?Windows-1252?Q?5KdzUnQQlxYFP/q4txnZlvYguIIMjcmWbTSExDiwEJ1Xm3d5n9w33ifq?=

=?Windows-1252?Q?S20/YcmVUz4hdNQj4wlIhzX/o/Df1AuNzsAX1pBMVNXhwwPGFR3PNHp8?=

=?Windows-1252?Q?ldTJyMOWSM9r9/YHB3SaFPMglhHfjK3NaKLHmoEyzXWaxOzyPM0RQj8P?=

=?Windows-1252?Q?ajAT7QxFQDgan14ik8xfkv1Dd/lwSgzgXeeqpNX7tklXaQhic9mONm/4?=

=?Windows-1252?Q?PHhw2+ab0ai6hi14canXHNXXL49iUsRKXsFxC3F3T0fWckQrzwQ0C5So?=

=?Windows-1252?Q?1U1MerZgwjSZoTLZM3fTr6+k/uxy9sMO1hqnSvC8ED/UAOPN78oKJPeC?=

=?Windows-1252?Q?mCOMTcf2K5xj5gnfJTf3eDwfWo3pF6gvFyp8776gvSbTN37KaEvcNHq2?=

=?Windows-1252?Q?X2oI4o8vRUqB8crm6o5Ylhsb1ksJm478G3QQ0S5vxitw+XlX?=

Content-Type: multipart/alternative;

boundary="_000_DU0P191MB299373A062306FD01E6BF7EBADA1ADU0P191MB2993EURP_"

MIME-Version: 1.0

Web/SEO/App Spam from Google Gmail Part 2



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is

CUSTOM_MED

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.70 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.70 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[carterrobinsont(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} #Logistics // Travel // Rental iOS, Android App's?/



--0000000000007f5dfc0645a96378

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello There,



I hope you=E2=80=99re doing well.



Are you looking to develop a mobile app for your business? We specialize in

building custom Native and Hybrid mobile apps for both iOS and Android

platforms.





Industries We Serve:

=E2=96=B6=EF=B8=8E Dating Apps

=E2=96=B6=EF=B8=8E Taxi/Cab Booking Apps

=E2=96=B6=EF=B8=8E Travel Booking Apps

=E2=96=B6=EF=B8=8E Rental Apps

=E2=96=B6=EF=B8=8E Medical Apps

=E2=96=B6=EF=B8=8E GPS-based Apps

=E2=96=B6=EF=B8=8E Logistics Apps

=E2=96=B6=EF=B8=8E Crypto / Finance Apps

=E2=96=B6=EF=B8=8E Cleaning Apps

=E2=96=B6=EF=B8=8E Restaurant Apps

=E2=96=B6=EF=B8=8E E-learning Apps

=E2=96=B6=EF=B8=8E Event management Apps

=E2=96=B6=EF=B8=8E Healthcare/Fitness Apps

=E2=96=B6=EF=B8=8E E-commerce Apps

=E2=96=B6=EF=B8=8E Real Estate Apps

=E2=96=B6=EF=B8=8E Food Delivery Apps

=E2=96=B6=EF=B8=8E Hotels booking Apps

=E2=96=B6=EF=B8=8E More Apps.



Please let us know your app idea and specific requirements.

What type of mobile app are you looking to develop, and which service or

industry is it for?



Thanks & Regards,

Carter

Mobility Consultant





*CONFIDENTIALITY INFORMATION AND DISCLAIMER: *This e-mail message and/or

attachments being sent from Mobile App development. is privileged,

confidential and directed to and for the use of the addressee only. If you

are not the intended recipient of this message, or if this message has been

addressed to you in error, distribution or use of the contents of this

message by anyone other than the intended recipient is strictly prohibited.



--0000000000007f5dfc0645a96378

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello There,

I h=

ope you=E2=80=99re doing well.

Are you looking to develop a mobile a=

pp for your business? We specialize in building custom Native and Hybrid mo=

bile apps for both iOS and Android platforms.

Industries We Serve=

:

=E2=96=B6=EF=B8=8E =C2=A0 Dating Apps
=E2=96=B6=EF=B8=8E =

=C2=A0 Taxi/Cab Booking Apps
=E2=96=B6=EF=B8=8E =C2=A0 Travel Booking Ap=

ps
=E2=96=B6=EF=B8=8E =C2=A0 Rental Apps
=E2=96=B6=EF=B8=8E =C2=A0 Me=

dical Apps
=E2=96=B6=EF=B8=8E =C2=A0 GPS-based Apps
=E2=96=B6=EF=B8=

=8E =C2=A0 Logistics Apps
=E2=96=B6=EF=B8=8E =C2=A0 Crypto / Finance App=

s
=E2=96=B6=EF=B8=8E =C2=A0 Cleaning Apps
=E2=96=B6=EF=B8=8E =C2=A0 R=

estaurant Apps
=E2=96=B6=EF=B8=8E =C2=A0 E-learning Apps
=E2=96=B6=EF=

=B8=8E =C2=A0 Event management Apps
=E2=96=B6=EF=B8=8E =C2=A0 Healthcare=

/Fitness Apps
=E2=96=B6=EF=B8=8E =C2=A0 E-commerce Apps
=E2=96=B6=EF=

=B8=8E =C2=A0 Real Estate Apps
=E2=96=B6=EF=B8=8E =C2=A0 Food Delivery A=

pps
=E2=96=B6=EF=B8=8E =C2=A0 Hotels booking Apps
=E2=96=B6=EF=B8=8E =

=C2=A0 More Apps.

Pleas=

e let us know your app idea and specific requirements.

What type of =

mobile app are you looking to develop, and which service or industry is it =

for?

Thanks & Regards,
Carte=

r

Mobility Consultant


CONFIDENTIALITY IN=

FORMATION AND DISCLAIMER:
This e-mail message and/or attachments being =

sent from Mobile App development. is privileged, confidential and directed =

to and for the use of the addressee only. If you are not the intended recip=

ient of this message, or if this message has been addressed to you in error=

, distribution or use of the contents of this message by anyone other than =

the intended recipient is strictly prohibited.




--0000000000007f5dfc0645a96378--

Web/SEO/App Spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Dec 2025 04:25:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTemQ-000000001xE-2tbZ

for dave@doctor.nl2k.ab.ca;

Thu, 11 Dec 2025 04:24:18 -0700

Resent-From: The Doctor

Resent-Date: Thu, 11 Dec 2025 04:24:18 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f70.google.com ([209.85.216.70]:52634)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTcZ7-000000004XZ-2bza

for sales@nk.ca;

Thu, 11 Dec 2025 02:02:36 -0700

Received: by mail-pj1-f70.google.com with SMTP id 98e67ed59e1d1-34378c914b4sf1790701a91.1

for ; Thu, 11 Dec 2025 01:01:40 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1765443694; cv=pass;

d=google.com; s=arc-20240605;

b=jtOfOCVlQpBacHymkzDU1p6LPhsA89nNvVG7HSU14aG1O07VvPJGaL5QeQjI6zcPEX

pnMJOdaNN6JZZXInQtb0ALeoNz5+Z19MycYhktQyk28A+i4lddjf/zepSqmDLZqzLfjw

coVFSi0S12GS+DV/Mz2mpc1D1aCGql3rFTMRcVBMVIh32XDCmkoL1PQYr8HvFTr/s4yt

sxCwwg68qXf/ONUJkRKtB70DsSA1Q2UGrPbfOfO3Y5RTBfe354MQCpBRGXPRK0YsupqW

+z2nzMDZFJiM7t2Tej8Y/sdo9a73cybfZVx7YJVzgdUBm5uaJSQ3Nqe74AiWbgPG713V

IxOw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=Yrr+GKXbmUJfeg5yvJyT6DEWndrmg++tz6Je5LGYpg4=;

fh=jymbjYYmsj8lxDNKZSYOpDpCylwna9iWL9h9aLnknU4=;

b=QxuChlfwmFTLry4z/wqI3HjWYQL6PNLfoIqW0TsNA9ejMKzyBsL33kerjficj0Dl9s

6ygzArqbzuQXSPUuuDGN2V1ZchX1UNhR7v23M35tHfpsxRIcWSErLk0IM/mhiNluu9va

HTVWzI+Smp2FaYIA2u+lJwXkqNv/1E3DmrOuwErIe5cX3ixAzBSrlAQMhggDKbF11/3a

DYDnd515orCAD1G26CNkSCy+fP0zw5L6B6GcKXBpyf8FtsqPiT43fL4jOjaaeZzHwbHY

RyYsGVHrIA0UowTPiua4Eel4SFO6gZ73UhRWhzFFEp6SGLw8jKFeJUqFzqb2duZVJsXi

gfcw==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=OTdfbWPk;

spf=pass (google.com: domain of carterrobinsont@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=carterrobinsont@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfosys.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=knitinfosys-com.20230601.gappssmtp.com; s=20230601; t=1765443694; x=1766048494; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=Yrr+GKXbmUJfeg5yvJyT6DEWndrmg++tz6Je5LGYpg4=;

b=WlcsMvdQ9+8UsFzvfhS/FAbTOn0gVf/XsEyUvA4PM9B9z6hEw4fjAhqsMfG5AUBu7u

1hV4dvQWkn6/E/TPGCuTGSa0UgS8wH/OV0JUDVHhp5OO7wWTzucqmr7e2Rat/DgwVY4H

ArUJQ1JfvpOhhOnOexzFG6Ay1gCBgXS4WieW/68PgtEfaeABuagj3eHW6MCLMs/eibpO

I2Q5OvfbT988u4Wa02biFxIhWMKiPSBIUXkxhKL3P62TFoJQDnhoB5vEZ0+L/7JBYsMI

DiJZWNdyMvU/755yHP33EgXDjQlbyDEt2cuq8v9ooEu9DvAhfCGZVQULjv7znUwlMEp+

I2Wg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765443694; x=1766048494;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=Yrr+GKXbmUJfeg5yvJyT6DEWndrmg++tz6Je5LGYpg4=;

b=Tyw24+ungWOd1dwbc3qLlzkRcOQ4HvgEmnj9ae5rd9QSa3zpjN72aMGJgf4Ierl0NF

n6EVYzZ47ZzQxoHvMIERMPVsKpNqRg2+TBvZF0+278fkgij2qfWWnuK/fRktEkj+U/0k

7Ofra/wYcbKmec2Zc1J/RLz+xJwpisOY97LZry6SSmXOLhguFW8PSwITaMZXN8d0uTB5

dHBpLdNecJTHc+C/eJteG5S0yOt80NEBVHlkTtSqugL1afSpjBMwsawxm3yTrl30GVdH

w7TFXgb9wA4HEBLDlZ/553KAixVetu6PTp8ZIZBuYobyvefS1C5Qx6P5+oIxjdrzNFL4

Y6mg==

X-Forwarded-Encrypted: i=2; AJvYcCVNd1m/LQB8DVu8iAFO/nNyUZZRk+tKEP6aO8kBpeNtPYCibHw3/e9I5JkSxqsy5KgF8khxiA==@nk.ca

X-Gm-Message-State: AOJu0YzEhwTUzwhOGzoWOkN9ZOjM36K47v+MLXim8YCZWMSrnGmsCsdH

FCWleK+eUg6Ietz/C4nFozB38NqyPQrXj/UYaZqQ5K3Tq8/cfo/MvncSHeQ2BOCuXps=

X-Google-Smtp-Source: AGHT+IGxyCUi1Rv8phB9fRxiKqjs7OBXa/szxVmH/XnErLher7JJamo1KmRqJsa5U8gu1Y1JxRjSaA==

X-Received: by 2002:a17:90b:2647:b0:32e:5d87:8abc with SMTP id 98e67ed59e1d1-34a728ed974mr4697568a91.36.1765443694329;

Thu, 11 Dec 2025 01:01:34 -0800 (PST)

X-BeenThere: carterrobinsont35@knitinfosys.com; h="AWVwgWbLlVhdYCdrLxSJU/f+KGbphJ+/IvYLUdPuizW4Z9vntQ=="

Received: by 2002:a17:90a:a694:b0:341:1a01:6228 with SMTP id

98e67ed59e1d1-34a8fefdfd1ls527044a91.1.-pod-prod-05-us; Thu, 11 Dec 2025

01:01:22 -0800 (PST)

X-Forwarded-Encrypted: i=2; AJvYcCXUOrmQo89I5el5k7mDG5tYMNJrfFH/7OOQ1TQs2n17OiFPm7+LBjuwv87OFkZrxHzR3iyWYz5RZlyD92KNMXanZg==@knitinfosys.com

X-Received: by 2002:a17:90b:3dd0:b0:340:b912:536 with SMTP id 98e67ed59e1d1-34a728da882mr4519378a91.31.1765443681964;

Thu, 11 Dec 2025 01:01:21 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1765443681; cv=none;

d=google.com; s=arc-20240605;

b=Ox9JXoiU+ekeB6JJWxhLRirSF9FCJtKjH0dmaqMG/govZDWu0GaT4N9kT4TAEKcDM9

WBRsDFqIl4NmpB/Xq0qHrmE2QDuyis3zp2AJ+CPRoE3nKSz/6bDwq8UbpzZkG2yW/92S

F4Zt5l30odELDMqjjiCL/GDbPcVR12sblS9El4hoOMfPUjjc0QXaCyDW8oX7Mgq20fIJ

VfTaBIlp8HXqhnELqSPijB6AQaj/8Cah9NLQDQcUtANV9IdB1D2bw50jUlthTvUI9Hpg

wkI+ILWqXkOTejBDYjZ7g8nS5pKhvUDmFwn4BkH0AlPes2Si3EYBViJZEluxq2RlFh9o

qZ0A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=Yrr+GKXbmUJfeg5yvJyT6DEWndrmg++tz6Je5LGYpg4=;

fh=eljzzczZGxTkf5OJLIlB38ZYvOJHASWfTt9dpFk0KIs=;

b=HfVvz9YY7jYryEpbSGIxSIedzbAJgibPUaq9ryqg5VNOkIoLVqZkT77mWaIid6Wavg

NvE7FbayayvAr6AT3vC0RENkdU9DVhc8hgKZWwfvLNneBiOVWncDgEa8Hp6oiyeOyWqh

mCRdZd6/V6pCHLCYXthE4B9GJZ1hhLGt3+EMBSHTyWGyQH9yzNO5Bez8VpsSTtXdrXno

19JS/IrZJWj5LJckHULqpbiFC0QllmUC2tvyOCxeLDk/BLLkn7grb54voqfr1THjmBVu

blawZrlklsISe0CALWYhpgQcMmgbgfvkQ5r7fDjjFyb8+HF7vMnHG0ACiUD3PRsgp/Cc

28gQ==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=OTdfbWPk;

spf=pass (google.com: domain of carterrobinsont@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=carterrobinsont@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfosys.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 98e67ed59e1d1-34a8f92fa70sor886513a91.11.2025.12.11.01.01.21

for

(Google Transport Security);

Thu, 11 Dec 2025 01:01:21 -0800 (PST)

Received-SPF: pass (google.com: domain of carterrobinsont@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

X-Forwarded-Encrypted: i=1; AJvYcCU+kB5pbl2AR2Qf+YtM2tAt0+16Yi0/rVgATDi3YxoeGZPEbnvOTCFZsD2DH9mNa3rLuU5Y4Ga2CI1uGxk2h6NB9w==@knitinfosys.com

X-Gm-Gg: AY/fxX6wgcJWaQyzPiUXqa3+DqZMLXjBkT821/TcdWXEarTAg16a0YujLfKefWPunY4

kZQV7cgRHAAl6gHyXt/0F81kWNCZ2jZaih7LIb9BsTPDTPnug4GjnfH+MFATOQz7qc0FHrKHb5K

2PgGIU6+iyvoRFwBErf7e7Layfoy50uEk22VZXP/8iiNCXAEC/blBECT1CYdhzSvq1yIHhNPsx2

KpYj+Jhg4e2JvwIIYxWVyzIvRpgzBYzc//KYTX+aYzbpyePuUaSYx9SSGfs5WEWxen0Bb8tYzDP

qHS5MpbhmqNymziXM6gMm1UW3eCE8w==

X-Received: by 2002:a17:90b:37d0:b0:32b:baaa:21b0 with SMTP id

98e67ed59e1d1-34a7285c24bmr5618467a91.6.1765443681343; Thu, 11 Dec 2025

01:01:21 -0800 (PST)

MIME-Version: 1.0

From: Carter Robinsont

Date: Thu, 11 Dec 2025 14:31:07 +0530

X-Gm-Features: AQt7F2pbianAlopYxjGGwuPqT6PREcJNIt_V_Tgz4HZlSwhwORhoiX5ro8d4vOE

Message-ID:

Subject: #Logistics // Travel // Rental iOS, Android App's?/

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000007f5dfc0645a96378"

Bcc: carterrobinsont35@knitinfosys.com

X-Original-Sender: carterrobinsont@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=OTdfbWPk; spf=pass

(google.com: domain of carterrobinsont@gmail.com designates 209.85.220.41 as

permitted sender) smtp.mailfrom=carterrobinsont@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=neutral header.i=@knitinfosys.com

Precedence: list

Mailing-list: list carterrobinsont35@knitinfosys.com; contact carterrobinsont35+owners@knitinfosys.com

List-ID:

X-Spam-Checked-In-Group: carterrobinsont35@knitinfosys.com

X-Google-Group-Id: 782154286220

List-Post: ,



List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello There, I hope you’re doing well. Are you looking to

develop a mobile app for your business? We specialize in building custom

Native and Hybrid mobile apps for both iOS and Android platforms.

Canadian Car Shipping Spam from Google Gmail Part 4



MjUzQSUyNTJGJTI1MkZjbGljay5jYW5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sdHI=

lMjUzRE1UYzdPVFEyTVRJek8yaDBkSEJ6T2k4dmQzZDNMbU5oYm1Ga2FXRnVZMkZ5YzJocGNIQn=

BibWN1WTI5dEwzVnpMWFJ2TFdOaGJtRmtZUzg3T3pSa1lUbGhNMkZrWVRObVlUWXhOamc0TWpVM=

U1qWm1NbVZtWldOak0yRmgmaGFzaD0wNzE4NGM3MmM2MjViYmFkMGI4NDA3ZmNlMmE4NWVkNGI3=

NjE1OTI4ZTVmMGZhOWIyMjcyY2NhNDIyMjI4ZTFk" target=3D"_new" rel=3D"noopener" =

data-start=3D"1055" data-end=3D"1133">Click here to get started

=0A<=

p data-start=3D"1135" data-end=3D"1185">Best regards,

" data-end=3D"1151">The Canad=

ian Car Shipping Team

=0A

90">=0A

 

=0A


a-start=3D"1192" data-end=3D"1217">Canadian Car Shipping


tart=3D"1217" data-end=3D"1220">860 Boardman Canfield Rd.

1245" data-end=3D"1248">Youngstown, Ohio 44512

end=3D"1273">(800) 381-6907

ss=3D"" href=3D"https://click.canadiancarshipping.cc/wp-json/wp-mail-smtp/v=

1/e/ZGF0YSU1QmVtYWlsX2xvZ19pZCU1RD0xMjIwNDYxJmRhdGElNUJldmVudF90eXBlJTVEPWN=

saWNrLWxpbmsmZGF0YSU1Qm9iamVjdF9pZCU1RD02MDk0NTg5JmRhdGElNUJ1cmwlNUQ9aHR0cH=

MlMjUzQSUyNTJGJTI1MkZjbGljay5jYW5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sd=

HIlMjUzRE1UYzdPVFEyTVRJek8yaDBkSEJ6T2k4dmQzZDNMbU5oYm1Ga2FXRnVZMkZ5YzJocGNI=

QnBibWN1WTI5dE96c3lOV05oWWpjM01EWXlPVGt4TXpFeE1qQmxOVFk1TkRnd04yRm1OVEV4TVE=

lMjUyNTNEJTI1MjUzRCZoYXNoPWQzY2I1ZmI4OWE1YThiMWZlMTdmYTc4MzRmMGEwZjVkOGYxMW=

E5ZTdhYjAwN2MxZGI0ZTc3NDMyZDcxMTAzYmE=3D" target=3D"_new" rel=3D"noopener" =

data-start=3D"1290" data-end=3D"1364">https://www.canadiancarshipping.com
a>

=0A =0A
der=3D"0" cellpadding=3D"0" cellspacing=3D"0" align=3D"center" width=3D"100=

%" style=3D"border-collapse: collapse; width: 100%;" class=3D"tnpc-row tnpc=

-row-block ui-sortable-handle" data-id=3D"footer">=0A

=3D"center" style=3D"padding: 0;" class=3D"edit-block">
k-content" border=3D"0" cellpadding=3D"0" align=3D"center" cellspacing=3D"0=

" width=3D"100%" style=3D"width: 100%!important; max-width: 600px!important=

">=0A

ht: normal !important; letter-spacing: normal; mso-line-height-rule: exactl=

y; outline: none; padding: 15px 15px 15px 15px;background-color: #ffffff;" =

bgcolor=3D"#ffffff">
=0A
amily: Verdana, Geneva, sans-serif;font-weight: normal;color: #222222; text=

-decoration: none; line-height: normal;" href=3D"https://click.canadiancars=

hipping.cc/wp-json/wp-mail-smtp/v1/e/ZGF0YSU1QmVtYWlsX2xvZ19pZCU1RD0xMjIwND=

YxJmRhdGElNUJldmVudF90eXBlJTVEPWNsaWNrLWxpbmsmZGF0YSU1Qm9iamVjdF9pZCU1RD02M=

Dk0NTkxJmRhdGElNUJ1cmwlNUQ9aHR0cHMlMjUzQSUyNTJGJTI1MkZjbGljay5jYW5hZGlhbmNh=

cnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sdHIlMjUzRE1UYzdPVFEyTVRJek8yaDBkSEJ6T2k4dlk=

yeHBZMnN1WTJGdVlXUnBZVzVqWVhKemFHbHdjR2x1Wnk1all5OCUyNTI1MkZibUU5ZFNadWF6MD=

VORFl4TWpNdE16azNNVEZpT1RFM01TWnVaV3M5TVRjdE96c3dOVGhsWm1Fd01UZ3dOemxsTjJaa=

09XVTJPRGhqTmpNNVlUbGpNbU0zTVElMjUyNTNEJTI1MjUzRCZoYXNoPTNhYWE5MWVjOWVmMDU0=

ZTY4OWZmNGQ3NDdhMGFiYzJlZmUzMjk4NDlhYWJhYjU1OThhMDY0Y2EzMTQ0MmNmNjM=3D" tar=

get=3D"_blank">Unsubscribe

erdana, Geneva, sans-serif;font-weight: normal;color: #222222; text-decorat=

ion: none; line-height: normal;">   |   
n>
-weight: normal;color: #222222; text-decoration: none; line-height: normal;=

" href=3D"https://click.canadiancarshipping.cc/wp-json/wp-mail-smtp/v1/e/ZG=

F0YSU1QmVtYWlsX2xvZ19pZCU1RD0xMjIwNDYxJmRhdGElNUJldmVudF90eXBlJTVEPWNsaWNrL=

WxpbmsmZGF0YSU1Qm9iamVjdF9pZCU1RD02MDk0NTkyJmRhdGElNUJ1cmwlNUQ9aHR0cHMlMjUz=

QSUyNTJGJTI1MkZjbGljay5jYW5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sdHIlMjU=

zRE1UYzdPVFEyTVRJek8yaDBkSEJ6T2k4dlkyeHBZMnN1WTJGdVlXUnBZVzVqWVhKemFHbHdjR2=

x1Wnk1all5OCUyNTI1MkZibUU5Y0NadWF6MDVORFl4TWpNdE16azNNVEZpT1RFM01TWnVaV3M5T=

VRjdE96dG1OMlZoWW1FMk5UTm1OMlF4TmpFeU56aG1Nak15WlRGak9HUXdNamhoTUElMjUyNTNE=

JTI1MjUzRCZoYXNoPTMyYWI1NmY2NTc1Njc5OTJjZGNiODQxYWIyNTAxZDUzY2Y1MzEwYzIwNGE=

4OWFiY2VkMzJkNzAyNTlhZTI2NmY=3D" target=3D"_blank">Manage your subscription=


;font-weight: normal;color: #222222; text-decoration: none; line-height: no=

rmal;">   |   

3px;font-family: Verdana, Geneva, sans-serif;font-weight: normal;color: #22=

2222; text-decoration: none; line-height: normal;" href=3D"https://click.ca=

nadiancarshipping.cc/wp-json/wp-mail-smtp/v1/e/ZGF0YSU1QmVtYWlsX2xvZ19pZCU1=

RD0xMjIwNDYxJmRhdGElNUJldmVudF90eXBlJTVEPWNsaWNrLWxpbmsmZGF0YSU1Qm9iamVjdF9=

pZCU1RD02MDk0NTkzJmRhdGElNUJ1cmwlNUQ9aHR0cHMlMjUzQSUyNTJGJTI1MkZjbGljay5jYW=

5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sdHIlMjUzRE1UYzdPVFEyTVRJek8yaDBkS=

EJ6T2k4dlkyeHBZMnN1WTJGdVlXUnBZVzVqWVhKemFHbHdjR2x1Wnk1all5OCUyNTI1MkZibUU5=

ZGladWF6MDVORFl4TWpNdE16azNNVEZpT1RFM01TWnBaRDB4TnpzN04yVmlNakEyT1RSa056a3d=

PV0V6T0RZMVltVmhNMkZtT0dKbFptSTNOVGclMjUyNTNEJmhhc2g9NTdiMjFiMGRkZWI5ZWZlNj=

MwNDU1MzEyNDE0Yzk0MGZlMmI2OTY5ZTZlZTc5MjBkMjBiODRkZmJiYjU5MTA2Zg=3D=3D" tar=

get=3D"_blank">View online
=0A=0A=0A=0A
-- /tnp -->=0A=0A=0A=0A=0A
lt=3D"" src=3D"https://click.canadiancarshipping.cc/?noti=3DMTc7OTQ2MTIzOzl=

kMDJhZGRmZTJlMDhkZjhhMDM4N2UxMDY2MTgzM2Qy"/>=0A
nadiancarshipping.cc/wp-json/wp-mail-smtp/v1/e/ZGF0YSU1QmVtYWlsX2xvZ19pZCU1=

RD0xMjIwNDYxJmRhdGElNUJldmVudF90eXBlJTVEPW9wZW4tZW1haWwmaGFzaD0xMTkyOWUzOWQ=

3NTI0OTQ2NjhhZGRmNDAzMzMwYjhhZTRmMzQ5MmY5MmM5ZDFhN2Q2MzcwMGQ5ZjVkZWUyNjdh" =

alt=3D""/>=0A=0A



--b1=_sSAVRuiq0SAdpiOAWHSYerwcdNA9jofRg3FgSHvrc--



Canadian Car Shipping Spam from Google Gmail Part 3

=0A=0A=0A
normal; word-spacing: normal;" dir=3D"ltr">=0A=0A
ellspacing=3D'0' border=3D'0' width=3D'100%'>=0A=0A

ff' valign=3D'top'>=0A=0A =0A=0A
e border=3D"0" cellpadding=3D"0" cellspacing=3D"0" align=3D"center" width=

=3D"100%" style=3D"border-collapse: collapse; width: 100%;" class=3D"tnpc-r=

ow tnpc-row-block ui-sortable-handle" data-id=3D"image">=0A

lign=3D"center" style=3D"padding: 0;" class=3D"edit-block">
block-content" border=3D"0" cellpadding=3D"0" align=3D"center" cellspacing=

=3D"0" width=3D"100%" style=3D"width: 100%!important; max-width: 600px!impo=

rtant">=0A

-height: normal !important; letter-spacing: normal; mso-line-height-rule: e=

xactly; outline: none; padding: 15px 0px 15px 0px;background-color: #ffffff=

;" bgcolor=3D"#ffffff">
=3D"0" border=3D"0">

k.canadiancarshipping.cc/wp-json/wp-mail-smtp/v1/e/ZGF0YSU1QmVtYWlsX2xvZ19p=

ZCU1RD0xMjIwNDYxJmRhdGElNUJldmVudF90eXBlJTVEPWNsaWNrLWxpbmsmZGF0YSU1Qm9iamV=

jdF9pZCU1RD02MDk0NTg5JmRhdGElNUJ1cmwlNUQ9aHR0cHMlMjUzQSUyNTJGJTI1MkZjbGljay=

5jYW5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sdHIlMjUzRE1UYzdPVFEyTVRJek8ya=

DBkSEJ6T2k4dmQzZDNMbU5oYm1Ga2FXRnVZMkZ5YzJocGNIQnBibWN1WTI5dE96c3lOV05oWWpj=

M01EWXlPVGt4TXpFeE1qQmxOVFk1TkRnd04yRm1OVEV4TVElMjUyNTNEJTI1MjUzRCZoYXNoPWQ=

zY2I1ZmI4OWE1YThiMWZlMTdmYTc4MzRmMGEwZjVkOGYxMWE5ZTdhYjAwN2MxZGI0ZTc3NDMyZD=

cxMTAzYmE=3D" target=3D"_blank" rel=3D"noopener nofollow" style=3D"display:=

block; font-size: 0; text-decoration: none; line-height: normal!important"=

>
7/Canadian-logo.png" width=3D"354" height=3D"115" alt=3D"" border=3D"0" sty=

le=3D"display: block; height: auto; max-width: 354px !important; width: 100=

%; padding: 0; border: 0; font-size: 12px">

td>

d>

"0" align=3D"center" width=3D"100%" style=3D"border-collapse: collapse; wid=

th: 100%;" class=3D"tnpc-row tnpc-row-block ui-sortable-handle" data-id=3D"=

text">=0A

t-block">
=3D"options" class=3D"tnpc-block-content" border=3D"0" cellpadding=3D"0" al=

ign=3D"center" cellspacing=3D"0" width=3D"100%" style=3D"width: 100%!import=

ant; max-width: 600px!important">=0A

=3D"text-align: center; line-height: normal !important; letter-spacing: nor=

mal; mso-line-height-rule: exactly; outline: none; padding: 20px 15px 20px =

15px;background-color: #ffffff;" bgcolor=3D"#ffffff">
style=3D"width: 100%!important" border=3D"0" cellpadding=3D"0" cellspacing=

=3D"0">=0A =0A

class=3D"text" style=3D"mso-line-height-rule: exactly; font-size: 16px;font=

-family: Verdana, Geneva, sans-serif;font-weight: normal;color: #222222; li=

ne-height: 1.5;">=0A

Looking to ship=

your vehicle from the US to Canada?

>At Canadian Car Shipping
ng>, we specialize in fast, secure, and affordable cross-border vehicle tra=

nsport.

=0A

Whether you=E2=80=

=99re relocating, purchasing a car from the US, or managing fleet logistics=

, our expert team ensures a smooth and hassle-free experience every time.
p>=0A


-end=3D"730">What we offer:


>=E2=9C=94 Door-to-door vehicle transport

"768">=E2=9C=94 Full customs documentation assistance

data-end=3D"810">=E2=9C=94 Licensed and insured carriers

841" data-end=3D"844">=E2=9C=94 Transparent pricing and timely delivery

=

=0A

We=E2=80=99ve helped thousands o=

f individuals and businesses transport vehicles safely between the US and C=

anada =E2=80=94 and we=E2=80=99re ready to help you too.

=0A


t=3D"1028" data-end=3D"1133">=F0=9F=91=89 Get a free quote today:
=3D"" href=3D"https://click.canadiancarshipping.cc/wp-json/wp-mail-smtp/v1/=

e/ZGF0YSU1QmVtYWlsX2xvZ19pZCU1RD0xMjIwNDYxJmRhdGElNUJldmVudF90eXBlJTVEPWNsa=

WNrLWxpbmsmZGF0YSU1Qm9iamVjdF9pZCU1RD02MDk0NTkwJmRhdGElNUJ1cmwlNUQ9aHR0cHMl=

Canadian Car Shipping Spam from Google Gmail Part 2



0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.231 listed in sa-trusted.bondedsender.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.231 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.231 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.231 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.231 listed in wl.mailspike.net]

Subject: {SPAM?} =?UTF-8?Q?Canadian_Car_Shipping_=E2=80=93_Reliable_Vehicle_Transport_from_the_US_to_Canada?=



--b1=_sSAVRuiq0SAdpiOAWHSYerwcdNA9jofRg3FgSHvrc

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



Looking to ship your vehicle from the US to Canada?

At Canadian Car Shipping , we specialize in fast, secure, and affordable cross-border vehicle transport.



Whether you’re relocating, purchasing a car from the US, or managing fleet logistics, our expert team ensures a smooth and hassle-free experience every time.



What we offer:

✔ Door-to-door vehicle transport

✔ Full customs documentation assistance

✔ Licensed and insured carriers

✔ Transparent pricing and timely delivery



We’ve helped thousands of individuals and businesses transport vehicles safely between the US and Canada — and we’re ready to help you too.



👉 Get a free quote today: Click here to get started (https://www.canadiancarshipping.com/us-to-canada/)



Best regards,

The Canadian Car Shipping Team



Â



Canadian Car Shipping

860 Boardman Canfield Rd.

Youngstown, Ohio 44512

(800) 381-6907

https://www.canadiancarshipping.com (https://www.canadiancarshipping.com)



Unsubscribe (https://click.canadiancarshipping.cc/?na=u&nk=946123-39711b9171&nek=17-) Â Â Â |Â Â Â Manage your subscription (https://click.canadiancarshipping.cc/?na=p&nk=946123-39711b9171&nek=17-) Â Â Â |Â Â Â View online (https://click.canadiancarshipping.cc/?na=v&nk=946123-39711b9171&id=17)





--b1=_sSAVRuiq0SAdpiOAWHSYerwcdNA9jofRg3FgSHvrc

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



=0A
urn:schemas-microsoft-com:office:office">=0A=0ACanadian Car Sh=<br /><br /> ipping =E2=80=93 Reliable Vehicle Transport from the US to Canada=

=0A=0A
vice-width, initial-scale=3D1">=0A
ent=3D"IE=3Dedge">=0A
o">=0A=0A
ame=3D"format-detection" content=3D"email=3Dno">=0A
sable-message-reformatting">=0A=0A

Web/SEO/App Spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Dec 2025 04:22:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTejL-00000000GDH-0mUU

for dave@doctor.nl2k.ab.ca;

Thu, 11 Dec 2025 04:21:07 -0700

Resent-From: The Doctor

Resent-Date: Thu, 11 Dec 2025 04:21:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f194.google.com ([209.85.210.194]:44254)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTZLA-00000000Fi6-1tkG

for sales@nk.ca;

Wed, 10 Dec 2025 22:35:57 -0700

Received: by mail-pf1-f194.google.com with SMTP id d2e1a72fcca58-7bb3092e4d7so561543b3a.0

for ; Wed, 10 Dec 2025 21:34:18 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thenitroinfotech.com; s=google; t=1765431252; x=1766036052; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=sUFkM+wpoEy/CLg9Kxn0hxpYuX3WPVP11s8Ipb1JnEM=;

b=1JqXQzdRfkhHXa2yxEdnM93jhRNGW9Fy+6pTLXKg1u256VDQengY73llB4XGnjeV5w

rWbLtol1M8omXLLbw/Av4PS57Iq8Ku7Cpn+QdzLleRPhgCtY+8aqDz10Y2nkldSzYfjv

YwdugYQ+oNhD30MRTGL/BAPi4ENu9RDxoLtint5O6KwqV+sms+bPzRlnZ9b3KINkl7ea

QfIZGI6+XSeHVpxE67odt1a0kyFffpj2V/5t+2P41FcdgQSvCo70YVgOl9c35ZgVOdNA

+Kuy3tdHago5PMjMwA7XhDEIe7lBUFM7GRcF6a1EqV4MNvsWFLWB6tha4VHq0zgWHae/

Nkqg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765431252; x=1766036052;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=sUFkM+wpoEy/CLg9Kxn0hxpYuX3WPVP11s8Ipb1JnEM=;

b=QLe66CP0rl65BRNx24JJB4FHO177g2Qmti1BmfgQJzS+3/4eh7XcijmU1ogn8IT6bu

Akg5oC5nIGe9m3cRBkHL9HrnsvsdTPis5zoZ96s+PIHII5B318JGv1u+oAwk3hgfuk7o

uHufxnPhfl+FPowK09Px07ydtYMFC6xMYrwShJroJ+qrjbIzerxFk2h1DjPg3e6V62kI

IqEgihd4LbH/DCQb7FxLPg7Co2ox46Z288xZMnDmJgAZ8K3w8S4ZRAvDjZgKAy5IpLaa

gA/TDconmZLrTWs9hb3CHJ1cEgELkT5k6YV48m3KeK6iFRd/8hI2Jffqi0WwzIhSsHTe

Cdkg==

X-Gm-Message-State: AOJu0YyPIg1Mp39SavkK8VsoiYrz4pk4FBwzRqKaxqBVusBvdd+Gxd55

tKeeJq6IXUyE8LpM92GcS6FAFz/bUh5LxOUbfpF8l48WF0wR6DXMOr92obqJy/Bv+zoryFe81yI

CZBABeyiL

X-Gm-Gg: AY/fxX6VjmUGhU+9oU7RaIk9nVbzZtNod3XMr2V/5mQCgIKgjSUW8LAaQ2b93gGCXS+

C8bOG/5o9M+ZKksOFcCF5D8IX86y9Ufr5k1oouzFhFcBbB3elhdq5sM4oFxzmp4IRHSf10LxpE+

4dB9iilIV6kC46s1LdhsLlrWcc5OhmrnomNYdkH3dPZJiGgBvKoDhHeOkWmCMAr6jT4ukoybRzA

Euzp5lOsZkHG7EGM4KVEMDaV8r3EDxSxWnb+sRfxfnbxzd47hYjiWvecNiYPEsxbWHIPIwPYOa1

L6ftDWs+6A74wwbESTyVTqNqbKAMwE0RQL9rusXwaWlpS5URCitbJW8/G6luBmVC/yfh29ZE4uT

NNbwGYM08jfpu0mUEFkXY1+w/do8gSKt7RHO5+i6CEnhCYkxpHU52wt8qtCZ1kLorsz+c/Ou7e0

8CccrqayD4kn3KYxW30P3EOVIzmOVQsIMVVv4BAXg=

X-Google-Smtp-Source: AGHT+IFkWyOv7NnstArExRnTldf3S3gMX6y6L61BhOEdktyhs9Hb0cbvyBve1VN6VhxAq+zPJcXeQg==

X-Received: by 2002:a05:6a20:7294:b0:35f:2293:8788 with SMTP id adf61e73a8af0-366e299ad51mr5184464637.45.1765431251857;

Wed, 10 Dec 2025 21:34:11 -0800 (PST)

Received: from DESKTOP4L6T5UV ([103.120.153.151])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-34a9275601dsm630703a91.0.2025.12.10.21.34.10

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 10 Dec 2025 21:34:11 -0800 (PST)

From: "Ellen"

To:

Subject: Boost Your Website Traffic

Date: Thu, 11 Dec 2025 10:58:58 +0530

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_D0BD_01DC6A8D.E1013D00"

X-Mailer: Microsoft Outlook 15.0

Thread-Index: AdxpoYTHHjuS7ucRTLa6V5gGb54bYQ==

Content-Language: en-us

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I hope you are doing well. I am Ellen. I have found your

website on Google and reviewed that your website is updated as per the latest

industry trends. I would like to help you in creating a responsiv [...]



Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.120.153.151 listed in will-spam-for-food.eu.org]

[103.120.153.151 listed in will-spam-for-food.eu.org]

[103.120.153.151 listed in will-spam-for-food.eu.org]

[103.120.153.151 listed in will-spam-for-food.eu.org]

[103.120.153.151 listed in will-spam-for-food.eu.org]

[103.120.153.151 listed in will-spam-for-food.eu.org]

[103.120.153.151 listed in will-spam-for-food.eu.org]

[103.120.153.151 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

[209.85.210.194 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

[209.85.210.194 listed in dnsbl.ahbl.org]

[209.85.210.194 listed in dnsbl.ahbl.org]

[209.85.210.194 listed in dnsbl.ahbl.org]

[103.120.153.151 listed in dnsbl.ahbl.org]

[103.120.153.151 listed in dnsbl.ahbl.org]

[103.120.153.151 listed in dnsbl.ahbl.org]

[103.120.153.151 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.194 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.194 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: thenitroinfotech.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: thenitroinfotech.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.210.194 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.210.194 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.194 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.194 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.210.194 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Boost Your Website Traffic

Metamask phish from nxcli.net

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Dec 2025 04:21:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTej1-00000000FHL-2Ez6

for dave@doctor.nl2k.ab.ca;

Thu, 11 Dec 2025 04:20:47 -0700

Resent-From: The Doctor

Resent-Date: Thu, 11 Dec 2025 04:20:47 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [8.29.155.98] (port=36338 helo=cloudhost-10309507.us-midwest-1.nxcli.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTZDt-00000000EsI-08M6

for sales@nk.ca;

Wed, 10 Dec 2025 22:28:24 -0700

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=default; d=47f5f74078.nxcli.io;

b=TIQuoJ+HRo5B+56hcsK0d1/xTX2j7uQVdLvu4khgIXt04xwiXwEmEDO5xRB+fA4YPe0rYMOEiK1GPi02xf+vwgCNm8BsSoYGHI9RZDlWy9u1Ak8F0MhKXTKD8zGtUNapBMSK4rNrvBVNpy1glYAIs9w1SOLqHZMuyZqOy5jMUS2m51CDnx2muguJSARB+9+qx5OMdcwkIzc1Qf+QlonKNuAgcenQa5XjdXIH6I0TgbJHbYRFl0EkthywfGOCKz9agadYaQy8wbQ9syQBjVlam538QomUjPoqKirZR0KQZSb/XrPNAeu5OFNgngiGDE1Cx0UVdyV7T5WuOkw+saQ2aw==;

h=Received:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe:Date:Message-ID:X-Sender-IP;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=47f5f74078.nxcli.io; h=

to:subject:from:reply-to:mime-version:content-type

:list-unsubscribe:date:message-id; s=default; bh=MTWS8LegagncRkP

jaL9iSZfPy8iSHpUTLWdLU66Qs8s=; b=RyGzWW95GAxAB/Q5f6VN6D2g+nv9t+a

Q5dQdjlG149yKnRRtmga1kWu8Vf28smuRByOiC1B9XkcOUunbNy+OiQMIg68GXD5

nww/9Cxd34D6qM984qefSCEtYCEU2WFSRBPPkJ2qrDFr+qMGARqaBvbkJM6BkX/T

/xnvPAqDCQkD3oYfAc1Hr/glstM2wOWaTy6PgQv1BJ4KClnXebjlJ65LqvzUOolt

6k193UGqtlc5bbUN4oazXteHIWZRMNRRRCq5Sf7UNGZd7K34u1OJpZ1MUEqnVy8E

sRctzjmdCQi/tY0qd4trjAr1ozmGuSEXhT33WAQlVTqByVAOD0T1uJQ==

Received: (qmail 24412 invoked by uid 10117); 11 Dec 2025 04:42:45 +0000

To: sales@nk.ca

Subject: Security Authentication Needed

X-PHP-Originating-Script: 10117:r.php

From: "METAMASK-Security Department"

Reply-To: x7c1m2ju@hgs.io

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

X-Mailer: PHP/8.2.20

X-Priority: 3

List-Unsubscribe: x7c1m2juhgs.io>

Date: Thu, 11 Dec 2025 04:42:45 +0000

Message-ID: <1765428165.693a4bc525c68@localhost>

X-Sender-IP: 10.64.161.42

X-Spam_score: 9.4

X-Spam_score_int: 94

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Metamask Wallet Security Update Wallet Breach Warning for

Metamask



Content analysis details: (9.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[8.29.155.98 listed in will-spam-for-food.eu.org]

[8.29.155.98 listed in will-spam-for-food.eu.org]

[8.29.155.98 listed in will-spam-for-food.eu.org]

[8.29.155.98 listed in will-spam-for-food.eu.org]

[8.29.155.98 listed in will-spam-for-food.eu.org]

[8.29.155.98 listed in will-spam-for-food.eu.org]

[8.29.155.98 listed in will-spam-for-food.eu.org]

[8.29.155.98 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[8.29.155.98 listed in dnsbl.ahbl.org]

[8.29.155.98 listed in dnsbl.ahbl.org]

[8.29.155.98 listed in dnsbl.ahbl.org]

[8.29.155.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[8.29.155.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[8.29.155.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[8.29.155.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[8.29.155.98 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: access-authority-2d35a80.s3.us-east-1.amazonaws.com]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[8.29.155.98 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[8.29.155.98 listed in sa-trusted.bondedsender.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[8.29.155.98 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[8.29.155.98 listed in bl.score.senderscore.com]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} Security Authentication Needed















Metamask Wallet Security Update











Metamask

Wallet Breach Warning for Metamask







Dear Metamask Wallet Owner,



Security scans indicate your wallet has been exposed in a recent network breach, putting your cryptocurrency at immediate risk of theft. Multiple users have already reported losses from similar vulnerabilities.



Critical threat: Delay in updating security could allow attackers to access and empty your wallet in minutes. Secure it before irreversible damage occurs.



Update your wallet protection now:



Update Security Settings

Failing to respond quickly may result in complete asset loss—take action immediately.













Web/SEO/App Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 10 Dec 2025 20:14:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTX73-00000000792-14m1

for dave@doctor.nl2k.ab.ca;

Wed, 10 Dec 2025 20:13:05 -0700

Resent-From: The Doctor

Resent-Date: Wed, 10 Dec 2025 20:13:05 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f193.google.com ([209.85.210.193]:56435)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTX6d-0000000074q-4549

for sales@nk.ca;

Wed, 10 Dec 2025 20:12:50 -0700

Received: by mail-pf1-f193.google.com with SMTP id d2e1a72fcca58-7bc248dc16aso407287b3a.0

for ; Wed, 10 Dec 2025 19:11:53 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webappconsultant-com.20230601.gappssmtp.com; s=20230601; t=1765422707; x=1766027507; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=VLqvntWz6Jc9E8p5c++RCpVeyatfyUGP7XXgRUBAw2w=;

b=awDN8u24tOOaaqjA4tYuK6Mr67gp9fC0MW7w/7i80MkOXlRZL0tqAxxCfvhDrgU9fp

SBvy4PstHWBwT/0Cka5hInpGTDoqPBPbMGisXN6QG1PBg8Q1YcdJOKmz6C653rMs1wok

D8E+zyr/mt8HRf8CavAzATDvY1Z+4ol59YRJLXyGudIsIexcuqxU6aWrwS4+LWTX7NFA

G8xZ55CgZO2wKDBt7h+wopq7CDieSxTxSTAjQnOhtlFMzMOKA1s7yAoKKpoYyzJES+/v

YtnjFwrp6nMcPCC3zhgWFT16Hv6gMkGTIqKN74Y/N2j8ywZolfo/iJeSFL1Yw+VGzQ7w

9/sQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765422707; x=1766027507;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=VLqvntWz6Jc9E8p5c++RCpVeyatfyUGP7XXgRUBAw2w=;

b=cBHxHoxBdKQY2C8u5w8QdNiWRwFiG/U5YtQM+KW0WEm91fOHgXmnpzZO3/Yf4fq+IQ

C6eAIdWAkT28ps2nC3lvGA8TxYVNbL5+Ti3GJCV+NzcWMq02k8PNZmyULhaTo1N+/Nu1

4Iy0m+f1ILWplJ4eX1Tcve0MASQZwLsOhT960TWRmUEeLMBz6i0AEwPc5mPe8hL1x3Ig

g9LLIm7Ro4J+YSFsdhavc0DcoeRVK/Mw2na37SzeJ1dOnzewlOAYdwoBxzTwIoe/ykvq

R4cwTxuVexi+LHIHuhA4+YNOiwPL86LQTWEdW14sAPM2827xI4bT4evbw07mvK7QwHSY

AuAQ==

X-Gm-Message-State: AOJu0YxHmFmZd2RysoNrGhXUn1GQ6fybDz0n0YL+lU4ise0gg+I7Oucv

as2WZq95jGTrCu1yLQAzES6PjUvxbfWCXlfUeAaGNZvLZwXEhN4+VzDKfJAFBU9TAeiZyFWRLoJ

dho58Mo8=

X-Gm-Gg: AY/fxX6ZFfSAAa2Vm4HgrSotAI2c6gF+0zxZcBhphorrMVG3UHELXf2S30Bj5Uo9u23

HWKUQ1D8XCeZpO4ouUfLMFL5n2pDkAc82xyeGcTLOI831bh0NHqqhHoRvvYdJ93nj80Tl5qPzhq

QOK0Jf6j3mN43IIEupSUjKCi7AA8eiEb//emHx+BwYiyiH7SUyoCNUAg/qCLbARUEZDl2Hv/SuD

KmYAYw4QnraHQUXlvwxgNU+ZfonS0hgT8b6gNKU5KriwK9zlvNacChefCQVT7DGzmAZsQyqhMHC

4l3sagmtYsXbOk6+rb+eBOBiVdr0X0/aW72wnHX+r97GrSibgc2bB8Nn0m6nDSkrVd4oZG5WSej

GM3/XhxZF6/aKwW6p5vVagXyn+9SiB1/HOi3O0RGZmtyasNckNuLdEsfAJWGukxHZvfDRA17Fnd

/Z/W4m9KPf3Ji8xNiPPlT9ahJBWaj9ng==

X-Google-Smtp-Source: AGHT+IH9vw1H8+DzdVGRyFRWWUdIhxm0UxF/2mBlU2S7DuNJ5jNbg9NXmW21wf2M+c++Va/mbMMudg==

X-Received: by 2002:a05:6a00:1818:b0:7ef:3f4e:9172 with SMTP id d2e1a72fcca58-7f22c845197mr4708569b3a.8.1765422706918;

Wed, 10 Dec 2025 19:11:46 -0800 (PST)

Received: from Arvind ([110.235.233.204])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7f4c4aa6c49sm798580b3a.34.2025.12.10.19.11.45

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 10 Dec 2025 19:11:46 -0800 (PST)

From: "Saanvi Naidu"

To:

Subject: Designer / Developers

Date: Thu, 11 Dec 2025 08:29:40 +0530

Message-ID: <425f901dc6a4b$e278c7d0$a76a5770$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_425FA_01DC6A79.FC3103D0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdxptxRG+4Pe2JU+RS+XeskC4J0PIA==

Content-Language: en-in



This is a multi-part message in MIME format.



------=_NextPart_000_425FA_01DC6A79.FC3103D0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



I'm reaching out to see if there is anything that would like to create

Shopify & Wordpress, upgrade, repair, or redesign on your website or Mobile

App or SEO.



I am a web designer/developer that can do just about anything you can

imagine at very affordable prices.



Let me know what you think.



If interested. May I send you sample, Portfolio and company Details?



Thank you for your time and consideration.



Kind Regards,

Saanvi Naidu







P.S.: If you'd prefer not to receive further emails from me, simply reply

with "NO" in the subject line.









------=_NextPart_000_425FA_01DC6A79.FC3103D0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>


style=3D'font-family:"Calibri","sans-serif"'>Hello,

I'm reaching =

out to see if there is anything that would like to create Shopify & =

Wordpress, upgrade, repair, or redesign on your website or =

Mobile App or
style=3D'color:black;background:yellow'>SEO
.

I am a =

web designer/developer that can do just about anything you can =

imagine at very affordable prices.

Let me know what you =

think.

If interested. May I send you sample, Portfolio and =

company Details?

Thank you for your time and =

consideration.

Kind Regards,
Saanvi =

Naidu


style=3D'margin:0cm;margin-bottom:.0001pt'> 


style=3D'margin:0cm;margin-bottom:.0001pt'>
style=3D'font-family:"Calibri","sans-serif";color:red;background:white'>P=

.S.: If you'd prefer not to receive further emails from me, simply reply =

with "NO" in the subject line.


style=3D'margin-bottom:0cm;margin-bottom:.0001pt'> 


div>

------=_NextPart_000_425FA_01DC6A79.FC3103D0--



Urgent business proposition spam from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 10 Dec 2025 20:13:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTX6B-0000000076h-29ap

for dave@doctor.nl2k.ab.ca;

Wed, 10 Dec 2025 20:12:11 -0700

Resent-From: The Doctor

Resent-Date: Wed, 10 Dec 2025 20:12:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.sitrak-bts.ru ([90.154.1.42]:41584)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTUVC-00000000LlC-1hNr

for sales@nk.ca;

Wed, 10 Dec 2025 17:26:00 -0700

Received: from DESKTOP-6Q4CECK.lan (_gateway [192.168.1.3])

by mail.sitrak-bts.ru (Postfix) with ESMTP id 3E20997AF3;

Thu, 11 Dec 2025 02:06:46 +0300 (MSK)

Content-Type: multipart/alternative; boundary="===============1304625373=="

MIME-Version: 1.0

Subject: URGENT BUSINESS PROPOSITION.

To: Recipients

From: normasher@yandex.com

Date: Thu, 11 Dec 2025 01:05:42 +0200

Message-Id: <20251210230646.3E20997AF3@mail.sitrak-bts.ru>

X-Spam_score: 16.0

X-Spam_score_int: 160

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FROM THE DESK OF:MR.NORM ASHER. ACCOUNTANT AND AUDITOR MANAGER

ABSA BANK OF REPUBLIC OF SOUTH AFRICA. TELEPHONE:+27 PRIVATE E-MAIL ADDRESS:

I work as the Accountant and Auditor Manager at Absa bank [...]



Content analysis details: (16.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[90.154.1.42 listed in will-spam-for-food.eu.org]

[90.154.1.42 listed in will-spam-for-food.eu.org]

[90.154.1.42 listed in will-spam-for-food.eu.org]

[90.154.1.42 listed in will-spam-for-food.eu.org]

[90.154.1.42 listed in will-spam-for-food.eu.org]

[90.154.1.42 listed in will-spam-for-food.eu.org]

[90.154.1.42 listed in will-spam-for-food.eu.org]

[90.154.1.42 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[90.154.1.42 listed in dnsbl.ahbl.org]

[90.154.1.42 listed in dnsbl.ahbl.org]

[90.154.1.42 listed in dnsbl.ahbl.org]

[90.154.1.42 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[90.154.1.42 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[90.154.1.42 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[90.154.1.42 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[90.154.1.42 listed in dnsbl.ahbl.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[normasher(at)yandex.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.9 URG_BIZ BODY: Contains urgent matter

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 SPOOFED_FREEMAIL No description available.

1.0 XFER_LOTSA_MONEY Transfer a lot of money

2.0 MIXED_HREF_CASE Has href in mixed case

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} URGENT BUSINESS PROPOSITION.



You will not see this in a MIME-aware mail reader.

--===============1304625373==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



FROM THE DESK OF:MR.NORM ASHER.

ACCOUNTANT AND AUDITOR MANAGER =



ABSA BANK OF REPUBLIC OF SOUTH AFRICA.

TELEPHONE:+27 =



PRIVATE E-MAIL ADDRESS: n.asher@inbox.lv

ATTENTION:

I work as the Accountant and Auditor Manager at Absa bank Republic of South=

Africa. I have a very confidential business proposition for you.

There are unclaimed huge funds amounting to the sum of (USA$15 MILLION) lyi=

ng in our bank that belongs to a foreign customer who died of the covid-19 =

pandemic.

However, I am seeking for your good collaboration to transfer the funds to =

you as the immediate relative for our both benefit during these difficult t=

imes.

Kindly reply to me through my above E-Mail Address once you have read thi=

s letter and declare your interest to enable me to send to you more rel=

evant information for us to archive this transaction and meet in person to=

enable both of us share the funds accordingly.

Thank You.

Yours Sincerely.

Mr.Norm Asher.

=20



--===============1304625373==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>

 
FROM THE DESK OF:MR.NORM ASHER.
R>ACCOUNTANT AND AUDITOR MANAGER
ABSA BANK OF REPUBLIC OF SOUTH AFRICA.=


TELEPHONE:+27 
PRIVATE E-MAIL ADDRESS: 
:n.asher@inbox.lv">n.asher@inbox.lv

ATTENTION:
I work as the Acco=

untant and Auditor Manager at Absa bank Republic of South Africa. I have a =

very confidential business proposition for you.
There are unclaimed huge=

funds amounting to the sum of (USA$15 MILLION) lying in our bank that belo=

ngs to a foreign customer who died of the covid-19 pandemic.
However, I =

am seeking for your good collaboration to transfer the funds to you as the =

immediate relative for our both benefit during these difficult times.
Ki=

ndly reply  to me through  my above E-Mail Address once you have =

read this letter and  declare your interest to  enable  me t=

o send to you  more relevant information for us to archive this transa=

ction and meet in person  to enable  both of us  share =

the funds accordingly.
Thank You.
Yours Sincerely.
Mr.Norm Asher.=


 



--===============1304625373==--