Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Nov 2026 17:58:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQCme-000000007n4-3JrH

for dave@doctor.nl2k.ab.ca;

Sun, 08 Nov 2026 17:58:48 -0600

Resent-From: The Doctor

Resent-Date: Sun, 8 Nov 2026 17:58:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f172.google.com ([209.85.160.172]:52461)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ94U-00000000DRj-4C7m

for sales@nk.ca;

Sun, 08 Nov 2026 14:01:03 -0600

Received: by mail-qt1-f172.google.com with SMTP id d75a77b69052e-54d9ac78f2eso1588511cf.0

for ; Sun, 08 Nov 2026 12:00:03 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1794167997; x=1794772797; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=zQWiv089T5mBk221rTr+6oqSIyPT/FujtZTQzxoDbTo=;

b=LQbx4kUnFjGx4mP8KZUbPZK98/KdXEoN0mwF1i/pB+1xdE1Au0txZFXaregYNr8gMY

+nT8lUTG5W9U/litfmV8kfrWZ8OpQfnlUNtOGaEwF6qpe3N4QVxeVc/yr3LZcHezoduV

qdtbAkR+tREaRDAUHiMvPNghWCw0iWacmc7F0WsUU/3jBsYaP+MNuQpNoEMdM9CVfwBo

dt7I8A/vbwTSI0IIQSrsD5XgKLC/9f6vHJyS/Zv6wwC0A5lqnOB0p0FI95GR7MIJA3zj

I58kcZbKJYcy0nqP+w1N58KFNfkOdI5d2Cf6TfHmB2xcOvzBwlebB350T9xl5btpkUbw

jf8w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794167997; x=1794772797;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=zQWiv089T5mBk221rTr+6oqSIyPT/FujtZTQzxoDbTo=;

b=nggPr+n1lS6WvDVLSbRriwb+h0ZGtRZeCY646HMZma8VNlIryxYUalGGILDAw4fGSf

mH37DsQAvv2swBPLLOaIHIZ4GtAAVVHKN9Y69Usz0gzCLBrJXPWf2nJU85c9Yj8ww9kt

emmfF9wuSGSdFVh50V2AOLadQ+yKNDyd9CMrXmL/D/gcO4UalvMSs24FO7C348r6n/6r

xOHHpmmpj4eIa9txw+4RT3me9Ot+R7lHt5iZeR+3Lrk0i5EB8gTgt6SkMXWVRLA+qlg6

/UTTZQBHCcVm0ZuWU+Fk1ry89K7Fag/l+od8U6SJyTM/DaBU4wJnW+7/VymF2fWPNDoc

6erg==

X-Gm-Message-State: APuU4Z+YMZ16IJ8JKo12yS5xypCuy0j0L8ZfburxK4Jr27ujpQsu9XVx

SsPoATjbYR9Ev/yoZt+7pEL2TlhhseU0IBBuIySEYVKka7O0oFPGVEfngX3cPU/Iq+Y=

X-Gm-Gg: AYBFou3NnwbZdBM9L9oj7le9/e4VoIXpGHV3k/CWU/V5hIoY+qG8DdfRnX+bhAIyAiw

XuCchMJVYvQma9Vcs8zHIRx7txckSx/THBlFdCoz+7Jg+9wXny96mXWtCRirM0QeKbhwqwNtQMH

6zvXZjx/N8KNdQz0cV054kySmnwqWB5a6U6H70StqvBpvPHLbSrPEWhiJwfzeiZJaOmfbCZNhIf

OqeLdLgTR9wpn4bBC49GutoDGvd8zBzJHVAysbJKEZghpZHnTl4b5pxlMrTj4iLJ06VCuNQ66Yz

87Sk37jrdH7K3s/mIJdtuqZs6KlbUPfwjvqzjW7bkaRPMJY0hU/GFxthVyx+gJpuoiP1lJVC3ml

IhtT1wGRC/+Wiasu9iejI5On8yvkYKHdlasNhUwEdbj9SM8dG0IL+NqbwsBjIN6E8JiVC+EEg/a

bVi2Gex3bqx8rtWUrhkk3sEE9KVJ+Sc+ZRWtFFcH1MT7/lW6N7RbIDFJvX4RRB4Qymy+69c/0bD

q3LlH4PZWCPypBh3A6Md76xecvRhyBEJnwdBn/V3Wjqp2HxfgLi9RWBv30wJNDwnh0BtTS9X2HU

Dozp+kz2f9BBlMTfThdibpSCrgnU

X-Received: by 2002:ac8:5dca:0:b0:533:8f29:e5fd with SMTP id d75a77b69052e-552a430f6a0mr35572701cf.18.1794167997465;

Sun, 08 Nov 2026 11:59:57 -0800 (PST)

Received: from [127.0.0.1] ([2605:5fce:20e0:94e5:1c42:e2a3:b555:aa0c])

by smtp.gmail.com with ESMTPSA id d75a77b69052e-552649354e5sm24086521cf.24.2026.11.08.11.59.56

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Sun, 08 Nov 2026 11:59:57 -0800 (PST)

X-Priority: 3

From: Naeem Akhtar

To: sales@nk.ca

Subject: your site, rebuilt

Message-ID: <943f2731-4367-f5e2-baa1-1f89162130b4@gmail.com>

Date: Sun, 08 Nov 2026 19:59:55 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-f5078b0d76eb0fb5-Part_1"



----_NmP-f5078b0d76eb0fb5-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



I designed your new website this past week. Using your own assets.



Your work has a voice, and the site is burying it. We couldn't let it sit, =

so we just pulled your photos and video from your socials and built you a =

full concept around them. Not a wireframe.



A build like this is $3k to $8k=

. I can't wait for you to see what we've created.



Reply and I'll send the =

link. If you don't want it, I'll take it down. (If this isn't the right =

inbox, point me to the person who is.)



Naeem

----_NmP-f5078b0d76eb0fb5-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable



I designed your new website this past week. Using your own assets.=



Your work has a voice, and the site is burying it. We couldn't let =

it sit, so we just pulled your photos and video from your socials and built=

you a full concept around them. Not a wireframe.

A build like this =

is $3k to $8k. I can't wait for you to see what we've created.

Reply=

and I'll send the link. If you don't want it, I'll take it down. (If this =

isn't the right inbox, point me to the person who is.=

)

Naeem



----_NmP-f5078b0d76eb0fb5-Part_1--

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Nov 2026 12:39:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ7nG-000000003Wo-14fY

for dave@doctor.nl2k.ab.ca;

Sun, 08 Nov 2026 12:39:06 -0600

Resent-From: The Doctor

Resent-Date: Sun, 8 Nov 2026 12:39:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.dzne.de ([193.175.154.8]:59598 helo=mx1.dzne.de)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ5Lo-00000000C68-1wjG

for doctor@nl2k.ab.ca;

Sun, 08 Nov 2026 10:02:39 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dzne.de; i=@dzne.de; q=dns/txt; s=selector1;

t=1794153750; x=1825689750;

h=from:subject:date:message-id:reply-to:mime-version;

bh=Ja4peQgnMsgbHYejM24dJQmoBGLTr4m17/g2sa8yYlM=;

b=dffvlMGy2EGpWKzjfjlv5etQJCtCLd+mvHKGLNRfAEAtJGBdu5aX0mYY

9/HKMSnr0Sc26b9vtxv0FnDyZ28U5vF2GT+PS9XYhctYYO8fSuVyM1Vzg

C3lWfp3U1QLFeFQ2kA6NgzQi7Ex1FFjgk2arXhf02ZMi0BuxhYU2qKMin

yHa+WkcfCgCyFGj6XcuM6eAqjip3XTFysG0S9mpd30NrJFVsTJItHAyTI

qvBWwkGMbvOi/EUuFiSiLWUzd1uE5TKpZtGFSlPePgOFIqSSCmX+UNuLP

giPNpvv8+IJJKIRXWFwqOKJtttwc0xpdoFa6+zbWFGBn9er+79e6Oicdo

g==;

X-CSE-ConnectionGUID: DWvd3zaIQSeJT5BLogQuHQ==

X-CSE-MsgGUID: 4gUIvwduSrCJTfulDfvntA==

IronPort-SDR: 6af09ce4_qw56f42N9sbr7SUGlmjSgyt2DQhAs2n3xqUajt0MdiY6EK9

qd6UfSbMGNrcVETqzz+7XUfPLdu5JqQwni6olbg==

X-oleObject: False

X-IronPort-AV: E=Sophos;i="6.27,202,1787004000";

d="scan'208,217";a="2388786"

X-Amp-Result: SKIPPED(no attachment in message)

Received: from bn-vw-mx-01.dzne.ds ([10.0.128.201])

by bn-vl-esa-01.dzne.de with ESMTP/TLS/ECDHE-RSA-AES128-GCM-SHA256; 08 Nov 2026 17:01:40 +0100

Received: from bn-vw-mx-02.dzne.ds (10.0.128.202) by bn-vw-mx-01.dzne.ds

(10.0.128.201) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.61; Sun, 8 Nov

2026 17:01:40 +0100

Received: from bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549]) by

bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549%6]) with mapi id

15.01.2507.061; Sun, 8 Nov 2026 17:01:40 +0100

From: "Dangel, Aaron /DZNE"

Subject: RE

Thread-Topic: RE

Thread-Index: AQHdb5pwkTS+tQkI0k2r44z2mnX5Ug==

Date: Sun, 8 Nov 2026 16:01:39 +0000

Message-ID: <2aff7fae0cad421e83dd7ad631e2d5cf@dzne.de>

Reply-To: "mfissolo31@gmail.com"

Accept-Language: de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [45.11.172.56]

Content-Type: multipart/alternative;

boundary="_000_2aff7fae0cad421e83dd7ad631e2d5cfdznede_"

MIME-Version: 1.0

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Kindly be informed that you have a donation gift of 3.5M from

Rafaela, reply for more details. Kindly be informed that you have a donation

gift of 3.5M from Rafaela, reply for more details.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[45.11.172.56 listed in sbl-xbl.spamhaus.org]

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[193.175.154.8 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mfissolo31(at)gmail.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[193.175.154.8 listed in bl.score.senderscore.com]

Subject: {SPAM?} RE



--_000_2aff7fae0cad421e83dd7ad631e2d5cfdznede_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Kindly be informed that you have a donation gift of 3.5M from Rafaela, repl=

y for more details.





--_000_2aff7fae0cad421e83dd7ad631e2d5cfdznede_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>












pt;font-family:"Arial",sans-serif;color:#242424;border:none windo=

wtext 1.0pt;padding:0in">Kindly be informed that you have a donation gift o=

f 3.5M from Rafaela, reply for more details.
:11.5pt;font-family:"Segoe UI",sans-serif;color:#242424">
:p>



 











--_000_2aff7fae0cad421e83dd7ad631e2d5cfdznede_--

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sun, 08 Nov 2026 10:02:00 -0600

Received: from mx2.dzne.de ([193.175.154.8]:56055 helo=mx1.dzne.de)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ5KD-00000000Bz6-1aFL

for dave@nk.ca;

Sun, 08 Nov 2026 10:01:00 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dzne.de; i=@dzne.de; q=dns/txt; s=selector1;

t=1794153651; x=1825689651;

h=from:subject:date:message-id:reply-to:mime-version;

bh=70kLSO/F8dTOjXbSIaI345MOIGBA94qHy47V7pSslQo=;

b=L8u1yLeNzRE0DCLZOybgexM3X3cb0c3Yidq3YsVDrSg8uRl+mUaibPt5

SjCa8K/TgVng+/bHZDJ/PsotGZ5TVE/OJXis6Yuejc8tgkoJmVhEWPB4U

ipbhw9fv9jvx9TmZPsAtZ/H6l8nlRjZTEcueYQQdSESndCEOsjs9lCdo4

GGI/F+qMZNhvhoHjU82g4HBAUR+2D2ABj4boOyyIXbCxnkk5OCZ9ZR81h

yoeEJE67YbQaYvQ7X1aydpJTuFBZEvD9xv2W7YMotRvxTGbA7IGZwkkfm

ZbjPRR5jXZdOi3BDXgsFMvjA2sUQY5B35OeuHWYEFYxdGEsa4aFetVuwA

Q==;

X-CSE-ConnectionGUID: hp925gN3RuuPtZCfWZZDXQ==

X-CSE-MsgGUID: 8NFX26dyRIKHaTtNkENzCw==

IronPort-SDR: 6af09c81_Lxy7gDiR2TU7+vpdmTUilekhUk9Y2S8dMi2TKzXzoEmMRZE

oULpHm1vn/noWnOBIov9WGquAUtYF8Te5rMVJZw==

X-oleObject: False

X-IronPort-AV: E=Sophos;i="6.27,202,1787004000";

d="scan'208,217";a="2387672"

X-Amp-Result: SKIPPED(no attachment in message)

Received: from bn-vw-mx-01.dzne.ds ([10.0.128.201])

by bn-vl-esa-01.dzne.de with ESMTP/TLS/ECDHE-RSA-AES128-GCM-SHA256; 08 Nov 2026 17:00:01 +0100

Received: from bn-vw-mx-02.dzne.ds (10.0.128.202) by bn-vw-mx-01.dzne.ds

(10.0.128.201) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.61; Sun, 8 Nov

2026 17:00:01 +0100

Received: from bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549]) by

bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549%6]) with mapi id

15.01.2507.061; Sun, 8 Nov 2026 17:00:01 +0100

From: "Dangel, Aaron /DZNE"

Subject: RE

Thread-Topic: RE

Thread-Index: Ad1viHWdcoUn6dOnTJqhaDM5tzdIlQAEapNQAAAAI1AAAAAmUAAAACtwAAAAJTAAAAAnkAAAAVOQ

Date: Sun, 8 Nov 2026 16:00:01 +0000

Message-ID: <115eb46c0b0244dab39fb2c24923bc7e@dzne.de>

Reply-To: "mfissolo31@gmail.com"

Accept-Language: de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [45.11.172.56]

Content-Type: multipart/alternative;

boundary="_000_115eb46c0b0244dab39fb2c24923bc7edznede_"

MIME-Version: 1.0

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Kindly be informed that you have a donation gift of 3.5M from

Rafaela, reply for more details. Kindly be informed that you have a donation

gift of 3.5M from Rafaela, reply for more details.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[193.175.154.8 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[45.11.172.56 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[193.175.154.8 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mfissolo31(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} RE



--_000_115eb46c0b0244dab39fb2c24923bc7edznede_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Kindly be informed that you have a donation gift of 3.5M from Rafaela, repl=

y for more details.





--_000_115eb46c0b0244dab39fb2c24923bc7edznede_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>












pt;font-family:"Arial",sans-serif;color:#242424;border:none windo=

wtext 1.0pt;padding:0in">Kindly be informed that you have a donation gift o=

f 3.5M from Rafaela, reply for more details.
:11.5pt;font-family:"Segoe UI",sans-serif;color:#242424">
:p>



 











--_000_115eb46c0b0244dab39fb2c24923bc7edznede_--

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Nov 2026 10:02:00 -0600

Received: from mx2.dzne.de ([193.175.154.8]:56045 helo=mx1.dzne.de)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ5KD-00000000Bz3-1ZjG

for dave@doctor.nl2k.ab.ca;

Sun, 08 Nov 2026 10:01:00 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dzne.de; i=@dzne.de; q=dns/txt; s=selector1;

t=1794153651; x=1825689651;

h=from:subject:date:message-id:reply-to:mime-version;

bh=70kLSO/F8dTOjXbSIaI345MOIGBA94qHy47V7pSslQo=;

b=L8u1yLeNzRE0DCLZOybgexM3X3cb0c3Yidq3YsVDrSg8uRl+mUaibPt5

SjCa8K/TgVng+/bHZDJ/PsotGZ5TVE/OJXis6Yuejc8tgkoJmVhEWPB4U

ipbhw9fv9jvx9TmZPsAtZ/H6l8nlRjZTEcueYQQdSESndCEOsjs9lCdo4

GGI/F+qMZNhvhoHjU82g4HBAUR+2D2ABj4boOyyIXbCxnkk5OCZ9ZR81h

yoeEJE67YbQaYvQ7X1aydpJTuFBZEvD9xv2W7YMotRvxTGbA7IGZwkkfm

ZbjPRR5jXZdOi3BDXgsFMvjA2sUQY5B35OeuHWYEFYxdGEsa4aFetVuwA

Q==;

X-CSE-ConnectionGUID: hp925gN3RuuPtZCfWZZDXQ==

X-CSE-MsgGUID: 8NFX26dyRIKHaTtNkENzCw==

IronPort-SDR: 6af09c81_Lxy7gDiR2TU7+vpdmTUilekhUk9Y2S8dMi2TKzXzoEmMRZE

oULpHm1vn/noWnOBIov9WGquAUtYF8Te5rMVJZw==

X-oleObject: False

X-IronPort-AV: E=Sophos;i="6.27,202,1787004000";

d="scan'208,217";a="2387672"

X-Amp-Result: SKIPPED(no attachment in message)

Received: from bn-vw-mx-01.dzne.ds ([10.0.128.201])

by bn-vl-esa-01.dzne.de with ESMTP/TLS/ECDHE-RSA-AES128-GCM-SHA256; 08 Nov 2026 17:00:01 +0100

Received: from bn-vw-mx-02.dzne.ds (10.0.128.202) by bn-vw-mx-01.dzne.ds

(10.0.128.201) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.61; Sun, 8 Nov

2026 17:00:01 +0100

Received: from bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549]) by

bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549%6]) with mapi id

15.01.2507.061; Sun, 8 Nov 2026 17:00:01 +0100

From: "Dangel, Aaron /DZNE"

Subject: RE

Thread-Topic: RE

Thread-Index: Ad1viHWdcoUn6dOnTJqhaDM5tzdIlQAEapNQAAAAI1AAAAAmUAAAACtwAAAAJTAAAAAnkAAAAVOQ

Date: Sun, 8 Nov 2026 16:00:01 +0000

Message-ID: <115eb46c0b0244dab39fb2c24923bc7e@dzne.de>

Reply-To: "mfissolo31@gmail.com"

Accept-Language: de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [45.11.172.56]

Content-Type: multipart/alternative;

boundary="_000_115eb46c0b0244dab39fb2c24923bc7edznede_"

MIME-Version: 1.0

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Kindly be informed that you have a donation gift of 3.5M from

Rafaela, reply for more details. Kindly be informed that you have a donation

gift of 3.5M from Rafaela, reply for more details.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[193.175.154.8 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[45.11.172.56 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[193.175.154.8 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mfissolo31(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} RE



--_000_115eb46c0b0244dab39fb2c24923bc7edznede_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Kindly be informed that you have a donation gift of 3.5M from Rafaela, repl=

y for more details.





--_000_115eb46c0b0244dab39fb2c24923bc7edznede_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>












pt;font-family:"Arial",sans-serif;color:#242424;border:none windo=

wtext 1.0pt;padding:0in">Kindly be informed that you have a donation gift o=

f 3.5M from Rafaela, reply for more details.
:11.5pt;font-family:"Segoe UI",sans-serif;color:#242424">
:p>



 











--_000_115eb46c0b0244dab39fb2c24923bc7edznede_--

Web/SEo/App spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Nov 2026 05:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ1D3-00000000MI6-2GmR

for dave@doctor.nl2k.ab.ca;

Sun, 08 Nov 2026 05:37:17 -0600

Resent-From: The Doctor

Resent-Date: Sun, 8 Nov 2026 05:37:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.floevora.site ([157.173.96.35]:53735)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPwHr-000000003co-1w96

for sales@nk.ca;

Sun, 08 Nov 2026 00:21:58 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=enterprise-automation.online; s=mail; h=Content-Type:MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:Reply-To:To:From:Sender:Cc:

Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:

Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=FNPqfzzIDY4ceibeDRvHWvLi5GUxtsXXL8sDCsV8XU8=; b=d4MbO7KmkMF7GXf+/UvDJAdscP

sxLBpjWMtkDP8ElUXlFzMw96T+gc/m50aSG0JuYkulZQeePCJmp7HXjoRyEKjTy6k6J4NWuaIler1

SuKIKueVh/veIgfFB4AgyBaYYQnXv00JfN0i0fQmXZ2noQF1cFQeKO56uvQG2qP1yCYKN1Jg8O6gd

Krd9vNwb6ClIp4L2D0Fb7+HBeoW92SKrMtJlZnVSjRleOlXopEwZ8Ah1Hk02kCmp1Ylbp6b615GaO

MOT9W4TC2frcR3Rg0KcOuEpxWWQULKAq3bqVVu0blx0/VJxIDp52f1ZeBxeDGMtihNdPUxZQX7INM

yq0FG8Aw==;

Received: from vmi3709368.contaboserver.net ([158.220.103.179] helo=vmi3290513.contaboserver.net)

by mail.floevora.site with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.97)

(envelope-from )

id 1xPwCg-00000008EYI-2GYC

for sales@nk.ca;

Sun, 08 Nov 2026 07:16:34 +0100

From: Salman

To: sales@nk.ca

Reply-To: executive@enterprise-automation.online

Subject: A website idea for nk.ca

Message-ID:

<5bfd41df-5363-e686-77b3-2350854e9550@enterprise-automation.online>

Content-Transfer-Encoding: quoted-printable

Date: Sun, 08 Nov 2026 06:16:34 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Team, We design and redesign websites. I assembled a clean

layout for nk.ca. Should I forward it for a quick review? If you like it,

we can go from there. Best regards, Salman



Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[157.173.96.35 listed in dnsbl.ahbl.org]

[157.173.96.35 listed in dnsbl.ahbl.org]

[157.173.96.35 listed in dnsbl.ahbl.org]

[157.173.96.35 listed in dnsbl.ahbl.org]

[158.220.103.179 listed in dnsbl.ahbl.org]

[158.220.103.179 listed in dnsbl.ahbl.org]

[158.220.103.179 listed in dnsbl.ahbl.org]

[158.220.103.179 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[157.173.96.35 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[157.173.96.35 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[157.173.96.35 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[157.173.96.35 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: enterprise-automation.online]

[(online)]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[157.173.96.35 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} A website idea for nk.ca



Hi Team,



We design and redesign websites. I assembled a clean layout for =

nk.ca. Should I forward it for a quick review? If you like it, we can go =

from there.





Best regards,

Salman

WEb/SEo/App spam from Microsoft outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Nov 2026 15:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPntv-00000000NTM-1O6f

for dave@doctor.nl2k.ab.ca;

Sat, 07 Nov 2026 15:24:39 -0600

Resent-From: The Doctor

Resent-Date: Sat, 7 Nov 2026 15:24:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus3azolkn19012015.outbound.protection.outlook.com ([52.103.23.15]:23648 helo=PH8PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPlf3-000000000ir-0pa7

for root@nk.ca;

Sat, 07 Nov 2026 13:01:13 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=WP7irqbzFGv4xWLUA/aMjoLwv+sD1PRdTe6TmV2ZbtnL0azOwX4fWkgv49Jfk3qmb4yLKiIvLw7xYY1HbTxZ+MMhvy9pzlPhhNO9f5YzuqVMuUQc5weO+ZpEXqZqfIlwIoGw1/olZLHhvC6MyCQAoKhwcw/qIvj8abiJLQk98k2bSqNpZ+rHa3Qlzo90k1xF7qdb/BpUnE7tH5+Ii90SuuzV1aGpfhEQmDHBWhuw7BwwquJ8UzPgohomIZVgLSd0s4ZhZpWLUYU6VG8v9Uf6FvR/7UIFU2GN8cEipVDo/i8L/G1N8kOFCwpviHB8ed3XV/nr1Pnttl3IKWIt4pNfag==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001; h=From:Date:Subject:Message-ID:MIME-Version;

bh=q1z9TDllAcJU79YeAN6qOF7HbLA99LbaxyFhMOZGRo8=;

b=optwL8z/ehWBSPGFJXJq3dg+OpaIHTB/IzqAOwGPfQIdnT5lEdyy3o3dx4nge81WXS3fUbXwV03x2PGiI1ZUk+rx2Bqxo4DxNRj+LQe6duSn7YywMQ8Y/rtxXfavfRc3cGAtgiiHB++VaTUQHdHopMXNZYPT7RHkizd6FpmYfey84BzUj9e+N9DX3sZgecJ44b9igUQQInd7RpezMQKs/ms1QKqCpdB4IiJf2aamG4S8BIUZUx4U7/XIVcxa1l47nva3i2O1bzCX5gl0Q5hmDIol+Rzo9nbsbdPmHYK/acC/pBm5TdiBLY/W8XB+ENUKJM5FKL1ZwlpptUssIueTkw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=q1z9TDllAcJU79YeAN6qOF7HbLA99LbaxyFhMOZGRo8=;

b=HMUsHi15ru3RkWRVy9v6zNFQSayBfgSrD1JWUFN8UbXif3LeZSKaFryMVqj8X1Cqvkhuya+HoHdU1Pp6xOrX/9NCog3iVZ9IbOdlAR3GD+pWdSPQYuak7O9ccwq2ak49pm1KiZzQlOGlV1NSdS71HsPmVDxbefolHaDJsWQSNoWkR9j9PVZ3vmMT9w51W82f3ujJcnU7wv0gjb0OkAMRslSZZTOhJV0a4S40mq0c93/gPY9rJdvxc64tyuFlxNGWNZM98X5nO4v2L6FWoi4JC5SXmpoaG+ZvVtvmVPlW8VUaF+mJZQVGHzshruuYaoUSucQ4+DIYqlOjqavcksnBZQ==

Received: from PH0PR05MB7542.namprd05.prod.outlook.com (2603:10b6:510:2a::20)

by CH3PR05MB9387.namprd05.prod.outlook.com (2603:10b6:610:142::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.11; Sat, 7 Nov

2026 19:00:03 +0000

Received: from PH0PR05MB7542.namprd05.prod.outlook.com

([fe80::6138:67e3:10da:7f35]) by PH0PR05MB7542.namprd05.prod.outlook.com

([fe80::6138:67e3:10da:7f35%5]) with mapi id 15.21.0592.010; Sat, 7 Nov 2026

19:00:03 +0000

From: Amy Jackson

To: Amy Jackson

Subject:

Thread-Index: AQHdbteiJ2oDm26r/ECwu/nZdeq3aQ==

Date: Sat, 7 Nov 2026 19:00:00 +0000

Message-ID:



References:

















In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PH0PR05MB7542:EE_|CH3PR05MB9387:EE_

x-ms-office365-filtering-correlation-id: e2bcee4e-b253-4c78-b4b6-08df3d01543b

x-microsoft-antispam:

BCL:0;ARA:14566002|20031999006|4140399003|2604032031799003|25010399006|22091999003|19110799012|39105399006|8060799015|8062599012|15080799012|31061999003|24121999003|48001999003|55001999006|24071999003|24021099003|261007181701699018|261005200801699003|440099028|26104999009|3412199025|102099032|260806224601699006|11120399003|26131999018|26121999007|39005299015|41105399003|39145399003|40105399003|17031999003|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?xt1vT7EPgka6BkbU/e/0MFvoLv5InLMCYEY1WEMv7oisQqjidnN39bwqnMHV?=

=?us-ascii?Q?4wbEe/70GDP6NdETSFY5uXtxKWauvwkZToED3XoUfDBMG10Wf1MHf/f8EL5O?=

=?us-ascii?Q?Aj0xH8b58R1i+fL51fxeek+f1sdDhEsKdCkQFqB2vnq7AQyG+M7WcxZpGtpF?=

=?us-ascii?Q?RK4NKmxoO+f56mIpbqPXJLANmBG3DKT3UQskT10pRKjba5gyiA85GIz7Ocf9?=

=?us-ascii?Q?aFlogSXSWUOzfw8pe9T8Y7UjNvza5J3LMUdALcWp0PrgxK//JyOBIBKDbVKj?=

=?us-ascii?Q?FxKilc9/fMjHZOrGY3NRvd+ryiWhVoz+71pgeQmUixPq6TKMlGb8BQAtYE/n?=

=?us-ascii?Q?PxCcIAqv2KaTiFcvYD6uSc/QHmif3MXbISh8/49BJYLWcm+Tm+aza+a3WFKH?=

=?us-ascii?Q?/8VjQe1AcYu1SgvQU8mojXm/vixhYev2UOzLDnsjdXtZDcgCIAKsS2JQCL/E?=

=?us-ascii?Q?rlS2FB+YwGzspe2lkYHGkCnWnzg/o90xvuKlT9KAj1/gwkVptq/fMgyoZFKL?=

=?us-ascii?Q?P1leYewZVNIW7Qfvbyuni2DFFi6Ji5DpMET5ro2RNZc2PjSuz84dRgKQJCrP?=

=?us-ascii?Q?uuksQwQ6FnVwlPj2c7LPmhy0uIuEbNjpOrXcPLNLsUZSTgzOeG9AQQXnTL4Y?=

=?us-ascii?Q?g/8IijmE9NOVBs+oTcvMpk6dfT51Z1Dd6hglIXCuIakZXsdWQsldlsoSrVVd?=

=?us-ascii?Q?HGBUjEoeHPhdBLElrCJeQy3JjMYHTV0ZU6btNdvw2yI2e9DFIiaKYvyn6/mQ?=

=?us-ascii?Q?lk/2Y9EUDbUrlC7qa43qNneEcT0J8iZcqtQXx8c39JGTU9s8EDVHTXZmoVE9?=

=?us-ascii?Q?dQ278OHSjqI9qcYRfxZz8ECBoKZ/C8+zvg31k6xVqEPSrx8iLSBl4sMthgkE?=

=?us-ascii?Q?9gAGdc3hJVDKmKZzWVI3pVe5G7zQDMcDoxqqaKYISBvO4tc0to7ozFUfmZgt?=

=?us-ascii?Q?Sj4cOqzP8PHD0WofCvuYEj7ilWNcX70GXoU9FRVYfKlrhFdZadCEzhvd7Xfl?=

=?us-ascii?Q?e0vjquFCpdQWdqyY4geSRyv20a0tFFodPyCP26qJpWM8CrFItb4T+9kNRP9H?=

=?us-ascii?Q?EVZuSPcDe3VlLBWtF64P3V/k8rLpPeXb74+/EG5vk196iplbx+S73NqMQ1Nf?=

=?us-ascii?Q?yVLHn+5Jb7Jz63jzTlIzXhKYSlRvFqnP4j14f5tg/iTV/VdV4DtfLrKHhG59?=

=?us-ascii?Q?p1UTY2f21dMROv8TNSIkBG+F/GPPTHb0AlWhxMtsV/XEQ/J+hs8V0T9XQF0y?=

=?us-ascii?Q?OX0UFLbRIKhIXZ1fvKSBSr16inN7mMC+OakyXjIcwW65kjTPufXOfH9aYvVz?=

=?us-ascii?Q?7wqwQoRCfCOGqyY5lt0AY9jJhvAGB0IH3UPN7DtUexZ3P5W19iAzuGAEjJIW?=

=?us-ascii?Q?4k+KJg3qEPxot3BmcFRdWHicFuUYoGRBr40U6p00PhKMdFGhk3IjgaxZ0FxO?=

=?us-ascii?Q?KLgPtZP1S4ZsHPUtqi5r7RTjT66GHVrb9z08rGH1/pIsn4USEOBPIQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?ZK0s9zhNICc9wSAxieLrwL7fvQiCqu7P3mLlN9m2XAyZ9+B8s2/xUSyvFzVn?=

=?us-ascii?Q?DVk1E8LNIHoJJvaF5jlEkVhmFi/XpyuKF5oJ5eztKU211sCwyACksKaHcXkN?=

=?us-ascii?Q?ACB3WcB8VmfY4CLNp/c0KI7uDKg7fvx/y5MJJ2v8u1Y+DVrRKf8Sj77I/iZh?=

=?us-ascii?Q?+l5JQ1mJ8vEZzK5AMdVk4TMy4bPAJTo9tfqfnZBLgc98egCKnGnHtVUuQuD2?=

=?us-ascii?Q?pzie8jeapi83j+BamuBBy3QDmnV7mjSR+jQfTe+rPzBgmQnmoMckHhw8N+Fr?=

=?us-ascii?Q?W2rgkLsdkhpwN7B1VTFZWRqpagLkoGLfSVbOcsatGBJGKKl058ANfUIYQMFi?=

=?us-ascii?Q?jsl2DcIrDzXa1TIf0Zhdrh1ZoAmqmgRTvjw4DfTF6fLGM6xJZIkhu7+6RZL9?=

=?us-ascii?Q?UfCVz3uACfNEgnMBAraVsI7rZrR+1FLGEKqktGbAjHVKXVDqFznVNc2EthPl?=

=?us-ascii?Q?WXp9Ab50OSQvQd2OGgunS4tKGYenereCZeaNUwDf/s7R/yMCzZ5b1fYf48gN?=

=?us-ascii?Q?vR8mtAyeg8GW/YaA4/3AWb07zBhxQyjzeWgjyOLI5/GaxAw0+YkdYsCaml7q?=

=?us-ascii?Q?Kxj2KtYbQ74f990lQXKl+6yj9JH1OcScK+ykEoYuYhGmo3PmlVbYguF8xblm?=

=?us-ascii?Q?RBQ6qoVRzacXLYjhlHotYPUQbyxbzf08FQSZMcSzE5YNyty2xfueZ/XtAy8O?=

=?us-ascii?Q?3K4DMY18PAANtYJVljuQ8PFqnqEqBqjQnDO94pM4Z0Mpfsw4oyFTduPthZsG?=

=?us-ascii?Q?UbRmPH9obLjFNtYu99JetuAX2NgwmA6rqTbV6WpSag8d8jYU5eLRi4nTLYAg?=

=?us-ascii?Q?m9msBSWZq0EWusQpGlzWJuapa6/t+wgYXWQ4xuHXSWLDN3k2GVoUpmUsdRqs?=

=?us-ascii?Q?unYiXGN+YXTJ/EJWQ33fD9HYJsC715odHv4OfqOr8UZU/VG1LQBr6ipFwA95?=

=?us-ascii?Q?O7OzU9rgT+HUQyI3VRuYLHaUMiWMU7hRL34TEy8+vY0gToMpiYQ8EDIR7t2J?=

=?us-ascii?Q?TV+dv+ZWZuisb37PBrKEIjd9w5ReCga/C4znaesgAq38iUwCRdHahFODcUhD?=

=?us-ascii?Q?0AgGR/zUUGysPe3jvbm2A9U0xCS1vpataLK0GwmtQQ7KDH1RZuJx2nsS/wY+?=

=?us-ascii?Q?LCoaiEL1yG5zUNqNQjxKkPp+RRZeUjuVK6zbsVl0la2Wzz7uvUc0oJ66B5Xo?=

=?us-ascii?Q?5rqCG6klYM5JkCrNcpeZ9po7+eSIMm3NqG6s2Ii8Zz0xL8r1Gqc84wCHt5MA?=

=?us-ascii?Q?6FKOxsTPg7LzPyKDAUDLXQV1/mmqN5drVP8RENxtrc53l7KAyNMADnwnDppb?=

=?us-ascii?Q?V3TuXlQUFE5Jq+aEtWzaxsr6hGRbKOUfI1TkcdW00jTpwcRGCzAO2j1+qupM?=

=?us-ascii?Q?wMuAGLMp3Qn+/rBQOIvvyRcyP3OgTHcoW49STdSJHi2lPIE8H5gWICf2RvDg?=

=?us-ascii?Q?PfzgxKxAvCfevvM5LEWEPIffmxq71rN0?=

Content-Type: multipart/alternative;

boundary="_000_PH0PR05MB7542A580B5E763EC0CBC1922C4752PH0PR05MB7542namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PH0PR05MB7542.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e2bcee4e-b253-4c78-b4b6-08df3d01543b

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2026 19:00:02.6939

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR05MB9387



--_000_PH0PR05MB7542A580B5E763EC0CBC1922C4752PH0PR05MB7542namp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable





________________________________

From: Amy Jackson

Sent: Wednesday, November 4, 2026 11:24 PM

To: Amy Jackson

Subject: Re: Cost..?



Hi,

I am a professional Graphic Designer with over 12+ years of experience.

Do you need New Website, Website Development Re-designing, CMS design, E-co=

mmerce design, & Website Update?

If interested. May I send you sample, Portfolio and company Details.

Thank you,



--_000_PH0PR05MB7542A580B5E763EC0CBC1922C4752PH0PR05MB7542namp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Amy Jackson <Amyk7=

88032@outlook.com>


Sent: Wednesday, November 4, 2026 11:24 PM


To: Amy Jackson <Amyk788032@outlook.com>


Subject: Re: Cost..?

 









xt-indent:0px; background-color:rgb(255,255,255); margin:0px; font-family:A=

ptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; f=

ont-size:12pt; color:rgb(0,0,0)">

Hi,



margin:12pt 0px">


xt-indent:0px; line-height:1.5; margin:0px; font-family:Aptos,Aptos_Embedde=

dFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; col=

or:rgb(0,0,0)">

I am a professional Graphic Designer with over 12+ years of experience.
v>




margin:12pt 0px">


xt-indent:0px; line-height:1.5; margin:0px; font-family:Aptos,Aptos_Embedde=

dFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; col=

or:rgb(0,0,0)">

Do you need New Website, Website Development Re-designing, CMS design, E-co=

mmerce design, & Website Update?





margin:12pt 0px">


xt-indent:0px; line-height:1.5; margin:0px; font-family:Aptos,Aptos_Embedde=

dFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; col=

or:rgb(0,0,0)">

If interested. May I send you sample, Portfolio and company Details.





margin:12pt 0px">


xt-indent:0px; line-height:1.5; margin:0px; font-family:Aptos,Aptos_Embedde=

dFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; col=

or:rgb(0,0,0)">

Thank you,












--_000_PH0PR05MB7542A580B5E763EC0CBC1922C4752PH0PR05MB7542namp_--

Web/SEo/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Nov 2026 10:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPjHb-000000002dB-2RIn

for dave@doctor.nl2k.ab.ca;

Sat, 07 Nov 2026 10:28:47 -0600

Resent-From: The Doctor

Resent-Date: Sat, 7 Nov 2026 10:28:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy2-f4.google.com ([74.125.229.4]:50980)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPhJS-000000000fq-4AGA

for root@nk.ca;

Sat, 07 Nov 2026 08:22:36 -0600

Received: by mail-dy2-f4.google.com with SMTP id 5a478bee46e88-370231dbf90so737815eec.0

for ; Sat, 07 Nov 2026 06:21:40 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nextpathtechnologies.com; s=google; t=1794061294; x=1794666094; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=EijA06XnvmTXGC7CI+QEyC/BIbQQ1FmQuSvFaU/LXOM=;

b=w+bGdOiZmiBD2MY0VJ2QMHzwm+IigOAMMxDrTcx8yuOyS1u+J86g0WPu8ahhAHsent

seEw7tzSGrP8v/u98kHPzMAE0dHqMCKQjqKdV5xECk5n0V9RhAjoFWtX4I9a4qZVt//A

7qmLbkYvFiOt9llPFVSotoPEnTSHJeupGg0sSdmeuVKnWIFlgr6Hn7KxupPYQwKs2X4c

z/tEzMPiFoqAZMXt3yeLvvMxB6abiorbgzJBfEnd0qfyQTAcLYUgPugWFJIvcavH5lFF

oliUVEMSwwGuTfFKdfiTW3Ov7t34MlPZwqNZSLI9RM1vK64sRZP6f6fbrmIDj90FwNAe

7tZw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794061294; x=1794666094;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=EijA06XnvmTXGC7CI+QEyC/BIbQQ1FmQuSvFaU/LXOM=;

b=O60Ssq58aeLterdZcpOUtS+4cxkOPUHIE8OFiQ2kRccnZoLH6PcRrZYFz7fEhxU4cV

np3siy+OV6G7dy8g7g3VdPR7CayY80lC0BX4AndhRxO3xZjTXUTcopwZiEtq0jBDOh6U

Ng13537nifnw4N8zXo8pdgqBTMT8GwGY/5al8E/OCQsQ8pFnylfsYnuiabyifQyRmIEE

UQbahvfXpkcDx+HpYWBAxJbn+TbeVco5ZZgrGbaxHME9J72kmWWuC+qKaxYls+ohhyqd

+XfMXX8zMqnV0cAk/+NmGDpQq/w5uIZIeK/OpUUC6BXa+5m7kzxZleuFdZVjmlXRLh7I

mtCA==

X-Gm-Message-State: APuU4Z9akUobq2eXRCfp1sA4raQdGoBm7AOxuOaIpHfDQG2knfWPp+zF

R3T0ZNRSmX7OqNxiues2IKNDScNChb26N1i8k6uG+A4xMF97DM09o4NDKgVtcpepEXmH87Pcox5

Opz1jk4Je+0AX

X-Gm-Gg: AYBFou1TP/BJ0rXr1pK/1/fS3GnrQoJIYxx0jX6+ua2s1iZgv9Muc36S6KVGwd2nLOC

lDPesIL0+TjxJRQi6VdkX1N0Hm3y3aEDexeD7VTQmM6iKHVKaNfwG9nnRVWM00CXH+iZMr11AH0

1Pp0nEXpa4Swb5LaiTomwrSuctml84ukvxzPUlR1rGoYomuSzmG4i1e22nETAbk2ADRO+Ac1SNG

sN5fZTT8bn/sb26SZpR7GLKbtS3qh8RYAft3dvUg1YYwAgOZZo+SMw2U3VPuDhxfJC3oXMb3Nzm

Jz/JuCPlJH6Fg2hrdZoBaXXRRsZsjwPTAN77cRrIbjIGlJcsTx3wgJfbNDboGB8ap01RoQ5O9KI

vQ4WaRzmDxMp+MZcKQC2Im+/mCERvSKzR0o24ZNlIAWUMuADqSl75LYj72MO+kcUBLHNGoeKhpR

Dz/7oNRvaoTPyhhymBz5TLdYigxliJVHcqOUlKWEkL+zuefI4xtvamVLuhO2ZljJp+kQklJsc8y

D9W7a3chnvfDr8qHci+eq7k5FCbjrdfd/rd/I8aJUa2Wd9cIsAOyzJULd6IHtcFKRL1SIwHVpA1

VSZsxnVYtrnn/nXQ28ayYPUy9aa0JP+rPz7hig==

X-Received: by 2002:a05:701a:ca0c:b0:1b2:46ca:242e with SMTP id a92af1059eb24-1b25d31f341mr8377196c88.14.1794061293637;

Sat, 07 Nov 2026 06:21:33 -0800 (PST)

Received: from [127.0.0.1] ([182.77.77.224])

by smtp.gmail.com with ESMTPSA id a92af1059eb24-1b26c97f54csm5189684c88.15.2026.11.07.06.21.32

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Sat, 07 Nov 2026 06:21:32 -0800 (PST)

From: Corey

To: root@nk.ca

Subject: SEO Packages-www.nk.ca

Message-ID: <7fa4f85e-201c-2bf7-5c51-9608fb00999e@nextpathtechnologies.com>

Content-Transfer-Encoding: quoted-printable

Date: Sat, 07 Nov 2026 14:21:30 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 11.2

X-Spam_score_int: 112

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, With your permission, I would like to send you an SEO

report www.nk.ca with prices showing you a few things to greatly improve

these search results for you. These things are not difficult, and my repo

[...]



Content analysis details: (11.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[182.77.77.224 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[182.77.77.224 listed in dnsbl.ahbl.org]

[182.77.77.224 listed in dnsbl.ahbl.org]

[182.77.77.224 listed in dnsbl.ahbl.org]

[182.77.77.224 listed in dnsbl.ahbl.org]

[74.125.229.4 listed in dnsbl.ahbl.org]

[74.125.229.4 listed in dnsbl.ahbl.org]

[74.125.229.4 listed in dnsbl.ahbl.org]

[74.125.229.4 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[182.77.77.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[182.77.77.224 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[182.77.77.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[182.77.77.224 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[74.125.229.4 listed in bb.barracudacentral.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.229.4 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.229.4 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.229.4 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} SEO Packages-www.nk.ca



Hi,

With your permission, I would like to send you an SEO report =

www.nk.ca with prices showing you a few things to greatly improve these =

search results for you. These things are not difficult, and my report will =

be very specific.

We can place your website on Google's 1st page. =

Yahoo, Bing etc.

May I send you a quote, previous work and our =

proposal?

Kind Regards,

Corey,



Web/SEo/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Nov 2026 22:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPYMA-00000000130-2mIb

for dave@doctor.nl2k.ab.ca;

Fri, 06 Nov 2026 22:48:46 -0600

Resent-From: The Doctor

Resent-Date: Fri, 6 Nov 2026 22:48:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy1-f176.google.com ([74.125.82.176]:44076)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPXne-00000000N9T-06Re

for sales@nk.ca;

Fri, 06 Nov 2026 22:13:08 -0600

Received: by mail-dy1-f176.google.com with SMTP id 5a478bee46e88-3700ed8dbe3so2082384eec.0

for ; Fri, 06 Nov 2026 20:12:11 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=technovaapps-com.20260707.gappssmtp.com; s=20260707; t=1794024725; x=1794629525; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=kyBNoHmKfxoU9YuJRNVqdI5m1je5DxQcGoGeEwex8sI=;

b=VRNG6amHIJGRnZlq5w7CBot7zF9vmGknsWk1HnMDvvOEtTNqg8eGPXeNRaEL84ejVO

Ivi+9GvC5gq8eGYJ663qZHRkx1UIqeOm3xaFGMFXJBNMjjL0p7362TeYdvo2MtHPOWq8

YScAm5mujf1sdgNIIWtsmfBsRb6DmtGlA/U1oCGqL5SNSd3DWgkmeJ50mTwWQjI75Fm+

1KLCKJdvh73dgCiEN45f+gA492kuG5HqX5MUUnxXW/ANi8Yzs88wAh1OSn9n1UGn5Dqw

JCcoczLW6F2K0ug8Ceb19jzjqPwdTHjPlVehBIxSG5jJve4QChJdugH5cnpvlnszlimE

qtnQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794024725; x=1794629525;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=kyBNoHmKfxoU9YuJRNVqdI5m1je5DxQcGoGeEwex8sI=;

b=EM9Si4ODY4q4IFPckhTZ64uHPfTuk3/Jhz220DzmS8zHwHtKwDotM8SU9sTiJRHPiW

bG742XSV0GzW6aw0WaG81UqF7M5DBLpvxH+Jm5JsU6aksM6OCzxjKRGKN2ZB6kBXddvD

1FBvOVpSMgtDKt8fkddJcmS2214hOJlTVwLBGOE0izZ+A/G+99mmV+RKL1Zo0ZyWoB3p

H0gy31vQjSwx0wj2X2nsBiKocw8ABWvt6+FCdXs8pbhEHgh4TrhE206qhBSG9rrDCJok

GF+ACQc1kL1IKbYN3qqzjS51GNO2vUkqVEkT8uDJP9sERPo3qq5KI3PhKFJ/bLU67i1S

9Jww==

X-Gm-Message-State: APuU4Z9QwzM+SdN8q6mFBTZuzHaCjW50+5YTZdQrmROI8aPpzeB3J1Bh

UN/DG7QniDZKOJyldfP/LmI56OQOWMgRqd1RiwUKpBRwAHMLyKcCU6VV4Oft3JS356Ds+lPVpvI

sC6Vl

X-Gm-Gg: AYBFou24E5/xu4kjFVoB9dEzdEKM9unF4KkRQ4d7JG4XEMAe/uJ+w/8OJ5D9q5wVKM3

J/lHLnU91ZAu6UTEtlq3hGNXUor3TCCNFComY3Hc1oJvx9UZDOKOw8783i4dY6AxcLgGxqe9tFs

OP6MkI3DW7cNI74IgnVXAErdthssmJCFEQs4yHbxNa24awmOdY5NasPx4KTQDp86ifOFv+k51o/

ea18XW4Hhm9+9ryfMAhVWwPs4GbOjZ373oF/Sr2erpo89/SzDlJv1AdH+1EJI9LkifFK9rza7GX

Ber2I+f3RSoDcCjyXPLzy6BUwE/Gojbe8oUZx43ppvpnpzry/Cgg6+V9BleYf9Oktd2gxANlLQO

LFiSWVAUG1dXpMvEFWXy0PKoyJ9YJfM0q3JJv3LBaPWFC2/GTI0Q4y1nFz87PXSZdEIprb87oVS

srBIMBYRX5C6kgn//ZksVs6fYSuLgLygFkAlXJBqdSCcgeC8b9PuxGkY91+Amt1xwOQGkTTagR0

0HH0yVeDXrUJzgF2Zat3I/WtTezaByV17e2TqaZoBC5eVwWdRIOQrPurIsDAhcnRXXI92SZuWCR

m0lUqcMGbw9xb6uGSeT3YWhU4Lh93+OwhynaIDLu0dbMSg==

X-Received: by 2002:a05:7300:824d:b0:369:fb01:2eb7 with SMTP id 5a478bee46e88-36f76023a1fmr5840790eec.13.1794024724708;

Fri, 06 Nov 2026 20:12:04 -0800 (PST)

Received: from [127.0.0.1] ([122.161.50.26])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-36fa8e3a718sm12303134eec.4.2026.11.06.20.12.03

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Fri, 06 Nov 2026 20:12:04 -0800 (PST)

From: Arianna

To: sales@nk.ca

Subject: =?UTF-8?Q?Upgrade_Your_Business_with_an_App_?=

=?UTF-8?Q?=E2=80=93_www=2Enk=2Eca?=

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Sat, 07 Nov 2026 04:12:02 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Are you looking for a mobile app for your business on

Android and iOS?



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.82.176 listed in dnsbl.ahbl.org]

[74.125.82.176 listed in dnsbl.ahbl.org]

[74.125.82.176 listed in dnsbl.ahbl.org]

[74.125.82.176 listed in dnsbl.ahbl.org]

[122.161.50.26 listed in dnsbl.ahbl.org]

[122.161.50.26 listed in dnsbl.ahbl.org]

[122.161.50.26 listed in dnsbl.ahbl.org]

[122.161.50.26 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.82.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.82.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.82.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.82.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.50.26 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.176 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.176 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.176 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} =?UTF-8?Q?Upgrade_Your_Business_with_an_App_?=

=?UTF-8?Q?=E2=80=93_www=2Enk=2Eca?=



Hi,

Are you looking for a mobile app for your business on =

Android and iOS?

If you are interested, PLEASE=

=C2=A0SEND ME YOUR CONTACT & WHATSAPP NUMBER SO, WE CAN DISCUSS=

IT BETTER.

Thanks,=

Arianna



WEb/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Nov 2026 14:47:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPQqI-00000000GJz-2D5u

for dave@doctor.nl2k.ab.ca;

Fri, 06 Nov 2026 14:47:22 -0600

Resent-From: The Doctor

Resent-Date: Fri, 6 Nov 2026 14:47:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f199.google.com ([209.85.222.199]:49624)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPOXQ-00000000Ouz-0bvG

for sales@nk.ca;

Fri, 06 Nov 2026 12:19:46 -0600

Received: by mail-qk1-f199.google.com with SMTP id af79cd13be357-93caf7856ffsf210004785a.3

for ; Fri, 06 Nov 2026 10:18:50 -0800 (PST)

ARC-Seal: i=3; a=rsa-sha256; t=1793989124; cv=pass;

d=google.com; s=arc-20260327;

b=HF51hKzVwZbuxXZXI8FmCJq2VflhnDCXNujptjH929o5HjFniz8wK0qCM2OJSJZPZP

zkOY4ENrs2/JP389Jr64dXdNs5iB1OI/fIaZwXD+FSFupMCvxejEMYMO2CBM4Kp7fbDP

HQ+PiJiJik99eHECIv+w1FFb2fanwq1bWSlZd5OB1hiBLJpScubdKnwEDlpgHU5ca9u+

if4J2+Fa8/Msw2wdnwiXC49+BXSgM5YXrf/KdaUmjJiC0xj6KTlZnNAfFx+mQJYd1Xz/

7ElPZnXAFJgG3kC1z/tx5AnXX8VlLUCa/Y5l3o7u6TDbz/w5KB9TvYPQayCP87eTqT32

zPOQ==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature;

bh=RXI5tGQFNFG06TLHbhDRL6EOvnpnXkT1sVEisnjy5Mw=;

fh=VoKxF0dzJfvPFijT84lpHF2cgYuuGa7TCNdvIJRT2lM=;

b=d5acWXTVTe3VGKuzsTPAaGv2f+R1z/cxYr+f9fz5Q00oQ6jhLGE4FaVdy6WuuqabLl

A1HVv8X9JgG0t7+ayKIg2Us7nMKqBlzYFedn0Q/eMSU5M+TLRdkfkV3stdSkD/JJ7nzc

vxJOUlUfspZYAwpf2HHZZRkpE/ijRKnrltOTTnoYPVHhf6feG0dLfFBvIO68BefffIZu

s+jLMOBHm8O1E8JmihaEftLswOGu1mU9TERvTUCKz91rOkMsSTpAhXp29P0hnhx+iP1V

tU3sjtYfETkHgq85/JHmUkmyh3WWrKeuelaRSTWWxT31iAmSesKPprvQarZtpAyztA38

9SFg==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=edtqYDkh;

arc=pass (i=1);

spf=pass (google.com: domain of jameshuntjh1993@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=jameshuntjh1993@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@seo-outsourcing.uk

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=seo-outsourcing.uk; s=google; t=1793989124; x=1794593924; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:sender:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=RXI5tGQFNFG06TLHbhDRL6EOvnpnXkT1sVEisnjy5Mw=;

b=ldD3CBBNrqWajnZj9ZmanpvgEiuqUk0P27/dIPpD8/F3Y/jrGxj5/lp2wYhuQIsFcp

LFWISBEQ+LjFqQwECWWF+QOB4J6VcrSoXrdeiu+mfVWht6Y+q8QpD8kjT1zjV8/IzKh/

UNNOY/Z7k2FL4s9fNAIOFR4FRByVn7abPqhRDGs0sTylGQFFB0y2iywFwHERlY6RV5eR

6ulc/2ndc4HEOkhFIQqg1pH5T4jFF5OgciKwj3dBxAH37QSFrl+QUaTehticpzH5Z9BQ

4ud+8AXYvWHmPYi5GmCtIdwjrBhBt0473GtpVOjp4cuBepX9AIZBiqdX5QMJ6l0pi6Zf

hM5w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793989124; x=1794593924;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:sender:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=RXI5tGQFNFG06TLHbhDRL6EOvnpnXkT1sVEisnjy5Mw=;

b=frU/RYVKHaDLq77s+KXD4amtANH3uOy2CS2NYIFXulueJOwjp/z0cd/W/kUqIOkpW3

uilTzQkKLhKjgjP+o8vvZwEZ/Um9PlmtvVhwjNjzkwz6Lf2RnqG/RMbbuhEXLTGVgyv6

HAPOGTlIG6UIx58in8tw4xvB7lstEdbcgAAIzRDahutGtoIM1jDglwaqRFFrXSLBDmvw

1z/qG2Kcun6NPyZHuA/Xls76twgI199F49WnoROUefPr2ERoS6B7aIL7n5qBOT3Uayfa

qdENkHcZI06loDg4U9IzTmLpeBF4/e83dHBGKoLJQ/KhrOGmtxNzaX6VFKyDed5luksU

4NRQ==

Sender: seo-services@seo-outsourcing.uk

X-Forwarded-Encrypted: i=3; AKwUvBwuyodPwQA3hRlqWL8qXGqhAhvd6astwr/pGQbHFnDGjx7M+YL0TNkrk3SSTHR2xCUGpjOtDg==@nk.ca

X-Gm-Message-State: APuU4Z9Vzw854nsB1BQOzALWI9TpLRAnHmNs20iEsFsOQtBRFZMaGg5/

GBNARtwWpsbGELuAyrRCJvqUoowzXaeCc+juEC8tlVcpuJbQ96FR0vrSETyEtjT7QCw=

X-Received: by 2002:a05:690e:43cc:10b0:67c:bd6:73cf with SMTP id 956f58d0204a3-67c145fe7aemr999615d50.128.1793988769637;

Fri, 06 Nov 2026 10:12:49 -0800 (PST)

X-BeenThere: seo-services@seo-outsourcing.uk; h="ATskLdfFMeboYTtGuxVPNHVN4AvKa0sK4RhjzhYyUgFk2tTj5A=="

Received: by 2002:a05:690e:144e:b0:67b:f00a:cd01 with SMTP id

956f58d0204a3-67c133b6b5fls736571d50.0.-pod-prod-03-us; Fri, 06 Nov 2026

10:12:28 -0800 (PST)

X-Received: by 2002:a05:690e:400c:b0:67c:1ebe:385e with SMTP id 956f58d0204a3-67c1ebe3af3mr666200d50.7.1793988748383;

Fri, 06 Nov 2026 10:12:28 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1793988748; cv=pass;

d=google.com; s=arc-20260327;

b=P1l+gHFkQWdXwtsXzwJY9sDWg2AvHf5tTX/k7w/aJoPeGvy8sn5zdAMLwzJjTCBQ+c

G642bqkOTpr+c24K5q0835hIKsvlQ79VDTgHf5LIYYcRERUqGsGcNfSPSUkFaJ5dE9Bd

lIacZz2SQHZRDo1RL83u+CHUGArCOTiLpiC2OcVM8nqEobZj7O+RUlCRJPuBhyiwwgjM

knsBl2bHUVTbIcKd9EIZ4RZfQ7eyJiz6O4+ix7be+PDyoueEZxW9T5xIw5UTz0B5h1n0

yu3ScBjWFXHzhxAjxgL6Xf8L6DUweSFtknoaZ+FKHvEeA06fo7edHJBesE/KMLmm8+22

2tXA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=iPpsWzeHhcDWCFX3ANrt8w/FueC2ThFQo9GbS96rG8w=;

fh=E7RfuZ563Hd4d+xibJoWDOJ9tyK1Z9G+vLxIrdJYQXM=;

b=mASfZ296okMVe1KyW7oE5DRB4bpe+GdREW9Mk4RcPNQGYQj8B7QtKzfE6WEobnEKPk

o+j9dS+Pwzz6s2M9gufR0ncafABi2lQWNQqEk1Kc6XAFi1A3ZmUV5ur4o3fOnetj+UXU

XXPtjdTfprZr5OTlhgnHy805XQBNNUAtO3e2N1Ca2esr8h9eu0rjEfTuAmc9K2ky5p1s

iyJb0DoUTp7gLhYgvprszZKDh9FCRy7HYMgbEZWuT8BA+HWjCkoFB67FD6MfW4U2+Gwk

yWzp9sFEjMrcr4662XtAuqLOFJNdxhjdEoGkct+L321TFb5QyApOQxCIlAjamIxM7bN9

hkvA==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=edtqYDkh;

arc=pass (i=1);

spf=pass (google.com: domain of jameshuntjh1993@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=jameshuntjh1993@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@seo-outsourcing.uk

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 956f58d0204a3-67c1314ae7dsor2598528d50.0.2026.11.06.10.12.28

for

(Google Transport Security);

Fri, 06 Nov 2026 10:12:28 -0800 (PST)

Received-SPF: pass (google.com: domain of jameshuntjh1993@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1793988748; cv=none;

d=google.com; s=arc-20260327;

b=Ni0izDuK/JmNB4QR4PN1QX0lJjypgZGGKN1apUgjlMPfJIUmxX5cKSB0NY7VD6CC20

WDC/DDa/7ujhz5ylDqBiBnF9XEAQrYv95uVJd30ZMlkZHpODEaNMvlewS22BTn77FvQx

M2vtOy0wW0UNgNcZz+XpnYfUn5OkA1SQ+iEGi6p+RkrvpXbZny0a7cIb8AiujNnUmeoF

b+qvNvv1qfhNxAXQ/AGntmZ/3idRZf8bALEJQYKMxX7xjh+Ux8l0NzVbC7eBd0P9Qxjb

0ir0na34GgXrTR6tmKA5ViRhnYlWIvXWrpmpyWtBu7DoVts8uiYmOsc3Jor4RkbAbNgI

DlUg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=iPpsWzeHhcDWCFX3ANrt8w/FueC2ThFQo9GbS96rG8w=;

fh=E7RfuZ563Hd4d+xibJoWDOJ9tyK1Z9G+vLxIrdJYQXM=;

b=QWDZfCscTXqzCz8VawBe2aqR7RdPgG07bOsxKFWmpkjn3kjrvlyM9VTvvHArATuMf5

vN4ZUM6C+ysiVgHb1CMUUILnqoZIrMyrHL4xnsskjCLpDA7+fajb+mPrCLj+xrJE2TrX

RC2hTiD56KiN6dQ1rfEeSwEM8c9wVhM+IssPmANGSgWjSoZ/qVcN1HyzsUDiOgs6mW9Z

1bC80TI46HwEGHByqdfVD8iPKk6Zx+81f2zJFKTM7ySpbqf0ucCB3ZwuKE5W7mKVZyN5

tK8WDf5gX3fhMKaX0LA5v18AWSMrqenMYhv89MoWoOR/cbYkHMJDrR+0Map2LVrLNQp8

M1FQ==;

darn=seo-outsourcing.uk

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AYBFou1grItl8WHUXG7dSLeAtl+Kq9Lb3XQwoGY9ZUeZvnMS6VIDo//Ah/BI5juO//Y

4g+sGEsY1TWnxI5Bul343ctQwn4RToTSCMU/Yx2Fkuo2cHittXsu/kvwrwqGc0xiI2YPRCnb6gZ

kDskMkTZQcldF4G0KBEhx6NBC4K/WurgVUcvrtcEut9IXecfmVGYMmMOt0ex1jDJf0egN36b7Dp

KEFy6/we0zgtvJPu5k9JTQrCnOY8Bq3uqOMBjpt6tk3qEFGyrMKGHWhhZNlbOcpRbB4x02B4Tr6

AxECi7iPIt4CPyigm/WXzp24AzIi6EEPIf39OvoXrKUgc5aXfidvLwG5H93E8p6SZH7bFXS8grg

JDeSIdaZHEMz/gZWNEDOngio5ZweS3NnKZdJJTA==

X-Received: by 2002:a53:b68f:0:b0:672:99e1:11d1 with SMTP id

956f58d0204a3-67c145b528amr984767d50.110.1793988747998; Fri, 06 Nov 2026

10:12:27 -0800 (PST)

MIME-Version: 1.0

From: James Hunt

Date: Fri, 6 Nov 2026 23:41:00 +0530

X-Gm-Features: AclHuK_TPU4J3_r20Af2k6A1HBttfC9PgYmsgeU1fDAIsYiL3AC92ATtd3-pRRk

Message-ID:

Subject: Affordable App Development

To: seo-services@seo-outsourcing.uk

Content-Type: multipart/alternative; boundary="0000000000000e3d69065f9f8e60"

X-Original-Sender: jameshuntjh1993@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20260707 header.b=edtqYDkh; arc=pass

(i=1); spf=pass (google.com: domain of jameshuntjh1993@gmail.com

designates 209.85.220.41 as permitted sender) smtp.mailfrom=jameshuntjh1993@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@seo-outsourcing.uk

Precedence: list

Mailing-list: list SEO-Services@seo-outsourcing.uk; contact SEO-Services+owners@seo-outsourcing.uk

List-ID:

X-Spam-Checked-In-Group: SEO-Services@seo-outsourcing.uk

X-Google-Group-Id: 522995216069

List-Post: ,



List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi There, Looking to build a mobile app for your business?

We develop affordable apps for real estate, healthcare, wellness, and more.





Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.199 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: seo-outsourcing.uk]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: seo-outsourcing.uk]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: seo-outsourcing.uk]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jameshuntjh1993(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.199 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.199 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} Affordable App Development



--0000000000000e3d69065f9f8e60

Content-Type: text/plain; charset="UTF-8"



Hi There,



Looking to build a mobile app for your business?



We develop affordable apps for real estate, healthcare, wellness, and more.



Can I share some work samples?



Regards,

James



To unsubscribe from this group and stop receiving emails from it, send an email to SEO-Services+unsubscribe@seo-outsourcing.uk.



--0000000000000e3d69065f9f8e60

Content-Type: text/html; charset="UTF-8"



Hi There,

Looking to build a mobile app for your business?

We develop affordable apps for real estate, healthcare, wellness, and more.

Can I share some work samples?

Regards,
James










To unsubscribe from this group and stop receiving emails from it, send an email to SEO-Services+unsubscribe@seo-outsourcing.uk.




--0000000000000e3d69065f9f8e60--

Nigerian spam from google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Nov 2026 02:59:00 -0600

Received: from mail-lf1-f52.google.com ([209.85.167.52]:47369)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPFmF-000000008Bn-0RxV

for dave@doctor.nl2k.ab.ca;

Fri, 06 Nov 2026 02:58:30 -0600

Received: by mail-lf1-f52.google.com with SMTP id 2adb3069b0e04-5be3d5927ceso352560e87.3

for ; Fri, 06 Nov 2026 00:57:33 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1793955446; cv=none;

d=google.com; s=arc-20260327;

b=RO26bc8FzMChD6wHoIBnkESHStKILMVvk/CbCf5vaSWGGbPRfikFwukR46XBRrMGa9

8uLQCWvneeHGzl9V5GyrqPqz7zGI2gW08K7oiXE0zZgVNlHjiWlww26fL1B11/5H5cMh

l137gZkHHxtHFVnFLBweoEVjcTvTRa7QWjlDeuKfYKkXACRQRDdngjVKEPasBz8eBVte

kTFlXNvU+BZEPM2p2jVxxly6XJxvceDWNni8+8EnJKlLYON8EjGPrmxFqcdmUdfXZp0V

cj3w6QDcDNqZ2lsIhyU6epYwsX4zXK5JUyTQFOygIoZ9caUcxjbc42C/1uzRlz9X4R6m

DBQQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=YkPZIVkgZyncidRQyhMipC4ApGT3TwPve8KC05JsvZ4=;

fh=bzPN/XAwxHttkElB6azxbNbOimyfkTrqt4rPoUO4yvc=;

b=Kw0I1JnQGodUQL1IVgAw1xGFSbh7i6y4XsAExjYYVYpzEzvYG9gxPqQm5J7n+J9bnA

G2O/WfuoyZDngVrStIZfWI6qhLaBIqh1ITTdE1FAQNyyR9HnLiBI49Hf8a5YukJqjal9

oc4vLkxwudWOJsN3EVdF2lxiyJumyAzX0cVOHQ9+W9AAdFH+pRrKKwFoyyBK/x8T10IJ

0TXHdYRNq0E28VjV4jpYoZJZU4cCTtNivQHnYF/w0Aq5tnnndeDq38MSC+g5ynusxgjF

rXUQznv+tdYp9S2ey4r0Q5Kllse1A7CqOuZjwvoE26mOBzeqVG2tcXHAn1gqGdYZArO9

jcHQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1793955446; x=1794560246; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=YkPZIVkgZyncidRQyhMipC4ApGT3TwPve8KC05JsvZ4=;

b=YWShxM+gRZYC7VRvveJlAbOVExecwNDsjHmRoAICQlbQTB4c1kfjmZOCR6IySRfABx

i9fVlm15RrYwF44Rv6LXRk0YxQYtxslXg7Qm6V4cOv/iIp9WZS+8z7RmnPosvNRBTGTy

fu/awTYgpuIzqnniEHTEblmwkdGgwTHrUXZAh8+NhHWFnR3brDhLCagVRWLy8hSB3Yc0

QL2E0pZXPPV2HjUe2SSQw/yJL3zJjppg4lA788A9wbKWvsPqX3nNj4uYW2KK1TLcMB+U

5vUcTxU93w36M94u9Zu9WlbGH+jbV5yaISQAgPUZY/WQixAhCHkAUYKie0mD1plN6OF6

i67Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793955446; x=1794560246;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=YkPZIVkgZyncidRQyhMipC4ApGT3TwPve8KC05JsvZ4=;

b=07ORIf10nYHkK+Ls2/Hsj+zr48WIHx428Q/CMmpPyZrUzU01igbTO1DzNTfAWbChiE

UMiTR4yvq4mZ9FJFWNM6E3wBnKao70Ap2gwr6cvfplmotRPR+qeyYxPiXAz8QthsB8uB

vPUWSO5/DJPxdrdHlxR2HscOwF+y1V8CF7uQud2YaEYzW5T2QzLu0MeyewgCrThH/WZa

U7wvWKfkT+PYo4YAiX1SH8nWONbvcxeR2r+fNanDs1cEFNOOjY+5pMVbxZqXP7k6Iklo

IJneg7HlXVdrNZ6NHkvG/Z03MyjAdC/OoJuo++DcI4Q/ofjsJohxo5aCsHBtXrPffC/k

wFTA==

X-Forwarded-Encrypted: i=1; AKwUvBwh4zZcDLb1wgiAYLYMpZMGR4s7kIlvk/yygeKEw3s7slqoGwXyIDcolP1bnns5BEQ206vh@doctor.nl2k.ab.ca

X-Gm-Message-State: APuU4Z8aiNYSVvzEQ4vphFveyTMrHIWX+tpVn196UhGP0e2LfDiCq5SH

ezja2yFrLrUoqkdx9/gJyEvJLqt2fT9JCG2RahPRZHdxD9pqEJtjYQafyYfM3xPHJDrHG4YKhzu

htwk7E5NRWA0SjL+iEgcyAfpxBQaXDEw=

X-Gm-Gg: AYBFou0WkR60aEr4P9g4o9+u5WtRAliArnU4pT8cQPnbMsSV6kmz1GZ8sYXC1/uvYI6

hDaEdZGyZvyEMgu3IDrMbhYN7jAt8VIbB/XTw1ctE2g8D6ojifv3yClTv1RU1wjKRpPrex2tinr

rMlbQhxyU3nf9YTjagITX10VARb2gqp0ST0o7ZV6F+9Z65Yx72AG0F9F1wQQTWTiYC+ufz5CYzh

23I8P/PJjUDsUkNzxvrPelPS7juFQwBRUx4AKx8CLlh0Z4su6FogFW65Rg4ft9nMXy0QCFuD94/

9qe6lVrYmn3tyYJhgdVkrGxuE8GUnGiLYmLObjog9nbz8afZpzp5cUQo3LhJ6mX8Hau05SVk7AY

3gzkk3doZZOg+P3HC9tFr/WHCmraLDXVYnJjvYrX2c0octTx9tPFteNv4HNxRo6765QxMoupYEN

fSzADZcbWFsGHFgXRCpA6h9KbZyA/BOnVFV9WJbqrM37dfn+rJiUuLLCNLl6iP8w1D09IEIlPME

oZ6ShmN3GXvQZr1ZbOErR7i9pkEotPdBEEcOQQRrX6ZEH8Vkto5VucRqsJeT1X6

X-Received: by 2002:a05:6512:308d:b0:5bb:7b64:340d with SMTP id

2adb3069b0e04-5c0039856fdmr556043e87.28.1793955445530; Fri, 06 Nov 2026

00:57:25 -0800 (PST)

MIME-Version: 1.0

Reply-To: andrewbrianp2@gmail.com

From: "Dr. Andrew Brian"

Date: Fri, 6 Nov 2026 09:57:10 +0100

X-Gm-Features: AclHuK9Zip3rtd9R_9j937mO4EAKpGrdovDieJkNJv3p6Snk5oWmnxezhqsa6mY

Message-ID:

Subject: Re: Potential Business Collaboration Opportunity

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000012e57e065f97cda9"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 16.8

X-Spam_score_int: 168

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, Compliments of the day. I hope this message

finds you in good health and high spirits. I recently obtained your contact

details through an international business directory and wanted to introduce

myself. My name is Dr. Andrew Brian, and I am a Financial Consultant and

Adviser based in L [...]



Content analysis details: (16.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

[209.85.167.52 listed in dnsbl.ahbl.org]

[209.85.167.52 listed in dnsbl.ahbl.org]

[209.85.167.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.52 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.52 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[chrismartin01966(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[chrismartin01966(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[andrewbrianp2(at)gmail.com]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.52 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_DR No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.8 LONGWORDS Long string of long words

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Re: Potential Business Collaboration Opportunity



--00000000000012e57e065f97cda9

Content-Type: text/plain; charset="UTF-8"



Dear Sir/Madam,





Compliments of the day. I hope this message finds you in good health and

high spirits.





I recently obtained your contact details through an international business

directory and wanted to introduce myself. My name is Dr. Andrew Brian, and

I am a Financial Consultant and Adviser based in London, England. I am

reaching out to explore the possibility of establishing a mutually

beneficial business relationship.



I work with Global Asset Management Company LLC, where I advise a network

of high-net-worth individuals, corporate organizations, and institutional

investors seeking credible investment opportunities through trusted

international partners.



Through our affiliated company, LLC International Limited (UK), we are

expanding our international network by collaborating with experienced

consultants, business representatives, and referral partners who can

introduce qualified businesses and investment opportunities.



As our referral partner, you will receive a 1% referral commission for

every successful introduction that leads to an investment, financing, or

strategic partnership through our investor network.



In addition, if a business or project you introduce successfully secures

funding, a 2% success commission on the funded amount will be shared

equally between us (1% each) in recognition of our roles in facilitating

the transaction. This arrangement also applies if you are seeking funding

for your own business or project.





Our investors are currently interested in opportunities across a wide range

of sectors, including:





Healthcare and Medical Services, Real Estate Development, Mining and

Natural Resources,Agriculture and Agribusiness, Renewable Energy,

Technology and Startup Ventures, Transportation and Logistics, Trading and

Manufacturing, Construction and Infrastructure, Other commercially viable

and profitable businesses.





If you know of any reputable entrepreneur, company, or organization seeking

investment capital, project financing, or strategic business partnerships,

I would be delighted to discuss how we can work together.



Alternatively, if you are seeking funding for your own business expansion

or a new project, you are welcome to submit your business plan, executive

summary, or project proposal for our preliminary review and assessment.



Thank you for your time and consideration. I look forward to hearing from

you and hope we have the opportunity to build a productive and long-term

professional relationship.



Kind regards,



Dr. Andrew Brian

Financial Consultant and Adviser

LLC International Limited (UK)



--00000000000012e57e065f97cda9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Sir/Madam,


Compliments of the day. I hope =

this message finds you in good health and high spirits.


I recent=

ly obtained your contact details through an international business director=

y and wanted to introduce myself. My name is Dr. Andrew Brian, and I am a F=

inancial Consultant and Adviser based in London, England. I am reaching out=

to explore the possibility of establishing a mutually beneficial business =

relationship.

I work with Global Asset Management Company LLC, where=

I advise a network of high-net-worth individuals, corporate organizations,=

and institutional investors seeking credible investment opportunities thro=

ugh trusted international partners.

Through our affiliated company, =

LLC International Limited (UK), we are expanding our international network =

by collaborating with experienced consultants, business representatives, an=

d referral partners who can introduce qualified businesses and investment o=

pportunities.

As our referral partner, you will receive a 1% referra=

l commission for every successful introduction that leads to an investment,=

financing, or strategic partnership through our investor network.

I=

n addition, if a business or project you introduce successfully secures fun=

ding, a 2% success commission on the funded amount will be shared equally b=

etween us (1% each) in recognition of our roles in facilitating the transac=

tion. This arrangement also applies if you are seeking funding for your own=

business or project.


Our investors are currently interested in =

opportunities across a wide range of sectors, including:


Healthc=

are and Medical Services, Real Estate Development, Mining and Natural Resou=

rces,Agriculture and Agribusiness, Renewable Energy, Technology and Startup=

Ventures, Transportation and Logistics, Trading and Manufacturing, Constru=

ction and Infrastructure, Other commercially viable and profitable business=

es.


If you know of any reputable entrepreneur, company, or organ=

ization seeking investment capital, project financing, or strategic busines=

s partnerships, I would be delighted to discuss how we can work together.
r>
Alternatively, if you are seeking funding for your own business expan=

sion or a new project, you are welcome to submit your business plan, execut=

ive summary, or project proposal for our preliminary review and assessment.=



Thank you for your time and consideration. I look forward to hearin=

g from you and hope we have the opportunity to build a productive and long-=

term professional relationship.

Kind regards,

Dr. Andrew Bria=

n
Financial Consultant and Adviser
LLC International Limited (UK)
v>



--00000000000012e57e065f97cda9--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Nov 2026 08:04:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPKYF-00000000DPY-3FaG

for dave@doctor.nl2k.ab.ca;

Fri, 06 Nov 2026 08:04:19 -0600

Resent-From: The Doctor

Resent-Date: Fri, 6 Nov 2026 08:04:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out196-18.us.a.dm.aliyun.com ([47.90.196.18]:49253)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPFhN-000000007gr-0Ydi

for root@nk.ca;

Fri, 06 Nov 2026 02:53:27 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.cinclineelectric.ltd:alibabak_WebBatch:483765

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.cinclineelectric.ltd; s=aliyun-cn-hangzhou;

t=1793955091; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=YYdu9cj3x4vg3BiLc1o+lW93SyPvtWaXH3H8EiP0Rn8=;

b=oLovHc4gcH7Iw39vCynAmpI9HkeiHalGJn5zU3uOAHJ8LRwbVLZrgOkDJNq0hU36X42ah75RirPAsFE5gmjkQHW2JXvoTnvs4nGg662Aq7/MwHERBFGB3qihuyWGiT+GuLEwmQGRWWnJP5hxEWairID7HTVMmGmkC47URi8v0Dg=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1793955091; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=YYdu9cj3x4vg3BiLc1o+lW93SyPvtWaXH3H8EiP0Rn8=;

b=RAlQ7eRrX2808LuyhKozG61ff/tVAlXX8/CDO1oP6f2vRoslATfBXOFsDzTtBXZUHIzXfE+XaL0Qun8LJiEDuVf874j1iv9qS/7ls0IYNu0PzTNHWSKq6PLDkjTyrYWV/GVlX+/m4v5+XaCeFo43zDKef0FktfLXsOWBwAHHXeE=

Received: from chitu-hsf(mailfrom:vip@vip.cinclineelectric.ltd fp:ma_600000367767004708 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Fri, 06 Nov 2026 16:49:15 +0800

Date: Fri, 06 Nov 2026 16:49:15 +0800

From: "Ella"

To:

Reply-To:

Message-ID:

Subject: =?UTF-8?B?Q29vcGVyYXRpb24gT3Bwb3J0dW5pdHkgb2YgUG93ZXIgRXF1aXBtZW50?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000367767004715

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, I hope this message finds you well.



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.90.196.18 listed in will-spam-for-food.eu.org]

[47.90.196.18 listed in will-spam-for-food.eu.org]

[47.90.196.18 listed in will-spam-for-food.eu.org]

[47.90.196.18 listed in will-spam-for-food.eu.org]

[47.90.196.18 listed in will-spam-for-food.eu.org]

[47.90.196.18 listed in will-spam-for-food.eu.org]

[47.90.196.18 listed in will-spam-for-food.eu.org]

[47.90.196.18 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.90.196.18 listed in dnsbl.ahbl.org]

[47.90.196.18 listed in dnsbl.ahbl.org]

[47.90.196.18 listed in dnsbl.ahbl.org]

[47.90.196.18 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.90.196.18 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.90.196.18 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.90.196.18 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.90.196.18 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[47.90.196.18 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[47.90.196.18 listed in list.dnswl.org]

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?Q29vcGVyYXRpb24gT3Bwb3J0dW5pdHkgb2YgUG93ZXIgRXF1aXBtZW50?=



Dear Sir/Madam,


style=3D"text-wrap-mode: nowrap;">


mode: nowrap;">I hope this message finds you well.


"text-wrap-mode: nowrap;">


wrap;">My name is Ella, and I represent Qianchuan Electric, a power equipment =

manufacturer with 30 years of industry experience and a 69,000 m=C2=B2 manufac=

turing facility.



pan>

We understand that transfor=

mer suppliers and manufacturers need consistent product quality, flexible prod=

uction capabilities, and effective coordination to meet different project and =

market requirements.



>

Qianchuan Electric manu=

factures a range of power equipment, including:


xt-wrap-mode: nowrap;">


p;">- Oil-Immersed Transformers for industrial and power distribution applicat=

ions

- Dry-Type Transform=

ers for commercial, industrial, and specialized installations


an style=3D"text-wrap-mode: nowrap;">- Power Transformers for substations and =

energy infrastructure projects


rap;">- Distribution Cabinets and Switchgear for integrated power distribution=

solutions

- Customized T=

ransformer Solutions based on project specifications and technical requirement=

s



n style=3D"text-wrap-mode: nowrap;">With our manufacturing experience and prod=

uct development capabilities, we are interested in exploring cooperation with =

transformer manufacturers, equipment suppliers, and electrical engineering com=

panies. Depending on your requirements, we can discuss product customization, =

equipment sourcing, and project-based supply arrangements.


style=3D"text-wrap-mode: nowrap;">


mode: nowrap;">If your company is evaluating additional manufacturing resource=

s or expanding its transformer product portfolio, we would welcome the opportu=

nity to learn more about your needs.

Best regards,

Ella

=

Qianchuan Electric


ion-Opportunity-of-Power-Equipment.jpg" _src=3D"https://i.postimg.cc/D2Tc5wk0/=

Cooperation-Opportunity-of-Power-Equipment.jpg" referrerpolicy=3D"no-referrer"=

/>



Payment phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Thu, 05 Nov 2026 16:26:00 -0600

Received: from mail-westcentralusazon11020084.outbound.protection.outlook.com ([40.93.198.84]:61560 helo=CY7PR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xP5u7-00000000GOg-0Z8Z

for dave@nk.ca;

Thu, 05 Nov 2026 16:25:59 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=kdV5JSgpg0mg0T/390UofFpFZm/NNFQaOQR4X4n8ed5J4TBItOm+B1wnajVe/xbo4Xq4K8dyexV5LITpa1s6E+2UNvXIRsl2fZQs+Qhgqmxho07LVxrCk1IweOoqnHpsoBXTZezgTlIUeytepEo7e82kd8djxalg2Ph7BEGuyF9LS3YJ1C9GUxNG9UnppH8DQgD84QpmEBIUoZkkXEf9jNzo8Z1j7TufhRCh8nCC2Iu7g5oUcXWfKMy0+IbhOHkC9bljcBsDGCvNXoHErqY5bRwuNSYZEXSonzEVQFY/PIZoPM83lfCgiKJ2cCIb6zagsixRDlOjoqg4ODLh475hZQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fbaPxmZnE1wLHWxnIiMwr9xkWrmL/OPnHPzEzvi31lc=;

b=pAjKwQGqB9+7/M2r2faQghA59elvpqY4DXyIcADfi0yXzm2yqR2Pjv1siN+L+CbLLirUU4K5bc/bqSEsazufZOat1EGE8TUgnNpFINkW+jB4wl2i4PfONMvrYXSDjzdM6L4a4+Di/P8z79UQDfRvqfVY8f2bZeOBXUGXglG5NJ6RFyjjBBPgHUOd0FK194lAIfP31D+008falONj042n6Uts6tFmJ4HeIe0IiZUi4mhR2BAV+IxyYPPdWjKuAMw31IrJwva453d3uandhoZiS5s0lbEjT+hQmFJse2Fm79eXX2/gDGgpJSxrTwHjVbHaUwHUlJbxpAyHuFm7iu2++Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

104.128.190.227) smtp.rcpttodomain=nk.ca smtp.mailfrom=kernprintservices.com;

dmarc=fail (p=quarantine sp=quarantine pct=100) action=quarantine

header.from=kernprintservices.com; dkim=none (message not signed); arc=none

(0)

Received: from BN9PR03CA0493.namprd03.prod.outlook.com (2603:10b6:408:130::18)

by BY1P223MB1183.NAMP223.PROD.OUTLOOK.COM (2603:10b6:a03:4a9::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.10; Thu, 5 Nov

2026 22:24:51 +0000

Received: from BN3PEPF00022BCB.namprd03.prod.outlook.com

(2603:10b6:408:130:cafe::9c) by BN9PR03CA0493.outlook.office365.com

(2603:10b6:408:130::18) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.592.8 via Frontend Transport; Thu, 5

Nov 2026 22:24:50 +0000

X-MS-Exchange-Authentication-Results: mx.microsoft.com 1; spf=fail (sender IP

is 104.128.190.227) smtp.mailfrom=kernprintservices.com; dkim=none (message

not signed) header.d=none;dmarc=fail action=quarantine

header.from=kernprintservices.com;

Received-SPF: Fail (protection.outlook.com: domain of kernprintservices.com

does not designate 104.128.190.227 as permitted sender)

receiver=protection.outlook.com; client-ip=104.128.190.227; helo=joint-worth;

Received: from joint-worth (104.128.190.227) by

BN3PEPF00022BCB.mail.protection.outlook.com (10.167.248.168) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.615.4

via Frontend Transport; Thu, 5 Nov 2026 22:24:49 +0000

From: noreply@kernprintservices.com

To: dave@nk.ca

Subject: Secure Message: Electronic Payment &89574;MEHPEYMYT Scheduled

MIME-Version: 1.0

Date: Thu, 05 Nov 2026 22:24:49 +0000

Content-Type: multipart/mixed;

boundary="v2kl7S8TBG0tDTthsneYWIDhfWZYiU8TrahlR2kK"

Message-ID:

<6ef37fd1-3516-43eb-b3df-246b01bf869a@BN3PEPF00022BCB.namprd03.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN3PEPF00022BCB:EE_|BY1P223MB1183:EE_

X-MS-Office365-Filtering-Correlation-Id: 8c470f45-f7a1-49b1-004a-08df3b8b9b06

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|36860700016|82310400026|34020700016|61400799027|376014|6049299003|23010399003|16102099003|10067099003|18002099003|6143699003|8096899003|4053099003|3613699012|56012099006|261028144727099003|261009223027099003|261022105027099003|261021135927099003|261026140227099003|260925021311599003|260925021911599003|260925022911599003|7840400017;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:104.128.190.227;CTRY:GB;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:joint-worth;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(36860700016)(82310400026)(34020700016)(61400799027)(376014)(6049299003)(23010399003)(16102099003)(10067099003)(18002099003)(6143699003)(8096899003)(4053099003)(3613699012)(56012099006)(261028144727099003)(261009223027099003)(261022105027099003)(261021135927099003)(261026140227099003)(260925021311599003)(260925021911599003)(260925022911599003)(7840400017);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

hdRXlV1VXnE70Ligr5dUU2Am9E20JsRf5dT6Wn8EugTCsjmJbdKUv+S+HPJz/2A9ZkbT+HBMwrFl6aAdRUdv3hqjd0OPC8sBPivnyeFf6fYMZ+8XhEJXizz4535D2tmg+PaoTZ3yvx0X+fGWOGdQmVBvs8Ge854qLDNwzgrYhXQukQuyf7Bf5KlyL71cEFsBFXwemXhrd+E63iXlGYgTMMzhkzhMGPTufc4pdJak85VjKQYzpQ2cYANA+MH0x5UaDI10XsQAltqrvsS4Q+gWeRLdWW4Sur+LaSFxyq6GZCkrPiG3Ljn/NbLrE6ydH9N/3QKfANUWxEmDrJHEdSa7Sk1pYfVBUrKtqpHVOsYy22eUbn/XHfCNSiHmURJJZ3iu76rApbN1OaRDmfoUhS4IGWhn6rdUyHP/eWEnKHPST9ezjcZGLF9bvUY1AX6U6gNq

X-OriginatorOrg: kernprintservices.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Nov 2026 22:24:49.4578

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 8c470f45-f7a1-49b1-004a-08df3b8b9b06

X-MS-Exchange-CrossTenant-Id: cadcdbb3-5905-4692-ab3c-8b3c36f8833f

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=cadcdbb3-5905-4692-ab3c-8b3c36f8833f;Ip=[104.128.190.227];Helo=[joint-worth]

X-MS-Exchange-CrossTenant-AuthSource:

BN3PEPF00022BCB.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1P223MB1183

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: . MiTek Holdings, Inc.. All Rights Reserved ---- This communication

(including any attachments) contains information which is confidential and

may also be privileged. It is for the exclusive use of th [...]



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[104.128.190.227 listed in will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

[40.93.198.84 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.198.84 listed in dnsbl.ahbl.org]

[40.93.198.84 listed in dnsbl.ahbl.org]

[40.93.198.84 listed in dnsbl.ahbl.org]

[40.93.198.84 listed in dnsbl.ahbl.org]

[104.128.190.227 listed in dnsbl.ahbl.org]

[104.128.190.227 listed in dnsbl.ahbl.org]

[104.128.190.227 listed in dnsbl.ahbl.org]

[104.128.190.227 listed in dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:9c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:18 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.198.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.198.84 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.198.84 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.198.84 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.198.84 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.198.84 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.198.84 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Secure Message: Electronic Payment &89574;MEHPEYMYT Scheduled



--v2kl7S8TBG0tDTthsneYWIDhfWZYiU8TrahlR2kK

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable



. MiTek Holdings, Inc.. All Rights Reserved ---- This communication (includ=

ing any attachments) contains information which is confidential and may als=

o be privileged. It is for the exclusive use of the intended recipient(s). =

If you are not the intended recipient(s), please note that any distribution=

, copying, or use of this communication or the information in it is strictl=

y prohibited. If you have received this communication in error, please noti=

fy the sender immediately and then destroy any copies of it. '. If the disc=

laimer can't be applied, take no action.

--v2kl7S8TBG0tDTthsneYWIDhfWZYiU8TrahlR2kK

Content-Disposition: attachment;

filename*0="SecureMessageAtt_#7227498986.zip"

Content-Type: application/zip

Content-Transfer-Encoding: base64



UEsDBBQAAAAIABizZV2UBxolhQUAAEcKAAAoAAAATmtCaWxsUGF5bWVudFJlcG9ydHNfI1JlZkJX

TkZEQVJFREwuaHRtbK1WWXPbNhB+969AkUkljSwRPCTKlOCMLCdpEzt2YruJm3FnQHIpIqIAGgQl

sZn89w5BHU7b9KnEAxd7frtYHJMXm2WGVqAKLgXFdp9gBCKSMRdziu9uX/VG+MXp0aRYzdFmmYmC

4lTrPLCs9XrdX7t9qeaWQwixitUcHyG05rFOKbYJeY5RCnye6t1sxWF9JjcUE0SQRwgaegSjXEEB

agXTIodIf2CaS4o3lzy+v+QxWgJofHqE0KTQVQZIVzlQrGGjrago8Onkp8+z8+nt9PMRQgjVKL8a

CqGYF3nGqgCFmYwW4y13ydSciwCRPYOLXgMzQDYhq/QHgvgg0bKM0h6LNJciQEsmeF5mNW6x0+it

IVxw3dMs76V8nma1m14kM6kCpBUTRc4UCN3ofztC6OHhdGKZFE2yMSRFTSA0SXimQSEeU1ykGG0o

7tl1Nasdsau4813FXfLc1K3xAedK5jcpi+UaxfUKYBRXFDsYFTo+hxU38Cl2MUoyKeOezFnEdUUx

6dvY2kKxGiwGobWDOJk3GSVSLSk2ZMY0tD2CnJHX2YKYKIj0DqrrkANS38FIbeoewSjhWUbxs8R8

NTYlF0DxM4jqYeQaFMWlytrPirSzR2a81yUK5cbUyPZMhezhvj7ek5g1Xccc/jhk7MVePNoxersi

9wf7mDnT6dZcSAFPbO0hcz32d1t3z8i4gIjlFCtZivg79hfJxY6/a2SKLx0HuSN04RLkDdGFN0TO

AVrMipQpxaomrydcmSQFNOnuW4EJvmQaENNa8bDU8I4tgeJ/WGG0YlkJRW09rkftewHVLV/WTDIm

fWcwJn1/MLYxiktFsVtgpCAHpmeyFJpiLmJIuOAaDi1UV21L17u4Xqvh0KyV62GUSKF7CVvyrKK4

5L2CiaJXgOLJcVEVGpa9kh/3WJ5n0GsYxweVrXnB/4R6O2yn6+2aD8mhwWy/Hvj0BqJScV2hKIVo

gQJ0f33+ZnZ1eTe7m1g1vH9HOiD/K1J7j8t364FPrwQgzXKkJcqVjADiA5yJNTe/fctHj97tDdi/

YSRFlPFoQXE7KYU5ntqdryum0O/Dd/dn9OfHUuqxHbng2rYbDXwvBs/zCIRxeOKECfjEdcjJyPMH

ruN4SegP/Ji4jIROOAqZ73hRfMIc8AZhGPlROIz9kDiN1+OzgvvrbYhgy3s9nakL6o9rCO8X0Qef

xjIqlyB0fw76ZQY1eVb9Grcbg8fhUgl/9aWZdWql6a5N262YadZbtTrG3VlVfvKpcdov8ozrtgHQ

6S9ZfsieX9kfi+Pqyr2fdr4q0KUSyMyeO5RS+4WRb+1brU5fQX0TQrvTr/dhzQqMyvjbgWPC3167

udhmOz2bnb989fqXX9+8vbh8d3X9/sPN7d1vHz/d/87CKIZknvIvi2wpZP6oCl2u1pvqT2I7rjcY

+qOTrrUtVkXe3EypcfyfiI4rL3LntNUaJ1K1azAmI0rG5v9zpsemOP0MxFynDbfbbRrBZEON/LMR

PIyNuy5tJJS2aOtFi7YCA+SzAdWv9/HmKmnK2Xn4Zhbg4i6zKdMybBsPnWOIQpdRAWt0x4UeTesj

qW3UtlA6BvE/0T5R2aM1zrYQaaMRpUzNZAxT3fhoVuI1I2+XJuotbPTL+ukCqt3pm0cMtE3n/yCw

ifFfgf+gxnsze27orfqDia3T6QnsY5/DLnZsqLZx1RmvuYjlup/JyFyy/VRBQo3p+Fun3THXFTHn

CnlyWT25rcwzqTkhnrwdMIpKVUhFcS650KCaM3YyN4fCbith1GwbivOSe0NlBY/d9TV4JADrxOLD

POh+utbd68fAupjJkfUpCHNv+Lb8EnCxKj/6j0F0C5JbF0F3eDNTFguuq6J7mS0CSuuAk/rdd3r0

F1BLAQIUAxQAAAAIABizZV2UBxolhQUAAEcKAAAoAAAAAAAAAAAAAACkgQAAAABOa0JpbGxQYXlt

ZW50UmVwb3J0c18jUmVmQldORkRBUkVETC5odG1sUEsFBgAAAAABAAEAVgAAAMsFAAAAAA==

--v2kl7S8TBG0tDTthsneYWIDhfWZYiU8TrahlR2kK--

Microsoft Teams phish from Algeria

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Thu, 05 Nov 2026 18:22:59 -0600

Received: from sgadz.com ([41.110.188.158]:58946 helo=mail.sgadz.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xP7ig-00000000Cnq-2ItV

for dave@nk.ca;

Thu, 05 Nov 2026 18:22:17 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.sgadz.com (Postfix) with ESMTP id 804B828507A;

Thu, 05 Nov 2026 18:34:40 +0000 (UTC)

Received: from mail.sgadz.com ([127.0.0.1])

by localhost (mail.sgadz.com [127.0.0.1]) (amavis, port 10032) with ESMTP

id VR9hTqU-PU-9; Thu, 5 Nov 2026 18:34:40 +0000 (UTC)

Received: from localhost (localhost [127.0.0.1])

by mail.sgadz.com (Postfix) with ESMTP id 4DEDC28509E;

Thu, 05 Nov 2026 18:34:40 +0000 (UTC)

X-Virus-Scanned: amavis at sgadz.com

Received: from mail.sgadz.com ([127.0.0.1])

by localhost (mail.sgadz.com [127.0.0.1]) (amavis, port 10026) with ESMTP

id dudcBk6XJPPP; Thu, 5 Nov 2026 18:34:40 +0000 (UTC)

Received: from [167.148.41.135] (unknown [172.20.140.2])

by mail.sgadz.com (Postfix) with ESMTP id 94BAD28507A;

Thu, 05 Nov 2026 18:34:28 +0000 (UTC)

Content-Type: multipart/alternative; boundary="===============0147994975=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "MicrosoftTeams Meeting "

Date: Thu, 05 Nov 2026 18:34:16 +0000

Message-Id: <20261105183428.94BAD28507A@mail.sgadz.com>



You will not see this in a MIME-aware mail reader.

--===============0147994975==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams =



=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============0147994975==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/nBk0XV16d1">Reply, Go to conversation<=

/A> =



Microsoft Teams







Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============0147994975==--

Microsoft Teams Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Thu, 05 Nov 2026 15:59:59 -0600

Received: from sgadz.com ([41.110.188.158]:48308 helo=mail.sgadz.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xP5Uq-00000000C7E-3Gfi

for dave@nl2k.ab.ca;

Thu, 05 Nov 2026 15:59:51 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.sgadz.com (Postfix) with ESMTP id C74EA284E6C;

Thu, 05 Nov 2026 18:31:09 +0000 (UTC)

Received: from mail.sgadz.com ([127.0.0.1])

by localhost (mail.sgadz.com [127.0.0.1]) (amavis, port 10032) with ESMTP

id UXLLz7tUKeBS; Thu, 5 Nov 2026 18:31:09 +0000 (UTC)

Received: from localhost (localhost [127.0.0.1])

by mail.sgadz.com (Postfix) with ESMTP id 909E4284E84;

Thu, 05 Nov 2026 18:31:09 +0000 (UTC)

X-Virus-Scanned: amavis at sgadz.com

Received: from mail.sgadz.com ([127.0.0.1])

by localhost (mail.sgadz.com [127.0.0.1]) (amavis, port 10026) with ESMTP

id Pn7U4TxQxQKB; Thu, 5 Nov 2026 18:31:09 +0000 (UTC)

Received: from [167.148.41.135] (unknown [172.20.140.2])

by mail.sgadz.com (Postfix) with ESMTP id F21D1284E6C;

Thu, 05 Nov 2026 18:30:57 +0000 (UTC)

Content-Type: multipart/alternative; boundary="===============1335020016=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "MicrosoftTeams Meeting "

Date: Thu, 05 Nov 2026 18:30:45 +0000

Message-Id: <20261105183057.F21D1284E6C@mail.sgadz.com>



You will not see this in a MIME-aware mail reader.

--===============1335020016==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams =



=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============1335020016==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/nBk0XV16d1">Reply, Go to conversation<=

/A> =



Microsoft Teams







Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============1335020016==--

Nigerian spam from Google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Nov 2026 11:32:00 -0600

Received: from mail-yx1-f49.google.com ([74.125.224.49]:53422)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xP1JZ-00000000OOO-0Ruw

for dave@doctor.nl2k.ab.ca;

Thu, 05 Nov 2026 11:31:56 -0600

Received: by mail-yx1-f49.google.com with SMTP id 956f58d0204a3-67921b515a7so2270048d50.2

for ; Thu, 05 Nov 2026 09:31:00 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1793899854; cv=none;

d=google.com; s=arc-20260327;

b=M9dDB8t4l7K4pEMhY4El0kbVN/1C1z++jE00F5eweZfGbfudWInONTIXmQr+ZgT9ul

QlHSFnTIej229uf3pyFiRYG+df3gb7jYMKUhPlUOVjN6wVW/WAmbBmPrq885aCqgzXJI

Naijg/ozE+b/ra5+OXG9OYU3hMBP764mN3MVRV6ptpsqcCAUv4YSiUWoa8t3s5sReNDc

/Ivrzv3cu6P3pC82nUh0yxj+jA95E50xuHsnPeiK+B2GKWnWU5Ez0dakaLMR2f7tPEh7

6akF4mJ5MzmLffS8mZf/MLh3x6a4ItP48/nXwdcBAqM56dhtNHYZUTG3T1wvlNtGyZA5

RovQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=GYoqRJ7/TzvjjUp24O8EUMdFyDgC73T8GcqVLxTaXvg=;

fh=DOfwldlz8T0KwF73H75UBVmx5OmMnxQr7pROXIi8QdY=;

b=cn3nNSm9/nd5r0xHV5IcVEgsD6ds6r+5AB7OKv9DYYP0TDWQCXCYdnJJXfDos43Qz3

zqjGtQ24gT93JcnK6b/XS3itK+ub2S2I7WWCk77JCKsVFfOXE8W6YFALMR739V2GMQ1s

NNFKRBKlr4zai0hEYKPBFXjLOsoh1iP8w64CDHGS/V3TbPo+3EOhkHuIAiyUl6d6ld/u

DjASzGuLIdcwRStuxaC0lPI4gI5uZ6JDUC7PIseojBgRQSMVwXidqRt6T5N9XPvvotKv

J+2oo+vFJkR2vR+Vjk2EWwokZ2NYRBUcLU6qNg4QJlxGmoxhrxga4bL8lpKrbXOKJRsr

zpzg==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1793899854; x=1794504654; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=GYoqRJ7/TzvjjUp24O8EUMdFyDgC73T8GcqVLxTaXvg=;

b=B4YeDy9tyt+i2h+o7/ltmMriNo1MB1+kFBJN5as1tlv3IHeDKKIQp2VSFnGMYUZLX3

lwVL1wfMJLePMsAKuL8KfZaSARjDbXPiwEQ+N5IOthuP6xB2mOlI+rih14RuUHJONuRw

AFB/ZbPVowzPEzYQ56sHnJe1IupyyIDgHFINITwZX8Ruo5rysOOY3l0njeNftvM+g9eF

RwqwQMJiG9NBR0rcSQpSNmnHwOcjWmubE/AKkuwueswbjNwXQMHYzBkpUFZZ+p/9TIl4

08FxPSXdtwqxCZCbAJ+Ijb3LMg6/60iQ852PxejK8bWK5MPcKt02TyM8a3XVkxf0QwqY

ghYQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793899854; x=1794504654;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=GYoqRJ7/TzvjjUp24O8EUMdFyDgC73T8GcqVLxTaXvg=;

b=vibVktKxoZAKM16JZ7TajX7v5jf1tIJ7WaNFqo6buLAbii3htOhcHgjrzRsYghXSQA

nm3S08r20Z15UtyanUNaFFM7s/1JqYwGvn6j4UFldJkgNCDrD1JcwSX6Sny89/wqQyDT

HPwJqilEDJUJC+UGJKbiOyQtt9ecdB78eI2YiTVli/9kZ1klSIKranA1avx827OQnEEB

o5So9RPQjYuHH3v9u/sgFwFSy8OWcoc9yjLgJf+fb+HkNFyA1/iznGk0DjvYxh4Kq1+/

G2h7tDaaUZzI/mRjQUJK8xges1Rd661xkAnlpLMF4oAwjJLveSVdvvBw3s0YvpegDSum

DADg==

X-Forwarded-Encrypted: i=1; AKwUvByC45JCL2kl8k1Hp/f5bSrfnmZy3UyM8OgmAElu3qOwpAKQT0bJQCuxsQw9TjlA6zmXqQ7d@doctor.nl2k.ab.ca

X-Gm-Message-State: APuU4Z+Tuh9DT0Zb2O0RDnQQYCR3sNZWWTkTohZz+hSwb9gVUEeqfIIn

kPIkKGcosdcGtZzivWvA8DmebxZwTTwSCQhp0olbUvpi5Dpuk6TKrUvp3s+/zRhJblM/UusjC+u

Baf1TjOyFt9nxO5QFtwuh2Xzz/CNM5Lc=

X-Gm-Gg: AYBFou3HVcaTgJUofh56gyzMINZ8nuLIKApVnHOtl7ivedSCgEhCWBjdYMVUhpR5O83

W2RQgOHzWv6bFtch+mb1aN3Kk7JXSUCLq96YDjETFx1GpPwtRJL47pXPOhkQIxCZuKaznWH6VRY

DEQsbmShyWQLVeaMENVpZhjY0/Ph/QCubm+0Tg4zw3uBFl4QJJ0fyOKy55mWQw1CDx+5RN1Yku7

z0m75lyAmIiqEh59uniVbouwFv5gc8ogpMv4bfsWE9DcWcpYXuKA4B0TQaseGA8KJRnMrgNLJqt

RvuXNGSZ+LRNtVaXQXKCFm8TFD3wwwHw4kZKLMyNQcRuDT+3I0WAMtWjUsCyjCDqvRXOFUF6uiI

8e7Kr4HAaflXmTHb389Ajm5zCDSVDwhftxs1DOWvagnHOtEX6gPl2ws39Rjdgt834vdE=

X-Received: by 2002:a05:690e:4503:10b0:671:506a:9fb5 with SMTP id

956f58d0204a3-67ba4fb4adbmr9296936d50.35.1793899853501; Thu, 05 Nov 2026

09:30:53 -0800 (PST)

MIME-Version: 1.0

Reply-To: aj1209479@gmail.com

From: "MRS.MARY NELSON"

Date: Thu, 5 Nov 2026 09:30:49 -0800

X-Gm-Features: AclHuK-5HqLbU2Sp0yMX4VPCKBFI8BTfQo4SDNLmRUUOLQ79a4r0AyqUjTYNPW8

Message-ID:

Subject: How are you doing today,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000087d97a065f8adb78"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 22.9

X-Spam_score_int: 229

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: How are you doing today, I want to inform you that i have

deposited your United Nations Compensation funds valued at $3.5,Million (Three

Million Five Hundred Thousand United States Dollars) to the U B [...]



Content analysis details: (22.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

[74.125.224.49 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.224.49 listed in dnsbl.ahbl.org]

[74.125.224.49 listed in dnsbl.ahbl.org]

[74.125.224.49 listed in dnsbl.ahbl.org]

[74.125.224.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.224.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.224.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.224.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.224.49 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.224.49 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mailbanga2(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mailbanga2(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[aj1209479(at)gmail.com]

1.8 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 MILLION_USD BODY: Talks about millions of dollars

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.224.49 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.224.49 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FORM Lots of money if you fill out a form

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information

1.5 MONEY_ATM_CARD Lots of money on an ATM card

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.0 FILL_THIS_FORM Fill in a form with personal information

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} How are you doing today,



--00000000000087d97a065f8adb78

Content-Type: text/plain; charset="UTF-8"



How are you doing today,

I want to inform you that i have deposited your United Nations Compensation

funds valued at $3.5,Million (Three Million Five Hundred Thousand United

States Dollars) to the U B A BANK office so call Director of Operation U B

A Bank ATM CARD and solution center MR. ADAM JOHNSON, to send your ATM

MASTER CARD of $3.5,Million immediately you call him or email him, TEL:

+229 01 466 977 84 ,Email: aj1209479@gmail.com, email Him with your full

information.



Your Full Name.......

Country...........

Home address.........

Phone Number..................

Occupation..........

Sex............

Age..............

Marital status..........

Copy of your id or passport.....



Do let me know as soon as you have received your total fund of $3.5,Million

United States Dollars ATM MASTER CARD from the U B A Bank.



Mary Nelson.



--00000000000087d97a065f8adb78

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



How are you doing today,
I want to inform you that i ha=

ve deposited your United Nations Compensation funds valued at $3.5,Million =

(Three Million Five Hundred Thousand United States Dollars) to the U B A BA=

NK office so call Director of Operation U B A Bank ATM CARD and solution ce=

nter MR. ADAM JOHNSON, to send your ATM MASTER CARD of $3.5,Million immedia=

tely you call him or email him, TEL: +229 01 466 977 84 ,Email:
mailto:aj1209479@gmail.com">aj1209479@gmail.com, email Him with your fu=

ll information.

Your Full Name.......
Country...........
Home =

address.........
Phone Number..................
Occupation..........<=

br>Sex............
Age..............
Marital status..........
Copy=

of your id or passport.....

Do let me know as soon as you have rece=

ived your total fund of $3.5,Million United States Dollars ATM MASTER CARD =

from the U B A Bank.

Mary Nelson.




--00000000000087d97a065f8adb78--