Web/SEO/App spam from Microsoft Outlook Part 2

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: fusion360.agency]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too

expensive

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.196 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.196 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Designer\Developer



This is a multi-part message in MIME format.



------=_NextPart_000_43180_01DCA811.37AFC9D0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



I'm reaching out to see if there is anything that would like to create

Shopify & Wordpress, upgrade, repair, or redesign on your website or Mobile

App.



I am a web designer/developer that can do just about anything you can

imagine at very affordable prices.



If interested. May I send you sample, Portfolio and company Details?



Thank you for your time and consideration.



Kind Regards,

Aarti





------=_NextPart_000_43180_01DCA811.37AFC9D0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hello,

I'm reaching =

out to see if there is anything that would like to create Shopify & =

Wordpress, upgrade, repair, or redesign on your website or Mobile =

App.

I am a web designer/developer that can do just about =

anything you can imagine at very affordable prices.

If =

interested. May I send you sample, Portfolio and company =

Details?

Thank you for your time and consideration.

Kind =

Regards,
Aarti



------=_NextPart_000_43180_01DCA811.37AFC9D0--



Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Feb 2026 06:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvxyu-000000008I4-1ffl

for dave@doctor.nl2k.ab.ca;

Fri, 27 Feb 2026 06:34:12 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Feb 2026 06:34:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f196.google.com ([209.85.210.196]:59723)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvwo2-00000000Fqb-0JKu

for sales@nk.ca;

Fri, 27 Feb 2026 05:19:07 -0700

Received: by mail-pf1-f196.google.com with SMTP id d2e1a72fcca58-827270d50d4so2078452b3a.3

for ; Fri, 27 Feb 2026 04:18:07 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=fusion360.agency; s=google; t=1772194681; x=1772799481; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=vsweOtuLM2Lm4e23uWITqk37YhQqG7x6BD/eg/mcspw=;

b=VmOrg+rfax8jmpYsbwjfbQ8seF+AfUPrtT3GzuLjB6Qx6HyBlPxKNG9xsg1MIQfEev

Q01xg73b/A+P5V6EV42l2lshB4KBKArVVJDBO8FivolB/guWHwRvM7Wv87AVK6fP2i1J

Tao4Nyug9huXgQNngPutGcoz2ISMzWw/kSJfdtdNC3fjR8lnHeI63AGuU84HiotcbtJy

cA5Vyfc0NMAjI8E4VZ5ISzbhKtY6h4p5qWOdOL1oJMAjBwuccUrvCW+2QiZWMssw7fY2

X2w5EmJp55AYQAGFaqr1Sww2FSluMlOdzvxuFxWYvRbP/XOUVLZIJkaLl1vqiOpkomoq

FPuA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772194681; x=1772799481;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=vsweOtuLM2Lm4e23uWITqk37YhQqG7x6BD/eg/mcspw=;

b=NfSGXV4lRp19snLXOO4Yw5LnxTZGsj0c4o/+hhdxNB1LvFoov21JKPP7f7+hEzai83

aeE+ihMUecR4fP18bfjLrYBtgqqOgrehCeqGd8gk2BTn5t0orJd+nVXj55tRIRiwjI0P

6o46JyNAFHClrna45IxKD+9aailjIPkH5mhxzwuEzqCcuhXENOY/M8bRdvGKFqkxm12X

tVaCK3f4eavTPZBpq8t8gB1+hbbHqXsPkBzlNadfEr6MZuBrilEKNvUDMeeEtmOOblmG

gmYcz81u7jyQKZsng/bgVkuDN0z7rFoGbsqSkRVpIHWJC7PTvdC+yoPHBFZ3N2Rq459P

HSHg==

X-Gm-Message-State: AOJu0Yw9F8UjQup1p2zu4PU6Hix4RjK0waeJ9P6RcfC0Gxh2C/3wNZ/S

sC93EJiWuBGu62MC0MLUTRyRUKZTmXOGmVVvg075FFDtl+P5EYN1vFUf1tj0ytopN8Pgnxj3ERM

gz91ZYK4=

X-Gm-Gg: ATEYQzz+e/xTnIfpBMfUNYS8QDpYf15EXcsL2P50001jMvRMHN5rlZrhhBvSpIP+EMn

3McIKqn4pw+Xei1PMg7ho6fEsnbOqZ8yoyuT0PD9mff7yvlJ5jHQDzt0MAE7DGnAdKJuqB0oUbR

wY9Jg0CoVZBWK3ujmHokIuZ2QX/uRWn6GdAqjjbGYcej1mECxJHUjCW1sJoV6nOZ5YxHUdhDEG9

FKSxI9tWEm6s8eWmeGZh1LemNrJdHbutilnzZDKp90TjXLigdhrc34c0t5QNsPdFB+aDMnuSqPu

KevyjkEWWVMJiG+xHBW1YyFRDHqFo6/FbIqPvjN4VZCbhJ3Inb9V9FnuZkoivAJNGccVcBxJm8G

UQ9b58DXNg2Jnvq2TQVA0hiK/0gj/PPbgortJlzB40MvoBJLNghQmYU5rDLcv57wf0YHn7brMMl

M1RpIZY/0cIPoUAX8hSG5R5hS/UsY4elROvlt8NyHfZxizqWM=

X-Received: by 2002:a05:6a00:c92:b0:827:26b0:58d6 with SMTP id d2e1a72fcca58-8274da12a0fmr2802330b3a.47.1772194680808;

Fri, 27 Feb 2026 04:18:00 -0800 (PST)

Received: from Kanhaiya ([2401:4900:1c62:8055:8d45:ff2f:995f:dac4])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-82739ff34fesm4680621b3a.42.2026.02.27.04.17.59

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 27 Feb 2026 04:18:00 -0800 (PST)

From: "Aarti"

To:

Subject: Designer\Developer

Date: Fri, 27 Feb 2026 17:35:28 +0530

Message-ID: <4317f01dca7e3$1df78dd0$59e6a970$@agency>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_43180_01DCA811.37AFC9D0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdynuCkCbIRuchtjSRGqGKSmVj8gWg==

Content-Language: en-us

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I'm reaching out to see if there is anything that would

like to create Shopify & Wordpress, upgrade, repair, or redesign on your

website or Mobile App. I am a web designer/developer that can do just about

anything you can imagine at very affordable prices.



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

Web/SEO/App spam from Microsoft Outlook Part 3

--_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);">

Hi,



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Would you be interested in building an app for your business? We are a prof=

essional Mobile Application Development Were based locally in Teddington, L=

ondon Company.



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Our Mobile App Development Services:



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Android & iOS Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

E-commerce Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Catering Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Real Estate Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Cleaning apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Lawyer Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Hospital/Clinic Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Music & video apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Photographic Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Taxi Booking App



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Gym & Fitness Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Hotel-Booking Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Spa & Salon Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Grocery Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

* ...and many more apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

I'd be pleased to send some of our created app samples & price list if =

you'd like to assess our work.



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Kind Regards,



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

David Smith



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Business Development Manager



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

*********************************








--_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_--

Web/SEO/App spam from Microsoft Outlook Part 2

Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

[52.103.43.21 listed in dnsbl.ahbl.org]

[52.103.43.21 listed in dnsbl.ahbl.org]

[52.103.43.21 listed in dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.21 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.43.21 listed in bl.score.senderscore.com]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.21 listed in sa-accredit.habeas.com]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.21 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[seoworkmarketingwebsite(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.21 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.43.21 listed in list.dnswl.org]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Mobile Apps?



--_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



Would you be interested in building an app for your business? We are a prof=

essional Mobile Application Development Were based locally in Teddington, L=

ondon Company.



Our Mobile App Development Services:



Android & iOS Apps

E-commerce Apps

Catering Apps

Real Estate Apps

Cleaning apps

Lawyer Apps

Hospital/Clinic Apps

Music & video apps

Photographic Apps

Taxi Booking App

Gym & Fitness Apps

Hotel-Booking Apps

Spa & Salon Apps

Grocery Apps

...and many more apps



I'd be pleased to send some of our created app samples & price list if you'=

d like to assess our work.



Kind Regards,

David Smith

Business Development Manager

********************************

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Feb 2026 04:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvwBq-000000002BR-0ZWP

for dave@doctor.nl2k.ab.ca;

Fri, 27 Feb 2026 04:39:26 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Feb 2026 04:39:25 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19010021.outbound.protection.outlook.com ([52.103.43.21]:53072 helo=TY3P286CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvsNA-000000009Bt-0UgF

for sales@nk.ca;

Fri, 27 Feb 2026 00:35:03 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Gv+irqd+FrDA1mMxo1m9aa1YaFNN93ZRN0w330TJhJJNyelGfK370LnIfnOMBQu/EsnizMAIPBt9oikkOzg1PbBHFeEEMHkm5Pn5TVpTE2gHUXZCFDNSIOyqpnq0xFowcJjUwXTIT95bMv+FpRLH3qSUaDaPebLha/DiH7JwJq64zfulfd/ml+7TjcyDyDUJipuUKn4eJx6ZnlSL/JZVC+0js0JpEOdLdyc2ApK/2qB/zKwGKK37Jc2TBlFC6EtOR2pc9h4L1Jet47rMI4DBsZqhIXj7VT5bmuoYrPKGthWEh8mC/k7WIKdEPSA5aiB3mhEBw/fiENsE5hZ1AFxPdA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fc/kN3E8SxRGKKRhqjjXLW15geWPLav+7qkn+kWmvxw=;

b=qnD19XAEqb38jN6/NX6HvucfMNlOjTAypmKpgQ+gUWhAERtKHbp1uGK4NqX2kcVyHO0R1D5qEt00QolpSQqUY1Wje4wfGaVnUefqoBN7d3wVTAH/ushVJfuSgEld+E5jAwU9rxfpwDDCEcqlbIbHZ4GjVHlOetLA4/grdvy2Uiwu82m1HPEy5W3KL/N4siDYDtXpbhcPJ2yZL4i1jEbQKmF91dw4dwdf3qPQ1t2LDoqV2vE7DlzcWKbXznKJ1khkcM5UMN4zPqzHx9lhZ0WBIhNDXNmK1J3I5cfy7UwW81N/ZiT8LlDgsfwzckMD+/dGz75SuOjY0d0VSlZSNzBkAA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=fc/kN3E8SxRGKKRhqjjXLW15geWPLav+7qkn+kWmvxw=;

b=EAKBeKcCrL4vXRCm9ZSTlb7lpcTLFkWqTUgUP9JVQIw3/rnosq5ViJXXgTUUiOwKH7CHADvVeap/vk0siGc8VlUs/T8XlHH3EyZtm2nHnslC2lb2RFZm2fyezdodFzpPpYEJLVwUE0wUIpwjD/dpJSL83n+G0zXMRMUK83PTsQkSGPV+ocPf1Ne8NLHYLGECmYwedjVQw6LduoX70Of+3FTrzWLHCgQ0U6kCSGyaIOoXXRbp6Im9+HH9+vo0ZC/j/PbUdD0JydrCs31Dm+gFc/iMvbAjcngDxokPnk6vjk1eU7oNoIBl/skIROsP+EbkUpL/g5EJC5rxGqQQCiz2KQ==

Received: from TYCPR01MB8309.jpnprd01.prod.outlook.com (2603:1096:400:159::14)

by OS3PR01MB7359.jpnprd01.prod.outlook.com (2603:1096:604:149::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.15; Fri, 27 Feb

2026 07:33:55 +0000

Received: from TYCPR01MB8309.jpnprd01.prod.outlook.com

([fe80::ae67:81ef:8f23:edd6]) by TYCPR01MB8309.jpnprd01.prod.outlook.com

([fe80::ae67:81ef:8f23:edd6%5]) with mapi id 15.20.9654.014; Fri, 27 Feb 2026

07:33:55 +0000

From: David Smith

Subject: Mobile Apps?

Thread-Topic: Mobile Apps?

Thread-Index: AQHcp7s0LbLDHbY2ZEyp3cLpSobTLw==

Date: Fri, 27 Feb 2026 07:33:55 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYCPR01MB8309:EE_|OS3PR01MB7359:EE_

x-ms-office365-filtering-correlation-id: 9e0efdce-bd36-4d4c-f1b5-08de75d29019

x-microsoft-antispam:

BCL:0;ARA:14566002|20031999003|39105399006|8060799015|8062599012|15030799006|15080799012|19110799012|31061999003|461199028|40105399003|3412199025|440099028|102099032|30101999003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?oQ1l0VVx28+MzVFRzqonIfp984HzW8ciTqIr1dnn/1vPemd/7KzLgiEvct?=

=?iso-8859-1?Q?eKpbC9CcyY2sQOf/U3y7TvmlazEBBxUbqOrirQuVQrmF60VAik0c6/+wUO?=

=?iso-8859-1?Q?XqR4xSJ9kAqMzrRZBLCnXAZBII/lVVUCxvj8y8bV8uP9FEE9aawpc6DOHm?=

=?iso-8859-1?Q?xckZDf9YJ4MDP7EVIPgfyuf5Fkaz5kHoEhueuJpM5DPxoDs3QNBYyrnnAM?=

=?iso-8859-1?Q?5ZKGE6JKixSPxdkFbodnp1yhxrl9UbvFL2CUbgW9X8iX+HUuuA70MA4F98?=

=?iso-8859-1?Q?J3j7M1rYwAPHmsv7KuAQr/uuNWTkSrWIgDC0hidjvdUPMwe9sVo5mVs8XS?=

=?iso-8859-1?Q?jaI48HVKzdj+VSKUW63Uxbu9TI9INUrRdFEps7dNAZcR4zMZcl6Tbbex0k?=

=?iso-8859-1?Q?UU2wggJO2KMNJXFOiHCyj7XZeBi4H0tuwWvIu4Wupy/q+3RVRemwil+I9L?=

=?iso-8859-1?Q?vWlB7nKCvNVuSS4F4tJzqmDvIiDlaIZ97nxcBiGu0hOsLKhOJMxlEUnIIn?=

=?iso-8859-1?Q?761oELHAuOEQ6/jqfZ+KY5OAANanJGPrByEHfgQQmXc8BWgsQDfhCPmfJm?=

=?iso-8859-1?Q?ehoqwYLHY8U1dXkFuoRr1BuUzTYxWJXx4vehUdANRZNJkuSBWvTboQwmoG?=

=?iso-8859-1?Q?Z0v2R9HNOIWobh3DhU6Jk03CWlctXeIITYm7rPa/Dp+9OAh8XuZOs7BpYV?=

=?iso-8859-1?Q?IkLNOXbQsco3cWJ1DiPFvTmsFb3RE5iQrge03IugnJ8XOWW/KpJRHYI/D9?=

=?iso-8859-1?Q?3yP1K+1WBWTb0+M/c/KaruI4JZy1nMy7fpYSYrZkefK2U7BNTf+QIZM1wY?=

=?iso-8859-1?Q?8PKeWZLaU9+Zwqe2jnYXtZdgihXLuKaqb5KuKd6QihNGiePlAWjCOVU8Xl?=

=?iso-8859-1?Q?CqGgA8XJiHM6QB8HyPt28uQ0EeUhMoYNiuroUL/aOqyd+r6g6J5CdK1nX+?=

=?iso-8859-1?Q?j2l7tzoNbw9YDBUs6457TA3dLdJka+RXLBktFP+M2wqKQ4gRZ9l4q/gcfe?=

=?iso-8859-1?Q?GJVYZtAgOX1W2hG/ix28I6zULs8YeyF0IdgFBN?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?Tk67gxh9/Kn7M6FRta+VxdTKHjj98kcSaXukG9GW+W5EhtKSCa0emGl2Vt?=

=?iso-8859-1?Q?XxjS0qsnGdsuStzZ3Q+AsRtP5ywkqQRThuSvygMnSvS2nPzLSTj+8hyus4?=

=?iso-8859-1?Q?HQ/f5f3VcPDxNjWQoUyKN8N0h6PC8OIlEyOJRXpEsS5SsUU6z+zKVs9XfC?=

=?iso-8859-1?Q?JG/zy49BIDE7OF3w2gAkPHdtnRXyN+bNZmrI1Sws1bzRtd0RUnfFQl8JY0?=

=?iso-8859-1?Q?51soQmN1dH++5QIpjkqHdo0iJD5DjAoe+f1Xc32Bpt7b8vbV3fYT6zWdZ4?=

=?iso-8859-1?Q?xJsukWSqg/WAGCNCUzTNN64JDMHHQn6n6lk+HuRk9CVnmME3TW9Jy+LlC+?=

=?iso-8859-1?Q?vBfQrkb7I0vpEvtenQh8qN0P5aDne1o6ZjHypm5bHHtt9Fw4WissyLfMDP?=

=?iso-8859-1?Q?KDoeOHjhs/zXuYq099KCkEVl1VGq33X5Off/8+Y+mEOWBLrT2cdj1NU0SI?=

=?iso-8859-1?Q?2ioLqLYbP03J4bjaeEx5KmNwXFdj/qWwG6Xa9aroqt7fcyrV8MT5E7dMOh?=

=?iso-8859-1?Q?cF0Du/iPWZWeLgnXI8pxyqdE3K7/vbSDjkEUfT8mRWNjrWnrVWY0wAwe9K?=

=?iso-8859-1?Q?pkIjLcGn4/yLSwfT7UfzEyxmc5uZPrzqDe4vay30p2dsVWgeINw98P1FaU?=

=?iso-8859-1?Q?SUiD9Qzr+oP6sgzoi1ceh1438DdKMrhKyl6EyJ3a1rJCsc4otaYd8YxYDq?=

=?iso-8859-1?Q?vl1IjedH0+ox7dLS8tLg5WTaqRHqNfjbTvJ65MvunK+kVKQgqcVJUto/RX?=

=?iso-8859-1?Q?+v0WwrHNkobXlxqb9JGHOLq9W3D/2Ylk73MC6+fdgw2afXiShgZLmHTgQA?=

=?iso-8859-1?Q?+7Jx6xWnyYDEG1ikg0tcQEGpuhKYN3dNsMuTwv7WrDnpUhIsrfW/CtE6oL?=

=?iso-8859-1?Q?6rMTZwtJw+Ce9VJvJKp9q4tcsxYRdXQUin+ynfdB0/Q4XmiO+GFGVC/WNJ?=

=?iso-8859-1?Q?wp1MzKyBkuPeIpiMUDxyESShFb1d6CzC8zu+Co3rR4N+fv7gJv14xJ3JIH?=

=?iso-8859-1?Q?OH0IETJUd8mjSEh6pI69Plg43J0OYyjmAX6YQ6vIug5uYRr/C7gXG9Ody4?=

=?iso-8859-1?Q?a11fa99yPxPyPDPQ3jNOoIkvGpvsKJfiXtt9Fb8qW4ZbgVA8wMc9EGOrN0?=

=?iso-8859-1?Q?bzVSJU3CEodRLdktI6L5GPCwrhdd5e4otKwmv27SvrDtZLatsa0V8bQBNv?=

=?iso-8859-1?Q?KlF6YdztKbwB0Ic5zTyIMGRKJhJRYSzoRVJP9w80y/0hFBWpah0CBDOKnj?=

=?iso-8859-1?Q?gcxlRsv5ppjWrXSM+HjAiagQ/q72Emo2szxJvNlm4zyBPZft4bSH0o7iSa?=

=?iso-8859-1?Q?IYDoegGGFxrsWZ1k01JGTI7E0eKa5D3ZaUvmh0qhvGY8dAHsudslqmfh1p?=

=?iso-8859-1?Q?6WjZliMCh2t0rwQ7vxaJ2wVHbGLc+kbkoWLre6kl/EzYxBIiSFB9m5pJR0?=

=?iso-8859-1?Q?SgHhhRM0ue8DNGisn/KrEHLffCiPmzHBbCpFX9VRInuWfbq7JTM4JO814Z?=

=?iso-8859-1?Q?MpPml5shylSWEgsRi5ZmbN1OpjfNg18+YlWrrgGIUb/g=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYCPR01MB8309.jpnprd01.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 9e0efdce-bd36-4d4c-f1b5-08de75d29019

X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2026 07:33:55.4340

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: OS3PR01MB7359

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Would you be interested in building an app for your business?

We are a professional Mobile Application Development Were based locally in

Teddington, London Company. Our Mobile App Development Services:

Dragonfly phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 15:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvja2-00000000DAW-3Xh2

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 15:11:34 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 15:11:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [178.238.45.181] (port=45286 helo=getluff.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvjRe-00000000Cli-3uhb

for doctor@nl2k.ab.ca;

Thu, 26 Feb 2026 15:03:02 -0700

Received: by getluff.com (Postfix, from userid 33)

id 1684A4E54E; Thu, 26 Feb 2026 22:02:07 +0000 (UTC)

To: doctor@nl2k.ab.ca

Subject: Your package is on hold!

Date: Thu, 26 Feb 2026 21:47:48 +0000

From: =?UTF-8?Q?Intelcom_-_Dragonfly=C2=AE?=

Message-ID:

List-Unsubscribe: mailto:bounce086-8nbcTJvrBuXsfeG@getluff.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1f25cb1ca6c3a1453dc6bd5568695907e"

Content-Transfer-Encoding: 8bit

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: notifications@ca.dragonflyinternational.com| French version

follows



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.1 TW_UX BODY: Odd Letter Triples with UX

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 A_HREF_NOWHERE A link tag with empty href

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 HREF_EMPTY_NORDNS Empty href + no rDNS

2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Your package is on hold!







notifications@ca.dragonflyinternational.com|



French version follows



Intelcom is now Dragonfly! Learn more



Tracking # INTLCMH868877879

Hi,

You have a package waiting to be delivered!



Your merchant has handed us your package INTLCMH868877879.







However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 4.95 payable via our secure form below:

Access the form



Questions? Take a look at our FAQ.



This is an automated email, please do not reply.







Intelcom est maintenant Dragonfly! En savoir plus



# de suivi INTLCMH868877879

Bonjour,

Vous avez un colis en attente de livraison!



Votre marchand nous a remis votre colis INTLCMH868877879.







Cependant, vous avez un colis en attente de livraison en raison du non-paiement des frais de douane, des taxes et des frais de courtage auxquels il est soumis conformément aux conditions générales de l'Agence des services frontaliers du Canada, d'un montant de 4.95 $ CA, payable via notre formulaire sécurisé ci-dessous :

Accéder au formulaire



Des questions? Consultez notre FAQ.



Ceci est un message automatisé, veuillez ne pas répondre à ce courriel.





Dragonfly phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 15:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvjZz-00000000DAK-0bnJ

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 15:11:31 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 15:11:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [178.238.45.181] (port=37302 helo=getluff.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvjK5-000000008Vz-47tP

for root@mail.nl2k.ab.ca;

Thu, 26 Feb 2026 14:55:14 -0700

Received: by getluff.com (Postfix, from userid 33)

id 222E749EA1; Thu, 26 Feb 2026 21:53:33 +0000 (UTC)

To: root@mail.nl2k.ab.ca

Subject: Your package is on hold!

Date: Thu, 26 Feb 2026 21:47:48 +0000

From: =?UTF-8?Q?Intelcom_-_Dragonfly=C2=AE?=

Message-ID: <415bb196958ecaa8ac516e47d3fa1499@getluff.com>

List-Unsubscribe: mailto:bounce086-8nbcTJvrBuXsfeG@getluff.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="114734529c7e6ddcf9dadacb3d7358afd"

Content-Transfer-Encoding: 8bit

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: notifications@ca.dragonflyinternational.com| French version

follows



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.1 TW_UX BODY: Odd Letter Triples with UX

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 A_HREF_NOWHERE A link tag with empty href

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 HREF_EMPTY_NORDNS Empty href + no rDNS

2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Your package is on hold!







French version follows



Intelcom is now Dragonfly! Learn more



Tracking # INTLCMH868877879

Hi,

You have a package waiting to be delivered!



Your merchant has handed us your package INTLCMH868877879.







However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 4.95 payable via our secure form below:

Access the form



Questions? Take a look at our FAQ.



This is an automated email, please do not reply.







Intelcom est maintenant Dragonfly! En savoir plus



# de suivi INTLCMH868877879

Bonjour,

Vous avez un colis en attente de livraison!



Votre marchand nous a remis votre colis INTLCMH868877879.







Cependant, vous avez un colis en attente de livraison en raison du non-paiement des frais de douane, des taxes et des frais de courtage auxquels il est soumis conformément aux conditions générales de l'Agence des services frontaliers du Canada, d'un montant de 4.95 $ CA, payable via notre formulaire sécurisé ci-dessous :

Accéder au formulaire



Des questions? Consultez notre FAQ.



Ceci est un message automatisé, veuillez ne pas répondre à ce courriel.







Oil and gas consulting spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 14:54:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvjIS-000000004Nv-0fik

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 14:53:24 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 14:53:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [162.240.175.204] (port=59734 helo=162-240-175-204.unifiedlayer.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvjD1-000000002lW-3EMD

for sales@nk.ca;

Thu, 26 Feb 2026 14:47:56 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=acolyte.net

; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID

:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=9H65W6WYg2izDBX6Qncvyk4spLNI0g13DUBC3mBVGko=; b=os0I95AIGrVQuOeKJxzx1hpydm

z8Z+wxFE/aOYhg0XEx0CF62/qVY4gn37oWwJlmeUhkuGkm4Tx1ODi1yWnUqDQKuRw60IJ22mF0S2e

BWCNZgrkaptLyNc4U67iHdnWffx2HQ96dstwKCR7DfuRbPHXP3tUt8PPauXy/FC3F3Xhcbvs0PM+2

79luWhGXs4ejdXKqRouw6Zw7NzdAlaynt9eKfj3omYrPuz8PUvjlSvCr1rmEkcR5YrA+0a0MxKkK3

tv0ZcFN58ZybM4l5nqffTs+U8XKSWLzcR0R6PPod03A64erghoiIYrQhIDq2QS6BR4KN0qqzTGcC/

IZammbcA==;

Received: from [173.239.224.91] (port=22370 helo=[173.239.224.97])

by server-605666.acolytehosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.1)

(envelope-from )

id 1vvjCG-000000007Gv-1ZLx

for sales@nk.ca;

Thu, 26 Feb 2026 16:47:00 -0500

Reply-To: info@5sogc.com

From: "5 STAR OIL AND GAS CONSULTING LLC"

To: sales@nk.ca

Subject: OFFER

Date: 26 Feb 2026 13:46:55 -0800

Message-ID: <20260226121141.FF25B735F4E5919D@acolyte.net>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server-605666.acolytehosting.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - acolyte.net

X-Get-Message-Sender-Via: server-605666.acolytehosting.com: authenticated_id: webmaster@acolyte.net

X-Authenticated-Sender: server-605666.acolytehosting.com: webmaster@acolyte.net

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: TO whom it may concern, In need of affordable and reliable

petroleum storage, logistics, and handling services? We offer dependable

solutions aligned with international standards across key ports such as Rotterdam,

Fujairah, [...]



Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[173.239.224.91 listed in dnsbl.ahbl.org]

[173.239.224.91 listed in dnsbl.ahbl.org]

[173.239.224.91 listed in dnsbl.ahbl.org]

[173.239.224.91 listed in dnsbl.ahbl.org]

[162.240.175.204 listed in dnsbl.ahbl.org]

[162.240.175.204 listed in dnsbl.ahbl.org]

[162.240.175.204 listed in dnsbl.ahbl.org]

[162.240.175.204 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[173.239.224.91 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[173.239.224.91 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[173.239.224.91 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[173.239.224.91 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname

(Split IP)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 HELO_MISC_IP Looking for more Dynamic IP Relays

Subject: {SPAM?} OFFER













TO whom it may concern,<=

br>
In need of affordable and reliable petroleum storage, logistics, and=

handling services?
We offer dependable solutions aligned with internati=

onal standards across key ports such as Rotterdam, Fujairah, Houston, and J=

urong.

From tank storage and terminal handling to fuel injection, bl=

ending, and vessel support, our team ensures seamless and compliant operati=

ons at every stage. With over a decade of experience, we are trusted by cli=

ents worldwide for:

🔹Strategic storage
🔹Efficient=

terminal handling
🔹Blending and fuel injection
🔹24/7=

operational support
🔹Full compliance with industry standards
>
If you're preparing to lift products and need a logistics partner that=

gets the job done right on time and within budget, we invite you to connec=

t with us today.

Reach out for more information or send us a direct=

message.

Regards,



Dragonfly phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 13:56:00 -0700

Received: from [178.238.45.181] (port=33484 helo=getluff.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vviOR-00000000LMi-3YTb

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 13:55:39 -0700

Received: by getluff.com (Postfix, from userid 33)

id A2622480FA; Thu, 26 Feb 2026 20:53:33 +0000 (UTC)

To: dave@doctor.nl2k.ab.ca

Subject: Your package is on hold!

Date: Thu, 26 Feb 2026 20:52:23 +0000

From: =?UTF-8?Q?Intelcom_-_Dragonfly=C2=AE?=

Message-ID:

List-Unsubscribe: mailto:bounce463-e1GCYBNRGKSyXsB@getluff.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1183a86917c7870113c4843ef9e4b5dc1"

Content-Transfer-Encoding: 8bit

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: notifications@ca.dragonflyinternational.com| French version

follows



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.1 TW_UX BODY: Odd Letter Triples with UX

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 A_HREF_NOWHERE A link tag with empty href

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text

0.2 HREF_EMPTY_NORDNS Empty href + no rDNS

Subject: {SPAM?} Your package is on hold!







French version follows



Intelcom is now Dragonfly! Learn more



Tracking # INTLCMH868877879

Hi,

You have a package waiting to be delivered!



Your merchant has handed us your package INTLCMH868877879.







However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 4.95 payable via our secure form below:

Access the form



Questions? Take a look at our FAQ.



This is an automated email, please do not reply.







Intelcom est maintenant Dragonfly! En savoir plus



# de suivi INTLCMH868877879

Bonjour,

Vous avez un colis en attente de livraison!



Votre marchand nous a remis votre colis INTLCMH868877879.







Cependant, vous avez un colis en attente de livraison en raison du non-paiement des frais de douane, des taxes et des frais de courtage auxquels il est soumis conformément aux conditions générales de l'Agence des services frontaliers du Canada, d'un montant de 4.95 $ CA, payable via notre formulaire sécurisé ci-dessous :

Accéder au formulaire



Des questions? Consultez notre FAQ.



Ceci est un message automatisé, veuillez ne pas répondre à ce courriel.





Dragonfly phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 13:53:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vviL7-00000000HRn-2XGf

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 13:52:05 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 13:52:05 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [178.238.45.181] (port=37684 helo=getluff.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvi6s-00000000Ctg-43YN

for bin@nl2k.ab.ca;

Thu, 26 Feb 2026 13:37:30 -0700

Received: by getluff.com (Postfix, from userid 33)

id C6EDA4894D; Thu, 26 Feb 2026 20:36:34 +0000 (UTC)

Date: Thu, 26 Feb 2026 20:35:47 +0000

To: bin@nl2k.ab.ca

From: =?UTF-8?Q?Intelcom_-_Dragonfly=C2=AE?=

Subject: Your package is on hold!

Message-ID: <97bb16921e29a7fbf6379411e3e6692f@getluff.com>

List-Unsubscribe: mailto:bounce137-yM6kN2CAypZhgCT@getluff.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="18ecbc41b0416bf11ccbd6295087aeeda"

Content-Transfer-Encoding: 8bit

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: notifications@ca.dragonflyinternational.com| French version

follows



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.1 TW_UX BODY: Odd Letter Triples with UX

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 A_HREF_NOWHERE A link tag with empty href

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 HREF_EMPTY_NORDNS Empty href + no rDNS

2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Your package is on hold!







notifications@ca.dragonflyinternational.com|



French version follows



Intelcom is now Dragonfly! Learn more



Tracking # INTLCMH868877879

Hi,

You have a package waiting to be delivered!



Your merchant has handed us your package INTLCMH868877879.







However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 4.95 payable via our secure form below:

Access the form



Questions? Take a look at our FAQ.



This is an automated email, please do not reply.







Intelcom est maintenant Dragonfly! En savoir plus



# de suivi INTLCMH868877879

Bonjour,

Vous avez un colis en attente de livraison!



Votre marchand nous a remis votre colis INTLCMH868877879.







Cependant, vous avez un colis en attente de livraison en raison du non-paiement des frais de douane, des taxes et des frais de courtage auxquels il est soumis conformément aux conditions générales de l'Agence des services frontaliers du Canada, d'un montant de 4.95 $ CA, payable via notre formulaire sécurisé ci-dessous :

Accéder au formulaire



Des questions? Consultez notre FAQ.



Ceci est un message automatisé, veuillez ne pas répondre à ce courriel.





Dragonfly phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 13:53:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vviLB-00000000HWa-1aoJ

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 13:52:09 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 13:52:09 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [178.238.45.181] (port=57180 helo=getluff.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvi9Z-00000000CyY-27hy

for root@nl2k.ab.ca;

Thu, 26 Feb 2026 13:40:17 -0700

Received: by getluff.com (Postfix, from userid 33)

id 8E27748446; Thu, 26 Feb 2026 20:38:35 +0000 (UTC)

Date: Thu, 26 Feb 2026 20:35:47 +0000

To: root@nl2k.ab.ca

From: =?UTF-8?Q?Intelcom_-_Dragonfly=C2=AE?=

Subject: Your package is on hold!

Message-ID:

List-Unsubscribe: mailto:bounce137-yM6kN2CAypZhgCT@getluff.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1a3e91d6025a19fc6336a65451c51e6b0"

Content-Transfer-Encoding: 8bit

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.







notifications@ca.dragonflyinternational.com|



French version follows



Intelcom is now Dragonfly! Learn more



Tracking # INTLCMH868877879

Hi,

You have a package waiting to be delivered!



Your merchant has handed us your package INTLCMH868877879.







However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 4.95 payable via our secure form below:

Access the form



Questions? Take a look at our FAQ.



This is an automated email, please do not reply.







Intelcom est maintenant Dragonfly! En savoir plus



# de suivi INTLCMH868877879

Bonjour,

Vous avez un colis en attente de livraison!



Votre marchand nous a remis votre colis INTLCMH868877879.







Cependant, vous avez un colis en attente de livraison en raison du non-paiement des frais de douane, des taxes et des frais de courtage auxquels il est soumis conformément aux conditions générales de l'Agence des services frontaliers du Canada, d'un montant de 4.95 $ CA, payable via notre formulaire sécurisé ci-dessous :

Accéder au formulaire



Des questions? Consultez notre FAQ.



Ceci est un message automatisé, veuillez ne pas répondre à ce courriel.





Dragonfly phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 13:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vviKk-00000000Gqr-24j7

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 13:51:42 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 13:51:42 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [178.238.45.181] (port=60434 helo=getluff.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvhhQ-00000000Bxy-2qvN

for doctor@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 13:11:12 -0700

Received: by getluff.com (Postfix, from userid 33)

id 3283A486B1; Thu, 26 Feb 2026 20:09:52 +0000 (UTC)

Date: Thu, 26 Feb 2026 20:05:11 +0000

To: doctor@doctor.nl2k.ab.ca

From: =?UTF-8?Q?Dragonfly=C2=AE?=

Subject: Your package is on hold!

Message-ID: <2f328f406248adf97c43d3f0fe8327f3@getluff.com>

List-Unsubscribe: mailto:bounce923-tra4W4dO1apo2Ew@getluff.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="159a048b8e55a842ca8bcb6a7b90b64ee"

Content-Transfer-Encoding: 8bit

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: notifications@ca.dragonflyinternational.com| French version

follows



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.1 TW_UX BODY: Odd Letter Triples with UX

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[178.238.45.181 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[178.238.45.181 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[178.238.45.181 listed in sa-accredit.habeas.com]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[178.238.45.181 listed in sa-trusted.bondedsender.org]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 A_HREF_NOWHERE A link tag with empty href

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text

0.2 HREF_EMPTY_NORDNS Empty href + no rDNS

Subject: {SPAM?} Your package is on hold!







notifications@ca.dragonflyinternational.com|



French version follows



Intelcom is now Dragonfly! Learn more



Tracking # INTLCMH868877879

Hi,

You have a package waiting to be delivered!



Your merchant has handed us your package INTLCMH868877879.







However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 4.95 payable via our secure form below:

Access the form



Questions? Take a look at our FAQ.



This is an automated email, please do not reply.







Intelcom est maintenant Dragonfly! En savoir plus



# de suivi INTLCMH868877879

Bonjour,

Vous avez un colis en attente de livraison!



Votre marchand nous a remis votre colis INTLCMH868877879.







Cependant, vous avez un colis en attente de livraison en raison du non-paiement des frais de douane, des taxes et des frais de courtage auxquels il est soumis conformément aux conditions générales de l'Agence des services frontaliers du Canada, d'un montant de 4.95 $ CA, payable via notre formulaire sécurisé ci-dessous :

Accéder au formulaire



Des questions? Consultez notre FAQ.



Ceci est un message automatisé, veuillez ne pas répondre à ce courriel.





Dragonfly phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 13:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vviKg-00000000Gjw-1jjd

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 13:51:38 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 13:51:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [178.238.45.181] (port=38370 helo=getluff.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvhdx-00000000Bpk-043p

for root@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 13:07:37 -0700

Received: by getluff.com (Postfix, from userid 33)

id 3FC8F42572; Thu, 26 Feb 2026 20:06:41 +0000 (UTC)

Date: Thu, 26 Feb 2026 20:05:11 +0000

To: root@doctor.nl2k.ab.ca

From: =?UTF-8?Q?Dragonfly=C2=AE?=

Subject: Your package is on hold!

Message-ID: <3f1711ddaf7d3b86f33689a787c82fc4@getluff.com>

List-Unsubscribe: mailto:bounce923-tra4W4dO1apo2Ew@getluff.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1473317d9ca1f296a0376b93a755d0b41"

Content-Transfer-Encoding: 8bit

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: notifications@ca.dragonflyinternational.com| French version

follows



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.1 TW_UX BODY: Odd Letter Triples with UX

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 A_HREF_NOWHERE A link tag with empty href

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 HREF_EMPTY_NORDNS Empty href + no rDNS

2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Your package is on hold!







notifications@ca.dragonflyinternational.com|



French version follows



Intelcom is now Dragonfly! Learn more



Tracking # INTLCMH868877879

Hi,

You have a package waiting to be delivered!



Your merchant has handed us your package INTLCMH868877879.







However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 4.95 payable via our secure form below:

Access the form



Questions? Take a look at our FAQ.



This is an automated email, please do not reply.







Intelcom est maintenant Dragonfly! En savoir plus



# de suivi INTLCMH868877879

Bonjour,

Vous avez un colis en attente de livraison!



Votre marchand nous a remis votre colis INTLCMH868877879.







Cependant, vous avez un colis en attente de livraison en raison du non-paiement des frais de douane, des taxes et des frais de courtage auxquels il est soumis conformément aux conditions générales de l'Agence des services frontaliers du Canada, d'un montant de 4.95 $ CA, payable via notre formulaire sécurisé ci-dessous :

Accéder au formulaire



Des questions? Consultez notre FAQ.



Ceci est un message automatisé, veuillez ne pas répondre à ce courriel.







Web/SEO/App spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 13:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vviKL-00000000G8q-3nPs

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 13:51:17 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 13:51:17 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f196.google.com ([209.85.214.196]:50248)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvhKg-00000000B9H-1CqX

for sales@nk.ca;

Thu, 26 Feb 2026 12:47:44 -0700

Received: by mail-pl1-f196.google.com with SMTP id d9443c01a7336-2aaf5d53eaaso8940795ad.0

for ; Thu, 26 Feb 2026 11:46:47 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=theappsdeveloper-com.20230601.gappssmtp.com; s=20230601; t=1772135202; x=1772740002; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=rtss9R8X3HZ8qmfPGo1t3Rt3bGpf+iljrTw47Alutu8=;

b=YLrh+owLjoDoHFEdm5IMMo27u9uL88ZsfQP0yZzIwHtTd7Szhw/FYju90+xTY2xdeI

PirYWtLmi9AK3+WNp/phAHTp+JqINCY9VecHshcOjm6flK5lUw6bIdicjr08gvRkKMi/

kW14X2/VTbpoD31SzfD7lxLuSaeb76/zKuzhdUNe56VYaIQWou9z/yhAOCynE3WIfzMH

tqQsy4pwu7EXaewvA8tklJWKsOfSMeuoZcLD3Tmf5pGjbAmqU7q9WNMc1CH8AeNkeJIV

0y11Wkc8heWyfxyd5Z5K6x0dyfElB7QXPchzL7Ui8nxKKinVcPjDwI/SI1PixFPACJQR

g9hQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772135202; x=1772740002;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=rtss9R8X3HZ8qmfPGo1t3Rt3bGpf+iljrTw47Alutu8=;

b=wEmDRyhMdG9Htg41nvWTu0pa7nflkc/Y97q36iCJzh4Fr6LgcxNs44LaIIMZQvoBrt

pfMlKC7XslRshbjLa7T8Oplqz50cV9ignsMxe+KYru6cPntVNlaOxw3BAQMBSGBrSOvX

jQkNRjY4LN+4yb7pv8yN1Lr5DIJvYi1OoVa8zkh9ZXdNaEmj8r4tO4GllYiMgUY4GeN5

b+thqgTpYb+P9eHeQXaj2TnpEW3YFVlEnPK6jWoTm7GfMr1NvMxFqc7ibwy5L3M4/Mge

LvU0dQW2+kua95807gmsS+Vv92OEfeVdmKVYFqK6/pKOuoBGV81Z47JweOULEYItZYVQ

z2fg==

X-Gm-Message-State: AOJu0YyiAEkC/eGGnOOZKa8MwOERN36UD22a1XhacOIQL2K2+JRN10Sv

BskXR+66yusepqx7VuD8v66JHuiX9Rlyhp27sr2ptiDycDcMKKOK2tBZHeyR41BFld1+Ro90qpU

a20xSpbQ=

X-Gm-Gg: ATEYQzwI1wGOx2P1X79Pd/kXHCJ+Lafs7zQAye5ldsV825jJdPvfr85K7N69xfERWLI

1HmNF3kslkHwCX7MafQdf3fSLScihj9lS0SjxGZ3xRJOgUN6/l8Cl+VG+YM8uSvxUQvw/R+8z8n

dnMhQK40MUdNVrQ9/uDYmcNNBildmrK5rdQH1i9u5622e90MIoYRaFUEUHg9RWLVJpCZeWUXNdf

s+oM9EuJOeVRtH/e8dek2iRlWEMvG0NmzGRx67YN1VZFTcQ1JP0LK8tpKilJFYbYONuAEGoW1mm

dAdbUtAd+vt16IcXRX14EumGHbAy5DFHYcXlD7ENEnoLTwemBgqJSQuC782GRyOpEA6mek6LIu/

RwWDDxx8UOwaWynV7VhR+x96CZ1kC7vhh5s2+Im2CWfKgjRaSOwmevuBVxovvBj3PspwPVg4uXx

jsNZ3YXS7acYk37T/IRvXFMOMGuAokFXjXNUkh9BXNInz+Itky

X-Received: by 2002:a17:903:acb:b0:2aa:e843:ab11 with SMTP id d9443c01a7336-2ae2e48010emr828215ad.28.1772135201414;

Thu, 26 Feb 2026 11:46:41 -0800 (PST)

Received: from dell ([2401:4900:8842:e853:4993:b5cf:42ee:ca3d])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2adfb5b3889sm34205425ad.16.2026.02.26.11.46.40

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 26 Feb 2026 11:46:41 -0800 (PST)

From: "lovely"

To:

Subject: S-E-O Proposal !!

Date: Fri, 27 Feb 2026 01:12:14 +0530

Message-ID: <526001dca758$9fc39d30$df4ad790$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_5261_01DCA786.B97BD930"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdynUdY5wZqRHzKgSIOfrD4ZJSr/Cw==

Content-Language: en-in

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello , We help websites rank on Google's first page and increase

visibility on Yahoo, Facebook, LinkedIn, YouTube, Instagram, and Pinterest.

Would you like to see our SEO packages and pricing?



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in will-spam-for-food.eu.org]

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in will-spam-for-food.eu.org]

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in will-spam-for-food.eu.org]

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in will-spam-for-food.eu.org]

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in will-spam-for-food.eu.org]

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in will-spam-for-food.eu.org]

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in will-spam-for-food.eu.org]

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.196 listed in dnsbl.ahbl.org]

[209.85.214.196 listed in dnsbl.ahbl.org]

[209.85.214.196 listed in dnsbl.ahbl.org]

[209.85.214.196 listed in dnsbl.ahbl.org]

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in dnsbl.ahbl.org]

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in dnsbl.ahbl.org]

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in dnsbl.ahbl.org]

[2401:4900:8842:e853:4993:b5cf:42ee:ca3d listed]

[in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.196 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.196 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.196 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} S-E-O Proposal !!

Web/SEO/App spam from Google Gmail Part 2





This is a multi-part message in MIME format.



------=_NextPart_000_5261_01DCA786.B97BD930

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello ,







We help websites rank on Google's first page and increase visibility on

Yahoo, Facebook, LinkedIn, YouTube, Instagram, and Pinterest.







Would you like to see our SEO packages and pricing?







If you do not wish to receive emails from us, please reply "NO".







Kind Regards



lovely





------=_NextPart_000_5261_01DCA786.B97BD930

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">


class=3DMsoNoSpacing>Hello =

,


style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>We help websites =

rank on Google’s first page and increase visibility on Yahoo, =

Facebook, LinkedIn, YouTube, Instagram, and =

Pinterest.


style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>Would you like to =

see our SEO packages and pricing?


class=3DMsoNoSpacing>
style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>If you do not wish =

to receive emails from us, please reply

style=3D'font-family:"Calibri","sans-serif"'>"NO"

g>.


class=3DMsoNoSpacing>
style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>Kind =

Regards


style=3D'font-size:12.0pt;font-family:"Times New =

Roman","serif"'>lovely



------=_NextPart_000_5261_01DCA786.B97BD930--