Mini Wifi Camera phish from Google User

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 11:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP1LA-00000000Jcs-3ICf

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 11:01:16 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 11:01:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 84.125.240.35.bc.googleusercontent.com ([35.240.125.84]:46946 helo=mail.issuegate.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from <2f528ce841@freenet-mobilfunk.de>)

id 1wP0tH-00000000HJg-0XjS

for doctor@doctor.nl2k.ab.ca;

Mon, 18 May 2026 10:32:34 -0600

Received: by mail.issuegate.com (Postfix, from userid 1000)

id C2C1F457CF; Mon, 18 May 2026 16:31:35 +0000 (UTC)

To: doctor@doctor.nl2k.ab.ca

From: "=?UTF-8?B?U2VjdXJpdHkgQWxlcnRz?="

Subject: =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=

Date: Mon, 18 May 2026 16:31:35 +0000

Message-ID: <98a7894e939aa5bd2f474852@mx.google.com>

List-Unsubscribe:

Precedence: bulk

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Mini WiFi Camera SMART SECURITY SOLUTIONS FOR HOME & BUSINESS

Mini WiFi Camera With HD Monitoring Protect your office, warehouse, storefront,

or home with a compact smart camera designed for real-time monitoring, mot

[...]



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

[35.240.125.84 listed in dnsbl.ahbl.org]

[35.240.125.84 listed in dnsbl.ahbl.org]

[35.240.125.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 TVD_RCVD_IP Message was received from an IP address

1.0 HK_RANDOM_FROM From username looks random

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.240.125.84 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=





SMART SECURITY SOLUTIONS FOR HOME & BUSINESS

Mini WiFi Camera

Mini WiFi Camera With HD Monitoring

Protect your office, warehouse, storefront, or home with a compact smart camera designed for real-time monitoring, motion alerts, and remote access.

View Today's Discount

Mini Camera

Key Features



HD video quality with wide-angle coverage

Motion detection notifications

Night vision support

Wireless setup in minutes

Compact and discreet design

Remote viewing from smartphone or tablet



Recommended For

✔ Office monitoring

✔ Retail stores

✔ Home security

✔ Storage & inventory supervision

✔ Travel and temporary installations

Customer Review



“The installation was quick and the mobile access works perfectly. Excellent value for small business monitoring.”



— Verified Customer

Order Now

🔒 Secure Checkout | 🚚 Fast Delivery | 💬 Customer Support

You are receiving this email because you subscribed to updates from our partners or business offers.



If you no longer wish to receive these emails, you may unsubscribe here . Maple North Solutions Inc.

250 Yonge Street, Suite 2201

Toronto, ON M5B 2L7

Canada



© 2026 Maple North Solutions Inc. All Rights Reserved.

Mini Wifi Camera phish from Google User

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <557b381df1@freenet-mobilfunk.de>

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 10:33:00 -0600

Received: from 84.125.240.35.bc.googleusercontent.com ([35.240.125.84]:49098 helo=mail.issuegate.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from <557b381df1@freenet-mobilfunk.de>)

id 1wP0sy-00000000HIU-3DhF

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 10:32:19 -0600

Received: by mail.issuegate.com (Postfix, from userid 1000)

id 833A94569C; Mon, 18 May 2026 16:31:15 +0000 (UTC)

To: dave@doctor.nl2k.ab.ca

From: "=?UTF-8?B?U2VjdXJpdHkgQWxlcnRz?="

Subject: =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=

Date: Mon, 18 May 2026 16:31:15 +0000

Message-ID: <248df5364d5e67dfa05a2f6b@mx.google.com>

List-Unsubscribe:

Precedence: bulk

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Mini WiFi Camera SMART SECURITY SOLUTIONS FOR HOME & BUSINESS

Mini WiFi Camera With HD Monitoring Protect your office, warehouse, storefront,

or home with a compact smart camera designed for real-time monitoring, mot

[...]



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.240.125.84 listed in bl.score.senderscore.com]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

[35.240.125.84 listed in dnsbl.ahbl.org]

[35.240.125.84 listed in dnsbl.ahbl.org]

[35.240.125.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 TVD_RCVD_IP Message was received from an IP address

1.0 HK_RANDOM_FROM From username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=







SMART SECURITY SOLUTIONS FOR HOME & BUSINESS

Mini WiFi Camera

Mini WiFi Camera With HD Monitoring

Protect your office, warehouse, storefront, or home with a compact smart camera designed for real-time monitoring, motion alerts, and remote access.

View Today's Discount

Mini Camera

Key Features



HD video quality with wide-angle coverage

Motion detection notifications

Night vision support

Wireless setup in minutes

Compact and discreet design

Remote viewing from smartphone or tablet



Recommended For

✔ Office monitoring

✔ Retail stores

✔ Home security

✔ Storage & inventory supervision

✔ Travel and temporary installations

Customer Review



“The installation was quick and the mobile access works perfectly. Excellent value for small business monitoring.”



— Verified Customer

Order Now

🔒 Secure Checkout | 🚚 Fast Delivery | 💬 Customer Support

You are receiving this email because you subscribed to updates from our partners or business offers.



If you no longer wish to receive these emails, you may unsubscribe here . Maple North Solutions Inc.

250 Yonge Street, Suite 2201

Toronto, ON M5B 2L7

Canada



© 2026 Maple North Solutions Inc. All Rights Reserved.

Mini Wifi Camera phish from Google User

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 11:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP1Kt-00000000JbI-2Seh

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 11:00:59 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 11:00:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 84.125.240.35.bc.googleusercontent.com ([35.240.125.84]:49100 helo=mail.issuegate.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from <4c43bae6e6@freenet-mobilfunk.de>)

id 1wP0sy-00000000HIV-3DcY

for root@doctor.nl2k.ab.ca;

Mon, 18 May 2026 10:32:19 -0600

Received: by mail.issuegate.com (Postfix, from userid 1000)

id AE5864569D; Mon, 18 May 2026 16:31:15 +0000 (UTC)

To: root@doctor.nl2k.ab.ca

From: "=?UTF-8?B?U2VjdXJpdHkgQWxlcnRz?="

Subject: =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=

Date: Mon, 18 May 2026 16:31:15 +0000

Message-ID: <3c7f8b7c5cfbcd460cff99d4@mx.google.com>

List-Unsubscribe:

Precedence: bulk

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Mini WiFi Camera SMART SECURITY SOLUTIONS FOR HOME & BUSINESS

Mini WiFi Camera With HD Monitoring Protect your office, warehouse, storefront,

or home with a compact smart camera designed for real-time monitoring, mot

[...]



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.240.125.84 listed in bl.score.senderscore.com]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

[35.240.125.84 listed in dnsbl.ahbl.org]

[35.240.125.84 listed in dnsbl.ahbl.org]

[35.240.125.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.240.125.84 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

[35.240.125.84 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 TVD_RCVD_IP Message was received from an IP address

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=





Mini WiFi Camera

Mini WiFi Camera With HD Monitoring

Protect your office, warehouse, storefront, or home with a compact smart camera designed for real-time monitoring, motion alerts, and remote access.

View Today's Discount

Mini Camera

Key Features



HD video quality with wide-angle coverage

Motion detection notifications

Night vision support

Wireless setup in minutes

Compact and discreet design

Remote viewing from smartphone or tablet



Recommended For

✔ Office monitoring

✔ Retail stores

✔ Home security

✔ Storage & inventory supervision

✔ Travel and temporary installations

Customer Review



“The installation was quick and the mobile access works perfectly. Excellent value for small business monitoring.”



— Verified Customer

Order Now

🔒 Secure Checkout | 🚚 Fast Delivery | 💬 Customer Support

You are receiving this email because you subscribed to updates from our partners or business offers.



If you no longer wish to receive these emails, you may unsubscribe here . Maple North Solutions Inc.

250 Yonge Street, Suite 2201

Toronto, ON M5B 2L7

Canada



© 2026 Maple North Solutions Inc. All Rights Reserved.

Bitcoin phish from Microsoft Outlook Part 3



-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.10.75 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.10.75 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.10.75 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.0 HK_RANDOM_FROM From username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.6 MEGALONGWORD BODY: Uses really overlong words

0.1 TW_DJ BODY: Odd Letter Triples with DJ

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

0.1 TO_IN_SUBJ To address is in Subject

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Transaction_Alert_=2D_Bitcoin_Purchase_Requ?=

=?UTF-8?Q?est_Received_=40_po_18=2E_m=C3=A1j_2026_=28cynthiaperez389903=40groups=2Eo?=

=?UTF-8?Q?utlook=2Ecom=29?=





Haresasz Nxysarwsa has invited you to Transaction Alert – Bitcoin Purchase Request Received



Transaction Alert – Bitcoin Purchase Request Received

Pripojiť sa cez Google Meet – Dear Customer, Your PayPal payment for Bitcoin has been received and securely logged in our system. Transaction Summary: Purchase Type: Bitcoin (BTC) Payment Method: PayPal Amount Charged: $750.00



Pripojiť sa cez Google Meet

Odkaz na stretnutie

meet.google.com/hnf-cmsp-djr

Dear Customer,



Your PayPal payment for Bitcoin has been received and securely logged in our system.



Transaction Summary:



Purchase Type: Bitcoin (BTC)

Payment Method: PayPal

Amount Charged: $750.00

Status: Under Review



Our verification team is currently processing your order. Once approved, the transaction will be finalized automatically.



If this activity was not authorized by you, please call +1 801 614 4470 immediately.



Best Regards,

Accounts & Billing Team

Kedy

pondelok 18. máj 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Bitcoin phish from Microsoft Outlook PArt 2

=?utf-8?B?YXF0UmJsc3laNFdEQnVjbnJCbGFFd0lLcVFSYUJqR2p5S2s3T2tWazZFQUR3?=

=?utf-8?B?L3F1ZFVSMUpTalNZSmI3azRYVk5UNlBMM2lPQ0VnTVhXTklVNjgvOGc5ak9X?=

=?utf-8?B?L1ZObnlCUGR3TjdIRndJNjh5S2pSSS9kaUdtT0dqV050b0dPWDRQaTUrWTVE?=

=?utf-8?B?M1hieVVwSW5XUFNkNU9aalhGbmo0TmxwT2tLeXYzeVlmMDFEcVVUWVhoa1pO?=

=?utf-8?B?UWhzYzhTb2tBUnlteUdmZ1dzUXRFRUp3LzNDZmk5anlXYm9HYlhPZWRjU0VW?=

=?utf-8?B?dnRIcHJDRG1BWHlsZ3drSzVOa3ZUK2wrTmxSV2F0S2Zsbms3YU5rdUVJN2NN?=

=?utf-8?B?Mmh6Y1JvOTZCTWdlOVljaGZJam14V1FOeFp0M3NRRWRMMEcrWFpHQjdRMk14?=

=?utf-8?B?Q0IrcXI5STVsOEF1QThTZkVMRmhFVDkrVEpPQmhqbmhNZ1lpSUI3MHhzTERY?=

=?utf-8?B?OG9KdXBOZ0RYNTdacXV4ckd1OUxwT0lMOVg4TEJ1R3hTUENLVVFBazRBVGJl?=

=?utf-8?B?UksyLzFjbjdUMHlLQkhwUnBpdnFVYlpMZ1AyMmhXN2tlNFZiYiszNlUza2xz?=

=?utf-8?B?QVJURjNlc09OZnVUbW9CNjFRaTluSEVkNVRQU3NWOGdaWm9PZER1aGFoY2lY?=

=?utf-8?B?ZFNkWmxJU1k4VVdOVXJvTjFVbFh4MDRjUmpwd3NFN0FPTUFzSkhjbEJxdHdi?=

=?utf-8?B?NTBwVmNFdEtia3FxcVI2WGJETmI2SDJTRzBlYU5WbE5zSGRrdUdsbGw5Z2J5?=

=?utf-8?B?bWNjdjVIQm4wREVIZXhVUXNsaHlmdWMwK0J4Vk1sUWZYWHRFZnZSdVBackt4?=

=?utf-8?B?dG10NUk0Ui91U2xWUjNndUk2ZDVPa3QxZzlHc2dsUWpTRjRZWWlOMVR6cG5G?=

=?utf-8?B?eDlNVWhuQThsV1p1aFlnNThRaW1PSE0vRW1Gcnc4cHlCQ2JhcVdNaTZCK0ZC?=

=?utf-8?B?dmF3TERnUXo5NTZqQVc0RldKTTQxRGptYVFMaGgxNW1wM25nR3BDMXZNTFRU?=

=?utf-8?B?YVFZK0o3alpPTXdsZGVIRWZRbWRabGxkV0JLMXRXK3hrbmVuc2R4L1crSk1K?=

=?utf-8?B?RmFMMXV4VFZHbmM4VmRSK2FsdEhKQ3llNmVTUzYwVjhTWnRwYWUwcm8wWnRw?=

=?utf-8?B?NUtYSnVPRm9ySHc4ZU1yQk9jUnFZZkRyQXY5eG9PWGUzbDFEeDBKNnFENzQ2?=

=?utf-8?B?UlhZQmVCKzZhSCtJOERGdGJmelVKbFV2Zm9sWnpuOHlpa2ppNW9pZXRZZzg1?=

=?utf-8?B?UEtNZkxWU1Jhd25pcjN3b3JFZFNkVGZ0TlQ3M0NaeWZ6c0U0VFg5Y0ZlYVZD?=

=?utf-8?B?MVNIRExXN3JUU1dmbkFPUTRNOXBUM0ZuUVpXeU5HUEVlaUViRjNlUW9iR1FQ?=

=?utf-8?B?QzFoclVsWm43d2tzbEdNNWZqQVNmYlZOWUNibTIwQnlmdFZhazc4WXBCczQx?=

=?utf-8?B?SHVlZUl2VTUrN2tsV0pzY0ZZbnpGOGRPb281YzQwRHlyMEM1di9LUjl1WE1U?=

=?utf-8?B?TE9ac0d5K0RKaFNqejEzcVRBV2VOMWtRcFNqWnhFZGFzMjI3a0ZLdm53bFVB?=

=?utf-8?B?K04xdHZXMlB4TmFTYnRNUmIxNzJHQ3N4bVR3RDlHeHpOMEUvSkt6bnlReEty?=

=?utf-8?B?bUJrUjV1T0F0dWhkMjdMY09odXR3c2JhQktCV2JkZG4xVlFpMUNsOHhqRmow?=

=?utf-8?B?NFlWcUd1NThPem8yUVZPQWt4Z0o0SkVuV0F5TnlKb2cwaDRLZWt0bUpvZSs4?=

=?utf-8?B?T3Q3dThYcnBZY3dhM0dnTWlBN09XOG8rbHkzMFBmRXQ5NUh6VnFlcjFPNzdh?=

=?utf-8?B?enJLYnI0QnNqK252VE9vL0Y1TW9UOTlxOXVwcjJqRHZpSWNpRE56eW1yMHNz?=

=?utf-8?B?T2RIeEt4Q2g3Y0VySWZiejBpYzgxYVl3YlpBV1EwQTU2cGwzSGg4dERpTnRv?=

=?utf-8?B?dGlBVFR2NTYxa0NzVmd4bnp5WGNFZzQ3KytkVDZEbXptblNDd2h6dDhoaXBh?=

=?utf-8?B?SHpQZm4xVm55enI2d3F0VHN5OU5rNHdXclRUUEIrb2lpdzR1ejl4Mk5taFJV?=

=?utf-8?B?Y3c3NnFrVXlLZG51ZTcvcWlFNXdzVU8xVFNpRGlLc1JxV3BCYkFoUVVScEJG?=

=?utf-8?B?bWZwWmliSTZzblY1WFp0bDVEV2o0K3FCbDBpVTFoZWxqbkVtUzdaZGVjdkhy?=

=?utf-8?B?bURaK0kvT05CYmpLcnlvU21PZ3FOSE16MFVzbUZOWmVyTDk4Z0RIb1ZCb1lT?=

=?utf-8?B?RXZWMWVRK1dRN1dyMHZHLzhnWlFSVHp0Zmxvd2tEcXZSNFFMa1YwcUllSHpm?=

=?utf-8?B?eEtCT203NDA4V28yYU5Cd2dVWHRuYUg3OFN0b2NvQWFCZytmOWIwajdDcDZ4?=

=?utf-8?B?WFBza2FNaWZidGFFSE1SUDk0MEE3aTFMQWw5bjFkT2VSTnhYZ0tJdHoyNGtV?=

=?utf-8?B?UmhKR20zTXNIZlU1TVkrNWhoOEJUektBT3FHM0txUXA1MFpYa2R5OGRtN1kx?=

=?utf-8?B?T1dOWVBXekNWNUtvd1VMQ2pIN2xKY2lqWWx3ZzZiRXh0bjVYSWFJM0tJNjdF?=

=?utf-8?B?Znh3SWwvYkF3b21OKzd1QVRFNHB4OU1xME1LQk5rUHJQTHNUbGVMK1FkckRp?=

=?utf-8?B?SHZYRDBXcmlOV1FlRkZnQ21yZlEvWllzcU9ZNGlPNkZpS3BmZG5OUXJLQlVB?=

=?utf-8?B?c0xGaG5zVmxBSmlweXBXYldITHM4eEhZQmU4c050Wkl4RG9KaTE0Yi94d3g1?=

=?utf-8?Q?hHHA2jajUIG7kUGvMV4=3D?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 May 2026 16:27:55.6828

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: a0a05716-c95c-4a59-6273-08deb4fa6aa5

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: BY1PEPF0001AE17.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR18MB4462

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Transaction Alert – Bitcoin Purchase Request Received pondelok

18. máj 2026 Pripojiť sa cez Google Meet https://meet.google.com/hnf-cmsp-djr?hs=224

Dear Customer,



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.10.75 listed in dnsbl.ahbl.org]

[40.93.10.75 listed in dnsbl.ahbl.org]

[40.93.10.75 listed in dnsbl.ahbl.org]

[40.93.10.75 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.10.75 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.10.75 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.10.75 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.10.75 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:cafe:0:0:2d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:114:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[40.93.10.75 listed in will-spam-for-food.eu.org]

[40.93.10.75 listed in will-spam-for-food.eu.org]

[40.93.10.75 listed in will-spam-for-food.eu.org]

[40.93.10.75 listed in will-spam-for-food.eu.org]

[40.93.10.75 listed in will-spam-for-food.eu.org]

[40.93.10.75 listed in will-spam-for-food.eu.org]

[40.93.10.75 listed in will-spam-for-food.eu.org]

[40.93.10.75 listed in will-spam-for-food.eu.org]

Bitcoin phish from Microsoft Outlook PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 11:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP1KW-00000000JZe-2oLZ

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 11:00:36 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 11:00:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus2azlp17010075.outbound.protection.outlook.com ([40.93.10.75]:52568 helo=CO1PR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP0q0-00000000H4y-0qgx

for doctor@doctor.nl2k.ab.ca;

Mon, 18 May 2026 10:29:17 -0600

Received: from BYAPR21CA0014.namprd21.prod.outlook.com (2603:10b6:a03:114::24)

by SJ0PR18MB4462.namprd18.prod.outlook.com (2603:10b6:a03:302::21) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.25.23; Mon, 18 May

2026 16:27:55 +0000

Received: from BY1PEPF0001AE17.namprd04.prod.outlook.com

(2603:10b6:a03:114:cafe::2d) by BYAPR21CA0014.outlook.office365.com

(2603:10b6:a03:114::24) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.71.2 via Frontend Transport; Mon, 18

May 2026 16:27:55 +0000

Authentication-Results: spf=pass (sender IP is 209.85.128.71)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.128.71 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.128.71; helo=mail-wm1-f71.google.com; pr=C

Received: from mail-wm1-f71.google.com (209.85.128.71) by

BY1PEPF0001AE17.mail.protection.outlook.com (10.167.242.107) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.48.11

via Frontend Transport; Mon, 18 May 2026 16:27:55 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:C195F50ED4C419159CB8E20F29A75F0A50625297D47D85A8878524E202C0A1D7;UpperCasedChecksum:75003B263646E7B18A19CF5F144FB744A4B853729B5124F7D37DF6C8CD50FBEE;SizeAsReceived:3414;Count:15

Received: by mail-wm1-f71.google.com with SMTP id 5b1f17b1804b1-48fe40b61a3so20036165e9.3

for ; Mon, 18 May 2026 09:27:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1779121674; x=1779726474; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=v4MPtRwrQaI5YCga2YorkAJ6lqVYBrgurPl2r70iOKY=;

b=EfLcv+avuF/k4ACbRTrUqlZuLFb42S9qMWPk2e2nDgNrTeV+mbgOXjanqwji9HqlDb

AF2ymJeo9I7uXUPBrtmcxu60MCmuVUGzZVQJmOQfDQZXpt4pi7djK/4DcoXYIUBS0K8U

MY8WiN1Ab9NsrCaYdiIKmjmsQLZuJOny/mZ9LxhHAaAdhVQuch0tZ1XEy1drMv8nLPhJ

T2z4d8ZXx2QcRrggavW03IUx/EEiexCrenFE0XIYV8m0Bgl8j4XnoFYuKP1KLxR+UpIU

GD/uNza8yWLfERviAY8eSpm46EMXZ2zjgH6nNn3W8TuvqIBns3pEmU7coSXFUBWRzJcY

KJEQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779121674; x=1779726474; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=v4MPtRwrQaI5YCga2YorkAJ6lqVYBrgurPl2r70iOKY=;

b=N2iXGC0AEGeEsP5pqbttEu1+B1Bb6J7+H1/8AkIGUucv3M3rp67hNi/dGVJ55JTQYd

PVNcwo9/8FzBBSM0JINqgZK1tht0ZM6wnQSXP1z9/0WpUPo/e2B5GxCzqgfEqmKrYqD1

L3OjD82KiYV3yZX6Poduayd7w9qOutoZMnHf7i5P+/QqShTZMkaNuTHPr0sdFeHA7jSl

0nKvEhL2Aeo17xviMgwJ1xv5oPzlhlS+BFYjuUJzYdzmFBTwcFIxG+mWrfufgw+19J4j

xwS1QCHDfjMmp5MeW+76jr3CMyNVSh6KjiqLbMbdzpyqW0ogtKNsyK5SXDQUeOlUtnjn

PMFA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779121674; x=1779726474;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=v4MPtRwrQaI5YCga2YorkAJ6lqVYBrgurPl2r70iOKY=;

b=rjgUYIMs5JDiaYAcQNKC4fF5H2QcQP53LSGFgLr0qSyM+BRwKxxfgIoVuNUVRWZ4l2

Inyc2mQTGOdDL6pZ/ROLHLL5y7m9mATXgWeq5jPEYCQClkQyvDnGjvoniUSFJwPZsNeM

KuuaH6O9bcmo6OfZJLsNy4zDxDAllOfNiHkWtkWFCn6u5Mfe/JiUWiaIxLTHP4rPmuCA

quJ7yV94dUA4ZAo38q8qjZeHd3WsgrwKIR0xI/tn8qPVTsdPqcQJnZlALhWaqt4ZgKuh

XkbS03BVupvFMb1GmjGZjRZqE5L2ZP6O8uT20fxwBYKhuWA2p4y6ajdaS415oFa8PKr6

iNNg==

X-Gm-Message-State: AOJu0Ywep3tN5MHy+LYsQ3+1L3wW24HP9FKlhPoS3dUjd63DI2z3HKsn

xSXzRvor74RBxRowAM7+QHWG5wYVqHsd4n9FOc/zZPbL7+xF6MVRSCsbJF6g3aHX9zRUa94/b1A

Aseoo2JTaKHS9JC6TcWeURFHSg5mbcluMTkM=

MIME-Version: 1.0

X-Received: by 2002:a05:600c:4897:b0:48f:e6de:1cb2 with SMTP id

5b1f17b1804b1-48fe6de1db4mr151651985e9.19.1779121674146; Mon, 18 May 2026

09:27:54 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Mon, 18 May 2026 16:27:54 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Transaction_Alert_=2D_Bitcoin_Purchase_Requ?=

=?UTF-8?Q?est_Received_=40_po_18=2E_m=C3=A1j_2026_=28cynthiaperez389903=40groups=2Eo?=

=?UTF-8?Q?utlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="000000000000665c6506521a0b61"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BY1PEPF0001AE17:EE_|SJ0PR18MB4462:EE_

X-MS-Office365-Filtering-Correlation-Id: a0a05716-c95c-4a59-6273-08deb4fa6aa5

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 209.85.128.71

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|6092099016|24102599021|3069299007|26000799027|9000799056|9020799019|6149299003|29080799009|6019299003|5139299004|4040799016|34130799006|3151999006|970799063|26130799012|9400799043|1680799066|16200799027|32020799003|22000799015|440099028|4302099013|3412199025|2145499017|30041999003|26104999009|18021999003|1360799030|1370799030|1380799030|21002599022;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?dFhsbHpBR3VWVDNMWWpPVit3MEVTSTRjbi9JOGFReTdCSlNxSWg5U25SSHBO?=

=?utf-8?B?Z2lvSmhkYVVic0EzZ0JFNFlLOE9IWEJTVStYanN3QWpmdE5hZ1l6aktVcUZx?=

=?utf-8?B?N2FqcGUzSU9MMDJ4NFcwMllxaDdPa1RERDc0T3drVjVvY1FWN1VhNWJzWldU?=

=?utf-8?B?bW1DUitLc0Q5Y0ZHdnQ4SHo2WThLcGNkQlh1QmlhR3o2dGhlUTIrUE9pNlBO?=

=?utf-8?B?bTY5UUUvTENrQ0lScnc0WnVQUkpZakx5MEpZSStTYnhDZGJmY2VFUytIZWlP?=

=?utf-8?B?N3ZqSnZZbTJhaDNPVkY2Y1RRYUZGQy9kSDBNMnUzclpVeWZmRldKRVl6eXZi?=

=?utf-8?B?Ynd0bU1lS29wUkhPSVhyeDVNQkV0WVQ2OE1LaGFqWW9oMkpGdThzMEExUWJq?=

=?utf-8?B?UmVCOGx5SFNMdzRLbGtzNkNENHVVbVJVZTIvZitOcU9EcWhtT0Y0WGljS2Vj?=

=?utf-8?B?eVhtUXVlQnkzSHQ0WFVhaE54NHlCemI3TVZzYVBDa053RFEvS0k2NlRSV1Q1?=

=?utf-8?B?ZDRBYnlSdVJXSEJ3MDJ1TzRRZG05UnR3MHlCMnU1MWlaNUZJeitqVEFHWktB?=

=?utf-8?B?Q1NJeUxlK2w0YUhBZWF0Z3hwY2hWQUp3dnBVOWF4QVc4Tk9QL0JtSTB3Qnp3?=

Web/sEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 10:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP0kd-00000000ECi-2ylL

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 10:23:31 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 10:23:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f197.google.com ([209.85.221.197]:52362)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP00q-000000000pd-2YpY

for sales@nk.ca;

Mon, 18 May 2026 09:36:20 -0600

Received: by mail-vk1-f197.google.com with SMTP id 71dfb90a1353d-5756f9292c5so1889804e0c.0

for ; Mon, 18 May 2026 08:35:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=digitalspeer-com.20251104.gappssmtp.com; s=20251104; t=1779118519; x=1779723319; darn=nk.ca;

h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=6oyXYqpAn7vvxXrn4ZeU1jZXe6Ftc50G3dE05YHIz/k=;

b=ARAslg7EPEAuqLYNsUVGzAqHiaMRW+Yg4cBE8pl5vh9+tpkOTxEPRwaUHGA8M6BEnb

M9N8u/P+/nXkbCVmdbTRC3TmrrxAtcFJhYKIHTBa3QcBMZR7p7pXDs+4Y4BpeYxzq0wR

dmb99FCKBxUB4Ro0c/XkiE8uH0G6P2VtYx0/chOnN42EneVtbFRPDYsOSSew8+pxTOV9

6USNvFDrOGkxRgbIvZsH+QnAIXDh8xd3eDbAxSeHyRaU0dmFsyIRIHQQPa03ikLw00um

10FS2krHsRQ6BL5oM62Cwxz3f3ykqOLDnpF3VbT/28d6vHqd3BGrue3Seoudj0RlwRFf

/NPA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779118519; x=1779723319;

h=to:from:subject:date:message-id:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=6oyXYqpAn7vvxXrn4ZeU1jZXe6Ftc50G3dE05YHIz/k=;

b=LYq7hcfdq81sZFqXgTXGK9ZO63mPYUSj8hydVSkolGGTqp5LiLWtrLwbTNKUx2gY9W

lsxAoRKnZR2QEdcMXC41jpwS3fj2jICciVr0SpMdxz/59q5g+JlUQ34EYG+oauY953+d

WCZQTM2BJjOdk/G7uHawulRr5zb6xIdzyETBNdQgu4UsW42fbzAOwQ5XCR6KysO7V+Qf

HHVhM4ZVWzmcerwqj9D5kqQkmzmPuZjk2Nrjbe0luLif9jARMXITx+PAjFzAAmV5kdU0

7F9MJbOV5HwQwma+ePArW6MZ7rOGOsHTQPWuP7fPB3Jh0eaJKPiuAexvx7zc8/Z52IFS

H1Aw==

X-Gm-Message-State: AOJu0Yzle4J8zNw3TRMQJmvn+TTTqDvfYifdmGi+Nv8R3doW/CLoxyiK

69t1iIEIWhMn/bL+Bzw8KGxJrP0f3Q6ZYqroAGRqzfx1c7CQTT3CQyW/b6/FtKf4BgMv6knYAMR

u6w9Ok1ZuI+sOQdw5HZOTYg==

MIME-Version: 1.0

X-Received: by 2002:a05:6122:6e01:b0:56e:e7b5:17d3 with SMTP id

71dfb90a1353d-5760bfb8217mr7673448e0c.8.1779118519418; Mon, 18 May 2026

08:35:19 -0700 (PDT)

Reply-To: jake@digitalspeer.com

Message-ID:

Date: Mon, 18 May 2026 15:35:19 +0000

Subject: Re: netknow.ca : About

From: Jake West

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000005d10990652194f1a"



--0000000000005d10990652194f1a

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7bXNvLWJpZGktZm9udC1zaXplOjEwLjBwdDsN

CmxpbmUtaGVpZ2h0OjExNSU7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9vayAgDQpBbnRpcXVhJnF1b3Q7

LCZxdW90O3NlcmlmJnF1b3Q7O21zby1mYXJlYXN0LWZvbnQtZmFtaWx5Og0KQ2FsaWJyaTttc28t

ZmFyZWFzdC10aGVtZS1mb250Om1pbm9yLWxhdGluO21zby1iaWRpLWZvbnQtZmFtaWx5Ok1hbmdh

bDsNCm1zby1iaWRpLXRoZW1lLWZvbnQ6bWlub3ItYmlkaTttc28tYW5zaS1sYW5ndWFnZTpFTi1V

Uzttc28tZmFyZWFzdC1sYW5ndWFnZToNCkVOLVVTO21zby1iaWRpLWxhbmd1YWdlOkhJIj5IaSZu

YnNwOyZuYnNwO25ldGtub3cuY2EsPGJyPg0KPGJyPg0KSSBob3BlIHlvdSdyZSBkb2luZyB3ZWxs

ISBJ4oCZZCBsb3ZlIHRvIGV4cGxvcmUgY29sbGFib3JhdGlvbi48YnI+DQo8YnI+DQombmJzcDtJ

IGhhdmUgYSBkaWdpdGFsIG1hcmtldGluZyBwbGFuIHRoYXQgYWxpZ25zIHdpdGggeW91ciBicmFu

ZCBhbmQgY291bGQNCmJlbmVmaXQgeW91ciBhdWRpZW5jZS48YnI+DQpDYW4gSSBzZW5kIG92ZXIg

YSZuYnNwOzxiPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0MwMDY2Ij5icmllZiAgDQpwcm9wb3NhbDwv

c3Bhbj48L2I+Pzxicj4NCjxicj4NClJlZ2FyZHMsPGJyPg0KSmFrZSBXZXN0PGJyPg0KSWYgeW91

IGFyZSBpbnRlcmVzdGVkLCByZXBseSB0byB1cyB3aXRoICI8Yj48c3BhbiAgDQpzdHlsZT0iY29s

b3I6IzAwNzBDMCI+U2VuZCZuYnNwO3RoZQ0KUHJvcG9zYWwgJmFtcDsgUmVmZXJlbmNlczwvc3Bh

bj48L2I+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ow0KbGluZS1oZWlnaHQ6

MTE1JTtmb250LWZhbWlseTomcXVvdDtCb29rICANCkFudGlxdWEmcXVvdDssJnF1b3Q7c2VyaWYm

cXVvdDs7bXNvLWZhcmVhc3QtZm9udC1mYW1pbHk6DQomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVv

dDs7bXNvLWJpZGktZm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3ICANClJvbWFuJnF1b3Q7O21z

by1hbnNpLWxhbmd1YWdlOg0KRU4tVVM7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7bXNvLWJp

ZGktbGFuZ3VhZ2U6SEkiPiIuPC9zcGFuPg0K

--0000000000005d10990652194f1a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




line-height:115%;font-family:"Book Antiqua","serif";mso=

-fareast-font-family:

Calibri;mso-fareast-theme-font:minor-latin;mso-bidi-font-family:Mangal;

mso-bidi-theme-font:minor-bidi;mso-ansi-language:EN-US;mso-fareast-language=

:

EN-US;mso-bidi-language:HI">Hi  netknow.ca,





I hope you're doing well! I=E2=80=99d love to explore collaboration.





 I have a digital marketing plan that aligns with your brand and could

benefit your audience.


Can I send over a brief proposal
n>
?





Regards,


Jake West


If you are interested, reply to us with "S=

end the

Proposal & References

line-height:115%;font-family:"Book Antiqua","serif";mso=

-fareast-font-family:

"Times New Roman";mso-bidi-font-family:"Times New Roman"=

;;mso-ansi-language:

EN-US;mso-fareast-language:EN-US;mso-bidi-language:HI">".


--0000000000005d10990652194f1a--

Procurement spam from Google gmail Part 2

--00000000000029fe190652194415

Content-Type: text/plain; charset="UTF-8"



Dear Sir/Madam,



I hope this message finds you well.



Following my earlier inquiry, I would appreciate it if you could provide

detailed information regarding your products, including current pricing,

availability, and any options or discounts available for bulk purchases.



Kindly reply to this email address: abdullahsaldiran@abtechnicltd.com



We are interested in establishing a potential business relationship and

would be grateful if you could also share any catalogs, product

specifications, or additional information available.



Thank you for your time and assistance. I look forward to your response.





Kind Regards

Abdullah SALDIRAN

AB TECHNIC MUHENDISLIK MIMARLIK INSAAT

abdullahsaldiran@abtechncltd.com

MEDIKAL SAN. VE TIC. LTD. STI.

Halkapinar Mah. 1203 Sok. No.13 D.1413

Konak/IZMIR TURKIY



--00000000000029fe190652194415

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Sir/Madam,

I hope this message finds you wel=

l.

Following my earlier inquiry, I would appreciate it if you could p=

rovide detailed information regarding your products, including current pric=

ing, availability, and any options or discounts available for bulk purchase=

s.

Kindly reply to this email address:=C2=A0ab=

dullahsaldiran@abtechnicltd.com

p>

We are interested in establishing a potential business relationship an=

d would be grateful if you could also share any catalogs, product specifica=

tions, or additional information available.

Thank you for your time a=

nd assistance. I look forward to your response.


51,51,51);font-family:"Times New Roman";font-size:12pt">

>

font-size:12pt">

ot;Times New Roman"">K=

ind Regards
Abdullah SALDIRAN
AB TECHNIC MUHE=

NDISLIK MIMARLIK INSAAT

om" target=3D"_blank">abdullahsaldiran@abtechncltd.com

MEDIKAL SAN. =

VE TIC. LTD. STI.
Halkapinar Mah. 1203 Sok. No.13 D.1413
Konak/IZMIR =

TURKIY




--00000000000029fe190652194415--

Procurement spam from Google gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 10:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP0kU-00000000Dps-2FG7

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 10:23:22 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 10:23:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f172.google.com ([209.85.208.172]:57594)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOzxr-000000000ZL-0FI3

for sales@nk.ca;

Mon, 18 May 2026 09:33:16 -0600

Received: by mail-lj1-f172.google.com with SMTP id 38308e7fff4ca-393a49d2e5eso23608881fa.2

for ; Mon, 18 May 2026 08:32:19 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1779118332; cv=none;

d=google.com; s=arc-20240605;

b=CNn/E4ab5XxrP77m5WvJbl9JaPIZdAm/IFCj9+i8iEu2af34QT74BN4j6R02Xgh1bN

PuIF1ndDDqx33FzAx0YDR78d47qVnA+T4fQ02IROPVL5DjRaewyUTpXK9IbgnLV4qArQ

lMsLQRp5iXt1ReninMs7ZfhcFOTY6ixX30QsWzaY3Opl92SyBGj2czs20bgNqDxinixv

bMlZlZiP9VcGvrzqZ5f0xY89EkeBb2CSAO+FJ1zyDZaZje2wZGM5LN22Wwl210K2rOXx

uA6Hc2OLO7PdoWyvnsjlrm/JiMTF2UOl+mM9jTqOCT5oEwBpA/dsoakFigf2IOcFdeAa

pxmQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=riBnGe8zWppk98WcpDE7L2LkD/LRKox3ksmniunQJrE=;

fh=aohB8+7RWGbO6y2rt8c04gUoLRLyE1m+eAw4zp3PkpY=;

b=eXYwXyBjHk2WK0TTET3QjBn9abS/QYI4pzFmHaFMQEpbtaYd80ZNiJcv5u8AxcBhhl

xJ1jD6W8WGwBYL4wiEvG/bkhI8k9VGJlTVLjb1Q/m9NenlOWVL9GQ+9Zok9pQ7pNIurB

IFNSHEL6P5htKabvK/Id+/TiM9hSPE1EJ5eEiP5UPyGL18oJIHul3giPUfVeQ9iSnb3E

wP2E0IZjjq/iKiZHIWO4/iqEpyhzsAZmoPGUHc1hKyAiUuZ9+3OXt5Vc5GCmGLeju6Av

du6zqWuo2CUCcDhvRRsrSF1AKHWd1y8Cj1Btfak4ozoV5g3T2SZ5QPEsYGAU74wRm3z8

+DAA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779118332; x=1779723132; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=riBnGe8zWppk98WcpDE7L2LkD/LRKox3ksmniunQJrE=;

b=n5kDTFdB5G5uKqqG5b8TwRN0qB4ulGHA9jPCSy0riI8UZoWNUJa3+h0l6lw506ktlz

I+lpY1g1z/xy5gNft/Uc1G2mFs4Q0udaBYiQYYmZx4Irurk/tU+Y64q9FGElLe2Apzrl

lbXAY6VtgKD9Im4Fc0AxvEchQC9uSEKyiBpnJ3pRdU2TRPnFNgb0RzGw2yjfsV3/yT9J

KWwq42BiqKGECdSarJto7CwO2qv4Y5uUnsAbU+9rgYzsY3MXbK6dUSv6E0Bcmtm7FHak

QhKc1J9rrcqAVermjnFy6EKq9GlmwhkGNv+gZhrq84e1dDdH3IhdyJh3mgk9TCTIi1sT

pz5A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779118332; x=1779723132;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=riBnGe8zWppk98WcpDE7L2LkD/LRKox3ksmniunQJrE=;

b=bGTyI1ISemO9zUUbk/182+6hdJIEUa0kcmbkAoKaB0NVO5hIVSPC8ym9HGVC3BoUM+

tOHCm8+ED6WE4mp2NIJUE6DJm6urnh9KyXmRWTFxGG+lN5ZdEHeeKL6zHmrSvWUo3RCs

BFwXBD1rKWt3mW48bDO7mJMiSlBijJ5Kcqjg9mjzlTHbPeebCFRfPeV2SPqNINXWgxXp

LLbkDHTDinHzxFzN7rrE8l4ucyrCsbkRLaD1L963cxkripG4mbAlSuEs2F+z74BIVwTf

Mtbm6YJky+cIjlcq30I+SSFwLBpcz4pB0uwp9jHrfnRfwO7F/3+awBoWAZ1sGw0FQ/q8

hStg==

X-Forwarded-Encrypted: i=1; AFNElJ/3/7YzuL/2daMUMDLDpXJog1Lo0AihJqsVBtSsDXUx6XiQLlCIZVxztx/eH0WOIl+Fx5p3Gg==@nk.ca

X-Gm-Message-State: AOJu0YyohZ6U78MMguDLbEGm0J3Fk96QvDmxMK6s1CJ7KC+5SQE4WC1X

IAn3hgzBhoEiPIvErLXjwzR+kgUOokBMOifiZir3xu9kWOTJX3GfpXBrLRuK2cG77NOCfeJmeO0

6ZJR3fjVc07/mvaYSZbMtppmvzd/mVww=

X-Gm-Gg: Acq92OFbRSa8nrOd+XN60085Luh3CJQ1I5jdys7Gsonmxc2XbkFCvS7A4Ku4nd3pmlB

OEkaAwGyxnQ+NhGPlPgsQT8rOhP97uskRzVYnrSnaUbcBjcsWhs0dWPccOnj8Wtb+HiMHqqx2uY

5+HUZVqnuxWXGolBynEyrhfIA0g4GN5i3jTQu+P05rzFSKDkvwCBBkVnnEm1/iJJE58hpj97jmv

Y0pWhlb7ByfCPUumErIeYUbnGN4Jw99U3wztqzFQ0mkekKOO/ewqZgQKHbV897rxqbRNoiAPwpP

ilg5iY8gZpeo4EI3GExUaBLG5h2xm+Pd4Tk=

X-Received: by 2002:a2e:ad85:0:b0:394:642:c620 with SMTP id

38308e7fff4ca-39562009c06mr53906641fa.31.1779118331525; Mon, 18 May 2026

08:32:11 -0700 (PDT)

MIME-Version: 1.0

From: Purchase Team

Date: Mon, 18 May 2026 08:31:58 -0700

X-Gm-Features: AVHnY4JXBTUlBYicgIC98baLMVYgvN7GNMRUplN6ONv_VWj8hkxFSPRej6JkxAc

Message-ID:

Subject: Re: Inquiry About Product Pricing

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000029fe190652194415"

Bcc: sales@nk.ca

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, I hope this message finds you well. Following

my earlier inquiry, I would appreciate it if you could provide detailed information

regarding your products, including current pricing, availability, and any

options or discounts available f [...]



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.172 listed in dnsbl.ahbl.org]

[209.85.208.172 listed in dnsbl.ahbl.org]

[209.85.208.172 listed in dnsbl.ahbl.org]

[209.85.208.172 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.172 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.172 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.172 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.172 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.172 listed in will-spam-for-food.eu.org]

[209.85.208.172 listed in will-spam-for-food.eu.org]

[209.85.208.172 listed in will-spam-for-food.eu.org]

[209.85.208.172 listed in will-spam-for-food.eu.org]

[209.85.208.172 listed in will-spam-for-food.eu.org]

[209.85.208.172 listed in will-spam-for-food.eu.org]

[209.85.208.172 listed in will-spam-for-food.eu.org]

[209.85.208.172 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.172 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[christophhenry79(at)gmail.com]

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[christophhenry79(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.172 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.172 listed in bl.score.senderscore.com]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Re: Inquiry About Product Pricing

Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 10:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP0jz-00000000DBn-1CdL

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 10:22:51 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 10:22:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m93115.xmail.ntesmail.com ([103.126.93.115]:63778)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOzg8-00000000Om2-1WZw

for root@nk.ca;

Mon, 18 May 2026 09:15:01 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1422535_1950599551.1779117230727"

To: root

Reply-To: marketing@zdcmetal.com

Subject: =?UTF-8?B?UmU6IEFkanVzdGFibGUgQmVkIEJhc2UgTWV0YWwgQm94c3ByaW5nIE1hdHRyZXNzIEZvdW5kYXRpb24gQmVkIEZyYW1lIFBsYXRmb3JtIEJlZCBVcGhvc3RlcnkgQmVk?=

X-Priority: 3

MIME-Version: 1.0

Received: from gary@maidelihome.com( [10.139.4.149] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 18 May 2026 23:13:50 +0800 (GMT+08:00)

From: gary

Date: Mon, 18 May 2026 23:13:50 +0800 (GMT+08:00)

X-WM-Tid: 0a9e3ba68a7a068ckunmd65c7d951c6246

DKIM-Signature: a=rsa-sha256;

b=lGQIViy5kGbpIvbffTkH4wprDCt5VPrnRqEDxHGvqwdlL/eG2IK+EgLFrMneJa9OB4T66hS0395MrP9vJvGtdbsjuJ20k4nd/cScOvJfAPy9G+VfrpMETNyxj5yMOIHuyi3NyWxgM2ipN4joMF3WN15mPNHee81tAkZMlmybFco=; s=default; c=relaxed/relaxed; d=maidelihome.com; v=1;

bh=3SyX8AvXfqH4Poq1V4iL7Hq3aMgt9nj3IOarGN84/nY=;

h=date:mime-version:subject:message-id:from;

Message-ID:

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings: Good morning! We are 36 years factory of Adjustable

Bed Base,Metal Boxspring,Mattress Foundation,Bed Frame,Platform Bed,Uphostery

Bed,Folding Bed,Hospital Bed,Sleep Health Guard,Adjustable Table,Meta [...]





Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.126.93.115 listed in dnsbl.ahbl.org]

[103.126.93.115 listed in dnsbl.ahbl.org]

[103.126.93.115 listed in dnsbl.ahbl.org]

[103.126.93.115 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.126.93.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.126.93.115 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.126.93.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.126.93.115 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.126.93.115 listed in will-spam-for-food.eu.org]

[103.126.93.115 listed in will-spam-for-food.eu.org]

[103.126.93.115 listed in will-spam-for-food.eu.org]

[103.126.93.115 listed in will-spam-for-food.eu.org]

[103.126.93.115 listed in will-spam-for-food.eu.org]

[103.126.93.115 listed in will-spam-for-food.eu.org]

[103.126.93.115 listed in will-spam-for-food.eu.org]

[103.126.93.115 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[103.126.93.115 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.126.93.115 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 J_CHICKENPOX_39 BODY: 3alpha-pock-9alpha

0.6 J_CHICKENPOX_37 BODY: 3alpha-pock-7alpha

0.6 J_CHICKENPOX_44 BODY: 4alpha-pock-4alpha

0.6 J_CHICKENPOX_52 BODY: 5alpha-pock-2alpha

0.6 J_CHICKENPOX_48 BODY: 4alpha-pock-8alpha

0.6 J_CHICKENPOX_56 BODY: 5alpha-pock-6alpha

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

0.6 J_CHICKENPOX_35 BODY: 3alpha-pock-5alpha

0.6 J_CHICKENPOX_54 BODY: 5alpha-pock-4alpha

0.6 J_CHICKENPOX_38 BODY: 3alpha-pock-8alpha

0.6 J_CHICKENPOX_55 BODY: 5alpha-pock-5alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?B?UmU6IEFkanVzdGFibGUgQmVkIEJhc2UgTWV0YWwgQm94c3ByaW5nIE1hdHRyZXNzIEZvdW5kYXRpb24gQmVkIEZyYW1lIFBsYXRmb3JtIEJlZCBVcGhvc3RlcnkgQmVk?=





Greetings:



Good morning! We are 36 years factory of Adjustable Bed Base,Metal Boxspring,Mattress Foundation,Bed Frame,Platform Bed,Uphostery Bed,Folding Bed,Hospital Bed,Sleep Health Guard,Adjustable Table,Metal Chair,Sofa,Barstool,Display stand,TV stand,TV Mount,TV Cart,Mattress Cover,Fitted Sheet,Boxspring,Foundation,Adjustable Bed,Adjustable Base,With a production area of 74,000 square meters and 800 workers, our two factories are situated in Vietnam and China. We specialize in manufacturing "sheet metal, tube fabrication, and weldment products.



Our key production process are Sheet Steel Stamping, Tube Fabrication Bending, Cutting, Robot Welding, Plastic Injection, Powder Coating, Plating, Assembly, Package, both in Bình Dương, Việt Nam and Hangzhou,China



All of our products are competitive, as a result of 3D design, phototype sample, tooling & fixture, stamping, cutting, bending, roboting welding, coating, plating,plastic injection,assembly, packing,inspection and test, warehouse and shipping all finish in our own plant, and our factory have passed ISO9001:2015,ISO14001:2015, COSTCO, and FA, SA, CTPAT Factoory Audit.



Your further requirements will be welcomed all the time!



Best Regards,

Gary Wang

CN Mob:+86-186-6840-2282

VN Mob:+84-(0)36-6458831

MAIFENG MANUFACTURING CO., LTD.

Mail: gary@maidelihome.com

Mail: marketing@zdcmetal.com

Vietnam Factory Add: Land Lot No. 678, Map Sheet No. 42, Lai Uyen 84 Street, Bau Bang Quarter, Lai Uyen Town, Bau Bang District, Binh Duong Province, Vietnam

China Factory Add: FACTORY BUILDING E, NO. 9188 JIANSHE FOURTH ROAD, GUALI TOWN, XIAOSHAN DISTRICT, HANGZHOU CITY, ZHEJIANG PROVINCE,CHINA

Site: www.maidelimfg.com

If you dont want to receive our emails, you can easily unsubscribe here.

WEb/SEo/App Spam from Google Gmail PArt 2

This is a multipart message in MIME format.



------=_NextPart_000_5A1A_01DCE6FB.5D49CE10

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



I hope you're doing well!



Have you thought about creating a mobile app for your business www.nk.ca? A

custom iOS or Android app can help you connect with customers and stand out

from the competition.



I specialise in building high-quality, user-friendly apps at competitive

pricing. Share your ideas or requirements, and I'll send over details with

pricing and timelines.



Looking forward to your reply!



Thank You!!

Angelica M. Leon





------=_NextPart_000_5A1A_01DCE6FB.5D49CE10

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
vlink=3D"#954F72">


style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif;co=

lor:#222222;background:white'>Hi,

style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif;co=

lor:#222222'>

I hope =

you’re doing well!



style=3D'background:white'>Have you thought about creating a mobile app =

for your business 

style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif'>w=

ww.nk.ca

style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif;co=

lor:#222222;background:white'>? A custom iOS or Android app can help you =

connect with customers and stand out from the competition.

style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif;co=

lor:#222222'>

I specialise in =

building high-quality, user-friendly apps at competitive pricing. Share =

your ideas or requirements, and I’ll send over details with =

pricing and timelines.



style=3D'background:white'>Looking forward to your =

reply!


Thank =

You!!

style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif'>A=

ngelica M. Leon



------=_NextPart_000_5A1A_01DCE6FB.5D49CE10--



WEb/SEo/App Sapm from Google Gmail PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 08:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOzKE-00000000MAH-201k

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 08:52:10 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 08:52:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f68.google.com ([209.85.216.68]:47450)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOyNC-00000000H9w-0HXA

for root@nk.ca;

Mon, 18 May 2026 07:51:18 -0600

Received: by mail-pj1-f68.google.com with SMTP id 98e67ed59e1d1-366375c4076so757587a91.3

for ; Mon, 18 May 2026 06:50:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=websitedevelopercalifornia.com; s=google; t=1779112217; x=1779717017; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:reply-to:from:from:to:cc:subject:date:message-id:reply-to;

bh=UUi6RILpwHTFhhHZqL1FY6l6ojjPcdvwLrW8Q5PLs1U=;

b=eQUF7iFswAj0BwENe4ndcPB2yMWtSa5s3rqFDkoK+CjgCpYsB7aQpuP1MVbqBUU6Th

MQZSGKMBboatM4lcNLQjM9uC2E6QVhdSKzNkHKPF5FNYGHfsxBr6Z9MfE0rIl9CpnP6P

JFijXbcu2NjwKGXrZGaSn5DcPcJUiP205xFiI=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779112217; x=1779717017;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:reply-to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=UUi6RILpwHTFhhHZqL1FY6l6ojjPcdvwLrW8Q5PLs1U=;

b=k6MqOnt9h+NXQ2C5CcsvDUDhRRuiIcuTE4aH3YSYUQaHiukxDZAfIDEJzfTHWlJGaB

gMPkQqf064vvUsWhz4xb5qF9mo5yzKEfzwvYyVBZrnFgoJceWkLip8PRMYruMB89EmUc

upXlVzGyxPQfrbNC4V8fZuf3q85BGldySQBRgVdSDNj1Zd2dKltR7sC3CTttaq+P4tXu

Svh58taVNL4Q+4OGqyTNpek9rfSFasb2xuWjw0p0QxJG1rx5M7baAznoNzFUPz6m1kst

Ap1gVwMgR9oS5NuuWGZJJoZgaSIHYMnyNC4wdwnqBzY9IB/gCUtTxOy/7yHUlltM86v0

3l+g==

X-Gm-Message-State: AOJu0YyhRJiX1pyJqtUE1FSJ5UI5OcZv1gl6q3ZtZhNekA9RhiRjhdfS

wGE+8ds5ZImBXs3YWK4jenEnYkaVsrY6NQvxjkfJp3K8IhjObRgyHkAULR+onV1t6EJFyBQ+LUl

TAV9MUSw=

X-Gm-Gg: Acq92OFE44wnqY0F9CjoVHylXAvXuQUvUPzfZP70+cRfjEbm7ugvsULOk+uZtqwLdjS

3wG46ZI9Vr0XGDTSWuEumGAWGUWp+53lYlSztmNu8r70YahPtYiiWiHmsgs8Nn338k5uHrVjj9n

ABfkrVeSeLDRG3K5KtYo/A+KWdsHsceQnd7i/ywWmdegT7eXe0VS/v4/IUk1QRocFx0W1eRN8Xf

NEA+75Jh7mylE32qs0uOEKcWvDtAb5qog89/lsZXyMxoCn5ZpAcMJzJkrqSKsaljP99X2j1M4cy

yB+pzuJS5HT3KMFKOYncwYu3QMWxHdIa20PkmxdQTcc1t1Dk3Y2ZOgNWzPYebVI37qtirVNAuNw

CiTJ6zq2zed7zkF0+hq3naCqjHIPh9LYdaKBYxlxeQUeXyOap30hJ4UZ0Sg6wDsTXjPYCXZF2Ls

JSjuSzxTG0rhcvEDA8CDyLj47YvGeeAeW/mQfDYWOUM2IS0owyKAzeGAti/DUPz2Zu63+NBCz7d

nGk

X-Received: by 2002:a17:90b:57c7:b0:369:2e00:1ff0 with SMTP id 98e67ed59e1d1-369519c6663mr15681260a91.6.1779112216964;

Mon, 18 May 2026 06:50:16 -0700 (PDT)

Received: from DESKTOP4GUJ3TK ([203.122.31.30])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3695a0e93e0sm4110755a91.10.2026.05.18.06.50.15

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 18 May 2026 06:50:16 -0700 (PDT)

From: "Angelica M. Leon"

X-Google-Original-From: "Angelica M. Leon"

Reply-To:

To:

Subject: =?us-ascii?Q?Re:_Let's_Build_Your_Mobile_App_!!?=

Date: Mon, 18 May 2026 19:08:29 +0530

Message-ID: <5a1901dce6cd$439143f0$cab3cbd0$@websitedevelopercalifornia.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_5A1A_01DCE6FB.5D49CE10"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AdzmtBhVTHsA9SwNQ7Sc/cRcbgcGQQ==

Content-Language: en-us

X-Spam_score: 6.9

X-Spam_score_int: 69

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I hope you're doing well! Have you thought about creating

a mobile app for your business www.nk.ca? A custom iOS or Android app can

help you connect with customers and stand out from the competition.



Content analysis details: (6.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: websitedevelopercalifornia.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.68 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: websitedevelopercalifornia.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: websitedevelopercalifornia.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.68 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.68 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} =?us-ascii?Q?Re:_Let's_Build_Your_Mobile_App_!!?=

Kentucky online phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 07:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOxfD-000000001nJ-1rWT

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 07:05:43 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 07:05:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from omr-relay-3.cniteam.com ([209.143.0.83]:55684)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOxZ7-00000000MXD-2Xw9

for doctor@nk.ca;

Mon, 18 May 2026 06:59:30 -0600

Received: from panaceus-01.cniteam.com (dakus.cniteam.com [209.143.0.76])

by omr-relay-3.cniteam.com (8.14.4/8.14.4) with ESMTP id 64ICv4O4008983;

Mon, 18 May 2026 08:57:04 -0400

Received: from panaceus-01.cniteam.com (unknown [192.168.29.41])

by panaceus-01.cniteam.com (Postfix) with ESMTP id C683B51;

Mon, 18 May 2026 08:57:04 -0400 (EDT)

X-Spam-Status: No

X-MailScanner-Envelope-From: anelson1@jamadots.com

X-Scan-MailScanner-SpamScore: medium

X-Scan-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,

score=4.622, required 6, BAYES_00 -0.50,

CNI_RULE_270_BIT_LY_URI 0.10, DKIM_SIGNED 0.10, DKIM_VALID -0.10,

DKIM_VALID_AU -0.10, HTML_MESSAGE 0.00, MISSING_HEADERS 1.02,

URIBL_DBL_BLOCKED_OPENDNS 0.00, URI_HEX 0.10, URI_PHISH 4.00)

X-Scan-MailScanner: None

Received: from mail.cniteam.com (iw-mail-03.cniteam-internal.com [10.1.1.173])

by panaceus-01.cniteam.com (Postfix) with ESMTPS id 8065C51;

Mon, 18 May 2026 08:57:03 -0400 (EDT)

DKIM-Signature: a=rsa-sha256; t=1779109013; x=1779713813; s=iw-jama-cni; d=jamadots.com; c=relaxed/relaxed; v=1; bh=3iZX9y/uGbJpI0kGkUQTQuUScMfL+hMciWTQE4F0o4w=; h=From:Subject:Date:Message-ID:MIME-Version:Content-Type;

b=NBM3MPz7/wzz3Fcuh4dANL2cmEGUcU020ZBrpKRDTsNc9UVPGtNDy51ObVa2PCiGLSVLv1Bh9p8AsVWx35I6Q2pdyDSDBjt5veTAsxZj0xmTNJQqYO2dHMGLFeJRp7oHRBLQBCLrW3OgsE9VjpszZ+fyaRcEUGtAJT+OhYOpI8lh5ugY2r8nv8zR+3TcxPkOhZoOCFYXJAKbKx3MX8GYauTq0SiYRj2bbx9tSRu/0UcJ5IeJdAWDt8e3WNPmmzKg2dq0wVgIUx8X7Gyj+l8QZWKCp5Ru47teTT2hYvZJIs3flBrq4eYbO9/DvtKSpqOPFD70gAOR4RHyk7iBGc9Ptw==

Received: from jamadots.com [172.56.17.251] ([127.0.0.1])

by mail.cniteam.com (13.0.3 build 13 RHEL7 x64) with ASMTP (SSL) id 03202605180856532449;

Mon, 18 May 2026 08:56:53 -0400

Date: Mon, 18 May 2026 08:56:51 -0400

From: "Kentucky OnLine, Webmail"

Subject: Password Expiration Notification

Message-ID:

X-Mailer: IceWarp Mailer 13.0.3.13 RHEL7 x64-Desktop

X-Priority: 3

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_3a3305e7f512a5765ab448b33f72ad91"

X-Sender-AUTH-ID: anelson1@jamadots.com

X-Sender-Address: anelson1@jamadots.com

X-IW-SC: 0.00





--b1_3a3305e7f512a5765ab448b33f72ad91

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable







Kentucky OnLine, Inc.



We are upgrading our email system to enhance security and reliability.

To continue using your mailbox without any disruptions, please update

your account below

CLICK HERE TO UPDATE

Note:=C2=A0We believe account that are not confirmed on or before MAY 20 is

not in use anymore and its=C2=A0informations and document will be permanent=

ly

deleted





--b1_3a3305e7f512a5765ab448b33f72ad91

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





iv>
Kentucky OnLine, Inc.

>We are upgrading our email system to enhance security and reliability.
v>
To continue using your mailbox without any disruptions, pl=

ease update
your account below
Note: We believe account that are=

not confirmed on or before MAY 20 is
not in use anymore and its&=

nbsp;informations and document will be permanently
deleted
<=

/div>






--b1_3a3305e7f512a5765ab448b33f72ad91--



Kentucky online phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 07:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOxf7-000000001my-3r7q

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 07:05:37 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 07:05:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from omr-relay-3.cniteam.com ([209.143.0.83]:55606)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOxXv-00000000MSX-1D1n

for sales@nk.ca;

Mon, 18 May 2026 06:58:20 -0600

Received: from panaceus-01.cniteam.com (dakus.cniteam.com [209.143.0.76])

by omr-relay-3.cniteam.com (8.14.4/8.14.4) with ESMTP id 64ICv41q008982;

Mon, 18 May 2026 08:57:05 -0400

Received: from panaceus-01.cniteam.com (unknown [192.168.29.41])

by panaceus-01.cniteam.com (Postfix) with ESMTP id C68AE2FD;

Mon, 18 May 2026 08:57:04 -0400 (EDT)

X-Spam-Status: No

X-MailScanner-Envelope-From: anelson1@jamadots.com

X-Scan-MailScanner-SpamScore: medium

X-Scan-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,

score=4.622, required 6, BAYES_00 -0.50,

CNI_RULE_270_BIT_LY_URI 0.10, DKIM_SIGNED 0.10, DKIM_VALID -0.10,

DKIM_VALID_AU -0.10, HTML_MESSAGE 0.00, MISSING_HEADERS 1.02,

URIBL_DBL_BLOCKED_OPENDNS 0.00, URI_HEX 0.10, URI_PHISH 4.00)

X-Scan-MailScanner: None

Received: from mail.cniteam.com (iw-mail-03.cniteam-internal.com [10.1.1.173])

by panaceus-01.cniteam.com (Postfix) with ESMTPS id 8065C51;

Mon, 18 May 2026 08:57:03 -0400 (EDT)

DKIM-Signature: a=rsa-sha256; t=1779109013; x=1779713813; s=iw-jama-cni; d=jamadots.com; c=relaxed/relaxed; v=1; bh=3iZX9y/uGbJpI0kGkUQTQuUScMfL+hMciWTQE4F0o4w=; h=From:Subject:Date:Message-ID:MIME-Version:Content-Type;

b=NBM3MPz7/wzz3Fcuh4dANL2cmEGUcU020ZBrpKRDTsNc9UVPGtNDy51ObVa2PCiGLSVLv1Bh9p8AsVWx35I6Q2pdyDSDBjt5veTAsxZj0xmTNJQqYO2dHMGLFeJRp7oHRBLQBCLrW3OgsE9VjpszZ+fyaRcEUGtAJT+OhYOpI8lh5ugY2r8nv8zR+3TcxPkOhZoOCFYXJAKbKx3MX8GYauTq0SiYRj2bbx9tSRu/0UcJ5IeJdAWDt8e3WNPmmzKg2dq0wVgIUx8X7Gyj+l8QZWKCp5Ru47teTT2hYvZJIs3flBrq4eYbO9/DvtKSpqOPFD70gAOR4RHyk7iBGc9Ptw==

Received: from jamadots.com [172.56.17.251] ([127.0.0.1])

by mail.cniteam.com (13.0.3 build 13 RHEL7 x64) with ASMTP (SSL) id 03202605180856532449;

Mon, 18 May 2026 08:56:53 -0400

Date: Mon, 18 May 2026 08:56:51 -0400

From: "Kentucky OnLine, Webmail"

Subject: Password Expiration Notification

Message-ID:

X-Mailer: IceWarp Mailer 13.0.3.13 RHEL7 x64-Desktop

X-Priority: 3

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_3a3305e7f512a5765ab448b33f72ad91"

X-Sender-AUTH-ID: anelson1@jamadots.com

X-Sender-Address: anelson1@jamadots.com

X-IW-SC: 0.00





--b1_3a3305e7f512a5765ab448b33f72ad91

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable







Kentucky OnLine, Inc.



We are upgrading our email system to enhance security and reliability.

To continue using your mailbox without any disruptions, please update

your account below

CLICK HERE TO UPDATE

Note:=C2=A0We believe account that are not confirmed on or before MAY 20 is

not in use anymore and its=C2=A0informations and document will be permanent=

ly

deleted





--b1_3a3305e7f512a5765ab448b33f72ad91

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





iv>
Kentucky OnLine, Inc.

>We are upgrading our email system to enhance security and reliability.
v>
To continue using your mailbox without any disruptions, pl=

ease update
your account below
Note: We believe account that are=

not confirmed on or before MAY 20 is
not in use anymore and its&=

nbsp;informations and document will be permanently
deleted
<=

/div>






--b1_3a3305e7f512a5765ab448b33f72ad91--



Web/SEO/App spam from Microsoft Outlook Part 2

--_000_DM4PR20MB66980B583801063C67CAAFD9C4032DM4PR20MB6698namp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Dear sales,



Greetings from Astm Solutions LLC management.



We kindly request your best quotation for the shared Purchase Order: Get =

Purchase Order Here
line%2Fejeawikayanri&sa=3DD&sntz=3D1&usg=3DAOvVaw26Zw_bIC9Fa8OxwKYvNmUT>



Please ensure your quotation includes:



*Unit and total pricing

*Applicable taxes and duties

*Delivery schedule / lead time

*Incoterms (if applicable)

*Payment terms

*Warranty/after-sales support details

*Validity period of the quotation



Kindly submit your quotation no later than 22/05/2026 . Please be advised t=

hat all details including the country of use, equipment category, company i=

nformation, application requirements, contact details, purchasing entity st=

atus, and expected purchase timeline have been fully compiled and included =

in the above shared Purchase Order portal.



We appreciate your prompt attention to this request and look forward to you=

r response.





=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

Yours faithfully,

Prinyanka

Purchase Manager

6540 Hayvenhurst Ave #34, Van Nuys, CA, USA

Copyright =A9 2026 | Privacy Policy



--_000_DM4PR20MB66980B583801063C67CAAFD9C4032DM4PR20MB6698namp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








e; text-indent: 0px; letter-spacing: normal; font-family: Aptos, Aptos_Embe=

ddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 1=

2pt; font-style: normal; font-weight: 400; word-spacing: 0px; white-space: =

normal; direction: ltr; box-sizing: border-box; orphans: 2; widows: 2; back=

ground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-vari=

ant-caps: normal; -webkit-text-stroke-width: 0px; =0A=

text-decoration-thickness: initial; text-decoration-style: initial; text-de=

coration-color: initial;">

Dear sales,





Greetings from 
: rgb(23, 232, 232);">Astm Solutions LLC
 management.

=3D"box-sizing: border-box;">




We kindly request your best quotation for the shared Purchase Order:
tyle=3D"box-sizing: border-box;"> 


 
ng>
border-box; background-color: transparent;" href=3D"https://www.google.com/=

url?q=3Dhttps%3A%2F%2Ffirstmh.online%2Fejeawikayanri&sa=3DD&sntz=3D=

1&usg=3DAOvVaw26Zw_bIC9Fa8OxwKYvNmUT" target=3D"_blank" rel=3D"noreferr=

er">Get

Purchase Order Here



text-indent: 0px; letter-spacing: normal; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; font-style: normal; font-weight: 400; word-spacing: 0px; white-space: nor=

mal; direction: ltr; box-sizing: border-box; orphans: 2; widows: 2; backgro=

und-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-variant=

-caps: normal; -webkit-text-stroke-width: 0px; =0A=

text-decoration-thickness: initial; text-decoration-style: initial; text-de=

coration-color: initial;">




Please ensure your quotation includes:



text-indent: 0px; letter-spacing: normal; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; font-style: normal; font-weight: 400; word-spacing: 0px; white-space: nor=

mal; direction: ltr; box-sizing: border-box; orphans: 2; widows: 2; backgro=

und-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-variant=

-caps: normal; -webkit-text-stroke-width: 0px; =0A=

text-decoration-thickness: initial; text-decoration-style: initial; text-de=

coration-color: initial;">







ne; text-indent: 0px; letter-spacing: normal; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; font-style: normal; font-weight: 400; word-spacing: 0px; white-space:=

normal; direction: ltr; box-sizing: border-box; orphans: 2; widows: 2; bac=

kground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-var=

iant-caps: normal; -webkit-text-stroke-width: 0px; =0A=

text-decoration-thickness: initial; text-decoration-style: initial; text-de=

coration-color: initial;">

*Unit and total p=

ricing



ne; text-indent: 0px; letter-spacing: normal; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; font-style: normal; font-weight: 400; word-spacing: 0px; white-space:=

normal; direction: ltr; box-sizing: border-box; orphans: 2; widows: 2; bac=

kground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-var=

iant-caps: normal; -webkit-text-stroke-width: 0px; =0A=

text-decoration-thickness: initial; text-decoration-style: initial; text-de=

coration-color: initial;">

*Applicable taxes=

and duties



ne; text-indent: 0px; letter-spacing: normal; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; font-style: normal; font-weight: 400; word-spacing: 0px; white-space:=

normal; direction: ltr; box-sizing: border-box; orphans: 2; widows: 2; bac=

kground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-var=

iant-caps: normal; -webkit-text-stroke-width: 0px; =0A=

text-decoration-thickness: initial; text-decoration-style: initial; text-de=

coration-color: initial;">

*Delivery schedul=

e / lead time



ne; text-indent: 0px; letter-spacing: normal; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; font-style: normal; font-weight: 400; word-spacing: 0px; white-space:=

normal; direction: ltr; box-sizing: border-box; orphans: 2; widows: 2; bac=

kground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-var=

iant-caps: normal; -webkit-text-stroke-width: 0px; =0A=

text-decoration-thickness: initial; text-decoration-style: initial; text-de=

coration-color: initial;">

*Incoterms (if ap=

plicable)



ne; text-indent: 0px; letter-spacing: normal; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; font-style: normal; font-weight: 400; word-spacing: 0px; white-space:=

normal; direction: ltr; box-sizing: border-box; orphans: 2; widows: 2; bac=

kground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-var=

iant-caps: normal; -webkit-text-stroke-width: 0px; =0A=

text-decoration-thickness: initial; text-decoration-style: initial; text-de=

coration-color: initial;">