WEb/SEO/App spam from Google Gmail Part 2

Posted by Dave Yadallee on




This is a multipart message in MIME format.



------=_NextPart_000_2051_01DD035F.0E4AEA30

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello Dave,







Do you desire to launch a mobile app that will become viral and bring you

huge revenue? Or do you need a professional app for your business?







Custom App Development



On-Deman Custom Delivery Apps



QR Scan App development



Advanced AI Integration App



AI-Powered Navigation on Google Maps



Business Tools Using Generative AI



Custom AI Chatbot app







Let's discuss your app idea today, and get a quotation for building your

Android or iOS mobile app.







Regards,



Jeevika







Note: - If you prefer not to receive future emails, please click here to

**Unsubscribe**. (You will be removed from our list immediately.)





------=_NextPart_000_2051_01DD035F.0E4AEA30

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka Text";color:#000066'>Hello =

Dave,


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka =

Text";color:#000066'> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka Text";color:#000066'>Do you desire to =

launch a mobile app that will become viral and bring you huge revenue? =

Or do you need a professional app for your =

business?


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka =

Text";color:#000066'> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka Text";color:#000066'>Custom App =

Development


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka Text";color:#000066'>On-Deman Custom =

Delivery Apps


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka Text";color:#000066'>QR Scan App =

development


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka Text";color:#000066'>Advanced AI =

Integration App


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka Text";color:#000066'>AI-Powered Navigation =

on Google Maps


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka Text";color:#000066'>Business Tools Using =

Generative AI


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka Text";color:#000066'>Custom AI Chatbot =

app


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka =

Text";color:#000066'> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka Text";color:#000066'>Let's discuss your =

app idea today, and get a quotation for building your Android or iOS =

mobile app.


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka =

Text";color:#000066'> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka =

Text";color:#000066'>Regards,


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka =

Text";color:#000066'>Jeevika


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka =

Text";color:#000066'> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Sitka Text";color:#000066'>Note: - If you prefer =

not to receive future emails, please click here to **Unsubscribe**. (You =

will be removed from our list =

immediately.)



------=_NextPart_000_2051_01DD035F.0E4AEA30--



WEb/SEO/App spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 23 Jun 2026 15:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wc8a3-00000000Gtk-1kLQ

for dave@doctor.nl2k.ab.ca;

Tue, 23 Jun 2026 15:22:51 -0600

Resent-From: The Doctor

Resent-Date: Tue, 23 Jun 2026 15:22:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f171.google.com ([209.85.214.171]:46438)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wc4PD-000000009w0-0Sau

for root@nk.ca;

Tue, 23 Jun 2026 10:55:31 -0600

Received: by mail-pl1-f171.google.com with SMTP id d9443c01a7336-2c6bdb8a8bdso376575ad.1

for ; Tue, 23 Jun 2026 09:54:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webapppr.com; s=google; t=1782233669; x=1782838469; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=Xw33gkdSSZxUEfQaH1ryPb2oyJHY9sne4iH5xukeZc8=;

b=rNu0jY+HA8+RnqZV5PdbakpXZYK/c50gU4GuEAEHXPbKwYJMHwm/WPUZ6tFlI1nlS2

GiTt55YPQ84/GvZHA3AZcC0n33WfoMNLC5w83MmxL7PagPtTaQdl/htzdMMWxG5ELgzZ

T49oblaufUhOgQhNX3/t7Y54DkeNAWuTwvYCg=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1782233669; x=1782838469;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=Xw33gkdSSZxUEfQaH1ryPb2oyJHY9sne4iH5xukeZc8=;

b=kQf9cCZ2UTRvZG/88Tk2rIDSJjZSPqnR8HMGdZSlRitGRNyx92N6JXCAq4ZHNfEe2d

bPr/gKX+kEFrdqY+3UiyooRfLSA9X5jIDu3cg40OJMC5H0OKWhA36N8hIuvdJCyUXQzv

SsXEZW3TW0Zye7yRBW/ohOqXpPgTet5qmk8X6x8pAwyUwOimoDC7uvRfvq+jDrcxAFx3

730pPjRzLGCy00WLTD0FMc9cfIR4xFJgL53rIn8Oa6BlDE78s5ncjyXOxUOWi/rkqGq6

9Ge69KhRue2hBnIva5pqC96s2RCj4TiUQYQ4pjWniEU0tGy/u9qhDl4YbihyB4FZs1dx

FO9A==

X-Gm-Message-State: AOJu0YzsEhyOdnYZq9wNdn2659tUp1UvYG4Asm4f3WkRhhBP2PUxBjtf

dON6jXqHbYw0Yqc7TH+XFCiKALm6jakQEK2c/fXvmT/LByd210rumYwItnIbuXr2CwiSmlqk+aH

OuOW1gceHjbk=

X-Gm-Gg: AfdE7clWodEZ9yfNmW8sKOGtmApFn+Kryh9xClzseEVwpAUBJhSUdBnM+yiuYDk1KFa

VujQcy+aT8bJFKsbQKbNWgcZZvHS0kE5kgwb/ImPchwpa1lm22ujWUSL668JI0JOZAti/5Mf0ZN

RUW9C43Ub+mVV/82fNzi39OnbgAZBVfJetM8Cj3mUm1Pv71ADdw/Y9ebTBr9X3Em51c03cmtywN

A2KLxvp2OTzuEXTO4Lbbv13a7ZilsBdperlvI1F1PnR/j05/8xfKXcDhY6XkA+sQ8teHl6vklv6

71tAbn7EypisUMsl9fgk+a4kkxkVT/uU77ihHdBHm0HCvIrJNP3VzrMLDTlC1HoWkea0prO/dAS

oQWcvHxLCCvqKZqqyTG/vxsPlhDqvPIbbVCn9IbhgYSZPmoWtnZ7w21f0hLODy5239eRuqUiFO0

qRMnhtoAku//x9kH493hlZH52WXdDt

X-Received: by 2002:a17:903:3204:b0:2c6:b7d5:27ea with SMTP id d9443c01a7336-2c7c769339bmr43925285ad.17.1782233669516;

Tue, 23 Jun 2026 09:54:29 -0700 (PDT)

Received: from Pintu ([45.115.105.81])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2c743bfe6edsm110799085ad.67.2026.06.23.09.54.26

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 23 Jun 2026 09:54:29 -0700 (PDT)

From: "Jeevika"

To:

Subject: Re>, Ideas, App.. design

Date: Tue, 23 Jun 2026 22:17:32 +0530

Message-ID: <203601dd0330$f441cf10$dcc56d30$@webapppr.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_2051_01DD035F.0E4AEA30"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0CvciIssJ1MjlDS8G5VOrsucTgGQ==

Content-Language: en-in

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dave, Do you desire to launch a mobile app that will

become viral and bring you huge revenue? Or do you need a professional app

for your business? Custom App Development



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.115.105.81 listed in will-spam-for-food.eu.org]

[45.115.105.81 listed in will-spam-for-food.eu.org]

[45.115.105.81 listed in will-spam-for-food.eu.org]

[45.115.105.81 listed in will-spam-for-food.eu.org]

[45.115.105.81 listed in will-spam-for-food.eu.org]

[45.115.105.81 listed in will-spam-for-food.eu.org]

[45.115.105.81 listed in will-spam-for-food.eu.org]

[45.115.105.81 listed in will-spam-for-food.eu.org]

[209.85.214.171 listed in will-spam-for-food.eu.org]

[209.85.214.171 listed in will-spam-for-food.eu.org]

[209.85.214.171 listed in will-spam-for-food.eu.org]

[209.85.214.171 listed in will-spam-for-food.eu.org]

[209.85.214.171 listed in will-spam-for-food.eu.org]

[209.85.214.171 listed in will-spam-for-food.eu.org]

[209.85.214.171 listed in will-spam-for-food.eu.org]

[209.85.214.171 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.171 listed in dnsbl.ahbl.org]

[209.85.214.171 listed in dnsbl.ahbl.org]

[209.85.214.171 listed in dnsbl.ahbl.org]

[209.85.214.171 listed in dnsbl.ahbl.org]

[45.115.105.81 listed in dnsbl.ahbl.org]

[45.115.105.81 listed in dnsbl.ahbl.org]

[45.115.105.81 listed in dnsbl.ahbl.org]

[45.115.105.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.171 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.171 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: webapppr.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: webapppr.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: webapppr.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 MR_FROM_SHORT No description available.

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.171 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: webapppr.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.171 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 END_FUTURE_EMAILS Spammy unsubscribe

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_END_FUTURE_EMAILS Spammy unsubscribe

Subject: {SPAM?} Re>, Ideas, App.. design

Insurance phish Part 3

Posted by Dave Yadallee on


letter-spacing: normal; font-family: Tahoma; font-size: 9pt; font-style: n=

ormal; font-weight: 400; margin-top: 0pt; margin-bottom: 5pt; word-spacing:=

0px; white-space: normal; box-sizing: border-box; orphans: 2; widows: 2; b=

ackground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-v=

ariant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial;=20

text-decoration-color: initial;">


style=3D"box-sizing: border-box;">




letter-spacing: normal; font-family: Tahoma; font-size: 9pt; font-style: n=

ormal; font-weight: 400; margin-top: 0pt; margin-bottom: 5pt; word-spacing:=

0px; white-space: normal; box-sizing: border-box; orphans: 2; widows: 2; b=

ackground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-v=

ariant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial;=20

text-decoration-color: initial;">




letter-spacing: normal; font-family: Tahoma; font-size: 9pt; font-style: n=

ormal; font-weight: 400; word-spacing: 0px; white-space: normal; border-col=

lapse: collapse; orphans: 2; widows: 2; background-color: rgb(255, 255, 255=

); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-=

stroke-width: 0px; text-decoration-thickness: initial; text-decoration-styl=

e: initial; text-decoration-color: initial;"=20

border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
9pt; box-sizing: border-box;">
der-box;">


9pt; box-sizing: border-box;">1055 Vernon Dr.
=3D"margin: 0px; width: 165px; font-size: 9pt; box-sizing: border-box;">
d>

sizing: border-box;">Vancouver, BC, V6A 3P4
"margin: 0px; width: 165px; font-size: 9pt; box-sizing: border-box;">P: 778=

=2E326.0152



letter-spacing: normal; font-family: Tahoma; font-size: 9pt; font-style: n=

ormal; font-weight: 400; margin-top: 0px; margin-bottom: 5pt; word-spacing:=

0px; white-space: normal; box-sizing: border-box; orphans: 2; widows: 2; b=

ackground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-v=

ariant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial;=20

text-decoration-color: initial;"> 




text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-serif;=

font-size: 14px; font-style: normal; font-weight: 400; margin-top: 0px; ma=

rgin-bottom: 1rem; word-spacing: 0px; white-space: normal; box-sizing: bord=

er-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">


font>


text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-serif;=

font-size: 14px; font-style: normal; font-weight: 400; margin-top: 0px; ma=

rgin-bottom: 1rem; word-spacing: 0px; white-space: normal; box-sizing: bord=

er-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">


>


text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-serif;=

font-size: 14px; font-style: normal; font-weight: 400; margin-top: 0px; ma=

rgin-bottom: 1rem; word-spacing: 0px; white-space: normal; box-sizing: bord=

er-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">


>


text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-serif;=

font-size: 14px; font-style: normal; font-weight: 400; margin-top: 0px; ma=

rgin-bottom: 1rem; word-spacing: 0px; white-space: normal; box-sizing: bord=

er-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">











------=_NextPart_001_0013_E8C0A15F.5AEA36AE

Content-Type: image/png; name="no1-logo-horiz-2x.png"

Content-Transfer-Encoding: base64

Content-ID:



...





------=_NextPart_001_0013_E8C0A15F.5AEA36AE--



------=_NextPart_000_0012_E8C0A15F.5AEA36AE

Content-Type: text/html; name="Remittance Advise.html"

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="Remittance Advise.html"



...





------=_NextPart_000_0012_E8C0A15F.5AEA36AE--

Insurance phish Part 2

Posted by Dave Yadallee on


form: none; text-indent: 0px; letter-spacing: normal; font-family: Arial, H=

elvetica, sans-serif; font-size: 14.16px; font-style: normal; font-weight: =

400; word-spacing: 0px; white-space: normal; box-sizing: border-box; orphan=

s: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatur=

es: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=

-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">


nsform: none; text-indent: 0px; letter-spacing: normal; font-family: Arial,=

Helvetica, sans-serif; font-size: 14.16px; font-style: normal; font-weight=

: 400; word-spacing: 0px; white-space: normal; box-sizing: border-box; orph=

ans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">Date: 6/23=

/2026 8:33:11 a.m.


58); text-transform: none; text-indent: 0px; letter-spacing: normal; font-f=

amily: Roboto, sans-serif; font-size: 14px; font-style: normal; font-weight=

: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; backg=

round-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varia=

nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">


al; font-family: Arial, Helvetica, sans-serif; font-size: 14.16px; font-sty=

le: normal; font-weight: 400; word-spacing: 0px; white-space: normal; box-s=

izing: border-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 2=

55); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-tex=

t-stroke-width: 0px; text-decoration-thickness: initial; text-decoration-st=

yle: initial; text-decoration-color: initial;">




acing: normal; font-family: Arial, Helvetica, sans-serif; font-size: 14.16p=

x; font-style: normal; word-spacing: 0px; white-space: normal; box-sizing: =

border-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); fo=

nt-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-strok=

e-width: 0px; text-decoration-thickness: initial; text-decoration-style: in=

itial; text-decoration-color: initial;">

If you do not receive this payment or have questions please do not hesitate=

to contact and reach out to us. 




text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-serif;=

font-size: 14px; font-style: normal; font-weight: 400; margin-top: 0px; ma=

rgin-bottom: 1rem; word-spacing: 0px; white-space: normal; box-sizing: bord=

er-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">


class=3D"v1v1v1Object" style=3D"box-sizing: border-box;">


text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-serif;=

font-size: 14px; font-style: normal; font-weight: 400; margin-top: 0px; ma=

rgin-bottom: 1rem; word-spacing: 0px; white-space: normal; box-sizing: bord=

er-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">


style=3D"letter-spacing: normal; box-sizing: border-box; background-color: =

rgb(255, 255, 255);">


text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-serif;=

font-size: 14px; font-style: normal; font-weight: 400; margin-top: 0px; ma=

rgin-bottom: 1rem; word-spacing: 0px; white-space: normal; box-sizing: bord=

er-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">




text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-serif;=

font-size: 14px; font-style: normal; font-weight: 400; margin-top: 0px; ma=

rgin-bottom: 1rem; word-spacing: 0px; white-space: normal; box-sizing: bord=

er-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">Thanks
=

Credit Team

n style=3D"font-weight: bolder; box-sizing: border-box;">Anna Sy

=3D"box-sizing: border-box;">
ox-sizing: border-box;">Office Manager


tica, sans-serif" style=3D"font-size: 14px; box-sizing: border-box;">
style=3D"font-size: 9pt; box-sizing: border-box;">


letter-spacing: normal; font-family: Tahoma; font-size: 9pt; font-style: n=

ormal; font-weight: 400; margin-top: 0pt; margin-bottom: 5pt; word-spacing:=

0px; white-space: normal; box-sizing: border-box; orphans: 2; widows: 2; b=

ackground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-v=

ariant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial;=20

text-decoration-color: initial;">

=


ransparent;" href=3D"https://www.no1collision.com/" target=3D"_blank" rel=

=3D"noreferrer">


letter-spacing: normal; font-family: Tahoma; font-size: 9pt; font-style: n=

ormal; font-weight: 400; margin-top: 0pt; margin-bottom: 5pt; word-spacing:=

0px; white-space: normal; box-sizing: border-box; orphans: 2; widows: 2; b=

ackground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-v=

ariant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial;=20

text-decoration-color: initial;">3D""
d:no1-logo-horiz-2x.png" border=3D"0" hspace=3D"0" width=3D"510" height=3D"=

98">

Insurance phish Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 23 Jun 2026 15:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wc8Zg-00000000GtF-03VH

for dave@doctor.nl2k.ab.ca;

Tue, 23 Jun 2026 15:22:28 -0600

Resent-From: The Doctor

Resent-Date: Tue, 23 Jun 2026 15:22:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ns1.robo.co.jp ([219.166.6.18]:52228 helo=mail.robo.co.jp)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wc38T-000000002Sl-3Jjw

for sales@nk.ca;

Tue, 23 Jun 2026 09:34:11 -0600

Received: from synergyhub.com.my (unknown [104.223.84.143])

by mail.robo.co.jp (Postfix) with ESMTPA id 0381564112

for ; Wed, 24 Jun 2026 00:30:05 +0900 (JST)

From: "Anna Sy"

To: sales@nk.ca

Subject: Ref: EFT Remittance Notice From Vendor: 29075

Date: 23 Jun 2026 08:33:13 -0700

Message-ID: <20260623083311.F49D45444A480656@synergyhub.com.my>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_E8C0A15F.5AEA36AE"



This is a multi-part message in MIME format.



------=_NextPart_000_0012_E8C0A15F.5AEA36AE

Content-Type: multipart/related;

boundary="----=_NextPart_001_0013_E8C0A15F.5AEA36AE"





------=_NextPart_001_0013_E8C0A15F.5AEA36AE

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable
















t-align: left; color: rgb(44, 54, 58); text-transform: none; text-indent: 0=

px; letter-spacing: normal; font-family: Aptos, serif; font-size: 12pt; fon=

t-style: normal; font-weight: 400; word-spacing: 0px; white-space: normal; =

box-sizing: border-box; orphans: 2; widows: 2; font-variant-ligatures: norm=

al; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=

ion-thickness: initial; text-decoration-style:=20

initial; text-decoration-color: initial;">
-family: Calibri, sans-serif; box-sizing: border-box;">


nsform: none; text-indent: 0px; letter-spacing: normal; font-family: Arial,=

Helvetica, sans-serif; font-size: 14.16px; font-style: normal; font-weight=

: 400; word-spacing: 0px; white-space: normal; box-sizing: border-box; orph=

ans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">Dear sales=

,




ne; text-indent: 0px; letter-spacing: normal; font-family: arial; font-size=

: 13.33px; font-style: normal; font-weight: 400; word-spacing: 0px; float: =

none; display: inline !important; white-space: normal; orphans: 2; widows: =

2; background-color: rgb(255, 255, 255); font-variant-ligatures: normal; fo=

nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-th=

ickness: initial; text-decoration-style: initial;=20

text-decoration-color: initial;">Please find below your electronic remittan=

ce advice for Inv#25650

Payments will be post to your account=

within 1-5 business days of the attached remittance advise document.

span>



form: none; text-indent: 0px; letter-spacing: normal; font-family: Arial, H=

elvetica, sans-serif; font-size: 14.16px; font-style: normal; font-weight: =

400; word-spacing: 0px; white-space: normal; box-sizing: border-box; orphan=

s: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatur=

es: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=

-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">


nsform: none; text-indent: 0px; letter-spacing: normal; font-family: Arial,=

Helvetica, sans-serif; font-size: 14.16px; font-style: normal; font-weight=

: 400; word-spacing: 0px; white-space: normal; box-sizing: border-box; orph=

ans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">Payment Se=

cure Document for: sales@nk.ca



form: none; text-indent: 0px; letter-spacing: normal; font-family: Arial, H=

elvetica, sans-serif; font-size: 14.16px; font-style: normal; font-weight: =

400; word-spacing: 0px; white-space: normal; box-sizing: border-box; orphan=

s: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatur=

es: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=

-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">


nsform: none; text-indent: 0px; letter-spacing: normal; font-family: Arial,=

Helvetica, sans-serif; font-size: 14.16px; font-style: normal; font-weight=

: 400; word-spacing: 0px; white-space: normal; box-sizing: border-box; orph=

ans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">Scanned by=

: nk.ca 


54, 58); text-transform: none; text-indent: 0px; letter-spacing: normal; f=

ont-family: Roboto, sans-serif; font-size: 14px; font-style: normal; font-w=

eight: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; =

background-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-=

variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thick=

ness: initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
ca, sans-serif;"> Trusted AI Scanner Detector.
an>



form: none; text-indent: 0px; letter-spacing: normal; font-family: Arial, H=

elvetica, sans-serif; font-size: 14.16px; font-style: normal; font-weight: =

400; word-spacing: 0px; white-space: normal; box-sizing: border-box; orphan=

s: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatur=

es: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=

-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">


nsform: none; text-indent: 0px; letter-spacing: normal; font-family: Arial,=

Helvetica, sans-serif; font-size: 14.16px; font-style: normal; font-weight=

: 400; word-spacing: 0px; white-space: normal; box-sizing: border-box; orph=

ans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">Attachment=

type: PDF

Cyberpulse pro phish from Google Gmail Part 2

Posted by Dave Yadallee on




Anissia Wires has invited you to Renewal Successfully Processed for CyberPulse Pro

Title: Renewal Successfully Processed for CyberPulse Pro

When: Tuesday, June 23, 2026 at 22:08

Organizer:

Anissia Wires

Description: Service Quote date: Tuesday, 23 June 2026 23:08:35

Service Quote ID.Ref.: RUDB95TIPN5P

Reach Us: +1 (810) 228-1548



Good morning,



Your Premium Protection Service Deal will auto-renew, so we'll charge you USD362.77 for the auto-renewal within 24 hours since your account is set to auto-renew.



Expenditure Report

Service Deal start date: Tuesday, 23 June 2026 23:08:35

Service Deal ID: MH25FFZZNN

Activation Key- 3bdb67f5-29f5-48c2-b8a7-bf97045dd52e

Service Deal length: 4-Year-Cycle

Support: CyberPulse Pro

Amount: USD362.77





I would appreciate it if you did not reply to this ID.Ref.. The ID.Ref. was generated by the system.

For any help contact us by calling +1 (810) 228-1548



Humbly Yours

Robert Titcher

Malwarebytes Total Security, Inc,

4343 Inchon Circle Apt A Pelzer Sc 29669 USA

Attendees:



doctor@nl2k.ab.ca



Renewal Successfully Processed for CyberPulse Pro

Service Quote date: Tuesday, 23 June 2026 23:08:35 Service Quote ID.Ref.: RUDB95TIPN5P Reach Us: +1 (810) 228-1548 Good morning, Your Premium Protection Service Deal will auto-renew, so we'll charge



Service Quote date: Tuesday, 23 June 2026 23:08:35

Service Quote ID.Ref.: RUDB95TIPN5P

Reach Us: +1 (810) 228-1548



Good morning,



Your Premium Protection Service Deal will auto-renew, so we'll charge you USD362.77 for the auto-renewal within 24 hours since your account is set to auto-renew.



Expenditure Report

Service Deal start date: Tuesday, 23 June 2026 23:08:35

Service Deal ID: MH25FFZZNN

Activation Key- 3bdb67f5-29f5-48c2-b8a7-bf97045dd52e

Service Deal length: 4-Year-Cycle

Support: CyberPulse Pro

Amount: USD362.77





I would appreciate it if you did not reply to this ID.Ref.. The ID.Ref. was generated by the system.

For any help contact us by calling +1 (810) 228-1548



Humbly Yours

Robert Titcher

Malwarebytes Total Security, Inc,

4343 Inchon Circle Apt A Pelzer Sc 29669 USA

When

Wednesday Jun 24, 2026 ⋅ 12:08am (Eastern Time - New York)

Organizer

Anissia Wires

anissiawires@bet68x.com

Guests

(Guest list has been hidden at organizer's request)

Reply for doctor@nl2k.ab.ca

Yes



No



Maybe

More options



Invitation from Google Calendar



You are receiving this email because you are an attendee on the event.



Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more

Cyberpulse pro phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 23 Jun 2026 15:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wc8ZV-00000000Gsy-0WuG

for dave@doctor.nl2k.ab.ca;

Tue, 23 Jun 2026 15:22:17 -0600

Resent-From: The Doctor

Resent-Date: Tue, 23 Jun 2026 15:22:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f71.google.com ([209.85.222.71]:52734)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wc2lI-00000000Dk9-1Ovk

for doctor@nl2k.ab.ca;

Tue, 23 Jun 2026 09:10:14 -0600

Received: by mail-ua1-f71.google.com with SMTP id a1e0cc1a2514c-963b0a0b727so2094344241.1

for ; Tue, 23 Jun 2026 08:09:17 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1782227351; x=1782832151; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=SvAY5TGBQxyU0s3OVI+ADVonREXARFhmjPobnjG3GUs=;

b=c9fuNfztHPB2PclSuZsZ40/Av0P/B8IrXhsRZA2UE/19DeFey8He5oU8SEdr5UA89p

x8OuAscVsWh3P5VTXkvx+tjz0oL6GXnWZ5lg+zCSfwx5Gjqsx8fZd4hORhNlX5BHzXEG

n9heBhBgZrzQVdCGrqUvSsGdtB+CHF/K/5dV8SBmwmZ4M15aXG1AzMhEhUAXmwMpweQz

gmabaieATE4JM+vygaBJ1dY/3EmPPtN0wa5bjGbrg0RtgWyOVXIYcUraO91e58u/xuP7

hwz9U+XnIto4hVFCHEwcPo5SOmuV5iNoJn/WWpvZpA1EPN4EeTny4ZerP5/1vnTqIuLb

AUvw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=bet68x-com.20251104.gappssmtp.com; s=20251104; t=1782227351; x=1782832151; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=SvAY5TGBQxyU0s3OVI+ADVonREXARFhmjPobnjG3GUs=;

b=clhDXouPlfHFc3MtYLmvAxm+3YNviNlaLYj5szU4D1rOZ4mbj6tGPgwnm1Sn/na75M

1Z2xVncT+dsGjXYXVWyO0rB/RJiisQfEHN5tbHLCgULdb4/A90kRYvL0l/1BTNvqBsMO

/z7WKxW34jJw8ASgKOiMgRl8xLV42Z8Fy69Ne4d1AXkHFu9bOZ9ux0IAD4KU3ZYLvx7z

4TVo0GOTLvMJMnklAAoxfz0/xe/0J/bGMhAdoo2vpLsqFzo+CD1iMPdXzW+FE77XaQVf

JniooGLH2QqImMRuHQfJt4uKDWzTDOPM17Cc57YKNSi079pnAL7Bm3gjH4zHJEwuV+DP

pIzA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1782227351; x=1782832151;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=SvAY5TGBQxyU0s3OVI+ADVonREXARFhmjPobnjG3GUs=;

b=CKlslQrwxwcsEATogFFgNjDEh7r0YMv6zngmqo1h5m8NM7OBWQjqpFJmbI3qCRneie

Ju9VdWzX0/GTyLjspNHX8hgvm2n24dT1Nxn2edfB2hxO3cLvKH50rBgrTOnoMLfrLZ8z

AKh+zulwcemUmyvKXLwW+IMCREAqJm84B2XJyTp5L3nJ7i3kwyekLtFhtGqS/bvH9xBw

jZtjEL4DuBh65FIK4dkVVQkqwPCr6BmGyVIIqKFKFVJfPoKG8uNnonQoEvHYS2W6QiIq

enIuueAnk4g+x72kyatS15lI6+G8Ka4jRSJvwVfn4felsbAAyOjhWBz4bEg6cVh/iKhi

9LOw==

X-Gm-Message-State: AOJu0Yx6uN9uWaAVn1Tb41gAJvhqVIcG8ws1heNZFNKwiOIv6AC0K+bM

u6uIuzPvXu5Y+3iDNXeNKvbx+S5xmN1nmft1CdbCyFo4ifjdlP7Qd9WzDZLgIyCj3bJXq73sPpE

7eIjHAT0pnb4gsMNxaNUJrj25ihdXjWDP+kZMjZ4LhOYthKEeZPPTie9T

MIME-Version: 1.0

X-Received: by 2002:a05:6122:658f:b0:5a4:ac74:f5ba with SMTP id

71dfb90a1353d-5bc312e5815mr1468932e0c.11.1782227351052; Tue, 23 Jun 2026

08:09:11 -0700 (PDT)

Reply-To: Anissia Wires

Sender: Google Calendar

Message-ID:

Date: Tue, 23 Jun 2026 15:09:11 +0000

Subject: Invitation: Renewal Successfully Processed for CyberPulse Pro @ Wed

Jun 24, 2026 12:08am (GMT-4) (doctor@nl2k.ab.ca)

From: Anissia Wires

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="0000000000002b28520654ed2462"

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Renewal Successfully Processed for CyberPulse Pro Wednesday

Jun 24, 2026 â‹… 12:08am Eastern Time - New York Service Quote date: Tuesday,

23 June 2026 23:08:35 Service Quote ID.Ref.: RUDB95TIPN5P Reach Us: +1 (810)

228-1548



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.71 listed in dnsbl.ahbl.org]

[209.85.222.71 listed in dnsbl.ahbl.org]

[209.85.222.71 listed in dnsbl.ahbl.org]

[209.85.222.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.71 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.71 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.1 TW_BD BODY: Odd Letter Triples with BD

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.71 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.71 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Invitation: Renewal Successfully Processed for CyberPulse Pro @ Wed

Jun 24, 2026 12:08am (GMT-4) (doctor@nl2k.ab.ca)

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 23 Jun 2026 08:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wc2Jv-00000000CDU-24pf

for dave@doctor.nl2k.ab.ca;

Tue, 23 Jun 2026 08:41:47 -0600

Resent-From: The Doctor

Resent-Date: Tue, 23 Jun 2026 08:41:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-proxy49132.mail.163.com ([45.254.49.132]:32543)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wc1Nm-000000008nz-25EG

for sales@nk.ca;

Tue, 23 Jun 2026 07:41:52 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com;

s=s110527; h=Date:From:To:Subject:Content-Type:MIME-Version:

Message-ID; bh=qvpz9FbtjsL/6S5yCkAlkRQFUZfwZHMtznJrkHAtMIw=; b=i

kGj8ij8aHzw8kbBsLAY/NtaJqP35/EsOgaaMRsXBAU52RuD7ZXKt2cYxhNto1L5C

QN+ibcuyVpfHc7dup4GvChuLLEd04azgRRO8EA6F+IqK/VtWFlhGHjiyqlZlelTZ

NWDqsWUaJc46QWPQYhVLftkvmRpYIzVXjMynMiEIZs=

Received: from localhost (unknown [::1])

by gzsmtp6 (Coremail) with SMTP id TSWEB_001804DB000010AB6A3A8A58;

Tue, 23 Jun 2026 21:30:00 +0800 (CST)

Received: from freight_luo$163.com ( [188.253.118.67] ) by

ajax-webmail-wmsvr-40-134 (Coremail) ; Tue, 23 Jun 2026 15:09:28 +0800

(CST)

X-Originating-IP: [188.253.118.67]

Date: Tue, 23 Jun 2026 21:30:00 +0800 (CST)

From: freight_luo

To: sales@nk.ca

Subject: Are you overpaying for freight from China?

X-Priority: 3

X-Mailer: Coremail Webmail Server Version 2023.4-cmXT build

20260403(27802f6d) Copyright (c) 2002-2026 www.mailtech.cn 163com

Disposition-Notification-To: freight_luo@163.com

X-CM-CTRLMSGS: zU7T0nBsdXM9MTc4MjE5ODU2NDI1NF8xY2IxODc0NDFhMTkzZjkxZmI4NWFhM

DU5YTYxNWY0MA==

X-NTES-SC: AL_Qu2TAP2St00t7ieQYukfmUoWh+85XcCxv/4i2oJVOJ9wjALowRkNfltiGVb71PCKJR2tqgOQah9c0dZbV5NTXYgEkqSUnmBU1jaRhNJtnqwlGg==

Content-Transfer-Encoding: base64

Content-Type: text/plain; charset=UTF-8

MIME-Version: 1.0

Message-ID: <661d9ce5.5c5e.19ef350075b.Coremail.freight_luo@163.com>

X-Coremail-Locale: zh_CN

X-CM-TRANSID:QSgvCgBHtcxaijpqkVEGAA--.20391W

X-CM-SenderInfo: 5iuhxwxkwbz3rr6rljoofrz/xtbC4Ah-imo6MSiZXAAA3R

X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU==

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Manager, Hope this email finds you well.



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[188.253.118.67 listed in will-spam-for-food.eu.org]

[188.253.118.67 listed in will-spam-for-food.eu.org]

[188.253.118.67 listed in will-spam-for-food.eu.org]

[188.253.118.67 listed in will-spam-for-food.eu.org]

[188.253.118.67 listed in will-spam-for-food.eu.org]

[188.253.118.67 listed in will-spam-for-food.eu.org]

[188.253.118.67 listed in will-spam-for-food.eu.org]

[188.253.118.67 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.254.49.132 listed in dnsbl.ahbl.org]

[45.254.49.132 listed in dnsbl.ahbl.org]

[45.254.49.132 listed in dnsbl.ahbl.org]

[45.254.49.132 listed in dnsbl.ahbl.org]

[188.253.118.67 listed in dnsbl.ahbl.org]

[188.253.118.67 listed in dnsbl.ahbl.org]

[188.253.118.67 listed in dnsbl.ahbl.org]

[188.253.118.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.254.49.132 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.254.49.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.254.49.132 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.254.49.132 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[188.253.118.67 listed in sbl-xbl.spamhaus.org]

[188.253.118.67 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[188.253.118.67 listed in zen.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[freight_luo(at)163.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.254.49.132 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

Subject: {SPAM?} Are you overpaying for freight from China?



Dear Manager,



Hope this email finds you well.



I came across your company online and am reaching out in the hope of exploring a potential partnership.



I'm Tina, manager at Dantful International Logistics – we specialize in ocean and air freight from China to global destinations, with a strong focus on the US and Canadian markets.



What we offer goes beyond just shipping:



Competitive carrier contracts – we secure preferred rates with major shipping lines and airlines, helping you optimize freight costs.



End‑to‑end visibility – real‑time shipment tracking with proactive alerts, so you're never left guessing about your cargo status.



Customs brokerage support – our in‑house team and local agents handle classification, documentation, and clearance, reducing the risk of delays or extra charges.



Flexible solutions – whether you need FCL, LCL, air express, or project cargo, we tailor the plan to your specific delivery timelines and budget.



We focus on making your import process predictable and hassle‑free, so you can concentrate on your core business.



If this sounds relevant to your current needs, I'd be happy to share a few reference rates for your typical trade lanes – no commitment, just a benchmark for you.



Simply reply to this email or let me know a convenient time for a quick call – I'll take it from there.



Looking forward to the possibility of working together.



Best Wishes,









--

Tina

Sales Manager

Dantful International Logistics Co., Ltd.

深圳市鼎达富国际货运代理有限公司

Whatsapp/Wechat/Mob.: +86 19584820410

Rm 8AB, Wenhua Building East Shennan East Rd Shenzhen, China

JCTRANS NO.:151960 NVOCC-11928 FMC NO.:031594

"A Highly Professional, Cost-effective And High-quality One-Stop International Logistics Service Provider For Global Trader"







WEb/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 23 Jun 2026 07:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wc0wQ-00000000Cqr-0jxg

for dave@doctor.nl2k.ab.ca;

Tue, 23 Jun 2026 07:13:26 -0600

Resent-From: The Doctor

Resent-Date: Tue, 23 Jun 2026 07:13:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19011038.outbound.protection.outlook.com ([52.103.74.38]:3317 helo=SLXP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbxcY-00000000Oxv-2F0B

for sales@nk.ca;

Tue, 23 Jun 2026 03:40:53 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=rDixlmnuhKNIehDclRbmiyTVMOje/e10MPQWVB0omCwRZkM5LMq80SZJc0X3e90+pRsngl4r7ikDvXkLUwzObOcHX2ebTQa2yfyYC37DvWRoQOAq8uIrbtjoTi0GZ1sTpZCf1xxQmX4bWrnsfrCKsnA8atTVthEUrzUva06eOGyiytd7U7fP9od/WeaNpAHOTaQv+xoYVCVcP4YiVSuZqiRsOw67KW2Vc4oz1Whe3MWFWJ/o0JgFasp7DblyWP640ZLxpIczEiyTbeYGusaeXYNVdiq0W8beMb12R9CHV3AHJk3vc5tBS7as1J+vYtGbXkhd46GgTqhEEpjFs9ijqQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fQ91IF8uHUn+bZbx7O61IxFOq0vmudyNjT9NO2CpRyw=;

b=kYj6ZZBZpDttP7ny28f+oMtMYoXPMONJEDPgMYG88GN5WisMvHgsujtaQaI/RztslqMKBGLXMHEemxD5o+EFGaFp2QAo4upiA1sxfUF/yqChJe47C+NtF6dCeGBdFgIsxfo+eH1PWqVLismRSKrtXWe5as5fckYh45SkSG73uAzPPP6jYrar5OwW4aeubGmAZZn3XEB7spUKW5NcXgB8zQWH8x1XBRCY4GtMBw55SOvxO2o93awI7Vg56s6/6smluPiE6/vO0dgAYbD6wL4i7PpUFtTY0KMYnGVgAKNLu1vVI8gIEoy4n5WMoKWjspBnRL2272qpEGDKFFW8cQX0TQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=fQ91IF8uHUn+bZbx7O61IxFOq0vmudyNjT9NO2CpRyw=;

b=Orapejs0P5st8LVBqyy9b5/u2UR+CeAlymkWbFbFzrBRPBI9EnNAlJO9kTEau8uQ+6xFzlLNLtPywuItr93oB1Q1vFbMee3S2y3yEvWq/TZ+oNxqGCXcvRcrv1JGp0iFfNHaHibu9SRiJX+7B1wn+/eZ4f04VhI1/I0S5uq0nITVg6jK6Rp9A8lru4RjCr78vf+D205E5uotJEL6E+RA2ZitO524lU496w+3+mbaHEe5IHDGJ/xD2SBvk70AKfThrUaVmbOW7a/SFNQ+vXrlGob2AfW8HcmHoL0hnfg9IUz17Ce8DaSZGpk1p0QHEk3WjV+xj+RfuWw2JbM5MxOSXg==

Received: from SE2P216MB2686.KORP216.PROD.OUTLOOK.COM (2603:1096:101:1c3::12)

by SL2P216MB2866.KORP216.PROD.OUTLOOK.COM (2603:1096:101:282::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.139.20; Tue, 23 Jun

2026 09:39:44 +0000

Received: from SE2P216MB2686.KORP216.PROD.OUTLOOK.COM

([fe80::97d3:8724:e45e:2da4]) by SE2P216MB2686.KORP216.PROD.OUTLOOK.COM

([fe80::97d3:8724:e45e:2da4%4]) with mapi id 15.21.0139.018; Tue, 23 Jun 2026

09:39:44 +0000

From: john wordin

To: "sales@nk.ca"

Subject: 1st page on Google?

Thread-Topic: 1st page on Google?

Thread-Index: AQHdAvQ5vlgG8LY560qel/tTgeF4Fg==

Date: Tue, 23 Jun 2026 09:39:44 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE2P216MB2686:EE_|SL2P216MB2866:EE_

x-ms-office365-filtering-correlation-id: 2a470dca-da86-4288-4bba-08ded10b5bda

x-microsoft-antispam:

BCL:0;ARA:14566002|37011999003|19110799012|31061999003|8062599012|45011099003|16051099003|37102599003|55001999006|39105399006|8060799015|38102599003|15080799012|2604032031799003|24071999003|5062599005|704163111799003|20031999006|12050799012|15001099006|4140399003|25010399006|40105399003|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

=?us-ascii?Q?lgzxbYtZblxKmQAPyuPZ92fH8gZfThoUCklheYOa+yf+QCl1rDz+c7xWnWkG?=

=?us-ascii?Q?X5X5q6fDQ5uGzgsz+wpPupI2mYQf61/6/UtdlW/NoownLNhqdvuuE6Jqtq+u?=

=?us-ascii?Q?cv+LRWWfq1coVLRdbPvV9yANl1BEgQya8RmNlc6+DVXWKgXkSDMHpmI81LJo?=

=?us-ascii?Q?/EWOWt2qngGZaPal4M84/KxfZ1ksQ7XyGEcvw54xtk58GoLOo2pU9Rz6YOQO?=

=?us-ascii?Q?aCvoJCZ4AXpvfhMaMai0RsOLnDgZJODgqHrxRjqi5oDPYeJjtyAkQad7pOh3?=

=?us-ascii?Q?2Xsdl2G4t3D+W71Hd0yMqTxHuKTjV9ccVAvg/A8sIQhgZKZqfK8Pzsq58R0l?=

=?us-ascii?Q?UoQFE8VU2V1ta4iiyQcPHdTjbTsTeybU//mGiGHsTmRLQ8VnVLM4fcufY2eb?=

=?us-ascii?Q?DaDCFj64TQ7tBPz/B339786bLex0nmsUFCUAEMLC7ouLuYrh7czOjHE2mQzQ?=

=?us-ascii?Q?h9dRbrqsRHvJ69A/cgK1W/v3kjjD+G1X9o18n+Xb/nlw2jAzA3RW3lGXxzqs?=

=?us-ascii?Q?KhNSgrb/FtLSOSVXEcEE3D9NEeEKpP9Lmj4WHIOu8YK143+To4VAQ8x26CBC?=

=?us-ascii?Q?8JVV29lXCsCux1j7hcpYWgDv5EScBq65wpq9ov6gPcnunk56RShbhfpDvWwC?=

=?us-ascii?Q?tal+xnLXbVgzaO0xfECEkFxJGOyqqlw1NWWvqs1pIzvIyWtQ1hTMNg/rzND7?=

=?us-ascii?Q?LtIoaMd1rNWz24XlycMI4ccZJr77gW9vPRYQp7faU/pYsBKwbVtop5cwEqXW?=

=?us-ascii?Q?jvqSfkLdPWEtYL+3a4F559FuQ/VnGUWp5SXxiBOkdlWSJlhgPLCdguM4DOIR?=

=?us-ascii?Q?bFFIIAyRDUXoe/44pGtqTr5EUB/1IjaYeWllaGuexjRhdnvPyaY2dOQbPKQk?=

=?us-ascii?Q?r3jiPngLtRhnTeHzrYxBRaTjQisLJdaGJno41DXE0oxVVXwVmLWGtbUG1/WS?=

=?us-ascii?Q?mx92F0fLKTqSDoFBl7VDY2zM/R6bBjY7rz+QWmKqQh4CAJNBbIUyNBZemcqL?=

=?us-ascii?Q?i3v9iZef8cOfI/8nCmdP6svf8fjVPrJ1HkGekU14dTUx1dWlduAStwB1AXZ3?=

=?us-ascii?Q?qFt7VTxb8OO3xuXCNEhFeQcrxd6L6s5HD5zvzPX3z7/IGHYei+epJbEv9X9X?=

=?us-ascii?Q?cJe3FkBw8+2naRfSIf4bsCa6oD/bfI7NOHG10BYjxGdNUxHpRM8OQ51dQ9C7?=

=?us-ascii?Q?O2GB2xGpXJCFmiQ3u5tVO34VUEoUwcZlf+KIRcY+W+So6B8fBwdmES1uHGKX?=

=?us-ascii?Q?D6MNfGUjJQz4f2SH7oHJKASpxeDWUVCanHChQ8g1olBTgs6eegrbCqK9a+r0?=

=?us-ascii?Q?a+++mUw4scEid9blnuu/k1I7sBJqcuCcD5MOBMz1yMKZ1w=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?Gt3NzCrj605+b/48V3LRPYUunnIwKlRYT5uJAb7pJ22i3xzy0KOJzXiGOlk8?=

=?us-ascii?Q?FIProu11ouvfKILWC5UPC+M998LP/bJHQgnBtpiXRrrD+/KPAZ54i4ghyzVH?=

=?us-ascii?Q?LYg3rff09WIl2bMmBS6nxzcq5rtGoYPzzZucALxf1YvOW4NqUMrJGN/N0XgJ?=

=?us-ascii?Q?3mJalHtr16ILaXW78kRfMmzd5xKJwoRMRQcgbGGSHqYPFsyeT9Hd8gEs//vd?=

=?us-ascii?Q?02RVzmIYxh9b9eRBpLnClvDWiNR2Nj24KcOfPG9qICXLz411lRoHZ9CSpCmL?=

=?us-ascii?Q?VLaVjFQFkLK7PZjVJWR2f04NXFJryy0zErHGGP/y08EnpGPcOf7tu2mqLx1i?=

=?us-ascii?Q?K/AVEPTqIB7H9E5UcSVD2xUWwKiwPPV+i3goo7wGLnXUOqXnQPSXzvX6jI3T?=

=?us-ascii?Q?SYatt57H/Pkp2M80l5waOlPYKdY00jejGy8K4JCNyrT3pKTPLYyMO0oKpyCL?=

=?us-ascii?Q?WwVlRA/s/jcFStnZKc5jBq3cUTrfM9CFEUT3lWrpdm33bgyu4KK0aaHtNGDQ?=

=?us-ascii?Q?eRnrj7uXh/WjY9ZsBt2pSbRt8tzkNRWH+oyLFFEX/8OhOjQ5Ol3EVNTF5nW9?=

=?us-ascii?Q?ATyDqGzRS/lr2mFG/WA1xns1TUfKYVGHwqqLagt/EOqCz7BTH7wQW2NmqjE4?=

=?us-ascii?Q?lAYmdH6oZpzyH3k785p7FRo515J947uHy3oRGrKdOiUMFyukhXWJKCiCl4VN?=

=?us-ascii?Q?w70DEM6yYcgGPxBy2IlKDTGtjbg/JSEtvZGHvECHrAZJVZEzwj6gbx+50oBv?=

=?us-ascii?Q?jngfS6IiSFWqobscOeN493Uu7X+4IIw/206r7HRv3cC/wpewjP0isW7X4+uZ?=

=?us-ascii?Q?k+jZolOXkHUKPdR9y8w3fiYw4Uk/l3GvOXBc2igtACAIiVLiBQtq06K7vVyp?=

=?us-ascii?Q?UIgP+n/935a0CegiKILa+ndlmJI47UM/ptFD18oB3mem/Z+vNLsSUWx9GC+g?=

=?us-ascii?Q?dX/e3kiyaTtM+g3Dxtq7MFwfehCtNceedhuPuUVDPfJoPWRCeQAHkJf+w5SO?=

=?us-ascii?Q?fX9SP5H0x6LUiWrVlN+XNfZWJ46fjFST20aaPr5kXsdttqraX4EEbdvdOFJ7?=

=?us-ascii?Q?FY2pzHyHSAtWA5YtUpv22YtJjhsQGxUxhFbh+2qf7bMCanNeCXROxktxaibq?=

=?us-ascii?Q?rg0kgRyQrn6dERiUP84Fvi4yN7HlXgiwZJn7NlHKiGf72wRudrGt7gIl0HOh?=

=?us-ascii?Q?uxpjYhoPm5d4rDSaKwgFXFB4XrhnlqivHDlTAP+KLBNX0lAFwVbV033OcXG+?=

=?us-ascii?Q?kJAetNZjoLW9ciGZ7y5f20AySHJsPk4iyE4lRzzaqOlASvXwIfJ0+7p8kSTH?=

=?us-ascii?Q?JoUzPwto9hzaBMmKRYz3P8/vMxrP8+o9SkiowvrxdhP50LkO0E+uIb+rvK/v?=

=?us-ascii?Q?vIhtAFx5NjQb2g1e5QxjlVmpl/dd5XVDf3YDwOWqoEElbdKLjA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SE2P216MB26865D4D4640A01984821C56EFEE2SE2P216MB2686KORP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-94596.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE2P216MB2686.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 2a470dca-da86-4288-4bba-08ded10b5bda

X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jun 2026 09:39:44.8706

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SL2P216MB2866



--_000_SE2P216MB26865D4D4640A01984821C56EFEE2SE2P216MB2686KORP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi sales@nk.ca,



Rank #1 on Google and transform your website into a lead machine with our e=

xpert SEO services.



Want details on our packages? Let me know!



Best,



John



--_000_SE2P216MB26865D4D4640A01984821C56EFEE2SE2P216MB2686KORP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>





Hi
referrer" target=3D"_blank">

sales@nk.ca,



Rank #1 on Google and transform your website into a lead machine with ou=

r expert SEO services.



Want details on our packages? Let me know!



Best,



John









--_000_SE2P216MB26865D4D4640A01984821C56EFEE2SE2P216MB2686KORP_--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 23 Jun 2026 07:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wc0vu-00000000CoP-0Ngu

for dave@doctor.nl2k.ab.ca;

Tue, 23 Jun 2026 07:12:54 -0600

Resent-From: The Doctor

Resent-Date: Tue, 23 Jun 2026 07:12:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [156.224.81.172] (port=27014 helo=mail-m81172.xmail.ntesmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbuqm-000000006dB-0LEs

for sales@nk.ca;

Tue, 23 Jun 2026 00:43:22 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1827689_102935975.1782196930984"

To: sales

Subject: =?UTF-8?B?SG9tZSBUZXh0aWxlIEZhY3RvcnkgZnJvbSBDaGluYTogRm9sbG93LVVwIG9uIFlvdXIgUHJvZHVjdCBOZWVkcw==?=

X-Priority: 3

MIME-Version: 1.0

Received: from nidonghui@aimaylai.com( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 23 Jun 2026 14:42:10 +0800 (GMT+08:00)

From: nidonghui

Date: Tue, 23 Jun 2026 14:42:10 +0800 (GMT+08:00)

X-WM-Tid: 0a9ef337099cd096kusy43aeddd524ce61

DKIM-Signature: a=rsa-sha256;

b=m9ppW9+PWjeR4bw3E9twNRBpNt4MnnCsBQrHUPm4Rt4ipPpXqrRr4LNFO6y9/V6sckSWpJu2X5jUkjwVQ74rtwplTW1LVu06Q0BvJCGvMVnp/Zvxa77wOdlTFHHH0Z4kNVtTwc1xPW2/sxGEOH3LL7wl+TNkkZ/SKmwKVDOU6GpSsSrQoVaNqWkY5pVsJlkz3XgLZx6Qme3SRot1X484T5k8DvSe6fZ6Oe/liLeIaHBlqnH4k97wigTw0k+L9sH/7lKJG4d0X0/CjLZQLqWqZODZh+IP7OrsAETXlsVb56M39/JMojAW/ErL+l1PDwea/S2O6EGAnWQf9atILfoO8w==; s=default; c=relaxed/relaxed; d=aimaylai.com; v=1;

bh=3vULdBqMsxepGhAV3u3DWGfxymNEC9Zh/yM2kuHF/IU=;

h=date:mime-version:subject:message-id:from;

Message-ID:





Dear Sales

Hope you’re having a great week. We’re reaching out again as we haven’t heard back from you regarding our previous messages about our home textile products.

We acknowledge that you may have inquiries or concerns regarding aspects such as quality, customization, pricing, or other matters. We invite you to share your feedback with us at your convenience, and we are committed to addressing any questions you may have in a timely manner.

Could you let us know which product categories you’re interested in? We’ll send you high-resolution real product photos for your reference, helping you better evaluate our items.

We’re committed to flexible cooperation and look forward to your reply to move forward together.

Best regards,





Ni DH

International Trade Executive

Zhejiang Aimilai Silk Home Textiles Co., Ltd.

nidonghui@maylai.group

13123876583

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 23 Jun 2026 00:09:00 -0600

Received: from out28-194.mail.aliyun.com ([115.124.28.194]:31925)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbuIy-00000000Mgu-11bq

for dave@nk.ca;

Tue, 23 Jun 2026 00:08:26 -0600

Received: from WS-web ( cluster:ay29) at Tue, 23 Jun 2026 14:07:12 +0800

Date: Tue, 23 Jun 2026 14:07:03 +0800

From: "Halley"

To: "dave"

Disposition-Notification-To: "Halley"

Reply-To: "Halley"

Message-ID: <86f84f94-646a-4e65-81d6-aef6d8cc332a.halley_e@qyr-globaldata.com>

Subject: =?UTF-8?B?UHJvZmVzc2lvbmFsIFJlcG9ydCBvZiBTZW1pY29uZHVjdG9yIERldGVjdGlvbiBFcXVpcG1l?=

=?UTF-8?B?bnQgMjAyNiBmb3JlY2FzdCAtWW91ciBDb21wZXRpdG9ycyBBcmUgQW5hbHl6ZWQgIOWNig==?=

=?UTF-8?B?5a+85L2T5qOA5rWL6K6+5aSH?=

X-Priority: 3

X-Mailer: [Alimail-Mailagent][Alimail-Mailagent][W4_0.2.3][v5ForWebDing][Chrome]

MIME-Version: 1.0

X-Alimail-AntiSpam: AC=CONTINUE;BC=0.9235598|0.1745256;BR=01201311R131S26rulernew998_84748_2000303;CH=blue;DM=|AD|false|;DS=CONTINUE|ham_regular_dialog|0.246091-0.0677882-0.686121;FP=17576242837601034968|6|2|48|0|-1|-1|-1;HT=maildocker-contentspam033045220102;MF=halley_e@qyr-globaldata.com;NM=1;PH=DW;RN=96;RT=96;SR=0;TI=W4_0.2.3_v5ForWebDing_0B53043C_1782194823355_o7001c181d;

x-aliyun-im-through: {"version":"v1.0"}

x-aliyun-mail-creator: W4_0.2.3_v5ForWebDing_M3LTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzEzOC4wLjAuMCBTYWZhcmkvNTM3LjM2vN

x-aliyun-mailtrack: {"foreign-track":"0"}

Content-Type: multipart/alternative;

boundary="----=ALIBOUNDARY_2320_7fab05347700_6a3a2290_16bcc"





Hi! Our company has recently released a paid market research report titled '2026 （Financial Year Update）Global and Regional Semiconductor Detection Equipment Market Research Report'.

-

The report focuses on studying the competitive landscape of the Semiconductor Detection Equipment industry, analyzing the production capacity, sales volume, revenue, product prices, and market share of major global manufacturers, as well as the distribution of global production and sales locations.

-

If you have further interest in this report or related reports, we would be happy to share the Sample Report and Quotation for your reference.

-

The following manufacturers are included in the report:

KLA Corporation

Applied Materials

Lasertec

Hitachi High-Tech

ASML

Onto Innovation

ZEISS

Camtek

SCREEN Semiconductor Solutions

Skyverse

Precision Measurement

Toray Engineering

Merck(Unity Semiconductor SAS)

DJEL

Microtronic

YUWEITEK

VPTek

MZSemi

TZTEK(Muetec)

GOVION

.......

-

Global Semiconductor Detection Equipment Market, Segment by Type

Particle Defect Inspection

Pattern Defect Inspection

Surface Defect Inspection

Other

-

Global Semiconductor Detection Equipment Market, Segment by Application

Wafer

Mask/Film

.......

-

Due to the potential shift of the US 2025 tariff framework, which has triggered significant volatility risks in the global market, this report will conduct an in-depth assessment of the latest tariff adjustments and the potential impact of various countries' response strategies on the competitive situation in the Semiconductor Detection Equipment market, regional economic linkage, and supply chain restructuring.

-

In addition, a detailed analysis was conducted on the product classification, application, industrial chain, production mode, sales mode, industry policies, favorable and unfavorable factors for industry development, and entry barriers in the Semiconductor Detection Equipment industry.

-

In case this report is not relevant to you, please forgive me for disturbing. It would be most appreciated if you can direct me to the correct contact in your company.

-

Thank you for reading.

----------------------

Halley Cai

Global Sales Manager

QYResearch

Phone/Wechat/Whatsapp: +86-13228794030

E-mail: halley@qyresearch.com

World Leading Market Research Reports Publisher

US Office: 17890 Castleton Street Suite 369 City of Industry CA 91748 United States

China Office(Beijing): Room1501, Floor 15, No. 28 Chengfu Road, Haidian District, Beijing, China

China Office(Guangzhou): Weini International Office Building, No. 167 Linhe West Road, Tianhe District, Guangzhou

Nigerian spam from Brazil

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 23 Jun 2026 07:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wc0vO-00000000ClW-0KZ5

for dave@doctor.nl2k.ab.ca;

Tue, 23 Jun 2026 07:12:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 23 Jun 2026 07:12:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.conquista.mg.gov.br ([187.84.150.107]:40210)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbthl-00000000KV5-0BMb

for root@nk.ca;

Mon, 22 Jun 2026 23:29:56 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.conquista.mg.gov.br (Postfix) with ESMTP id D72D96812E5;

Tue, 23 Jun 2026 05:04:49 +0000 (UTC)

Received: from mail.conquista.mg.gov.br ([127.0.0.1])

by localhost (mail.conquista.mg.gov.br [127.0.0.1]) (amavis, port 10032)

with ESMTP id 9T3uLlxptjJx; Tue, 23 Jun 2026 05:04:49 +0000 (UTC)

Received: from localhost (localhost [127.0.0.1])

by mail.conquista.mg.gov.br (Postfix) with ESMTP id 6AF1F681139;

Tue, 23 Jun 2026 04:55:03 +0000 (UTC)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.conquista.mg.gov.br 6AF1F681139

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=conquista.mg.gov.br;

s=mail; t=1782190504;

bh=1UWAROPnzazEeOQB65RC5/jrHlCX1DxKp4+YEa/M/9Q=;

h=Date:From:Message-ID:MIME-Version;

b=Ds1YHw4LU+LbceZD7AAdt9TJHJICOUU9UZsPDT/zLCNlximYBTJkv2hWy82MC8KFv

ZIf5dy4Hf7E2WuUZbtBDifU6sljFmAgx2Orqs6TRx032/jq/3nSYVs1eSe+9hCE1S1

fwjxqTEjiYW5j87cg/SN2RvbLPdaECNH0D/g50Ncm9YugLTIxwocBca8sIfCJxUoLa

4+nZInkck0+IXwoEmiL61yyV2Qj1bL4/ekr6yb2p1xKl/HpCy0gqBDYypYDDo8ScsN

8/q8pY5qIQf6o81xTZvXiGI4MOxWCvtRYFaRZiagpLu5wa84QQRblRYC1gBte8fOwH

7XJW08wLKIZQA==

X-Virus-Scanned: amavis at mail.conquista.mg.gov.br

Received: from mail.conquista.mg.gov.br ([127.0.0.1])

by localhost (mail.conquista.mg.gov.br [127.0.0.1]) (amavis, port 10026)

with ESMTP id VhvsQ13KvXS4; Tue, 23 Jun 2026 04:55:01 +0000 (UTC)

Received: from mail.conquista.mg.gov.br (mail.conquista.mg.gov.br [187.84.150.107])

by mail.conquista.mg.gov.br (Postfix) with ESMTP id 18AA2680DA6;

Tue, 23 Jun 2026 04:47:13 +0000 (UTC)

Date: Tue, 23 Jun 2026 04:47:13 +0000 (UTC)

From: Theodorus Struyck

Reply-To: Theodorus Struyck

Message-ID: <308598449.95742.1782190033317.JavaMail.zimbra@conquista.mg.gov.br>

Subject: Donation of $1,500,000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_40e021bc-064e-41b6-9981-6da5ed186ad9"

X-Originating-IP: [187.84.150.107]

X-Mailer: Zimbra 8.8.15_GA_4717 (ZimbraWebClient - GC149 (Win)/8.8.15_GA_4717)

Thread-Index: gbkBvKYfY3BXpY9R+05LUMnl1CqA/w==

Thread-Topic: Donation of $1,500,000

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: We are pleased to notify you that a donation of $1,500,000

USD is gifted to you and your family by Theodorus Struyck , 65, and groups

The winner of the California Lottery Powerball’s second largest [...]



Content analysis details: (10.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[187.84.150.107 listed in will-spam-for-food.eu.org]

[187.84.150.107 listed in will-spam-for-food.eu.org]

[187.84.150.107 listed in will-spam-for-food.eu.org]

[187.84.150.107 listed in will-spam-for-food.eu.org]

[187.84.150.107 listed in will-spam-for-food.eu.org]

[187.84.150.107 listed in will-spam-for-food.eu.org]

[187.84.150.107 listed in will-spam-for-food.eu.org]

[187.84.150.107 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

[187.84.150.107 listed in dnsbl.ahbl.org]

[187.84.150.107 listed in dnsbl.ahbl.org]

[187.84.150.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[struycktheodorus81(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[187.84.150.107 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Donation of $1,500,000



--=_40e021bc-064e-41b6-9981-6da5ed186ad9

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable







We are pleased to notify you that a donation of $1,500,000 USD is gifted to=

you and your family by Theodorus Struyck , 65, and groups The winner of th=

e California Lottery Powerball=E2=80=99s second largest jackpot prize worth=

$1.765B dollars won on Oct. 11, 2023 , part of this donation it is for you=

and your family. and this donation will also help poverty reduction, for p=

oor and ederly age individuals in your community by helping humanity please=

contact us for more details to claim the money via email : theodorusstruyc=

k81@outlook.com=20



--=_40e021bc-064e-41b6-9981-6da5ed186ad9

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




ize: 12pt; color: #000000">



=3D"__SIG_PRE__">

ze=3D"4">We are pleased to notify you that a donation of $1,500,000 USD is =

gifted to you and your family by Theodorus Struyck
>,

65, and groups The winner of the California Lottery Powerball=E2=80=99s se=

cond=20

largest jackpot prize worth $1.765B dollars won on Oct. 11, 2023 , part=20

of this donation it is for you and your family. and this donation will=20

also help poverty reduction, for poor and ederly age individuals in your

community by helping humanity please contact us for more details to=20

claim the money via email : 
ew roman, serif" size=3D"4">theodorusstruyck81@outlook.com
iv>


--=_40e021bc-064e-41b6-9981-6da5ed186ad9--

Nigerian spam from Brazil

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 23:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbtOc-00000000JiB-14Rv

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 23:10:02 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 23:10:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.conquista.mg.gov.br ([187.84.150.107]:56778)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbt36-00000000If2-49vF

for doctor@netknow.ca;

Mon, 22 Jun 2026 22:47:57 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.conquista.mg.gov.br (Postfix) with ESMTP id 694EA680C4F;

Tue, 23 Jun 2026 04:42:41 +0000 (UTC)

Received: from mail.conquista.mg.gov.br ([127.0.0.1])

by localhost (mail.conquista.mg.gov.br [127.0.0.1]) (amavis, port 10032)

with ESMTP id 4mPqJabiliDl; Tue, 23 Jun 2026 04:42:41 +0000 (UTC)

Received: from localhost (localhost [127.0.0.1])

by mail.conquista.mg.gov.br (Postfix) with ESMTP id 9A2BB680BF9;

Tue, 23 Jun 2026 04:40:57 +0000 (UTC)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.conquista.mg.gov.br 9A2BB680BF9

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=conquista.mg.gov.br;

s=mail; t=1782189657;

bh=LgG2YB07XpqmOLZsdmw/Kt0TyC+ELbAoR0UmjWcAGvk=;

h=Date:From:Message-ID:MIME-Version;

b=KrbAnDjBnlrCRw5QvMn1rfksfeFRMAnprGDoqdNo/wgXFVyvOcS2JBH+HDsjRzjlD

Gi3AkzR28XdoKsurBRTVoAOGZ4tYAvz25ojX4LRf/Qd/9PREfY3v0FtauzdVxzoq1k

nanZEB8d5jGaPwfrxwgmDQhMpTeGekQ2UTSVbGlKoyHFgiuMnPuzX+yyY5iBGf7U1j

sDwTq7B8VWkJXQXII/S0NBhUWMvmZRfmKK4BJhzwH4kBFLmZ/kO/o62hWdaxw0hga/

WFAHI4N54dYxYgxeT1djGKqMJwq13FP9zuMvZGk/slOgLhA0R39DpxH70Zs2V1yK1s

FLVMLqFTMkarA==

X-Virus-Scanned: amavis at mail.conquista.mg.gov.br

Received: from mail.conquista.mg.gov.br ([127.0.0.1])

by localhost (mail.conquista.mg.gov.br [127.0.0.1]) (amavis, port 10026)

with ESMTP id lWk0fxTPNCxd; Tue, 23 Jun 2026 04:40:57 +0000 (UTC)

Received: from mail.conquista.mg.gov.br (mail.conquista.mg.gov.br [187.84.150.107])

by mail.conquista.mg.gov.br (Postfix) with ESMTP id 26C69680B82;

Tue, 23 Jun 2026 04:40:20 +0000 (UTC)

Date: Tue, 23 Jun 2026 04:40:20 +0000 (UTC)

From: Theodorus Struyck

Reply-To: Theodorus Struyck

Message-ID: <1658311266.95484.1782189620084.JavaMail.zimbra@conquista.mg.gov.br>

Subject: Donation of $1,500,000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_ac0d4a72-eb82-4646-8dd1-233c1a4ac75d"

X-Originating-IP: [187.84.150.107]

X-Mailer: Zimbra 8.8.15_GA_4717 (ZimbraWebClient - GC149 (Win)/8.8.15_GA_4717)

Thread-Index: FQCgArUa+3crdhQCWv/BcISo7jSXRA==

Thread-Topic: Donation of $1,500,000

X-Spam_score: 9.9

X-Spam_score_int: 99

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: We are pleased to notify you that a donation of $1,500,000

USD is gifted to you and your family by Theodorus Struyck , 65, and groups

The winner of the California Lottery Powerball’s second largest [...]



Content analysis details: (9.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

[187.84.150.107 listed in dnsbl.ahbl.org]

[187.84.150.107 listed in dnsbl.ahbl.org]

[187.84.150.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[struycktheodorus81(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[187.84.150.107 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Donation of $1,500,000



--=_ac0d4a72-eb82-4646-8dd1-233c1a4ac75d

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable







We are pleased to notify you that a donation of $1,500,000 USD is gifted to=

you and your family by Theodorus Struyck , 65, and groups The winner of th=

e California Lottery Powerball=E2=80=99s second largest jackpot prize worth=

$1.765B dollars won on Oct. 11, 2023 , part of this donation it is for you=

and your family. and this donation will also help poverty reduction, for p=

oor and ederly age individuals in your community by helping humanity please=

contact us for more details to claim the money via email : theodorusstruyc=

k81@outlook.com=20



--=_ac0d4a72-eb82-4646-8dd1-233c1a4ac75d

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




ize: 12pt; color: #000000">



=3D"__SIG_PRE__">

ze=3D"4">We are pleased to notify you that a donation of $1,500,000 USD is =

gifted to you and your family by Theodorus Struyck
>,

65, and groups The winner of the California Lottery Powerball=E2=80=99s se=

cond=20

largest jackpot prize worth $1.765B dollars won on Oct. 11, 2023 , part=20

of this donation it is for you and your family. and this donation will=20

also help poverty reduction, for poor and ederly age individuals in your

community by helping humanity please contact us for more details to=20

claim the money via email : 
ew roman, serif" size=3D"4">theodorusstruyck81@outlook.com
iv>


--=_ac0d4a72-eb82-4646-8dd1-233c1a4ac75d--

Nigerian spam from Brazil

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 23:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbtOh-00000000JiO-31Tl

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 23:10:07 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 23:10:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.conquista.mg.gov.br ([187.84.150.107]:56786)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbt36-00000000IfF-49xM

for doctor@nl2k.ab.ca;

Mon, 22 Jun 2026 22:47:57 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.conquista.mg.gov.br (Postfix) with ESMTP id 694EA680C4F;

Tue, 23 Jun 2026 04:42:41 +0000 (UTC)

Received: from mail.conquista.mg.gov.br ([127.0.0.1])

by localhost (mail.conquista.mg.gov.br [127.0.0.1]) (amavis, port 10032)

with ESMTP id 4mPqJabiliDl; Tue, 23 Jun 2026 04:42:41 +0000 (UTC)

Received: from localhost (localhost [127.0.0.1])

by mail.conquista.mg.gov.br (Postfix) with ESMTP id 9A2BB680BF9;

Tue, 23 Jun 2026 04:40:57 +0000 (UTC)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.conquista.mg.gov.br 9A2BB680BF9

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=conquista.mg.gov.br;

s=mail; t=1782189657;

bh=LgG2YB07XpqmOLZsdmw/Kt0TyC+ELbAoR0UmjWcAGvk=;

h=Date:From:Message-ID:MIME-Version;

b=KrbAnDjBnlrCRw5QvMn1rfksfeFRMAnprGDoqdNo/wgXFVyvOcS2JBH+HDsjRzjlD

Gi3AkzR28XdoKsurBRTVoAOGZ4tYAvz25ojX4LRf/Qd/9PREfY3v0FtauzdVxzoq1k

nanZEB8d5jGaPwfrxwgmDQhMpTeGekQ2UTSVbGlKoyHFgiuMnPuzX+yyY5iBGf7U1j

sDwTq7B8VWkJXQXII/S0NBhUWMvmZRfmKK4BJhzwH4kBFLmZ/kO/o62hWdaxw0hga/

WFAHI4N54dYxYgxeT1djGKqMJwq13FP9zuMvZGk/slOgLhA0R39DpxH70Zs2V1yK1s

FLVMLqFTMkarA==

X-Virus-Scanned: amavis at mail.conquista.mg.gov.br

Received: from mail.conquista.mg.gov.br ([127.0.0.1])

by localhost (mail.conquista.mg.gov.br [127.0.0.1]) (amavis, port 10026)

with ESMTP id lWk0fxTPNCxd; Tue, 23 Jun 2026 04:40:57 +0000 (UTC)

Received: from mail.conquista.mg.gov.br (mail.conquista.mg.gov.br [187.84.150.107])

by mail.conquista.mg.gov.br (Postfix) with ESMTP id 26C69680B82;

Tue, 23 Jun 2026 04:40:20 +0000 (UTC)

Date: Tue, 23 Jun 2026 04:40:20 +0000 (UTC)

From: Theodorus Struyck

Reply-To: Theodorus Struyck

Message-ID: <1658311266.95484.1782189620084.JavaMail.zimbra@conquista.mg.gov.br>

Subject: Donation of $1,500,000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_ac0d4a72-eb82-4646-8dd1-233c1a4ac75d"

X-Originating-IP: [187.84.150.107]

X-Mailer: Zimbra 8.8.15_GA_4717 (ZimbraWebClient - GC149 (Win)/8.8.15_GA_4717)

Thread-Index: FQCgArUa+3crdhQCWv/BcISo7jSXRA==

Thread-Topic: Donation of $1,500,000

X-Spam_score: 9.9

X-Spam_score_int: 99

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: We are pleased to notify you that a donation of $1,500,000

USD is gifted to you and your family by Theodorus Struyck , 65, and groups

The winner of the California Lottery Powerball’s second largest [...]



Content analysis details: (9.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

[187.84.150.107 listed in dnsbl.ahbl.org]

[187.84.150.107 listed in dnsbl.ahbl.org]

[187.84.150.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[187.84.150.107 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[struycktheodorus81(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[187.84.150.107 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Donation of $1,500,000



--=_ac0d4a72-eb82-4646-8dd1-233c1a4ac75d

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable







We are pleased to notify you that a donation of $1,500,000 USD is gifted to=

you and your family by Theodorus Struyck , 65, and groups The winner of th=

e California Lottery Powerball=E2=80=99s second largest jackpot prize worth=

$1.765B dollars won on Oct. 11, 2023 , part of this donation it is for you=

and your family. and this donation will also help poverty reduction, for p=

oor and ederly age individuals in your community by helping humanity please=

contact us for more details to claim the money via email : theodorusstruyc=

k81@outlook.com=20



--=_ac0d4a72-eb82-4646-8dd1-233c1a4ac75d

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




ize: 12pt; color: #000000">



=3D"__SIG_PRE__">

ze=3D"4">We are pleased to notify you that a donation of $1,500,000 USD is =

gifted to you and your family by Theodorus Struyck
>,

65, and groups The winner of the California Lottery Powerball=E2=80=99s se=

cond=20

largest jackpot prize worth $1.765B dollars won on Oct. 11, 2023 , part=20

of this donation it is for you and your family. and this donation will=20

also help poverty reduction, for poor and ederly age individuals in your

community by helping humanity please contact us for more details to=20

claim the money via email : 
ew roman, serif" size=3D"4">theodorusstruyck81@outlook.com
iv>


--=_ac0d4a72-eb82-4646-8dd1-233c1a4ac75d--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Mon, 22 Jun 2026 20:39:00 -0600

Received: from [59.82.0.37] (port=29437 helo=out0-37.static.mail.aliyun.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbr1S-0000000038w-20Ir

for dave@nk.ca;

Mon, 22 Jun 2026 20:38:08 -0600

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.9216307|0.8675842;BR=01201311R101S62rulernew999_84748_200303;CH=yellow;DM=|SPAM|false|;DS=CONTINUE|ham_enroll_verification|0.14033-0.0948715-0.764798;FP=15846859343752507422|1|1|25|0|-1|-1|-1;HT=maildocker-contentspam033045220102;MF=fendi.s@qyr-survey.com;NM=1;PH=DS;RN=216;RT=0;SR=0;TI=SMTPD_---.i2zC-ht_1782182200;

Received: from DESKTOP-KC4MDFV(mailfrom:fendi.s@qyr-survey.com fp:SMTPD_---.i2zC-ht_1782182200 cluster:ay29)

by smtp.aliyun-inc.com;

Tue, 23 Jun 2026 10:36:49 +0800

Date: Tue, 23 Jun 2026 10:36:40 +0800

From: Fendi.He

Message-ID: <7AB4DCBC-2A80-452C-868B-EE07B16E1F88@qyr-survey.com>

Subject: =?utf-8?Q?Market_Analysis_of_Semiconductor_Inspection_and_Measur?=

=?utf-8?Q?ement_Equipment__________=E6=8B=89=E6=8B=94=E6=B6=A6=E6=BB=91?=

=?utf-8?Q?=E5=89=82?=

Disposition-Notification-To: Fendi.He

X-Mailer: MailMasterPC/4.19.4.1001 (Win10 22H2)

X-MailMaster-ShowOneRcpt: 1

X-CUSTOM-MAIL-MASTER-SENT-ID: 0A62A3C2-FC67-4533-978A-CC41B11A011D

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, I'm reaching out to share our latest 2026 Semiconductor

Inspection and Measurement Equipment Market Report. Please feel free to contact

me if you would like to get a quote and sample report.



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[59.82.0.37 listed in will-spam-for-food.eu.org]

[59.82.0.37 listed in will-spam-for-food.eu.org]

[59.82.0.37 listed in will-spam-for-food.eu.org]

[59.82.0.37 listed in will-spam-for-food.eu.org]

[59.82.0.37 listed in will-spam-for-food.eu.org]

[59.82.0.37 listed in will-spam-for-food.eu.org]

[59.82.0.37 listed in will-spam-for-food.eu.org]

[59.82.0.37 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[59.82.0.37 listed in dnsbl.ahbl.org]

[59.82.0.37 listed in dnsbl.ahbl.org]

[59.82.0.37 listed in dnsbl.ahbl.org]

[59.82.0.37 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[59.82.0.37 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[59.82.0.37 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[59.82.0.37 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[59.82.0.37 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[59.82.0.37 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[59.82.0.37 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[59.82.0.37 listed in bl.score.senderscore.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or

Generic rPTR

1.2 MISSING_HEADERS Missing To: header

0.1 TW_KY BODY: Odd Letter Triples with KY

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?Q?Market_Analysis_of_Semiconductor_Inspection_and_Measur?=

=?utf-8?Q?ement_Equipment__________=E6=8B=89=E6=8B=94=E6=B6=A6=E6=BB=91?=

=?utf-8?Q?=E5=89=82?=





Good day,



I'm reaching out to share our latest 2026 Semiconductor Inspection and Measurement Equipment Market Report. Please feel free to contact me if you would like to get a quote and sample report.



The report provides insights into:



Market size and growth outlook

Sales and revenue analysis

Pricing and cost trends

Gross margin analysis

Competitive landscape

Market share by product type and application

Emerging industry trends





Major competitors covered:



KLA Corporation

Applied Materials

Hitachi High-Technologies

ASML

Onto Innovation

Lasertec

SCREEN Semiconductor Solutions

ZEISS

Camtek

Skyverse

Toray Engineering

RSIC

Precision Measurement

Microtronic

Unity Semiconductor SAS

SMEE

TZTEK（Muetec）

DJEL



......



If this topic is handled by another colleague, I would appreciate it if you could kindly forward this email to the appropriate contact.



Thank you for reading.



----------------------------------

Fendi He | Manager-Global Sales

E: fendi@qyresearch.com

T:+86-13503065312(7*24)

QY RESEARCH, INC.

USA Office: 17890 Castleton Street Suite 369 City of Industry CA 91748 United States

China Office: VILI International Building No.167 Tianhe District Guangzhou City China