NetKnow Corporate Blog

Norton Safeguard phish from Google Gmail Part 3

Posted by Dave Yadallee on Monday, March 23. 2026

=20

Norton Safeguard phish from Google Gmail Part 4

Posted by Dave Yadallee on Monday, March 23. 2026

/InformAction">
itemprop=3D"object" itemscope itemtype=3D"http://schema.org/Event">
temprop=3D"eventStatus" content=3D"http://schema.org/EventScheduled"/>
itemprop=3D"publisher" itemscope itemtype=3D"http://schema.org/Organizatio=

n">
op=3D"eventId/googleCalendar" content=3D"NBaW4wqsqUB05dPvScKYwN9svR"/>
style=3D"display: none; font-size: 1px; color: #fff; line-height: 1px; hei=

ght: 0; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow: hidden=

;" itemprop=3D"name">1583-1065-10104 update is now available
ia-hidden=3D"true">
Z"><=

/span>
ntation" align=3D"center" style=3D"width:100%;" class=3D"body-container">
body>

6px;" aria-hidden=3D"true">

=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"">=

tp://schema.org/EmailMessage">

1583-1065-10104 u=

pdate is now available

"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"cent=

er" style=3D"width:100%;" class=3D"">

1px #dadce0; border-radius: 8px; direction: rtl; font-size: 0; padding: 24p=

x 32px; text-align: left; vertical-align: top;" class=3D"main-container-inn=

er">

: 13px; text-align: left; direction: ltr; display: inline-block; vertical-a=

lign: top; width: 100%;overflow: hidden; word-wrap: break-word;">
der=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=

=3D"100%" class=3D"main-column-table-ltr" style=3D"padding-right: 32px; pad=

ding-left: 0;;table-layout: fixed;">

style=3D"padding:0; vertical-align:top;">
=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" style=3D"tabl=

e-layout: fixed;"><=

td style=3D"font-size: 0; padding: 0; text-align: left; word-break: break-w=

ord;;padding-bottom:24px;">

nt-style: normal; font-weight: 400; font-size: 14px; line-height: 20px; let=

ter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary=

-text" role=3D"presentation">

ft; word-break: break-word;;padding-bottom:2px;">

'Google Sans', Roboto, sans-serif;font-weight: 400; font-size: 22p=

x; line-height: 28px;color: #3c4043; text-decoration: none;" class=3D"prima=

ry-text" role=3D"presentation">1583-1065-10104 upda=

te is now available

dding: 0; text-align: left; word-break: break-word;;padding-bottom:24px;"><=

div style=3D"font-family: Roboto, sans-serif;font-style: normal; font-weigh=

t: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3=

c4043; text-decoration: none;" class=3D"primary-text" role=3D"presentation"=

>
24T032037Z">
>Monday Mar 23, 2026 =E2=8B=85 11:20pm (Eastern Time - =

New York)

text-align: left; word-break: break-word;;padding-bottom:24px;">

=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; f=

ont-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; te=

xt-decoration: none;" class=3D"primary-text" role=3D"presentation">IN=

VOICE
N0RT0N SAFEGUARD, United States
Customer Support Call: (810) 3=

65-3203

Date: Monday, 23 March 2026
Order Receipt: 1583-1065-10104

=

Dear Subscriber,

We would like to inform you that your 60 Months s=

ervice term with N0RT0N SAFEGUARD has been completed.

Item Overview P=

anel:
Reference Number: 102-102-73-8877
Service: LifeX Secure
Warr=

anty Period: 60 Months
Amount Paid: USD457.77
Key: f67aab8b-5a65-4447=

-ab7c-a302de0dccf3

For further details, renewal options, or refund-re=

lated queries, please reach out to us at (810) 365-3203.

With enduri=

ng thanks,
The N0RT0N SAFEGUARD, LLC.
Billing head: Joan Michener
=

Copyright =C2=A9 2026 Company. All Rights Reserved.

p=3D"description" content=3D"INVOICE

N0RT0N SAFEGUARD, United States

Customer Support Call: (810) 365-3203

Date: Monday, 23 March 2026

Order Receipt: 1583-1065-10104

Dear Subscriber,

We would like to inform you that your 60 Months service term with N0RT0N SA=

FEGUARD has been completed.

Item Overview Panel:

Reference Number: 102-102-73-8877

Service: LifeX Secure

Warranty Period: 60 Months

Amount Paid: USD457.77

Key: f67aab8b-5a65-4447-ab7c-a302de0dccf3

For further details, renewal options, or refund-related queries, please rea=

ch out to us at (810) 365-3203.

With enduring thanks,

The N0RT0N SAFEGUARD, LLC.

Billing head: Joan Michener

Copyright =C2=A9 2026 Company. All Rights Reserved."/>

ing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;">

class=3D"primary-text" style=3D"font-size: 14px;color: #3c4043; text-decora=

tion: none;font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; =

padding: 0;">Guests

(Guest list has been hidden at or=

ganizer's request)

<=

!--[if mso | IE]>

tr>

--000000000000f4b7b4064db1bfde--

Norton Safeguard phish from Google Gmail Part 2

Posted by Dave Yadallee on Monday, March 23. 2026

#outlook a {

padding: 0;

}

.ReadMsgBody {

width: 100%;

}

.ExternalClass {

width: 100%;

}

.ExternalClass * {

line-height: 100%;

}

table,

td {

mso-table-lspace: 0pt;

mso-table-rspace: 0pt;

}

img {

border: 0;

height: auto;

line-height: 100%;

outline: none;

text-decoration: none;

-ms-interpolation-mode: bicubic;

}

p {

display: block;

margin: 13px 0;

}

=20

=20

=20

WEb/SEO/App spam from google Gmail Part 2

Posted by Dave Yadallee on Monday, March 23. 2026

------=_NextPart_000_2F83_01DCBAF3.3BDE83D0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

style=3D'font-size:12.0pt'>Hi Dave Yadallee,

class=3DMsoNoSpacing>
style=3D'font-size:12.0pt'>

class=3DMsoNoSpacing>Hope you’re =

doing well.

style=3D'font-size:12.0pt'>

class=3DMsoNoSpacing>I’m =

following up to see if you had a chance to review my earlier email =

regarding the mobile app proposal. Please let me know your thoughts =

or if you’d like me to share the next steps, details, or a quick =

overview.

style=3D'font-size:12.0pt'>

class=3DMsoNoSpacing>Looking forward to =

your response.

style=3D'font-size:12.0pt'>

class=3DMsoNoSpacing>Best =

regards,

style=3D'font-family:"Calibri",sans-serif'>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

=3D=3D=3D=3D

style=3D'font-size:12.0pt'>From:
style=3D'font-size:12.0pt'>Padmakar

class=3DMsoNoSpacing>
style=3D'font-size:12.0pt'>Sent:
style=3D'font-size:12.0pt'>
style=3D'font-size:12.0pt;mso-fareast-language:EN-IN'>Thursday, January =

01, 2026 10:04 AM
style=3D'font-size:12.0pt'>

class=3DMsoNoSpacing>To: =

root@nk.ca
style=3D'font-size:12.0pt'>

class=3DMsoNoSpacing>
style=3D'font-size:12.0pt'>Subject:
style=3D'font-size:12.0pt'>
style=3D'font-size:12.0pt;mso-fareast-language:EN-IN'>RE: Quick =

Discussion on Mobile App…..
style=3D'font-size:12.0pt'>

class=3DMsoNormal>
style=3D'font-size:12.0pt;line-height:107%;mso-fareast-language:EN-IN'>He=

llo,

style=3D'font-size:12.0pt;line-height:107%;mso-fareast-language:EN-IN'>Lo=

oking to create a mobile app for your business? We build custom apps =

for Education, Food Delivery, Logistics, E-Commerce, Real Estate, Taxi, =

Business, Lifestyle, and more — tailored to your =

needs.

style=3D'font-size:12.0pt;line-height:107%;mso-fareast-language:EN-IN'>Sh=

are your app idea and requirements, and let’s turn it into =

reality!

style=3D'font-size:12.0pt;line-height:107%;mso-fareast-language:EN-IN'>Th=

anks,

------=_NextPart_000_2F83_01DCBAF3.3BDE83D0--

Norton Safeguard phish from Google Gmail Part 1

Posted by Dave Yadallee on Monday, March 23. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Mar 2026 08:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4gde-00000000GNR-0JJd

for dave@doctor.nl2k.ab.ca;

Mon, 23 Mar 2026 08:52:18 -0600

Resent-From: The Doctor

Resent-Date: Mon, 23 Mar 2026 08:52:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f73.google.com ([209.85.160.73]:40740)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4gAd-00000000Dz9-0uFW

for doctor@nl2k.ab.ca;

Mon, 23 Mar 2026 08:22:28 -0600

Received: by mail-oa1-f73.google.com with SMTP id 586e51a60fabf-41bf8a2d7d8so6146113fac.3

for ; Mon, 23 Mar 2026 07:21:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1774275685; x=1774880485; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=U7oMg/zH4I4u3VSg0ggYIiLvLxmXUlG6lPUJ51wGInM=;

b=KRfCsyqjO1eNTmLXbSa5VarebEPROhTAwv6dzFpH16kgsEfCWy4hz03ibTuzU/O0Ui

Tpc6tAu5tu3z7BWYuWh3pv8e3vEHwGtTSjKHLcCK9RQvFn9+visRg4mIjJqvHe9wdZbF

rscFAzvRgGWyx5TfThfOOA9lKu+UymTx4WR7JBhJNzRg5vvQB5peX8BCnqjAzClCYevX

JhYbjT9pQC3ebaOviOG44bzC5/w60eg9/uQeosvA8DkveHahoUJ5Clw58i+FmvsoB5cn

0tH+sGl+15z+Qy9b+IDB4VyJ+HLrfpqfb+46jJ4HChzlrSAUqDEuHThXoNdw1xncn4Us

b+2g==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=jrfirst-com.20230601.gappssmtp.com; s=20230601; t=1774275685; x=1774880485; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=U7oMg/zH4I4u3VSg0ggYIiLvLxmXUlG6lPUJ51wGInM=;

b=bByOyqZf2ttnSNMq3NSPtCYDNgdevp3ALXUiW0k+brrieu7WSG3oC+J8foaLfVgb3o

3KgDExGFUJVi8f6oeslSDCHElndTXIsHx+YmaoV/7CrCl9HWSJ8AsvgU3+AjFVyRD9yL

Xu5v0nIDVNwRWqr370+1M2eP3fMlv8K3gDM7hAfLWSM8hkm3R6MDa0ksJJQh9L7xKlCd

0aWqFQNFLDvEpC7H948Klke5r4RNRdcZCtV0cdkPiSkyTv3w4UtPMcCm2c9RomicJKeQ

wtwFHe2vcGCvtrU3J6Dk9xCKuxpbBRv4j9+mtWmK6pMSHdF/JeebbXOs/x4gt++JnlzV

gt7g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774275685; x=1774880485;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=U7oMg/zH4I4u3VSg0ggYIiLvLxmXUlG6lPUJ51wGInM=;

b=Q4L6obqmMO2xQI3BtTTFz9FYUfqFBiWb+z2xMFkd3V/QrGjKTfVORQORYKmOi/tmjA

eXC1o7/PggO18cmBhO2d3+yx9TFggM7wYGldfnqmwTZ0jIhDW/cBr9Dcth9rVRm98Atv

h2SuvWhW+U63islQIqKAaQfMEcTFhelWRC6N8DlE+/zg8cQToQ+Vqxg6QRawt0Wu767n

eXZViE8VcAJxfCbDxFAFmPWwYBEFVBdnjMl1RfpmL9VEgQzLqkHZEkBqXqYQ5qkEVwz/

IOyNGTzPbz9IixlTf6QPh7PnzO3mvgpl9/NcXuNkXDuFQfN5GgjtnaDuzD/5mOMNRz1t

Cx8g==

X-Forwarded-Encrypted: i=1; AJvYcCX7OcDc+y8d1k9XaqmY/DtfMKPVfFpkAFvDIS7Nq8lId/8tV7wdWYpudouy7aBh7/tjEZJYh/o=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YxqMM5j0tw6zefPkzffGhrjJdnAeFTXdZKhckvtSea1yFQV2yh0

uX8BEOJI68XixSBCH164LX+nyJgGzxNgSu4+y/GhDNOOyvWje16vN/kgQ8iFHoKlka9UcqM8TM7

s00Uhg/QMkOgmjKPJ+gTJKnS7iFeIaohqu40Q9BZvstRP0g==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:4f4b:b0:467:fd4:97be with SMTP id

5614622812f47-467e5d432dcmt8629999b6e.2.1774275684611; Mon, 23 Mar 2026

07:21:24 -0700 (PDT)

Reply-To: Andy Ochoa

Sender: Google Calendar

Message-ID:

Date: Mon, 23 Mar 2026 14:21:25 +0000

Subject: 1583-1065-10104 update is now available

From: Andy Ochoa

Content-Type: multipart/alternative; boundary="000000000000f4b7b4064db1bfde"

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: 1583-1065-10104 update is now available 1583-1065-10104 update

is now available Monday Mar 23, 2026 â‹… 11:20pm Eastern Time - New York

INVOICE N0RT0N SAFEGUARD, United States Customer Support Call: (810) 365-3203

Content analysis details: (15.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.73 listed in dnsbl.ahbl.org]

[209.85.160.73 listed in dnsbl.ahbl.org]

[209.85.160.73 listed in dnsbl.ahbl.org]

[209.85.160.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.73 listed in dnsbl.ahbl.org]

1.2 MISSING_HEADERS Missing To: header

1.0 FUZZY_NORTON BODY: Obfuscated "norton"

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.73 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.73 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} 1583-1065-10104 update is now available

--000000000000f4b7b4064db1bfde

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

MTU4My0xMDY1LTEwMTA0IHVwZGF0ZSBpcyBub3cgYXZhaWxhYmxlDQoNCjE1ODMtMTA2NS0xMDEw

NCB1cGRhdGUgaXMgbm93IGF2YWlsYWJsZQ0KTW9uZGF5IE1hciAyMywgMjAyNiDii4UgMTE6MjBw

bQ0KRWFzdGVybiBUaW1lIC0gTmV3IFlvcmsNCg0KDQoNCklOVk9JQ0UNCk4wUlQwTiBTQUZFR1VB

UkQsIFVuaXRlZCBTdGF0ZXMNCkN1c3RvbWVyIFN1cHBvcnQgQ2FsbDogKDgxMCkgIDM2NS0zMjAz

DQoNCkRhdGU6IE1vbmRheSwgMjMgTWFyY2ggMjAyNg0KT3JkZXIgUmVjZWlwdDogMTU4My0xMDY1

LTEwMTA0DQoNCkRlYXIgU3Vic2NyaWJlciwNCg0KV2Ugd291bGQgbGlrZSB0byBpbmZvcm0geW91

IHRoYXQgeW91ciA2MCBNb250aHMgc2VydmljZSB0ZXJtIHdpdGggTjBSVDBOICANClNBRkVHVUFS

RCBoYXMgYmVlbiBjb21wbGV0ZWQuDQoNCkl0ZW0gT3ZlcnZpZXcgUGFuZWw6DQpSZWZlcmVuY2Ug

TnVtYmVyOiAxMDItMTAyLTczLTg4NzcNClNlcnZpY2U6IExpZmVYIFNlY3VyZQ0KV2FycmFudHkg

UGVyaW9kOiA2MCBNb250aHMNCkFtb3VudCBQYWlkOiBVU0Q0NTcuNzcNCktleTogZjY3YWFiOGIt

NWE2NS00NDQ3LWFiN2MtYTMwMmRlMGRjY2YzDQoNCkZvciBmdXJ0aGVyIGRldGFpbHMsIHJlbmV3

YWwgb3B0aW9ucywgb3IgcmVmdW5kLXJlbGF0ZWQgcXVlcmllcywgcGxlYXNlICANCnJlYWNoIG91

dCB0byB1cyBhdCAoODEwKSAgMzY1LTMyMDMuDQoNCldpdGggZW5kdXJpbmcgdGhhbmtzLA0KVGhl

IE4wUlQwTiBTQUZFR1VBUkQsIExMQy4NCkJpbGxpbmcgaGVhZDogSm9hbiBNaWNoZW5lcg0KQ29w

eXJpZ2h0IMKpIDIwMjYgQ29tcGFueS4gQWxsIFJpZ2h0cyBSZXNlcnZlZC4NCg0KT3JnYW5pemVy

DQpBbmR5IE9jaG9hDQphbmR5b2Nob2ExMDAyQGpyZmlyc3QuY29tDQoNCkd1ZXN0cw0KKEd1ZXN0

IGxpc3QgaGFzIGJlZW4gaGlkZGVuIGF0IG9yZ2FuaXplcidzIHJlcXVlc3QpDQoNCg==

--000000000000f4b7b4064db1bfde

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

class=3DWordSection1>

style=3D'font-family:"Calibri","sans-serif"'>Hi there!
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>I hope you’re doing =

well.
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>I’m reaching out to =

see if you’re looking to create, upgrade, repair, or redesign a =

website or mobile app. I work with Wix, Shopify, and WordPress, helping =

businesses improve design, performance, and usability.
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>I’m an India-based =

web designer and developer, working with clients worldwide and offering =

reliable, cost-effective services.
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>Technologies & Services =

I work with:
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>• HTML, CSS, =

JavaScript
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>• React, =

Next.js
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>• PHP, =

Laravel
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>• Shopify (custom =

themes & apps)
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>• WordPress (custom =

themes & plugins)
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>• Wix custom =

design
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>• Mobile app =

UI/UX
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>• Website speed =

optimization & SEO
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>If you are interested =

please share your contact detail, then I can send you our past work =

details, company information and an affordable quotation with the best =

offer.
class=3Dapple-converted-space>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>Thank you for your time and =

consideration.
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'font-family:"Calibri","sans-serif"'>Kind regards,
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

style=3D'margin-bottom:10.0pt;mso-line-height-alt:10.1pt'>
style=3D'font-family:"Calibri","sans-serif"'>Karthik,
p>

style=3D'margin-bottom:10.0pt;mso-line-height-alt:10.1pt'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'> =

style=3D'margin-bottom:10.0pt;mso-line-height-alt:10.1pt'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#C0000=

0'>P.S. If you’d prefer not to receive further emails, simply =

reply with “NO” in the subject line.
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=

------=_NextPart_000_11419_01DCBAD6.5BEC1B00--

WEb/SEO/App spam from Google Gmail Part 1

Posted by Dave Yadallee on Monday, March 23. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Mar 2026 06:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4dws-000000009FE-1uVc

for dave@doctor.nl2k.ab.ca;

Mon, 23 Mar 2026 05:59:58 -0600

Resent-From: The Doctor

Resent-Date: Mon, 23 Mar 2026 05:59:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f196.google.com ([209.85.215.196]:56784)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4bh0-00000000DpL-2xBQ

for sales@nk.ca;

Mon, 23 Mar 2026 03:35:41 -0600

Received: by mail-pg1-f196.google.com with SMTP id 41be03b00d2f7-c742d7c8acfso1676240a12.1

for ; Mon, 23 Mar 2026 02:34:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mobwebify-com.20230601.gappssmtp.com; s=20230601; t=1774258474; x=1774863274; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=PAfvEATYELQkeQLD15YSFtjO8Y/eeEk2NaYA3ofv+C0=;

b=0HZ4ZWOnhJIrBD+dJbpLrWIKZqVWwVZeYj2FM5D9UgKMRceVLkJR1caOONZDMhl9EC

zsjyGaoZ4W9YTCkVmgSTPltXeTR8eSNE3I5Of2+hswKX40dsQYyXFYt1a7L8/RklGmXH

CO5w1hkaXt1ZhyTS9CbpgW1LEw86k0LSA34rFmPl7VOJN5kk6+ydGq/huwB20b4Ng7oz

4dZ21NfbCQT4S0OR6naVIq7iQwUVchPQqa7klQEgHqxoDkWwZQlbLj6+74czVGXSXfzd

6pyUGxUPNFCswcUZMi2yysQC9jBUjEVEGz0le42pOFeF0WU5MgxLELYRBEfnJLhCr2Wm

DbVA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774258474; x=1774863274;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=PAfvEATYELQkeQLD15YSFtjO8Y/eeEk2NaYA3ofv+C0=;

b=RAFzrO2O1fFIHp0mRMi7xtRhO5HUdwwUkr12doYwCPfeTp6VomvcW/dwjWgRj+BFWB

muzM0OVtlVgg12VFzGOqak1SQXLe05qoKcYtyn0B9gSDc0XqLdexvwgakAcB2Ymf2tsu

Y/Nn8a4KRxfewaTJKkXt4fFSuk97zjvYMZZrlGHPIZ0c11+LU8kxPKfH8rzVVrvy1qb7

qgD2sZ9uzv6gsbWnOUnHyq0WD7JSYsBgo+oCaZEYdCwaCLqkGbbn+CwOS4iTPzZmyoXY

3t5XLiEorkmNzN8RXszEv5gFyabJqUEFkcKMIeYFvWVb3dXWgMsrIW3HpZ1agI8CjwRv

+ARg==

X-Gm-Message-State: AOJu0YzSlliUi6w77MHdp9aPfSMZoHufpy4t2kw6W/ardnBZLphg2tQZ

++0YLh+Zx0oq1tq/SmOU9vwIaCAusTisWRSeZXDCKJGjhhWvnokD5VTd+1+gTOIZWd5J4Ax91Xx

ikxkzL84=

X-Gm-Gg: ATEYQzwPTAto5zLpJ9xV+e5F1UpsevlJ8mfs3a4jUXbDQFgXeTLKleH2KhSwR+6mo3W

6ufXiGGg8bLg4n9Qq3NgzpPCPGE9AeGaa9ywSYECYYX5EN3aHifjUYiYCbIhG3PxqcT/QJCyrOI

+yKrhks8AZD5bbUMr5PX7S1ElueoPpZl1PbF1oghMeJjLAlYHJGPK98R3eDRzJ4xOyywCg7/fc+

d66H3b8bWjNokHvugzcbTdsQqM/ppHtiYyKn8q/S7HrzZms3gpueAJ9+9Z8ANO25qF0Umnt0O8P

M6zzFhG9uTjdqgvPGY+W35cBhGp/OhvPsk37wQtS4Lh0tLssgNUqyk7yU8eLSLRL3oDgm0v9MQ9

2AuKxS1jGNPZybl79YaK4drTyLZbpZ0zt+rlB27Ih3ClZpz/FeDuBLommV0hFKMaXAGuPQkarD4

KYwZMRIRO0sFMJIHmQjftDo4Z5qkyh4+Au7g==

X-Received: by 2002:a05:6a20:a124:b0:398:7c6b:8616 with SMTP id adf61e73a8af0-39bceb2c4d2mr10181153637.30.1774258473560;

Mon, 23 Mar 2026 02:34:33 -0700 (PDT)

Received: from DESKTOPSRTB37E ([2405:201:402e:a082:39e2:43e9:4c17:ec])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-c74665ca1f8sm7265336a12.20.2026.03.23.02.34.32

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 23 Mar 2026 02:34:33 -0700 (PDT)

From: "Karthik"

To:

Subject: Website design/redesign/ Upgrade ?

Date: Mon, 23 Mar 2026 14:52:57 +0530

Message-ID: <1141801dcbaa8$4233df00$c69b9d00$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_11419_01DCBAD6.5BEC1B00"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Ady6jail9pS8dcBzSDm07H/3lFixkg==

Content-Language: en-us

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi there! I hope you're doing well. I'm reaching out to see

if you're looking to create, upgrade, repair, or redesign a website or mobile

app. I work with Wix, Shopify, and WordPress, helping businesses improve

design, performance, and [...]

Content analysis details: (7.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.196 listed in dnsbl.ahbl.org]

[209.85.215.196 listed in dnsbl.ahbl.org]

[209.85.215.196 listed in dnsbl.ahbl.org]

[209.85.215.196 listed in dnsbl.ahbl.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[dnsbl.ahbl.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[dnsbl.ahbl.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[dnsbl.ahbl.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[dnsbl.ahbl.org]

Opportunity spam from Google Gmail

Posted by Dave Yadallee on Monday, March 23. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Mar 2026 06:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4dwO-000000009Eg-3opj

for dave@doctor.nl2k.ab.ca;

Mon, 23 Mar 2026 05:59:28 -0600

Resent-From: The Doctor

Resent-Date: Mon, 23 Mar 2026 05:59:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f49.google.com ([209.85.210.49]:57562)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4aV1-000000006ec-4A4E

for doctor@doctor.nl2k.ab.ca;

Mon, 23 Mar 2026 02:19:09 -0600

Received: by mail-ot1-f49.google.com with SMTP id 46e09a7af769-7d77b179b52so3087130a34.2

for ; Mon, 23 Mar 2026 01:17:37 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1774253851; cv=none;

d=google.com; s=arc-20240605;

b=D13GbLPebqoHbAV1sYJW/1d6WAUsZ4dz7TQGuogLk+/LTgCVh608jrKCdbBMPxPbbV

nvPYd7WYZTDuTBFDWjBAc9eQMEGEOAHMmk3gPWliJJo6U4A0f3VYZw9KWnND2SsW5GFK

mU52GH9cHH0rHMruhD6LAuO+o+JZfUqnZ1KKXLrp3yGaNwhCLD7kgV/6uolDdLFjWKMw

OZt9TGeIJhG+QXOFK2y462eWf+4gZVLwU7zDm35FOaCMU10k5bNQKQiQ4YG7v+8knQTJ

P+sAukZoX+xYn4ejx5XC/DpsKQn6EFZcKlLvgNin5ul6mZZLR2+/BKO67h2JuD2pcsBC

o6Fg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=M5v+5oG5eDxkAxKoi9ISiZTG1WxPiYRtNI/bY69ccpk=;

fh=xaZl+7cO1/q3BwI+4tajlvokh9pahuI9oLng50OXL1c=;

b=SDadieebjhS1+EPyZwd0opn0l7L48ca8Tzi1wKkWiisvXWMKQR2CCiC2x6dMnJKRh/

fBMhc665AESqoSXNOu4xrkHk/eA3RkOFo80Qw3N4Pue9JsS9KHeK2jVvEyVWBmeVUH9E

MetNS3Wuupf+i+uFZ4d1IuHSo/S3OQQa/JcULUx+lkFFOhFwf/RBoC7SdEBXP5ZJSjkW

DRuXZk7U3lItX1vGIacqhTNKVn5Qvzql5tl512P7eeF0ynpysFwSnTIrn40I+8+ycxpA

W+lr0ErTscdBEE17CQSm77AAwa/049L1j95uQBVhFzIl+322uyZc28lAdOc//IOBlWBh

31UQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1774253851; x=1774858651; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=M5v+5oG5eDxkAxKoi9ISiZTG1WxPiYRtNI/bY69ccpk=;

b=PZEUjJq5d+zW/0fGAHGkVcz0vj1k8ZyUVWtvHJhu8PCKssrRM4NXFIlKRmhaRT+Jkg

QtwyQ7+kK8yeubqdCePh43W/FLfWYOu2z2TdMembbW5MUmyL/R5qkNn2HKKdLaH9tx2r

7Oyxai48cE3aCYqH/wFSuJnxtqxjlh7yEFA6O55q7C5DJaQKhr8fQdPPI5w5Pgtx+mCO

fY6dGvixxOI4TXSwl/4dleFP4woPBbdSpfH24pUJTMU4GF8KzlGNUaxl7kWI3I7WLFMu

l55Je79kt8gAYMy6l0A+IljBVGJhD2MYLjX/ywvt3VJW3OaK2LhxloXffsgPKN0G7e6C

etrQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774253851; x=1774858651;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=M5v+5oG5eDxkAxKoi9ISiZTG1WxPiYRtNI/bY69ccpk=;

b=q39wVh79951rknr+MZ+dAKO5UzTLO8fha/hgx/ETpDXyFUT/ag/aLy95Ii4aZII+PO

vPP+UizXy2EgE/gwS11FXfL9Yt6Jl813jV6eoDHCa+NwnUIZGlr1OcVuwdvof3FHnSbW

h69FrxPJ3MmS2iBfDlnGQK6qTpXafmms1boUWYZ998lLeGLdIMguHkvP9tDHgy8vfQ7M

CmFt92qk7OLu9udl/tMfsjhK9L/ddgP9P0j6namWigeVGCOFDhLFMTqkIa7U3RtOdVdr

7EBe1GyKwMprwgLu2Tr9b59zXsCtZxOhwTXYeW2jiw9Swb+V7UMR5ninhXO/A3vxY+qQ

Yr1Q==

X-Forwarded-Encrypted: i=1; AJvYcCXqE7zfm29n+AjmBvq9wnLlxgeN2u4JRdzGnvPJx9YaxjnBBUVXWzmhM+iXMOyCdjQDxAz/13w=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwqGoxcKEt3Tx9Do7zyALxNGyC1mk8fPUHLbZv9Bn/3WNQaVAe6

vKzdv2lQIYa1kN8VMGaPdXSTo6tonoiY38YiHkUeT2sju4rGnxztrTN6r+KL7+XAcS/tnOLKzms

yDuwE7TZaaMj5/d4MqAmNncJfXjfzOUA=

X-Gm-Gg: ATEYQzzx/ofchoAjNUVr9J2HkSYyCKrDgwHcIiHfnVjBK0gtMPmvP1oqmBkIXSYa609

1KAAv5MihyaR2z36535ycb63HWKXehu5EpaZ33dYZ/Dt4kOGEGUXSp7HD8pVjtyuc0x3GQIBjuG

qiKMua7b64l0I8baphHe7VzPyltD/FKaI88DsH8aQ6M7F+XVnOb1T030dZk43BrSJ9rGtTY40qU

UyAo3GaXezxwN6Oow3sFDkXbVgEb+Xqjp1LDhj9Krlt2UOBVHwQ5GLY3G4+X/A0JhwmpiHFOE2M

Fvg+vUxwZHsb+Z2Ns5TmOTIZkM4wcvxy4Ww4ugBEvLItNw6SkM8PwNz7mLni97+zpQ+0MyDi+7p

1Xw==

X-Received: by 2002:a05:6820:82c:b0:67d:bef4:7187 with SMTP id

006d021491bc7-67dbef473a6mr4995462eaf.65.1774253850829; Mon, 23 Mar 2026

01:17:30 -0700 (PDT)

MIME-Version: 1.0

Reply-To: wvicc1974@yahoo.com

From: willson victor

Date: Mon, 23 Mar 2026 06:30:39 +0100

X-Gm-Features: AQROBzCBt7Ald_GSohPdaD4jXO6AHROjO0DCbf-v9wG4hcld5MRgCaG4hdJT9pk

Message-ID:

Subject: GREETINGS

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000085283e064dacaac7"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: -- Hello, I intend to reach out regarding a valuable opportunity

for us both. Kindly confirm if this email is still active. Best regards,

willson victor --

Content analysis details: (10.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.49 listed in dnsbl.ahbl.org]

[209.85.210.49 listed in dnsbl.ahbl.org]

[209.85.210.49 listed in dnsbl.ahbl.org]

[209.85.210.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.49 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.49 listed in list.dnswl.org]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[wvicc1974(at)yahoo.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[wvicc1974(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[wvicc1974(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.49 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

Subject: {SPAM?} GREETINGS

--00000000000085283e064dacaac7

Content-Type: text/plain; charset="UTF-8"

--

Hello,

I intend to reach out regarding a valuable opportunity for us both. Kindly

confirm if this email is still active.

Best regards,

willson victor

--00000000000085283e064dacaac7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

"gmail_signature_prefix">--

ature" data-smartmail=3D"gmail_signature">

Hello,<=

/div>

I intend to reach out regarding a valuable opportunity for us bot=

h. Kindly confirm if this email is still active.

Best regards,
iv>

willson victor

--00000000000085283e064dacaac7--

Beneficiary spam

Posted by Dave Yadallee on Monday, March 23. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 22 Mar 2026 20:05:00 -0600

Received: from [192.248.50.242] (port=38532 helo=stm.eng.ruh.ac.lk)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4Uee-00000000OJt-0awI

for dave@doctor.nl2k.ab.ca;

Sun, 22 Mar 2026 20:04:42 -0600

Received: from stm.eng.ruh.ac.lk (unknown [10.50.225.254])

by stm.eng.ruh.ac.lk (Postfix) with ESMTPA id CEFF2FCF0739;

Mon, 23 Mar 2026 07:38:52 +0530 (IST)

Received: from 110.235.184.220

(SquirrelMail authenticated user

siriwardhana_mklm_e21@engug.ruh.ac.lk)

by stm.eng.ruh.ac.lk with HTTP;

Mon, 23 Mar 2026 07:38:52 +0530 (IST)

Message-ID: <20988.110.235.184.220.1774231732.squirrel@stm.eng.ruh.ac.lk>

Date: Mon, 23 Mar 2026 07:38:52 +0530 (IST)

Subject: Attention: Beneficiary

From: "Global Financial Stability"

Reply-To: info@gfstability.online

User-Agent: SquirrelMail/1.4.8-21.el5.centos

MIME-Version: 1.0

Content-Type: text/plain;charset=iso-8859-1

Content-Transfer-Encoding: 8bit

X-Priority: 3 (Normal)

Importance: Normal

To: undisclosed-recipients:;

X-Spam_score: 21.4

X-Spam_score_int: 214

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I have been instructed by Global Financial Stability to inform

you about the release of your delayed compensation pending funds worth of

$917,610.00 US dollars via Debit Card ATM or Bank to Bank trans [...]

Content analysis details: (21.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.248.50.242 listed in dnsbl.ahbl.org]

[192.248.50.242 listed in dnsbl.ahbl.org]

[192.248.50.242 listed in dnsbl.ahbl.org]

[192.248.50.242 listed in dnsbl.ahbl.org]

[110.235.184.220 listed in dnsbl.ahbl.org]

[110.235.184.220 listed in dnsbl.ahbl.org]

[110.235.184.220 listed in dnsbl.ahbl.org]

[110.235.184.220 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.248.50.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.248.50.242 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.248.50.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.248.50.242 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[192.248.50.242 listed in bb.barracudacentral.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[192.248.50.242 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 LOTS_OF_MONEY Huge... sums of money

0.5 MONEY_NOHTML Lots of money in plain text

-1.5 RM_KNOWN_WEBMAIL Header show use of a known webmail

1.5 MONEY_ATM_CARD Lots of money on an ATM card

1.0 XFER_LOTSA_MONEY Transfer a lot of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Attention: Beneficiary

I have been instructed by Global Financial Stability to inform you about the

release of your delayed compensation pending funds worth of $917,610.00 US

dollars via Debit Card ATM or Bank to Bank transfer depending on your

choice of payment.

Kindly reply and confirm your preferred method via our official email:

info@gfstability.online

Sincerely,

Anna Francis

Authorized Representative

WEb/SEo/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on Sunday, March 22. 2026

Content analysis details: (7.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.54 listed in dnsbl.ahbl.org]

[52.103.43.54 listed in dnsbl.ahbl.org]

[52.103.43.54 listed in dnsbl.ahbl.org]

[52.103.43.54 listed in dnsbl.ahbl.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.54 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.54 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[alister.cook108(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[alister.cook108(at)outlook.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.54 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?iso-8859-1?Q?Quotation=A0?=

--_000_TYZPR01MB790537D2C228C0858EEBFBE6B74AATYZPR01MB7905apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi there,

I really liked the layout of your site, but I noticed a couple of technical=

SEO issues that are preventing it from ranking as high as it should on Goo=

gle.

Would it be okay if I sent that Proposal & Quotation

Alister Cook

--_000_TYZPR01MB790537D2C228C0858EEBFBE6B74AATYZPR01MB7905apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Hi there,

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

I really liked the layout of your site, but I noticed a couple of technical=

SEO issues that are preventing it from ranking as high as it should on Goo=

gle.

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Would it be okay if I sent that Proposal & Quotation

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Alister Cook

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

--_000_TYZPR01MB790537D2C228C0858EEBFBE6B74AATYZPR01MB7905apcp_--

WEb/SEo/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on Sunday, March 22. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 22 Mar 2026 12:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4NSC-00000000FJk-0tVq

for dave@doctor.nl2k.ab.ca;

Sun, 22 Mar 2026 12:23:12 -0600

Resent-From: The Doctor

Resent-Date: Sun, 22 Mar 2026 12:23:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012054.outbound.protection.outlook.com ([52.103.43.54]:57472 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4LoS-000000004iS-1k7A

for sales@nk.ca;

Sun, 22 Mar 2026 10:38:15 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=gvaoOE8gHTWH1+BBSKoD6F61RZcp/jrmBra4JearU0J02+rtWJLSerP+UtxKdtwY4bw1XHkke9GdhMJTnCuP6l5HJ++PHQOmUHjkhC4yWHvWRTUzKvIGu+Q2//p5Rawwjre90v7ijZ7rFvay/HbYmvjJmALJBiFjI3uJ2XQaUbdH6c7y8GUbf4xyhsxseJ8la2A60kXBFSsxfrYdZ3W/xkvXF0Lk6LMYoKGfsXhZtyqGwYJwfpn9RfZXx2HT9YZg3xcyc1lRKrJvuVC5lQw7TV3Q7nEBNNB60mdqesKM/jL/FUe0G76qh7yoInd85JZL0yYNM9+ntpLxWa5p/+ZDFw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=2u6Y/gos5DRbca6NVbN/4LVzFNWIslRO0xyqr6WU6aY=;

b=xWrI+98iVQGHcbrU/O+LCnZP07w0qvLGfLo0cze9s/he7BMrkc+s1mdAb1YlHdE+JBgizYlz0NH6521rFT15MdkElKQeABBZqjs2BFv3ynPUY7Pqo8uQ5iFZhfgH4rdQbx7tCTFTzDDTae4/Q1PJhJk4DtJU6xvE0NSQdHm1VqeUP9KApJpvWbcTJvjlSFVezWcv4lmNvSQZ7CyTxx8qC4vDuQObUW+jZG4eu7CQ+jPR2WS5lFVdiHP58ZDaFQcWWAykaDyB/DmD2clp1yLTfnKOnzhZmORsMOJXTXWjCuMm9uQN/xxNr7T5LEz9WP+Vw9x7ghsg6ZGFAiZfAVrWsg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=2u6Y/gos5DRbca6NVbN/4LVzFNWIslRO0xyqr6WU6aY=;

b=QDVOBn00Ya353aHmcDNgE7it9kf5zYK99HRbW2C1ys0B2XAuFCGCtHhwJlqR5zP9IriS/UfkL1uE2gc3Ie2zp75DcD8A3d2ys1O2S0piNGqJFGTRiq3zRfQLxmzYS/04zULZm6yXoZU1QOjU/MpSM9wRkFd8HT9+iiReECKozV7cVXMchAxJOFE8rAta4oMjNoiqMXAxOF8YTyMDDlPF8wZy0aCok9vuDyCNStXAJa6Wc9kpokaekvaH8fVwPxFBIAr2NZWEOMbdKdYxxmoyCaoID9QxNZvtTuOz4JJJonLJPFfcBusuE8ilVgnoySPnS6ViBaku3tPiTI+arpu9+w==

Received: from TYZPR01MB7905.apcprd01.prod.exchangelabs.com

(2603:1096:405:39d::19) by SEZPR01MB4758.apcprd01.prod.exchangelabs.com

(2603:1096:101:a2::8) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9700.21; Sun, 22 Mar

2026 16:36:35 +0000

Received: from TYZPR01MB7905.apcprd01.prod.exchangelabs.com

([fe80::533b:e392:4b9d:1f45]) by TYZPR01MB7905.apcprd01.prod.exchangelabs.com

([fe80::533b:e392:4b9d:1f45%6]) with mapi id 15.20.9723.022; Sun, 22 Mar 2026

16:36:24 +0000

From: Alister Cook

Subject: =?iso-8859-1?Q?Quotation=A0?=

Thread-Topic: =?iso-8859-1?Q?Quotation=A0?=

Thread-Index: AQHcuhmpcyNNV6zAXEOQe/5GWG5h3Q==

Date: Sun, 22 Mar 2026 16:36:24 +0000

Message-ID:

Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR01MB7905:EE_|SEZPR01MB4758:EE_

x-ms-office365-filtering-correlation-id: e7bdc3f1-b505-4e72-70f6-08de88312863

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|39105399006|31061999003|19110799012|15030799006|24071999003|8062599012|8060799015|7071999006|20031999003|30051999003|22091999003|37011999003|7042599007|24121999003|15080799012|3412199025|440099028|56001999003|102099032|35041999009|40105399003|39145399003|41105399003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?9Sz1m/IgFS5Nf3Ubmx1rzSKTPeC65f8CfiTTeLxfGUjlh+M6Uiq0a0Q+z/?=

=?iso-8859-1?Q?1HFFrTDhO69yfNEEGJNncyrrrQbsYCVnoYCYkhIjijgsmoknwxB5P1uZIG?=

=?iso-8859-1?Q?mKKbnn9Mbigfq39Jje+FgTXXQkXImxjuPoCnaTrm0Y+7em6Aiz3P5bGBGN?=

=?iso-8859-1?Q?/VRQiFrJC5133j44EigSG4lXbwckmNl22MF8WmoHHTrDcSBOoQ/yFyaUi7?=

=?iso-8859-1?Q?/v6SwDxPlznYpHLX2FuVq4XGRBkAiEs1ir7YSjgwEaG6RH7Xu/luM5BxHN?=

=?iso-8859-1?Q?A7KSQpFMRkIk9gp2ek59PwShZQCYDyAY38qAM4XJaXUI0jYnu/oq1YrlHI?=

=?iso-8859-1?Q?wlQ4Lxdb7gJgf7IvHgIaYx1qxtyp+0zbcKPcf0a+90KwWDyeg3H1oudt2t?=

=?iso-8859-1?Q?z9nNvVT2mc56DTiZKdRwBCzYwzMnBQdgxL0O2HL45BO4gat3yMv7AwwNS4?=

=?iso-8859-1?Q?iRpGhsfuTMxUBbNAFCK/dcZwOkw7UfneSYCpY5fgxKuU9ypNM47B9QQAFC?=

=?iso-8859-1?Q?lw2wFUNgLo5oG243i+O3ZE5FwW34YeEIVxtMxfVNCYBbJBia8sYA2SO4+r?=

=?iso-8859-1?Q?HgIviH9rVPxYQ6wCLZqYItU+oj81jy6EP8xK4NrpM3gKs1ZfBqHOl4xp2N?=

=?iso-8859-1?Q?u2T/iTA1S4YsKoiND0ierNOH0XFeFSnJE958omNP/ULjg3n5nC4R99VFG4?=

=?iso-8859-1?Q?pJpq10QdarHb+nIhUSDCjytrHTgxSG9+0gd/HM8K2MtLECKNLuVuI0lBgZ?=

=?iso-8859-1?Q?lVSmlHTcrOq+It1T4oPdn+CYTKJZjGkjcGkGjfNKYVXlicIUsRj6VfUYx8?=

=?iso-8859-1?Q?tDwDC3LAHjHUddMwteKGRwFyti3IMNt8e1LXeu8PunlD02rylyT6P47Fll?=

=?iso-8859-1?Q?dZNfwR4Dgynn2W9+5jh9pWGPq4OPwQzarr2ryCZl/AcSjEcf3VasOGAuqb?=

=?iso-8859-1?Q?H2PpT5Fr5Xa8jUNJ7B9UQGSnZjDEh/Co7Np1837aDP66CkdhMHbMOvdPgw?=

=?iso-8859-1?Q?RNYC8KVnpJBQD/x7KYjWzKa/tHIDRZ5cR9SJHJeX8atPmJGISAkrzqdz0t?=

=?iso-8859-1?Q?RLc6mGsC64sdyKqtHgo9TYu+EX2JD/5aTAIjipBFRMYIR1JLhEIKxNxyop?=

=?iso-8859-1?Q?j87u4ZQvYMLW16sgJiZN9uA0Vk4QIAtYNrBb7Ly4YbJbIUJdN89gzXmEaC?=

=?iso-8859-1?Q?ZpzqxA/Jz0wp2+eMAW48nibp/5BhHnzjnq1grEUiB1kmgYWUkdftMJJr3s?=

=?iso-8859-1?Q?IbPvpxH5cdUZ2xJUYLCNnt1Fm3g9s8upNehkbpHEUJdCdBT9I8kXl7tz60?=

=?iso-8859-1?Q?9XoiRHEIsmKI4Oy+RAGuHewq4Fu7tEtjcXwMAR9v/HMhpGzSitgYtxY1rU?=

=?iso-8859-1?Q?gaSsEt68ES?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?uCfhh/16+SFQYk/KnDxWE2gj0SzRZcP3i2gLbuRfihpcaPHAnB2ibfLASg?=

=?iso-8859-1?Q?6o0c2eZkIE0cDu2026na/Ba3kf1+1mmBAF4HUeRRDD1ptTm01UYDmkrDz3?=

=?iso-8859-1?Q?Ofmkccl8WoAXwOayU3nof7TJ2eBJgVE/+H5d16f6QxKJZE+Rls/MCkUSex?=

=?iso-8859-1?Q?LNsg+jGNfK86ndLmqVy4sq5U1Sx4aiAHJ89VLOXL6XhcMzo3GV4mWTTv5Z?=

=?iso-8859-1?Q?nQBk2kBYExrwEVuLfwQmotpWrigKiK33klxwGuXCqtuA0J25R9aEKXqRrr?=

=?iso-8859-1?Q?cv+aNtgamyB2HuPP7trIYbTuEhYueEpcs+MlXJ+XhPwsHkie5XO2wleoXC?=

=?iso-8859-1?Q?gHLJNcxxf19kWjCcu0bzDsWlw/xrJbYMc9DQU4o44AzytnmPY8pNiORG32?=

=?iso-8859-1?Q?D2Y0JQjgijYeKwbxR9AiJK0WVNrg4kSgNcrLsPLeqiOQtD4+lwS3TqQtpk?=

=?iso-8859-1?Q?jHnHAW8EAU70EFJ4QgWquVfrxAZTW72Nf2HJYnN0h3E2ezo9XFhR68C8WP?=

=?iso-8859-1?Q?aoHdobwOJbvVIGPLx2jVcVYdokF+U5d/dpJwRd9Yf+qSYIOiX/ah3AyfLC?=

=?iso-8859-1?Q?W65tg6nZYPTK2zdDDrwyGPr9mxbXh2fPyzjtKB1xvEqBw7vLU8k1m2p0b/?=

=?iso-8859-1?Q?53y81I6HSMuARCPvCtjN2xgUbqiGn26qnGAD1cMJlPkcL464pngpkJKleJ?=

=?iso-8859-1?Q?Z1hZuxaxc2+eVTITLKbqLnGY9Vlxm2vcT13VCqi+udHQBXrVdyfSsqdixU?=

=?iso-8859-1?Q?wHamxgs9XIK6Lt/aih6MaUNMO9NQGkiioLR6i4Uctixx8aLkrO/b24kSBk?=

=?iso-8859-1?Q?Rtg+hTkXXZ2RCna1cMznjSCYYuUXvAxXGfMh98yG5qGqktjCmvmuwa0huL?=

=?iso-8859-1?Q?s2C1tDZrGDe4K+gfZjCBrqYU8i/JTLYjgJCmAZlgk4Gt3RHe3hfHjuqAi5?=

=?iso-8859-1?Q?gTpnPP18lOEf16+SiwC8m4sP41V/mRMlL4SB4Snzc4ebaLiyXnUZoqBjyI?=

=?iso-8859-1?Q?qYl8mrG7UjDua1/IWihGVqRDLk32nZHogWCEvw2+WGVUH3K12+5TqflLdE?=

=?iso-8859-1?Q?gYFlKAJMdz8vUEl5rRKwJVgCLq6zHG7Om7oVhbx8SLs8F3kULuQ4g60CK7?=

=?iso-8859-1?Q?lC86FvOnnAfiXpVCMN7VIaWCjO82Y98XqFj5Kf0cIYEIbqnYIqCJSmrcFf?=

=?iso-8859-1?Q?CBoxBcPeI4f00K41c/uCjP2XUss3c0HJpomtHzAI+S0BenhK0EpV/TDKH0?=

=?iso-8859-1?Q?6op9lFdq07tCAxAC76fbNEJ5BEo5LCSR3ImnWUXIsFynzfw04Xw8gOTDaG?=

=?iso-8859-1?Q?vYF0+SYOGkkzvQ3Hdf3oHTAAc+WjHNDDiGfKg7VMaD1hqQYg/Pax2tGiJr?=

=?iso-8859-1?Q?2hE6Tv8X6D9GTjyO8uz9IM+0CT4Q/rNQTHoQm6n0ALrKz7zxeVxUP0KVYc?=

=?iso-8859-1?Q?ZgOWbMbSdmn9Ph1Os2ujLAKU+nAADxzMZExcx7LDpJwBaLECxJDFzJ3SI+?=

=?iso-8859-1?Q?hldOtE2ANcbtgZGUK0N1d0?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB790537D2C228C0858EEBFBE6B74AATYZPR01MB7905apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB7905.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e7bdc3f1-b505-4e72-70f6-08de88312863

X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Mar 2026 16:36:24.5013

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB4758

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi there, I really liked the layout of your site, but I noticed

a couple of technical SEO issues that are preventing it from ranking as high

as it should on Google. Would it be okay if I sent that Proposal & Quotation

nigerian spam

Posted by Dave Yadallee on Sunday, March 22. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 22 Mar 2026 12:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4NQ2-00000000F2m-0jA0

for dave@doctor.nl2k.ab.ca;

Sun, 22 Mar 2026 12:20:58 -0600

Resent-From: The Doctor

Resent-Date: Sun, 22 Mar 2026 12:20:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [195.83.153.7] (port=47937 helo=smtp-out2-webmail-7.u-picardie.fr)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4JbW-00000000HPP-2LUN

for sales@nk.ca;

Sun, 22 Mar 2026 08:16:43 -0600

Received: from passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142])

by smtp-out2-webmail-7.u-picardie.fr (Postfix) with ESMTP id 4fdyR12vsKzCrDX;

Sun, 22 Mar 2026 14:52:13 +0100 (CET)

X-Virus-Scanned: Debian amavisd-new at u-picardie.fr

Received: from smtp.u-picardie.fr ([10.0.132.227])

by passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142]) (amavisd-new, port 10048)

with LMTP id OewThFIcET68; Sun, 22 Mar 2026 14:52:10 +0100 (CET)

Received: from horde-07 (horde-07.vm.u-picardie.fr [10.0.132.99])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)

(No client certificate requested)

(Authenticated sender: g22105250)

by smtp.u-picardie.fr (Postfix) with ESMTPSA id 4fdyQx3pxgz40Q2;

Sun, 22 Mar 2026 14:52:09 +0100 (CET)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=u-picardie.fr;

s=smtp; t=1774187530; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type; bh=jMEzzN46f5jC6ygnDOMquatxcRr1RYKrjfhY9w/QnjY=;

b=r3RO2vgYr5DqDTYNWBqaoIUKKtqOXydJE4nONj01gZTob21ol8xiBto/ojM6dNSiOHYL/z

dGaZcUn0dJaWcBn9gzhX22eLvcsGV+XZSS5EfkFNgO1yzYABD4uy1iMtjpzLLKDM2ac6DS

wyaz7dTGv6+WmqJMtznNAt5i3kSgFXNCUiTtAnQFQsdQuKnmPqNMUtPc/2VXOPh7/YG7OM

v2dFJ0PreaAXpgkWCdqo2uvWdOdDSF9yvgBNc7VHf5iSuGvK9x2nqg5Z1QA8DoDc2BkJaV

2n0SROx3htUwGGGkqf1ip4zJxMsSju6pKcQXsZzDivSFqjpDBFyCzHuGJiPqcw==

Received: from unn-195-181-167-41.datapacket.com

(unn-195-181-167-41.datapacket.com [195.181.167.41]) by

webmail.etud.u-picardie.fr (Horde Framework) with HTTPS; Sun, 22 Mar 2026

14:52:09 +0100

Date: Sun, 22 Mar 2026 14:52:09 +0100

Message-ID: <20260322145209.Horde.BA-uiQwGV6Y4qKDcbOSyxvG@webmail.etud.u-picardie.fr>

From: Valerii Churkin

To: 923471672j@gmail.com

Subject: Read and reply back

Reply-to: o_a111911@aol.com

User-Agent: Horde Application Framework 5

Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes

MIME-Version: 1.0

Content-Disposition: inline

X-Spamd-Bar: +++++

Authentication-Results: smtp.u-picardie.fr;

auth=pass smtp.auth=g22105250 smtp.mailfrom=william.goemaere@etud.u-picardie.fr

X-Rspamd-Server: passoire-04

X-Rspamd-Queue-Id: 4fdyQx3pxgz40Q2

X-Spamd-Result: default: False [5.82 / 1000.00];

BAYES_SPAM(5.92)[99.84%];

MIME_GOOD(-0.10)[text/plain];

ARC_NA(0.00)[];

DKIM_SIGNED(0.00)[u-picardie.fr:s=smtp];

TO_DN_NONE(0.00)[];

MID_RHS_MATCH_FROMTLD(0.00)[];

NEURAL_HAM(-0.00)[-0.998];

FREEMAIL_TO(0.00)[gmail.com];

R_RATELIMIT(0.00)[user(RLc6oh57c5pcnt54),from(RL5okfe1k1465s7jp9i3d5jy9r),user(RLbp3uqkxr7w799q),user(RLfut5xyrj1rhazr)];

MIME_TRACE(0.00)[0:+];

FROM_EQ_ENVFROM(0.00)[];

RCVD_COUNT_TWO(0.00)[2];

RCPT_COUNT_ONE(0.00)[1];

REPLYTO_DOM_NEQ_FROM_DOM(0.00)[];

FROM_HAS_DN(0.00)[];

RCVD_VIA_SMTP_AUTH(0.00)[];

HAS_REPLYTO(0.00)[o_a111911@aol.com];

ETUD_FROM(0.00)[etud.u-picardie.fr];

FREEMAIL_ENVRCPT(0.00)[gmail.com,qq.com];

TAGGED_RCPT(0.00)[];

TO_MATCH_ENVRCPT_ALL(0.00)[];

FREEMAIL_REPLYTO(0.00)[aol.com];

RCVD_TLS_ALL(0.00)[]

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: -- Good day, I am Valerii Churkin, a senior officer in the

Ukrainian military. I would like to discuss a financial matter currently

held in Europe, which I am unable to manage due to my military duties. Please

rep [...]

Content analysis details: (9.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[195.83.153.7 listed in dnsbl.ahbl.org]

[195.83.153.7 listed in dnsbl.ahbl.org]

[195.83.153.7 listed in dnsbl.ahbl.org]

[195.83.153.7 listed in dnsbl.ahbl.org]

[195.181.167.41 listed in dnsbl.ahbl.org]

[195.181.167.41 listed in dnsbl.ahbl.org]

[195.181.167.41 listed in dnsbl.ahbl.org]

[195.181.167.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[195.83.153.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[195.83.153.7 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[195.83.153.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[195.83.153.7 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[o_a111911(at)aol.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Read and reply back

--

Good day,

I am Valerii Churkin, a senior officer in the Ukrainian military. I

would like to discuss a financial matter currently held in Europe,

which I am unable to manage due to my military duties. Please reply

for further details.

Sincerely

Valerii Churkin

X-rated spam from OVH Part 2

Posted by Dave Yadallee on Sunday, March 22. 2026

--_=_swift_1774145055_349d1725fa483f57f511ed5f0fa016e7_=_

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

[header-logo]

[https://rosasau.com/index.php/campaigns/xb541dja9ef20/trac=

k-url/ob677nvejyaae/a1b00ade245a24789fd4269a56d81930da23aecf]

=09=09[=

top-banner]

[https://rosasau.com/index.php/campaigns/xb541dja9ef20/track-=

url/ob677nvejyaae/a1b00ade245a24789fd4269a56d81930da23aecf]

=09=09[to=

p-banner]

[https://rosasau.com/index.php/campaigns/xb541dja9ef20/track-ur=

l/ob677nvejyaae/4ac0007b51578558a2be5cd3e770204dc54865a6]

=09=09And s=

ince it=E2=80=99s your

first visit=E2=80=A6

=09=09[card1]

[https:=

//rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/4ac=

0007b51578558a2be5cd3e770204dc54865a6]

=09=09[bottom-banner]

[https=

://rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/4a=

c0007b51578558a2be5cd3e770204dc54865a6]

=09=09[footer-logo]

[https:=

//rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b=

00ade245a24789fd4269a56d81930da23aecf]

=09=09[border]

[https://rosa=

sau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade2=

45a24789fd4269a56d81930da23aecf]

=09=09[rta-icon]

[https://rosasau.=

com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a2=

4789fd4269a56d81930da23aecf]

=09=09[asacp-icon]

[https://rosasau.com/i=

ndex.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789f=

d4269a56d81930da23aecf]

=09=09[divider]

[https://rosasau.com/index.=

php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789fd4269=

a56d81930da23aecf]

=09=09[x-icon]

[https://rosasau.com/index.php/ca=

mpaigns/xb541dja9ef20/track-url/ob677nvejyaae/7c96560f08ae933a07b1e7f4ffbf8=

b46caf49761]

=09=09[facebook-icon]

[https://rosasau.com/index.php/camp=

aigns/xb541dja9ef20/track-url/ob677nvejyaae/f51ce8d459ee2654297c0a3a22321cc=

953939928]

=09=09[telegram-icon]

[https://rosasau.com/index.php/campai=

gns/xb541dja9ef20/track-url/ob677nvejyaae/be0854c0e0d6f2061a3f8cb8da400ce33=

e0a1bb8]

=09=09This website is strictly for adults only! This website=

contains

sexually explicit content. You must be at least 18 YEARS OF AGE=

to enter this website.

=09=09[border]

[https://rosasau.com/index=

.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789fd426=

9a56d81930da23aecf]

=09=09=C2=A92026 ImLive.com All Rights Reserved=

UNSUBSCRIBE

[https://rosasau.com/index.php/campaigns/xb541dja9ef20/=

track-url/ob677nvejyaae/6daaddc40f50df294910d1f38232602ed5e1bd23]

--_=_swift_1774145055_349d1725fa483f57f511ed5f0fa016e7_=_

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

vice-width, initial-scale=3D1.0">

=09Last chance before she goes offline =E2=8F=B3

gin: auto; font-family: Arial, sans-serif;" width=3D"600">

=09

=09=09

=09=09=09

=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09=09
le=3D"margin:0 auto; " width=3D"600">

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

"https://rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejy=

aae/a1b00ade245a24789fd4269a56d81930da23aecf"> 3D"header-logo"