Persist IQ spam from Google Gmail Part 2

Posted by Dave Yadallee on
Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

[209.85.219.44 listed in dnsbl.ahbl.org]

[209.85.219.44 listed in dnsbl.ahbl.org]

[209.85.219.44 listed in dnsbl.ahbl.org]

[54.85.105.50 listed in dnsbl.ahbl.org]

[54.85.105.50 listed in dnsbl.ahbl.org]

[54.85.105.50 listed in dnsbl.ahbl.org]

[54.85.105.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.85.105.50 listed in will-spam-for-food.eu.org]

[54.85.105.50 listed in will-spam-for-food.eu.org]

[54.85.105.50 listed in will-spam-for-food.eu.org]

[54.85.105.50 listed in will-spam-for-food.eu.org]

[54.85.105.50 listed in will-spam-for-food.eu.org]

[54.85.105.50 listed in will-spam-for-food.eu.org]

[54.85.105.50 listed in will-spam-for-food.eu.org]

[54.85.105.50 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: persistiqengagehub.pro]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: persistiqengagehub.pro]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 PDS_PRO_TLD .pro TLD

[URI: persistiqengagehub.pro (pro)]

-0.5 SMILEY BODY: Contains one or more Smileys

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.44 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.44 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.44 listed in wl.mailspike.net]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: about internet services clients



Hi,



I know you're busy, so making it quick. PersistIQ could help NK =

enhance its client bookings consistently.



Mind a quick call in the next =

few days to see if this can work?



Thanks!

-Bella



Bella Powell

PersistIQ



On Fri, May 29, 2026 11:36 AM, Bella Powell

[bella@persistiqengagehub.pro]> wrote:



> Hi

>=20

> I previously mentioned =

that I=E2=80=99ve been helping service providers find clients by creating =

personalized email sequences, finding targeted prospects, and booking them =

meetings with warm leads.

>=20

> Would that be interesting to you?

>=20

> Best,

> -Bella

>=20

> Bella Powell

> PersistIQ

>=20

> Let me know if this is irrelevant to you, I'll not reach again - thanks =

:-)

> On Tue, May 26, 2026 11:19 AM, Bella Powell
pro>

> [bella@persistiqengagehub.pro]> wrote:

>=20

> > Hey,

> >=20

> > Came across NK, and wanted to check if you are looking to bring in more=

clients for internet services?

> >=20

> > If yes, worth a quick chat to =

see how we can help?

> >=20

> > -Bella

> >=20

> > Thanks,

> > Bella

> > PersistIQ

> > 422 Richards St, Suite 170. Vancouver, BC V6B 2Z4

> > P.S. Please let me know if you don't want to hear from me again

> >

Persist IQ spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 Jun 2026 07:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wU32L-00000000IIY-3U8h

for dave@doctor.nl2k.ab.ca;

Mon, 01 Jun 2026 07:50:37 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 Jun 2026 07:50:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f44.google.com ([209.85.219.44]:46435)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wU19l-000000006dU-43L2

for root@nk.ca;

Mon, 01 Jun 2026 05:50:18 -0600

Received: by mail-qv1-f44.google.com with SMTP id 6a1803df08f44-8ce9df4732cso13128126d6.1

for ; Mon, 01 Jun 2026 04:49:21 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=persistiqengagehub.pro; s=google; t=1780314555; x=1780919355; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=0j6NlgDJ0cMgOF4jkJ/qtWlEiHUkYyODJRzsMcgwL+o=;

b=eNrdb6mGP5ddqT5u0SNiFRVuLjLHuBBEKRysz3TbMTQrWMleP0MKkGEAb+tFTi/k9N

bj8K0gGN9MbnGREA1MBovxt7WVONlzI8huAMJ8VwaBOmyJi6YWO+2in29yKicdMnylNA

BFaFHje+3Zo0sjKc4UExz0q1hSmo1NyCuYPyrqYW1w7KTQaWTlBgEi8soYKpBwXQXwSt

Tw8VzeqZNFbJ/HPVdIpw0CpNb2R+wnmeil3zn8mHa7jZV0EvtiXFDc/FdiB3NPvN3iLV

mhGnhobzO+PHmkA7/aOJLkcE1i+squ6SyVNRMTIVp7kKQ0VlH5ST2Svg2m9wHG/0Kb1f

yMpA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780314555; x=1780919355;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state:from

:to:cc:subject:date:message-id:reply-to;

bh=0j6NlgDJ0cMgOF4jkJ/qtWlEiHUkYyODJRzsMcgwL+o=;

b=ippxMqNcqK82bDg51R45KNVmVP6U4NH2S/SeF8kcQoiC/0JnbLy6U+TU7hFR7FGS9V

HJ/vxHGxOxp2kTw2gs9PhtUdY1uAp/NdFH9fmCA8HZf+l9JTWv3397XNfMVEvp1yFRvW

WrSIURxNgKc11/vcHpbTFgIOfdLS5dFmx7miaH8vjkflXezCnlDGb1JNjhqZNFxAwe8i

HF8we5SqvCbnmSly87MweR3mwA/M/GYARBJj6DCuLI/Ofn9fyRRx9BmXHTcSg2s2rcyi

b/hhS2CdibNwjEsGAPvzk/Ff3/SboQ6R6c7hE7TjuuWXTH4coD0C700ePa0LyLojWnxU

ajjg==

X-Gm-Message-State: AOJu0Yw2Tg0Gzdu8nuRr+L2RhsvaiHILqZgW7iMT/1obOvFx9lHSlOkQ

xbTOfqKrJD+zc3UhnsbPMWsFQ6eaiOWOiUau+vNUEWkSzROxKsY/SNiXuf5PzZJAEMVY/maafyA

XFxU8oQ==

X-Gm-Gg: Acq92OH3guq5c+eMAWvW1BRgnzLiGisKOinoDF5NG8hIRTVn8g5qQdsn5VjC3bv5dRW

I6tq3YdkT70OTL0VMf0wXsiaou5hAYQhL6rZW0KFms9bAmK82+l2ShAugQXbM4JRwmrAWO0qAGU

5o6rJ633BgW+6zX+prx4iUx1ULtB0x7zeT/0sWj3RtIkQ0KZyD3g/gdPa66PbO1LYtnjNCxE3Tn

WCE9QJhRXftnSmoTuuVFDg8VpphCngtFBZY851qcBc4OCwGtsHWRoYzOMrH/zUuyJLDGUjQqr6L

+d8owtiKLgQnleqmdUYce201P12Zi0Pc93gR3Halp6U0xWIt1o/DzZd8NhX2Hb+oziwcwHo4MK6

CRvO6cGt6Iu/yGTNkrvjFVze4zi5gibEfYFVN+Iq6VAlzSVucuuNGXiK86WG1rLOVTiLJvghLB7

jz5vCJ0DBqF/XOtM7kfAXyS5s2jeja6AmV47z/WWoLmJ0g2p7dj+t+sFMfp3xubMDParLdbScAq

vpPHfBZQWfiIbBNTSkXscrD30daMNMhnbttjPg5UN4Wn7EYxG8RhcfNXPfwVAeE

X-Received: by 2002:a05:622a:8c5:b0:516:d73d:2a34 with SMTP id d75a77b69052e-5173a5e8057mr146318181cf.5.1780314554925;

Mon, 01 Jun 2026 04:49:14 -0700 (PDT)

Received: from 019e8304-3fe9-723e-b283-b6cd8efc0cc4.local (ec2-54-85-105-50.compute-1.amazonaws.com. [54.85.105.50])

by smtp.gmail.com with ESMTPSA id d75a77b69052e-5175ecbd701sm6774931cf.29.2026.06.01.04.49.14

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 01 Jun 2026 04:49:14 -0700 (PDT)

Message-ID: <019e8304-3fe9-723e-b283-b6cd8efc0cc4@persistiqengagehub.pro>

In-Reply-To: <019e7385-ea3d-7bb1-9e05-507a87e72327@persistiqengagehub.pro>

References: <019e7385-ea3d-7bb1-9e05-507a87e72327@persistiqengagehub.pro>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019e8304-3fe9-723e-b283-b6cd8efc0cc4

From: Bella Powell

To: root@nk.ca

Subject: Re: about internet services clients

Content-Transfer-Encoding: quoted-printable

Date: Mon, 01 Jun 2026 11:49:14 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I know you're busy, so making it quick. PersistIQ could

help NK enhance its client bookings consistently. Mind a quick call in the

next few days to see if this can work?

Web/SEo/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?ICm90ER2LamBn4vc/NK4iNAJ/SUAWGc9C0C7uOvgsrGdtgkFkyEzw6LVN4?=

=?iso-8859-1?Q?TaXnGu/vgZQonqJszZ3NOKfvb98D1mnJmpKEvkRSDOWW7vzWH2AjvD1rxk?=

=?iso-8859-1?Q?PFVWU4Eu+9jQCDBuAR7D2TThCSjtarOh4I1QbLaYGerxIX6N91TB69w44O?=

=?iso-8859-1?Q?eNoZglCXvp+HhJS3y2kas+TGKYfyDNss5GRFs2hnwxwK/5ljlRRV2OcRuT?=

=?iso-8859-1?Q?qdGtIE5NQnN8aVdPaEJEO4HtkMn6z5deWFeBuTnn/T1J+pwBD6tmMQ8UNg?=

=?iso-8859-1?Q?m+GO0bO1FlhZDf22pb/8H7yZZI4epWxMI8xOj2LJB9a+SiP98ZaAW/OM62?=

=?iso-8859-1?Q?qWJ2SF9OK4NNpH8F3guH1xO0F61jnDmCu/rtFV+ZBKLb5i+hGPqeOLE/Mm?=

=?iso-8859-1?Q?3T/guEDkVs8NaR/VLXX85iY+ox1IHbPTf45OJWjlDHTuw/OTRRNhDLndWt?=

=?iso-8859-1?Q?b5sFC/Q6q294NRGcybIiCcPTXQBqW4ojEchWROzolLmKG/UQ61LODPZ6QF?=

=?iso-8859-1?Q?RJjE3+s4Xg7M9y2bdEGj+V53SQUDhZEsX2PiZk6koZMRlmQWybEb+5KxNm?=

=?iso-8859-1?Q?qLbs5EzYY40EPvo4hZFKGPV0LA/4rorCaURSxTobTvTWD6coHUnoq8O5tq?=

=?iso-8859-1?Q?CfQ4/DxNxEI3cOKUn+bAfU7wcqC2q8vw3UIOC13DMzFQZ+fBGzpcO4FgZ2?=

=?iso-8859-1?Q?a/9FZ3GPleaAJvFzXl15PbZahI+q3tf3rkEyhUucCMTzfgyZUMP02G+sYx?=

=?iso-8859-1?Q?ahOjZLlz1msM7QR4FToVJkSPf+nrAcAxmE/Lj55e4zybjrfj0sB6p2W+0q?=

=?iso-8859-1?Q?In/+kjzLqSLs691wXmZSycMd2sKUbXaQMhvg374rolex9FSViVepRbAnI7?=

=?iso-8859-1?Q?Hd1wiTihD73LW0US1+OS8tann4n/1Px+mQ59Xbwq2TISHLV+bM2rRmAZJJ?=

=?iso-8859-1?Q?LFadQdz7YCO4Nv+hPpnCOAG8luLsONr0q43h4l+xdXlAXA0bwxCXwpC+XK?=

=?iso-8859-1?Q?03FWOJ30EMku17HRzuLZbiy4/a+Rg0u8GOUPIqbf2G141WF7V7T38UsSOc?=

=?iso-8859-1?Q?lQpEJ3QFKvLyI3VY7exMErmKN4fi27euLttc//+et+j8mAimfJV4FDnXb0?=

=?iso-8859-1?Q?alkhK47lgIJdYZXziIXa3ub4qdd895rHgd+hb8cEbUDCBYu6El/Ig1YGdC?=

=?iso-8859-1?Q?QjZiM0iX+iq/RJjLAWlgE1mLN1DBrStD6WRsYYIlCSA4jDN6LH285HQR6G?=

=?iso-8859-1?Q?+hzON98Q1tjJ9menQOBUuHozW4RZaS0KKi4hoB4hWj/MAuGKro4r4Bve2K?=

=?iso-8859-1?Q?WIHMXdN2TQGNlLOOlD2Sp4cjOL3N9Em+99YADO/+etolTEnPK/FLkvXtcA?=

=?iso-8859-1?Q?lvyXk0mgB92zDQNTt5lUBDunRdGaiZG6CVDOHukUYi9BR1Fdsb4qaHDaoC?=

=?iso-8859-1?Q?KXuV2s3y2apR9gcTZXMI2hJdylUYmkILXj7eocJtg2nGfHW2uwYgIFJr1a?=

=?iso-8859-1?Q?ooHDUh9wMCpaopN8W5JHUM9yYa3PEyw3/h1BGBRXykVceKLAsD94DyIqwB?=

=?iso-8859-1?Q?7cihTrprHr0C6RSG3vH4I1g3kONaQXToSZ6OxkUVE3pFTLzB/dm7CEf6GH?=

=?iso-8859-1?Q?VWTy6nOLjqE55fXd+v7x+ThibcDXMKGI4/?=

Content-Type: multipart/alternative;

boundary="_000_KL1PR01MB579984AB197A00B9C2DE2CBFD8152KL1PR01MB5799apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KL1PR01MB5799.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 1b077b57-e5c3-461b-7f33-08debfbfe573

X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Jun 2026 09:26:44.2083

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR01MB6074



--_000_KL1PR01MB579984AB197A00B9C2DE2CBFD8152KL1PR01MB5799apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,

I hope you are doing great.

We can get your website on the front page of Google.

I will be happy to send the 'Proposal' and 'Pricing' furthermore.

Warm Regards,

Siddharth Jaiswal





--_000_KL1PR01MB579984AB197A00B9C2DE2CBFD8152KL1PR01MB5799apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,


I hope you are doing great.


We can get your website on the front page of Google.


I will be happy to send the 'Proposal' and 'Pricing' furthermore.


Warm Regards,



.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calib=

ri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Siddharth Jaiswal



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_KL1PR01MB579984AB197A00B9C2DE2CBFD8152KL1PR01MB5799apcp_--

Web/SEo/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 Jun 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wU31P-00000000IFV-2XYj

for dave@doctor.nl2k.ab.ca;

Mon, 01 Jun 2026 07:49:39 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 Jun 2026 07:49:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013081.outbound.protection.outlook.com ([52.103.43.81]:21907 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wTywL-000000000Cc-1zbf;

Mon, 01 Jun 2026 03:28:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=r8XoIhy8u7D7YEOR6l+n2rVfZq4YN+OryXvBgyfULP/ZqXGDSQ5idcPWSWfGOJNlAZJHCyu2TbeFg7YPYfzHXuFs1aRAhaYYaN3pPTyJLDZ/LEvG9TSUDj6758bIoN17krw/0bxrGP1RIpffP0fP5TtSuTMlw5zqPKKlRp1mVxj6B0NOYmsygP7MqkG9gHYKLAdjKp2SUw1+MUoDCW5ZABDHqQlY0eWIpZXbzoJQ3fmnpWvZzQv6ggZKcJXUcEjsxgD35jbGXvYwm2M1nIixImIhitfoSko1wtvUOLC/eSbiK6DlMksfuLQSwDiVYFYSNvvt3FfQsBhTeIsiBYcAkA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=EsfvdYp9SmWTeYUNwpD20BV1jufP5X6S8rx3NEXhrag=;

b=YRgQ6YN4n5P/y5Eu/fM+R+Yo5dbAYwR9vfZgs/HgRD9V+waOnmjQtoP9NdYHVYGGYwGws+q0HPsJLr5j3B0nmIetXms2DOC5Fkh8TX1fcH56fApLsUJd1lbTzw7itV57GYT3SdNrLe1Tkv9D0ldauI8L9h0QBGvOqsTdvgliJzZ2JrQ6k/cI9/eHs7usM+eIVSVrbhet1v/1Xn5SHcSdkVb33ng+4YhxJe9GBPGSiMJAV3mZI6c4xVkcOe7cYn+GZ4c6Cc5AKkaUcll1/TNLx0O0pWtsb8LHfPjI82vekA+74ti3YV9cGtXfBLiCNGS9+L1nmo39VNnjs5dBGHMQgQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=EsfvdYp9SmWTeYUNwpD20BV1jufP5X6S8rx3NEXhrag=;

b=T47BtW/Y7GzldcHnN8ycMRbJMlKfQx9AnhCQntu6+qjXnaoAok+mvCfrV5vE1LUsWsaeSLu0Vbjy1eddAUCQ4yltutIAT46l78edvd38SJSLRUsbWrb9M7DVNr0ChDxej3gCiPMDITdpjxFkZz23V4pXDx6nRB9T9z4QarcDcq7LYw2cdUPfSHB/FEdEoEAHOWhv8Wcw/+UjUdYzxX9Sey1dlvMlLPvsbLQeY5+KWrZYXqCxRlWw5NTXJCo5toq3TMUtHjiwgSQyqgXv7AM3Q+myHtoicF3WKyFM+AGJQApKFEuFsBGon6Mm9BsHb3yepgdM3u47VU7PcRd6hjVY+w==

Received: from KL1PR01MB5799.apcprd01.prod.exchangelabs.com

(2603:1096:820:113::5) by TYZPR01MB6074.apcprd01.prod.exchangelabs.com

(2603:1096:405:76::9) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.71.15; Mon, 1 Jun 2026

09:26:44 +0000

Received: from KL1PR01MB5799.apcprd01.prod.exchangelabs.com

([fe80::ba9e:f08a:714f:be2d]) by KL1PR01MB5799.apcprd01.prod.exchangelabs.com

([fe80::ba9e:f08a:714f:be2d%4]) with mapi id 15.21.0071.015; Mon, 1 Jun 2026

09:26:44 +0000

From: Siddharth Jaiswal

Subject: Position on 1st page.

Thread-Topic: Position on 1st page.

Thread-Index: AQHc8ai5gN81j6k/ZE2JWq1k+bxXhA==

Date: Mon, 1 Jun 2026 09:26:44 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KL1PR01MB5799:EE_|TYZPR01MB6074:EE_

x-ms-office365-filtering-correlation-id: 1b077b57-e5c3-461b-7f33-08debfbfe573

x-microsoft-antispam:

BCL:0;ARA:14566002|8062599012|24071999003|19110799012|15080799012|15030799006|24121999003|31061999003|37011999003|22091999003|8060799015|704163111799003|20031999006|2604032031799003|24021099003|55001999006|39105399006|16051099003|440099028|3412199025|102099032|39145399003|41105399003|40105399003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?B/cIqqd0wB6u0m/j7RGhg/H4wjFL+s4OUuejMhBeSPdUsKYgZkIzEWE6zS?=

=?iso-8859-1?Q?eSNOzDK1sHS3dUjg4EwBEGWFG+dkUkV/5ZvXOQ2HfYudhv5qvORajyPToF?=

=?iso-8859-1?Q?Q4GLh221L4ARfmPnDRxWAxz6KJP1SdV19MBDsgdImUurgMGe5NNRY75S5v?=

=?iso-8859-1?Q?mxO0WLXQ8usya9DHtL74nhn18nomscKzk4Cn25Cr3qjeQ9JoqXmPcAXeJF?=

=?iso-8859-1?Q?S6brtFThAll8kgjqxegxW3ZQeOvyPvDVtR7ayEsElpCmyw1wKsJZ/iXV10?=

=?iso-8859-1?Q?RBZjgR2ZIuA+lninpXbNgUL81FI/RsX6xtU29qHH19z/LBNeg7lEqJHzD5?=

=?iso-8859-1?Q?9zz55VbxtjIvy5vlFFcZ1SbEAfO7UQLRwnKRSfgvVMSucE9HtkeThSJWEZ?=

=?iso-8859-1?Q?dLR3YzGEtvAegIdLJnlW+7Jz/MvMXLNu2HQcB29UG2AyBiv3FNn8qJJCex?=

=?iso-8859-1?Q?T2jdC4NleGSMYVkSRJV5NWavCVirjD26rMA2iE8ES8CLn/megNaFYZvQFX?=

=?iso-8859-1?Q?KzuyIRE9tKvFNokHrpinGrNiWsUvIA177LcNmT8mxxS65ZqtQlWinAzWDm?=

=?iso-8859-1?Q?IPVQ2hQXXbwEFpVGgmO/ecwD58YJwYMBh2eFtpp1lADLXMKlycYrjSVM9W?=

=?iso-8859-1?Q?intc6zVgafA4ZTt/CzgM+spvkJNzzBP2ZGBlw19m5Y0hY4wPQQuzrlF6kN?=

=?iso-8859-1?Q?rd5juQG9vykjeHgtLSGa+eHFCvLQIDyj9SFKnEf4pYRlczI0G3j0bcJ1dR?=

=?iso-8859-1?Q?aVMiKB7pG12dG1hV+I+MZ7bVAaGado3nVNuDSDFAChIVWFOhZBQf1SfE7q?=

=?iso-8859-1?Q?XjJ+44y/ZvQZInT01HvOUcjZ9JCbY2L8SaDx0k/iVmnPvNzkwtJtkBdgHH?=

=?iso-8859-1?Q?kXOK96Ti0fvLNOZJ+iEp8Ga+69tDbp+6wEl0Tan3KOowDSTSuLMoqVfLUn?=

=?iso-8859-1?Q?bhtYav+fLUBID7mQkuiQSh2C3lTMmRJrfgNGD/AZSUq2icI6XCJupo2SuW?=

=?iso-8859-1?Q?YaIqMhl6qxkbm1OjW1Bz9U/yNN6KwV9F9W0vPHkTfy+E7yNPvT0IwtGkhl?=

=?iso-8859-1?Q?rOz89X7HfxE0Jwoh1cdr3xxc5BGKvkprQu5AyiN5kYhOswN5W1ASix7stW?=

=?iso-8859-1?Q?7YykY0+PqvB0USogybVLgkkFZ0pQJB67M+0cV6cjIFeQTw3eRrocfQ6ZUl?=

=?iso-8859-1?Q?gyrhgxrx2tvzqDXy6y2Xe85keXehP6UlQAQrNE+yoqwVFoDaQT3o8rgO3O?=

=?iso-8859-1?Q?8UbFsb9Y6RJLZ/0CDUUJofi8JVn8JadZWb+cJwVsKIp/oyTSV5DBl4qA3G?=

=?iso-8859-1?Q?fKLPiB9qsIOacZHE8Ppyh5AkbIAXxxOqf4/W4xQ9lpvMur1c/R0Xwlc59n?=

=?iso-8859-1?Q?SQXztFdT5cNdjykoyUAaF1fxVXuF8mrv5tVHwRVAeCJTK5AggRXYlyDpwl?=

=?iso-8859-1?Q?wUD+rAmzpNQKE4Y50L7/04UKwXGdZkHmbgeOX4pwIDwE3+Ey6EKorvREhA?=

=?iso-8859-1?Q?8NmpUWCj8jkDGPrpq23MuOZkeVeiWSOS/jx5JTWuaiuZ2oE6XWQoZQuZHW?=

=?iso-8859-1?Q?Bw7k4J8ly/Gz0AxU4aNGOEaKSgWulOolhBgx46WmREPP0eYi1TBJCUlvmR?=

=?iso-8859-1?Q?dWhOYyIQo887UHmn9pKQKMSSTe2ZqYypOtylffTtSuFRH7rpMIEc0Nuif2?=

=?iso-8859-1?Q?p0QERzic7+wBQX6lYHmnN58wfszx+RcVPGlxtIQQbBLzVNXePGsqYxAZGF?=

=?iso-8859-1?Q?KMhzZUamQrTJ2pC2d8fLPF5o9YVXYyIJZ7xEVuC2JGQu8mZLlp0/0Ma4vN?=

=?iso-8859-1?Q?9DLZfJoK+YB8GuMzDs4Gq4+yirtMyH2r3GtpRCtn9sEOM6m/i16SYRfgCr?=

=?iso-8859-1?Q?gieCPeyUPUDil2rg=3D=3D?=

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 Jun 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wU31A-00000000IEv-2gKS

for dave@doctor.nl2k.ab.ca;

Mon, 01 Jun 2026 07:49:24 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 Jun 2026 07:49:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.3rdcc.org ([12.217.201.110]:60679)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wU0cb-000000005Ty-24hP

for doctor@nl2k.ab.ca;

Mon, 01 Jun 2026 05:16:02 -0600

Received: from mbx2019-03.internal.3rdcc.org ([10.252.50.3]) by mail.3rdcc.org with ESMTP id pc52OUn2StMGnyRU (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Mon, 01 Jun 2026 05:02:57 -0400 (EDT)

X-Barracuda-Envelope-From: Yolanda.Houston@3rdcc.org

X-Barracuda-RBL-Trusted-Forwarder: 10.252.50.3

X-ASG-Whitelist: Client

Received: from mbx2019-02.internal.3rdcc.org (10.252.50.2) by

mbx2019-03.internal.3rdcc.org (10.252.50.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Mon, 1 Jun 2026 05:02:57 -0400

Received: from mbx2019-02.internal.3rdcc.org ([fe80::3802:aa54:687:6935]) by

mbx2019-02.internal.3rdcc.org ([fe80::3802:aa54:687:6935%4]) with mapi id

15.02.1258.028; Mon, 1 Jun 2026 05:02:57 -0400

X-Barracuda-RBL-Trusted-Forwarder: 10.252.50.3

From: "Houston, Yolanda"

To: "Houston, Yolanda"

Subject: Hello

Thread-Topic: Hello

X-ASG-Orig-Subj: Hello

Thread-Index: AdzxpXBzrtyyC7tWEUqi4DXxcLaZyw==

Date: Mon, 1 Jun 2026 09:02:57 +0000

Message-ID: <381724bf842a4977ab0a82a28d7d71c4@3rdcc.org>

Reply-To: "rafaelaaa081@gmail.com"

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [10.252.50.253]

Content-Type: multipart/alternative;

boundary="_000_381724bf842a4977ab0a82a28d7d71c43rdccorg_"

MIME-Version: 1.0

X-Barracuda-Connect: UNKNOWN[10.252.50.3]

X-Barracuda-Start-Time: 1780304577

X-Barracuda-Encrypted: ECDHE-RSA-AES128-GCM-SHA256

X-Barracuda-URL: https://quarantine.3rdcc.org:443/cgi-mod/mark.cgi

X-Virus-Scanned: by bsmtpd at 3rdcc.org

X-Barracuda-Scan-Msg-Size: 2722

X-Barracuda-BRTS-Status: 1

X-ASG-Debug-ID: 1780304577-05181e10dddb4900001-UguiO4



--_000_381724bf842a4977ab0a82a28d7d71c43rdccorg_

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=utf-8



Mrs Rafaela has gift of 3.5M for you, Reply for more details.











Notice of confidentiality: This message and its attachments are intended so=

lely for the use of the named recipient(s). They may contain confidential i=

nformation and are subject to state and federal laws and regulations. Any u=

nauthorized review, use, disclosure, or distribution of this message is exp=

ressly prohibited. If you are not the intended recipient, please immediatel=

y notify the sender and destroy any and all copies of the original message.

--_000_381724bf842a4977ab0a82a28d7d71c43rdccorg_

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">


/>












margin:0in;margin-bottom:.0001pt;background:white">


r:#242424;border:none windowtext 1.0pt;padding:0in">Mrs Rafaela has gift of=

3.5M for you, Reply for more details.=



=C2=A0














Notice of confidentiality: This message and its attachments are intende=

d solely for the use of the named recipient(s). They may contain confidenti=

al information and are subject to state and federal laws and regulations. A=

ny unauthorized review, use, disclosure, or distribution of this message is=

expressly prohibited. If you are not the intended recipient, please immedi=

ately notify the sender and destroy any and all copies of the original mess=

age.

--_000_381724bf842a4977ab0a82a28d7d71c43rdccorg_--

WEb/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.1.2 listed in dnsbl.ahbl.org]

[52.103.1.2 listed in dnsbl.ahbl.org]

[52.103.1.2 listed in dnsbl.ahbl.org]

[52.103.1.2 listed in dnsbl.ahbl.org]

[2603:10b6:510:1da:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:1da:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:1da:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:1da:0:0:0:19 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.1.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.1.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.1.2 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.1.2 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:510:1da:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:1da:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:1da:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:1da:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:1da:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:1da:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:1da:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:1da:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[52.103.1.2 listed in will-spam-for-food.eu.org]

[52.103.1.2 listed in will-spam-for-food.eu.org]

[52.103.1.2 listed in will-spam-for-food.eu.org]

[52.103.1.2 listed in will-spam-for-food.eu.org]

[52.103.1.2 listed in will-spam-for-food.eu.org]

[52.103.1.2 listed in will-spam-for-food.eu.org]

[52.103.1.2 listed in will-spam-for-food.eu.org]

[52.103.1.2 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.1.2 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.1.2 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.1.2 listed in bl.score.senderscore.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[charlettelofton536(at)hotmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[charlettelofton536(at)hotmail.com]

1.2 MISSING_HEADERS Missing To: header

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Re: Question



--_000_PH7PR12MB59759FCCD7D2BD19D72CC1AC9B152PH7PR12MB5975namp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hello,



I found a few ways to improve your website=92s online visibility.



Can I share them with you?



Best regards,



Paise





--_000_PH7PR12MB59759FCCD7D2BD19D72CC1AC9B152PH7PR12MB5975namp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hello,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

  I found a few ways to improve your website=92s online visibility.
iv>


nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Can I share them with you?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Best regards,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Paise


3D""
flow:hidden" src=3D"https://email-signature-image.com/signature.gif?u=3D470=

1776&e=3D1137276404&v=3Dde1191c3456a6bc19295a44b76b6e433c5e5ecdb5b6=

bdc9b5193781b03db3c68">







--_000_PH7PR12MB59759FCCD7D2BD19D72CC1AC9B152PH7PR12MB5975namp_--

WEb/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 Jun 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wU30z-00000000IEX-2QSU

for dave@doctor.nl2k.ab.ca;

Mon, 01 Jun 2026 07:49:13 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 Jun 2026 07:49:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastusazolkn19011002.outbound.protection.outlook.com ([52.103.1.2]:38693 helo=BL2PR02CU003.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wTyHO-00000000OJy-2LL7

for sales@nk.ca;

Mon, 01 Jun 2026 02:45:59 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=NkpddpR3ROq7CzltMQph6olzjBjfj9XV7QqoutiQI+KaI5u6kl944E7EneAzc0J09NUPWFoSBnwuAraEAUplc1U2AkR3Jir0urzCwzp4CTnoLexVPJeWR/r0zVj2aMr4h2axBC1Tf+zWZbwvzL59aBsLwh6juGfbT6vTWjvhMILX+g3sO3oDiHs5ZcKfPDHcbz3wcjwnwB6EHGfIcWrfItleKxnq5a+lb3Kwc/epaFgtvksEyShOX8BKLde9GXs96B1krbF84vgXF2fVHXNi9PGm9hks5V1uPRjfvZNy5SWGBY3gBGeAfDzc0PuTGER0sMl8XRlVlyQHxDxJ0w2Vcg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=IXPGKGzltGd1UkALPmSuigozIH3x8mhBQXH+gMRYh9I=;

b=QkZioDU813nMCkv+vaonIPqNywHm87WUtYuWk1jMpB40/JjEcIoAtzpYj9qofccHfdQQXaG2r3QvuXzAgNRHHEGug85BzgTtdbo9ITnLogzgiCWSWUkdfGCZqBvLBnslTK5/gf5XzaoKmYzQ5oUC+wtahTtyDje3fHnDq7TyAfHC3rx2ixoJRc5Xm2K44qOcyQ0sJl8cL9EC248ClbxolmBqvyDcFp+guSWqCLSywJvXW7ywacfSPgv1GgDWqpFpD8AeFp1ocWRCAxjiZj7oS8yIMLYCkVpPaEQakSLCTrGAMcTaYd6lpixf6ExRqLkZL7oByrvmdksab7oVtU7sWw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=IXPGKGzltGd1UkALPmSuigozIH3x8mhBQXH+gMRYh9I=;

b=E/6hqeoE3IHW4k30nOhO/6IhLlBa1n6ajyjruaQOyXKyVeewptbZxIh//6wBV3rvnZCeim0Kt/JGo8npXWmr835jl3BflMCex4E1JI7t6lbfvxNIx7miBWfWGn7HPhLbn0BGxZePqJf4bDnUCwlR0ihEYOZn5ESl3FMmgmp6LFqHIKi0Ri89Pv8xNczp0Is7XHlq+k35CrwRuUyI5uPHN9xkkzOH1eYvDpr2WToCK4N+BsxIKxZyEl/+K+Pw2pKf5mVtUJtCyXUaBBgPApNJU9ULG3vpxihCsKMZXC1fqoGzg+UoSfsRSyruRmKetFNLUMnaQzHBmy9N+wSCtxH8zw==

Received: from PH7PR12MB5975.namprd12.prod.outlook.com (2603:10b6:510:1da::19)

by SJ2PR12MB9162.namprd12.prod.outlook.com (2603:10b6:a03:555::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.71.15; Mon, 1 Jun 2026

08:44:45 +0000

Received: from PH7PR12MB5975.namprd12.prod.outlook.com

([fe80::22f2:637b:cc48:66bd]) by PH7PR12MB5975.namprd12.prod.outlook.com

([fe80::22f2:637b:cc48:66bd%6]) with mapi id 15.21.0071.015; Mon, 1 Jun 2026

08:44:45 +0000

From: Paise Lenort

Subject: Re: Question

Thread-Topic: Question

Thread-Index: AQHc8aLZsOTtFSO0OU6NbSpUF57Egg==

Date: Mon, 1 Jun 2026 08:44:45 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PH7PR12MB5975:EE_|SJ2PR12MB9162:EE_

x-ms-office365-filtering-correlation-id: 265ceba6-c3f8-4e4b-6f6a-08debfba0805

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|37102599003|37011999003|15080799012|15030799006|24071999003|39105399006|16051099003|55001999006|15001099006|45011099003|31061999003|8062599012|8060799015|19110799012|20031999006|704163111799003|2604032031799003|2604032081799003|34005399003|10035399007|3412199025|440099028|102099032|3430499032|39145399003|40105399003|41105399003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?SAtGh8Y2iVjvhkd8VvUTNLStdUZfIWqTHdzN2NzWkYHWQyZw16ZPBFl4?=

=?Windows-1252?Q?zqSNSr1M0JmabmTqrlU61DiKUaQJYz1NEPhBo06Qb6ce74Ki6QSdWCgh?=

=?Windows-1252?Q?Dq9tl2oHK5+VDlFe+R8WBSpoAtgPkRbWvFfz537FvSh9iNKAjvViO8DH?=

=?Windows-1252?Q?8C47d6Xhu3f1uaIyTCu3Dfu87pV62tVZstmXSNeRs67RMKTB+xGmtFB4?=

=?Windows-1252?Q?ZiwyHiyUTPvAZDofPPMIGpTp3+pVTLoC4Ze5xohl9KO5HiactmiLPHBa?=

=?Windows-1252?Q?MBasmX0hCgvmRiH0pUpWH3F3xcqEQZLu+5ZiP7MbXaDSg6ZU7YeJGHGv?=

=?Windows-1252?Q?T6ViI9+59UYlWiNisZUvdFTCIn9MToZ+zK9v8GrGdY4LF0ZfYpp11c4e?=

=?Windows-1252?Q?xoQPcOPBRqSD6h0hWOSKwdp9hQ5OD1rxYxNEXHrCMquvs5Ctq0NA6r/w?=

=?Windows-1252?Q?FOQnuMQ3oLTmuZas87tpTqusxb4zEh+igJLqA68QVGZ7QsJ0RtlaJMnN?=

=?Windows-1252?Q?TeTZgjI1jBcn/SfgHjAwUDtdy4S6duCfkEljjJwJpF919ZeIP4crnF8q?=

=?Windows-1252?Q?lfq0EBh5NdjKmf5a58EC5QWMpEH3oVDnNYfiMgjbUg1OWCpid28ZuHbi?=

=?Windows-1252?Q?BeNHJPj8Sfz978XoedzWmLExcB01BZeMjFrJleMuKvFwmp2NiptUmXTy?=

=?Windows-1252?Q?Dyt84oqFJwTVN/ffuUE9+vbMHc+d9YLrtqPsVRQoj6GzqkBKkBMj9eco?=

=?Windows-1252?Q?PoftWxu3iB5wSFi013I9RgiaJVH3527181XWQzktndjWkKMXV72DnTL2?=

=?Windows-1252?Q?MniAi+U1k6fd3wmAez9P9XMSpyvSISYJn9D1zFc4MT0QLHYpznm9WSta?=

=?Windows-1252?Q?jnQFS7RgbrSo95idZYIETjCD3ERctSZSpaJoHVsAg4FwG6rgjOnW3Ahf?=

=?Windows-1252?Q?/VwCluTcbtFj7wVwYcqRDKfPkM2ITGVdTHq/Acql6wvN5WX27FFEUcVK?=

=?Windows-1252?Q?CZTqDEVvGVHbtnHcawTx0UKzXLcaTngsxQjIcdv8CSC5pNlZIlloKWP3?=

=?Windows-1252?Q?cAjoV07X92RRbKnNA1oOYnZa5d49+b8lGR8PUcWCkkpQcPIyJI43Ieyr?=

=?Windows-1252?Q?V/GTVPBtyD+GWutjt06L6LItmZql8gb/B+2qHseE5/gCbNDsRoYivgCg?=

=?Windows-1252?Q?9eiAK9yxBQDoanGITPOVAXMlTm/an7ftUrmLUbDFoFE8BMalo57AwQPp?=

=?Windows-1252?Q?nR32zHV+H4EtoCKlqV9t9GSrjScKyHZ5ViJl5//D2dZsODws1hkzabxF?=

=?Windows-1252?Q?UIShZVsfqiV2gBQm68jliHLJGieoMnGn7ZCPSSD5HRTAFof+V2sX/Sia?=

=?Windows-1252?Q?nkDuua2BErHeOQBkne9JOjgIJoSpcQwAD0qBgqrV2d6kRsWYNqtE47zR?=

=?Windows-1252?Q?6Zg42VUixKtuq/eiygb+gzJKT1aIaqJX/RA9JpkYCLcrpWH3hXe4u1I3?=

=?Windows-1252?Q?Il9lWWFz?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?mc48vfHwQWGBnsiRjuQEs9ucsjodYQA6nzI+VVxxg2pheiiwoEdoWuUc?=

=?Windows-1252?Q?gPMwaBuUgSifXybrwlS9UUzM1wskCftXctwux49b0vuXl/WwvY0LS7ce?=

=?Windows-1252?Q?2y8QxoiIGdn0Vh6Pin1TvuMWkPFuBweHpybheR0uxlTkGQ00uc/zdoKE?=

=?Windows-1252?Q?S9OtaAp8OMjQtGECVEXkAm9HSV6hgWL4j3VogVcPduU8yWiDLE7lNPqt?=

=?Windows-1252?Q?HteAsQMlWRy89DvCp7wkfaQApCOK/170PKL0qwP6+5bN1gt1ts8B95qd?=

=?Windows-1252?Q?jFdbs60rvr9fnr0YR7gzEJQUYigUIsSr/niMBuN/YY4rdmFXogAWeB3C?=

=?Windows-1252?Q?FACMCHHDmkgN0+LmBuZqtLawPPYvjmoxM+FzQowZPe0e00AFcQQUzcuu?=

=?Windows-1252?Q?e7T13SJ85UxWgj/tzpWnTzXZpwWEnQQq1uyWw8EuLdKpGaupfQt6FbTN?=

=?Windows-1252?Q?s0zHwTZ9U6LRpwZZUKDjJgAhXODglwZoPEmXTcPriel1QFRSJD50tCPQ?=

=?Windows-1252?Q?T/rG2eBbE6lshe060//yQ6moRmxwxE52BCnWJkWG8UsL9E8dby/hqn3C?=

=?Windows-1252?Q?CuSsiQBaPECfQhXJL2+QrBp1/0eWXz5jELW50M5WbiMekw1e2F9QafGv?=

=?Windows-1252?Q?WgG5NgpBIHwN5QIgpvB5usz7hHQGnrcrdCvaBzZN0enJGGR85ME1a6Zz?=

=?Windows-1252?Q?/RmN/96lgjwre8BY2SO+0nSbeFTwNkGQH8z65o73wRTm89RNG9bMOFwC?=

=?Windows-1252?Q?lseIZIcNWXhedVaDdhuCOE16baDZVD5U7zV8pCOjGct5UXfu1HAkHV29?=

=?Windows-1252?Q?6mgctDJCnCsvySGjr876WDLUEgTGuTjPI780mhbsv7P776H7rIMANEny?=

=?Windows-1252?Q?uciHTpoTTFjHDxkQRdvI1jaagFZb3poQm7MlwgV4XwIXyY1Vm6DB/dT+?=

=?Windows-1252?Q?XH3hXijpm/7jzlOkPpeO+LoQ2j7SapBCfcRJhGycHBGYRz7uKFMMM4C5?=

=?Windows-1252?Q?ACNnktRHQJCL1f+T3PS0jUDdDm7AK2N8cyd5uT8nq81bbkUjXBVqYemZ?=

=?Windows-1252?Q?ZRXncLPFBOFAMy6TINH1oERBMRLyy9VGnZhWzBqtQEzxObkVGoox8yf6?=

=?Windows-1252?Q?d9kCMzshZdSPQMwG9iNe57mxRFqnCOCvrOQyvqml9jepPVrQkM3C7Iz3?=

=?Windows-1252?Q?buvjPon11mjlgoBKJ5d+TPSq+tokcwYO+ibK4a8PWYT9ff5YONvBRnMN?=

=?Windows-1252?Q?hbX7s19+tKufChBaC+vFjSb6n5CcmgFKbLJDyZ2I2+1+gYJrXeI2406v?=

=?Windows-1252?Q?z5milGegqvcgxaa8V7QG6+/WMFXfFjODI0o4V2TBO9DUNppcCZgvtXD8?=

=?Windows-1252?Q?eWeY5kDSvQlyXyKbzaQ6v6tduD+XHiZK7HkKDqCMRHtgBCYe3CPiEVJc?=

=?Windows-1252?Q?AA1O+bT2Hzx6pfNz87uPrSbavhEAEtaIFW06K5yXRwWZ32D2nlnvqWrT?=

=?Windows-1252?Q?G8zN8oqM2nyGSVjLRvLP1Aco9S0I5w=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_PH7PR12MB59759FCCD7D2BD19D72CC1AC9B152PH7PR12MB5975namp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-10359.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PH7PR12MB5975.namprd12.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 265ceba6-c3f8-4e4b-6f6a-08debfba0805

X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Jun 2026 08:44:45.2316

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR12MB9162

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I found a few ways to improve your website’s online

visibility. Can I share them with you?

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sun, 31 May 2026 20:19:00 -0600

Received: from out28-5.mail.aliyun.com ([115.124.28.5]:27408)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wTsEr-000000001sR-0ULF

for dave@nk.ca;

Sun, 31 May 2026 20:18:58 -0600

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.9226667|0.1296748;CH=green;DM=|AD|false|;DS=CONTINUE|ham_social|0.514862-0.0288178-0.456321;FP=15249561882337968797|1|1|19|0|-1|-1|-1;HT=maildocker-contentspam033032053168;MF=jojo.c@win-marketinc.com;NM=1;PH=DS;RN=219;RT=0;SR=0;TI=SMTPD_---.hlcLq87_1780280262;

Received: from DESKTOP-I6HOLNP(mailfrom:Jojo.c@win-marketinc.com fp:SMTPD_---.hlcLq87_1780280262 cluster:ay29)

by smtp.aliyun-inc.com;

Mon, 01 Jun 2026 10:17:52 +0800

Date: Mon, 1 Jun 2026 10:17:39 +0800

From: Jojo Yang

Message-ID: <2B8FB3B7-1B65-41F6-A79E-CBDE7886A022@win-marketinc.com>

Subject: =?utf-8?B?UmVsZWFzZXMgTmV3IFJlcG9ydCAtIFNlbWljb25kdWN0b3IgRGVm?=

=?utf-8?B?ZWN0IFJldmlldyBTeXN0ZW0gMjAyNi0yMDMyIOWNiuWvvOS9k+e8uumZtw==?=

=?utf-8?B?5aSN5qOA57O757uf5YiG5p6Q?=

X-Mailer: MailMasterPC/4.19.4.1001 (Win10 22H2)

X-MailMaster-ShowOneRcpt: 1

X-CUSTOM-MAIL-MASTER-SENT-ID: 3BF1ED48-4953-4C12-BC27-2F2B730600E6

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi. We recently published A Global and Regional Market Report

on Semiconductor Defect Review System 2026 It analyzes the major market players

in the industry, which may bring you new information about [...]



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.124.28.5 listed in dnsbl.ahbl.org]

[115.124.28.5 listed in dnsbl.ahbl.org]

[115.124.28.5 listed in dnsbl.ahbl.org]

[115.124.28.5 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.124.28.5 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.124.28.5 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.124.28.5 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.124.28.5 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[115.124.28.5 listed in will-spam-for-food.eu.org]

[115.124.28.5 listed in will-spam-for-food.eu.org]

[115.124.28.5 listed in will-spam-for-food.eu.org]

[115.124.28.5 listed in will-spam-for-food.eu.org]

[115.124.28.5 listed in will-spam-for-food.eu.org]

[115.124.28.5 listed in will-spam-for-food.eu.org]

[115.124.28.5 listed in will-spam-for-food.eu.org]

[115.124.28.5 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.124.28.5 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[115.124.28.5 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[115.124.28.5 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.5 MIME_BAD_LINEBREAK Message body with fishy line breaks

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} =?utf-8?B?UmVsZWFzZXMgTmV3IFJlcG9ydCAtIFNlbWljb25kdWN0b3IgRGVm?=

=?utf-8?B?ZWN0IFJldmlldyBTeXN0ZW0gMjAyNi0yMDMyIOWNiuWvvOS9k+e8uumZtw==?=

=?utf-8?B?5aSN5qOA57O757uf5YiG5p6Q?=



Hi. We recently published A Global and Regional Market Report on Semiconductor Defect Review System 2026 It analyzes the major market players in the industry, which may bring you new information about the global market.

.

If you have further interest in this report or related reports, we would be happy to share the Sample Report and Quotation for your reference.

.

The global Semiconductor Defect Review System market size was US$ 966 million in 2025 and is forecast to reach a readjusted size of US$ 1511 million by 2032 with a CAGR of 6.7% during the forecast period 2026-2032.

.

The following manufacturers are covered:

Applied Materials

Lasertec

KLA

Hitachi High-Tech

Advantest

Holon Co., Ltd

Wuhan Jingce Electronic Group

TASMIT, Inc

DJEL

......

Global Semiconductor Defect Review System Market, Segment by Type

5-7nm Process

10-16nm Process

20-28nm Process

Others

Global Semiconductor Defect Review System Market, Segment by Application

8 Inch Wafer

12 Inch Wafer

Mask/Reticle

Others

Forecast Units

Million USD

Report Coverage

Revenue and volume forecast, company share, competitive landscape, growth factors and trends

.

This report will walk you through the Semiconductor Defect Review System market from the following aspects in: Consumption, Sales, Revenue, Price, Cost, Gross Margin, Market size, Market share, Growth Rate, Trends, etc. In addition, It contain the impact of the latest Geopolitical risks, Trade protectionism and US tariff policy on global supply chain.

.

In case this report is not relevant to you, please forgive me for disturbing. If you can direct me to the correct contact in your company, that would be most appreciated.

.

Thank you for reading.





------------------

Best Regards

Jojo Yang | Global Sales Manager

E-mail: jojo@winmarketresearch.com

Phone/WeChat/WhatsApp: +86-18026352358 (7*24)

TEL: US: +1-888-365-4458(US) +1-202-499-1434(Int'L)

USA Office: 17890 Castleton Street Suite 369 City of Industry CA 91748 United States

China Office: VILI International Building No.167 Tianhe District Guangzhou City China

Telnet communications phish part 2

Posted by Dave Yadallee on
--=_00dbef6aaae3e423ebf5c01e9ca0016c

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset=US-ASCII;

format=flowed



Dear Telnet Customer / Email User,



Did you recently try to sign in to your email portal from a new device?.

Was this you ?



Location : Hanoi, Vietnam

IP Address : 179.65.129.66

Browser : Chrome 146.0



For security purposes, our cybersecurity team will SUSPEND your email

account until you confirm account ownership and restore access, you will

NOT be able to send or receive emails starting 1st June 2026.



If this was you :

You can ignore this message. There's no need to take any action.



If this wasn't you :

CLICK HERE [1] to complete these steps now to seccure your email

account.



 SECURE YOUR EMAIL ACCOUNT NOW [1]



Telnet Communictions

Email Administrator / Support Team.





Links:

------

[1] https://telnet-secureonline.netlify.app/

--=_00dbef6aaae3e423ebf5c01e9ca0016c

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8




=3DUTF-8" />
eva,sans-serif'>







style=3D"font-family: Rockwell Condensed;">
well;">
lt=3D"Telnet Communications" />


 



style=3D"font-family: Rockwell Condensed;">
well;">Dear Telnet Customer / Email User,
/>

nt-family: Rockwell;">Did you recently try to sign in to your email portal =

from a new device?.
ell Condensed;">Was this you<=

/span>
=3D"font-family: Rockwell;"> ?


-family: Rockwell Condensed;">Locati=

on        :     &nbs=

p; 
=3D"font-family: Rockwell Condensed;">
;">Hanoi, Vietnam

mily: Rockwell Condensed;">
le=3D"font-family: Verdana;">IP Addr=

ess    :       =

179=

=2E65.129.66

=3D"font-family: Rockwell Condensed;">
">Browser        :    &nb=

sp;  
n style=3D"font-family: Rockwell Condensed;">
ckwell;">Chrome 146.0


=3D"font-family: Rockwell Condensed;">
">* For security purposes, our cybersecurity team will
pan>
ily: Rockwell Condensed;">SUSPEND
pan>
style=3D"font-family: Rockwell;">
family: Rockwell Condensed;"> your e=

mail account until you confirm account ownership and restore access, you wi=

ll NOT be able to s=

end or receive emails starting 1st June 2026.
>


style=3D"font-family: Rockwell;">If this was you :<=

br />
amily: Rockwell;">You can ignore this message. There's no need to take any =

action.  


mily: Rockwell Condensed;">If this w=

asn’t you :

ockwell Condensed;">
olor: #e03e2d;">
-secureonline.netlify.app/">CLICK HERE to complete thes=

e steps now to seccure your email account.


tyle=3D"font-family: Rockwell Condensed;">
ell;">•
=3D"https://telnet-secureonline.netlify.app/">SECURE YOUR EMAIL ACC=

OUNT NOW



amily: Rockwell Condensed;">Telnet C=

ommunictions
Email Administrator / Sup=

port  Team.








--=_00dbef6aaae3e423ebf5c01e9ca0016c--

Telnet communications phish part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 31 May 2026 21:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wTtRg-000000006M2-199h

for dave@doctor.nl2k.ab.ca;

Sun, 31 May 2026 21:36:08 -0600

Resent-From: The Doctor

Resent-Date: Sun, 31 May 2026 21:36:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mailsv.tifpa.infn.it ([90.147.8.20]:36942)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wTlU6-00000000HPe-36kC

for sales@nk.ca;

Sun, 31 May 2026 13:06:16 -0600

Received: from webmail.tifpa.infn.it (webmail.tifpa.infn.it [90.147.8.17])

by mailsv.tifpa.infn.it (Postfix) with ESMTPSA id 769DA262;

Sun, 31 May 2026 21:05:10 +0200 (CEST)

MIME-Version: 1.0

Date: Sun, 31 May 2026 14:05:10 -0500

From: security@telnetcommunications.com

To: undisclosed-recipients:;

Subject: =?UTF-8?Q?=E2=80=A2_SECURE_YOUR_EMAIL_ACCOUNT_NOW?=

Message-ID: <3a58f0122b7c2f1f8bda5c5bddab24c1@telnetcommunications.com>

X-Sender: security@telnetcommunications.com

Content-Type: multipart/alternative;

boundary="=_00dbef6aaae3e423ebf5c01e9ca0016c"

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Telnet Customer / Email User, Did you recently try to

sign in to your email portal from a new device?. Was this you ? Location

: Hanoi, Vietnam IP Address : 179.65.129.66 Browser : Chrome 146.0



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[90.147.8.20 listed in dnsbl.ahbl.org]

[90.147.8.20 listed in dnsbl.ahbl.org]

[90.147.8.20 listed in dnsbl.ahbl.org]

[90.147.8.20 listed in dnsbl.ahbl.org]

[90.147.8.17 listed in dnsbl.ahbl.org]

[90.147.8.17 listed in dnsbl.ahbl.org]

[90.147.8.17 listed in dnsbl.ahbl.org]

[90.147.8.17 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[90.147.8.20 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[90.147.8.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[90.147.8.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[90.147.8.20 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[90.147.8.20 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[90.147.8.17 listed in will-spam-for-food.eu.org]

[90.147.8.17 listed in will-spam-for-food.eu.org]

[90.147.8.17 listed in will-spam-for-food.eu.org]

[90.147.8.17 listed in will-spam-for-food.eu.org]

[90.147.8.17 listed in will-spam-for-food.eu.org]

[90.147.8.17 listed in will-spam-for-food.eu.org]

[90.147.8.17 listed in will-spam-for-food.eu.org]

[90.147.8.17 listed in will-spam-for-food.eu.org]

[90.147.8.20 listed in will-spam-for-food.eu.org]

[90.147.8.20 listed in will-spam-for-food.eu.org]

[90.147.8.20 listed in will-spam-for-food.eu.org]

[90.147.8.20 listed in will-spam-for-food.eu.org]

[90.147.8.20 listed in will-spam-for-food.eu.org]

[90.147.8.20 listed in will-spam-for-food.eu.org]

[90.147.8.20 listed in will-spam-for-food.eu.org]

[90.147.8.20 listed in will-spam-for-food.eu.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

Subject: {SPAM?} =?UTF-8?Q?=E2=80=A2_SECURE_YOUR_EMAIL_ACCOUNT_NOW?=

AAA Phish Part 2

Posted by Dave Yadallee on


















Stocksy Email





































AAA Member Benefits




Hello , Today's Winner is root.

We would like offer you a unique opportunity to receive your exclusive reward of up Car Emergency Kit

To Claim simply take this short survey about your experience with us



Congratulation AAA Subscriber!






hurry up ! Your Reward is Ready




Your account information :




Customer:

root


Email:

root@nk.ca


Reward:



Car Emergency Kit




Claim Reward Now




AAA Team

















If you no longer wish to receive these emails, you may unsubscribe by clicking here


115 E 23rd St New York, NY, US 10010











AAA Phish Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 30 May 2026 19:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wTVNr-00000000LB3-08xH

for dave@doctor.nl2k.ab.ca;

Sat, 30 May 2026 19:54:35 -0600

Resent-From: The Doctor

Resent-Date: Sat, 30 May 2026 19:54:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [27.100.36.119] (port=42315 helo=acheterdesmedicaments.space)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

id 1wTSRh-000000003K7-18PU

for root@nk.ca;

Sat, 30 May 2026 16:46:42 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nk.ca;

h=Date:To:From:Subject:Content-Type:Mime-Version; i=root@nk.ca;

bh=296VkbZ1e2vn7SykHlB+7PsbHtI=;

b=LcXnAKwbXpUP+LfmlLV2DNA5Qcti0ckJG4VQq1So1rUgd0QzR5yLSP2KLZWyJ+gelMH6j99VEM8v

kBeD2qS7lZDaSY5JSrlwpUm7LARtyFmM5zpvhYsFqWeLtQgo1p4jFkxl7ZcryHIB0LgXWgNYTeX3

+gDa4Ro5e8Z/t69m4H91DVy+xzvXT30Gf8XC6OlqqpchbNbUTo580ZQWvZVKZTk8MPOXCuOha5vt

/hVvvrKA3vLa7i1Ar/uA6ws2kfi8i8ANcNHoAjooovVWzowHtfLn8CdphVApOYyIjpNize2HhwJT

Yg+KpCf/QKZ9Frnc2ai6t+pg5zOeecSknw3MLA==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nk.ca;

b=C57gILRZ794QpwZHMhMbfafWUhpf7loApg2FRiYZ42TWupIpfn/0RkhYEPxaUrAToT+HppjWK/9Z

WN7TaMNCFe1FWAtj1a0NMdaH00strpniyXVAJia0Og9ExxCGgzda/2U/UrK8zi5JtNjy9meFYqxL

1a3sOpVfZfScoe9HGcT06doqiYDYQIlfaDhuFYAMQsdzgSBW+65G1T6Tzz6V0md/QB0ogEJjtsdv

UXRhHTgGUrXe2PQqxj7Fbg6kbO9fyLUFPVexzFOZW0EXunbjVU3XvfQK87UDED0Ubi+Z6UzRZz60

y+KlL7xv0S5QHF3i1Sl+PZGT8GIXdNSJM3bsAQ==;

Date: Sat, 30 May 2026 22:45:27 +0000

To: root@nk.ca

From: AAA

Subject: Final notice coming for Car Emergency Kit...

Content-Type: text/html

Mime-Version: 1.0

X-Spam_score: 16.4

X-Spam_score_int: 164

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Stocksy Email AAA Member Benefits Hello , Today's Winner

is root.



Content analysis details: (16.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[27.100.36.119 listed in dnsbl.ahbl.org]

[27.100.36.119 listed in dnsbl.ahbl.org]

[27.100.36.119 listed in dnsbl.ahbl.org]

[27.100.36.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[27.100.36.119 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[27.100.36.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[27.100.36.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[27.100.36.119 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[27.100.36.119 listed in will-spam-for-food.eu.org]

[27.100.36.119 listed in will-spam-for-food.eu.org]

[27.100.36.119 listed in will-spam-for-food.eu.org]

[27.100.36.119 listed in will-spam-for-food.eu.org]

[27.100.36.119 listed in will-spam-for-food.eu.org]

[27.100.36.119 listed in will-spam-for-food.eu.org]

[27.100.36.119 listed in will-spam-for-food.eu.org]

[27.100.36.119 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[27.100.36.119 listed in bl.score.senderscore.com]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

2.4 HTML_OBFUSCATE_20_30 BODY: Message is 20% to 30% HTML obfuscation

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

3.6 HTML_TAG_BALANCE_CENTER Malformatted HTML

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 HTML_SINGLET_MANY Many single-letter HTML format blocks

0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

2.5 STY_INVIS_DIRECT HTML hidden text + direct-to-MX

0.8 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

Subject: {SPAM?} Final notice coming for Car Emergency Kit...



WEb/sEo/App spam from Microsoft Outlook PArt 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 30 May 2026 14:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wTQMx-00000000CXU-3yCi

for dave@doctor.nl2k.ab.ca;

Sat, 30 May 2026 14:33:19 -0600

Resent-From: The Doctor

Resent-Date: Sat, 30 May 2026 14:33:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013084.outbound.protection.outlook.com ([52.103.43.84]:20925 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wTMHP-00000000NVU-2P0P

for sales@nk.ca;

Sat, 30 May 2026 10:11:30 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=LylC84Bpq8VVsCqXzC2J0aJfaSIShug03QTQVckvjSe4jEhSC4+rXZZFQ5w8L9/pI+NaAXcM2Zz0H72YH/XD6gJUx34EUouwV9/WH4Cwq5Bf+j3ysHdHSAhoG3hsmYOd4opnPzqUx6MFLZz6ochpmtwxdcLujLyC7OqhBGMIvrj64SbVVWUMYvflHW+qZcPBbTN3CZM3HzDCQhTKo1oBSmibUwDtdJZPyM2MXBhHo4Vi7AzyYcRHlRReN2W/Z1XRKyYGDwAgO54juvxFFAUVcAXE273yrpeYB7Y9TRxpP6IE5ljKnkkd3ccHPo8MVaKYDW3eRC6Ag4LBnGlE8SC4wQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ICKRClvQNcv7hmiN7k3DH6GZ0BgNgVK+zAVOrtbDM8c=;

b=hKTdZvAY2jzSkQOEd2Z/jkzcCIf9k+EQ9rNCXZxweiFlFLXTMxb+XWu+Y1TBysg9vn5uehry1y11cQxHD6mvcn0ms1LBwJfk2DLHjbrxB+ChaB5jHVu3SClLb3mgFwSs7DaxkcN8d8UiQQBw9h1cgjx0k0qbAJJkL+IcZ/dc09xPNrioQxHqND6l/+9QXJu3sNsqEOLKVPfRBvyw3WcQALI0dUvD1v/HB/gIud0atsf83PlnywXriVNkcmJ1N6JaQlUX649U+ZeEToBEP5bgim1ZxxCKcPSFPuh6X9oGL8jXDT5ZbpAqY//ZOjuQWJOyprJuq02ldki+G2jgQBJebQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ICKRClvQNcv7hmiN7k3DH6GZ0BgNgVK+zAVOrtbDM8c=;

b=k7NXj63ugdvQ5H3fbhxICHDFm/gRHUpvbiX71rYhpmcNFszTIsTMvvogHiAPb4UpcN7GIxUa7ozInAel9i5CsjFL6CK/uQisZSj9jetceN6JN1K/JLOyMBICyAdelFwURhekiSa+gCqk+zlBJrNkG9fIblXfXumqrZuUhIZ/EevP8L29tvbkwCbgvx9qO802Gn+d06gxkv4UVxUxUz2yWQQWvx1nZS0e4yjYnaPkgNxMTVwoGI5vYD6VTky9wUwOB7m2+Ym8BniVM3Rc/qF7xvQbp7nIdXL6dbll2IfhF8JLHmiKthWDbzEyozUe2VO7h1kv+IsgibrIzHmOcDrwfw==

Received: from JH0PR04MB8463.apcprd04.prod.outlook.com (2603:1096:990:88::6)

by SEYPR04MB7773.apcprd04.prod.outlook.com (2603:1096:101:20b::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.71.15; Sat, 30 May

2026 16:10:11 +0000

Received: from JH0PR04MB8463.apcprd04.prod.outlook.com

([fe80::11ac:4993:e777:8a99]) by JH0PR04MB8463.apcprd04.prod.outlook.com

([fe80::11ac:4993:e777:8a99%3]) with mapi id 15.21.0071.015; Sat, 30 May 2026

16:10:11 +0000

From: Jack Liam

To: Jack Liam

Subject: Re: Seo- Get More Visitors

Thread-Topic: Seo- Get More Visitors

Thread-Index:

AQHcsLQRsJ8vw4hK40uMx8T3K6fhbrWphlbCgAGjTzKAAZiXLoADKdhsgAGiJ0OAAwFC2oABkWapgBE8jy6AAAN9I4AAANFTgA4rWL2AAZrSE4ABlXLogAZB/3KAAw0uSIABe3AlgAIWAzuAAOkN0IADZioigAL7x46AAYXxqIAB136ygAGpy12AAXr/wYAGSu3cgAf/9kSAAX8tn4AB1pFAgAFHICOAAXa8RIADM8zegAFG3r6ABj+gLYABlZyogASbuCSAA5HyvYAAANxtgACdwU+AAZDBEoAAAnxHgAKScR6AAy2kSYAC+UrwgAAJoxc=

Date: Sat, 30 May 2026 16:10:11 +0000

Message-ID:



References:





















In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: JH0PR04MB8463:EE_|SEYPR04MB7773:EE_

x-ms-office365-filtering-correlation-id: 84c0de5b-5759-46e3-b019-08debe65ed4f

x-microsoft-antispam:

BCL:0;ARA:14566002|22091999003|39105399006|31061999003|48001999003|24121999003|37011999003|8062599012|24021099003|8060799015|55001999006|2604032031799003|704163111799003|16051099003|15001099006|19110799012|15080799012|15030799006|40105399003|39145399003|51015399003|18071099003|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?VUwfz3TIDL7am2yfJz7V6CeJVj3XeQWMSyWx7lQuSEkSa3H7YCDPNIxyHA?=

=?iso-8859-1?Q?x9v4GLGFuDx34dExyOQ74CL8NlNzvLx/9avbhePTOlKaEt3lMQK4OK71K0?=

=?iso-8859-1?Q?yXDFUBoZgBMyXs78JpGvAoOM1q1GyXqPoxwEN4cd7kMaVdkc9dycihkDIr?=

=?iso-8859-1?Q?UNu2TsMgJ3VfaDLaUzZcEI+K6FIl59+Wc5Y7djuT0VIFhLTIh5y3LtnHCl?=

=?iso-8859-1?Q?0oSEjaiKIs+2/m0aaRt/gSi3Jpuqwcod/LLVVoISrqR8NbC2vky9ij3GeI?=

=?iso-8859-1?Q?NU8IiBCWLamV92OnscnJ6EeaTXhpCo8PqC42NklRO6PMzFRkAh9OWBZfaD?=

=?iso-8859-1?Q?hO1zitNPzjVrtM9Yt9qC4QNPxKwpDT33QK0ZW4oLbHWywxzQ6C+hqohCQS?=

=?iso-8859-1?Q?E7eefMavGMJ51uIBrJKzKhoO6pPt3RNBogOwl4FtTcRzEhta9sL6Kl6pMC?=

=?iso-8859-1?Q?kDUK5Lp2axgraHNkbUNrVyaTnlKZJmpjzvaFWm3HSEQ5DoYLm/m0Z/Y4RE?=

=?iso-8859-1?Q?PCEVyYnLHI5t+LQa4cAvUz9ZsEcZCCLGXmp8PEN8zTowax0rX7EsAMaZUZ?=

=?iso-8859-1?Q?waY0GbISg33gSHO67VkmiX8eAgixMWOHDjTBdXZwDS7ra9H8x++Jb+BxDZ?=

=?iso-8859-1?Q?cjnJV6CRJ+TEgTPIE4hfFOFU+X6NmU+gCuucepdaAiCh7lN83qmIo9DNXz?=

=?iso-8859-1?Q?CJg/Po5JVEsou0E4wqZiQVXzC+8SkeOIbNviYsrGU3AmARfjxk534BuHPU?=

=?iso-8859-1?Q?AOiQzl+l9JpPDdnkHJznuZv+0yQ5GIwDL00E9mHtFPcKsoLFtmLoo2Isjs?=

=?iso-8859-1?Q?DCd8Y104PuyRR2S78GWca7q0Ijl8x2F9JADIqRBW46iNYs7I+IrubtFtJ4?=

=?iso-8859-1?Q?YyKGx+2+O5GH1nbIkdUOQIGFwKMXrtu4NmepAfUYQWUfij9B4xAJonENiW?=

=?iso-8859-1?Q?5zK2qCZ3Ksqt3uPL6RIhCrTcfMdfhSjjPqdV84+nN7CvAwkhW7ojWNNiTL?=

=?iso-8859-1?Q?yXzaDhIC6MG7OeM1TfFXlnqev7Kd6Ynr3IVKLS0b93Gs6/hKHcBfNnJS5T?=

=?iso-8859-1?Q?FEOJRT1HlXFzA8CtnAL+JPsqXFBJ6jLnpKIPVZlkPOgJc/sTp9qcYKxA34?=

=?iso-8859-1?Q?d5ldH+jJmJA0qATk1E1b41vZQ29ET2twnaGafq1m7MLJJL9R54sSBERYd6?=

=?iso-8859-1?Q?U6yJTOXPRsFUdf9naA5a5zM0PDq50whJ5asx7Rwb4vyL0/6AyuDwlcTNmN?=

=?iso-8859-1?Q?Qr14+rkoTsna0J6sFQ+QMJRTsgK0Dg0IrYF8HZrIjmo4M5+5bWhJiMIcoP?=

=?iso-8859-1?Q?OVqmpv8hUknVETXh9O30dH25DM3vXyZKgOcPdjc1PAiNBe0Gf0DiTNvM1k?=

=?iso-8859-1?Q?u8PiDD/Q3vPQmNKphfsr6Jlqkw34HlczIAq358Ume0W2beBHI/GQbPbAw2?=

=?iso-8859-1?Q?R7jM6OfZTl43Mb5O3jU9UkmDg9lHS1nCnWqdZA=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?t2vUEuyawaMMUYiqHQre6NK+0CSYCYE20EgefawSsVXwiz3CshPCmrRZDq?=

=?iso-8859-1?Q?pQErwIwSCrA8jwWUo7XWpmevve8SlOaShtjhpE38ydAhd/j7lshxShYVSG?=

=?iso-8859-1?Q?oHfvU3sQ/lAd3BYQ2Brj4N48awwfqgDcZDfl9G5TGdO0HRm2MqZg3Hx99G?=

=?iso-8859-1?Q?8DylBLFi64k1hbd8wcSJIXJrfVUyq7h+QT5jEHbjgCnYQ9Lgb9b7KCp7ZZ?=

=?iso-8859-1?Q?02oDJGw17KKOhIXPfXumuIpsQXYXqKmk1lEGoEltVTU314cuM3u2+oibfX?=

=?iso-8859-1?Q?uT74Eoi+b494nNZVSQEvSBGdXEcZDT/2IlR+G85KILRkBN2wYJ/hnRMJUi?=

=?iso-8859-1?Q?qqM8TuT3M3iXQ+gem/HiyroLPS79QSuzR6/HaITUN9266G9hcczFXBn8bG?=

=?iso-8859-1?Q?GhmI3ycGMsSS6EUdr84Zu9LWlWF0w5kybOclq3uyZ0UP5SR2lwk+Usn9Pf?=

=?iso-8859-1?Q?/TporKEylKZjsOheOqYnY+z4gB2ueMYjjfmAcAv0zkONX3sZzh5l3PKPHZ?=

=?iso-8859-1?Q?5wfg2qwpydOMuSCuk/ctP+uCVROXp4xh+Tebg4XzOZW41FcwB21Rmn/KZC?=

=?iso-8859-1?Q?siDuUYL2pIK+5FMPM/yOOCYeFCkXwKDznC2JiAlpL9yD3vuM1IoV7gYsF4?=

=?iso-8859-1?Q?4SBvEumIuRHLPfmU7U42xWvol48VyC3VxkD9GFk9LN1GI9+0hSNwyXGFoS?=

=?iso-8859-1?Q?Y6MuXNbaAlvcwnR+KvIi/Pe5KgByAJtyhHDLw+WSelKJ5n1RXYTbR23jKR?=

=?iso-8859-1?Q?U73ToDo7LrF8Vb6Ak0qbrHcrdTac/FVFoV2vwGGGVTFYodUTVq1kZCJfr1?=

=?iso-8859-1?Q?HxoFGyfoITTi+NhN33r8Wtn7neGVPX1v49LDyx+Qmrqi9+FpaGdlajr6se?=

=?iso-8859-1?Q?10ZaCDitC4Y3XudOw3wEVQL4OoGvMZCpx4EPp7BI3SZEvPKdP/ogEj/2po?=

=?iso-8859-1?Q?9qeKxTvseigLxVicA3qKgDwUb2x/0grKcGJ2oJA6MPVPsJDQf3JLtqnb2o?=

=?iso-8859-1?Q?2MheL1+N9kqpMIrJM+HfJZFgzkCTJuE24uL/FmFSSHyol29zZTZvW8YxDC?=

=?iso-8859-1?Q?d8+j+1W9o0kfvt6zg/kXKU8wkrWk2FsmT81RRCjdWdloBkKeSnrNgWqDUq?=

=?iso-8859-1?Q?3VRO8o2PM7Sw2jVa01U1Wk5xEEP6XDSlBpNeCD/G6D+mlz+gHLU/8e6Ejc?=

=?iso-8859-1?Q?2BddQLabiXdD3z5lZ8MhE/ROAFnpliWtAq2il4AtflW1iD5q7FtU+u2Jgu?=

=?iso-8859-1?Q?rqk9Ftbw0wfoTRW6Pbp9ztNt7DpU9YEmaI8jsglxqosL0/09/IK9mGpq7y?=

=?iso-8859-1?Q?3SSzX++UrGhVSC0xLa5q/lZqambVKHIgiuNqT45hXgA/hIU75P88Eg+29X?=

=?iso-8859-1?Q?js/0kCo0jsh/fvUAR11mkamZicsV2Ol5qTNQOyeIGc0jZHx7+YgCAOiL59?=

=?iso-8859-1?Q?NXw819l4t7lWPSYw?=

Content-Type: multipart/alternative;

boundary="_000_JH0PR04MB8463E4E2CB6BA45B99A7F511E4172JH0PR04MB8463apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: JH0PR04MB8463.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 84c0de5b-5759-46e3-b019-08debe65ed4f

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 May 2026 16:10:11.5076

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR04MB7773

WEb/sEo/App spam from Microsoft Outlook PArt 2

Posted by Dave Yadallee on




--_000_JH0PR04MB8463E4E2CB6BA45B99A7F511E4172JH0PR04MB8463apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



May I send you quotes with inquiry portfolio?



Please Reply



Thanks,



________________________________

From: Jack Liam

Sent: Sunday, March 8, 2026 10:16 PM

To: Jack Liam

Subject: Seo- Get More Visitors



Hi,



I found a few ranking gaps on your site that are easy to fix.



Interested in a short call, or should I send the SEO plan with pricing?



Thanks,

Cora



--_000_JH0PR04MB8463E4E2CB6BA45B99A7F511E4172JH0PR04MB8463apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

 Hi,







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

May I send you quotes with inquiry portfolio?



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Please Reply



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">









x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">


11pt; color: rgb(0, 0, 0);">

From: Jack Liam


Sent: Sunday, March 8, 2026 10:16 PM


To: Jack Liam <jackliam156@outlook.com>


Subject: Seo- Get More Visitors


 





_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I found a few ranking gaps on your site that are easy to fix.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Interested in a short call, or should I send the SEO plan with pricing?
v>


_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Cora








--_000_JH0PR04MB8463E4E2CB6BA45B99A7F511E4172JH0PR04MB8463apcp_--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 29 May 2026 17:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wT6d0-000000001u9-2sTO

for dave@doctor.nl2k.ab.ca;

Fri, 29 May 2026 17:28:34 -0600

Resent-From: The Doctor

Resent-Date: Fri, 29 May 2026 17:28:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from bg4.exmail.qq.com ([43.155.65.254]:2238)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wT0ue-000000004Mr-3fkJ

for sales@nk.ca;

Fri, 29 May 2026 11:22:35 -0600

X-QQ-mid: zesmtpgz9t1780075287t96ec8bc5

X-QQ-Originating-IP: POHqAB0w+yXiIFo7vt9qF65Veecq84jzwykTqw8fkVI=

Received: from 192.168.5.94 ( [14.154.22.122])

by bizesmtp.qq.com (ESMTP) with SMTP id 0

for ; Sat, 30 May 2026 01:21:26 +0800 (CST)

X-QQ-SSF: 0000000000000000000000000000000

X-QQ-GoodBg: 0

X-BIZMAIL-ID: 3874565186205494221

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64

From: Sam

To: sales@nk.ca

Subject: GPU/CPU/SSD/HDD Supply: RTX 5090, Intel Xeon, Enterprise Storage - Hong Kong Supplier

X-QQ-SENDSIZE: 520

Feedback-ID: zesmtpgz:hk-horngshing.com:qybglogicsvrgz:qybglogicsvrgz6b-0

Message-ID: mis_570E7996444929997E4FF741@hk-horngshing.com

X-QQ-XMAILINFO: MRPzwZ7o8e7ohdifvxdXGtSmqf1b/fmI711z04o+a+s9LCME/30Nunff

NAyXc3iwVnHLf+iOJKL5WF3uWIPccTZOdGvsHNUVFtVa63fb4af16PENlRNseRWOITXLvVN

lZDZXobwDfPZZbrhO+ILfS6ZXL8+k1Z/r7cTw1uKOX0QePHMgXHRC5+LB4Tpm1Aojc7lN/3

8QlrnQxgUf/8im9SfWESvBrlJqgg7986h15/QJanRaafJGhgz4aUmS/wCMCFIn3AytLDBqs

Wdy9QV7k/3qJLzE9AmqadUpv6CEoiTktBvbzkKfBfjnorkD/niStUNn6Wr9R+VRp4LMbM2r

g10HJmh3sHUkd30dRhBGM8ASGONfySFVtFoCp4LT39QcJ5fb5w0eccaXob5MOp9IALaOTHz

04EdYlp2pGprzEnBz3Sk1XgrqLZdN3Fpl9t+iIm3/OoiwSujZ381wN5b8gNSySXU2UksVmz

4vrCWfEKvQdzf8jrcY1mDgQZ2T73CrT97gGv1a6rHQmpxa8GxnBiV62VgneHBkLx+sYzLcC

cF9048Bfv0X3cLBntAtrvyM0g2Pbfyg7JS7Y2rQkzc6GDcrnJCprTRvXvzSBDf51NYBo5hp

mstizVWDwCaDagkXOjm5NK1oGV0AC5Ck9JIMHAmMgFcDdYgsjYbeUDMsB0XecIsiSrxR8NO

a8hjPbjy4NxHr0DbOr/OcgMcYa76bC5nU8MvA5dLPnzdyssaQwnUlh+Ds/Kq5jhmtGBYL1b

OucErWplc772vbOoeWHRNoRss8tvK2TqPSKHSPNoGycieWizPcIrYOLCu+QcCjujI8wCntU

HYCo1QksShHYqxCph/pPQCNmCRpuXOFzffEk6023tC8AWlKalTeS4zqMIOfSz/+MA5lumyb

087nVqVQ9uZ2QTIIdkN/YpAmArrsvvgez9tr6DiCs7UaVmlrC/tWhAacVmJQsBMG9PyZfqK

Uspsq51L60puKLEZ3oonN8UTs7ZpqgmJuDhWUgINXybi1lBpbQr/esKSxAhhMD6Y0uTQUML

DMFwDY/Y2jiBvvJI+f4//udXaqvwdriipLdO3JNiiXaJ/qYIPvaC0kqYwNVAPX3rG++PNni

1Qk9m06cgDAFMg5iX11SbQIBe9H/Ueplar3NcoVJqS93ZJsVN/16SgEexIwrhZ6DqvmEzon

JAsPfLzbGC3vo3YZ+/Q1/nFBu3TylhUv0IUZvofdjHxKgliOu8wwcGF6ne0rszJDYQcc

X-QQ-XMRINFO: OWPUhxQsoeAVwkVaQIEGSKwwgKCxK/fD5g==

X-QQ-SPAM: true

X-QQ-RECHKSPAM: 3

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Procurement Team, I am Sam from Hong Kong Horng Shing

Company, a professional electronics distributor with over 5 years of experience

supplying enterprise hardware to data centers, cloud providers, and server

farms wor [...]



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.4 MISSING_DATE Missing Date: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[43.155.65.254 listed in dnsbl.ahbl.org]

[43.155.65.254 listed in dnsbl.ahbl.org]

[43.155.65.254 listed in dnsbl.ahbl.org]

[43.155.65.254 listed in dnsbl.ahbl.org]

[14.154.22.122 listed in dnsbl.ahbl.org]

[14.154.22.122 listed in dnsbl.ahbl.org]

[14.154.22.122 listed in dnsbl.ahbl.org]

[14.154.22.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[43.155.65.254 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[43.155.65.254 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[43.155.65.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[43.155.65.254 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[14.154.22.122 listed in will-spam-for-food.eu.org]

[14.154.22.122 listed in will-spam-for-food.eu.org]

[14.154.22.122 listed in will-spam-for-food.eu.org]

[14.154.22.122 listed in will-spam-for-food.eu.org]

[14.154.22.122 listed in will-spam-for-food.eu.org]

[14.154.22.122 listed in will-spam-for-food.eu.org]

[14.154.22.122 listed in will-spam-for-food.eu.org]

[14.154.22.122 listed in will-spam-for-food.eu.org]

[43.155.65.254 listed in will-spam-for-food.eu.org]

[43.155.65.254 listed in will-spam-for-food.eu.org]

[43.155.65.254 listed in will-spam-for-food.eu.org]

[43.155.65.254 listed in will-spam-for-food.eu.org]

[43.155.65.254 listed in will-spam-for-food.eu.org]

[43.155.65.254 listed in will-spam-for-food.eu.org]

[43.155.65.254 listed in will-spam-for-food.eu.org]

[43.155.65.254 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[43.155.65.254 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[43.155.65.254 listed in bl.score.senderscore.com]

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[43.155.65.254 listed in bl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

1.2 INVALID_MSGID Message-Id is not valid, according to RFC 2822

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} GPU/CPU/SSD/HDD Supply: RTX 5090, Intel Xeon, Enterprise Storage - Hong Kong Supplier







Dear Procurement Team,



I am Sam from Hong Kong Horng Shing Company, a professional electronics distributor with over 5 years of experience supplying enterprise hardware to data centers, cloud providers, and server farms worldwide.



We currently have competitive stock available for your infrastructure needs:



■ NVIDIA GeForce RTX 5090 32GB Graphics Cards — bulk quantities available

■ Intel Xeon Scalable & Core Ultra Processors — multiple SKUs in stock

■ Enterprise SSDs — SATA, NVMe, U.2 (Samsung, Intel, Micron, WD, Seagate)

■ Enterprise HDDs — 2.5" & 3.5" (Seagate Exos, WD Gold/Ultrastar, Toshiba MG)



Why work with us:

- Competitive wholesale pricing (Hong Kong-based, low overhead)

- Flexible order sizes — small trial orders welcome

- Fast shipping worldwide from Hong Kong

- Consistent stock availability, long-term supply reliability



If you have regular demand for any of the above components, I would be happy to provide a competitive quote. Please share your monthly requirements or target pricing.



Contact me directly:

Email: sam@hk-horngshing.com

WhatsApp: +852 6378 4410



Looking forward to supplying your data center hardware needs.



Best regards,

Sam

Sales Director

Hong Kong Horng Shing Company