Multiple mailing list attack from zendesk

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xM4J6-00000000Dkc-2PoK

for dave@doctor.nl2k.ab.ca;

Wed, 28 Oct 2026 08:07:12 -0600

Resent-From: The Doctor

Resent-Date: Wed, 28 Oct 2026 08:07:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.freebsd.org ([96.47.72.81]:54310)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLxlh-00000000EP7-3cXP

for doctor@doctor.nl2k.ab.ca;

Wed, 28 Oct 2026 01:08:20 -0600

Received: from mx1.freebsd.org (mx1.freebsd.org [96.47.72.80])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519)

(No client certificate requested)

by mx2.freebsd.org (Postfix) with ESMTPS id 4jDz2N3t4Cz4qmt

for ; Wed, 28 Oct 2026 07:07:24 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8537-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jDz2N2Sq1z4XGP

for ; Wed, 28 Oct 2026 07:07:24 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8537-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim;

t=1793171244;

h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:

in-reply-to:in-reply-to:references:references:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post;

bh=NrwjVjVtHUMzLgodkyTokD8NEkwx6LaFJNcBtpUgIzU=;

b=Fk6bG4XhHdYhoIFjebTRkwJrky1cVwdA/dqlPILH9zKQzET16zzsfyxMFLSjIjP4fDvDEB

/imzAHwJLTSbJl5ygJ2AFP3qGNgjJFw7Ef0I9GtpgJsOWjJhrK07Xs/3L87VvnQnVxriG+

qNVMvbjUzCf8JQZB6R7uGKZPqybViroNsunLCNrjgiCUNrdDvM/gt5R4ZGp5VVRnksk0xP

/ZVWBwhnxrsfa1qXp7pouz+73IeACuj9CCJ+z7poN+aJCGI3YtjRXLohlhxrynQNFPfKpU

8pWvqid5murJqSdUPUXQNrJs9qm5s4x3fxASFwHrzFXMO8Wl2GXd4pdIPDTCZg==

ARC-Seal: i=1; a=rsa-sha256; d=freebsd.org; s=dkim; cv=none; t=1793171244;

b=KhCdkUksqM6Cpbm3jbLh+rc0b4OZ+3dYzaAkSmZWeAKc7pco//k9YUFaCbVjLIZBSRBQzm

sGCj1SijL6AgGe8xrvgKYH+wJeGPk0FeT8TtuED1+tZMPplWObVlBBqV5uY5d7m+epqWKS

BhryonQOXF81BzqjkqXhj0JPIVmL0GQoqY65VdMV+8XGTVQD40ijfwWR39Wd2KZn5EQ+k6

Ej/ZJsKGrNhMdfUf7CEmfjUFCU4qSYvxKB9bbqh3iiZPOsvijZ1eRF2R9isA8SQMQIAwjh

9mS2/LYWdWLzs5bHEomz7h07EGBen2rUlF6JUqiG/wqflDfmRlGc7QsKmza3qg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;

s=dkim; t=1793171244;

h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:

in-reply-to:in-reply-to:references:references:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post:dkim-signature;

bh=NrwjVjVtHUMzLgodkyTokD8NEkwx6LaFJNcBtpUgIzU=;

b=iRevJ2UsFJcEEINh29WdmS6FOqhEDmhjpqgwzVuLttbbPvC02su1hsqUWy586cpNR4CLcW

YWXkIhgMYVl55zHt22t8TNtQTFDCL80JIvbjlmaiXFJtSIwkrApTd11/rVMfFc0CtajEl9

tEG0lHoBidOgbUolgaG7WvQkjYI6JTr/BqQ/USGqbyiNRdUE2V6ITNcVya4e3CkYUR4rax

KCdIHF6r01xzKM6lvwwmKF4N93jrmBmtOEqKlwXjlKBMkaJlhFcEhYktv5+4WqbJSltvCa

QKoLgwtZdsc5OtyqbuNJ3q2cwizL0HRPDyfXUnESD+HqWJ0azSOjwj96i7oNsA==

ARC-Authentication-Results: i=1;

mx1.freebsd.org;

dkim=pass header.d=oclc.org header.s=zendesk2 header.b=HXrlEoTS;

spf=pass (mx1.freebsd.org: domain of support@oclc.org designates 192.161.149.4 as permitted sender) smtp.mailfrom=support@oclc.org;

dmarc=pass (policy=quarantine) header.from=oclc.org

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jDz1P2h6rz6wxpK;

Wed, 28 Oct 2026 07:06:33 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8537@FreeBSD.org)

X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org

Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jDz1L5cGhz6wxts

for ; Wed, 28 Oct 2026 07:06:30 +0000 (UTC)

(envelope-from support@oclc.org)

Received: from mta-out4.pod19.use1.zdsys.com (mta-out4.pod19.use1.zdsys.com [192.161.149.4])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange secp256r1 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jDz1K61Gvz4VTm

for ; Wed, 28 Oct 2026 07:06:29 +0000 (UTC)

(envelope-from support@oclc.org)

Authentication-Results: mx1.freebsd.org;

dkim=pass header.d=oclc.org header.s=zendesk2 header.b=HXrlEoTS;

spf=pass (mx1.freebsd.org: domain of support@oclc.org designates 192.161.149.4 as permitted sender) smtp.mailfrom=support@oclc.org;

dmarc=pass (policy=quarantine) header.from=oclc.org

Received: from unknown (unknown [127.0.0.6])

by mta-out15.pod19.use1.zdsys.com (Zendesk) with HTTP

id 4ee8a926-1695-4736-98e2-709232f023b1;

Wed, 28 Oct 2026 07:06:29 +0000 (UTC)

Date: Wed, 28 Oct 2026 07:06:29 +0000

From: Support

Reply-To: Support

To: ARIN Ticketing System

Cc: Accounts Payable ,

Creative Commons ,

Brewster Kahle ,

Clement Erhardt Lehman ,

Answers ,

Admin ,

Pandas-dev ,

Helpdesk ,

Info ,

Contact ,

Freebsd-questions ,

Misc ,

Netbsd-users ,

Info ,

Info ,

Info ,

Support ,

Webmaster ,

Help ,

Drh ,

Info ,

Info ,

Info ,

Info ,

Support ,

Psf ,

Numpy-scipy ,

Executive-director ,

Gnu ,

Info ,

Press ,

Info ,

Arch-general ,

Apache ,

Users ,

Core ,

Php-webmaster ,

Pgsql-general ,

Info ,

Emaillist ,

Jenkins-infra ,

Cmake ,

Llvm-dev ,

Gcc ,

Info ,

Daniel ,

Press ,

Certbot-dev

Message-ID: <7YDVD6EWDM5_6ae19ef4edfca_fbe9aabf020105_sprut@zendesk.com>

In-Reply-To: <469309810.0.1793171173100@hive-mail-cron-job-29886186-cjnsp>

References: <7YDVD6EWDM5@zendesk.com>

<469309810.0.1793171173100@hive-mail-cron-job-29886186-cjnsp>

Subject: =?UTF-8?Q?Thank_you_for_your_OCLC_Support_Request_1030904_-_Re:?=

=?UTF-8?Q?_[ARIN-20261028.17]_FORMAL_CORPORATE_MEMORANDUM_=E2=80=94_Disput?=

=?UTF-8?Q?ed_Billing,_Suspension_of_Authorized_Credit_Arrangements,_Accoun?=

=?UTF-8?Q?ting_Demand_and_Preserva...?=

List-Archive: https://lists.freebsd.org/archives/freebsd-questions

X-BeenThere: freebsd-questions@freebsd.org

Sender: owner-freebsd-questions@FreeBSD.org

List-Id: User questions

List-Post:

List-Help:

List-Subscribe:

List-Unsubscribe:

List-Owner:

Precedence: list

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--==_mimepart_6ae19ef566f7_10518d07253";

charset=utf-8

Content-Transfer-Encoding: 7bit

X-Delivery-Context: rule-2-event-id-56892971665427

X-Zendesk-From-Account-Id: 7d4af63

Auto-Submitted: auto-generated

X-Auto-Response-Suppress: All

X-Mailer: Zendesk Mailer

X-Zendesk-Email-Id: 01M60N9SJDY2TWQC1671XYCFYH

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oclc.org; q=dns/txt;

s=zendesk2; t=1793171189; bh=NrwjVjVtHUMzLgodkyTokD8NEkwx6LaFJNcBtpUgIzU=;

h=date:from:reply-to:to:cc:message-id:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding;

b=HXrlEoTSICI8hbRZ5go1PwRI7QCIto5jnzybqBWCE8t4+lxiDL0eyJd4nvkgdz07KUVzK3fJ6UPMZdkRBS4giCXBOVO+W6j87LM7livIjP0tg/DB+ix1UXAfZ/1e7UeBwoitfWfk+YPa8NBrDoeNrU8iDZP9qyxflUImdQXgKkeOGBmKhzZnstLrgsYffjGrvRkb5EqNwt380+rQQ0HBBzIbnQkEBm8XCpTl8/u6h17n90e3zNhWfCGbbOuFdbW8tKLrDIbRDYcYICYzeoZ5AQLVplLRHC0kTKLpusEubuR81tQ2qerKfprS9Bmu/jsG7OOxfpZdHUXyGejPDx68FQ==

X-Spamd-Bar: /

X-Spamd-Result: default: False [-0.34 / 15.00];

SUSPICIOUS_RECIPS(1.50)[];

DWL_DNSWL_LOW(-1.00)[oclc.org:dkim];

URI_COUNT_ODD(1.00)[5];

RCVD_DKIM_ARC_DNSWL_MED(-0.50)[];

DMARC_POLICY_ALLOW(-0.50)[oclc.org,quarantine];

RWL_MAILSPIKE_EXCELLENT(-0.40)[192.161.149.4:from];

RCVD_IN_DNSWL_MED(-0.20)[192.161.149.4:from];

R_DKIM_ALLOW(-0.20)[oclc.org:s=zendesk2];

ONCE_RECEIVED(0.20)[];

R_SPF_ALLOW(-0.20)[+ip4:192.161.144.0/20];

MIME_GOOD(-0.10)[multipart/alternative,text/plain];

MANY_INVISIBLE_PARTS(0.05)[1];

XM_UA_NO_VERSION(0.01)[];

MLMMJ_DEST(0.00)[freebsd-questions@freebsd.org];

ARC_NA(0.00)[];

MIME_TRACE(0.00)[0:+,1:+,2:~];

FROM_EQ_ENVFROM(0.00)[];

FROM_HAS_DN(0.00)[];

RCPT_COUNT_TWELVE(0.00)[49];

RCVD_TLS_LAST(0.00)[];

TO_DN_ALL(0.00)[];

HAS_REPLYTO(0.00)[support@oclc.org];

TO_MATCH_ENVRCPT_SOME(0.00)[];

FREEMAIL_CC(0.00)[wikimedia.org,creativecommons.org,archive.org,gmail.com,pypi.org,python.org,kernel.org,linuxfoundation.org,alpinelinux.org,freebsd.org,openbsd.org,netbsd.org,cncf.io,docker.com,openjsf.org,npmjs.com,ruby-lang.org,perl.org,sqlite.org,mysql.com,gradle.com,mozilla.org,eff.org,wordpress.org,numfocus.org,gnu.org,fsf.org,debian.org,canonical.com,archlinux.org,apache.org,maven.apache.org,rust-lang.org,lists.php.net,postgresql.org,mariadb.org,eclipse.org,googlegroups.com,cmake.org,lists.llvm.org,gcc.gnu.org,openssl.org,haxx.se,letsencrypt.org];

ASN(0.00)[asn:14618, ipnet:192.161.149.0/24, country:US];

DKIM_TRACE(0.00)[oclc.org:+];

RCVD_COUNT_ONE(0.00)[1];

REPLYTO_EQ_FROM(0.00)[]

X-Rspamd-Queue-Id: 4jDz1K61Gvz4VTm





----==_mimepart_6ae19ef566f7_10518d07253

Content-Type: text/plain;

charset=utf-8

Content-Transfer-Encoding: quoted-printable



##- Please type your reply above this line -##



Your request (#1030904) about Re: [ARIN-20261028.17] FORMAL CORPORATE =

MEMORANDUM =E2=80=94 Disputed Billing, Suspension of Authorized Credit Ar=

rangements, Accounting Demand and Preserva... has been received and i=

s being reviewed by our support staff. =



=



If you would like to add further information to your query or have a ques=

tion, please reply to this email or click on the ticket number link above=

. =





Thank you,

OCLC Support



Did you know that if you
gin/registration?auth_origin=3D3770367%2Cfalse%2Ctrue&brand_id=3D3770367&=

return_to=3Dhttps://oclc.zendesk.com/hc/en-us/requests/new?ticket_form_id=

=3D360003003694;theme=3Dhc">register for an account you can review th=

e history of the support tickets you have submitted? You can also submit =

tickets here and get help suggestions. Click on this
elp.oclc.org/Librarian_Toolbox/Troubleshooting/How_can_I_get_an_OCLC_Supp=

ort_account">link for more info.



Because what is known must be shared.=C2=AE =









--------------------------------

This email is a service from OCLC Support.



















[7YDVD6-EWDM5]=



----==_mimepart_6ae19ef566f7_10518d07253

Content-Type: text/html;

charset=utf-8

Content-Transfer-Encoding: quoted-printable






">










0;">


rande',Verdana,Arial,sans-serif; font-size: 12px; color:#444444;">

##- Please type your reply above this =

line -##


Your request (
c.zendesk.com/hc/requests/1030904">#1030904) about Re: [ARIN-20261=

028.17] FORMAL CORPORATE MEMORANDUM =E2=80=94 Disputed Billing, Suspensio=

n of Authorized Credit Arrangements, Accounting Demand and Preserva...
> has been received and is being reviewed by our support staff.

=

If you would like to add further information to your query or have a ques=

tion, please reply to this email or click on the ticket number link above=

.

Thank you,
OCLC Support

Did you=

know that if you
tration?auth_origin=3D3770367%2Cfalse%2Ctrue&brand_id=3D3770367&r=

eturn_to=3Dhttps://oclc.zendesk.com/hc/en-us/requests/new?ticket_form_id=3D=

360003003694;theme=3Dhc">register for an account you can review the h=

istory of the support tickets you have submitted? You can also submit tic=

kets here and get help suggestions. Click on this
.oclc.org/Librarian_Toolbox/Troubleshooting/How_can_I_get_an_OCLC_Support=

_account">link for more info.

Because what is known=

must be shared.=C2=AE






rande',Verdana,Arial,sans-serif; font-size: 12px; color: #aaaaaa;

margin: 10px 0 14px 0; padding-top: 10px; border-top: 1px solid #eeee=

ee;">

This email is a service from OCLC Support. Delivered by
tps://www.zendesk.com/support/?utm_campaign=3Dtext&utm_content=3DOCLC=

&utm_medium=3Dpoweredbyzendesk&utm_source=3Demail-notification" s=

tyle=3D"color:black;" target=3D"_blank">Zendesk




">[7YDVD6-EWDM5]




display:none">

//schema.org/ViewAction">
zendesk.com/hc/requests/1030904">
iew ticket">
=



----==_mimepart_6ae19ef566f7_10518d07253--



Multiple mailing list attack from zendesk

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xM4J0-00000000Djz-3kNI

for dave@doctor.nl2k.ab.ca;

Wed, 28 Oct 2026 08:07:06 -0600

Resent-From: The Doctor

Resent-Date: Wed, 28 Oct 2026 08:07:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.freebsd.org ([96.47.72.81]:25819)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLxlB-00000000EJf-2JRg

for doctor@doctor.nl2k.ab.ca;

Wed, 28 Oct 2026 01:07:48 -0600

Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519)

(No client certificate requested)

by mx2.freebsd.org (Postfix) with ESMTPS id 4jDz1k1038z4psC

for ; Wed, 28 Oct 2026 07:06:50 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8536-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jDz1j696bz4VwR

for ; Wed, 28 Oct 2026 07:06:49 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8536-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim;

t=1793171209;

h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:

in-reply-to:in-reply-to:references:references:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post;

bh=GDSIh2VGKg60UMOI+zpuXW1WX0FT7tabDHRh4C6AXOc=;

b=FT2/P/GdoLtv2t0DVsm67mnDjTu/iLPzczEWYnFt7xrx421aPeBdtFNsbrTNBeUYFKPicQ

z0zOQF2QotzNOVlXR0gN57nAz98F0gj+hWJjxaNpNVD7i7zavRFUNj6DkkrAUBdyDRe2A9

ggOchYZKyhU5Df0DFF2FC4xfyBcWHKr/hIPjnZ3TiYhMiM2VneIsVLbDL35+y8yTgNsKK4

gJ63wvDtR5hnq5UMnCqrYxsTrMmVg7LzybmZ98iv2vKahkLYaJe+m6QH7aoYc0tyywYjpV

tJoc0GWaG5RjVmVju4hPR5lGrnRDsNQys8wNx5VVFvzu9hx0esFtCv7xNvxvgQ==

ARC-Seal: i=1; a=rsa-sha256; d=freebsd.org; s=dkim; cv=none; t=1793171209;

b=ucMJ0uMgGVKNBKB8npK00BRFhPLO9lHQMhdODB2MEmSOLQ+/X019i7n1aBZe96PR2HL7g4

sOLiWrc/Dbk6Y100WtB6ImGhLyxj4BKaMb2HZDKfBURIkiPTJV0NEpvYkw1lDE05C+eZwd

OD4g/LMG9iWtgL4rt6Mcu+i2sy/JkyySmCYgQVupA6jv/N6krMARoiyRmi2JWlR2CI+n7y

M6xg5wlb92+J6BYZhIIThqNOcDiT3wWXOzQoylJERL7ypZGZRuM9bDor+Fl6RF+e05A1tM

2p5odablLKHuNFKBCPicsVgBPgPruEaixPaCLSZUp/GhzBwcAEm0hyV+BMShXA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;

s=dkim; t=1793171209;

h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:

in-reply-to:in-reply-to:references:references:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post:dkim-signature;

bh=GDSIh2VGKg60UMOI+zpuXW1WX0FT7tabDHRh4C6AXOc=;

b=a7kFpmFzUtDtEN1Ydo4eFx/bEivjNa2za7dwADhv8JjA693sepVKDskiz1VEG8kVIODBs4

9BoB2R9SPgNx+l2mKnH8G3B9KILwyO4opYMjfP9/GFIv3wnupfByBWKlzmTznPtx4FXWPC

/QJv+ereTHP2dYxpmpNiojsMwz5Jo1exudPPs/Gl5r8mQ84ohMVNraLWaN/sNoP/22ATK6

LgH4na/0rQ62SQE25enlzu+pWoV/DMNrVXJUxXByp7zy3Y3SNnkh+zqD3GpNiqwMg+TiXZ

KXN0W3ZNEo+snhiJBEzZYbte2lffObDxry08cIxygaIKC7KIdc+sINr8hxz8jA==

ARC-Authentication-Results: i=1;

mx1.freebsd.org;

dkim=pass header.d=oclc.org header.s=zendesk2 header.b=kTnyDIqS;

spf=pass (mx1.freebsd.org: domain of support@oclc.org designates 192.161.149.13 as permitted sender) smtp.mailfrom=support@oclc.org;

dmarc=pass (policy=quarantine) header.from=oclc.org

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jDz186swqz6wxmC;

Wed, 28 Oct 2026 07:06:20 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8536@FreeBSD.org)

X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org

Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jDz172Jv6z6wxx1

for ; Wed, 28 Oct 2026 07:06:19 +0000 (UTC)

(envelope-from support@oclc.org)

Received: from mta-out13.pod19.use1.zdsys.com (mta-out13.pod19.use1.zdsys.com [192.161.149.13])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange secp256r1 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jDz1553zlz4V32

for ; Wed, 28 Oct 2026 07:06:17 +0000 (UTC)

(envelope-from support@oclc.org)

Authentication-Results: mx1.freebsd.org;

dkim=pass header.d=oclc.org header.s=zendesk2 header.b=kTnyDIqS;

spf=pass (mx1.freebsd.org: domain of support@oclc.org designates 192.161.149.13 as permitted sender) smtp.mailfrom=support@oclc.org;

dmarc=pass (policy=quarantine) header.from=oclc.org

Received: from unknown (unknown [127.0.0.6])

by mta-out15.pod19.use1.zdsys.com (Zendesk) with HTTP

id a5409a61-f908-4a66-be82-89c4b55f11d1;

Wed, 28 Oct 2026 07:06:16 +0000 (UTC)

Date: Wed, 28 Oct 2026 07:06:16 +0000

From: Support

Reply-To: Support

To: Clement Erhardt Lehman

Cc: Accounts Payable ,

Creative Commons ,

Brewster Kahle ,

Answers ,

Admin ,

Pandas-dev ,

Helpdesk ,

Info ,

Contact ,

Freebsd-questions ,

Misc ,

Netbsd-users ,

Info ,

Info ,

Info ,

Support ,

Webmaster ,

Help ,

Drh ,

Info ,

Info ,

Info ,

Info ,

Support ,

Psf ,

Numpy-scipy ,

Executive-director ,

Gnu ,

Info ,

Press ,

Info ,

Arch-general ,

Apache ,

Users ,

Core ,

Php-webmaster ,

Pgsql-general ,

Info ,

Emaillist ,

Jenkins-infra ,

Cmake ,

Api ,

Jlehman ,

Bakerdonelson ,

Jaslehman ,

Jaslehman ,

Dochsl ,

Dochsl

Message-ID:

In-Reply-To:

References:



Subject: =?UTF-8?Q?Thank_you_for_your_OCLC_Support_Request_1030903_-_FORMAL?=

=?UTF-8?Q?_CORPORATE_MEMORANDUM_=E2=80=94_Disputed_Billing,_Suspension_of?=

=?UTF-8?Q?_Authorized_Credit_Arrangements,_Accounting_Demand_and_Preser?=

=?UTF-8?Q?vation_of_Records?=

List-Archive: https://lists.freebsd.org/archives/freebsd-questions

X-BeenThere: freebsd-questions@freebsd.org

Sender: owner-freebsd-questions@FreeBSD.org

List-Id: User questions

List-Post:

List-Help:

List-Subscribe:

List-Unsubscribe:

List-Owner:

Precedence: list

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--==_mimepart_6ae19ee86557e_10f18d03039f";

charset=utf-8

Content-Transfer-Encoding: 7bit

X-Delivery-Context: rule-2-event-id-56892988546323

X-Zendesk-From-Account-Id: 7d4af63

Auto-Submitted: auto-generated

X-Auto-Response-Suppress: All

X-Mailer: Zendesk Mailer

X-Zendesk-Email-Id: 01M60N9EF5RCK1W3F4SX16Z1T6

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oclc.org; q=dns/txt;

s=zendesk2; t=1793171176; bh=GDSIh2VGKg60UMOI+zpuXW1WX0FT7tabDHRh4C6AXOc=;

h=date:from:reply-to:to:cc:message-id:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding;

b=kTnyDIqSty6Au4q6o/R3Ev8ljHeYQQ0dZlDFfyNZj/c+Ul2F/9ch/S7yrYNNH8HbVlhVj2l+4d5mxShx5Mr1gnSjaw6sWhhpfsF+VN5iBI7l9ZkLN/Fgu5vNJ1s73Qj+Uz5I351hzC9cXllOSYvH4gtX/ckwuL72JZ/gyFeDsYVNV7THJG+emdtDlFe71Iwv+Btth563FH0GrnGtond+ApInxRgY7TLpD2MbpxmHIzV2xLp/XKzXPa8goObfxexdUdbr/857oaBSeZI2KG4FQDgXWWAeiBCBiJ3FgkD19ryMseXUQ/CJc83pYTZmmA+Z4V4xzcHzBqLRA9QWQWAIzQ==

X-Spamd-Bar: /

X-Spamd-Result: default: False [-0.34 / 15.00];

SUSPICIOUS_RECIPS(1.50)[];

DWL_DNSWL_LOW(-1.00)[oclc.org:dkim];

URI_COUNT_ODD(1.00)[5];

RCVD_DKIM_ARC_DNSWL_MED(-0.50)[];

DMARC_POLICY_ALLOW(-0.50)[oclc.org,quarantine];

RWL_MAILSPIKE_EXCELLENT(-0.40)[192.161.149.13:from];

R_SPF_ALLOW(-0.20)[+ip4:192.161.144.0/20];

RCVD_IN_DNSWL_MED(-0.20)[192.161.149.13:from];

R_DKIM_ALLOW(-0.20)[oclc.org:s=zendesk2];

ONCE_RECEIVED(0.20)[];

MIME_GOOD(-0.10)[multipart/alternative,text/plain];

MANY_INVISIBLE_PARTS(0.05)[1];

XM_UA_NO_VERSION(0.01)[];

MIME_TRACE(0.00)[0:+,1:+,2:~];

FREEMAIL_TO(0.00)[gmail.com];

RCPT_COUNT_TWELVE(0.00)[49];

RCVD_TLS_LAST(0.00)[];

ARC_NA(0.00)[];

FREEMAIL_CC(0.00)[wikimedia.org,creativecommons.org,archive.org,pypi.org,python.org,kernel.org,linuxfoundation.org,alpinelinux.org,freebsd.org,openbsd.org,netbsd.org,cncf.io,docker.com,openjsf.org,npmjs.com,ruby-lang.org,perl.org,sqlite.org,mysql.com,gradle.com,mozilla.org,eff.org,wordpress.org,numfocus.org,gnu.org,fsf.org,debian.org,canonical.com,archlinux.org,apache.org,maven.apache.org,rust-lang.org,lists.php.net,postgresql.org,mariadb.org,eclipse.org,googlegroups.com,cmake.org,usaspending.com,bridgeport.edu,bakerdonelson.com,aol.com,gmail.com];

HAS_REPLYTO(0.00)[support@oclc.org];

TO_MATCH_ENVRCPT_SOME(0.00)[];

FROM_EQ_ENVFROM(0.00)[];

FROM_HAS_DN(0.00)[];

TO_DN_ALL(0.00)[];

MLMMJ_DEST(0.00)[freebsd-questions@freebsd.org];

RCVD_COUNT_ONE(0.00)[1];

ASN(0.00)[asn:14618, ipnet:192.161.149.0/24, country:US];

DKIM_TRACE(0.00)[oclc.org:+];

REPLYTO_EQ_FROM(0.00)[]

X-Rspamd-Queue-Id: 4jDz1553zlz4V32





----==_mimepart_6ae19ee86557e_10f18d03039f

Content-Type: text/plain;

charset=utf-8

Content-Transfer-Encoding: quoted-printable



##- Please type your reply above this line -##



Your request (#1030903) about FORMAL CORPORATE MEMORANDUM =E2=80=94 Di=

sputed Billing, Suspension of Authorized Credit Arrangements, Accounting =

Demand and Preservation of Records has been received and is being rev=

iewed by our support staff. =



=



If you would like to add further information to your query or have a ques=

tion, please reply to this email or click on the ticket number link above=

. =





Thank you,

OCLC Support



Did you know that if you
gin/registration?auth_origin=3D3770367%2Cfalse%2Ctrue&brand_id=3D3770367&=

return_to=3Dhttps://oclc.zendesk.com/hc/en-us/requests/new?ticket_form_id=

=3D360003003694;theme=3Dhc">register for an account you can review th=

e history of the support tickets you have submitted? You can also submit =

tickets here and get help suggestions. Click on this
elp.oclc.org/Librarian_Toolbox/Troubleshooting/How_can_I_get_an_OCLC_Supp=

ort_account">link for more info.



Because what is known must be shared.=C2=AE =









--------------------------------

This email is a service from OCLC Support.



















[ZLV6V0-X42EP]=



----==_mimepart_6ae19ee86557e_10f18d03039f

Content-Type: text/html;

charset=utf-8

Content-Transfer-Encoding: quoted-printable






">










0;">


rande',Verdana,Arial,sans-serif; font-size: 12px; color:#444444;">

##- Please type your reply above this =

line -##


Your request (
c.zendesk.com/hc/requests/1030903">#1030903) about FORMAL CORPORAT=

E MEMORANDUM =E2=80=94 Disputed Billing, Suspension of Authorized Credit =

Arrangements, Accounting Demand and Preservation of Records has been =

received and is being reviewed by our support staff.

If you woul=

d like to add further information to your query or have a question, pleas=

e reply to this email or click on the ticket number link above.


r=3D"ltr">Thank you,
OCLC Support

Did you know that =

if you
h_origin=3D3770367%2Cfalse%2Ctrue&brand_id=3D3770367&return_to=3D=

https://oclc.zendesk.com/hc/en-us/requests/new?ticket_form_id=3D360003003=

694;theme=3Dhc">register for an account you can review the history of=

the support tickets you have submitted? You can also submit tickets here=

and get help suggestions. Click on this
/Librarian_Toolbox/Troubleshooting/How_can_I_get_an_OCLC_Support_account"=

>link for more info.

Because what is known must be =

shared.=C2=AE






rande',Verdana,Arial,sans-serif; font-size: 12px; color: #aaaaaa;

margin: 10px 0 14px 0; padding-top: 10px; border-top: 1px solid #eeee=

ee;">

This email is a service from OCLC Support. Delivered by
tps://www.zendesk.com/support/?utm_campaign=3Dtext&utm_content=3DOCLC=

&utm_medium=3Dpoweredbyzendesk&utm_source=3Demail-notification" s=

tyle=3D"color:black;" target=3D"_blank">Zendesk




">[ZLV6V0-X42EP]




display:none">

//schema.org/ViewAction">
zendesk.com/hc/requests/1030903">
iew ticket">
=



----==_mimepart_6ae19ee86557e_10f18d03039f--



nk.ca Credential phishing

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Oct 2026 08:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xM4Ic-00000000Dgt-2CYF

for dave@doctor.nl2k.ab.ca;

Wed, 28 Oct 2026 08:06:42 -0600

Resent-From: The Doctor

Resent-Date: Wed, 28 Oct 2026 08:06:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cpanel01.tiki.id ([160.187.143.250]:47766)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLwrq-000000007uX-0ns7

for sales@nk.ca;

Wed, 28 Oct 2026 00:10:36 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tiki.id;

s=default; h=MIME-Version:Date:Content-Transfer-Encoding:Message-ID:Subject:

To:From:Content-Type:Sender:Reply-To:Cc:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Unsubscribe-Post:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=973CqT8LItKC6CB10jIqM4mYE+flU7tf3SRtLvTR0UE=; b=ENOYuyUeEJr98sGD2APaGxHJO5

jguJeiKkl08sZd9H54egIm13Ah9kr1zBDQHAIleJLn4nn7EbcaEHS2C68xFCSvcBLmJFLegx+e+6/

c35QnJAD7M9RpQG2CmhhcWqJPItu9DOjzEEwYuOQH6i2oE25eA30o6l8Y6Sf/eUqn96zlusHSe0uN

IvnOS0ofyFW1rzSRyZgyYi9ecbI71bpXQGuDNdFJu/FF+pNIGuZcygyB8syBEElhCoLprcVg9g09p

k5zu/rn6tOt+8kQC3BSw0ezyFzMd1qLN02DZnbDfaNb4hOdXMbgnmKwQGBznil6itlRwf4gCJg2it

rCyhaEsA==;

Received: from [14.102.84.90] (port=9277 helo=[127.0.0.1])

by cpanel01.tiki.id with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1)

(envelope-from )

id 1xLwqr-0000000HXZL-3gSX

for sales@nk.ca;

Wed, 28 Oct 2026 13:09:31 +0700

Content-Type: text/html

From: Nk

To: sales@nk.ca

Subject: INC00736544 - Inbound Message Error

Message-ID: <513a7b7d-6619-abec-a43c-c28f001f9f9b@tiki.id>

Content-Transfer-Encoding: quoted-printable

Date: Wed, 28 Oct 2026 06:07:06 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - cpanel01.tiki.id

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - tiki.id

X-Get-Message-Sender-Via: cpanel01.tiki.id: authenticated_id: marliani.fitria@tiki.id

X-Authenticated-Sender: cpanel01.tiki.id: marliani.fitria@tiki.id

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: INC00736544 - Inbound Message Error Expires in 24 hours



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[14.102.84.90 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

[160.187.143.250 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.187.143.250 listed in dnsbl.ahbl.org]

[160.187.143.250 listed in dnsbl.ahbl.org]

[160.187.143.250 listed in dnsbl.ahbl.org]

[160.187.143.250 listed in dnsbl.ahbl.org]

[14.102.84.90 listed in dnsbl.ahbl.org]

[14.102.84.90 listed in dnsbl.ahbl.org]

[14.102.84.90 listed in dnsbl.ahbl.org]

[14.102.84.90 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.187.143.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.187.143.250 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.187.143.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.187.143.250 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[160.187.143.250 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.187.143.250 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} INC00736544 - Inbound Message Error









=20


padding: 0; background-color: #f4f5f7; font-family: Arial, Helvetica, =

sans-serif; color: #393a3d">
cellpadding=3D"0" border=3D"0" style=3D"background-color: #f4f5f7; padding:=

30px 10px">

cellspacing=3D"0" cellpadding=3D"0" border=3D"0" style=3D"max-width: 600px;=

width: 100%; background-color: #ffffff; border: 1px solid #e0e0e0"> =

=


color: #ffffff">


600"> INC00736544 - Inbound Message Error


0; font-size: 14px; line-height: 1.5"> Expires in 24 hours


style=3D"margin: 0 0 18px">Hello sales,

=

You have 8 pending messages marked with high importance that failed to your=

inbox today. Please review and release messages below.


style=3D"margin: 0 0 24px; text-align: left">
com.mx/mode/?x=3Dc2FsZXNAbmsuY2E=3D" style=3D"display: inline-block; =

background-color: #818589; color: #ffffff; padding: 12px 24px; font-family:=

Arial, Helvetica, sans-serif; font-size: 15px; font-weight: bold; =

text-decoration: none; border-radius: 4px" target=3D"_blank" =

rel=3D"noreferrer"> Review Now

This=

email is addressed to sales@nk.ca.

=

Thank you,
Nk Support Team=

#f7f7f7; border-top: 1px solid #e5e5e5; font-size: 12px; line-height: 1.6; =

color: #6b6c72"> Note: This alert is triggered when incoming messages are =

held and yet to be delivered to your inbox..
=


Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 27 Oct 2026 18:50:00 -0600

Received: from out0-36.static.mail.aliyun.com ([59.82.0.36]:24178)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLrrU-00000000MOz-0HMB

for dave@nk.ca;

Tue, 27 Oct 2026 18:49:55 -0600

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.9243578|0.185111;BR=01201311R441S74rulernew999_84748_200303;CH=yellow;DM=|AD|false|;DS=CONTINUE|ham_enroll_verification|0.384749-0.0200428-0.595209;FP=18080248917732304023|2|1|48|0|-1|-1|-1;HT=maildocker-contentspam011083099174;MF=ludy.ch@qydevelop.com;NM=1;PH=DS;RN=286;RT=0;SR=0;TI=SMTPD_---.jr.eEfS_1793148512;

Received: from DESKTOP-EGPU2OG(mailfrom:Ludy.ch@qydevelop.com fp:SMTPD_---.jr.eEfS_1793148512 cluster:ay29)

by smtp.aliyun-inc.com;

Wed, 28 Oct 2026 08:48:44 +0800

Date: Wed, 28 Oct 2026 08:48:32 +0800

From: Ludy.ch

Message-ID: <84EA4A68-EFC0-40E9-9539-6D3B2A49D995@qydevelop.com>

Subject: =?utf-8?B?5Y2K5a+85L2T6YeP5rWL5LiO5qOA5rWL6K6+5aSHIFNlbWljb25k?=

=?utf-8?B?dWN0b3IgTWV0cm9sb2d5ICYgSW5zcGVjdGlvbiBFcXVpcG1lbnQgTWFya2V0?=

=?utf-8?B?IDIwMjcgRm9yZWNhc3Q6IFVTRCAzNSwxMTkgTWlsbGlvbiBieSAyMDMyIGF0?=

=?utf-8?B?IDguNyUgQ0FHUg==?=

Disposition-Notification-To: Ludy.ch

X-Mailer: MailMasterPC/4.19.4.1001 (Win10 22H2)

X-MailMaster-ShowOneRcpt: 1

X-CUSTOM-MAIL-MASTER-SENT-ID: 0307BFEA-056A-410B-8ACE-79D36808CA33

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, The Global Semiconductor Metrology & Inspection Equipment

Market Research Report 2026-2032 has been published. The report covers revenue

forecasts, company share analysis, competitive landscape, growt [...]



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

[59.82.0.36 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[59.82.0.36 listed in dnsbl.ahbl.org]

[59.82.0.36 listed in dnsbl.ahbl.org]

[59.82.0.36 listed in dnsbl.ahbl.org]

[59.82.0.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[59.82.0.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[59.82.0.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[59.82.0.36 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[59.82.0.36 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[59.82.0.36 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[59.82.0.36 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or

Generic rPTR

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_55 BODY: 5alpha-pock-5alpha

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?utf-8?B?5Y2K5a+85L2T6YeP5rWL5LiO5qOA5rWL6K6+5aSHIFNlbWljb25k?=

=?utf-8?B?dWN0b3IgTWV0cm9sb2d5ICYgSW5zcGVjdGlvbiBFcXVpcG1lbnQgTWFya2V0?=

=?utf-8?B?IDIwMjcgRm9yZWNhc3Q6IFVTRCAzNSwxMTkgTWlsbGlvbiBieSAyMDMyIGF0?=

=?utf-8?B?IDguNyUgQ0FHUg==?=



Hello,



The Global Semiconductor Metrology & Inspection Equipment Market Research Report 2026-2032 has been published. The report covers revenue forecasts, company share analysis, competitive landscape, growth factors, and key industry trends. The key findings are summarised below in three numbered points:



2027 market snapshot and growth forecast – According to the 2026-2032 forecast, 2027 is expected to be a key growth year for the global semiconductor metrology and inspection equipment market. The market was estimated at USD 17,175 million in 2025 and is projected to reach USD 35,119 million by 2032, with a CAGR of 8.7% from 2026 to 2032.



Companies covered – The report examines both established and emerging players, including KLA Corporation, Applied Materials, Lasertec, Hitachi High-Tech, ASML, Onto Innovation, ZEISS, Skyverse, Precision Measurement, Camtek, SCREEN Semiconductor Solutions, Toray Engineering, Merck(Unity Semiconductor SAS), YUWEITEK, Microtronic, DJEL, VPTek, RSIC, TZTEK(Muetec), MZSemi, GOVION, and others.



Segments and coverage – By type: Inspection Equipment and Metrology Equipment. By application: Wafer and Mask/Film. By category: Optical, E-beam, and Other. By division: Nanometer-level and Sub-nanometer-level. By region: North America (United States, Canada), Asia-Pacific (China, Japan, South Korea, Southeast Asia, India, Australia, Rest of Asia-Pacific), Europe (Germany, France, U.K., Italy, Netherlands, Nordic Countries, Rest of Europe), Latin America (Mexico, Brazil, Rest of Latin America), and Middle East & Africa (Turkey, Saudi Arabia, UAE, Rest of MEA). All figures are in million USD.



If this is relevant to your work, just reply with "sample" and I will provide you with a sample copy.



Best Regards,

Ludy Chen

Sales Manager | QY RESEARCH, INC.

Email: Ludy@qyresearch.com

Phone: +86-13602867335 (7×24) / +1-6262952442 (US)

QY RESEARCH, INC.

Investment spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 17:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLqU1-000000006Xz-0iOe

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 17:21:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 17:21:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from bsgw-00000288.cafe24.com ([118.219.235.58]:46808)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLoSM-000000008pW-0T8P

for support@nk.ca;

Tue, 27 Oct 2026 15:11:47 -0600

Received: from nexpa.co.kr ([::ffff:178.83.19.78])

(AUTH: LOGIN sour5406@nexpa.co.kr)

by bsgw-00000288.cafe24.com with esmtp; Wed, 28 Oct 2026 06:10:36 +0900

id 000000000867B5F3.000000006AE1134D.00019460

Reply-To: info@doha-consultant.com

From: doha consultant

To: support@nk.ca

Subject: Re: Re:Investment partnership

Date: 28 Oct 2026 06:10:37 +0900

Message-ID: <20261028061037.9D4B970681350B58@nexpa.co.kr>

Mime-Version: 1.0

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

Received-SPF: fail (Address does not pass the Sender Policy Framework)

SPF=FROM;

sender=sour5406@nexpa.co.kr;

remoteip=::ffff:178.83.19.78;

remotehost=;

helo=nexpa.co.kr;

receiver=bsgw-00000288.cafe24.com;

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings How are you doing? Do you need an investment partner

for any of your projects? I have many investors who are willing and able

to invest in your project.



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[178.83.19.78 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

[118.219.235.58 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[118.219.235.58 listed in dnsbl.ahbl.org]

[118.219.235.58 listed in dnsbl.ahbl.org]

[118.219.235.58 listed in dnsbl.ahbl.org]

[118.219.235.58 listed in dnsbl.ahbl.org]

[178.83.19.78 listed in dnsbl.ahbl.org]

[178.83.19.78 listed in dnsbl.ahbl.org]

[178.83.19.78 listed in dnsbl.ahbl.org]

[178.83.19.78 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[118.219.235.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[118.219.235.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[118.219.235.58 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[118.219.235.58 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[178.83.19.78 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[178.83.19.78 listed in sbl-xbl.spamhaus.org]

[178.83.19.78 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[118.219.235.58 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[118.219.235.58 listed in wl.mailspike.net]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

Subject: {SPAM?} Re: Re:Investment partnership















Greetings

How are you doing? Do you need an investment partner fo=

r any of your projects? I have many investors who are willing and able to i=

nvest in your project.

Send me your WhatsApp number or Mobile number=

for faster communications

Warm regards,
Ahmed Ahn Abudadi
inv=

estment consultant









Negative reviews removal spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 17:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLqTp-000000006X8-0tUB

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 17:21:21 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 17:21:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f174.google.com ([209.85.160.174]:48534)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLmNf-00000000MhS-1I8x

for sales@nk.ca;

Tue, 27 Oct 2026 12:58:47 -0600

Received: by mail-qt1-f174.google.com with SMTP id d75a77b69052e-53381e53b80so3165351cf.1

for ; Tue, 27 Oct 2026 11:57:48 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1793127462; cv=none;

d=google.com; s=arc-20260327;

b=lSgr20zck1U4m7zr0H6idgMhlZehA4dyOOO1XepexYtNogXjWWsFK4/HOSLpePNp53

wI5OPjogjGDsTN2wevmy1w+0QgbiF7JsYLrZNexJE84/TBLF18qpDz+MUl6iwVMhdT4a

IOJXfQsoB+Ss/VPmq2ja9CUYNc9gWthGQosRpPdeIYSkNpxaff375qiX7odBMZjMsINv

lMY6o1iMbNlK3XDav0SDb0lqrZYlWkg9Y2BRykhcGvkHENZDLyAl7Qm1WHpRwEVyu3Od

7Mj8dt+4Qfs0LZSApR86mDud0YtgRrUznjQ7emg0Cyp59e6UgPRsWye1IpDYUenZln58

ggVA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=FexgfYdsx6uLI87rl+rGixmDQ9QScaXw15kUpsabWl4=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=ZxCMKOe1c9Xj/IzyMfPI17eD25vh55Qza6/q2d8rvDe/rdTZ+8ko7Xu0uqD1HyqTPI

0WL+wpPezWJtP8xKzhJtuewTwFgXs13w4YMR/LkjZBgjNYXYoeFl68jzYSgT2ZUlMKZB

fWXJ5gVcCqdUcX3fmqkISa+PTHOBwFKmGk/1WAZXLrkSNRiHq/vyJRQ3hCb7sirPSRVx

r4KXBJ6rcbtSHYyBNVuSpXefOYxcUQNZhEFhfBLMh+SHyaIhsuKPzo2p2iJM7Md66R1h

KpZdH9G+9uvQ/LcPWi6uCCPztoIdyeCNk56sPeniYXzD0XIv1y7KUEZrKpsCEL5oDC/t

CW5Q==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1793127462; x=1793732262; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=FexgfYdsx6uLI87rl+rGixmDQ9QScaXw15kUpsabWl4=;

b=e8+B3FmYHPqEvM2lZr/DVxRVbU4aMfVviWZwKksDzpNoVf8VMBBwBDPr3BSopk6eEj

DiZBBumIWYTVRP8u2jponDIiKRlD6KYkTFZOhiNL0quHznxt8YOr/ybqW6ztE7PSmS41

Q5utXdXjUHXcXa2TesTrAs+1Dm2jg8wZiEiYt41gaiCMkXq4A6Xpe9PMhI+qLj2DM52b

/LnB7ozYuReoXlDy/zarFoMyhlVF+I98ACfwzDiEP/+J1UVjWc1vpVk22sEvzFqhXGZn

9nWVhlmmVvvH7Nu4PJKWtVSXbIuB956EPagS7+HlGM5y190kiN1c7YBMvRqW6aut13t8

rwcg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793127462; x=1793732262;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=FexgfYdsx6uLI87rl+rGixmDQ9QScaXw15kUpsabWl4=;

b=aYF1hvuzzAzpwPtjLdD6fohOy/gXJarFiPIGbpRHYZXMaLgmD0sU2R7vq18Jyl14KM

N0v0nmKcGp9DFBPebjugVeV8YfbnX9XXjKacSnW2SRCbjq1EWIrDYKvY053bqbNsE1mC

lg3hj+8xofvMT2fiaBQ3t76uEy1HoAcnSc3Eb2FOfmm7VxOU2mf0olRKC4Vbs1kyYq8c

AI/dhwCUpN0jPiIkjM5pcl3ldYbWFh/rpQcPwQk2z2xizEndQ7B17mRheG41HoUIZlZ3

ro0E1CyL1mbzpjWzcoIZ/Yu693/sdPE8OrubOfAGhAk0ye7b85jE65JdqufpzceB6+PX

m/4w==

X-Gm-Message-State: AFq9FYK8f3ekVgl3iIzHp1pVX1DOizTKQGwwXKFhc1mJvY5/eYVxC6EU

usRCWqyaV+K/7+eYrRIBUN98mOaEHjfzKpcbCZmKIegdTrq8jOYD35KkZQ89peXRgNGUPQiocBo

2LX6dOyopLIHoYELr5ZGgoolpBFxtlZhYFA==

X-Gm-Gg: AYBFou2vJAa1B2grYIyD4BQioqBs8HBRUZkQSaNCHRaWy6f+WX90hgreGbMIo2KQ3EG

qmhJWVLjtJ+D75ZV/usdWqo7DsBAR4RF6jTfsKZD5dfd4fdq5aoB289PbP8AN4m0nHYM0PwzCkM

iypIYN72ABqoK0qddsyabIInE34RTxOXd41SDgC1f/dIiOCoFGLClqSSdsS7Tsc396++dpHuaB0

dOCkNhThYgTUBqpl1tNtGfylyL8qR7ToBOveasZ8Qok/NXTyppb9SYBHJ44h3NX9z8XC1Gsndxw

u9uhoeo71OV0xwu16LeQN7X3bjtvvQT5iJw0kJMSwFnsnvXja5QYmZAjq1p2Y6mI+x80UW3/xo7

uQ5f5VSc252VmO4Ruj2uQnO6BhtwfBkWJ6SzETNDoFzgBiosARxOcQlXBm3bF4wxsVM9R3Js=

X-Received: by 2002:a05:622a:4d3:b0:53e:35dc:9bd2 with SMTP id

d75a77b69052e-53fcd190e1fmr2983201cf.66.1793127462120; Tue, 27 Oct 2026

11:57:42 -0700 (PDT)

MIME-Version: 1.0

From: Ahmad

Date: Tue, 27 Oct 2026 23:57:28 +0500

X-Gm-Features: AclHuK-nw5CbDXp3eVvl4BYXU-_miS6b7FYAfxtj7_w8jRwHDEuExvuMVH46zc0

Message-ID:

Subject: Netknow Internet Service, Negative Reviews Removal

To: sales@nk.ca

Content-Type: multipart/related; boundary="0000000000006b211a065ed70549"



--0000000000006b211a065ed70549

Content-Type: multipart/alternative; boundary="0000000000006b211a065ed70548"



--0000000000006b211a065ed70548

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



.=E2=AD=90 1-Star Review Removal & Local Search Growth

I noticed some 1-star reviews on your Google Business Profile that may be

affecting customer trust and sales.

I help businesses with eligible Google review removal, reputation

management, local search visibility, and business growth.

=E2=9C=94 Fake, Spam & Policy-Violating Review Removal

=E2=9C=94 Text & Image Review Removal

=E2=9C=94 Google Reputation Management

=E2=9C=94 Local Search & Google Visibility Growth

=E2=9C=94 Improve Customer Trust & Online Presence

=E2=9C=94 No Upfront Payment =E2=80=94 Pay After Successful Removal



--0000000000006b211a065ed70548

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



.=E2=AD=90 1-Star Review Removal & Local Search Growt=

h
I noticed some 1-star reviews on your Google Business Pr=

ofile that may be affecting customer trust and sales.

">I help businesses with eligible Google review removal, reputation managem=

ent, local search visibility, and business growth.
=

=E2=9C=94 Fake, Spam & Policy-Violating Review Removal

"auto">=E2=9C=94 Text & Image Review Removal
=E2=

=9C=94 Google Reputation Management
=E2=9C=94 Local =

Search & Google Visibility Growth
=E2=9C=94 Impr=

ove Customer Trust & Online Presence
=E2=9C=94 N=

o Upfront Payment =E2=80=94 Pay After Successful Removal

:ii_1a17eb96c1ff320ba4b1" style=3D"max-width: 100%; height: auto;">

=





--0000000000006b211a065ed70548--

--0000000000006b211a065ed70549

Content-Type: image/jpeg; name="119232.jpg"

Content-Disposition: inline; filename="119232.jpg"

Content-Transfer-Encoding: base64

Content-ID:

X-Attachment-Id: ii_1a17eb96c1ff320ba4b1

...

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 10:24:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLjyj-000000001I8-0ius

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 10:24:49 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 10:24:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [156.224.83.245] (port=14796 helo=mail-m83245.xmail.ntesmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLjKC-00000000BRJ-0pwo

for sales@nk.ca;

Tue, 27 Oct 2026 09:43:12 -0600

Content-Type: multipart/mixed; BOUNDARY="=_Part_858327_1936197749.1793115705284"

To: sales

Subject: =?UTF-8?B?UmU6IEZhY2lhbCBjbGVhbnNpbmcgYnJ1c2ggMjAyNiBvcmRlcnM=?=

X-Priority: 3

MIME-Version: 1.0

Received: from kero@svoov.cn( [10.176.93.68] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 27 Oct 2026 23:41:45 +0800 (GMT+08:00)

From: =?UTF-8?B?5p2o5pSA?=

Date: Tue, 27 Oct 2026 23:41:45 +0800 (GMT+08:00)

X-WM-Tid: 0aa17e064f340111kunm88c721b4ed837

DKIM-Signature: a=rsa-sha256;

b=Uc2Lh1YWbFVyfh+LxBJOdQ5m6dJTv4iHEVjoIxWXPFuLglVk2mqnKenI7ep5y/zWI+VZoTN5wLiP0LJAM8Lu13NofI78TVwGUUdP82PkCaF1lOVCGU9ApCe07KgrVqz8dhCfJL/AsH+fwMkdJ5ZrlM+SHOqVHj7oqRGbelvbZ/Y=; s=default; c=relaxed/relaxed; d=svoov.cn; v=1;

bh=zHJvcoSv52L3M9+tYZxSSA/ONkspOwb+L9ubMxVG08I=;

h=date:mime-version:list-unsubscribe:subject:message-id:list-unsubscribe-post:from;

Message-ID:



Hi Sales,



Please see the attached video of our this facial cleansing massage brush. Let's confirm the order soon?



Look forward to hearing from you.



Have a nice day.



Thanks,



Your Kero



ISO9001,BSCI approved Factory



CE & ROHS & FCC ,FDA CLASS 1 approved products



Shenzhen Svoov Technology Industrial Co.,ltd



Shenzhen Mebao Intelligent Technology Co.,Ltd



Add: 2nd Floor,Melwang Industrlal Park, No.18, Third Industrlal Zone, Shanmen Communlty, Yanluo Street, Bao'an District, Shenzhen , China



Website: www.svoov.cn



Mob.:18129843651



whatsapp.:18129843651



Your professional manufacturer of beauty care device



Geek Squad phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 08:40:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLiM0-000000004HO-0PLX

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 08:40:44 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 08:40:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f173.google.com ([209.85.215.173]:54456)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLhdj-00000000Jgt-0rIn

for doctor@nl2k.ab.ca;

Tue, 27 Oct 2026 07:55:01 -0600

Received: by mail-pg1-f173.google.com with SMTP id 41be03b00d2f7-cd60c5da24cso2327258a12.0

for ; Tue, 27 Oct 2026 06:54:05 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1793109239; x=1793714039; darn=nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=PdC1S2RASnP1cCAbxJ3Z1xjKEPKGe7R1KYzzhMGq0/Y=;

b=LaAoFxf7Wov+U0bEmDpTlMC9uFNW8MzoMNo68byOCXCnU61u7928GJiA5tkwiF+4tk

JrNiTMqB7zaawF717vCkkE3BCTYAuXibm8BzymLoCpTvOFL6atYVAjuBMRgdduyff4Re

T8TWCnJwYCXNOp3wJ92LPgkDiT41p9QBNxBsXUoSUxvMb43RDYX051VlJoIRE7A5rHL2

VI06JRHMm+5henOklVXPYqzonq4wUc1YzPQYIzA9r9LZ+S1//4parItH6FYOafWW3LQw

/627eCsvHl2ioKzQvRkaQ3NY961riMcrHsaxNsOjw1KjtoQ3Gc8zHcn/bBHTYNU2qcu1

eBEA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793109239; x=1793714039;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=PdC1S2RASnP1cCAbxJ3Z1xjKEPKGe7R1KYzzhMGq0/Y=;

b=Uj3Z4KR9hcVbeT8LeEZzCV+YRPZuMh218Axf1FVJRWnJd9nbPku3lNC0ZaCI0Fr1AY

QzmHAC1IeYxF8DpBOCvTyAjllbv88bh+3+NMU3oy2JzGuFUFyUmZ171JFQ5CD5cQHGXG

WyUd5T2Bm3wRBQO63RxKeU0wOpy7yjunscoA0kQXA8PfoFv5rJVRkIZZTmbQ2u3A+nQo

hVhWKb54WwzSbzDMZcrwshwURvz1lQArA1kYzKn+KKDgIJyAUl6jKOhimUi5cv+wzxcE

YG/ZsR1CbSjzk9e/6aRK7ah9bu9IV4gdMWWn/BPHMpNoy1ccMzA72Fbz5eeU4Vc/mROF

Whow==

X-Gm-Message-State: AFq9FYIe1VKN9Z8mhSF7YPWdu4E3w5NqJ+76RyPaL0UuoZrCF97hI2G+

KFasVbCY/LbuEgjPpwOkeFBJlK6XpDmpM9Dyc2HvF4Wppv6unw8jcUW3AvVryoRxX+jOzA==

X-Gm-Gg: AYBFou10YU1Kg3oNx+tcIZ6hL5wxWazJEmHCPGJjqB/ww1Jd5bjMZ3/tvEnUOfGpLqh

dVq2bnCUe+XYZx1KRcO2XGpiKhZW8pKDhshlzX5i/8uVmhR9JkhwIBW1QGhLKJb6PeiB+Mm8Nxo

6WimA3cj9OuKMBKdZ66Ed0H9qG3omQ0pAzd976VQEs5U4LM5daOSXWeQSHhfbmQMnh60K46kdsZ

w4jJ5ccvO//jdFB5yiugOZrgw0Pl/dRmRERvnHjwubZMMmW0eSizOdA5xK7tWMwhFa0syfMNWL0

Vm8jGbIOt0676e4ekMvXn0gwclvaCk55MeMpwr10lxu4TbIXscqwDh0hvx2URkmuOJl7LVBAXRf

3XhzhUWK3kEtHNJo3vEG8JqzXkuEYAe3fOpDYm8cXMLaLU5iZc+hHY4wx9ZG6WFhO9tv5sFrwjN

irQWt8wpdeBvTdreOWdg0a20h/oCPW7CYlPBx2zTFV8SCKHeODGHbRz2/p89uC8XB+u39WI9XJG

9lyj2NP8ZYpzOSZg+7LCe5HLOJk/i3lZhxpFFkHigiEIK9IF3THiZauU+4l9VXOZqMr9JJ5c2vY

TI+kF5pHm5jo6OndP0ef

X-Received: by 2002:a05:6a21:ed0d:b0:3e2:ac98:68ab with SMTP id adf61e73a8af0-3e7cd59e425mr8331003637.54.1793109238991;

Tue, 27 Oct 2026 06:53:58 -0700 (PDT)

Received: from [172.22.49.100] ([43.156.168.212])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm2836645a12.14.2026.10.27.06.53.57

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 27 Oct 2026 06:53:58 -0700 (PDT)

Message-ID: <6ae0acf6.1bd81992.23d6a0.a7f5@mx.google.com>

Date: Tue, 27 Oct 2026 06:53:58 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============3078134093395888820=="

MIME-Version: 1.0

to: Doctor

from: Doctor

subject: Order processing details for Receipt (46N16KQG)

Importance: normal

Priority: normal

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Geek Squad Dear Doctor,



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[43.156.168.212 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

[209.85.215.173 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.173 listed in dnsbl.ahbl.org]

[209.85.215.173 listed in dnsbl.ahbl.org]

[209.85.215.173 listed in dnsbl.ahbl.org]

[209.85.215.173 listed in dnsbl.ahbl.org]

[43.156.168.212 listed in dnsbl.ahbl.org]

[43.156.168.212 listed in dnsbl.ahbl.org]

[43.156.168.212 listed in dnsbl.ahbl.org]

[43.156.168.212 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.173 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[coulibalybouraima92(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[coulibalybouraima92(at)gmail.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.173 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.173 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.173 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_MXG_LOWER_HDR_SPAM Lower case header spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.9 URI_PHISH Phishing using web form

Subject: {SPAM?} Order processing details for Receipt (46N16KQG)



--===============3078134093395888820==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit















































--===============3078134093395888820==--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 08:40:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLiLe-000000004Fz-25e7

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 08:40:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 08:40:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f197.google.com ([209.85.167.197]:56638)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLh0r-00000000GVv-0zf6

for sales@nk.ca;

Tue, 27 Oct 2026 07:14:51 -0600

Received: by mail-oi1-f197.google.com with SMTP id 5614622812f47-4ea2c058e67so6569800b6e.1

for ; Tue, 27 Oct 2026 06:13:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webandappdevelopments-com.20251104.gappssmtp.com; s=20251104; t=1793106829; x=1793711629; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=QtwfzxP94eW3D6lni5s1mGiSKGztN/zzaeUkrguBKZY=;

b=UG4t3h1P1XS6Ia176Swb2jbKySJjo3FXnC2glTR1Br2NN0Rznzm3sOZtr4Hcq9No0c

jA7U3ZTYogNcq+h+88+ZGRrn1988mluxbqlOWFxUcu+LugdtOfdXl9c4b2xElh9QMWMQ

tbf44irqi9WFflRQUl/eNgD++IQRvCrqJ7oTtHmkG5RmQhVUCgbbft0rPQtose/62Lra

kJ0SoACuGHjY2EVqMSQaALSaKvOEUnO1CrBTrnEtnPvg0vEsBypvZvY7p7P0cMJ5kk4U

FxzPSzDNVxAUQvLpUe+oiWHl1cOfQdOLvbWF8QopQ6eBCmOIk0al22xU7fgw23SMn8Sg

GJ2g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793106829; x=1793711629;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=QtwfzxP94eW3D6lni5s1mGiSKGztN/zzaeUkrguBKZY=;

b=SUbF/IRO48tQRqMqsiFlw8bF7ORFzKC32bnE/Z+mDYH1nlresQjuEMKr8HZPu8ZEN9

BzMeqSMJKLmAv+oW0whL1/dn1M+kRwU2r9hpPuZJUBb+nBNmGoON3/bu3+818xuRjj7i

UZguorSN4f1xpP68sCcb6Sx9umOLx54qvFzgD9RdI9z4mqZyPCrzNDF6ABksetGDpxHM

KT4+V0TNi8HMG68UDmrmGNToDHWIjBZe12QH+enjYBzNQhI5KltAoaqgVm2rQjEgKIwK

XRYdjodXMv4uCMnwoW9rhdGg9f/guSG7i5Xz/POsBx+DSpTPEI/FUdz5cULLmsQ8T0pb

gRaw==

X-Gm-Message-State: AFq9FYJ5vfDHa6GpTCqxrKaevv8zgrUhokmBql9jmCqj+8MzgIhe8TKe

oxlvPcl+PtLk2tlT3NV5D6JwCjBCJoZZCluz5xote1DrrWXyopZB+nvCSFf0ZsUaVuFLnBt0Yvq

FXfFXZfLTTRwbjJBOc0ytyA==

MIME-Version: 1.0

X-Received: by 2002:a53:ac98:0:b0:679:b50e:94 with SMTP id 956f58d0204a3-67a454363fcmr5603841d50.60.1793106487219;

Tue, 27 Oct 2026 06:08:07 -0700 (PDT)

Message-ID:

Date: Tue, 27 Oct 2026 13:08:07 +0000

Subject: www.nk.ca

From: skylar@webandappdevelopments.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000373b4c065ed22366"



--000000000000373b4c065ed22366

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,



While looking at www.nk.ca, I noted a few potential improvements to content

structure, page speed, and visitor journeys.



Can I share a few practical ideas with you?



Thank you!



--000000000000373b4c065ed22366

Content-Type: text/html; charset="UTF-8"



Hi,

While looking at www.nk.ca, I noted a few potential improvements to content structure, page speed, and visitor journeys.

Can I share a few practical ideas with you?

Thank you!

--000000000000373b4c065ed22366--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 08:40:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLiLR-000000004F6-2OvD

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 08:40:09 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 08:40:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.74.211] (port=33503 helo=smtp74-211.mmglsmd.net)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLgo1-00000000FTO-1F20

for doctor@nl2k.ab.ca;

Tue, 27 Oct 2026 07:01:40 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.shinestarsteel.com; i=@hn.shinestarsteel.com;

q=dns/txt; s=umail; t=1793106031; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : list-unsubscribe : subject : from : date;

bh=k+Ir9hUEypO4RVrAySFJ3vDcBhSYYaH4/ZNruyEESNM=;

b=fqjch/kDf70YhpC/VEgohVuqvX1XwHtwBvX5IxEHDMNv7X0BMMlWElAu

D8I1q6f8g75hqm0b/5BNmH0jsM9jFeGBqd/FJsUwU6jPvxXjqqRaliig9P

yqoRYqSwl7Katx7W5KJaWEhv76eTdDB4nF5/Y2yxyGgCFIm7BZky4aTHY=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.shinestarsteel.com (Postfix) with ESMTP id iAgevNXMVCtL

for ; Tue, 27 Oct 2026 21:00:12 +0800

Content-Type: multipart/mixed; boundary="===============7548147829238471977=="

MIME-Version: 1.0

Message-Id: <20261027210012.01145-{13490:20261027155415-13490-57}-0072589@hn.shinestarsteel.com>

Reply-to: christy@threewaysteel.com

Subject: =?utf-8?q?Re_=3A_Steel_Structure_Supplier?=

From: christy@hn.shinestarsteel.com

To: doctor

Date: Tue, 27 Oct 2026 21:00:12 +0800

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Mail-ID: 6ae07639e1382308adcc8345

X-Spam_score: 12.1

X-Spam_score_int: 121

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Manager , Good day .This is Christy from Threeway Steel

in China. We are the steel pipe manufacturer since 1993. Not only we can

supply for the steel pipes & fittings & flanges directly , but also can supply

for the steel fabrications .



Content analysis details: (12.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

[160.124.74.211 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.74.211 listed in dnsbl.ahbl.org]

[160.124.74.211 listed in dnsbl.ahbl.org]

[160.124.74.211 listed in dnsbl.ahbl.org]

[160.124.74.211 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.74.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.74.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.74.211 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.74.211 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: hn.shinestarsteel.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: shinestarsteel.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.124.74.211 listed in bl.score.senderscore.com]

0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist

[URI: ns4.dnsv2.com/101.227.168.55]

[URI: ns3.dnsv2.com/125.94.59.155]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?q?Re_=3A_Steel_Structure_Supplier?=



Dear Manager ,



Good day .This is Christy from Threeway Steel in China. We are the steel pipe manufacturer since 1993.



Not only we can supply for the steel pipes & fittings & flanges directly , but also can supply for the steel fabrications .



We can do any steel fabrications according to your drawing .



Any third party inspection and flexible payment terms Can be Accepted .



Hope Christy could have a new chance to assist your side working !







Best Regards,

Christy

Oversea Business Dpet |Carbon /Stainless Steel Division

Threeway Steel Co.,Ltd / Carbon Steel Manufacturer 30 years

Office:(86)731-88727983 | Skype ID: threeway_steel@outlook.com

Fax:(86)731-88678578 | Mobile /Whatsapp : (86)137-2386-9367

Email: christy@srtsteelpipe.com ; christy@threewaysteel.com

Meta Ads phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 08:40:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLiLL-000000004Ed-2EWF

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 08:40:03 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 08:40:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl2-f8.google.com ([74.125.229.136]:44808)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLgZB-00000000Dps-2XTp

for sales@nk.ca;

Tue, 27 Oct 2026 06:46:16 -0600

Received: by mail-dl2-f8.google.com with SMTP id a92af1059eb24-1379d236149so1419243c88.1

for ; Tue, 27 Oct 2026 05:45:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=n-tinhochay-org.20251104.gappssmtp.com; s=20251104; t=1793105113; x=1793709913; darn=nk.ca;

h=content-type:mime-version:date:subject:to:from:reply-to:message-id

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=HSXWw8Bp/z1fD9yN9dwkSEnjlFnpkv/r3jVU6YGNTkg=;

b=OEEL9cUrGNpHM+hwzWzQn0Yp9qse6+ffnbJEjmBa6LzlY77ouxumHAlaGFEpghRXfP

rqIbsGv75hCuKlvp9agXezrGtsIRcNvFUsmYA8jgQoz9R1y5DhLJuvxKA5anxDGXs/X/

9GN55uJEvgvW418rFBptTYgyymYwoJIgT2RBitf/CXAa7qDtyxBIfPpfnihpDVna1RCe

ke6hirdfCOlGxGefD5Nak3Iaa8vhm1j3SAyelkB8NBwAr4ovYkPtxlrSf88mS9jsI8Z9

nr4pm1ohNPHRFueK3Y6J7Z4Qu1EwGb9baSiBQhDBDdwbQiTgrXuEMDE1aO2pshOSiiDl

bMDQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793105113; x=1793709913;

h=content-type:mime-version:date:subject:to:from:reply-to:message-id

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=HSXWw8Bp/z1fD9yN9dwkSEnjlFnpkv/r3jVU6YGNTkg=;

b=setLeeNkCMkOxndHH0w7uCDFD88C3IUgRDFc0V7WLgB4aLqCKiDpUB2EUQJ+iA7mme

SDH1vLH/PbLo8b0SW18+oDDKEXG4UoE6tJayXpZI+XhzNv/OeVHXZ3FHs3yFTahua4Rs

kgXCe+OlqbBiQP4Dg5WV9ZO49wIXZ49QX0TdNiD6V7ftPFMJ7o8Q9uBZ8/5BvQldn/1w

5oinAspOvHAmhzJd+QpkHznIKTQR9ekd6Gf31pVkRUEisJ97GL4Aiq4saS+yDS8e0DuD

FKsyr1MYvF3JrqUWr54WNrj3sF8jtzkhyhFL8QaCqK3uMH2iIIBbGPUFMennHKP0Fvr5

mJ4g==

X-Gm-Message-State: AFq9FYKzYs6pMOEJGw3Qnna3RA/v15PAlarnNbBHeP2/kYxpAaOcJcyA

wu/aCh9LHSuyWO01Y56z+FFIbFF8FdsNME+2hBuQCU7tXxtBK3KqyYGmTAk3jN/Mfd663odoO3X

rSxNarYgc+g==

X-Gm-Gg: AYBFou1DQwqTSgm7iel5R57E5W9v+7XN7ukA+Sb3IPBowbx+WNA1HmejwJDuQ2wCS87

S/IIJAM1kr+Mm7ubPbEmi/QPU6LQ5o0F2t0ktrgCQ63eDNaY3aBz/GwSV+KTf+UOuc1hgxP6gs1

eg38/fl7iymwmIyBw4EhduQXPSfE7c7ASMGOm57WGrSr3ksVRUCW1gREBvWZB/YQnoIvVPjWFTA

sdH2T6eJZ9s1rMvmdOomkPuxt951y7sTHRP1mKbLkbo1WvTdLlj0qa8l6/xDgg6rO5QHLuaqW2Z

SYM/qGE7xUt0fSI9kyqumWGI51rqF0wy8fj75cQ4S7P4UgLw3zf1y0h5jViwIUgro44qORs8MC4

PzKcm3sv9kmNDIAfv3zqNFirrqhg+fOP7Tlxjllrl/BvXsT2ehkarr1vvcuezdWoJ4jGnQ2+KXP

gHk+zHhEbZ90PcYLy4i41NA/X6tBx4fDCC++Loxs6MoW7c7CNSuqJapuJZUPBkom3GMQemrnSpw

tbIL/GNCX7sPo7cMiW/jQOCd7k7LtIg9dw41wpxzfeo8AD77bk7V1fvwxlFYG+tZzrkHlHJZ85L

xA==

X-Received: by 2002:a05:7022:1509:b0:16c:3408:760b with SMTP id a92af1059eb24-19937306c70mr14505525c88.32.1793105113110;

Tue, 27 Oct 2026 05:45:13 -0700 (PDT)

Received: from desktop-g9fbspf.domain ([42.118.130.103])

by smtp.gmail.com with ESMTPSA id a92af1059eb24-198a0d98660sm37447722c88.9.2026.10.27.05.45.11

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 27 Oct 2026 05:45:12 -0700 (PDT)

Message-ID:

Reply-To: <66.14697@wjd.ac.th>

From: MetaAdsSupport

To:

Subject: Copyright Concern Regarding Your Page Content

Date: Tue, 27 Oct 2026 19:45:08 +0700

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1be565dab62f78aaa8c30db500028fc0"

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Policy Violation Notice Hello Netknow Internet Service, We

received a report that content in an advertisement on your page may violate

our copyright policy. After reviewing the report, we found that [...]



Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[42.118.130.103 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

[74.125.229.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.229.136 listed in dnsbl.ahbl.org]

[74.125.229.136 listed in dnsbl.ahbl.org]

[74.125.229.136 listed in dnsbl.ahbl.org]

[74.125.229.136 listed in dnsbl.ahbl.org]

[42.118.130.103 listed in dnsbl.ahbl.org]

[42.118.130.103 listed in dnsbl.ahbl.org]

[42.118.130.103 listed in dnsbl.ahbl.org]

[42.118.130.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.229.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.229.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.229.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.229.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[42.118.130.103 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[74.125.229.136 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.229.136 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.229.136 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.229.136 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Copyright Concern Regarding Your Page Content



This is a multi-part message in MIME format.



--1be565dab62f78aaa8c30db500028fc0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable



=0D=0APolicy Violation Notice =0D=0AHello Netknow Internet Service,=0D=0AWe=

received a report that content in an advertisement on your page may violat=

e our copyright policy. After reviewing the report, we found that you may h=

ave used intellectual property without permission from a third party.=0D=0A=

=0D=0AViolation Details=0D=0APage: Netknow Internet Service=0D=0A=0D=0AUsin=

g copyrighted content (images, videos, or audio) without permission.=0D=0AC=

reating content that may be confused with another brand.=0D=0ACopying or sh=

aring content without a license.=0D=0ANote: You must address this issue wit=

hin 24 hours of receiving this notice. Otherwise, your account or page Netk=

now Internet Service may be permanently disabled.=0D=0ASubmit an Appeal=0D=

=0A=0D=0AIf you believe this notice was sent in error, submit an appeal for=

review. However, if the issue is not addressed by the deadline, your accou=

nt may be permanently disabled.=0D=0AIf you need further assistance, please=

contact us.=0D=0A=0D=0A=0D=0ASincerely,=0D=0AJenaSupport Team

--1be565dab62f78aaa8c30db500028fc0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable




; font-family: Arial, sans-serif; border-right: #ddd 1px solid; background:=

#fff; border-bottom: #ddd 1px solid; color: #1c1e21; padding-bottom: 24px;=

padding-top: 24px; padding-left: 24px; border-left: #ddd 1px solid; margin=

: auto; line-height: 1.6; padding-right: 24px; border-radius: 8px">=0D=0A
1 style=3D"font-size: 18px; border-bottom: #ddd 1px solid; font-weight: 600=

; color: #1c1e21; padding-bottom: 16px; text-align: left; padding-top: 16px=

; padding-left: 16px; margin: -24px -24px 20px; padding-right: 16px; backgr=

ound-color: #f5f6f7; border-radius: 8px 8px 0 0">Policy Violation Notice
h1>=0D=0A

Hello Netknow Internet Service,

=0D=0A

We received a repor=

t that content in an advertisement on your page may violate our copyright p=

olicy. After reviewing the report, we found that you may have used intellec=

tual property without permission from a third party.

=0D=0A

"border-top: #ddd 1px solid; border-right: #ddd 1px solid; border-bottom: #=

ddd 1px solid; padding-bottom: 16px; padding-top: 16px; padding-left: 16px;=

border-left: #ddd 1px solid; margin: 20px 0px; padding-right: 16px; backgr=

ound-color: #f9f9f9; border-radius: 6px">=0D=0A


; font-weight: 600; color: #1c1e21; margin: 0px 0px 12px">Violation Details=

=0D=0A

Page: Netknow Internet Service

=0D=0A

    style=3D"padding-left: 20px; margin: 12px 0px">=0D=0A
  • Using copyrighted =

    content (images, videos, or audio) without permission.
    • =0D=0A
  • Creati=

    ng content that may be confused with another brand.
    • =0D=0A
  • Copying o=

    r sharing content without a license.
=0D=0A

Note:<=

/strong> You must address this issue within 24 hours of re=

ceiving this notice. Otherwise, your account or page Netknow Internet Servi=

ce may be permanently disabled.

=0D=0A=0D=0A

ding-bottom: 14px; padding-top: 14px; padding-left: 14px; border-left: #187=

7f2 4px solid; padding-right: 14px; background-color: #f1f6fb; border-radiu=

s: 6px">=0D=0A

If you believe this notice was sent in error, submit an ap=

peal for review. However, if the issue is not addressed by the deadline, yo=

ur account may be permanently disabled.

=0D=0A

If you need furth=

er assistance, please contact us.

=0D=0A

x solid; border-right: medium none; border-bottom: medium none; border-left=

: medium none; margin: 24px 0px" />=0D=0A

color: #65676b; text-align: left">=0D=0A

Sincerely,

=

=0D=0A

Jena
Support Team



--1be565dab62f78aaa8c30db500028fc0--



Web//SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 08:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLiL9-000000004Cr-2akr

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 08:39:51 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 08:39:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f180.google.com ([209.85.215.180]:47548)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLg43-00000000AmF-0Sd0

for sales@nk.ca;

Tue, 27 Oct 2026 06:14:05 -0600

Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-cc4aa0246b7so1726093a12.3

for ; Tue, 27 Oct 2026 05:13:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mindswebsolutiion-com.20251104.gappssmtp.com; s=20251104; t=1793103183; x=1793707983; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=WUZtj/koPLpYC+faVqVzkk7ln9Gu9VzSgP7r4hS7I9Q=;

b=sAl825XOShueGAK8RDoGifqfvDedkBrTjFpMx3mJh3Ha+x+OROVjgrW9uy+pvD9rP6

1fYWuDWfSKFSGtr5GZzLBOboh0EB7KpT499B2vBHxlhGqjLESfNJrHaqfofVH7Bt5lhE

3Cdin/pqsTN3gPQpMbVG34QbETKFEr6zXvSMzu2FMvcG1YjaxJdtmGbraLSTdOQGDCy4

OL4B6rj+ulYTX5VXGYdPhkAu9MML3ZJt2nzds4+j8NXtIESVRo5i4zoX4TGv6VUDjins

G/jwYiuinnian+IKXg63uEHSj5JRDEhOWaLs9XIDS4kOMsGJJazgbdv2sz2d5C4TP42N

8HIA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793103183; x=1793707983;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=WUZtj/koPLpYC+faVqVzkk7ln9Gu9VzSgP7r4hS7I9Q=;

b=X2UyzzWtH5EudORYbgWDdwM0A4g4hByI90yxNkP/MGtAdpkkyTCPr03/0wwhFbT+Ne

ptZkKU5PqjCEw7s+iyHLep21C0eRG3DdYouLVME3mS00F/d85L2zWW7IsUq3JoJqSvfk

9yugX+eZOmWaBVX49+Pw0rsyIAx1B7UPEoe///e63KcGpBVXJziYqWyWZNY7rvufGOjD

wqjkPd5DxAabopX9j1y2N73hvCmDiKW2XgCIQ3JrX3I6qkxfDrkXRF6+NfF5QYnI3nYX

Ul6q85asMAp52n929zxu0ctHQGkh472Bf39mPOjtyV6Tb7ZYopDFO0pmpzgU8zlwV0so

g69A==

X-Gm-Message-State: AFq9FYKE+F4B12+u/CwBOIULqYnAif6qrIt9ZKnCbyV/A4hATRVR8bnV

5FcG/wiGjth93FSRDnFJWk78kr0sLjSsXtOY1cJmid7h1Sxg+ReodUtHHEBTBnMTFhTufnkgIxy

iaY7rwv8=

X-Gm-Gg: AYBFou1qJRswC3Q2dkTBDq0CfYJ3lylSWlOeKtnsgG7RCpfkxsqcNbaL8WPhG9tROOh

Ojc46ts2QShdJEhlnTJ8RD4TYs9iu/nJoLehOkG6927xTe21WUYX1RB2z8LBDjZIlx8AgKwsfIQ

Rx9Rc9J6e+RUWrJMIJsWERog3A2KWtC+zR4HYJS8Zc5FP3HavEmhRsY9iNYY4gVplGeztZpimqR

Oh2pBzuaIi2niR5qvXq6UhAaBCmBHruQqGRcc6ShnJnovpA1HmFG3UmaXgc31enCRvMiowPfKUk

MMwGl+OfxaGZdaxOTxb39AVe2v4Vf1xd/E0jgmi7yl2SgwEqFUkwXBWjz5fngvPFIV2S+4POS6I

xHCtmaxpDrCj0brVB5NiGBg/M62D5hXHns2wNV2TklO62oas5xQJJuJKG59tujDJ3OSZeYfZJH3

JkWq2H+3f8O3aL8AcvBCasPs1SuvhxbqFn/JNEi0kxzLK3gmvN5+UTXjcSMR/gtdZy0zeS4CO6z

RfJauddKYU6Vh3QzIiqeAfSjmYMp40vTsj3tlDsbDDBV4OLDO27Qw3a8EYsNPS85fozRc6DcImf

GXrpCz2LXDffYSWB2WqpXsL3SZ8Q37OGUeLrwE6rKRMDe3fD

X-Received: by 2002:a17:90b:2e10:b0:3ac:7c52:faf6 with SMTP id 98e67ed59e1d1-3adea0b18dfmr7366198a91.1.1793103182838;

Tue, 27 Oct 2026 05:13:02 -0700 (PDT)

Received: from [127.0.0.1] ([103.106.232.8])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2eae6b7a216sm8173385ad.16.2026.10.27.05.13.01

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 27 Oct 2026 05:13:02 -0700 (PDT)

From: Lindy

To: sales@nk.ca

Subject: SEO Audit - www.nk.ca?

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Tue, 27 Oct 2026 12:13:01 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Want to get your business on the 1st page of Google?

We specialize in grow your online presence.



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[103.106.232.8 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

[209.85.215.180 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.180 listed in dnsbl.ahbl.org]

[209.85.215.180 listed in dnsbl.ahbl.org]

[209.85.215.180 listed in dnsbl.ahbl.org]

[209.85.215.180 listed in dnsbl.ahbl.org]

[103.106.232.8 listed in dnsbl.ahbl.org]

[103.106.232.8 listed in dnsbl.ahbl.org]

[103.106.232.8 listed in dnsbl.ahbl.org]

[103.106.232.8 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.180 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.180 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.106.232.8 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.180 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.180 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.180 listed in bl.score.senderscore.com]

Subject: {SPAM?} SEO Audit - www.nk.ca?



Hi,

Want to get your business on the 1st page of Google? We =

specialize in grow your online presence.

We offer affordable packages=

and proven results.

Contact us today for a cost and =

proposal

Sincerely,

Lindy,



Chinese products spam from microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 08:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLiKL-000000003AB-1BeW

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 08:39:01 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 08:39:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastus2azolkn19010003.outbound.protection.outlook.com ([52.103.12.3]:12505 helo=BN1PR04CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLdPj-000000009Vs-3bzM

for root@nl2k.ab.ca;

Tue, 27 Oct 2026 03:24:27 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Zwg3CHVhS+t9OOo6KR+iHMpVgnvwCfKjMHnoyhkajBDZxc9hMGKvzOv0ZD9g0k6bcazfeDGTp6T65F2SwzWKC93KylWkAqVKDToyw3qE6Q79idA/9bxRy0mZj65JLUoAP6H/dOp5fRYq4sqgMFziRM8Mk4eYMlxSFgml5vhgr5E2J8j1B0E3CntYNlPESd0doiG1lUzzXen9W/mUXJ//vxxOzF3VMo2SONYIxS6PHqh0j5N3wTPY2qw3kVqXJ3cA8qJ56JuScr55Yfk6Dv8fzTqHzF6vph0HOWVEAEsptuI1C9uiVLy97rjzs2yRBFfuO7b9d6b+N1TiF1sVtmlfkA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=LzM70XQSSBXffr4T+MJE6kCSWVY5ZYNR5iovEum7Yng=;

b=p9zME7gpHyz4aF7FRfndrZRDcUj8IP4D2UAYfPyyrDdBR8VNJ2VvZH8rCEn0UJ8Ke7bolk4wEVk/YHRjm+WBpkXy03VFrCg70k8G6Et0Wk0NI7ZzdSnbDta3bOjvQ5WiucI+1CtdVpClWrgQRXFRCdeqeSDQEGur0210fs4dLlsuIPa3Nf/mI+OtRYttorEGod86rlt+3Mfl4DwHeoUoavDAOjn5KpKosLAcpwaxtV6TUMNi3FGZL1aGqAlsvuG+Gy6HuP4ebZDnXbH+D3ZZ518XFiXsK9OHrrapcAY2k79l7BgQlhI2pirRkMAXlD4GKHlxaD1srxCVtd3FBhrMvg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=LzM70XQSSBXffr4T+MJE6kCSWVY5ZYNR5iovEum7Yng=;

b=LcRLdqxROAhr1Z2tngnSH2TbCs09lOc7c8xICzUTSGDObX3IYTxMr/GgFJRRuh8X6qSK/OigQV3iBlJhfJcGCzcuNCF0aVidttLv72Yz+nL03LuvJn8X689bRUIU4FVrZ4K2Fmbb8582d4LThq5Ra1XBtUUrU5N4WTcBplAY7wfK9hdpjLopIDwsmPz3kDHriTt6bJpsHdxs9LlbcQdW4JzBXeh8WmydaOzYj8pujvK7QSs9W1wg9VteMlLZZRJDGN87FLDweWiEyhrt+kUWAbpf17CqWoGp+Vn4x0NQ0KSYZ35xNLUHj/Futx+hx2ba6ByNTfErrlLyr0HEvd+buw==

Received: from IA1PR17MB6952.namprd17.prod.outlook.com (2603:10b6:208:44d::15)

by SA0PR17MB4362.namprd17.prod.outlook.com (2603:10b6:806:e6::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Tue, 27 Oct

2026 09:23:11 +0000

Received: from IA1PR17MB6952.namprd17.prod.outlook.com

([fe80::6df1:b7c7:97bd:9d58]) by IA1PR17MB6952.namprd17.prod.outlook.com

([fe80::6df1:b7c7:97bd:9d58%6]) with mapi id 15.21.0546.021; Tue, 27 Oct 2026

09:23:11 +0000

From: Latesha Esson

To: "root@nl2k.ab.ca"

Subject: Are your target buyers importing regularly?

Thread-Topic: Are your target buyers importing regularly?

Thread-Index: AQHdZfTJgyIUR0/H5ESYW2wOBO4rkA==

Date: Tue, 27 Oct 2026 09:23:11 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: IA1PR17MB6952:EE_|SA0PR17MB4362:EE_

x-ms-office365-filtering-correlation-id: 90f1fe0e-63b2-4fa0-f618-08df340bebba

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|5062599005|6092099016|15080799012|39105399006|19110799012|8060799015|45011099003|8062599012|37102599003|41001999006|31061999003|38102599003|4140399003|6050399003|20031999006|102099032|440099028|3412199025|26104999009|56899033|12091999003|3430499035|40105399003;

x-microsoft-antispam-message-info:

=?us-ascii?Q?L0tn9qM0gaykpgOxoSvFSUpmK+zQhuWbAgRn4EhROCYi4Eegb5IhmUcHPHjg?=

=?us-ascii?Q?Sn5SxzxXJVLKXcBRGZYKGHmmbXfMzhFwTT32aZzs7vyHZwLyI6pOeHyhpOiH?=

=?us-ascii?Q?zFT+LzaPj9NPPPwaVzLM5ote0LUo2YJHkAwsri9hKed6e6OsHwUJMjwp14+0?=

=?us-ascii?Q?/OH0bS6IDc0pV98ScJFlMEKTc1xYgB398Tfw7wPGAdThAYKfVe9VS4I7PxJn?=

=?us-ascii?Q?X4W9NGsYDieaTwA+3t24IoQcAxWxBXUy3yDMPAQqSh2THOTn5SUQ4GnskQG6?=

=?us-ascii?Q?fZclcn+LqvM4hvg/5N/U0zu2/NHXX31rVXCqV+iNE6iPIvx/yt2G5vV6fSXw?=

=?us-ascii?Q?bbrIAezJ1rO7ms93fjelsXarOCAYTiHeNosvUtaztgpcaAGbCT7rE1KZbGFS?=

=?us-ascii?Q?kY8sHOzgYvUZ8/qdeHHcwrnaMcKgazV+akBqGYHFboAUdSLGRuKUZz1HG8mu?=

=?us-ascii?Q?cMuml3kWB/K1HjQ3GY4TC6bQE3z8ohu2LlPowEFbJT69i+DTUG7GIroywDxE?=

=?us-ascii?Q?BHjf2DVsxrrj2U/7A17lFMb9TnkORik6XPgZHAlxyMzBo8y57KxVcw4eDqJ8?=

=?us-ascii?Q?oAj/ZD0xnnASjRgNc795OOmmo1ntMfFaag9bPZQRGDqES2+EweaPucUaDFUo?=

=?us-ascii?Q?pbrHz3Pgr845IJx0joXGAbqNqa7IJzeHOOaGC3j3ucI2JsTwWU1vjeTR9GRB?=

=?us-ascii?Q?+Ufza/PzOPV3ICqXRZJ78QbruIcDl2e//hypxqGOLrCCnCq3vJbCSOashG0S?=

=?us-ascii?Q?w5Mcst172SZPnMqT9H5KZkXowq224iZQebpXblxo/AtETnVw+im7oDnq4xIt?=

=?us-ascii?Q?2c3MOH2piZgdoJ321DH7hHemMrC3lHLIP8u1l3s0n7M22xdOFAB5vxHCTamV?=

=?us-ascii?Q?Fxbp8otjoFHwgdmreq5+zMEy0qCiw7U03oREmR0HCiSMI3SGo5YkP7TtbpUo?=

=?us-ascii?Q?QZ+LS+L0rJ+MSx1HcQPRMiJFnjToJC/49+X5P2lLGVBP3j7CaSWBk9TzL/Xc?=

=?us-ascii?Q?OXl6LS7us7l7Da5Z8IvFbbM9/BrSRMkQcp16mWyfu6V8fOv65IadS441vfGc?=

=?us-ascii?Q?4igVDOl6ughg9YZw7DO16PoN0GZB+8zPYdv0ocdc6wOc8l6rPgKEoSddA4Fj?=

=?us-ascii?Q?oeIjxrXK/5IbOt+XD4dndLdwtcJy9XncLu36/+lH6tisWXbOWAIeZNU=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?hWSC9a06E83KO/3ItBivHN6gnPMZbAbgMuGSWud40kH4/yj6EonpDfRO513S?=

=?us-ascii?Q?uVqMn7jUDKOBzqp6iJkhE4fSI0EbLePWkK1KgfQeKh8DARR3mDpPKiSE8Quv?=

=?us-ascii?Q?MG0fF3AoZF0GwVBd5wZ6AUCuQASZbf3mBst1WzB9BOCW81RMsU7eif5zy+bg?=

=?us-ascii?Q?bMAJVMvkK78Lg6V5Onl3ENoh0wJF8iPl/FI099dHtYD1xDS6dj+tw8aLsoA2?=

=?us-ascii?Q?hQkDPMqq3sMupQPUWRIo12iYuDiNh5KXWPv/QOxduwACaBvaWJ65nCBBECHz?=

=?us-ascii?Q?NoT3un2DTu6I9FostteK+X9VeBhHhn6FvNMCPB4OByVaJlp56K2e+qZ6kDSh?=

=?us-ascii?Q?k32o857opNHrY6xM/IZv+lvWT5CRz3tCyIJqXeBQ7YN0vK9qeEroTqstJTGZ?=

=?us-ascii?Q?BUvoUBWyCZhcJxBo3fl6yuzcppZdUpnB/eQVEHxu59Q9tzh+mlW2TiJBGN4Y?=

=?us-ascii?Q?dDAfVNwPaPhhPUPqZstGCD8+M6GLGqeUSl0kKXY5+GwcyCADiZ7pPdjAkIII?=

=?us-ascii?Q?FLiWauFDDKv/Gi8f3QJQnRoNDaQSwigGaciB5YM2A0s5ZSYRmam+RUNY8gDK?=

=?us-ascii?Q?TrBPEoLwBHXlUNVt7VtrOUjebt4A3yfk/TzhuMBLUVZESWZAPZGQbV/JmjLv?=

=?us-ascii?Q?NIpomix3ukeaXLHPzQMm54734h7nOUapL8VGAIrLyduqh6tKo/5pV0KMI/3u?=

=?us-ascii?Q?kPlTAw4lMF7IhdBf8EpRTCrL5bzRjtmtIboGIN8DaKsFV7gznkstxdLXxGzI?=

=?us-ascii?Q?0F34dxGfcNkcQYrB8OsQws8N+bbgpTNPhNdH5nYe49tz2NcBJp75PaqQipBJ?=

=?us-ascii?Q?5BwdQYWtJvdAlurn1493uNVnPmQ1a19R24OEQDm5SDfAPEIOiJkXZxwGM+0T?=

=?us-ascii?Q?eX3PIPx4onex5H1tfr8vFp3KohEH/iPsFGUY6nzd8DLAzQ8Tjsv1fAh76Bqc?=

=?us-ascii?Q?jUR0qZGbiwXjkpiOFWpGswwUQ/FXEEyvvw3aNJRCWohzrjZAZ/lmrQyzEIPx?=

=?us-ascii?Q?VStW1CsloHtzNjSbtXuIIeENqE5OQjL/9l/8X8uGcXBrAKkxqRcFFfZOOQBn?=

=?us-ascii?Q?SJdzp13ByQh0bJASW+shoOzmJ14dO4AX4i99/NXKzMER09i9nY692aSRBahJ?=

=?us-ascii?Q?wOUqfLBMWKvhCLQGqVWXSxGKRdUNZaG+1xpv8AWecPz69Ga/gxUVUZKDOaJI?=

=?us-ascii?Q?g25JP4quakDXhIXIea74CXJ/pdvMOrv+TYavflh4j7TR03qdiO7FsvPlF4mb?=

=?us-ascii?Q?IKPw3SBQbqEO6iPX/2iQCkB5mseRHAE6F49VHoRpN9typckgabXZTGJ+0bJT?=

=?us-ascii?Q?TzeeWLlb0fpFH2neXsxzCGmDVYYJJgJy75rA8ABONsuvTcLW3rHsCs8nlwq4?=

=?us-ascii?Q?meF2+9MLrYCDusXMrmFSEIUIKy2b?=

Content-Type: multipart/related;

boundary="_005_IA1PR17MB69524175F397010B330DC4F4D5602IA1PR17MB6952namp_";

type="multipart/alternative"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: IA1PR17MB6952.namprd17.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 90f1fe0e-63b2-4fa0-f618-08df340bebba

X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Oct 2026 09:23:11.3554

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR17MB4362



--_005_IA1PR17MB69524175F397010B330DC4F4D5602IA1PR17MB6952namp_

Content-Type: multipart/alternative;

boundary="_000_IA1PR17MB69524175F397010B330DC4F4D5602IA1PR17MB6952namp_"



--_000_IA1PR17MB69524175F397010B330DC4F4D5602IA1PR17MB6952namp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,



I'm Lucy from Tendata Shanghai. One shipment can be interesting; a sequence=

of relevant shipments can tell you more. How regularly has a potential buy=

er appeared, and are the products consistent with your offer?



With Tendata, you can review available shipment dates and product descripti=

ons over time, alongside the companies involved in the recorded trade. That=

history can help you separate recurring activity from an isolated record a=

nd prepare better questions for a sales conversation. It does not establish=

a buyer's current purchasing plans on its own. Approach a prospect with a =

more specific understanding of its recorded activity and a clearer reason f=

or the conversation.



Below are two views from the same company search: the trade-results list, f=

ollowed by an individual shipment detail.



[cid:image1] [cid:image2]



Reply with your product category and target market. I can demonstrate how t=

o review repeat activity and assess relevant buyers.



Best regards,



Lucy

Data Consultant



(+86) 15921777864



Tendata Tech Co.,Ltd



(+86) 15921777864 (WhatsApp)



Email: dataconsultant@tendata.cn



8th Floor, South Tower, Building 9,

Lujiazui Software Park, East Road,

Pudong New Area, Shanghai, China



--_000_IA1PR17MB69524175F397010B330DC4F4D5602IA1PR17MB6952namp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>





Hi,



I'm Lucy from Tendata Shanghai. One shipment can be interesting; a seque=

nce of relevant shipments can tell you more. How regularly has a potential =

buyer appeared, and are the products consistent with your offer?



With Tendata, you can review available shipment dates and product descri=

ptions over time, alongside the companies involved in the recorded trade. T=

hat history can help you separate recurring activity from an isolated recor=

d and prepare better questions for

a sales conversation. It does not establish a buyer's current purchasing p=

lans on its own. Approach a prospect with a more specific understanding of =

its recorded activity and a clearer reason for the conversation.



Below are two views from the same company search: the trade-results list=

, followed by an individual shipment detail.




ccc;" data-outlook-trace=3D"F:0|T:1" src=3D"cid:image1">


ccc;" data-outlook-trace=3D"F:0|T:1" src=3D"cid:image2">

Reply with your product ca=

tegory and target market. I can demonstrate how to review repeat activity a=

nd assess relevant buyers.



Best regards,



Lucy


Data Consultant



(+86) 15921777864



Tendata Tech Co.,Ltd



(+86) 15921777864 (WhatsApp)



Email: dataconsultant@tendata.cn



8th Floor, South Tower, Building 9,


Lujiazui Software Park, East Road,


Pudong New Area, Shanghai, China









--_000_IA1PR17MB69524175F397010B330DC4F4D5602IA1PR17MB6952namp_--



--_005_IA1PR17MB69524175F397010B330DC4F4D5602IA1PR17MB6952namp_

Content-Type: image/png; name="image1.png"

Content-Description: image1.png

Content-Disposition: inline; filename="image1.png"; size=306048;

creation-date="Tue, 27 Oct 2026 09:23:10 GMT";

modification-date="Tue, 27 Oct 2026 09:23:10 GMT"

Content-ID:

Content-Transfer-Encoding: base64



...





--_005_IA1PR17MB69524175F397010B330DC4F4D5602IA1PR17MB6952namp_--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Oct 2026 20:36:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLX3b-00000000IXl-07ew

for dave@doctor.nl2k.ab.ca;

Mon, 26 Oct 2026 20:36:59 -0600

Resent-From: The Doctor

Resent-Date: Mon, 26 Oct 2026 20:36:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out196-37.us.a.dm.aliyun.com ([47.90.196.37]:44627)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLWH9-000000006SW-0Ekb

for root@nk.ca;

Mon, 26 Oct 2026 19:46:58 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.rymat.ltd:alibabak_WebBatch:512257

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.rymat.ltd; s=aliyun-cn-hangzhou;

t=1793065501; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=BT/e+roHYkjPkUdG53oaZwtV/qES2DMV9DUZaiMuJWQ=;

b=IYhW6ZbksN33knTPj/scZBnjDA7ytxSv0Bd56EKs3DvtirhskKFKduAFAzABT/IOTn4dI7dHRbRfWbQEWMrB0ZnKmhDvBOhTbFtrG6+wMCFapyHGHV68O9B8EJwCiKy0S0lQ4iO9bmST9bX+sa8j3UBoU6Nye8FWjAPm1w0ZhRg=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1793065501; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=BT/e+roHYkjPkUdG53oaZwtV/qES2DMV9DUZaiMuJWQ=;

b=ht23Q1hqrzninf/tkCHg5ieIoG9bYdd4AwerxpuGnzGRcgXCxl770E0B/Mt7OlsHe7Xsuy/O/VsAx8x//bPx0K62bwc1LOt7DIDaOJGkMdfR2+kaSx/U/wRf9yNvUnaezVvuwCJH+xPm0oI1JqGbHXbW0jBzgb59dpZFOVvHMiw=

Received: from chitu-hsf(mailfrom:vip@vip.rymat.ltd fp:ma_600000362822374496 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Tue, 27 Oct 2026 09:44:38 +0800

Date: Tue, 27 Oct 2026 09:44:38 +0800

From: "Chris Liu"

To:

Reply-To:

Message-ID: <927fdc92-a1f9-42a3-a204-f401ee8b021c@alibaba.com>

Subject: =?UTF-8?B?UHJlbWl1bSBGdW5jdGlvbmFsIENoZW1pY2FsIEFkZGl0aXZlcyBNYW51ZmFjdHVyZXI=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000362822374497

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Partner, This is Chris from Tianjin Eclat Co., Ltd (subsidiary

of Hebei Anjiefa Building Materials Co., Ltd), a leading manufacturer of

functional chemical additives since 1992. Operating a 34,000-square-meter

[...]



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

[47.90.196.37 listed in dnsbl.ahbl.org]

[47.90.196.37 listed in dnsbl.ahbl.org]

[47.90.196.37 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[47.90.196.37 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[47.90.196.37 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 SALES_REPLY Your parents named you sales?

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?UTF-8?B?UHJlbWl1bSBGdW5jdGlvbmFsIENoZW1pY2FsIEFkZGl0aXZlcyBNYW51ZmFjdHVyZXI=?=




px">
: 14pxfont-family:Arial">Dear Partner,


t-align: justify;font-family: Arial;font-size: 14px">
y: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


tyle=3D"margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px">=


pxfont-family:Arial">This is Chris from Tianjin Eclat Co., Ltd (subsidiary of =

Hebei Anjiefa Building Materials Co., Ltd), a leading manufacturer of function=

al chemical additives since 1992. Operating a 34,000-square-meter facility wit=

h 120+ employees and 15 technicians, we supply high-grade fine chemicals to gl=

obal markets.


ily: Arial;font-size: 14px">
=85=E9=BB=91;font-size: 14pxfont-family:Arial">We provide tailored, one-stop s=

upply solutions featuring a comprehensive portfolio designed for diverse indus=

trial and architectural applications:


-align: justify;font-family: Arial;font-size: 14px">
: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14pxfont-family:Arial">
=


nt-size: 14px">Tile Adhesives & Grouts
an>


ize: 14px">External Thermal Insulation Composi=

te Systems (ETICS/EIFS)


y;font-family: Arial;font-size: 14px">Water-Ba=

sed Coatings


ly: Arial;font-size: 14px">Petroleum Extractio=

n


ont-size: 14px">Emulsion Polymerization=


: 14px">Detergent Industry


"margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
tyle=3D"font-size: 14px">Paper Industry


xt-align: justify;font-family: Arial;font-size: 14px">
: 14px">Textile Printing & Dyeing


-align: justify;font-family: Arial;font-size: 14px">
14px">Ceramic Industry


;font-family: Arial;font-size: 14px">
=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


llspacing=3D"0" style=3D"text-align: justify;font-family: 'Times New Roman';fo=

nt-size: 13px;margin-left: 7px;border: none">

gn=3D"center" style=3D"width: 554px;padding: 0 7px;border-width: 1px;border-co=

lor: windowtext">


;font-size: 14px">
px">Core Products


"center" style=3D"width: 554px;padding: 0 7px;border-left-width: 1px;border-le=

ft-color: windowtext;border-right-width: 1px;border-right-color: windowtext;bo=

rder-top: none;border-bottom-width: 1px;border-bottom-color: windowtext">


yle=3D"margin: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
ong>


Arial;font-size: 14px">RDP (Redispersible Polymer Powder):
pan style=3D"font-size: 14px">Enhances flexibility, adhesion, and crack resist=

ance in tile adhesives, ETICS/EIFS, and repair mortars.


margin: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
=3D"font-size: 14px"> 


ft;font-family: Arial;font-size: 14px">HPMC(Hydroxypr=

opyl methylcellulose): Serves as a hi=

gh-efficiency water-retaining agent, thickener, and anti-sagging modifier for =

dry-mix mortars and water-based coatings.


text-align: left;font-family: Arial;font-size: 14px">
14px"> 


: Arial;font-size: 14px">HEC(Hydroxyethyl cellulose)<=

/strong>: Delivers super=

ior high-shear rheology, thickening, and protective colloid properties for lat=

ex paints, personal care, and oilfield applications.


gin: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
"font-size: 14px"> 


font-family: Arial;font-size: 14px">PCE (Polycarboxyl=

ate Ether): Del=

ivers ultra-high water reduction, superior fluidity, and slump retention for a=

dvanced concrete and self-leveling formulations.


0 0 0;text-align: left;font-family: Arial;font-size: 14px">
t-size: 14px"> 


-family: Arial;font-size: 14px">PP 
ong>Fiber: Provides three-dimens=

ional crack arrest and reinforcement for high-performance concrete, waterproof=

ing, and road engineering.


t;font-family: Arial;font-size: 14px">

pan>


y;font-family: Arial;font-size: 14px">
=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px">
"https://i.postimg.cc/vb2DFHJt/EDM-package-chris.jpg"/>


margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
yle=3D"font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px">

>


;font-family: 'Times New Roman';font-size: 13px;margin-left: 7px;border: none"=

>
>

0 7px;border-width: 1px;border-color: windowtext">


rial;font-size: 14px">
: 15px">Why partner with us?


er-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;borde=

r-right-color: windowtext;border-top: none;border-bottom-width: 1px;border-bot=

tom-color: windowtext">


14px;text-indent: 0">


-family: Arial;font-size: 14px;text-indent: 0">Tailored Formulations:<=

/strong> We adjust molecular weight, degr=

ee of substitution, and active solids according to your requirement and specif=

ication.


x;text-indent: 0"> 


"margin: 0 0 0;font-family: Arial;font-size: 14px;text-indent: 0">Supp=

ly Chain Reliability: Direct fac=

tory production ensures consistent lot-to-lot quality, competitive pricing, an=

d scalable bulk delivery.


;font-family: Arial;font-size: 14px">
=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


>


y: Arial;font-size: 14px">
=85=E9=BB=91;font-size: 14px">


lign: justify;font-family: Arial;font-size: 14px">
=E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 
//i.postimg.cc/hD18zP45/EDM-factory-chris.jpg"/>


0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
font-size: 15px">


;font-family: Arial;font-size: 14px">We are co=

mmitted to delivering true one-stop supply services and tailored systematic so=

lutions for your business.If you are in=

terest
15px">ed in our products, please reach us directly
family: =E5=AE=8B=E4=BD=93;font-size: 15pxfont-family:Arial">on
yle=3D"font-size: 15px"> 
=93;font-size: 15pxfont-family:Arial">Whatsapp/Wechat
t-size: 15px"> or simply reply by E-mail


0 0;text-align: justify;font-family: Arial;font-size: 14px;text-indent: 0">
an style=3D"font-family: =E5=AE=8B=E4=BD=93;font-size: 15px"> 

=


x;">=

Best Regards


: 14px; text-indent: 0px;">
elvetica, sans-serif">Chris Liu


justify; font-size: 14px; text-indent: 0px;">
, helvetica, sans-serif">Tianjin Eclat Co., L=

td


//dm-cn.aliyuncs.com/trace/v1/report?bid=3D2724796&env=3D600000362822374497&ma=

c=3D512257&mf=3Dvip%40vip.rymat.ltd&msgid=3D927fdc92-a1f9-42a3-a204-f401ee8b02=

1c%40alibaba.com&sac=3D0&tag=3DFinechemicalglobal1&tid=3D2724796&to=3Droot%40n=

k.ca&tpl=3D&ts=3D1793065478&type=3D1&url=3D&v=3D1.0&sign=3D8f1a2976fc53b5749df=

721084b2b650f&urlts=3D1793065501" alt=3D"" style=3D"display: none; width: 1px;=

height: 1px;" />

Nigerian inheritance spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Oct 2026 00:04:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLaIG-000000007qo-0bU3

for dave@doctor.nl2k.ab.ca;

Tue, 27 Oct 2026 00:04:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Oct 2026 00:04:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [186.194.48.78] (port=42329 helo=anakin.crefito2.gov.br)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xLaHT-000000007TW-3JXV

for root@nk.ca;

Tue, 27 Oct 2026 00:03:34 -0600

Received: from [107.174.30.92] (unknown [107.174.30.92])

by anakin.crefito2.gov.br (Postfix) with ESMTPSA id B9CD3724D27

for ; Tue, 27 Oct 2026 02:50:50 -0300 (-03)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=crefito2.gov.br;

s=default; t=1793080251;

bh=xAzejIFIr1qNt13obSRPDtoD9yX65LhcEYDJp5PA3mQ=; h=From:To:Subject;

b=fOHFHMhPTaEkoRVGfZ7XlP35uVp1PFXVDYBeCeI9HT7Fom+js6V/CcftZH6jll/09

PVMlFBx9csxEXj5N/46LrQ2QEQ/ERX7cO1gvHDOBlnGj1NyXmTl5rFKADFqcktLXBr

X6qYM4grLnW8g+z8uS/s1sv5ohy12YqBboIJRv5KiWLdynyJTqE8lALenqyV0Cu2oI

0tSy8TmG4SLRkaxF6mXKEmtQwzcStU9ynDNSER2uyrSi0w3XRCslO0ZEpPBFR30WoR

xYw5GoVfRKalZ4zxlF7vRHJLYY9g/amz34SLWw/dwYhqK/QX9XUHpOqRZrEKxXXS+3

zAdN8DuQ6m1ng==

Authentication-Results: anakin.crefito2.gov.br;

spf=pass (sender IP is 107.174.30.92) smtp.mailfrom=daviddivino@crefito2.gov.br smtp.helo=[107.174.30.92]

Received-SPF: pass (anakin.crefito2.gov.br: connection is authenticated)

Reply-To:

From: Garry Mallon

To: root@nk.ca

Subject: Inquiry Regarding Ref: FAB/272/16

Date: 26 Oct 2026 22:50:47 -0700

Message-ID: <20261026225047.976086A92A8AD4AD@crefito2.gov.br>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 14.5

X-Spam_score_int: 145

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, Please contact me when you can, as there appears

to be an inheritance connected to your family name.



Content analysis details: (14.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[107.174.30.92 listed in will-spam-for-food.eu.org]

[107.174.30.92 listed in will-spam-for-food.eu.org]

[107.174.30.92 listed in will-spam-for-food.eu.org]

[107.174.30.92 listed in will-spam-for-food.eu.org]

[107.174.30.92 listed in will-spam-for-food.eu.org]

[107.174.30.92 listed in will-spam-for-food.eu.org]

[107.174.30.92 listed in will-spam-for-food.eu.org]

[107.174.30.92 listed in will-spam-for-food.eu.org]

[186.194.48.78 listed in will-spam-for-food.eu.org]

[186.194.48.78 listed in will-spam-for-food.eu.org]

[186.194.48.78 listed in will-spam-for-food.eu.org]

[186.194.48.78 listed in will-spam-for-food.eu.org]

[186.194.48.78 listed in will-spam-for-food.eu.org]

[186.194.48.78 listed in will-spam-for-food.eu.org]

[186.194.48.78 listed in will-spam-for-food.eu.org]

[186.194.48.78 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[186.194.48.78 listed in dnsbl.ahbl.org]

[186.194.48.78 listed in dnsbl.ahbl.org]

[186.194.48.78 listed in dnsbl.ahbl.org]

[186.194.48.78 listed in dnsbl.ahbl.org]

[107.174.30.92 listed in dnsbl.ahbl.org]

[107.174.30.92 listed in dnsbl.ahbl.org]

[107.174.30.92 listed in dnsbl.ahbl.org]

[107.174.30.92 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[186.194.48.78 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[186.194.48.78 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[186.194.48.78 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[186.194.48.78 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[107.174.30.92 listed in sbl-xbl.spamhaus.org]

[107.174.30.92 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[107.174.30.92 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[186.194.48.78 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[186.194.48.78 listed in bl.score.senderscore.com]

Subject: {SPAM?} Inquiry Regarding Ref: FAB/272/16
















rmal; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Ubuntu, H=

elvetica, Arial, sans-serif; font-size: 14.5px; font-style: normal; font-we=

ight: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; f=

ont-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;'>


image: none; line-height: inherit; font-family: Tahoma, sans-serif; font-si=

ze: 10pt; font-style: inherit; font-variant: inherit; font-weight: inherit;=

vertical-align: baseline; font-size-adjust: inherit; font-stretch: inherit=

; font-feature-settings: inherit; text-decoration-color: initial; font-opti=

cal-sizing: inherit; font-kerning: inherit; font-variation-settings: inheri=

t; font-language-override: inherit;"=20

data-olk-copy-source=3D"MessageBody">Good day,




font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Ubuntu, Helvet=

ica, Arial, sans-serif; font-size: 14.5px; font-style: normal; font-weight:=

400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial; text-decoration-style: initia=

l; text-decoration-color: initial;'>


image: none; line-height: inherit; font-family: Tahoma, sans-serif; font-si=

ze: 10pt; font-style: inherit; font-variant: inherit; font-weight: inherit;=

vertical-align: baseline; font-size-adjust: inherit; font-stretch: inherit=

; font-feature-settings: inherit; text-decoration-color: initial; font-opti=

cal-sizing: inherit; font-kerning: inherit; font-variation-settings: inheri=

t; font-language-override: inherit;">

Please contact me when you can, as there appears to be an inheritance conne=

cted to your family name.




font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Ubuntu, Helvet=

ica, Arial, sans-serif; font-size: 14.5px; font-style: normal; font-weight:=

400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial; text-decoration-style: initia=

l; text-decoration-color: initial;'>


image: none; line-height: inherit; font-family: Tahoma, sans-serif; font-si=

ze: 10pt; font-style: inherit; font-variant: inherit; font-weight: inherit;=

vertical-align: baseline; font-size-adjust: inherit; font-stretch: inherit=

; font-feature-settings: inherit; text-decoration-color: initial; font-opti=

cal-sizing: inherit; font-kerning: inherit; font-variation-settings: inheri=

t; font-language-override: inherit;">

Respectfully,




font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Ubuntu, Helvet=

ica, Arial, sans-serif; font-size: 14.5px; font-style: normal; font-weight:=

400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial; text-decoration-style: initia=

l; text-decoration-color: initial;'>


image: none; line-height: inherit; font-family: Tahoma, sans-serif; font-si=

ze: 10pt; font-style: inherit; font-variant: inherit; font-weight: inherit;=

vertical-align: baseline; font-size-adjust: inherit; font-stretch: inherit=

; font-feature-settings: inherit; text-decoration-color: initial; font-opti=

cal-sizing: inherit; font-kerning: inherit; font-variation-settings: inheri=

t; font-language-override: inherit;">

Garry Mallon




font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Ubuntu, Helvet=

ica, Arial, sans-serif; font-size: 14.5px; font-style: normal; font-weight:=

400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial; text-decoration-style: initia=

l; text-decoration-color: initial;'>


image: none; line-height: inherit; font-family: Tahoma, sans-serif; font-si=

ze: 10pt; font-style: inherit; font-variant: inherit; font-weight: inherit;=

vertical-align: baseline; font-size-adjust: inherit; font-stretch: inherit=

; font-feature-settings: inherit; text-decoration-color: initial; font-opti=

cal-sizing: inherit; font-kerning: inherit; font-variation-settings: inheri=

t; font-language-override: inherit;">

HeirSearch