Donation spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Dec 2025 05:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vYkPL-00000000NAT-1Kk7

for dave@doctor.nl2k.ab.ca;

Thu, 25 Dec 2025 05:25:31 -0700

Resent-From: The Doctor

Resent-Date: Thu, 25 Dec 2025 05:25:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vpn.ledick.de ([85.16.135.70]:51482)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vYi0g-00000000G8h-0nKT

for root@nl2k.ab.ca;

Thu, 25 Dec 2025 02:52:03 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ledick.de;

s=s1; h=MIME-Version:Content-Type:Reply-To:Message-ID:Date:Subject:To:From:

Sender:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=yZIc0GlbpwU1fMDyGz71uYuc55Hbu8u3auNCGYyoeaE=; b=n9wsiXYuSCSDz6mZ3+hbpHx/wH

19E7n91I+CyUnNs2p+YR3lnW/SDq5DuBjxvDb17Sb/I11qSlXJypPjehaGoLo/EeIkcTCj8nOAk1O

3Np6M/XoiGUDmUZMkAP65sy66h9NImTy4sWqItrduB6Co5f2lO5+838D1nQjJ7UpgtQ8FSSyB2YBI

/UjRpC0IpdKIpqKt6oc4dq27WPGPE46N4pi3wxCoLy6PomsiN6kxWz9aSpnqHJi8Sa8lJcEjVMAHM

KJF4S21/HO52QoeHIGNR3vBFlhyJqjg8HpztUU7vU77zh+m2o3DFSSMOWyUElpOLGb9FzbA6aguLs

fpyFw9Tg==;

Received: from hvexchange ([172.16.1.251]:27764 helo=vpn.ledick.de)

by vpn.ledick.de with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1vXfvH-000000007Iq-1mmc;

Mon, 22 Dec 2025 14:26:03 +0100

Received: from hvExchange.lfg.local (172.16.1.251) by hvExchange.lfg.local

(172.16.1.251) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.36; Mon, 22 Dec

2025 14:25:46 +0100

Received: from hvExchange.lfg.local ([fe80::8bd6:aa22:36f9:419b]) by

hvExchange.lfg.local ([fe80::8bd6:aa22:36f9:419b%12]) with mapi id

15.02.1544.036; Mon, 22 Dec 2025 14:25:46 +0100

From: Feyna Carstens

To: Feyna Carstens

Subject: HELLO

Thread-Topic: HELLO

Thread-Index: AdxzRnsHWArNMBknx0iE23vCwEhzJA==

Date: Mon, 22 Dec 2025 13:25:46 +0000

Message-ID: <709414230f4c4f22b41802137068977b@ledick.de>

Reply-To: "mfrancafissolo00@gmail.com"

Accept-Language: en-AU, de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [212.102.39.209]

Content-Type: multipart/alternative;

boundary="_000_709414230f4c4f22b41802137068977bledickde_"

MIME-Version: 1.0

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Mrs maria has a donation of 3.5m for you . Reply for more

details. Mrs maria has a donation of 3.5m for you . Reply for more details.





Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[212.102.39.209 listed in sbl-xbl.spamhaus.org]

[212.102.39.209 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[212.102.39.209 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[85.16.135.70 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[85.16.135.70 listed in sa-accredit.habeas.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[85.16.135.70 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[85.16.135.70 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mfrancafissolo00(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

Subject: {SPAM?} HELLO

Donation spam Part 2



--_000_8f954e1eb1b04128afc7588851e4418bledickde_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Mrs maria has a donation of 3.5m for you . Reply for more details.





--_000_8f954e1eb1b04128afc7588851e4418bledickde_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>








break-word">



Mrs maria has a donation of 3.5m for you . Reply for=

more details.











--_000_8f954e1eb1b04128afc7588851e4418bledickde_--

Donation spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Dec 2025 15:51:00 -0700

Received: from vpn.ledick.de ([85.16.135.70]:38041)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vYuAK-00000000MLS-13if

for dave@doctor.nl2k.ab.ca;

Thu, 25 Dec 2025 15:50:49 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ledick.de;

s=s1; h=MIME-Version:Content-Type:Reply-To:Message-ID:Date:Subject:To:From:

Sender:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=1bxzPqffuJPa0pHc1/iNgr6d8KMy/d8ms788L3kksIM=; b=TPSKy+gVuosZeWAdk3UQDex/m0

t3Vaz78JYkYb/cSaThshsyPETLt12DpB+ej+pWHn0Jakm/Kn0xN0MyNKKR9UskV5pvSSi+MMkd9rI

BHqLaqhfsOt06Q54hOlfLoiV3gud35cOYpk8b9qq0RcUiuZBHqjZONLZryMzKag32VFboMJhQnyaS

WyxbYOCjGgh39eNE2ET24jVF8n4fLIjPU0d02Zytx4MFm2nRKPGBlADQeY2NU7zW6EOICjcrMqFHv

gmapL1Os/3WR94jxZWxFBAdDgeJV4kJ5k0pYhn1oHssOXnOqRyjRTKbc+PdVhjDqBMfsD6d1q0ayv

f3L4DCrA==;

Received: from hvexchange ([172.16.1.251]:13761 helo=vpn.ledick.de)

by vpn.ledick.de with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1vXfeg-000000000RQ-193n;

Mon, 22 Dec 2025 14:08:54 +0100

Received: from hvExchange.lfg.local (172.16.1.251) by hvExchange.lfg.local

(172.16.1.251) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.36; Mon, 22 Dec

2025 14:08:37 +0100

Received: from hvExchange.lfg.local ([fe80::8bd6:aa22:36f9:419b]) by

hvExchange.lfg.local ([fe80::8bd6:aa22:36f9:419b%12]) with mapi id

15.02.1544.036; Mon, 22 Dec 2025 14:08:37 +0100

From: Feyna Carstens

To: Feyna Carstens

Subject: HELLO

Thread-Topic: HELLO

Thread-Index: Adxvj1wg4q3ltw+GQba25C/Y7v9muw==

Date: Mon, 22 Dec 2025 13:08:36 +0000

Message-ID: <8f954e1eb1b04128afc7588851e4418b@ledick.de>

Reply-To: "mfrancafissolo00@gmail.com"

Accept-Language: en-AU, de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [212.102.39.209]

Content-Type: multipart/alternative;

boundary="_000_8f954e1eb1b04128afc7588851e4418bledickde_"

MIME-Version: 1.0

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Mrs maria has a donation of 3.5m for you . Reply for more

details. Mrs maria has a donation of 3.5m for you . Reply for more details.





Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[212.102.39.209 listed in sbl-xbl.spamhaus.org]

[212.102.39.209 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[212.102.39.209 listed in zen.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[85.16.135.70 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[85.16.135.70 listed in sa-trusted.bondedsender.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[85.16.135.70 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[85.16.135.70 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mfrancafissolo00(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} HELLO

Chinese products spam part 2


libri">Dear

pxfont-family:Calibri">friend

=93;font-size:14pxfont-family:Calibri">,


ily:=E5=AE=8B=E4=BD=93;font-size:14px"> 


t-family:=E5=AE=8B=E4=BD=93;font-size:14pxfont-family:Calibri">Greetings from =

Recare Tianjin Hat Manufacturing Co., Ltd., a leading

ont-family:=E5=AE=8B=E4=BD=93;font-size:14pxfont-family:Calibri">cap

an style=3D";font-family:=E5=AE=8B=E4=BD=93;font-size:14px"> 
"font-family:Calibri">manufacturer with over 25 years of expertise in the indu=

stry!


size:14px"> 


font-size:14pxfont-family:Calibri">We specialize in producing
<=

span style=3D"font-family: =E5=AE=8B=E4=BD=93;font-size: 14pxfont-family:Calib=

ri">blank baseball caps

=BD=93;font-size:14px"> and
span>
t-family:Calibri">custom printed caps

ly:=E5=AE=8B=E4=BD=93;font-size:14px">
=93">=E2=80=94
two of our core stren=

gths that have won high recognition from clients across Europe, the Middle Eas=

t, and the United States.


=8B=E4=BD=93;font-size:14px"> 


=AE=8B=E4=BD=93;font-size:14pxfont-family:Calibri">Founded in 1997, we have a =

robust production setup with 10 specialized workshops (including independent e=

mbroidery and sampling facilities), a one-stop production line (dyeing, embroi=

dery, cap-making) and advanced equipment. We offer

"font-family: =E5=AE=8B=E4=BD=93;font-size: 14pxfont-family:Calibri">OEM custo=

mization

ze:14px"> for blank and printed caps =

made of cotton, polyester, mesh, acrylic, etc., perfectly meeting the needs of=

promotions, amusement park retail, advertising and tourism sectors.

pan>

&nbs=

p;


=3D";font-family:=E5=AE=8B=E4=BD=93;font-size:14pxfont-family:Calibri">What ma=

kes us stand out in the market?


y: =E5=AE=8B=E4=BD=93;font-size: 14pxfont-family:Calibri">Superior Products
pan>

-family:Calibri">:

:rgb(0,0,255);font-size:14pxfont-family:Calibri">Blank caps

";font-family:=E5=AE=8B=E4=BD=93;font-size:14px"> 
ily:Calibri">(cotton/polyester/mesh options) are ideal for brand customization=

;

55);font-size:14pxfont-family:Calibri">printed caps

-family:=E5=AE=8B=E4=BD=93;font-size:14px"> 
libri">feature accurate color matching and sample-to-product consistency, perf=

ect for promotions and events.


-family: =E5=AE=8B=E4=BD=93;font-size: 14pxfont-family:Calibri">Strong Capacit=

y

">: One-stop production line (dyeing
>=E2=86=92
"font-family:Calibri">embroidery

=BD=93">=E2=86=92
manufacturing), 10=

workshops, 300+ machines, and 20 QC staff ensure stable quality and timely de=

livery.


=93;font-size: 14pxfont-family:Calibri">Competitive Prices

n style=3D";font-family:=E5=AE=8B=E4=BD=93;font-size:14px">
-family:Calibri">: Low production costs in Shijiazhuang

ont-family:=E5=AE=8B=E4=BD=93">=E2=80=99

bri">s hat zone enable us to offer the most favorable wholesale rates, with Di=

sney cooperation experience guaranteeing international standards.

>

 <=

/span>


-family:Calibri">In addition to blank and printed caps, we also offer a full r=

ange of headwear including trucker hats, bucket hats, LED hats, and tactical h=

ats, with a minimum order quantity that suits both small and large bulk orders=

. Our factory has 500 skilled employees, ensuring timely delivery even for lar=

ge-scale orders.


ont-size:14px"> 


=93;font-size:14pxfont-family:Calibri">We are eager to provide you with
>
mily:Calibri">samples

=93;font-size:14px"> of our blank and=

printed caps for your evaluation. Please feel free to share your requirements=

for materials, designs, or quantities, and we will tailor a detailed quotatio=

n for you promptly.


=BD=93;font-size:14px"> 
/>


ont-family:Calibri">Looking forward to building a long-term, mutually benefici=

al partnership with you!


=BD=93;font-size:14px"> 


=E4=BD=93;font-size:14pxfont-family:Calibri">Best regards



p>

Chinese products spam part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Dec 2025 08:19:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ9aS-00000000P2o-04SC

for dave@doctor.nl2k.ab.ca;

Fri, 26 Dec 2025 08:18:40 -0700

Resent-From: The Doctor

Resent-Date: Fri, 26 Dec 2025 08:18:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out196-37.us.a.dm.aliyun.com ([47.90.196.37]:41925)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ3VR-00000000ODO-3IRe

for root@nk.ca;

Fri, 26 Dec 2025 01:49:13 -0700

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.recare07.ltd:alibabak_WebBatch:320261

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1766738840; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=QS1Xp2zWB/MkYTJk/V+jlv8rqZKxkhWN6DoL7W6r5mI=;

b=Cpoayn26nO+aK69HAEmsbaT/kA7YHqfBciarzbx65awpi1d3HoEhO7EMLyeIWw8M7HEQJNsXs8VaF/vUFBCzGsl5/vRDVSIqzNdLbZU3p1TK4kYN8hon4+AJ8lQJ9mr0+nkfOfaIuClDEHmYRQEqUb9VTeGlJ/xkCG2te8IBxX8=

Received: from chitu-hsf(mailfrom:vip@vip.recare07.ltd fp:ma_600000260331877177 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Fri, 26 Dec 2025 16:46:25 +0800

Date: Fri, 26 Dec 2025 16:46:25 +0800

From: "Daisy"

To:

Reply-To:

Message-ID:

Subject: =?UTF-8?B?T25lLVN0b3AgT0VNIFNvbHV0aW9uOiBIaWdoLVF1YWxpdHkgQmxhbmsgJiBQcmludGVkIENh?=

=?UTF-8?B?cHMtZzIw?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000260331877178

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear friend, Greetings from Recare Tianjin Hat Manufacturing

Co., Ltd., a leading cap manufacturer with over 25 years of expertise in

the industry!



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

[47.90.196.37 listed in dnsbl.ahbl.org]

[47.90.196.37 listed in dnsbl.ahbl.org]

[47.90.196.37 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[47.90.196.37 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[47.90.196.37 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[47.90.196.37 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[47.90.196.37 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[47.90.196.37 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?T25lLVN0b3AgT0VNIFNvbHV0aW9uOiBIaWdoLVF1YWxpdHkgQmxhbmsgJiBQcmludGVkIENh?=

=?UTF-8?B?cHMtZzIw?=

Dating phish from Microsoft outlook Part 4

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=


or:#f5c451;" align=3D"center">=0A=


ial,Helvetica,sans-serif;font-size:17px;font-weight:bold;color:#473f2f;text=

-decoration:none;display:inline-block;"> Take a look inside
=0A=

=0A=


f;font-size:15px;line-height:1.6;color:#6e685e;text-align:center;">=0A=

There is no commitment required. You can browse profiles, read how=

people introduce themselves, and decide for yourself if it matches what yo=

u=E2=80=99re looking for. If it doesn=E2=80=99t, you can leave without crea=

ting anything or changing your routine.=0A=

=0A=

=0A=

=0A=

=0A=

=0A=


f;font-size:16px;line-height:1.5;color:#d8b04c;font-weight:bold;">=0A=

What members appreciate about this platform:=0A=

=0A=


    tica,sans-serif;font-size:14px;line-height:1.6;color:#59544c;">=0A=

  • =0A=

    Profiles are reviewed: New sign-ups are checked =

    to reduce fake or low-effort accounts.=0A=

  • =0A=

  • =0A=

    International community: Women from different ba=

    ckgrounds who are open to meaningful connections.=0A=

  • =0A=

  • =0A=

    Direct conversations: No public feeds or comment=

    sections, just one-to-one messaging.=0A=

  • =0A=

  • =0A=

    Simple setup: You can start with a short descrip=

    tion and add more later if you want.=0A=

  • =0A=

  • =0A=

    Message-focused: The platform is built around wr=

    iting and replying, not likes or quick reactions.=0A=

  • =0A=

=0A=

=0A=

=0A=

=0A=

=0A=


f;font-size:16px;color:#d8b04c;font-weight:bold;">=0A=

A more straightforward dating experience=0A=

=0A=


f;font-size:14px;line-height:1.6;color:#5b564e;">=0A=

Online dating doesn=E2=80=99t have to feel confusing or repetitive=

. Here, the focus is on clear communication and mutual interest. You decide=

who to write to, when to reply, and how much you want to share at each ste=

p.=0A=

=0A=


f;font-size:14px;line-height:1.6;color:#5b564e;">=0A=

Some members are looking for something serious, others enjoy meeti=

ng someone new and seeing where it leads. In most cases, it starts the same=

way: a normal message and a reply that feels natural.=0A=

=0A=

=0A=

=0A=

=0A=

=0A=


order-radius:14px;border:1px solid #e1d9c8;" width=3D"100%">=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=


serif;font-size:15px;color:#d8b04c;font-weight:bold;">=0A=

What members mention most often=0A=

=0A=


serif;font-size:13px;color:#5a544a;line-height:1.5;">=0A=

=E2=80=9CIt feels more genuine. People actually reply and take=

the time to write.=E2=80=9D =E2=80=93 M, 39=0A=

=0A=


serif;font-size:13px;color:#5a544a;line-height:1.5;">=0A=

=E2=80=9CEasy to use, no pressure, and conversations feel more=

real.=E2=80=9D =E2=80=93 D, 44=0A=

=0A=


t-size:13px;color:#5a544a;line-height:1.5;">=0A=

=E2=80=9CI like that I can log in when it suits me and reply p=

roperly.=E2=80=9D =E2=80=93 J, 36=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=


ze:11px;color:#8f8a82;line-height:1.5;">=0A=

This message was sent to you because your address was used on a pa=

ge related to meeting new people.=0A=

=0A=


;font-size:11px;color:#8f8a82;line-height:1.5;">=0A=

If these messages are not relevant for you, you can stop receiving=

similar emails using your mailbox options or by removing this message from=

your lists.=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=



------=_NextPart_000_5EF8_643A194C.7294B4A3--

Dating phish from Microsoft outlook Part 3



0.0 T_PDS_PRO_TLD .pro TLD

[URI: xelora.pro (pro)]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[angelesein65m6(at)hotmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[angelesein65m6(at)hotmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[angelesein65m6(at)hotmail.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.66.61 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.66.61 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} You can look first, decide later



------=_NextPart_000_5EF8_643A194C.7294B4A3

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Personal note



A better way to meet someone online



This is a platform for people who prefer real conversations instead of end=

less swiping and empty profiles. Messages matter more than noise, and takin=

g time to read and reply is normal here. Many members are simply looking fo=

r honest interaction with women who are open to meeting someone new.



Take a look inside



There is no commitment required. You can browse profiles, read how people =

introduce themselves, and decide for yourself if it matches what you=E2=80=

=99re looking for. If it doesn=E2=80=99t, you can leave without creating an=

ything or changing your routine.



What members appreciate about this platform:



Profiles are reviewed: New sign-ups are checked to reduce fake or low-effo=

rt accounts.

International community: Women from different backgrounds who are open to =

meaningful connections.

Direct conversations: No public feeds or comment sections, just one-to-one=

messaging.

Simple setup: You can start with a short description and add more later if=

you want.

Message-focused: The platform is built around writing and replying, not li=

kes or quick reactions.

A more straightforward dating experience



Online dating doesn=E2=80=99t have to feel confusing or repetitive. Here, =

the focus is on clear communication and mutual interest. You decide who to =

write to, when to reply, and how much you want to share at each step.



Some members are looking for something serious, others enjoy meeting someo=

ne new and seeing where it leads. In most cases, it starts the same way: a =

normal message and a reply that feels natural.



What members mention most often



=E2=80=9CIt feels more genuine. People actually reply and take the time to=

write.=E2=80=9D =E2=80=93 M, 39



=E2=80=9CEasy to use, no pressure, and conversations feel more real.=E2=80=

=9D =E2=80=93 D, 44



=E2=80=9CI like that I can log in when it suits me and reply properly.=E2=

=80=9D =E2=80=93 J, 36



This message was sent to you because your address was used on a page relat=

ed to meeting new people.



If these messages are not relevant for you, you can stop receiving similar=

emails using your mailbox options or by removing this message from your li=

sts.



=



------=_NextPart_000_5EF8_643A194C.7294B4A3

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



=

=0A=


>=0A=

=0A=

=0A=

=0A=

=0A=

=20

=20

=20

=0A=


nd-color:#ffffff;border-radius:18px;border:1px solid #e3dfd6;" width=3D"620=

">=0A=

=0A=

=0A=

=20

=20

=20

=0A=


;font-size:12px;color:#9b958a;text-align:center;letter-spacing:1px;text-tra=

nsform:uppercase;">=0A=

Personal note=0A=

=0A=


f;font-size:24px;line-height:1.3;color:#4a443b;font-weight:bold;text-align:=

center;">=0A=

A better way to meet someone online=0A=

=0A=


f;font-size:16px;line-height:1.6;color:#5f594f;text-align:center;">=0A=

This is a platform for people who prefer real conversations instea=

d of endless swiping and empty profiles. Messages matter more than noise, a=

nd taking time to read and reply is normal here. Many members are simply lo=

oking for honest interaction with women who are open to meeting someone new=

.=0A=

=0A=

Dating phish from Microsoft outlook Part 2



=?utf-8?B?ejkvVmU5NHhGODJqZXdpUGVBclVrbkZ3eFFkOVA5cXB0NE9adUgrQmVodzNm?=

=?utf-8?B?N1U4eCtGRk15Q25QOTYrd2FBS1p5ZU55c0FVQ1ByRlRPUllXaFA1MUp1czlV?=

=?utf-8?B?ckNGU1dEZkRBM0VsYjdPYnY2czZXbjhDUmJKWlcrUXRxM293Ym55a0srNEcw?=

=?utf-8?B?Y3QrRUQyRzBSRVFCN05LR2o5OFZZb2w1eDk0TG4xeG5Mb1ZsemhlcC8zRU0y?=

=?utf-8?B?RGc2TW5zMHc1Wlc2MzQ0aDM0MUh3Ty9rODFNTitheGg1TVFTRmNJSElSNXZy?=

=?utf-8?B?QWEvcXBGNFlGcFJLZGtWOEtGMGhpYmIrSWxqYXZNRmVvZzdZY0lHL3BUT29V?=

=?utf-8?B?dU9wZlMwWVFvaFBXSHNmTGxjSmowRFk0bkh5aU85bHMwWUdRVFJoeWJ3TU94?=

=?utf-8?B?Nlh5bGZmdDVrY3NJZmx3c0FjM2phbVQzclNURzlzM0E0WWIxR1ZSSGRBTDdU?=

=?utf-8?B?dU9TU2o0YzVwM05IaEt6UEVzU1g5anVGYm9ROFNiVWpOVGdiWktGbmNGVkJj?=

=?utf-8?B?Rk5meFg2N3ZoL1lBVUp0aDQwdUtVem9iZFRMMitZZmVXMUsyMVZ0dFg0R1VW?=

=?utf-8?B?S0p0SDFIMmY3aVpHQzF0a3kycmpVS0RTanlZbVFLUE0yZmFqTDVmZEFZNXZI?=

=?utf-8?B?RkszYVFpalk0QmE5UTFSaVNaZDd0N09aWm9JVE80WkhhRVg2MXJLdCtkSWg1?=

=?utf-8?B?d0NXKzhFNFArQ2ZDSE5pazYwYitXSS82eW0vVG9ITG5BM25UQmZFUHE3dUE2?=

=?utf-8?B?Wjl1aWhwVkdaZ25LOUlCa3dSSFpwYVh6dFlTSkRValllU21FSmF6WndqNmNE?=

=?utf-8?B?bDFqYkh3Y0JxdDgyejBVaEpWZVN2WkF6ejBHMDRLVXFxWnlVaWNuckpqVzRO?=

=?utf-8?B?NGxHZmYzQUQ0YlV1QW5xS0ZSWnRtcmM5OHZ0QUtnTjM4YUhBQkxFY1pyVXhN?=

=?utf-8?B?aURGRnh0aEEzV1BZb3pTTlFaTU1vMG5VeUQyWnMvM1VCSEVaRU04UXpINlhn?=

=?utf-8?B?eHdOemllSytQUE53NXRlSG5aWElIbFprVzZYdkErblNEVThPT1djTTBxSDl3?=

=?utf-8?Q?kqGQ=3D?=

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-7141d.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 3dade4d9-2ff8-438a-cffa-08de444c0db8

X-MS-Exchange-CrossTenant-AuthSource: TYZPR06MB4223.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Dec 2025 06:57:37.7161

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR06MB7310

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Personal note A better way to meet someone online This is

a platform for people who prefer real conversations instead of endless swiping

and empty profiles. Messages matter more than noise, and taking time to read

and reply is normal here. Many memb [...]



Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[2603:1096:400:21:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:21:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:21:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:21:0:0:0:5 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:21:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:21:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:21:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:21:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:21:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:21:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:21:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:21:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: xelora.pro]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: xelora.pro]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.66.61 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.66.61 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: xelora.pro]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.66.61 listed in wl.mailspike.net]

Dating phish from Microsoft otulook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Dec 2025 08:19:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ9aC-00000000O5W-1mkv

for dave@doctor.nl2k.ab.ca;

Fri, 26 Dec 2025 08:18:24 -0700

Resent-From: The Doctor

Resent-Date: Fri, 26 Dec 2025 08:18:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012061.outbound.protection.outlook.com ([52.103.66.61]:38806 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ1nD-00000000J66-3E9E

for doctor@doctor.nl2k.ab.ca;

Thu, 25 Dec 2025 23:59:29 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Blltmrou39RuWswVDjIF6VgbYpx7Qj01j0dajnCGx3MhLAmXhf06D5AjAActMF0OOVPw0RzLFldIhAIuxkrbqD+I3aymKZLHJtMy11v1gdlySnfUZqEJFc5Q7n/PK/bapH/9BrEcvI9sWCPS1aj0HHmAWRnkChfqZbIdFrbTN+5PZ1gWVN6V0U7P9gsvwMZ6yA+aZOWOgekAiszGwoABEgdLuqfN6EWEVqFSJaSeAxCunXzUlaEroyRJjv74VgpPB0GCMFKhVF45EQiFCtqfFPd4/DWDxi2ILCCKhT5cT8DWVN9/goJ+G/SUUG7TQCXvG8uFQSN3zsw07RG9czUz/g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=/v0Be6r65iqItV8fYjFBMKH+/fQvUUVg6Pz0BukbpqA=;

b=qMSQLnbwmf2S+3vMqnEnigrdRd1W6k8CP2Yjjl91EEGjNirSggpwXd/dH6OZTUNUlKNtyR8S8rkicyWdtjZZkgReuoK2R2hXN9Vf5qGVQ3i3ZI3zIMeuN1bOd7gj9QwK6BUdhFXh9iagz5lc5xbSfdeO48g6VdhYsUrZ2vFQsAcBo0JU3C+cEo8FjUjFbdLFZWxw0Z6nh5ydck0m3qAkIQFfw5hF8Ic5RIeWZPPi0ixjuhDQx5l3RJTMBSccCR9juPYIbJPtKAco2vFsNfBAwAnT8584y7kzX4cukDclOjS4GOknAcsgZZ5N5+csaoMiwX6RH7KFpUypmNZXFxuzNw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=/v0Be6r65iqItV8fYjFBMKH+/fQvUUVg6Pz0BukbpqA=;

b=Ny06z0xgbGLhIRYkjdEBtRs7hlBtRAIqsnS9kMJED9gJyI/5VRibQgQ4YoEkfT6zkcB7G0k19/YJvgpFOj8R5bRF3tNvB8Kn+sf65YR9aSNg+MtS2xFGIKAlWRVYYrWo+2nwSGMNgtSgCWoedvQ+SvH9tgrVYrgm1DGBt5+nhgTuhQvPi35SOndjsC4FHBwmFkxuKrrHO/NCFZmQNnSg8/JEbwD3Sa9ONdRdNGRwYtGBeaD0JYanv2xpbplhAe5AMRy7FhbLNZFXjAtO4AB6Z47B5SjKu2ImB0Zx8EAzHN2+KN3T3Nfn8i97n0mEqh/Ek8WnaVCh+kX2EJMbU0c8mA==

Received: from TYZPR06MB4223.apcprd06.prod.outlook.com (2603:1096:400:21::5)

by SEZPR06MB7310.apcprd06.prod.outlook.com (2603:1096:101:256::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9456.11; Fri, 26 Dec

2025 06:57:38 +0000

Received: from TYZPR06MB4223.apcprd06.prod.outlook.com

([fe80::54f8:f27a:75ec:ec89]) by TYZPR06MB4223.apcprd06.prod.outlook.com

([fe80::54f8:f27a:75ec:ec89%4]) with mapi id 15.20.9456.008; Fri, 26 Dec 2025

06:57:38 +0000

From: "angelesein65m6@hotmail.com"

Subject: You can look first, decide later

Reply-To: "angelesein65m6@hotmail.com"

X-Mailer: Evolution

Date: Fri, 26 Dec 2025 06:57:32 +0000

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_5EF8_643A194C.7294B4A3"

To: Undisclosed recipients:;

X-ClientProxiedBy: BL1P221CA0003.NAMP221.PROD.OUTLOOK.COM

(2603:10b6:208:2c5::9) To TYZPR06MB4223.apcprd06.prod.outlook.com

(2603:1096:400:21::5)

X-Microsoft-Original-Message-ID: <1.8c25fc03f2e015d3c8d9@PEBBLEH-GSFPC37>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: TYZPR06MB4223:EE_|SEZPR06MB7310:EE_

X-MS-Office365-Filtering-Correlation-Id: 3dade4d9-2ff8-438a-cffa-08de444c0db8

X-Microsoft-Antispam:

BCL:0;ARA:14566002|5072599009|8060799015|39105399006|23021999003|461199028|12121999013|3025599003|41001999006|19110799012|12050799012|15080799012|20031999003|9400799043|3412199025|440099028|10035399007|40105399003|41105399003|39145399003|34005399003;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?cWdwZXRUa0ZNL25IL1RUaXFJYUxwbTJuN0VST0x1RmtnL3ZUSUlodEs1ME5W?=

=?utf-8?B?T0pnMjRhRWZ1elUyMHpZT24yOEplU0hiUzdkdUx1WCtiaEtmTjllUDVYcm1h?=

=?utf-8?B?QnY5SnhNNDNyNlhmZWhMSGQ4K2FXdk94UHRFQVViaS9tMGs0VjVxeXNyVzdk?=

=?utf-8?B?SGVpdmJ6Qnl0aFNaOUx6S3ZXQmt1Zjlqc1I2SjNnVEVhdzlKYzJWTytLbFNQ?=

=?utf-8?B?SG1zRnNHcHJTeVVHN25uTkI5RTJuNmswWGlRQk1NOXJrcGRLbEliNkJOUTBa?=

=?utf-8?B?b25xUnJSTDErSEtmNTZENWpHY3FHN0ZHSnNOS0VWOE5jdGV4NUpKM2ZUNk1r?=

=?utf-8?B?TGY3eXMrdVh1UjlWUkEyOWNxUXJUeExwYzhvUSszMkRMWlZaQTdMRWJVTS9t?=

=?utf-8?B?M0duaW5LUUR6WUVlaENOVFZVeHdWNEQ2QkJJT2lXdmtBTC9ySWFrNE5FZDZ1?=

=?utf-8?B?M2w3K1NKeUlIU0VIcCtHcm1PUFk4MkF3ZFk4WHdCVWdVZkJ4SGdKOGhCbXgv?=

=?utf-8?B?eEk5WitKcW9yVEwvZ2hFTUFSTHl5YnJSaGRxZmZ0WFhROVhjRU1GL0FNQUda?=

=?utf-8?B?SVYxR0hVOEszWW00YTFsM2FsSWVMcEFPcmFlYzZEMmFRUVhkSmZVLzdocFg4?=

=?utf-8?B?Y1M4aGpsT01pcFlPR2ZTaFRiYzNHci9kVW5LNHNyMC8wRTUrdjh0UzU4cGRq?=

=?utf-8?B?YUdpeDJURjhKdXRadkxYaGs4TXptOWNXUlJyVmxSd2JSaFp0UkU4aDdzN3g5?=

=?utf-8?B?ajRRdFFKQ3loUHAzYUkwbDJtcTlaZWV5bWNQekdjamE0WXhhTWJqTmFrTERC?=

=?utf-8?B?OWd5VDFlVWMwTE5yOVc0NkdSbm02Z2NHc2tZNnljQXF1NjhLUG9RWGdDREZX?=

=?utf-8?B?bHVaOE8rSkQ2Qzd3ZHVYN0JQRGVDNEZBTi9oYng3SEFtOWhCdGE1YTk4RzlY?=

=?utf-8?B?cm5IbmJnOGhUMkRield6WnFxSWlUWVdZRi9kcVJSSTFER21PaC92K3gyRy9P?=

=?utf-8?B?T2YvSjQ0eEFWajJkTjArdk0yaGY1bnZnRmFidnYwSDh3L2VvYllmbW1Gc3NP?=

=?utf-8?B?UmdzRkJLZTdBbHlIQUI4Q2ZJcHFSTGhrTGZzNGY1dlRleEtMYnQ5K1NnRmFr?=

=?utf-8?B?RHl1MlNFWDFGdHorQWE1dGt4MkJyeXJGQWpqY0R2R1pmcW1RL2JycUMyNXY1?=

=?utf-8?B?U3BldzZxTzRLNHE0dEZCRHVZOEpEZk43aWlRUm9rYmdXSHpsZm5WS2tJUGZ3?=

=?utf-8?B?RTR0bUZja1RwcFlrZ2N5V2hMUzl3c0RqOHdJTGRIVkpvZ0xMWFdOSkZCMnlC?=

=?utf-8?B?aGZYZHZmL2ZQdVlkb2o5bTJ6bE9KL1A1U2Q4eFhUU0ttejRVMzB2ZDgwV1JN?=

=?utf-8?B?ZFc2cXRqazRaZndDUzFoczd4NW1Wc1J2OWdXdHpuK3NWeGlXZVRaUzMzanlX?=

=?utf-8?B?WWNLMDdBdVBhNjBpY0M2cmcxZHVFcjlOeUo0V0RnbUVmYWJxb2dudDJpb2NU?=

=?utf-8?B?U1NHSzQ1SDJZeTZjOERBSFhBVXhubjEzb3NaM3BIM1FobXZUOUNaVkpndjdx?=

=?utf-8?B?L0VJbTZmL3NudmZ2R0hYcHFpUHhyZHhISUZyYkxjdDlqRmpTUllFZkRNdU1K?=

=?utf-8?B?QzlyVHE4MXdsT2t6bTFXbWFwenJIUzVSOHZQWlcxeTRxSTJhQ1Z2UUJSbTNv?=

=?utf-8?B?YVkrQm5HeFdvbFdxV0RjMitmZzhlVUg2VFQzTG0wMTZuQ2pBdEs3RnVDdU9u?=

=?utf-8?B?MVZSdjJIWUhzOXBWSEZOaDRTY3FjUjZlTzNEcmQ2bjAyRUlGd0gwaWJMdjVn?=

=?utf-8?B?ZFZFUTVKQ3hGTmozZEhwbEtSMVlBdlBReXJYSTYyWG1vNUpzbGJ1am5RMTZi?=

=?utf-8?B?YmdoenRHTGpzWWxnS05IZmZxL09MYzNaZ0J0Ny9abHJaRlVhVmt6emIvSTBD?=

=?utf-8?B?Rm0yc1J5S1M3V2oyQ3dta3p4QkJOS0FZS2hnd0R3dnlTWE11cmhsR0lLbmEw?=

=?utf-8?B?eTRUSHU3YUVnVVUvNGhTdHN0YnpPM1hSUmE3cVJnVFExdGE4VTk2ZUJuM0Nu?=

=?utf-8?B?dUd6RFVaQnpianRmZ3pSSHUxUGVXQnYvWDVudUhEVDhkRjRmSkt1SHZlUTJo?=

=?utf-8?B?TDdCbE9tODZKZndIZjJBYjlGL0w5Z1hiNm0xTG11WllIYzR5SENSODgyVmFl?=

=?utf-8?B?NFpOSHk5SStMbUp6blZTNGdXYnRSMmF3ZVZ2aTMrVHRVYkQwa1d0VEZXRWdF?=

=?utf-8?B?UEpPaHQ3K3QyVjNQdUlRL2RsUUg1WTN0amhoNUNocnQ1S0V1b2I1WWtlNXMx?=

=?utf-8?B?bW9wRXN5ZmhmbnF0czh5U0ZKMXhoSGgvZThLMmpaNk9lUzh4aENiMkc4LzBE?=

=?utf-8?B?bXJFRkVmUHlrRzliOUxRa0ZsK1hxRnR5MkxRcHRnWTVmMHo0M1pBa3d3TmQ1?=

=?utf-8?B?NmhucjdxV1hSa2cvdjFWTUtOb3JXYVhKUGZrOFpxWEVTcS96NEFHbXFaNTBG?=

=?utf-8?B?Y3crVG5kdG1mRmxwS2UzZWM3L0JDSXQvcUtQV0NuWE92RC9jNGhPZHNuQmJE?=

=?utf-8?Q?wt3oGZoeA=3D?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?bHp3Q0RqeDVUU05ISkI3emsvWUxsWmxsMEk5TFljV0xpMHFPSkhFMFVWNlE1?=

=?utf-8?B?SFlmb1IydHVNU2FCY3hNTTVxQzErZGFOTDBqc2QvVHV5Q1ZXMEVKcVlFem1v?=

=?utf-8?B?QW5tYWZZcjYrMzVSTHY1V1JGTWRrNTVPeEJlMFBNVmtpRUJWOW1aZHJ4NEY3?=

=?utf-8?B?eVg2QUo1Wkg3enpMb1UxUU5nVUFud3lFbGVKL0Y1V3o0VG5jNFpBbXlucG90?=

=?utf-8?B?VjlqUkNaR1RCMkRIWTdsazZSbDhuYlE1MjAwUkF2QWxNdU1jdmxuREZnRnJt?=

=?utf-8?B?QW9UTDVjUXhtSjZCQW5KdnJLclpwbUhsNE1ZNHpWZ01xc3RrUUFVUUdrWFF0?=

=?utf-8?B?eUJhVThrc3h3Q3dxRHJSUTRqSVA3SVJBMXJMbnUrSi9Nd3NoSUU1Y1JXTjVV?=

=?utf-8?B?cnNkZHk3ZHBodWl4LzlkU0VsVFRhQlVDcmFaM3c1TFNscmJ1OEFsaUVTeW5F?=

=?utf-8?B?NGs0SzdMKzYvbHZCUTUvL1ljZkRFZW1XRTQ0TW9iREozQlV2VkZzSWhpOWlX?=

=?utf-8?B?aEZkemRnM0JIQ0dPSVc5bU5UTWhpWUwxcXAvWmlVRjNYREdHdzBWL09LclBu?=

=?utf-8?B?UmZmWFNHN08vY0MxN01GMm9nSGxwOHlKVVNqRHlwa3RuVkprSGV2TnFVMHp1?=

=?utf-8?B?YVlvNzZqSUJIMmdReGhZWjMvT2lwZ1JqT0k1emVlMTVXaVB1T0RkSlUzWTZQ?=

=?utf-8?B?Tm1LNGRHSnp3UzFjbnBjL2gxMmJ1NWk3azM2Ulo0aHVEUDZ2bXlUZHg3WmVP?=

=?utf-8?B?SCtzeG1SdEhpQ1ZSV1BLanROU2ozNDh6Sno1N2p3Rm0xWjJCb21CUWxDNWk5?=

=?utf-8?B?S09lOFNlYXBaTkk2VEV4OWZEeCt5MUV6S0FNcU1wS0tvK0x0Q3FJSnRnTCtK?=

=?utf-8?B?cG1jN1FVc1pPbHlWZmtlaEJkMlBkSUxIZVlJemIzS0FwaEI2eXpQU0xjSkRl?=

=?utf-8?B?L0o5MHo4VEcvek9ZTnJaWXhZdHZ1c2hZUEhjMXkvTW5KTWJTTUltaE1LS1FZ?=

Web/SEO/App Spam from Microsoft Outlook Part 2

--_000_OS7P301MB1736B7C68F80603DA8B3D6ADD0B0AOS7P301MB1736JPNP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

I hope you=92re doing well. I=92m following up on my previous email regardi=

ng the SEO and website redesign proposal.

I wanted to see if you=92ve had a chance to review it or if you need any ad=

ditional information from me. I=92d be happy to answer any questions or pro=

vide further details.

Thank you, and I look forward to your feedback.

Best regards,



________________________________

From: Samantara Singh

Sent: Friday, November 21, 2025 9:06 PM

Subject: Fw: Hello



Hi,

I recently came across your website and noticed it=92s not performing well =

on Google =97 there are several issues affecting its visibility and ranking=

.

I specialize in SEO and website optimization, and I can help fix these erro=

rs and bring your site to Google=92s first page, where your potential custo=

mers can actually find you.

If you're interested, directly via WhatsApp at +91 9211383434
/+919211383434> I=92d be happy to send over a quote and pricing details to =

help with this.

Looking forward to connecting with you.



--_000_OS7P301MB1736B7C68F80603DA8B3D6ADD0B0AOS7P301MB1736JPNP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hi,



s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

I hope you=92re doing well. I=92m following up on my previous email regardi=

ng the SEO and website redesign proposal.



s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

I wanted to see if you=92ve had a chance to review it or if you need any ad=

ditional information from me. I=92d be happy to answer any questions or pro=

vide further details.



s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Thank you, and I look forward to your feedback.



s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Best regards,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












yle=3D"font-size:11pt" color=3D"#000000">From: Samantara Singh <S=

amantaraSingh4126@outlook.com>


Sent: Friday, November 21, 2025 9:06 PM


Subject: Fw: Hello


 









family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-=

serif; font-size:12pt; color:rgb(0,0,0)">

Hi,



family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-=

serif; font-size:12pt; color:rgb(0,0,0)">

I recently came across your website and noticed it=92s not performing well =

on Google =97 there are several issues affecting its visibility and ranking=

.



family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-=

serif; font-size:12pt; color:rgb(0,0,0)">

I specialize in SEO and website optimization, and I can help fix these erro=

rs and bring your site to Google=92s first page, where your potential custo=

mers can actually find you.



family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-=

serif; font-size:12pt">

If you're interested, directly via WhatsAp=

p at



_OWAAutoLink" id=3D"OWA148f6af2-296b-b162-14f4-944271297fa5" href=3D"https:=

//wa.me/+919211383434" style=3D"color:blue">+91 9211383434

pan style=3D"color:rgb(0,0,0)"> I=92d be happy to

send over a quote and pricing details to help with this.



family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-=

serif; font-size:12pt; color:rgb(0,0,0)">

Looking forward to connecting with you.










--_000_OS7P301MB1736B7C68F80603DA8B3D6ADD0B0AOS7P301MB1736JPNP_--

Web/SEO/App Spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Dec 2025 23:54:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ1i3-00000000IwI-30Fq

for dave@doctor.nl2k.ab.ca;

Thu, 25 Dec 2025 23:53:59 -0700

Resent-From: The Doctor

Resent-Date: Thu, 25 Dec 2025 23:53:59 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19011027.outbound.protection.outlook.com ([52.103.43.27]:42994 helo=TYVP286CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ14u-00000000HKx-1pue

for sales@nk.ca;

Thu, 25 Dec 2025 23:13:42 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=PbCUa8zO3SIE2O11TZ7of+rycl72EWkeytFBTOftjJobiLUZRtkBZg6dRtqBURKYLYduBs5i5BqCZngPTpta/OjDDoKvNJ8H0O1FhgFs0Cx9m/R6Bmb+klVxU3BcgFRqVN6QC30ChnSQBPtBkFJtLf98uoOo5yCaAb2kakZ2RMYwipXQK/z+yr0rU+KGZBAQR3afvhH516p/9Zc4q/sA/r1w4dbNtUIcXEuSKRhE1pg3BP4rP2SWXOLlu4c8PBVUcvpktQiaWQR7mzxQjmZIuDE/2qwaeDBClTZJ+8L6+CGcpP+xNIglzeYLRy8fADl1nay08wTqEOmppr22VS3Buw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kHXakzdmYv2nFb7k9QNaQxaWORgvs6Dbmov5Y6zyldE=;

b=b0ey2aZorPwHl5UGUCTP/vDobsWyoh8nSzG82S3dk+uEtz6Paj6xl4NFqiSPb0XeaF005xBZrWz6mMkW7RAR+ukMgJX1nyUUpexJ2H69k4EjA4D+MVy5jIi2f7qhLVQdorIbKsZjrJMMvH+RLZpksP+P5nnqPO3XwLHoGeRkGdYf20wUQonfhSbYpNRBKGuhqQ5QuwkzlyDGLMIhzqzj3//9f7n69MrNexUmjeH32R+k9opcKGVO07hcoQw5pMZEs3nOY4Snz8tGNY1rKvKFqdVj7FrhMnRkI7I/pdsWJxuf4+hdLfXaOJ2zDkBC0HYyq/MENcqzL7aRrqH3re08Nw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=kHXakzdmYv2nFb7k9QNaQxaWORgvs6Dbmov5Y6zyldE=;

b=I71cHKaCCTGSPtnMfNrMCzMaZWNDaRUxqo3A2wYZLpSaP+gpFl4f8qor2rd5AQE01QgnYPiKqJz9u41Wp4gvTOZyAy17Ot1PMR5dddcXieqtayjH4HrdEQsJFT6WGWs4r0k+TpCd2QvCWmgDnBqJPSLdgoto/8mY3LkckBvNa3c5OcYLtu9MXnRKEgDGJEpRVw+JpTPWhpqstaMlhYI4ATX/tEx+Dkj5DCPJXVhCMaZ6U0U2faWcbfAgfLfCnxdL+eN79kQ02HBXaipTdU+jY3LVgxjNuzOipTn1QqccR1vDEI2qnwiCEouXVLYDIWriXpSAGn5rT0SocC/vwssQqg==

Received: from OS7P301MB1736.JPNP301.PROD.OUTLOOK.COM (2603:1096:604:43d::16)

by OS9P301MB1670.JPNP301.PROD.OUTLOOK.COM (2603:1096:604:40d::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9456.11; Fri, 26 Dec

2025 06:11:48 +0000

Received: from OS7P301MB1736.JPNP301.PROD.OUTLOOK.COM

([fe80::8e2b:14d0:665f:d75]) by OS7P301MB1736.JPNP301.PROD.OUTLOOK.COM

([fe80::8e2b:14d0:665f:d75%4]) with mapi id 15.20.9456.008; Fri, 26 Dec 2025

06:11:48 +0000

From: Samantara Singh

To: Samantara Singh

Subject: Re: Hello

Thread-Topic: Hello

Thread-Index: AQHb+idWEvK3dLS4Ak6k2bRP3TEcarRSmyOugDhik2+AS2qrJYAn+JWqgDYHhpE=

Date: Fri, 26 Dec 2025 06:11:45 +0000

Message-ID:



References:

























In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OS7P301MB1736:EE_|OS9P301MB1670:EE_

x-ms-office365-filtering-correlation-id: 1c5c9857-2222-46f3-af76-08de4445a591

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|7071999006|20031999003|8062599012|8060799015|19110799012|12050799012|461199028|9400799043|39105399006|15030799006|31061999003|440099028|3412199025|10035399007|31055399003|43065399003|40105399003|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?4ZWdkFriuepDjO4nrTMkhgqmx3Zj+VDpmC7LBW4K3mz+uDtv/kIuQbKP?=

=?Windows-1252?Q?qZAfxuRScrHPE2VcI008BgcRTxEnzcbuT/2SAh/iA/1rjLMwsJFg2Ecz?=

=?Windows-1252?Q?d79y0Un2VsmxgIqr0yVVdhYznWjJld00nD/6brqbqIwuY2OKaDL725Zy?=

=?Windows-1252?Q?V8NQ0TXYGMbgfeDAgGRC2ZIjwUCx6pZaUjduOa5KC4P1nEvrc15syWVp?=

=?Windows-1252?Q?qCi1TrqCBGCsu+MasxlCNFduFAtHz0rAsBd8UtzO8kT+iaBHF1xQEvUt?=

=?Windows-1252?Q?Q4zXWuXP8GId8HcxWYnfm/UFDTua/+wF4isNeLGOwqbU+2uXtxOWFQ7B?=

=?Windows-1252?Q?1ZWE0uCFdBzb3TxJJZoAnAGdnvdE6QNxOs13M/csJeLo+k4EN8GVuuIa?=

=?Windows-1252?Q?FQ4w70zmhY9BGymWr619LH5r5311Lhiz1Jql1u33taKhmXonlA0LtmkQ?=

=?Windows-1252?Q?99d624Jww8646G6qf8whbOX8ziyWkT8uDFciCL/1H5Ql57ehUoKr/05P?=

=?Windows-1252?Q?z1AhAOLN4jT5R1At1JLFiDh9dWn+3mBxUWA86YR0b1DzrgtbnYYnQczs?=

=?Windows-1252?Q?40oc9RY88w1Yj3aryRd8EYJreqEif22uNcrqd1J1PUNCxT1BnOYqKFCI?=

=?Windows-1252?Q?gfNx9ujLDDGhui/yn0+Gxr8pyphJ9/XBHLWaAwspM3xV612WkofFbH/G?=

=?Windows-1252?Q?UT09DeJWdkLI5JZiCi9/kIP7vn3dcxOoh9QbvinsCbF/tfY71PfF9kTX?=

=?Windows-1252?Q?A+i3UKa51lctxdBXnrQ+hWp0mdMs3Z85fOE8rKj39tm3YRIFywUgafSX?=

=?Windows-1252?Q?uhq9e11WUyN+b+VfCn4OaA5u3OXcj8YKdQo/oXzAWpUGfFM6svkHWA4p?=

=?Windows-1252?Q?5//iOx9LeTzcoLO7XNA3bwlHsLu0ScYkeJTbgmAxv1AtszFdvFfRGI68?=

=?Windows-1252?Q?ci9dl04Hg6DRfmSBYoGOgrgJYaBuysPibnEuvXaQAouSypBhyFr8lA0I?=

=?Windows-1252?Q?+xvWqtUKz5WMeFP/9PxRpYPmn7h13aT/uUQ1nnIH80+cP4o9UzfMiAMy?=

=?Windows-1252?Q?vmqNIeB5Z0GnPEjF3ueb2XeP8r8Q+YBSW7x2zfnzrbGQXTJ+MA2mfCBV?=

=?Windows-1252?Q?OHO1WM6vhhzfjscZ68kyu0Df1hL6aU75Bz1xhwoDK9ek82FbADHIosQY?=

=?Windows-1252?Q?L9K8QQslDRn5ijA2+YFM0QivM6H4KiYDMX/l/gr7oB4JSHwkOKHMW1Ei?=

=?Windows-1252?Q?M5vk9+hc3LRXLFqik5m+ndZiHoiX3Vi9Yhf1pV5GSNYD7DKXJhx6ANw/?=

=?Windows-1252?Q?1kbvv1vdYXbdTGF2NKGcF8cqE2CJU7F/CO0Qd/jky1k/7sUEr9LoSine?=

=?Windows-1252?Q?WXZqH7iuI0GQIp1Z4ey4m68LICORAIKJUXklGghykyX5IZLXGfCmusZ6?=

=?Windows-1252?Q?Y5PQtVgqH0mco+sr+Sz2HY/nswMcS6x6s0zV6cU0uEisXtHTtg9mw3Q8?=

=?Windows-1252?Q?uku0Aqx0KT1buVrtTijQUK9MPAfceukaTn5SiICLB5TLfWISiP0+QDJl?=

=?Windows-1252?Q?r+R7n2GM99SV8rcQ21IbkrGaXtEaLIOmeg1MzrcYnE2IBn4D9mWj8WEV?=

=?Windows-1252?Q?HIA=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?2d6lKKnRmcsQQvRslzCjPnywArlqgeeq+5af63eevBoPB2p9zC2QcTRu?=

=?Windows-1252?Q?71I7zzHnOws4+DE1D8udPbpeWZJWIXNdBsDiQNT6lALVcEId3iBes7oC?=

=?Windows-1252?Q?KlCinI0Habvv6QqPA782kAb+rQBcna+YciukSN+ENPprsJCHrWxC/bTu?=

=?Windows-1252?Q?0tBfKJqHzeljrmel9amSDLHO8P2/bgKDUVSBZEVMxPAaBqk/cG4On4Bm?=

=?Windows-1252?Q?UB+oNauEPwlR9ro1cyA+gSUqSvurdlHQyasGMgYmRgJH5UU2uo3XlRkr?=

=?Windows-1252?Q?AotKUpItwDHOPwRhIeCpXeT6+hyxMaR78FoHO09tW6SQ+eDWs+oF4nT0?=

=?Windows-1252?Q?zkZPS4a9WNj1XTdCiFnP1rStiJcUmnwt84PMk8EGBz0PuwON4jYa5c/X?=

=?Windows-1252?Q?l+Bx5QYtug7YNKBXDU0SSAlo5Bn2OBlqEprBrPp7M6C8BcBPHQKO+gyy?=

=?Windows-1252?Q?asTPBMao5HEGOqOjFrrT3ppa4ssjhnN34ZxRNGqQgp5o+KuwGwT/kBeH?=

=?Windows-1252?Q?hX2G6F+rxxJlAkGVuqv7Ws4wZQL1NWTfnxby/cfanyCCkxORqyvT6t6p?=

=?Windows-1252?Q?tBHuSIFnFS3km3KJ4tpFaVE8r8iW3C5UFPqIZKYoge0OUIZcEK5V6epr?=

=?Windows-1252?Q?RCsiOiRWyhENb0+3llK1L+TiTfMFx0BJrm6JWaq9HSVPc6VmYODZlSOB?=

=?Windows-1252?Q?7THKQ9xsKTySUYV+aFUtGqQn8WIokPz4qrEpb43tEKBUDCcZnm+w7JEe?=

=?Windows-1252?Q?NvZJYK1Ob72ojwt4ybQ4ibafh81DuaOczoxIE6+Ze/nhGC42YmBBFtUu?=

=?Windows-1252?Q?9g4jScnjIsL/RVsWbhW5sEXC5V0V20vZrEB80jDPNcOEUWPzyAXc2Kqc?=

=?Windows-1252?Q?G34MaiHmjpu7ZkFpxQHhtSBa7shIXgqO3rd7SgVtVGOjOEwd3V1xfifB?=

=?Windows-1252?Q?K3NGqIxSiarkqTHx3/hqn104aFAncPAVW9AWrrNrha+3P4CmPquMxEon?=

=?Windows-1252?Q?WNDDTM2SFa94A7NLSmK779Yvok9yyG/FYV4rHotqQm361RCNc2xADtCC?=

=?Windows-1252?Q?+LbI5+iih/f0VAyQyfSP2tkkn8V5sfa1qlQLQmkiVfKzLzLbYDwq8o5D?=

=?Windows-1252?Q?DGl77F0vcbjQuveGyxIsImeHi1nl/PpNcOgMT7WbG9hhs72C6xAzfe1P?=

=?Windows-1252?Q?1JDdcpvSHPTak0MabEaLy1EyEPttb516mloNCsixuiXR/NmG2lh0dBP7?=

=?Windows-1252?Q?OTTiTwYXcoIIPYC+xzhBX10Zt6UwsCnXZ/Tvl9/A6/cIeQTSMtd7fWVr?=

=?Windows-1252?Q?RahntcYvKc8HXCYYIr1inz0+10wnmDPQHdY5iT7yhfuBozNS1IgMOaDl?=

=?Windows-1252?Q?7INaithAXH23VpazAP96UkdyUjlnt9jFYka2tW/40vb8VVSyI1cewK+W?=

=?Windows-1252?Q?Myce2ZhKbgPq0q4DBOfvptM0FYSkEvtMtvMEXxzY95YATW01iDJRQ/bb?=

=?Windows-1252?Q?ihM+ziXGv5mb/nKtIX5P68l4rRJnKu2xxDYzb1N8gI6KL4OGHTfMI26+?=

=?Windows-1252?Q?GX40s2jugYgBLzbxVlmFeKEmM9ccLIC32VHefg=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_OS7P301MB1736B7C68F80603DA8B3D6ADD0B0AOS7P301MB1736JPNP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OS7P301MB1736.JPNP301.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 1c5c9857-2222-46f3-af76-08de4445a591

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Dec 2025 06:11:45.3900

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: OS9P301MB1670

Harrod's phish part 3


ole=3D"presentation" width=3D"100%">=20

=20

=20

=20

=20

=20


0px ;">=20


0" role=3D"presentation" style=3D"" width=3D"100%">=20

=20

=20

=20

=20

=20

=20

=20

=20


53-df27-482b-83b4-6abe0b86bab9 mj-text" style=3D"background:transparent;fon=

t-size:0px;padding:10px 15px 10px 15px;word-break:break-word;">=20


ma,Helvetica,Arial,sans-serif;font-size:13px;font-weight:normal;line-height=

:1.6;text-align:left;color:#000000;">=20

=20


a41a-8c30-483f-bb88-265519fbce65 eb-image-full-width max-width-100 eb-image=

" style=3D"background:transparent;font-size:0px;padding:0px 0px 0px 0px;wor=

d-break:break-word;">=20


=3D"0" role=3D"presentation" style=3D"min-width:100%;max-width:100%;width:6=

80px;border-collapse:collapse;border-spacing:0px;width:100%;" class=3D"mj-f=

ull-width-mobile">=20

=20

=20

=20

=20

=20


th-mobile">
nurl?lid=3D6704241222352896&nid=3D6423506557075456&" target=3D"_blank" styl=

e=3D"color: #2d4332; text-decoration: underline;" data-eblinkid=3D"67042412=

22352896"> 3D""
ent/image/fa8954d0-65b0-423e-9d3b-1fc917ab0ceb" style=3D"border:0px solid #=

3498DB;border-radius:0px;display:block;outline:none;text-decoration:none;he=

ight:auto;min-width:100%;width:100%;max-width:100%;font-size:13px;max-width=

:100%;box-sizing: border-box;width:100%;" width=3D"680" height=3D"auto" /> =

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20


role=3D"presentation" style=3D"width:100%;">=20

=20

=20

=20

=20

=20

=20

=20

=20


=3D"0" role=3D"presentation" style=3D"width:100%;">=20

=20

=20

=20

=20

=20


;text-align:center;">=20

=20


ection mjml-section-id1614841174008RAND3404" style=3D"background:transparen=

t;background-color:transparent;margin:0px auto;max-width:700px;">=20


cing=3D"0" role=3D"presentation" style=3D"background:transparent;background=

-color:transparent;width:100%;">=20

=20

=20

=20

=20

=20


0px 10px;text-align:center;">=20

=20


column-undefined" style=3D"font-size:0px;text-align:left;direction:ltr;disp=

lay:inline-block;vertical-align:top;width:100%;">=20


ole=3D"presentation" width=3D"100%">=20

=20

=20

=20

=20

=20


x ;">=20


0" role=3D"presentation" style=3D"" width=3D"100%">=20

=20

=20

=20

=20

=20


176767RAND30514 mj-text" style=3D"background:transparent;font-size:0px;padd=

ing:5px 15px 5px 15px;word-break:break-word;">=20


ma,Helvetica,Arial,sans-serif;font-size:13px;font-weight:normal;line-height=

:1.6;text-align:left;color:#000000;">=20


y;margin: 0px; word-break: break-word; line-height: 1.6; text-align: center=

;">
2px;">Don't want to get emails like this?
style=3D"color: #2d4332; mso-line-height-rule: exactly; text-decoration: no=

ne;" href=3D"http://#" target=3D"_blank" rel=3D"noopener">Unsubscribe
f=

rom our emails

=20

=20

=20

=20

=20

=20

=20

=20

=20





--0000000000000e55ea0646d3e074--

Harrod's phish part 2

--0000000000000e55ea0646d3e074

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



Q29uZ3JhdHVsYXRpb25zLCBBIGN1cmF0ZWQgb3Bwb3J0dW5pdHksIHJlc2VydmVkIGV4Y2x1c2l2

ZWx5IGZvciB5b3Ug8J+OgQ0KDQoNCg0KVmlldyB0aGUgd2ViIHZlcnNpb24gaWYgdGhpcyBlbWFp

bCBpc24ndCBkaXNwbGF5aW5nIHdlbGwuDQoNCg0KDQoNCg0KDQpEb24ndCB3YW50IHRvIGdldCBl

bWFpbHMgbGlrZSB0aGlzPyBVbnN1YnNjcmliZSBmcm9tIG91ciBlbWFpbHMNCg0KDQoNCg0K

--0000000000000e55ea0646d3e074

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">

=20

=20

=20

=20

=20


/>=20


1" />=20

=20

=20

=20

=20


i,200,200i,300,300i,400,400i,500,500i,700,700i,900,900i|Roboto:100,100i,200=

,200i,300,300i,400,400i,500,500i,700,700i,900,900i&display=3Dswap" rel=

=3D"stylesheet" type=3D"text/css" />=20


0,700" rel=3D"stylesheet" type=3D"text/css" />=20

=20

=20

=20

=20

=20

=20

=20

=20


rmal; background-color: #ffffff;" class=3D" eb-drag-and-drop-builder">=20


ffffff; line-height: 1px;max-height: 0px; max-width: 0px; opacity: 0; overf=

low: hidden;mso-hide: all; visibility: hidden;">

Congratulations, A curated opportunity, reserved exclusively for you =F0=9F=

=8E=81
=20

=20


role=3D"presentation" style=3D"width:100%;">=20

=20

=20

=20

=20

=20


=3D"0" role=3D"presentation" style=3D"width:100%;">=20

=20

=20


;text-align:center;">=20

=20


-eb_bda5cd93-a797-4b86-94b7-0277627795c0" style=3D"background:#ffffff;backg=

round-color:#ffffff;margin:0px auto;max-width:700px;">=20


cing=3D"0" role=3D"presentation" style=3D"background:#ffffff;background-col=

or:#ffffff;width:100%;">=20

=20

=20


10px 10px;text-align:center;">=20

=20


column-b09accf2-56a0-2305-7be0-c87706a08162" style=3D"font-size:0px;text-al=

ign:left;direction:ltr;display:inline-block;vertical-align:middle;width:100=

%;">=20

Harrod's phish part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Dec 2025 23:02:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ0tc-00000000GZL-3zrh

for dave@doctor.nl2k.ab.ca;

Thu, 25 Dec 2025 23:01:52 -0700

Resent-From: The Doctor

Resent-Date: Thu, 25 Dec 2025 23:01:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f72.google.com ([209.85.217.72]:49262)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vZ04Y-00000000Dp6-0eGf

for support@nk.ca;

Thu, 25 Dec 2025 22:09:13 -0700

Received: by mail-vs1-f72.google.com with SMTP id ada2fe7eead31-5e5632c20easo4398146137.2

for ; Thu, 25 Dec 2025 21:07:57 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1766725671; x=1767330471; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=PvQyleDSh8eQGU84UzGTdOTr/TidZxFu7eRYJnh90Lg=;

b=P/2CmzS1s+ZCPvvDZL5b4ZgUJ/KIHFuFjRA51UDM1bog+jEBAkj3KN8Sg9L/nlXdp0

J0CqiLMTury4HJBZFswraJmQCB9cv/DiwplVdo0DsBxnJ37W/IXLRJ3PjbZYw3nnTAQ8

xN+0e5+HSus2ZTpCvsUdXDQJbRylfJYWYT80dT8aleTPD6xdQLp8oXPZ8Fw0K7jzhFix

JrDPrIWTbhCvovE8YEdFTx14xmfppBuUMuLHyTrrnxbkhfKpfiSjd30NbJI/aZtHiqyG

Tn8tq4XsThuOagCXsbevsU7o1aJO00BipCz0NyFee4PuJ3lb03CoKjoKxPCTrsbEDUAH

AWrQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1766725671; x=1767330471;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=PvQyleDSh8eQGU84UzGTdOTr/TidZxFu7eRYJnh90Lg=;

b=sM8ecXuPG37E8RUB78NyazXDxzeS8HCMZnXxjxwr6bZY+XZ7hWjFThs0osSUk/jpwC

FshcoBYaYwKCK/OHZcyiEvj/lDWzhb4Y8n3J7lFJPZt3XnrxeoHRFPpk8/kHmpWfg4Vz

HTLrOZ67PY5hPTqdjz6ME/xqhgF8a2aJDuYs13r9NtrLF62H+JrNRjm6zD2BCITP1crC

Wutw/yOFzHvKlGqz7SVB/WK9vwCCc4gpMEp9J/7luK5wg9LAf3seEFOs+73XLOgz7RGi

rAqof5VuJgZtBV1Y+8kr2IUB3YKFXOeJb0Iuaa1W4saXHdtXpgYj2S29e8Jsx58LxKyH

gmhA==

X-Gm-Message-State: AOJu0YzTpDMYrqo14l1jDAwk3PdW3ztwM5jBaObU2GPTrlc+t0ZLiJ/t

5CpRpuPzYNgk3Ajw4VFhMDkXXR4yYLdEcVLKBUxUUMle2olqUWJv786Q4NLp088nuJvSZv4yGDG

ETVHk9M5qug==

X-Google-Smtp-Source: AGHT+IHIiF4AijAsBxxxjlO/I8ejafN70LPPDKIx6jsTNjvhThDdBtLw7tU71lGraufuN2lkl1tHXS3lTnUqDMQ=

MIME-Version: 1.0

X-Received: by 2002:a05:6102:162c:b0:5db:da81:2541 with SMTP id

ada2fe7eead31-5eb1a687855mr6375222137.12.1766725671343; Thu, 25 Dec 2025

21:07:51 -0800 (PST)

Message-ID: <0000000000000e55f30646d3e077@google.com>

Date: Fri, 26 Dec 2025 05:07:51 +0000

Subject: =?UTF-8?Q?An_Exclusive_Harrods_Invitation_Awaits_=E2=9C=A8_Reserved_?=

=?UTF-8?Q?Only_for_You?=

From: Harrods VIP Services

To: support@nk.ca

Content-Type: multipart/alternative; boundary="0000000000000e55ea0646d3e074"

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Congratulations, A curated opportunity, reserved exclusively

for you 🎁 View the web version if this email isn't displaying well. Don't

want to get emails like this? Unsubscribe from our emails



Content analysis details: (8.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

[209.85.217.72 listed in dnsbl.ahbl.org]

[209.85.217.72 listed in dnsbl.ahbl.org]

[209.85.217.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.72 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eblink4.com]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: eblink4.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.72 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

Subject: {SPAM?} =?UTF-8?Q?An_Exclusive_Harrods_Invitation_Awaits_=E2=9C=A8_Reserved_?=

=?UTF-8?Q?Only_for_You?=

DHL Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Dec 2025 20:18:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vYyL1-000000008gV-3EyT

for dave@doctor.nl2k.ab.ca;

Thu, 25 Dec 2025 20:17:59 -0700

Resent-From: The Doctor

Resent-Date: Thu, 25 Dec 2025 20:17:59 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [198.186.131.177] (port=48884 helo=panel.flixnet.to)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vYutF-00000000ONO-3EQB

for webmaster@nk.ca;

Thu, 25 Dec 2025 16:37:14 -0700

Received: by panel.flixnet.to (Postfix, from userid 1009)

id 234562544809C; Thu, 25 Dec 2025 18:36:11 -0500 (EST)

Date: Thu, 25 Dec 2025 23:35:54 +0000

To: webmaster@nk.ca

From: =?UTF-8?B?U1VQUE9SVC4=?=

Subject: =?UTF-8?B?UGFja2FnZSBQZW5kaW5nIERlbGl2ZXJ5ICE=?=

Message-ID: <1d9115bc8a6d3adf6ad09be3f79c0fa3@dood.xbree.tv>

List-Unsubscribe: mailto:bounce313-7zbF6k6zfsFrWlF@dood.xbree.tv?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1d2fd37c51ccc3f12b03acc4851683f67"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--1d2fd37c51ccc3f12b03acc4851683f67

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

















Â



Dear Customer,



Package Pending Delivery



DhI informs you that your shipment N:78951946-DHL



is still waiting for your validation.









What should i do?







In the following link, the online verification must be done in the next 14 day before it expires:











Send My Package



Â



Thank you for your trust



Copyright 2025 © DHL_POST.



Â



Â







--1d2fd37c51ccc3f12b03acc4851683f67

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

















Â





Dear Customer,





Package Pending Delivery





DhI informs you that your shipment N:78951946-DHL





is still waiting for your validation.























What should i do?


In the following link, the online verification must be done in the next 14 day before it expires:







Send My Package





Â





Thank you for your trust





Copyright 2025 © DHL_POST.





Â





Â













--1d2fd37c51ccc3f12b03acc4851683f67--