NetKnow Corporate Blog

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on Thursday, February 26. 2026

Content analysis details: (7.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:405:94:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:94:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:94:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:94:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:94:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:94:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:94:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:94:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.86 listed in dnsbl.ahbl.org]

[52.103.43.86 listed in dnsbl.ahbl.org]

[52.103.43.86 listed in dnsbl.ahbl.org]

[52.103.43.86 listed in dnsbl.ahbl.org]

[2603:1096:405:94:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:94:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:94:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:94:0:0:0:8 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.86 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.86 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[avniappservice(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.86 listed in wl.mailspike.net]

Subject: {SPAM?} apps for healthcare

--_000_TYSPR01MB6514B7662FFB37024C28E4CFD072ATYSPR01MB6514apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hello,

We create custom mobile apps for healthcare staffing businesses =97 from Ho=

me Care to Nurse Staffing and Medical apps.

Let us know how we can support your project.

Best regards,

--_000_TYSPR01MB6514B7662FFB37024C28E4CFD072ATYSPR01MB6514apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hello,

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

We create custom mobile apps for healthcare staffing businesses =97 from Ho=

me Care to Nurse Staffing and Medical apps.

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Let us know how we can support your project.

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Best regards,

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

--_000_TYSPR01MB6514B7662FFB37024C28E4CFD072ATYSPR01MB6514apcp_--

Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on Thursday, February 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 10:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvfIt-000000003i1-1l5B

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 10:37:35 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 10:37:35 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013086.outbound.protection.outlook.com ([52.103.43.86]:62010 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vveMc-00000000GQR-0uOa

for doctor@netknow.ca;

Thu, 26 Feb 2026 09:37:33 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=JLoA328VGkX40xGh8Ug9If3ZYWxChQutdQ+IFA1UYPVP/ATyjTKQci/6eMf12ik9m/SauYlBwRlEQY9hCLTJjRoVoNTNHrbFlSUiHfHvqVGFzTv3ODgl2H94oewWg3uYZIRcnAdVRndyKFcaIb70Wes2Ts4IW8VSH02Vh0yD0mYjLrgFdqYDmWIua/cwxUnGQkKqbhqp/j+DQ1/YvCoCnL38JicJQa/BUpxD14UjLINduS7VfWqskHkXOxx89P8sDf7LyKYO5SXr0NpbKiG2vD0HcJHNcNc7Q06zfR5YBw7yKorf91uXn46CP8w8+CBU7w4Hzk1sBUiKIgp+4eEJHg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=jKR9TMzjhCg19GwI1IviqprzyDluaGvAAz8uQQkBYhg=;

b=bZ3CG93OcopwoCuTTKxxy16ofMIruzrJonr5bcIZ4oOlWfvgmMmV+pQi0HeDoxqVneh8NJhogyICL8GNNBgudPiNCHp1tDIWotTB6Na31F23NSDokpIGRHaZySMq7kmmDkGpKDyk4y2JvJrYOweYcMs0iWT8z9LnyuIUuipe6qpfvHmnTpc9bd/8CNLWdcH2AP5VvjUdNz+L2xHDDEwYcC7svFtr7j5k/+kYFR9+TMI6+L5yEInZSGI2aiRavALjj63JYgwusH6h6JTnHQH1yBzxhtW4EBeAlatNqWKiN6t8iLE7IPqhoQZwnt0NcXxkApNBARRhrEU9X96qQd5S+Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=jKR9TMzjhCg19GwI1IviqprzyDluaGvAAz8uQQkBYhg=;

b=BQJe/sTnyqqWAxDDRyQ9mCdddrPlZcPKTJzA1/cZQQd+JT9fsWS34ZYuSrGVqb+0ju6cGyH1jSeFX0Zk8c7KGrYiBcMRxgO+/F2yyioO2LELutBVvB1XJcuHwQ8NuOuKXNlyql0cNpPeazFEi+AAhHW879+BvhcZ0uHsBJr8+kxhgqUiMM69LWAbvNgg4ZOwtj1+UiozKQ4mgxOEU9o95R4Y7DEC0oyCi7AbyWynnmKT5Iafg/x9OlIiBd+dRcggJWnTi7D1zxUQBON7nc+QJ4NSIpD4bCJsrcuaBsirpJaF8ghhsH95pVyGUsiypTh5DlCLXhKcqvjhnHtym8jaHQ==

Received: from TYSPR01MB6514.apcprd01.prod.exchangelabs.com

(2603:1096:405:94::8) by SI2PR01MB4324.apcprd01.prod.exchangelabs.com

(2603:1096:4:1b0::11) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.14; Thu, 26 Feb

2026 16:35:55 +0000

Received: from TYSPR01MB6514.apcprd01.prod.exchangelabs.com

([fe80::f9d6:165e:ed1c:598f]) by TYSPR01MB6514.apcprd01.prod.exchangelabs.com

([fe80::f9d6:165e:ed1c:598f%6]) with mapi id 15.20.9654.013; Thu, 26 Feb 2026

16:35:55 +0000

From: avni maurya

Subject: apps for healthcare

Thread-Topic: apps for healthcare

Thread-Index: AQHcpz36GRZhwdRov06CveM/an55hw==

Date: Thu, 26 Feb 2026 16:35:55 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYSPR01MB6514:EE_|SI2PR01MB4324:EE_

x-ms-office365-filtering-correlation-id: a76fd40b-ca5f-494d-e59f-08de75551d35

x-microsoft-antispam:

BCL:0;ARA:14566002|20031999003|461199028|39105399006|7071999006|31061999003|15030799006|19110799012|8060799015|8062599012|15080799012|39145399003|40105399003|41105399003|440099028|3412199025|102099032|30101999003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?b0ym8OBys1y6Y4BPEbHq46iQSaNaxMygjw8NH/slAR5hViF5FuHnFFbE?=

=?Windows-1252?Q?/U0vTHybiBNlEaIda0tg38WyczIft45dHi6+KvzQ7klB8jAvYQ4/5XNx?=

=?Windows-1252?Q?N5IK82TKe5dCrTXYrdwko0Cw82E22qINQseJQXshdasWZo1T07nc4BCW?=

=?Windows-1252?Q?VsBsguCYxIDPGwmcZx/brgW9yJx4S2tdD7ai4EckaOD/n3hzWQBIyF4N?=

=?Windows-1252?Q?c54ZBCE4XFDIhF5ytfHD5nullRPTeA3UnbdkZYQyBRzc75qdMQzilnH7?=

=?Windows-1252?Q?1s8KbZGbwXMoh328BULq/rZh0T72FOBogtI2A5/qH9TM3vS2s5TjMO/K?=

=?Windows-1252?Q?nFIXDaDU/zUKHxqu59rOtcke5yukBI6y53Lg4fpHhCivozaqXjwYiSiQ?=

=?Windows-1252?Q?IX0fF8Qt5OKsvZeYM7VTDDYyOQkJvgx4GfNfcL0fyQVrDfddww56QMWV?=

=?Windows-1252?Q?shHR5eL46I72bZ2Re/OIcl7fvgNZSkZJBlk1NCYVjsuwo+pMKLzCiZ/6?=

=?Windows-1252?Q?vXfgTg3tl/xf/nU/f3oIQwvpN/WVveLIulmi7GPHEAy1CTRuSC1pP3dC?=

=?Windows-1252?Q?zQcIWxSFYtyqeOdizZ8M80+/4m5nlSxJoGX4upDWA9Ho2RAUbtMBJsW9?=

=?Windows-1252?Q?wfUL2gEsq6pp3lBLS8eyCEv6MftEUbqXXTmEM5BkUUWo6MZDnB0SNs39?=

=?Windows-1252?Q?CQIw5W2VxHLBtIyZEHNkG6bNFOTnVknqolJ2G0GYuMdflagoaNTKeezv?=

=?Windows-1252?Q?uvatBpRP9lo76cTRT1Y5ijr26h8lO0mvVLxGnHM18IM3eTlO8EKY/e+M?=

=?Windows-1252?Q?qwkLLsCcr9fnUw5vbLMQ3ieXPnZ9GubfOD+lcx7XScCJe6VDmDjszLN5?=

=?Windows-1252?Q?m0cE0fSlqj4Bin7EB81d9WgBrxt9eZqxZ1pYr9rs1+dkL2RVKlvvu4P9?=

=?Windows-1252?Q?Bj/2PR5Ga2oTCuUMUX8qdb5BPKHJk2ELF2VxjAIzk5yT5uvppQYuDmqY?=

=?Windows-1252?Q?GxahWJfFurlLGe148fBdagqI1kp8zLm1OHzupidJOFr6/91XYiCjug9P?=

=?Windows-1252?Q?PVwdvnKjQLGbugBOSre1mj3SvAwOlU2Jpw2zdoU4ovzpvsTGbQa9Sf4I?=

=?Windows-1252?Q?RZU6u+VBKaxHnXa4iqz/6atHZWg8iKW3BCZ9zE4fKyCDjA=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?DRqrPrv9/i9tg0kdcwGNUWR64xdUCRVSbYFjV6Lzd9c9v+cTuzC/bA12?=

=?Windows-1252?Q?/g5TMO9NEIsDLd9eHgtLHnjOBQDwyd4AW4mFZxGQh6QtBcCHhKKf0RXg?=

=?Windows-1252?Q?WFJYuB2mAaFOoDnWjh7UJGMTE9XNHnQgfKLkIeUqCs9cqzEfIzVcf6mZ?=

=?Windows-1252?Q?MQR/G9P5+b7F5dsFVUGdd4GH522vaWcRJKVabeB640yjF35FKqmotLfr?=

=?Windows-1252?Q?1CGnNDBq/tYsQqP2qfPKICQpObMCDnQ0sdOYBOrGuytEorve1PIiHe0+?=

=?Windows-1252?Q?mW0ixhWsWXP1yt+8Vky2u3x19TVc+7J9ltIaysNVYrWUq91Xau6srWHG?=

=?Windows-1252?Q?leTcSHFQ1iUhtnXkqjF8h/6fAW/8zzmPB3OciCAnD0xD1IIKkW/bQ+Qh?=

=?Windows-1252?Q?4QbU/plVaHm3qmWPU3SNtDN7pE8wrQufmb8S1JF1l5gR2tkgonpz29cc?=

=?Windows-1252?Q?wsn23ryVxqqO0cwez6ubT35U4oGoVUSbKKSqN9yqEUf1ibvkpbYsnI1g?=

=?Windows-1252?Q?/jAXN5/RYjdCjWpZadgSaNZ3+orHknPvwrEkYUG+K7wYZjUdoELTBSRR?=

=?Windows-1252?Q?sNCKSz47HDikRTG1obB10PtAJjtnDXL1DVYLUhzF2Stdy8xgp1wNWcnw?=

=?Windows-1252?Q?UrWOpnqBXzN6xNRZw4IrccGL1rKyO6IPwjmdYrSenBdMez4znnE6KNZM?=

=?Windows-1252?Q?jVuE8svGqoTIK1toRcoaoOOv9BmUYHCkOVDMe/mL+teRgx15QvxlEsh9?=

=?Windows-1252?Q?XvpOs/Dn0zac6Zn1POV5Sax86RuXv7MqQZTH8GB8aU0vQ0Z4dhH2vW4h?=

=?Windows-1252?Q?MqKQ2OYZCSUMNFg3DC5pFOzoSUHPx+pB6OkoyteJroyU4ClcEyzJ/jUz?=

=?Windows-1252?Q?/23gHtrr04t9vsGwFtvNJtHd2JyE2v78zMSLXrjWmLCnPrWjZVzmN/Ym?=

=?Windows-1252?Q?b9Z/sawfgQIBMD10MhLj/9mIFZh4R/r//W1cpr0akCTkxNdchWpvqR25?=

=?Windows-1252?Q?pKRSs7/60NkiNC5T0VFzqHdIJyT8T2ZXxw9HonXh3vKkzBj4Jx2Br5EN?=

=?Windows-1252?Q?2iXuiO1OC06Gx5/SqkJzQB9dIjdXZFtS7iRzDgtsMFVrPkBayMcJryJ4?=

=?Windows-1252?Q?OAh4YgDJuSsColZ7x2ov5FmqM3YXWVBC8jAc8Z/cBqyZeADcwIoIM6N/?=

=?Windows-1252?Q?AKf2wxq8BL86h9jNF+NxbNeeihM2vXtlslm8xJYivT98eHOAXH311DsC?=

=?Windows-1252?Q?JCRvIww/Yr4HZuZw55TVFfwL5iPNzLpWajGRZhpa1Teuc+jceR1+Ky3s?=

=?Windows-1252?Q?+3CGdbMeAytHrVBTReZlGrZJLg1DCC0rGEg3fbs8JY9BrHEdNWZ2nTTQ?=

=?Windows-1252?Q?1BZWgwyQSKYy8qHzys9tCpBLh/oxSRziSGmIUIMC/2NWXGuCcZshczDk?=

=?Windows-1252?Q?/7Z0lLyAE0jTmsnP8HIlw+2SWIh3Q3eoYldYAnDgWXMxbLZz+aB4B6tj?=

=?Windows-1252?Q?QzDc0c4y6vmA7QdPLMr18Un74BlzchArYpv721ezkiPUhJaEu9eBcIHv?=

=?Windows-1252?Q?Wv6vLjgWlaO3F7MF?=

Content-Type: multipart/alternative;

boundary="_000_TYSPR01MB6514B7662FFB37024C28E4CFD072ATYSPR01MB6514apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYSPR01MB6514.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: a76fd40b-ca5f-494d-e59f-08de75551d35

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Feb 2026 16:35:55.5865

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR01MB4324

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, We create custom mobile apps for healthcare staffing

businesses â€” from Home Care to Nurse Staffing and Medical apps. Let us

know how we can support your project. Best regards, Hello, We create custom

mobile apps for healthcare staffing businesses â€” from Home Care to Nurse

Staffing and Medical apps.

Job Opportunity spam from Google Gmail Part 2

Posted by Dave Yadallee on Thursday, February 26. 2026

--000000000000301578064bb9d15e

Content-Type: text/plain; charset="UTF-8"

Hello Dave Yadallee

My name is Roland Boudreau, Project specialist at Certainteed Gypsum

Manufacturing, Inc.

I found your contacts on the Linkedin professional network. NISHIMURA

MEDICAL INSTRUMENT CO. LTD. seeks an individual/company for a position of a

representative in Canada/USA with great benefits and attractive work hours.

This opportunity allows for remote work, enabling you to seamlessly

integrate it with your existing job or daily commitments.

If interested, contact Gerald Reynolds ( gerald@nishimuramedical.com ) for

more details and job description.

Best Regards,

Roland Boudreau

Project specialist at Certainteed Gypsum Manufacturing, Inc.

NISHIMURA MEDICAL INSTRUMENT CO. LTD.

Representative Required in CANADA/USA

--000000000000301578064bb9d15e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello Dave Yadallee

My name is Roland Boudreau,=C2=

=A0

Project specialist at Certainteed Gypsum Manufacturing, Inc.

I

found your contacts on the Linkedin professional network. NISHIMURA=20

MEDICAL INSTRUMENT CO. LTD. seeks an individual/company for a position=20

of a representative in Canada/USA with great benefits

and attractive work hours. This opportunity allows for remote work,=20

enabling you to seamlessly integrate it with your existing job or daily=20

commitments.

If interested, contact Gerald Reynolds (=C2=A0
href=3D"mailto:gerald@nishimuramedical.com" target=3D"_blank">gerald@nishim=

uramedical.com=C2=A0) for more details and job description.
>

Best Regards,

Roland Boudreau

Project specialist at Certainteed Gypsum Manufacturing, Inc.

NISHIMURA MEDICAL INSTRUMENT CO. LTD.

Representative Required in CANADA/USA

--000000000000301578064bb9d15e--

Job Opportunity spam from Google Gmail Part 1

Posted by Dave Yadallee on Thursday, February 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 06:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvbMe-000000001Yw-3vAa

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 06:25:12 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 06:25:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f49.google.com ([209.85.218.49]:57488)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvb7N-00000000Pmg-3Qba

for root@nk.ca;

Thu, 26 Feb 2026 06:09:36 -0700

Received: by mail-ej1-f49.google.com with SMTP id a640c23a62f3a-b934f8ec6acso100269766b.2

for ; Thu, 26 Feb 2026 05:08:38 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1772111311; cv=none;

d=google.com; s=arc-20240605;

b=VtC8AXpSNPzD/kLoMBCf6QIBK3ZHsDfYMoJDGTrKOiE8qMLpuf+G//4zDPjxpB4dea

vibMkbxG07rVTWWwFA3PhBOuhNckiA7x+QaMvbXzwH/HE/3XLCXicvpAKWZbZdW2lML3

TFSBHby2qlSlP80vAdz9ZrfPB3Fy8vbuP/XQRSFGz4sgKJHUeIpeZEcTHsBepwq7OUnB

cRZC76xkquYLbdE1CR1ki8s3ZHbbboqaIZz1HWcqa5oh2F136PpVZDEdnW59u4mF+xU0

n/ClfT9o0kV+8Clu+3HOdfebj8O2GeLW6R8s/9599p+4ICKzxCLGaTpWMasK1smW1gEh

rriA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=2jt5W7+sirDZhsi98jnMYnlQksgypy+XJ4UY3KdEtbk=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=jezb+c660MDI8q54Q6evkPzvCKN0+L/pQVnTPbfq7ARAhFCOdWduwlb4y94rKmXo3k

PvtlPWrmzlhq2Kj1Xy3HZBV/2PrRx9tFr4athC7X/SQJinnf5Xp9Zy3/OcbuKg0I8aUG

qWtzvfKHrObqqONibheNvXcXPh8oTjZu3KzlS8xg3WP7E9Ob65ZvteWwIRQWvjmVWacQ

I/gBgOA2m3FTG8h56c7Pju15KVSE5HO467QA5KA5N/ylQkYe3sdbg72zWPMxjpYMo52z

eQpBlIi2NanU2y/JavebD/D4rq5e9g4KXjwaSP5BkHAyGPRZb9PEaOXJ7IrX81zoDyNT

Gt8A==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772111311; x=1772716111; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=2jt5W7+sirDZhsi98jnMYnlQksgypy+XJ4UY3KdEtbk=;

b=UD5BClXD+0exKuhHCAkMsQFmyeljNNrMooUVSiT+YIO821CZQsloILOU7r1/B+YR9I

93WO2rfwmrHkpp/en6NPui9tT6Ai8EUe8XTSGc+UvGcHQUOtqofLOEUm09iC98fi4dbH

myvNrSWIN86htwv9atujCRT1S2sefHG6ELzwqVSb7FnY/j3dlfi1hiDZl3x39fDnEvwb

6Rj7rcmqOKKnJJvDDNoEuqsfQmRr37RzdBQqorznuuUNgk2eOtNpEDENQh/Bk4hIyS/I

DU0tbAWOFhz4dwH6cyWZfmuAlYAn6w80LlZ/8SnMbnfc4QkOK3kLQyyE6Y1BB7ooOHCG

cjpw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772111311; x=1772716111;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=2jt5W7+sirDZhsi98jnMYnlQksgypy+XJ4UY3KdEtbk=;

b=HIPNvPPHugIlAmig3hodDcsdgi3BiLSX0TyQXxbL4+hnNzzPj/Kc3w8gjqP+Yg4hpf

lrGGOD1Z43RF+dawIN8FPRerEj3oFugKeFulOJ6xUbrLrfeuLfAdSEncGcb3jatdOlvx

yI9F4/ZZ06aJUPI2lFdcTVvdmw1tF6GhWJrAPBII+D0oMnkn5k7UiuXa2n5HkXIV1YGi

k7mEPoAvgew2Xwp0oLRs//Z37caB1Y6LqYDWKzxHxz5TQISbvuum50dXZEtw9wsjU4Iy

fBblpTlHqzOxy5Q3XXT/4uNhyRptyjRrvlSZpJz+blgevkthTaKIPxFGiVjnkq/iZzdb

7R6A==

X-Gm-Message-State: AOJu0Yw5d2bEq5hL3F8Gl7pLP1ZWdGg8Pb+980yhBucoHeYT+IxPIpxV

nKjhgXPmYwKMFAXNQ1O2MC2ZgG+PViE3baE1fmcZ9qnD/vuKKmDExajbIbekXwrF8VNTAQi6vzY

joyxho+M6l7MopsFxkRDQH6NFaaOzrAujWIEv3iIJ3Q==

X-Gm-Gg: ATEYQzxCRLm01+w7sY2vH8tMdDV5+pqaqan3uqroGQioLNn9qqCYc4+swf0ki4A51oC

K6GBShDVhpggzoDMNnv4HKyZOuOaWCmtDbcaIgWPq+mUzK/QEw3ckHbR5wkxW8DYi9gAmOugd4q

O97c5NSK4HcWQIKzFBDyeE5xfF3QafpgWwqJMoGzbFKeu4uXOwWSpRmE+z9xwX8AzdvRToQRVL9

UpuhdZmpNG3VmFBnIFaQyAYGMCqY41Du6EWjBlVkBoMJvQI8FBnAyMxwSC47kMO2HzKOAaPsb0H

mV7dTs8w+Dt4UrDHfBBysqKmzLJzY1Q9sVE1rwn/P/oK

X-Received: by 2002:a17:907:3d87:b0:b8f:a729:2393 with SMTP id

a640c23a62f3a-b935b919dfcmr145060466b.40.1772111310885; Thu, 26 Feb 2026

05:08:30 -0800 (PST)

MIME-Version: 1.0

From: Roland Boudreau

Date: Thu, 26 Feb 2026 14:08:14 +0100

X-Gm-Features: AaiRm537kQliYyKSu0KQSzfnHaPfWlCJ6rvAfpIUZKqY_UU4usNtiBjXbXrQvSs

Message-ID:

Subject: Hello Dave Yadallee

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000301578064bb9d15e"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello Dave Yadallee My name is Roland Boudreau, Project specialist

at Certainteed Gypsum Manufacturing, Inc. I found your contacts on the Linkedin

professional network. NISHIMURA MEDICAL INSTRUMENT CO. LTD. seeks an indi

[...]

Content analysis details: (5.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.49 listed in will-spam-for-food.eu.org]

[209.85.218.49 listed in will-spam-for-food.eu.org]

[209.85.218.49 listed in will-spam-for-food.eu.org]

[209.85.218.49 listed in will-spam-for-food.eu.org]

[209.85.218.49 listed in will-spam-for-food.eu.org]

[209.85.218.49 listed in will-spam-for-food.eu.org]

[209.85.218.49 listed in will-spam-for-food.eu.org]

[209.85.218.49 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.49 listed in dnsbl.ahbl.org]

[209.85.218.49 listed in dnsbl.ahbl.org]

[209.85.218.49 listed in dnsbl.ahbl.org]

[209.85.218.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.49 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.49 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[roland.boudreaugenki(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.49 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Hello Dave Yadallee

Public Mobile Phish from Marketo Part 5

Posted by Dave Yadallee on Thursday, February 26. 2026

ground: linear-gradient(#2b3145, #2b3145); background-color: #2b3145;">
le width=3D"420" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align=3D"=

center" class=3D"width90">

=3D"#" style=3D"pointer-events: none;">

s.net/vob3qda590l9/34wv8eAFf5BDQeZZQdPCLr/9658e44765b94ec78d0c128e25beaf8d/=

Line.png" class=3D"mainimage" width=3D"540" style=3D"display: block;" borde=

r=3D"0" alt=3D"">

e;">

KlOu0/e79ec4e9f932d6ad339d57ba32bf1ac5/Downloadapp_en.png" width=3D"400" st=

yle=3D"display:block; padding:20px 0 20px 0;" border=3D"0" alt=3D"Download =

the Public Mobile app" class=3D"width90">

ing=3D"0" cellpadding=3D"0">

" cellpadding=3D"0">

telus.com/r/=3Fid=3Dhe52a8a8a,401b8021,2a83e420" target=3D"_blank">

=3D"https://images.ctfassets.net/vob3qda590l9/1sWmCH3IhlIMgzPXd5FnxU/6709d8=

ad805afe526b1492ee27226fa2/PublicMobile_Redesign_GooglePlay.jpg" width=3D"1=

40" alt=3D"Google Play" style=3D"display:block;">

x;">
21" target=3D"_blank">

/4e37OvkFHWdKKHFpAQ03Ky/0f38114ab84aa82fac9d55d2be5a3df1/PublicMobile_Redes=

ign_AppleStore.jpg" width=3D"122" alt=3D"App Store" style=3D"display:block;=

">

kground: linear-gradient(#37405A, #37405A); background-color: #37405A;">
ble width=3D"540" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" class=3D=

"width90">

ca, sans-serif; font-size: 14px; line-height: 21px; color: #f9f2dd; text-al=

ign: left; "> 1. Offer subject to change without notice and available to ne=

w online activations only between February 23, 2026 at 9:30am EST and March=

2, 2026 at 11:59pm EST. Offer only applicable on plans $35 and above. $5 d=

iscount applies to the first twenty-four months of selected subscription pl=

an service. This promotion may only be redeemed by the addressee, and canno=

t be combined with other offers, promotion codes or refer-a-friend promotio=

ns. This promotion is linked to the plan that the customer activates on, an=

d changing plans may result in the promotion being removed from the account=

. Cookies necessary for required promo code auto-population. Apply manually=

if needed. Use of promo code required. Taxes and SIM card are extra. Plans=

and regular pricing subject to change without notice and may not be availa=

ble in all regions. See
a8a8a,401b8021,2a83e422" target=3D"_blank" style=3D"color: #f9f2dd; text-de=

coration: underline;">PublicMobile.ca for the latest plans

You are subscribed as
tion: underline;" href=3D"mailto:dave@nk.ca">dave@nk.ca. This email add=

ress is used for outgoing messages only. Incoming messages are not monitore=

d.

This email is an advertisement of solicitation. If you no lon=

ger wish to receive Public Mobile promotional emails, please
as=3D"Footer" href=3D"https://t.info.telus.com/r/=3Fid=3Dhe52a8a8a,401b8021=

,2a83e423&e=3DY2lkPXRlbERNMjAxNjgyNyZiaWQ9LTQ1MDE5Njg1NA&s=3DOCXpZ8qPfBd0BG=

PBeJaVRPaIlKnDjtYTzL4GoRry74M" _type=3D"optout" _label=3D"Opt-out link" tar=

get=3D"_blank" style=3D"color:#f9f2dd; text-decoration:underline;">unsubscr=

ibe.

ca, sans-serif; font-size: 14px; line-height: 21px; color: #f9f2dd; text-al=

ign: center; "> Public Mobile Marketing Preferences.

25th Floor, 25 York St. Toronto, ON. M5J 2V5 Canada=

© 2026 Public Mobile. All rights reserved.

3D''

=3Fid=3Dhe52a8a8a,401b8021,1'/>

------=_NextPart_220_D0516308.D0516308--

Public Mobile Phish from Marketo Part 4

Posted by Dave Yadallee on Thursday, February 26. 2026

b8021,2a83e41c&e=3DcDE9NDY2NTJhNGIwMGI2MzkzMWQ1MmJlYTJiYmMyNGJjNTEwMTRlMGQw=

Nw&s=3DnJueyK58GPeI8NwygxM5HZc6huzguw9fu1bMoK9HCOY" target=3D"_blank" class=

=3D"width90" style=3D"background-color:#f39d80;border-radius: 8px;color:#39=

4056;display:inline-block;font-family:sans-serif;font-size:19px;line-height=

:53px;text-align:center;text-decoration:none;width:300px;max-width:300px;-w=

ebkit-text-size-adjust:none;">Shop now

background: linear-gradient(#2b3145, #2b3145); background-color: #2b3145;">=

=3D"center" class=3D"width90">

e;">

g4ExUg/3a858785fcf716c20299d8aeed66cb0a/DIFFERENISCALLING_EN.png" width=3D"=

201" style=3D"display:block;" border=3D"0" alt=3D"Different is calling">
a>

y: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 16px; color:=

#f9f2dd; text-align: center; padding: 15px 0">
lus.com/r/=3Fid=3Dhe52a8a8a,401b8021,2a83e425" target=3D"_blank" style=3D"c=

olor: #f9f2dd; text-decoration: underline;"> Privacy Statement &=

nbsp;
he52a8a8a,401b8021,2a83e426" target=3D"_blank" style=3D"color: #f9f2dd; tex=

t-decoration: underline;"> publicmobile.ca
=3D"https://t.info.telus.com/r/=3Fid=3Dhe52a8a8a,401b8021,2a83e427" target=

=3D"_blank" style=3D"color: #f9f2dd; text-decoration: underline;"> My =

Account

ing=3D"0" cellpadding=3D"0">

" cellpadding=3D"0">

telus.com/r/=3Fid=3Dhe52a8a8a,401b8021,2a83e41e" target=3D"_blank" title=3D=

"Facebook">

gME9fYupjTWj/041c1315db5d2ef314f0f3d7213468d4/PublicMobile_SocialIcon_Faceb=

ook.png" width=3D"28" alt=3D"Facebook" style=3D"display:block;">

telus.com/r/=3Fid=3Dhe52a8a8a,401b8021,2a83e41d" target=3D"_blank" title=3D=

"Twitter">

2901e4eE7Oe/fea2a1aa4ff39938d1bace6bf24951c7/PublicMobile_SocialIcon_X.png"=

width=3D"28" alt=3D"X" style=3D"display:block;">

telus.com/r/=3Fid=3Dhe52a8a8a,401b8021,2a83e424" target=3D"_blank" title=3D=

"Youtube">

FK9POp1nz4s/d422bc238ea4438fa80caf464b4735a3/PublicMobile_SocialIcon_Youtub=

e.png" width=3D"28" alt=3D"Youtube" style=3D"display:block;">

telus.com/r/=3Fid=3Dhe52a8a8a,401b8021,2a83e41f" target=3D"_blank" title=3D=

"Instagram">

63fPn3JPve58D/ffc62238dae2efcdb3c1acb48742e898/PublicMobile_SocialIcon_Inst=

agram.png" width=3D"28" border=3D"0" alt=3D"instagram" style=3D"display:blo=

ck;">

Public Mobile Phish from Marketo Part 2

Posted by Dave Yadallee on Thursday, February 26. 2026

https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e42e https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e42f

1. Offer subject to change without notice and available to new online activations only between February 23, 2026 at 9:30am EST and March 2, 2026 at 11:59pm EST. Offer only applicable on plans $35 and above. $5 discount applies to the first twenty-four months of selected subscription plan service. This promotion may only be redeemed by the addressee, and cannot be combined with other offers, promotion codes or refer-a-friend promotions. This promotion is linked to the plan that the customer activates on, and changing plans may result in the promotion being removed from the account. Cookies necessary for required promo code auto-population. Apply manually if needed. Use of promo code required. Taxes and SIM card are extra. Plans and regular pricing subject to change without notice and may not be available in all regions. See https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e430 PublicMobile.ca for the latest plans

You are subscribed as mailto:dave@nk.ca dave@nk.ca. This email address is used for outgoing messages only. Incoming messages are not monitored.

This email is an advertisement of solicitation. If you no longer wish to receive Public Mobile promotional emails, please https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e431&e=Y2lkPXRlbERNMjAxNjgyNyZiaWQ9LTQ1MDE5Njg1NA&s=EUtu0nHs2Q5VYzlyXY8xYLChyBWo01WeFw1QgOq8NdM unsubscribe .

Public Mobile Marketing Preferences.

25th Floor, 25 York St. Toronto, ON. M5J 2V5 Canada

Â© 2026 Public Mobile. All rights reserved.

------=_NextPart_220_D0516308.D0516308

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

w3.org/TR/html4/loose.dtd">

xmlns:v=3D"urn:schemas-microsoft-com:vml"

xmlns:o=3D"urn:schemas-microsoft-com:office:office">

l=3Dno,date=3Dno,url=3Dno">

Public Mobile

Public Mobile Phish from Marketo Part 3

Posted by Dave Yadallee on Thursday, February 26. 2026

" marginheight=3D"0" style=3D"margin:0; padding:0;-webkit-text-size-adjust:=

none; -ms-text-size-adjust:none; padding: 10px 0 0 0;">

<=

/div>

=3D"center" class=3D"email-container" style=3D"min-width:600px; width:600px=

; margin-left:auto; margin-right:auto;">

adient(#2b3145, #2b3145); background-color: #2b3145;">
border=3D"0" cellspacing=3D"0" cellpadding=3D"0" class=3D"width90">

ns-serif; font-size: 14px; line-height: 21px; color: #f9f2dd; padding: 15px=

0;">
ellspacing=3D"0" class=3D"width90">

=3D"mix-blend-mode:screen; font-family: Arial, Helvetica, sans-serif; font-=

size: 13px; line-height: 18px; color: #f9f2dd; text-align: left; ">Switch t=

o Public Mobile and save.

elvetica, sans-serif; font-size: 13px; line-height: 18px; color: #f9f2dd; t=

ext-align: right;">
401b8021,2a83e41a&e=3DY2lkPXRlbERNMjAxNjgyNyZiaWQ9LTQ1MDE5Njg1NCZwMT0lNDBxd=

lVNeE4zUGJqUFdsbzlzNDJoTlJwaXBFbnNsUWozcGw1TmtJUEJUM0xRJTNE&s=3D9bAaz-MN54f=

ztiNumuDTvmSRjvPrGus9ZqI5onqx_90" target=3D"_blank" style=3D"color: #f9f2dd=

; text-decoration: underline;">View online
mily: 'Arial Black',Arial, Helvetica, sans-serif; color: #f39d80;font-size:=

14px;"> >

nd: linear-gradient(#37405A, #37405A); background-color: #37405A;">
idth=3D"540" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" class=3D"widt=

h100">

=3D"https://images.ctfassets.net/vob3qda590l9/d5ftm7172JcqWMPzj0rQE/de63133=

ceac5e24256ad7c16db5597a8/Public_Logo_New.png" width=3D"150" style=3D"displ=

ay: block;" border=3D"0" alt=3D"Public Mobile"/>

0; background: linear-gradient(#37405A, #37405A); background-color: #37405A=

;">
ass=3D"width90">

e;" target=3D"_blank">

9/67kTKtND69XOMy2xEewGW8/151d6cc8189c6c5f3473f31316f980e5/SWITCH_PM_Header_=

en.png" class=3D"width90" width=3D"430" style=3D"display: block;" border=3D=

"0" alt=3D"">

tica, sans-serif; font-size: 18px; line-height: 24px; color: #f9f2dd; paddi=

ng: 40px 0 20px; text-align: center">

Get $5 off
style=3D"font-size:25px"> for 24 months.¹ =

0 0 0;">

021,2a83e41b&e=3DcDE9NDY2NTJhNGIwMGI2MzkzMWQ1MmJlYTJiYmMyNGJjNTEwMTRlMGQwNw=

&s=3DK6xq2vlg90Sb0nmsm0Rx0hbgNHdkxls1acBE1dVvT_I" target=3D"_blank">
c=3D"https://images.ctfassets.net/vob3qda590l9/3Aa7MeJxlvxZ5gLARXv2gh/8f6fd=

9d46a9b5821bf4e8c5cee3fff3c/5G_HERO.png" class=3D"mainimage" width=3D"600" =

style=3D"display: block; max-width: 600px;" border=3D"0" alt=3D"Public Mobi=

le">

;">

s.ctfassets.net/vob3qda590l9/34wv8eAFf5BDQeZZQdPCLr/9658e44765b94ec78d0c128=

e25beaf8d/Line.png" class=3D"mainimage" width=3D"540" style=3D"display: blo=

ck;" border=3D"0" alt=3D"">

d-color: #37405A;" class=3D"dark-background">
"0" cellspacing=3D"0" cellpadding=3D"0" align=3D"center" class=3D"width90"=

>

Public Mobile Phish from Marketo Part 1

Posted by Dave Yadallee on Thursday, February 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Wed, 25 Feb 2026 18:34:00 -0700

Received: from [192.243.230.244] (port=48470 helo=r244.info.telus.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvQFU-000000002ZQ-0Ipa

for dave@nk.ca;

Wed, 25 Feb 2026 18:33:10 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=info.publicmobile.ca; s=telus; t=1771864013;

bh=0VZeQ+tRHsbGRkgKJ4Y0E3LI/Qs+0p665hpDm8rP/XE=;

h=From:Subject:Date:To:MIME-Version:Message-ID:List-Unsubscribe:

Content-Type;

b=fYV1d/Ll3tMahhNq1s2Ia6AYI26x0khlPdl5BKv08bV55u1hmnCHjnZA8wgG0tPr9

jBU5cuLdl2Wwt2eP3Tgr2fwDvy5pWN3OI0pBno8XRyZoRn/7wV4XJ5+TyN7hzrVpKq

Tbed4BJ8rjBc1B37pl+q1fo596/JmwBtxsSFqj+YIY1qw/qjAIHea0hTB2P3wHD3HY

fiZf0yZNs9dM/d1HLEBTGA5gYdhlPcEaUUseSg8XRO+FD9PuhAYg+9BcoOu9bARxC3

a1j7vcV1lXQYUidbKVtJA04fbvbLHO+6rpn1VF/SiWWntgnZaTSEMF5fo5pg4iModn

90UMzSZopAEbg==

X-MSFBL: ZQ33Vtf6fYvlhE+W5gVVXg+h0rZrKxpjV2MsbeHsHjc=|eyJnIjoicHJvZC5kZWZ

hdWx0X2YyZmI5OTM3LTRiMmQtNGFhOS05YjY1LWQxZDk2MzY3NzAwYSIsImIiOiJ

0ZWx1c18xOTIuMjQzLjIzMC4yNDRfcHJvZC5kZWZhdWx0X2YyZmI5OTM3LTRiMmQ

tNGFhOS05YjY1LWQxZDk2MzY3NzAwYSIsImluYm91bmRfdGxzX2NpcGhlciI6IlR

MU3YxLjI6REhFLVJTQS1BRVMyNTYtR0NNLVNIQTM4NCIsInIiOiJkYXZlQG5rLmN

hIiwicmNwdF9tZXRhIjp7ICJtIjogIi0xMTUwMDQ2NjQ0IiwgImQiOiAiMTgxNzk

xNjQ2IiwgImluIjogInRlbHVzX21pZF9wcm9kMiIsICJyIjogImRhdmVAbmsuY2E

iIH19

Received: from [10.1.1.152] ([10.1.1.152:51427] helo=r243.info.telus.com) by or2-prod1-mta-i-0d3dc945f6c75fce6 (envelope-from ) (ecelerity 4.4.1.20033 r(msys-ecelerity:tags/4.4.1.0^0)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384) id 6F/1F-56251-DCF7C996; Mon, 23 Feb 2026 16:26:53 +0000

From: "Public Mobile"

Subject: =?utf-8?B?R2V0IHVwIHRvICQxMjAgaW4gc2F2aW5ncyBvbiB5b3VyIHBsYQ==?=

=?utf-8?B?biBvdmVyIDI0IG1vbnRocy7CuQ==?=

Date: Mon, 23 Feb 2026 08:26:51 -0800

To:

Reply-To: "Public Mobile"

MIME-Version: 1.0

X-mailer: nlserver, Build 6.7.0

Message-ID:

List-Unsubscribe:

Content-Type: multipart/alternative;

charset="windows-1252";

boundary="----=_NextPart_220_D0516308.D0516308"

X-Spam_score: 9.9

X-Spam_score_int: 99

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Switch to Public Mobile and save. https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e428&e=Y2lkPXRlbERNMjAxNjgyNyZiaWQ9LTQ1MDE5Njg1NCZwMT0lNDBxdlVNeE4zUGJqUFdsbzlzNDJoTlJwaXBFbnNsUWozcGw1TmtJUEJUM

[...]

Content analysis details: (9.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.243.230.244 listed in will-spam-for-food.eu.org]

[192.243.230.244 listed in will-spam-for-food.eu.org]

[192.243.230.244 listed in will-spam-for-food.eu.org]

[192.243.230.244 listed in will-spam-for-food.eu.org]

[192.243.230.244 listed in will-spam-for-food.eu.org]

[192.243.230.244 listed in will-spam-for-food.eu.org]

[192.243.230.244 listed in will-spam-for-food.eu.org]

[192.243.230.244 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.243.230.244 listed in dnsbl.ahbl.org]

[192.243.230.244 listed in dnsbl.ahbl.org]

[192.243.230.244 listed in dnsbl.ahbl.org]

[192.243.230.244 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.243.230.244 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.243.230.244 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.243.230.244 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.243.230.244 listed in dnsbl.ahbl.org]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 AD_PREFS BODY: Advertising preferences

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.3 OFFER_2 BODY: Offers you Something (2)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.7 THIS_AD "This ad" and variants

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} =?utf-8?B?R2V0IHVwIHRvICQxMjAgaW4gc2F2aW5ncyBvbiB5b3VyIHBsYQ==?=

=?utf-8?B?biBvdmVyIDI0IG1vbnRocy7CuQ==?=

This is a multi-part message in MIME format.

------=_NextPart_220_D0516308.D0516308

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: 8bit

Switch to Public Mobile and save. https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e428&e=Y2lkPXRlbERNMjAxNjgyNyZiaWQ9LTQ1MDE5Njg1NCZwMT0lNDBxdlVNeE4zUGJqUFdsbzlzNDJoTlJwaXBFbnNsUWozcGw1TmtJUEJUM0xRJTNE&s=IYeYky9vU1Ge_cKTGJWC9-TqVeWLluNpUMX1Zxs5qR4 View online >

Get $5 off for 24 months. 1

https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e429&e=cDE9NDY2NTJhNGIwMGI2MzkzMWQ1MmJlYTJiYmMyNGJjNTEwMTRlMGQwNw&s=bPtiMgfgzrJlH4szlMcDXByV_nuqgcHuGsk_EghXALQ

Get $5 off plans

$35+ for 24 months 2

That's a total savings of $120.

Promo code: PMQ1PT5FOR24

Offer ends March 2, 2026

and has limited redemptions.

https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e42a&e=cDE9NDY2NTJhNGIwMGI2MzkzMWQ1MmJlYTJiYmMyNGJjNTEwMTRlMGQwNw&s=ENj0liWe2YMrplBmTOLB-KToRnNKq6yULoBW8k8T0wg Shop now

https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e433 Privacy Statement https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e434 publicmobile.ca https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e435 My Account

https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e42c https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e42b https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e432 https://t.info.telus.com/r/?id=te52a8a8a,401b8021,2a83e42d

Nigerian Spam from Google Gmail Part 2

Posted by Dave Yadallee on Thursday, February 26. 2026

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[zarriakabba170(at)gmail.com]

0.6 J_CHICKENPOX_31 BODY: 3alpha-pock-1alpha

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

2.6 HK_SCAM_N13 BODY: No description available.

2.5 HK_SCAM_N2 BODY: No description available.

0.9 URG_BIZ BODY: Contains urgent matter

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.215.179 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.215.179 listed in sa-trusted.bondedsender.org]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.215.179 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.179 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.179 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HK_SCAM No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} Hi,

--000000000000dbfc3b064bba6ad2

Content-Type: text/plain; charset="UTF-8"

Nice To Meet You,

It's my pleasure to meet you,I humbly write to solicit for your partnership

and assistance with divine confidence that you are a reliable and honest

person who will be capable for this important business transaction,

believing also that you will not let me down either now or in the future.

I got your email address through an online directory and I am contacting

you personally because I seriously need your help.

My name is Miss.Zalanda Mubarak. I am a 20 years old girl and the only

daughter of my late parents, In my culture, when a man dies, if he doesn't

have a male child, the brothers share his property leaving both the wife

and the daughters empty handed. This is the exact case with me as I am the

only daughter of my father. I lost my mother when I was barely a year old

and my father refused to re-marry because he felt solely responsible for my

mothers death and My father died during the political crises in my country,

My father worked for many years in an oil drilling company and before he

died he told me that he deposited his live saves money in his bank and use

my name as his only daughter as next of kin and he instructed me to seek

for a foreign partner in a country of my choice where I will transfer this

money and use it for future investment purpose that is why I want you to

help me transfer this money to your bank account in your country and also

help me come to your country to continue my education.

This is because after the death of my parents, my wicked uncle wants to

kill me and take over all my father property's from me because I have no

one to defend me. He has taken the house in the village and the one in town

and other things. I have reported my uncle to the local police here in my

country, but nothing has been done since then. I am writing this mail from

a local hotel where I am presently hiding for my safety.

I am willing to offer you 20% out of the Total Fund just for your

Assistance for helping me regarding the transfer and investment of this

Fund in your country and i will offer 10% of the total fund to the

orphanage over there in your country,while my 70% will invest in profitable

business and will be managing by you while I continue my studies. Endeavor

to let me know your decision.

Your urgent response will be appreciated. Talk to you more sincerely (

mmisszalanda@gmail.com)

with regards.Miss.Zalanda

--000000000000dbfc3b064bba6ad2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Nice To Meet You,

It's my pleasure to meet you,=

I humbly write to solicit for your partnership and assistance with divine c=

onfidence that you are a reliable and honest person who will be capable for=

this important business transaction, believing also that you will not let =

me down either now or in the future.

I got your email address throug=

h an online directory and I am contacting you personally because I seriousl=

y need your help.

My name is Miss.Zalanda Mubarak. I am a 20 years o=

ld girl and the only daughter of my late parents, In my culture, when a man=

dies, if he doesn't have a male child, the brothers share his property=

leaving both the wife and the daughters empty handed. This is the exact ca=

se with me as I am the only daughter of my father. I lost my mother when I =

was barely a year old and my father refused to re-marry because he felt sol=

ely responsible for my mothers death and My father died during the politica=

l crises in my country, My father worked for many years in an oil drilling =

company and before he died he told me that he deposited his live saves mone=

y in his bank and use my name as his only daughter as next of kin and he in=

structed me to seek for a foreign partner in a country of my choice where I=

will transfer this money and use it for future investment purpose that is =

why I want you to help me transfer this money to your bank account in your =

country and also help me come to your country to continue my education.
=

This is because after the death of my parents, my wicked uncle wants to=

kill me and take over all my father property's from me because I have =

no one to defend me. He has taken the house in the village and the one in t=

own and other things. I have reported my uncle to the local police here in =

my country, but nothing has been done since then. I am writing this mail fr=

om a local hotel where I am presently hiding for my safety.

I am wil=

ling to offer you 20% out of the Total Fund just for your Assistance for he=

lping me regarding the transfer and investment of this Fund in your country=

and i will offer 10% of the total fund to the orphanage over there in your=

country,while my 70% will invest in profitable business and will be managi=

ng by you while I continue my studies. Endeavor to let me know your decisio=

n.

Your urgent response will be appreciated. Talk to you more sincer=

ely (mmisszalanda@gmail.com)<=

br>with regards.Miss.Zalanda

--000000000000dbfc3b064bba6ad2--

Nigerian Spam from Google Gmail Part 1

Posted by Dave Yadallee on Thursday, February 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 10:37:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvfHN-0000000006f-1xui

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 10:36:01 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 10:36:01 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f179.google.com ([209.85.215.179]:50543)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvbmw-00000000K3A-1zfy

for doctor@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 06:52:31 -0700

Received: by mail-pg1-f179.google.com with SMTP id 41be03b00d2f7-c70bb8ffb24so341031a12.1

for ; Thu, 26 Feb 2026 05:51:35 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1772113889; cv=none;

d=google.com; s=arc-20240605;

b=dJlYwpFRbnkvIQSYR0hCVr420wGtRXUnyop5mg+H+2dGYi9qJVEEF61ssa1MarsrZq

dgIetg6mvLATVI7cEAikG5jMc1yXg8o0o7wD2C1h+FjmNyqqCQ4noZ40BSci1ftj0Kwd

31JpxeDi65Yx1EDIwaMfKtGP2Iod8aKGcyvvm45GRiwU91U7ot4uyGGK2qFYG0pwmLY7

yHx4M/i2E69l4gi9mHXyCGwLoJIQERjt/6eX7cihbHyZK8+dFs5EWPG+5gorQ1QKPISU

hJW8+YoZvASLW34oYV91kq4AZxsu6tOQZg3w++ZCIxOyOEhZ43vBIuJm2B7HSxatDTAI

Whyw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=inX+z7tP3pPAgc4pEgEQv4GNYCJcjkYI1F0HNRLzdgk=;

fh=5S0EQcyAGzaw4X1XortP9iVaBTV+kYJLA88wE11BhYg=;

b=SOZ8ETZYvvXAAoJO1A1fRUnhF4sotVPOzuNq3u4amT3I+qapV9qIv1gsYuVnsM7Z4t

REI3+R4GpBmWAzH0wQxwYtC5pH3OeJFldvIs/qc6KdwhdCRLiWRoTTL2MrtYbmIBxc7n

1BlHFnvW8XYS+ALN7ClG4q4Y8xyUtCt355pFaXKVwMhfK8F3FidgDtaKx+rOjH5MjhLa

U+HV+xMJX6/PG6ZToiDDMi7jOOSBkrIXqVoZxKRBxdUPO8zU7ORCQEtAWr+XSQ/ldncg

WKg5FhuTQAETGmHbtQGWX+TB6LO0xxd3aR0ICCMcpfsIXCZFlf1D/Fiz0883uu++u8Bw

8lcA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772113889; x=1772718689; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=inX+z7tP3pPAgc4pEgEQv4GNYCJcjkYI1F0HNRLzdgk=;

b=Sk7xxjbqBZA79Jw3srCq/8psn6WCIHsTPvn55Hf+wmtVnw4jxPhJxEDsVVjFgNWPvw

nstXvGZhduMe5Go6z6gbC2SUOLI/bveuKBBcyveB6sFLUAFpH5VEgphxz45ZmSpsiAZv

+INXiZACj5CCc9Iq3wp/pXfubwcKKrvpgK0pTeCZ53YQGy8MaAIAcpq/3f+qBYUazeNI

ZeyTL8D/UaYIc2npCOdodcWnrk51pJrb7YzpCtxmVX9RR57V57jr9lnzzOhepk76L0+u

/pJQ3Owb9MifSNcx+Na8NDjdTirIMfO9vL/MgNHSRadd4yHKWlk/A+PdtuYs+4oLcSWP

i9tQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772113889; x=1772718689;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=inX+z7tP3pPAgc4pEgEQv4GNYCJcjkYI1F0HNRLzdgk=;

b=F8lRn10PPR64iTh1aQku9/zEJzY2o3I/+TISAweLvwOo7fy62BijOgxC4RxVrXTO11

UkbA64OcZ7bAFAP7Nl8b0k1iX9WTMfx5nxZEfD+ypTp3PMgwWeWuvHcWMBmyOEz7Sqzn

rOniY2Eqd4Gt/2xTl5FEtb8oMOBw4mQJ9dZ6yQJRfuaVKMblgnM3bMEiXFGzp3qdeiFC

IkLwRSzp/Yj4Xb3igz+RNgO/1o2jopyG8e8fgCMP8zUGUKteTKNyL/EjUqB85gEoantX

VZkynCJIxFTLt8GmVB+9hi6RB/JRD4LUyJlPhBucA/xRDfoqvh/+uMVJG+qwMiwVFPVL

qriQ==

X-Forwarded-Encrypted: i=1; AJvYcCVlQy1rSy9MGlqacxbqdVyJ2zjzi1sPUNtDqVrMqNpJtNXq0u/ILS94luTDBPjw5FqHTNDJMss=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwD6QXq3IuQDOdpjljJg8ivbGqu78gVtxsqCg7OKYhCiRI8Wt06

z86XZN7e3KCt9nwOjusgJJaA4D83oGduhH6JdZ4tQb7UEflaU17wQb48PxTTVFYsa16E6dGao4a

POCjUu4uZEy6qKTNiG4Uqaqu5SqtkxQc=

X-Gm-Gg: ATEYQzwmY/XVVEr8+cIMhsvRPqL8kvQy38qZJyKengRQA+ygXhYBCedecNwdE5pRO6H

fgm3ero+Ut4sMqEv/XthN8l3aiNWYZlTxDOZHo1trEqdhkkNwvhY47nDDglvROlRR/N1jhikCyy

+n9Gtqlv3oy9K1dU6jmuUG2LYhGjIpuMAYIaBRp8HdrKjOJKEjuyGZziRQOtOHAu/P+pkIXlpcM

xQSCRVpUH72iOBEKok6Mn/WX1qUrXIyEyYfcDGgttADprFNbMOrjM/f/SZ0q4ooLwsI0BxEWli5

ji/S8A05Dap9rzjDfQl7WV5Ftzm55KUI7FxMPWQRAv5xqHAzcxymoiqanrPlHzl0sFdZ/Bkj23T

QQk3I0bl+wRQ=

X-Received: by 2002:a17:902:d2c2:b0:2a9:47ff:1020 with SMTP id

d9443c01a7336-2ade9972102mr31319575ad.8.1772113889064; Thu, 26 Feb 2026

05:51:29 -0800 (PST)

MIME-Version: 1.0

Reply-To: mmisszalanda@gmail.com

From: "Mis.Zalanda Mubarak"

Date: Thu, 26 Feb 2026 13:45:26 +0100

X-Gm-Features: AaiRm53KWHn-X-dWvVj14ArYXaPtuCgB_PYcXLc5AymBIpu8TWrlhIHeXXDdwzo

Message-ID:

Subject: Hi,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000dbfc3b064bba6ad2"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 22.1

X-Spam_score_int: 221

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Nice To Meet You, It's my pleasure to meet you,I humbly write

to solicit for your partnership and assistance with divine confidence that

you are a reliable and honest person who will be capable for this important

busin [...]

Content analysis details: (22.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.215.179 listed in will-spam-for-food.eu.org]

[209.85.215.179 listed in will-spam-for-food.eu.org]

[209.85.215.179 listed in will-spam-for-food.eu.org]

[209.85.215.179 listed in will-spam-for-food.eu.org]

[209.85.215.179 listed in will-spam-for-food.eu.org]

[209.85.215.179 listed in will-spam-for-food.eu.org]

[209.85.215.179 listed in will-spam-for-food.eu.org]

[209.85.215.179 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.179 listed in dnsbl.ahbl.org]

[209.85.215.179 listed in dnsbl.ahbl.org]

[209.85.215.179 listed in dnsbl.ahbl.org]

[209.85.215.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.179 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.179 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.179 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.179 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mubarakzalanda779(at)gmail.com]

Web/SEO/App spam from Google Gmail Part 2

Posted by Dave Yadallee on Thursday, February 26. 2026

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.193 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.193 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.193 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.193 listed in list.dnswl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: fusion360.agency]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.193 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.193 listed in bl.score.senderscore.com]

0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too

expensive

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.193 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.193 listed in sa-trusted.bondedsender.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.193 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Designer\Developer

This is a multi-part message in MIME format.

------=_NextPart_000_2B9E0_01DCA73E.E9DF2AC0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Hello,

I'm reaching out to see if there is anything that would like to create

Shopify & Wordpress, upgrade, repair, or redesign on your website or Mobile

App.

I am a web designer/developer that can do just about anything you can

imagine at very affordable prices.

If interested. May I send you sample, Portfolio and company Details?

Thank you for your time and consideration.

Kind Regards,

Aarti

------=_NextPart_000_2B9E0_01DCA73E.E9DF2AC0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hello,

I'm reaching =

out to see if there is anything that would like to create Shopify & =

Wordpress, upgrade, repair, or redesign on your website or Mobile =

App.

I am a web designer/developer that can do just about =

anything you can imagine at very affordable prices.

If =

interested. May I send you sample, Portfolio and company =

Details?

Thank you for your time and consideration.

Kind =

Regards,
Aarti

------=_NextPart_000_2B9E0_01DCA73E.E9DF2AC0--

Web/SEO/App spam from Google Gmail Part 1

Posted by Dave Yadallee on Thursday, February 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 04:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvZth-00000000EnB-2Y7i

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 04:51:13 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 04:51:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f193.google.com ([209.85.214.193]:44088)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvZJ7-00000000C6c-0biZ

for sales@nk.ca;

Thu, 26 Feb 2026 04:13:33 -0700

Received: by mail-pl1-f193.google.com with SMTP id d9443c01a7336-2adc1d9ec56so4915915ad.0

for ; Thu, 26 Feb 2026 03:12:38 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=fusion360.agency; s=google; t=1772104352; x=1772709152; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=yAFAHvR5FrXQYi0N3ytYYrH3/fqd0DQooklnKbN48YI=;

b=uWjZmb9vUVCdLM5/YbGC0Sh/kdQFt+Jktk3YQ2kgoiQe2em+rKahN/Asp7ZgtEbTN2

/iD+rEoXTrBeh9/oBTsA9zOIqxv8cbaRTDBF8KdG5IoCWwFV32vZaILG14J5t6EoNEnv

OPAZJchZBLrmGRwjusN7dlCDsiKhzLqGT+BZGaoBlCo1sdCfk+h5itRKv6+xXdcad2RZ

DY3rBAk60oIQD/KWKnawhY7IK0HkuPjOY3yQ47tX7CjwSc/6z4DxhmYx9M4PIZK3F5Hy

eBZfAp3WvBnd1/tSzmd6fNgW8s8xDEe6XduWuGSie7C1BcI2cLfRJeqqYdZqpdzixNBo

pYlQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772104352; x=1772709152;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=yAFAHvR5FrXQYi0N3ytYYrH3/fqd0DQooklnKbN48YI=;

b=LahOu+j/534YlB/VEqLu3U5EEX/hjnPXrAdw/ePAXyzcuNVbXaMmvHOMwBtottbDV0

HLfj6JcBEwBrCPq4JPJWogVPatB+JikCMUXl3kJdeQyPGfkse0BIQZKRc8Hvc9xIqQHt

LSR/4irByZTkax3CrUatg7O6GqPPozGzO/crVr44Qq0H/Vn00Dpbx3EcnXavC+yYRMLq

+yOZjqlD+RP9c+BArDQbBJPFjJA9978axgytWEPkpIFk5s/Y/0V0ePFuhw3rjHrLlYFh

8eZE+pra1uzcbeSjB/szspFBi4dPMWBL8v/xwY22T4nylgibVt9phymcVT4+/K2JVl+V

MfLQ==

X-Gm-Message-State: AOJu0Yzsy201Ur43Cb6z99DcPzl9ZIZNhvPku++AnUSSkNdGCK/+uL85

+bS8OB4/cjYFklqr+sIhgbCHxSvNmxJzgVfPRUtuYHKksZdiixFquHfogzASpIW6naYqnBKghrv

kQzJXiBM=

X-Gm-Gg: ATEYQzynsNgNAHmRxZYpFXWMpjEv7kuBRs7yOOITKH+o+avncbQsZSoc8rfaLJ6tJlp

makxYEhci4E2B3EzcnQN9pH3QOHWrkDSijgrY9YFghs/Js4UjNK+aC/blrhJ6nn9U6iDx2WN6TC

pktCyXusb4RpiW9Jq9hcqq8OktlOeU0+zFbJ4zVDTK+hwrSnEIsdre/vluILVEM+FgjKdDmmlyS

vbTuM43z8zRYCDCZFWY7/Dnb26ivUsDVEsfsKMJqL3IA3bzwLFbyF2pddENICCnrBBQFADTuGAJ

rq+wT5K0QAaLB3Nz4LWrapAFzwml34JeHyZV59LjDYO0Wp6BXdDjboEtkenrg9noc0TxEUEP1Kq

1p6nVKqQbuG8XX8id+SNWbIeYMSe+gDPP3mvVqrEhoyv5Gshhb9ogr3b1PptUxINcAJMoeFZEFY

WrGFVSZJ4dd+8rQc+l8IlCVU6EhYag87E7hirGPr6V+QoFXQY=

X-Received: by 2002:a17:903:1b6e:b0:2a9:6165:6e88 with SMTP id d9443c01a7336-2ad742b4ddemr169807785ad.0.1772104351752;

Thu, 26 Feb 2026 03:12:31 -0800 (PST)

Received: from Kanhaiya ([2401:4900:1c62:ab65:bdda:a4d7:448d:7429])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2adfb5dbaafsm28684455ad.36.2026.02.26.03.12.30

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 26 Feb 2026 03:12:31 -0800 (PST)

From: "Aarti"

To:

Subject: Designer\Developer

Date: Thu, 26 Feb 2026 16:39:27 +0530

Message-ID: <2b9df01dca710$d026eec0$7074cc40$@agency>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_2B9E0_01DCA73E.E9DF2AC0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adym4fXos91YjO6tR8aKJ3HrN9MX7w==

Content-Language: en-us

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, I'm reaching out to see if there is anything that would

like to create Shopify & Wordpress, upgrade, repair, or redesign on your

website or Mobile App. I am a web designer/developer that can do just about

anything you can imagine at very affordable prices.

Content analysis details: (9.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.193 listed in dnsbl.ahbl.org]

[209.85.214.193 listed in dnsbl.ahbl.org]

[209.85.214.193 listed in dnsbl.ahbl.org]

[209.85.214.193 listed in dnsbl.ahbl.org]

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:ab65:bdda:a4d7:448d:7429 listed]

[in dnsbl.ahbl.org]

Russian Funding Offer spam

Posted by Dave Yadallee on Thursday, February 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 04:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvZtM-00000000El8-1osq

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 04:50:52 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 04:50:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from send80.i.mail.ru ([89.221.237.175]:52368)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvZ7U-00000000B7X-45gI

for sales@nk.ca;

Thu, 26 Feb 2026 04:01:34 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mail.ru;

s=mail4; h=Content-Type:MIME-Version:Message-ID:Date:Subject:To:From:Reply-To

:From:Sender:To:Cc:Content-Type:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive:X-Cloud-Ids:

Disposition-Notification-To; bh=NlgFg2YCjgLNN1naaygQxaxKoQXWlTLtFcmLlfGBIRA=;

t=1772103685; x=1772193685; b=nz7Gt4QWked83FvQgqqKNjxJylDug9r1u2GDbOP3cUgH1bA

WNYqs1wuv1HXKaoGZdrNFAJ9zQTR4UBE6JWDhggFtoPk3vAaB1lcTyUw8zNX1CFOWD0F+VoKCEXdU

j170zJ/DGZeBAGsaJjOn4maRbIF9/6sFAiSQayE1tjZq6Io0pDcW1Uog/Vgr9Tz3vyuDwlYvsAzdV

7k4fpMbveBrkiWyTzJsTZTDKG+IjJb84lnIqlF0e03TxaEgwQOY2LEPTeksomwrJDRuvMoRDyyoiC

FrXFVaQjcuhoURZAiUkNaeTRGWONhEic/Qr/absfx/4cij/UpMJ6c5ucW+5cAsmQ==;

Received: by exim-smtp-64fd7cf497-rndkc with esmtpa (envelope-from )

id 1vvZ6a-00000000Jrk-2E2u

for sales@nk.ca; Thu, 26 Feb 2026 14:00:29 +0300

Thread-Topic: Funding Offer

thread-index: AdynDx5GtgtEBI8uQIGIMEs+f3NOIA==

Reply-To:

From: =?utf-8?Q?Dr. Allen Payne?=

To:

Subject: Re: Funding Offer

Date: Thu, 26 Feb 2026 03:00:28 -0800

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_68FB5_01DCA6CC.10259570"

X-Mailer: Microsoft CDO for Windows 2000

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-MimeOLE: Produced By Microsoft MimeOLE

Authentication-Results: exim-smtp-64fd7cf497-rndkc; auth=pass smtp.auth=info@grantrexx.biz smtp.mailfrom=info@grantrexx.biz

X-Mailru-Src: smtp

X-7564579A: 646B95376F6C166E

X-77F55803: 4F1203BC0FB41BD9A6EFB945BF0DEAB20ACC6F3AE0F06561C621EBC98BBAA047182A05F5380850407C65FFA07A6ABE9B3DE06ABAFEAF67058E7CE182ACC3834A8F534FB60CB164DFDAF06271CF5AE1BC

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

X-C1DE0DAB: 0D63561A33F958A5B6B1BA73343BB9395002B1117B3ED6962EFD33738BB5FB6FC81EEE05487B0209823CB91A9FED034534781492E4B8EEAD4ECBDE8281F904F9BDAD6C7F3747799A

X-C8649E89: 1C3962B70DF3F0AD73CAD6646DEDE1918E10F71CB4DF9F9677DD89D51EBB774225B6776AC983F447FC0B9F89525902EE6F57B2FD27647F25E66C117BDB76D659DB9344C414EF18190BF7CFF92CC50085EEFD1740F9261B5C45B374040EAAE35994AFA10B9365FD5DB8341EE9D5BE9A0A556C514F84802D66908A8285DC1B0658F4CDB0861D994E8A52EE4E5D9E54FDA44C41F94D744909CE22316FEE5BB4DDADEED432305CE53D9DC2A3E5EA76A2126D43082AE146A756F3

X-D57D3AED: 3ZO7eAau8CL7WIMRKs4sN3D3tLDjz0dLbV79QFUyzQ2Ujvy7cMT6pYYqY16iZVKkSc3dCLJ7zSJH7+u4VD18S7Vl4ZUrpaVfd2+vE6kuoey4m4VkSEu53w8ahmwBjZKM/YPHZyZHvz5uv+WouB9+ObcCpyrx6l7KImUglyhkEat/+ysWwi0gdhEs0JGjl6ggRWTy1haxBpVdbIX1nthFXMZebaIdHP2ghjoIc/363UZI6Kf1ptIMVbwN8XFWZxQUPW/TuFCSi0A=

X-Mailru-Sender: 2B3E4445EA68B43A3A46F4EC1D982E4A8EBFFCD5802D37F787A35C9C7BBE74BE34258F36142990DFD013D1570D50D84A11C27C7EB68385A5D63E4CEE33A6911280919091D61198E03E85AF46D4829C6D3F29D7578806BE9E5FEEDEB644C299C0ED14614B50AE0675

X-Mras: Ok

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings, are you still seecking finance ? My name is Dr.

Allen Payne. I am a financial consultant and loan broker, helping business

owners and entrepreneurs secure loan funding for startup projects and growth

capital.

Content analysis details: (7.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[89.221.237.175 listed in will-spam-for-food.eu.org]

[89.221.237.175 listed in will-spam-for-food.eu.org]

[89.221.237.175 listed in will-spam-for-food.eu.org]

[89.221.237.175 listed in will-spam-for-food.eu.org]

[89.221.237.175 listed in will-spam-for-food.eu.org]

[89.221.237.175 listed in will-spam-for-food.eu.org]

[89.221.237.175 listed in will-spam-for-food.eu.org]

[89.221.237.175 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[89.221.237.175 listed in dnsbl.ahbl.org]

[89.221.237.175 listed in dnsbl.ahbl.org]

[89.221.237.175 listed in dnsbl.ahbl.org]

[89.221.237.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[89.221.237.175 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[89.221.237.175 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[89.221.237.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[89.221.237.175 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[89.221.237.175 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[89.221.237.175 listed in sa-accredit.habeas.com]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[89.221.237.175 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[89.221.237.175 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_HK_NAME_DR No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} Re: Funding Offer

Greetings, are you still seecking finance ?

My name is Dr. Allen Payne. I am a financial consultant and loan broker, helping business owners and entrepreneurs secure loan funding for startup projects and growth capital.

I’m currently working with a finance company that is actively seeking projects or businesses to fund.

This investors offers various types of loans at competitive interest rates, ranging from 2% to 7% per annum, depending on the loan structure. Feel free to contact me for further information following the below email addresses.

Regards,

Allen Payne

Financial Consultant Services

Personal Email : allenpayne.funds@gmail.com

Office Email : info@allenpaynefinancialconsultant.com

Who's Who spam

Posted by Dave Yadallee on Thursday, February 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 04:50:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvZrs-00000000Ee5-14T3

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 04:49:20 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 04:49:20 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from fenicemedia-smtp7.myhyve.com ([5.255.58.143]:53010)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvUMo-000000004Bi-0h8N

for sales@nk.ca;

Wed, 25 Feb 2026 22:57:06 -0700

Received: from fenicemediawin7.myhyve.com (unknown [172.19.12.98])

(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(Client did not present a certificate)

by fenicemedia-smtp7.myhyve.com (Postfix) with ESMTPSA id 92B82315E1CA

for ; Thu, 26 Feb 2026 04:39:42 +0000 (GMT)

MIME-Version: 1.0

From: "Sophie Baker"

Reply-To: sophie@prestigeawardsguide.co.uk

To: sales@nk.ca

Subject: Canada Prestige Awards 2026

Content-Type: multipart/related;

type="text/html";

boundary="----=_NextPart_001_52BB_66FA2DB9.34B31D11"

X-Mailer: Smart_Send_4_4_2

Date: Thu, 26 Feb 2026 04:39:42 +0000

Message-ID: <6028474260640325833367@fenicemediawin7>

X-Spam_score: 25.2

X-Spam_score_int: 252

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi The nomination stage of our Canada Prestige Awards 2026

is open and we would like to invite to you to take part.

Content analysis details: (25.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

[5.255.58.143 listed in dnsbl.ahbl.org]

[5.255.58.143 listed in dnsbl.ahbl.org]

[5.255.58.143 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SILLYS1 Spammer tool signature (sillysend)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.0 OPT_OUT BODY: No description available.

1.6 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Canada Prestige Awards 2026

Hi

The nomination stage of our Canada Prestige Awards 2026 is open and we would

like to invite to you to take part.

We are reviewing submissions for companies, individuals, products

and services. The awards are open to all SMEs who provide a product

or service to people or businesses in Canada and therefore can

of course be based in other regions.

After the decision making is completed then all winners will be invited to our

annual awards event. This gives all of those involved an opportunity to

network, meet the judges and take part in promotional press activities which

we organise for winners and their guests. All of which is arranged on a

complimentary basis.

The Prestige Awards provide the latest news and developments in a variety

of industries. Content is available in hard copy print media as well

as online features, interviews, competitions and much more. The awards

recognise the important work of SME’s and celebrate their many successes

and outstanding service over the year.

To learn more about the media platform then please visit www.prestigeawardsguide.co.uk

If you wish to access any subscriber-only content on the website

then please let me know and I will provide this on a complimentary basis.

What do I need to do?

Please reply back to us confirming you wish to be considered in this

year’s programme.

After we receive your acceptance, you will be placed on the list

of shortlisted nominees. Once the allocation of nominations is met,

all organisations within that particular category are then passed

to our panel of industry expert judges who will ultimately pick a winner.

Publicly sourced information is used such as reviews, testimonials,

information on the company’s website as well as social media accounts.

Questionnaire & Categories

During the nomination process we give companies and individuals the

opportunity to specify the categories they wish to be considered for.

We also provide all nominees with the opportunity to submit additional

information that may support them being successful in the awards. This

could include details on the company, new projects, positive media

attention/ other recognition or direct us to online testimonials

and customer reviews. This may all have a positive impact on the

decision making. Please fill in the short questionnaire provided

and include any information you feel relevant.

The questionnaire will be provided once you confirm your participation.

Tell me more about the award programme & who votes

Every year, we invite companies to talk to us about themselves and provide

information on why they are worthy of recognition in the awards. We receive

submissions from SMEs in all industries who provide products and services

to the region. The judges pick a selection of winners in a range of categories.

The awards are a free to enter programme that provide exposure to subscribers

looking for information on the very best companies and services.

Once the submissions have been reviewed then winners will be notified by a member

of the awards team. Each winner will receive coverage in the awards magazine

as well as the website, press releases and will be able to attend the free

winner’s event. As previously highlighted, this will give each winner

the opportunity to network with other winners, meet the judges and have

a photo-shoot with their teams.

For more information on events then please visit our website

Are there any costs?

Unlike many award programmes, we offer no options for companies or individuals

to make any financial contributions prior to this year’s decisions being made.

This includes the booking of advertorial space or partnership opportunities

of any kind.

Winners are chosen by our independent panel made up of select industry experts

and our editor-in-chief. This ensures the most deserving are picked each year

and decisions cannot be influenced by current relationships.

Not for this year

Although we make every effort to only approach organisations which are relevant to

the award categories, we are running this year, you may feel the timing isn’t right

for you are the moment. We do not wish to contact people who would rather not

be considered so please do let us know if that is the case. You will then be

immediately removed and not contacted again about the opportunity.

I do hope we can consider you in the programme and I would be happy to answer any

other questions you may have.

Kind regards,

Sophie Baker

Awards Coordinator

Landline: +44 (0) 121 638 0411

sophie@prestigeawardsguide.co.uk

(555CND111454) This e-mail and any attachments are intended for

the above named only and may be confidential. If they have come

to you in error, you must take no action based on them, nor must

you copy or show them to anyone; please reply to the e-mail

and highlight the error. Corporate Livewire may monitor outgoing

and incoming e-mails. By replying to this e-mail, you give your

consent to such monitoring.

To opt out of further communication, please reply to this email

with "opt out." You can also opt out directly through the website

by clicking on this Link.

e;" target=3D"_blank">

9/7G5t7Bi8MQysXH8KgJeHq5/f67291bfc1721bd6200dee5c77c177c4/More_PM_SUBHEAD_e=

n.png" class=3D"width90" width=3D"350" style=3D"display: block;" border=3D"=

0" alt=3D"">

ca, sans-serif; font-size: 28px; line-height: 34px; color: #f9f2dd; text-al=

ign: center; padding: 30px 30px 0 30px;">
80;">Get $5 off plans

$35+ for 24 months²

Arial, Helvetica, sans-serif; font-size: 18px; line-height: 24px; color: #f=

9f2dd; padding: 40px 0 20px; text-align: center">That's a total savings of =

$120.

Promo code: PMQ1PT5FOR24

Offer ends March 2, 2026
and has limited r=

edemptions.

Archives

Categories

Syndicate This Blog

Blog Administration

Powered by

NetKnow Navigation

Remote RSS/OPML-Blogroll Feed

Error

addthis

Empire Avenue

Error

Error

Error

Syndicate This Blog

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error