Chinese Products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jul 2026 16:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjOq2-00000000MDH-3NdT

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 16:09:22 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Jul 2026 16:09:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m81225.xmail.ntesmail.com ([156.224.81.225]:14458)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjJmZ-00000000ImD-2Z51

for sales@nk.ca;

Mon, 13 Jul 2026 10:45:44 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_70790_157208311.1783961070654"

To: sales

Reply-To: sales23@abiscircuits.com

Subject: =?UTF-8?B?TWVldCBBYmlzIOKAkyBZb3VyIFNpbmdsZS1Tb3VyY2UgRU1TIFBhcnRuZXIgU2luY2UgMjAwNg==?=

X-Priority: 3

MIME-Version: 1.0

Received: from diana@abiscircuits.cn( [10.139.5.81] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 14 Jul 2026 00:44:30 +0800 (GMT+08:00)

From: Diana

Date: Tue, 14 Jul 2026 00:44:30 +0800 (GMT+08:00)

X-WM-Tid: 0a9f5c5dac2f03c0kunm9e8a5048176eb

DKIM-Signature: a=rsa-sha256;

b=Od94VH+MHygPHTvZ+fVn/xfulOtwsSxMYXCBk9nUTzZVPfkqLk8CYzH6VDwyrah2qm7cj+6NTeM3+dpH+Bhmy7P39gaDk7COfHnUCuo+rXYESSthWK4C+4crBc09RA5EZmRgBr/zVFZFk+56pT6UFpwfHsk5Ihah6UO3ksJe3hA=; s=default; c=relaxed/relaxed; d=abisassembly.net; v=1;

bh=XOxFbKXYSbn3bUcJIAOeczsd8E3yDJM9LmsejPs47xw=;

h=date:mime-version:subject:message-id:from;

Message-ID:



Hi Sales ，



Since 2006 Abis has grown into two PCB plants plus one ISO/UL-certified PCBA facility, supplying 1-40 layer boards and full turnkey assemblies to aerospace, medical and industrial customers around the world.



Our vertically-integrated model eliminates multi-vendor headaches while keeping every process step—DFM, fabrication, assembly, testing—under one roof and one quality system.



We look forward to showing you why global EMS buyers rate Abis “Top-Tier” in audits and why we are ready to back-stop EI’s own demanding programs.







Diana Dai

Project Representative | ABIS Circuits Co., Ltd



Rigid PCB, Flex PCB, Rigid-Flex 1~32 Layer PCB, Metal PCB, HDI PCB, PCBA

Mobile / Whatsapp / Wechat: +86 13510754753

Email: sales23@abiscircuits.com / diana@abiscircuits.cn

Website: abiscircuits.com









Toronto Dominion Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jul 2026 16:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjOpC-00000000MB5-26dm

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 16:08:30 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Jul 2026 16:08:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.mac4boxtek.info ([166.0.192.129]:56179)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjIxj-000000005G7-2fAg

for root@nl2k.ab.ca;

Mon, 13 Jul 2026 09:53:00 -0600

Received: by mail.mac4boxtek.info for ; Mon, 13 Jul 2026 15:52:37 +0000 (envelope-from )

From: "TD Bank Canada"

To: root@nl2k.ab.ca

Subject: Payment Verification Required: Payment on Hold

Date: 12 Jan 2026 12:51:21 -0300

Message-ID: <20260112125121.B8EDE48451013111@email.ca>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_97055C30.F86430D9"

X-Spam_score: 6.4

X-Spam_score_int: 64

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have received a payment of $4,781.22 on July 13, 2026.

For your security, this payment has been placed on hold pending verification.

Please review and approve the payment through your account to c [...]



Content analysis details: (6.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[166.0.192.129 listed in dnsbl.ahbl.org]

[166.0.192.129 listed in dnsbl.ahbl.org]

[166.0.192.129 listed in dnsbl.ahbl.org]

[166.0.192.129 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[166.0.192.129 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[166.0.192.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[166.0.192.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[166.0.192.129 listed in dnsbl.ahbl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[166.0.192.129 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

2.1 DATE_IN_PAST_96_XX Date: is 96 hours or more before Received: date

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} Payment Verification Required: Payment on Hold





------=_NextPart_000_0012_97055C30.F86430D9

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable










k" border=3D"0" alt=3D"TD" src=3D"cid:tdshieldstv1.png" width=3D"67" height=

=3D"60" data-bit=3D"iit">



WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(68,6=

8,68); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; B=

ACKGROUND-COLOR: rgb(253,253,253); TEXT-INDENT: 0px; font-variant-ligatures=

: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=

ecoration-thickness: initial; text-decoration-style: initial; text-decorati=

on-color: initial">




; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(68,=

68,68); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; =

BACKGROUND-COLOR: rgb(253,253,253); TEXT-INDENT: 0px; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial" dir=3Dltr align=3Dleft>

You have received a payment of =

$4,781.22 on July 13, =

2026.  For your security, this payment =

has been placed on hold pending verification. Please review and approve the=

payment through your account to complete the deposit to your available bal=

ance.




e=3D"CURSOR: pointer; TEXT-DECORATION: none; COLOR: rgb(51,102,153)">


AMILY: helvetica, arial, sans-serif; FONT-WEIGHT: bold; COLOR: rgb(255,255,=

255); PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 25px; DISPLAY:=

inline-block; PADDING-RIGHT: 25px; BACKGROUND-COLOR: rgb(0,138,0); border-=

radius: 5px" href=3D"https://denall2.nsdns.in/images/yifgtbx/pojmwxd/tk1hug=

n/ink.html" rel=3D"nofollow noopener noreferrer" target=3D_blank>Log In=





Standard message and data rates may apply.

Thank you for choosing TD=

Bank.

This is a servicing message from TD Bank. Please do not reply=

to this email.

Your privacy is our priority. We'll never ask you to=

confirm your account number, PIN, password, or personal information. Learn=

more about our 
com_zimbra_url class=3DObject style=3D"CURSOR: pointer; TEXT-DECORATION: no=

ne; COLOR: rgb(51,102,153)">


href=3D"https://www.td.com/privacy-and-security/privacy-and-security/our-p=

rivacy-commitments/td-privacy-code/privacy.jsp" rel=3D"nofollow noopener no=

referrer" target=3D_blank>TD Privacy Code.


------=_NextPart_000_0012_97055C30.F86430D9

Content-Type: image/png; name="tdshieldstv1.png"

Content-Transfer-Encoding: base64

Content-ID:



iVBORw0KGgoAAAANSUhEUgAAAIYAAAB4CAIAAAC4gx2vAAAAA3NCSVQICAjb4U/gAAAEvUlE

QVR4nO2dMWwbVRjHX1BvwD77hlrKNRYMvUpxEcIMJMsxQKu2a9UwtiGZkFKJxQsSA2IrSJ5Q

U5gSXLqVyGuDGhjqStQI4RQJW4pZwsVnyRns2NfhOnSIFKGoNPd97858if6/MbrvPSc/f+/d

++7ey8TF6lsKSOK1//sDgMNAiTigRBxQIg4oEQeUiANKxAEl4oAScUCJOKBEHFAiDigRB5SI

A0rEASXigBJxQIk4oEQcUCIOKBEHlIgDSsRxKvqlZXfVTuWT+yjS8ANPKeU/87rBTrvf9AOv

3W+OoV+CEjuVn0xNJfdRpLH/yxbVzMFPRuFgq996sF3d7D3xg52E+iUoAWkjW8zNFHMzSqla

Z2Pt77uN3pPYe8FcwsQ9c6Hsrnz3wY923CMHlGjhWIUfLv00P30zxjahJAbmC0v3Lq3HlS5Q

Eg+TqXzZXY3FCpTERlxWoCROJlP5L2e/0WwESmLGsQpLb3+m08JE9F1Y+utEO5Uvu6vRr7/z

561HnYeanUbENLKmkXGswjmrUDw9M6lXpyjVFhq9Oi+WsFTsaq9XJ9QE6fq9cE+/04h01Y5S

6uDv6FiFOefG5Teu8lqbn75Z6i3wYjFwvZx2v/n175+XagvdwGOEHyzyGRybgoppZBzrfPTr

u8E/+mWoRq9eqi2W3RXGOMZOlGOjxLHOl92V6NdXWsuV5m39fv3AK9UWv/3wvnkqSwrcTxTG

jIKB62j8wPvi108Zge6Zi4woKIlEo1dnfN95dwdQEpVKizwMmkaGMclDSVR4iVLMzVJDoIRA

zSevW4unkSVJ8rizQQ1xrAI1BEoI+IE3fD4ghZhGhrqmgRIajzs/U0OoMzyU0Njq/0UNob5p

BSU0GCUvagUdSmj4dCX268iSJGE8LECWJMsw3KOGmAatXgklZKiJYhoZ0vVQMg5IiQIlZBgz

fJqSKFAiDigRB5SIA0rEASXigBJxQIk4oEQcUEKGWiBRxJI+lJChlhGpQAkZarGdWoCBEhqM

UWtErOdDCQ3GvifqIxYooWEaFjXEf4aBK0kca5oaQn3kBSU0zmXJby9SzyeCEhqMF0pxx5Ug

+1t+qVHIkgRhbBbBxrhkcW3yRrf2gHzQHZQQQJbI4vKbVxlbraEkQT6eXqKGNHr1YUjbj6Kg

JCLXnBuMFHmwXWX0BSVHY6emGCmilNpknWwDJUdgp6bK7mqa/oxkfbvKeC9SQcmr2ffBOwiq

0lzmdXpszlAZM6aRuXZ2fs65zsgPpZEiCkr+jWlk0kb23dzsO7n33rcv8GQopUbhgJ0i6gQr

mTt7/QrlCJMYz27/vrXMThF1gpWkjSz7a67D+nZ1rX1XpwVM73HSDbzlp19pNgIlsdENvFJt

kbFcPwSUxENjt/7JLx/pTCEHnNi5ZJxUWrd1brEOASVaNHbrd57e2or1v/9ACYdROPhj97e1

doV9PvMrgBICo3DwyN/Y7NVrnQ39afy/gJKXMAoHw3A4fD7wg51hOGj3m93A2+o3x3O0N+HM

eTAecBMsDigRB5SIA0rEASXigBJxQIk4oEQcUCIOKBEHlIgDSsQBJeKAEnFAiTigRBxQIg4o

EQeUiANKxAEl4oAScUCJOKBEHFAijhcJGl/TQfHsfQAAAABJRU5ErkJggg==



------=_NextPart_000_0012_97055C30.F86430D9--



Toronto Dominion phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jul 2026 16:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjOp9-00000000MAx-10CT

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 16:08:27 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Jul 2026 16:08:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.mac4boxtek.info ([166.0.192.129]:56179)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjIxb-000000005G7-2mfx

for www@nl2k.ab.ca;

Mon, 13 Jul 2026 09:52:55 -0600

Received: by mail.mac4boxtek.info for ; Mon, 13 Jul 2026 15:51:50 +0000 (envelope-from )

From: "TD Bank Canada"

To: www@nl2k.ab.ca

Subject: Payment Verification Required: Payment on Hold

Date: 12 Jan 2026 12:50:34 -0300

Message-ID: <20260112125034.45D8659B029E7931@email.ca>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_CB8C2854.C8E38C70"

X-Spam_score: 6.4

X-Spam_score_int: 64

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have received a payment of $4,781.22 on July 13, 2026.

For your security, this payment has been placed on hold pending verification.

Please review and approve the payment through your account to c [...]



Content analysis details: (6.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[166.0.192.129 listed in dnsbl.ahbl.org]

[166.0.192.129 listed in dnsbl.ahbl.org]

[166.0.192.129 listed in dnsbl.ahbl.org]

[166.0.192.129 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[166.0.192.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[166.0.192.129 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[166.0.192.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[166.0.192.129 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

[166.0.192.129 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

2.1 DATE_IN_PAST_96_XX Date: is 96 hours or more before Received: date

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[166.0.192.129 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} Payment Verification Required: Payment on Hold





------=_NextPart_000_0012_CB8C2854.C8E38C70

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable










k" border=3D"0" alt=3D"TD" src=3D"cid:tdshieldstv1.png" width=3D"67" height=

=3D"60" data-bit=3D"iit">



WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(68,6=

8,68); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; B=

ACKGROUND-COLOR: rgb(253,253,253); TEXT-INDENT: 0px; font-variant-ligatures=

: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=

ecoration-thickness: initial; text-decoration-style: initial; text-decorati=

on-color: initial">




; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(68,=

68,68); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; =

BACKGROUND-COLOR: rgb(253,253,253); TEXT-INDENT: 0px; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial" dir=3Dltr align=3Dleft>

You have received a payment of =

$4,781.22 on July 13, =

2026.  For your security, this payment =

has been placed on hold pending verification. Please review and approve the=

payment through your account to complete the deposit to your available bal=

ance.




e=3D"CURSOR: pointer; TEXT-DECORATION: none; COLOR: rgb(51,102,153)">


AMILY: helvetica, arial, sans-serif; FONT-WEIGHT: bold; COLOR: rgb(255,255,=

255); PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 25px; DISPLAY:=

inline-block; PADDING-RIGHT: 25px; BACKGROUND-COLOR: rgb(0,138,0); border-=

radius: 5px" href=3D"https://denall2.nsdns.in/images/yifgtbx/pojmwxd/tk1hug=

n/ink.html" rel=3D"nofollow noopener noreferrer" target=3D_blank>Log In=





Standard message and data rates may apply.

Thank you for choosing TD=

Bank.

This is a servicing message from TD Bank. Please do not reply=

to this email.

Your privacy is our priority. We'll never ask you to=

confirm your account number, PIN, password, or personal information. Learn=

more about our 
com_zimbra_url class=3DObject style=3D"CURSOR: pointer; TEXT-DECORATION: no=

ne; COLOR: rgb(51,102,153)">


href=3D"https://www.td.com/privacy-and-security/privacy-and-security/our-p=

rivacy-commitments/td-privacy-code/privacy.jsp" rel=3D"nofollow noopener no=

referrer" target=3D_blank>TD Privacy Code.


------=_NextPart_000_0012_CB8C2854.C8E38C70

Content-Type: image/png; name="tdshieldstv1.png"

Content-Transfer-Encoding: base64

Content-ID:



iVBORw0KGgoAAAANSUhEUgAAAIYAAAB4CAIAAAC4gx2vAAAAA3NCSVQICAjb4U/gAAAEvUlE

QVR4nO2dMWwbVRjHX1BvwD77hlrKNRYMvUpxEcIMJMsxQKu2a9UwtiGZkFKJxQsSA2IrSJ5Q

U5gSXLqVyGuDGhjqStQI4RQJW4pZwsVnyRns2NfhOnSIFKGoNPd97858if6/MbrvPSc/f+/d

++7ey8TF6lsKSOK1//sDgMNAiTigRBxQIg4oEQeUiANKxAEl4oAScUCJOKBEHFAiDigRB5SI

A0rEASXigBJxQIk4oEQcUCIOKBEHlIgDSsRxKvqlZXfVTuWT+yjS8ANPKeU/87rBTrvf9AOv

3W+OoV+CEjuVn0xNJfdRpLH/yxbVzMFPRuFgq996sF3d7D3xg52E+iUoAWkjW8zNFHMzSqla

Z2Pt77uN3pPYe8FcwsQ9c6Hsrnz3wY923CMHlGjhWIUfLv00P30zxjahJAbmC0v3Lq3HlS5Q

Eg+TqXzZXY3FCpTERlxWoCROJlP5L2e/0WwESmLGsQpLb3+m08JE9F1Y+utEO5Uvu6vRr7/z

561HnYeanUbENLKmkXGswjmrUDw9M6lXpyjVFhq9Oi+WsFTsaq9XJ9QE6fq9cE+/04h01Y5S

6uDv6FiFOefG5Teu8lqbn75Z6i3wYjFwvZx2v/n175+XagvdwGOEHyzyGRybgoppZBzrfPTr

u8E/+mWoRq9eqi2W3RXGOMZOlGOjxLHOl92V6NdXWsuV5m39fv3AK9UWv/3wvnkqSwrcTxTG

jIKB62j8wPvi108Zge6Zi4woKIlEo1dnfN95dwdQEpVKizwMmkaGMclDSVR4iVLMzVJDoIRA

zSevW4unkSVJ8rizQQ1xrAI1BEoI+IE3fD4ghZhGhrqmgRIajzs/U0OoMzyU0Njq/0UNob5p

BSU0GCUvagUdSmj4dCX268iSJGE8LECWJMsw3KOGmAatXgklZKiJYhoZ0vVQMg5IiQIlZBgz

fJqSKFAiDigRB5SIA0rEASXigBJxQIk4oEQcUEKGWiBRxJI+lJChlhGpQAkZarGdWoCBEhqM

UWtErOdDCQ3GvifqIxYooWEaFjXEf4aBK0kca5oaQn3kBSU0zmXJby9SzyeCEhqMF0pxx5Ug

+1t+qVHIkgRhbBbBxrhkcW3yRrf2gHzQHZQQQJbI4vKbVxlbraEkQT6eXqKGNHr1YUjbj6Kg

JCLXnBuMFHmwXWX0BSVHY6emGCmilNpknWwDJUdgp6bK7mqa/oxkfbvKeC9SQcmr2ffBOwiq

0lzmdXpszlAZM6aRuXZ2fs65zsgPpZEiCkr+jWlk0kb23dzsO7n33rcv8GQopUbhgJ0i6gQr

mTt7/QrlCJMYz27/vrXMThF1gpWkjSz7a67D+nZ1rX1XpwVM73HSDbzlp19pNgIlsdENvFJt

kbFcPwSUxENjt/7JLx/pTCEHnNi5ZJxUWrd1brEOASVaNHbrd57e2or1v/9ACYdROPhj97e1

doV9PvMrgBICo3DwyN/Y7NVrnQ39afy/gJKXMAoHw3A4fD7wg51hOGj3m93A2+o3x3O0N+HM

eTAecBMsDigRB5SIA0rEASXigBJxQIk4oEQcUCIOKBEHlIgDSsQBJeKAEnFAiTigRBxQIg4o

EQeUiANKxAEl4oAScUCJOKBEHFAijhcJGl/TQfHsfQAAAABJRU5ErkJggg==



------=_NextPart_000_0012_CB8C2854.C8E38C70--



Nigerian Spam from Google Gmail Part 2

Posted by Dave Yadallee on


1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.47 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.47 listed in will-spam-for-food.eu.org]

[209.85.208.47 listed in will-spam-for-food.eu.org]

[209.85.208.47 listed in will-spam-for-food.eu.org]

[209.85.208.47 listed in will-spam-for-food.eu.org]

[209.85.208.47 listed in will-spam-for-food.eu.org]

[209.85.208.47 listed in will-spam-for-food.eu.org]

[209.85.208.47 listed in will-spam-for-food.eu.org]

[209.85.208.47 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.47 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[bank60073(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[igwehero80(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[igwehero80(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.47 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.47 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 LOTTO_DEPT Claims Department

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 FILL_THIS_FORM Fill in a form with personal information

1.5 MONEY_ATM_CARD Lots of money on an ATM card

0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information

2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money

0.0 MONEY_FORM Lots of money if you fill out a form

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} UBA



--0000000000002bdfd506567f8941

Content-Type: text/plain; charset="UTF-8"



--









Having reviewed all at 50.5 Million Dollars and your inability to meet

up with some charges levied against you due to the past transfer

options. We the Board of Directors, United Bank For Africa (UBA) has

ordered our Foreign Payment Remittance Unit to issue you a CORPORATE

VISA CARD where your payment will be uploaded and today we got notice

that your Payment has been uploaded into this CORPORATE ATM CARD and

also have registered it with DHL for delivery to you.

For your information, The delivery charges has been paid and they were

supposed to have shipped your packaged ATM CARD but they insisted that

you must re-confirm to them your current delivery address to ensure

accurate Delivery.



MOST IMPORTANT: Due to the content of the package, DHL mandated that

before your package will be shipped, A Tax/Stamp Duty MUST be procured

according to the New Customs Creed, and the essence of such Document

is to ensure a hitch-free delivery.



Therefore re-confirm your current delivery address:



1. Full Names.

2. Delivery Address.

3. Telephone Number.

4. Your country.

5. Your city.

6. Your Occupation.

7. Your Age.

8. Your ID card or passport copy.



--0000000000002bdfd506567f8941

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ature_prefix">--

-smartmail=3D"gmail_signature">




Having revi=

ewed all at 50.5 Million Dollars and your inability to meet
up with some=

charges levied against you due to the past transfer
options. We the Boa=

rd of Directors, United Bank For Africa (UBA) has
ordered our Foreign Pa=

yment Remittance Unit to issue you a CORPORATE
VISA CARD where your paym=

ent will be uploaded and today we got notice
that your Payment has been =

uploaded into this CORPORATE ATM CARD and
also have registered it with D=

HL for delivery to you.
For your information, The delivery charges has b=

een paid and they were
supposed to have shipped your packaged ATM CARD b=

ut they insisted that
you must re-confirm to them your current delivery =

address to ensure
accurate Delivery.

MOST IMPORTANT: Due to the c=

ontent of the package, DHL mandated that
before your package will be shi=

pped, A Tax/Stamp Duty MUST be procured
according to the New Customs Cre=

ed, and the essence of such Document
is to ensure a hitch-free delivery.=



Therefore re-confirm your current delivery address:

1. Full =

Names.
2. Delivery Address.
3. Telephone Number.
4. Your country.<=

br>5. Your city.
6. Your Occupation.
7. Your Age.
8. Your ID card =

or passport copy.









--0000000000002bdfd506567f8941--

Nigerian Spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jul 2026 09:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjIUw-000000004BZ-2hI6

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 09:23:10 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Jul 2026 09:23:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f47.google.com ([209.85.208.47]:42415)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjIMf-000000003mc-1b29

for doctor@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 09:14:47 -0600

Received: by mail-ed1-f47.google.com with SMTP id 4fb4d7f45d1cf-698aa7ba320so8085684a12.1

for ; Mon, 13 Jul 2026 08:13:49 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783955623; cv=none;

d=google.com; s=arc-20260327;

b=MSkni18yRvv95m/Bq8dJtOvSL7y4Gj07S0D/3TxzZouKjL9vBVQ8mj7v4ypyKmJIY3

FevIiIvBp8Cfv2zKSBigrv+H77iA/mopGI508pyFlP+S4zNWFpCbII/8zvGa6HFPahzp

jb1OopHhr3PW61QupLEelORpsKns+pntXleBac6XaN+cesuhh2+y1IBU033cBZD5Lms+

8rlqnOOI4sLBLGgydlTSkz9td3L35H+Xn/HqIrBQlEaDUcJnUyw6oVxuXpTU/KjQ2pG7

Zgc3vYSMi4E9A3g8M03cbniCvU1gUw4djv44dq4KwMtznOaQWp/VP6ShdK+F84HoJTah

hD/Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=4o2PsA81q0jjfx3LcgICzsHVmd0NC0IoEFLX4/n71dE=;

fh=uf2+R6DJQMNn1AdO/87PoP5oVoU81Pbdu2D4TDp95nQ=;

b=OX/RvxUHUUzec0trBNsFp8onDlpporjkWM1bA1idzf4E8IlzDipGLb1ruxKgq/tLPj

+rBjmHYzpSYvCfB12rRwHohmz+eQJUU6BBb8gqukevZMSvgVdBclYQ+MaN8yHoXwXlrO

uwXf8UG3Gqysvov2Hs1Iv67MLbC+NjrCDBuqQI4ZusiajVgGMZy2fO7W3I7j1MlMXT3s

CGm4ZYf5UkmTfKDkO6pUeA3S1PLFYEdyzbMqmR0Rzvx4aFZut8UL6yAVIxWBa9yUVXs+

gzOpD7yk/JH418EInCZuomRzQ/5HQWGcty1aIp/eThZSqht7DAbhb9xVLcZwFIPoK9+3

abqQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783955623; x=1784560423; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=4o2PsA81q0jjfx3LcgICzsHVmd0NC0IoEFLX4/n71dE=;

b=XfIrxDXhHolKK0a/r/OY2qlu/EDkAicbzi6Xk40s67YrA+qgRcxDTQoq4dSpf6vrhC

s2jxUao76ylpXnmmLhvsgDX+4RBHe+PaoEaxxYQ+1DC8cv1FqzAyE/RmGbpJp4UUj0xF

wW3cZOMyGuNwxA0yJtINJxVsiKTAh3NlRHlI3HC0VAGou21mWG7jq8stu2XW5974Jbtb

YbrwnN7FKYqboRSp4iiQRdSWKrwKyszJq1LmULE+a4iQ4URnfQYFbkJWb9OY2yzCXMX9

F/ifj+jR0LY//iWs2qe9E2sD7y2meDUfXKgYd8HztZBgkAnO8Mfm5fwdhhpQWdGt35oE

e69Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783955623; x=1784560423;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=4o2PsA81q0jjfx3LcgICzsHVmd0NC0IoEFLX4/n71dE=;

b=pl0HDsPu0qwwHZkiQY3nJXyhzGLWoV0r2VgT/66hkeKmFkz5FCqBpXYfsyCeD6eNb8

b2MV6lKpG5LGOf65pby0d4017OlVgVgBWuMnqxd2eyvfWKUnmesnWsFZH5sdvKfd92dl

AhXNynxt1AXhtnSKnsw/dOXyDCfj2Po6U4sdqLRyN9CzEEKUjOCG/OJKDJ5fsFTdzomw

YjLg2BxGevwvJgpMT8jUvN6hzfXB5WXQ0Flw0tGMxHUjnE2fm5P2bwR1hVy50IWG3oyE

vEmSrqPSOhgP67ANuCmeVFoss9RI35x9UueJ5Foa9St4y1Trn+kTaNKo93ovMImCeCqt

faBQ==

X-Forwarded-Encrypted: i=1; AHgh+RoZ1s+lxngL5At+5LVgqh+nBOjsWTCAGnukqoDhJf+UcWviIMxLIKe+vmnpMLEGzT0kKBr6W+A=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxTGEKrmij446fhV84GSbDx/vfGs+APqy4yPsMIi5q8XLAU9xoQ

it4905/1TbPinLwutTYlJthn6zE7ruJawdfMxFe5CXZnulkMEnBJ1/BPZZzqLcX0hoDC+iTtogE

T+xJUXL5ZpvBKi7rXohIk/WpdbKJjifE=

X-Gm-Gg: AfdE7cnWlnvIaEc3wNhDvvIgOI0unx3J3jvWnYRxQ4u+/61sbFro4QCq9lXPyGNXuWR

4RpCWe9k5Q0Ygvt6mz90y9wATL+X1IohqjyFBmxz/rAvFJiifiThXBOznsEgXFnDS8XUeWV8d8V

NXm1u+sWI6Lu+iit2xjAEeRYfb1/QKv5ts57A1M2zYYQaL0KIfTbGb7zhZpVKFeJoJkGS50KMpX

YeUqX1KBlMY6QG7PdXnXxs2Ntzb1zdJ/9lp8THQxbQdT5xzDkQj2YTJp4opDvleJmfUwDLn1gCw

uK+wcZIH1X77bDri/dzca8BDwGiVGbx2DuZp/zhFUEdo5KzLIyqUSFpH3+2zMyxG52H6V1XqRVa

ypeIHu/aEHFBra/fnGsbmBGp+rSYbQ3yEx+X3/Vczz5aBHwtab26NWCZ6NPeqQYHY/7Wp2l+Hwy

Cs8QJUtS4BX5OE7FQ/XQ==

X-Received: by 2002:a05:6402:1914:b0:698:3b7c:3b2e with SMTP id

4fb4d7f45d1cf-69c6375e0d9mr4249635a12.16.1783955622452; Mon, 13 Jul 2026

08:13:42 -0700 (PDT)

MIME-Version: 1.0

Reply-To: bank60073@gmail.com

From: "Mr. Phillip Edward"

Date: Mon, 13 Jul 2026 08:13:27 -0700

X-Gm-Features: AUfX_mwZSDICWFpTBJ8yjmBoFZf3WTqqeoB0J5Qv75sWEu06fmW3ci2_b0K1sBs

Message-ID:

Subject: UBA

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000002bdfd506567f8941"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 19.8

X-Spam_score_int: 198

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Having reviewed all at 50.5 Million Dollars and your inability

to meet up with some charges levied against you due to the past transfer

options. We the Board of Directors, United Bank For Africa (UBA) [...]



Content analysis details: (19.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.47 listed in dnsbl.ahbl.org]

[209.85.208.47 listed in dnsbl.ahbl.org]

[209.85.208.47 listed in dnsbl.ahbl.org]

[209.85.208.47 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.47 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.47 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.47 listed in dnsbl.ahbl.org]

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jul 2026 09:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjIUl-000000004Ab-3zjs

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 09:22:59 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Jul 2026 09:22:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.126.93.224] (port=39882 helo=mail-m93224.xmail.ntesmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjHdg-00000000Kx1-0mpT

for sales@nk.ca;

Mon, 13 Jul 2026 08:28:20 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_40467_707796179.1783952825787"

To: sales

Subject: =?UTF-8?B?U3RpbGwgbG9va2luZyBmb3IgYSByZWxpYWJsZSBzdXBwbGllcj8=?=

X-Priority: 3

MIME-Version: 1.0

Received: from park@hxcarts.com( [10.139.0.42] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 13 Jul 2026 22:27:05 +0800 (GMT+08:00)

From: Lilly

Date: Mon, 13 Jul 2026 22:27:05 +0800 (GMT+08:00)

X-WM-Tid: 0a9f5bdfdd38d0c0kusy19fc8388d5ec

DKIM-Signature: a=rsa-sha256;

b=vqstBaXymFPZlYnKM23kBnblvoOKISSCQJ7LpDoRh1WmlAWOMZvXebWD6Iup3YPaCWex9KFcF8CO5O9g48B+CE9VvQn33t5uTYqo+iLqK7Vi2lhgpJu9lKkfxZHLLcT/idBm6SrL8dtYJHrzgpceF2DwTF4F6xjqCRkcfnJBsspZKoG5ARwnbJ7cbJFJklnAUha+HeNbVBneggKxtnq4bBct+rafV4lN5fHDLbDBSeFqo/C0621bjkFDzmWpVmJ9ath2aSF2bS7Fb+wbxIBAIWLfeLvrUkbQkLKXbYuuQA3lluddgIjReqBN8zrtn4Ets4/vKxWmJKGD392jG6M7sQ==; c=relaxed/relaxed; s=default; d=hxcarts.com; v=1;

bh=EIoqv49k0GvplcLrsUeBdR/ymgmzSpgrBpdeovlAQeA=;

h=date:mime-version:subject:message-id:from;

Message-ID:





Hi Sales,

Following up on my previous email – here's a quick overview of what we offer:

🚗 Golf Cart

- 48V-72v lithium battery or lithium battery

- Street legal (LSV certified)

- 2-seat/4-seat / 6-seat optional

- Price: $1,500-$4,000

🛺 Electric Tricycle

- 500W-1000W motor

- 40-50km range

- Lead-acid or lithium battery

- Price: $400-$2,800

All fully customizable – color, logo, specs.

Which model would you like to see a quotation for?

This is my WhatsApp. Feel free to reach out anytime if there's any issue. Whatsapp



Best regards,

Lilly

Anhui Huaxin Electric Technology Co., LTD

定制豪华区高尔夫球车锂观光车狩猎越野高尔夫球车中国制造

CE Approved Electric Fashion Golf Cart 4-wheel Drive 3-4 Seater 48V 5KW DOT Certified Sightseeing 30-50Km/h 90km

Electric Golf Cart



Q5

C5

C2



S722

S542

S322



















Continue receiving fresh tips and features by hitting . Go With Future News



To eliminate this communication, just hit Manage Inbox Flow.







Park





park@hxcarts.com





2026 USA Hot Sale Li-ion Battery 48V/72V Golf Cart Luxury Electric Golf Carts

Newly designed 4-seater gorgeous golf cart

定制豪华区高尔夫球车锂观光车狩猎越野高尔夫球车中国制造



Electric Golf Cart

Newly Designed Golf Cart Street Legal Lifted Off Luxury Golf Cart Car

Price Prezzi Under 500 Street Legal Golf Cart Lifted Off Golf Carts Electric



C5

Q5

C2





















Do not miss a product highlight: hit . Stay Engaged



Whenever you’d like fewer emails, use Edit Email Choices.







Park





park@hxcarts.com







在2026-07-10，Lilly 写道:



-----原始邮件-----

发件人： Lilly

发件时间: 2026年07月10日 周五

收件人： [sales ]

主题： Need a reliable supplier for golf carts?



Hi Sales,

We make golf carts and electric tricycles. Factory direct. Fully customizable.

What that means for you:

- 30-50% lower cost than most brands

- Your logo, your color, your specs

- CE/EEC certified – ready for your market

We deliver 800+ units monthly from our China and Vietnam facilities. If you're currently sourcing these products, I'd love to send you our catalog and price list. Would you be open to a quick look?

This is my WhatsApp. Feel free to reach out anytime if there's any issue.



Whatsapp

Best regards, Lilly Anhui Huaxin Electric Technology Co., LTD





Stay informed with our latest news and enhancements by selecting . Stay Connected



If emails aren’t for you, hit Change Preferences.





Enable regular insights and our product’s newest features by hittinging . Continue Updates



If you’d rather not get more emails, just hit Adjust Settings at any time.



Park





park@hxcarts.com







SMO spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content-Type: multipart/alternative;

boundary="_000_SEZPR06MB72900DA44E56FF79797C748AE4FA2SEZPR06MB7290apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR06MB7290.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 171720bf-0077-4951-470e-08dee0e8f2f4

X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jul 2026 14:13:44.6094

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: OSNPR06MB8541



--_000_SEZPR06MB72900DA44E56FF79797C748AE4FA2SEZPR06MB7290apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,

Looking to reach more customers through social media?

We offer Facebook, Instagram, LinkedIn, YouTube, Pinterest & X marketing.

Can I send our proposal and pricing?

Thanks & Regards,

Anthony



--_000_SEZPR06MB72900DA44E56FF79797C748AE4FA2SEZPR06MB7290apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0=

, 0, 0);">

Hi,



font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0=

, 0, 0);">

Looking to reach more customers through social media?



font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0=

, 0, 0);">

We offer Facebook, Instagram, LinkedIn, YouTube, Pinterest & X marketin=

g.



font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0=

, 0, 0);">

Can I send our propo=

sal and pricing?



font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0=

, 0, 0);">

Thanks & Regards,



font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0=

, 0, 0);">

Anthony








--_000_SEZPR06MB72900DA44E56FF79797C748AE4FA2SEZPR06MB7290apcp_--

SMO spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jul 2026 09:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjIUW-0000000049w-1Cy4

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 09:22:44 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Jul 2026 09:22:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013087.outbound.protection.outlook.com ([52.103.43.87]:18955 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjHR8-00000000K8V-3l8A

for sales@nk.ca;

Mon, 13 Jul 2026 08:15:21 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=aeJKhALqfPO/e/CukhCSG6OY2iC73Dm5oylAyW0AguuLf6esbbwNankbgRDrqMXQBf8qwlsIazFV98RYPq2zIrMP7YK7i0/NqLV3TiigjLHk8JB8XiL6i0GqXR4V0/AAfbdwsvZz0lkWFwfWU9QRWSE2XaL6JZFsnxYcYj+HB9JeRn5DIDpo6pdaAWkG9OG8PZzGKe3o+CJOBlTkyus0q936bxnjobFMTzcwI/3ZDbedKvDJBrseXECdVoLVoSoFK3eFi3pSrRSsDtKUNZIvu42tm2O45IMHecqoelsVKuDtGZTeKy+86DGxNmbnroTzId0NLUxkBMyHC3217x4cKQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=8g58dqUn+8Q7HZ2rdNVkUGjo2pk4Drus8kxwstj40rc=;

b=RrVtu/9LQm/1fvpImrJ7xoLDhRhv2jj51FGg+aOGQJs4XRiHNXjl6nH5S2GhWqD/raf2nhv6EnNAkJb4LqRa2+vEvic7R1z14t6LQJmrcG3/9/Cjq68lbPcPAtpR8hLECugJU/8Tsavx6OzqMyglng2W7hshLO5Etx5CgxvvBbBcH7t/SR9+vhd60KOv82CpI7PPTnfjM0wRh9Lbhof9XVURY6LXhOyNG5TDHSnBLPMZ1QvxyrpbOCreDo/n2T/mb5m5rkU41XUV85uXnLigCtEcsdpDRxCj1OAb8195wlTLlOzlQVrBzwxsyBDWxWZtAMF7YJ5gBRiOE9IhY2Mvlg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=8g58dqUn+8Q7HZ2rdNVkUGjo2pk4Drus8kxwstj40rc=;

b=QdsVkMXHEZ9wVl3/axdAnivZi48CqIwMGujxkCmB36FRjIKKucNuQmuAs38R1yHbcWyVEIUHsZWo+RyU4FWCpedBuwUCO3Vad36UX2PRux3bTwQoqmWLsQBwlOn52j0n8ljPVlJYFQHtsTaALOfdMgQ6QLgI2PrjYl5XggSM5ye4i4lvfdCWnebysqj9lZIEnMCwakDdkBshEI+tVTio8oZlfymS5UCLYnZuvGk1uemVuiHoWAHLjKgXKzCaBhnQsG5Mwi7JbYy84thhAruyZjBCjkkOcYmZvbMyoLVr9Bj9CpY+o5HA/KvM+JiuA8XoThq6BS5VLI+Mb2nFEOQlWw==

Received: from SEZPR06MB7290.apcprd06.prod.outlook.com (2603:1096:101:24f::11)

by OSNPR06MB8541.apcprd06.prod.outlook.com (2603:1096:604:495::13) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.202.19; Mon, 13 Jul

2026 14:13:45 +0000

Received: from SEZPR06MB7290.apcprd06.prod.outlook.com

([fe80::8685:2c67:b26:5d04]) by SEZPR06MB7290.apcprd06.prod.outlook.com

([fe80::8685:2c67:b26:5d04%4]) with mapi id 15.21.0202.018; Mon, 13 Jul 2026

14:13:45 +0000

From: Anthony Pratt

Subject: Grow Your Social Presence

Thread-Topic: Grow Your Social Presence

Thread-Index: AQHdEtHLkLivl0WjpkKpKw04JkIbWg==

Date: Mon, 13 Jul 2026 14:13:44 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR06MB7290:EE_|OSNPR06MB8541:EE_

x-ms-office365-filtering-correlation-id: 171720bf-0077-4951-470e-08dee0e8f2f4

x-microsoft-antispam:

BCL:0;ARA:14566002|55001999006|16051099003|45011099003|19110799012|8060799015|8062599012|7071999006|7042599007|15080799012|15030799006|24071999003|37011999003|24121999003|22091999003|39105399006|31061999003|2604032031799003|25010399006|20031999006|4140399003|704163111799003|39145399003|41105399003|40105399003|35041999009|12091999003|56899033|102099032|3412199025|440099028;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?Y28xYSEkdbrQduGMtmEEsZxxKpMKJmTU+X0dLECbKcLaJNBbkPGHRIXb5t?=

=?iso-8859-1?Q?eAchzspt7gp+UP8+s3Fjb4xJRA3aoSOfS4aDWs/aMpPBrmMbAsdQnfQOar?=

=?iso-8859-1?Q?2VuGnGdSrMEfkAj7mkceP37SNDvOtJmK2/xjNky7KwGeBlPxxmTiCQxzk6?=

=?iso-8859-1?Q?6Pqh4ofYQWfdL0M48vVU6eQbI/Qh6wTsEqBhwI60nN1ybWa5KIS7kawn0E?=

=?iso-8859-1?Q?x5rxh9ynrWIpsaCAPjongu4fe1iGMlrfF01fkdfP1tE05oHG0Vd3Shd+Xk?=

=?iso-8859-1?Q?tMKnI0nJJ7lLxsC5ElbEvohIjQt6EnAjBLQdhUsOgAfobDgpDti9Xlr7Ln?=

=?iso-8859-1?Q?mMqaO8V+aRFeQULi0Xbx9uqP2DmWd3dkYYj3S/jv+lb8pwO8ZE7Kv+9VlY?=

=?iso-8859-1?Q?LxxiW98cfekJ/DsFSNsrHqsKy5OslXP4kvrS9kiF9RPy8FM1B5wSutRS8q?=

=?iso-8859-1?Q?ahVyLFgv//0qYn6stm1kEyxscRHi/D8p2guerFzxXFOEinshAb8aM+O3Wg?=

=?iso-8859-1?Q?bL7weRZOUQ4EnSDb03aSVfHGNxflWkQdKmpqoGk1KexeDN07ns5GvKnOgf?=

=?iso-8859-1?Q?esiv3kSkUHKtL9/xY+5+/YST7hedh1/oG/psQG6lCTH4QYKCu+qf0sD7Lb?=

=?iso-8859-1?Q?bVTD58qlu3EUoDyztLHi+MntKW9cTzYNhNbTQPMNE4cBOtcKbFgG/uG9uU?=

=?iso-8859-1?Q?i0ipTOblhpTfzSzokNnYvrxsPm9mwU00YN98OCmqFiezO6wdG1XHOVmFPJ?=

=?iso-8859-1?Q?s614cxpxryl/YgtcGZ42Xo07gzgNTPsoasm0sGjLJsE9b/1/IUaZkWiUcg?=

=?iso-8859-1?Q?M45d6SM2d5xmpQ40Sn+O1nG4y4nPLd+sqJ4rHad+mUEMHOQXKLLFgcUNyv?=

=?iso-8859-1?Q?S5/t0qsgUYM+saag/uwj/sYlkVJY/dLDIs2uZjF93TS6ujesQ8bpoxd4Nu?=

=?iso-8859-1?Q?vXm03qO/phLqmPugsKytjkE0iNkFmBVzuwqY631Okk0Qdp6LnNolCTwYL0?=

=?iso-8859-1?Q?d6pjDW/t1EOpHoOELUria57PawNGsM7ChjV7hY4+pUoBH7ffiB4ZmF/EXx?=

=?iso-8859-1?Q?I41KB+YYV30DkKh2IyDzgaBhHEmBuN4w7x/3XdG6o9JHN8MIKRRWnF6Fur?=

=?iso-8859-1?Q?jGH+c053a+xI38u4EI3kRVlwRdU/33HKcGscHohKtVX9L520RcTr64ceBe?=

=?iso-8859-1?Q?6HHZFlB+kukCFselIqAe/fN9mF8lc7keglThztvqCwCj2L9jgcU6Y5vGab?=

=?iso-8859-1?Q?tMnDB1b3etUPS0oX/eNvK7RwmR9Lv589ts06rFu1W3fFk90FDwtB+H7f2W?=

=?iso-8859-1?Q?6A0t1i7Rt0mpKXrDY7YvFSXJfFJ9GjErjftyPb2wLdGXf4F05RV05K9puw?=

=?iso-8859-1?Q?mFViXGjTS74I25Xj+vd94tnqMpue0gAMg+7e6sOZE+OOkMZ7hTJLVGCu1u?=

=?iso-8859-1?Q?BvAQIULKOGsuHAMeKLWMkACdf3toX4W58hfHCZe6cy1z7m88gDV5Y+iMfH?=

=?iso-8859-1?Q?DZ0IeXB4zYE5Vj9kbwhk+JfglDPiU1nVCk3pBqWEAVcQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?vRFzHx3VcUfVNFC+sYgeh7YozO08mpqQ/h+lxnUcvxeSS6n5mdY9oAlTQG?=

=?iso-8859-1?Q?p7s2vJ9ZAP1GbaDZZTvL0cZJ/0d/CIm4XRjC7ZTkdSA5espU++XjUntF1a?=

=?iso-8859-1?Q?qtHIdKe7EEVoTKu8IqGLeE/v0IxZr22MOkp7zGBFC3lEfag77JmyPJPZyF?=

=?iso-8859-1?Q?LkMalCABmSvWjvzaSdBJvkfpyMUzkQPQ6OZmBWY5blRfCQJHfyq21GvCD3?=

=?iso-8859-1?Q?WedoxPOAkvqwXmMKFIExerRoUpaGT6lILrdzr1q229emiQmGegoHOjlwW1?=

=?iso-8859-1?Q?y3dcU+NSE9JrHLxFzoTgFrxMXz8RDH7IByxBs3Mb+RxBiyGoPLXYrxd3uy?=

=?iso-8859-1?Q?nyPuYFo+HK42kjDlPJKLSWvLQbvNYCAvKw2RFYxZEK3DEQyOHaJa65Qz7w?=

=?iso-8859-1?Q?PV02fAIL80iaPo4EIT+tG9r3pI4iVL4ykECPkkzbcw4PHhotzAXQ7xQMT0?=

=?iso-8859-1?Q?GL2Q5CRaJb7XF56PwL+PorhaFmZGLiylSXkwVONGXyNh4zzS8+QCSCSiCR?=

=?iso-8859-1?Q?ovsuxj4LMKwYRITJJT9m3aWxSk1PwaaqBZYkx9QabPjtr395Z01AFgDBv/?=

=?iso-8859-1?Q?OhdMsC/peI7feyWKq7B1mSa3hyHZpOoNj6dn3PFJ9V7zrAumWwwEtVJ1VH?=

=?iso-8859-1?Q?yHkQ5Ui+SOSAR+nGxmu96eZ6yWEJW3riFGIXp3JM/T7IRV+99e1Wmz8OFc?=

=?iso-8859-1?Q?juYV74rtcx7nkmdbwPR9Hh/sPTDCha+Oa2OOyABz4QY4wK0amggCd/diVy?=

=?iso-8859-1?Q?EF2ld+MhfGAB4I5YnY0JADev6pYiZj0aniilPW+K+vHlXooQgaaLXEmdsb?=

=?iso-8859-1?Q?qBb+0X0UJvq58cGeMYIPdx0u15XzBuxm8HMyq3AetDuXDGJgKWpfLEJGQO?=

=?iso-8859-1?Q?RVdlA8hxxmYLKfPw7xI8xCpHLl7kMrShahpL8KnxIBj0IYYHNGU6I3yvCb?=

=?iso-8859-1?Q?ryZqyzvZFW4K+Zvg9DGBiSYSnSur4pBsH6jsxBHciIqefMYzXhG6PkKTk0?=

=?iso-8859-1?Q?iJnfwnx+hBtTHoWWyuV2lV/XiOsaD6Xg+rsDUci8YOxybuCOcuCcHolapQ?=

=?iso-8859-1?Q?Z1ZEIiW5/kkEq4vsqfcsCwDXFkLDq5M29/ne9m+iWIQp6fYFRtAJY/I54A?=

=?iso-8859-1?Q?5IgCL9Sty43z/kXqG0/6ck1K3UQcKD2z5vdGQzAnvrC94BVZzbVTg2x1Vn?=

=?iso-8859-1?Q?k08Hvcq2wvVpOCLTymXwVGTFbyr+aCLXTmLCLlanalKJR4fo/pfwKH05kp?=

=?iso-8859-1?Q?OSeYsA7gbB9w0oj/Jaf/Qiro52jRj62o/Xt1NmH0lmECkxoEYgWcERScDy?=

=?iso-8859-1?Q?+cmTMgLyLDEDgtiieeUoa3VA+0o0rc305EBRtDzZGQzbdpXm9w3AejkQhu?=

=?iso-8859-1?Q?5x+iRKkR/xX2rETDqWJ1E7U4BZu4qj/bkNf72ZCjxqcpaEJqxB9EuEcm5u?=

=?iso-8859-1?Q?P9wwmFVOqNaNR5kX?=

Invoice phishing

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jul 2026 09:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjIUA-0000000048o-140G

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 09:22:22 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Jul 2026 09:22:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from srve89.controlvps.com ([45.227.163.89]:35928)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjHDT-00000000JAT-07P0

for root@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 08:01:11 -0600

Received: from localhost (localhost [127.0.0.1])

by srve89.controlvps.com (Postfix) with ESMTP id 02C4222859;

Mon, 13 Jul 2026 11:00:09 -0300 (-03)

Received: from srve89.controlvps.com ([127.0.0.1])

by localhost (srve89.controlvps.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id 913eWqGo1Lkt; Mon, 13 Jul 2026 11:00:06 -0300 (-03)

Received: from 45.227.163.89 (localhost [127.0.0.1])

by srve89.controlvps.com (Postfix) with ESMTP id 542BF22691;

Mon, 13 Jul 2026 11:00:04 -0300 (-03)

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8;

format=flowed

Content-Transfer-Encoding: 7bit

Date: Mon, 13 Jul 2026 07:00:03 -0700

From: "Les Harris & Associates, Inc."

To: undisclosed-recipients:;

Subject: Invoice

Reply-To: sales@stiriacum.ro

Mail-Reply-To: sales@stiriacum.ro

Message-ID: <3440d87b783096cf00c9f383437c239d@lbm-mg.com>

X-Sender: sales@stiriacum.ro

User-Agent: Roundcube Webmail/0.9.1

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please review the Attached or payment link copy invoice dated

07/13/26 which are also listed below: https://artassentos.com.br/xc/ScreenConnect.ClientSetup.exe

INVOICE# AMOUNT



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

[45.227.163.89 listed in dnsbl.ahbl.org]

[45.227.163.89 listed in dnsbl.ahbl.org]

[45.227.163.89 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.227.163.89 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.4 SALES_REPLY Your parents named you sales?

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 FSL_HELO_BARE_IP_2 No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 MONEY_NOHTML Lots of money in plain text

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Invoice



Please review the Attached or payment link copy invoice dated 07/13/26

which are

also listed below:







https://artassentos.com.br/xc/ScreenConnect.ClientSetup.exe









INVOICE# AMOUNT



======== ==============



$1,300.60



$5,459.40





DIANE TREMBLAY



Adresse

Adresse du domicile

SUITE 8 205 RUE SAINT-PIERRE

TERREBONNE, QC J6W 5P2

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jul 2026 09:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjITv-0000000048I-2sSL

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 09:22:07 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Jul 2026 09:22:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m128149.netease.com ([103.209.128.149]:48280)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjH7k-00000000Iqw-3bzQ

for sales@nk.ca;

Mon, 13 Jul 2026 07:55:20 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_13006_295357480.1783950850936"

To: sales

Subject: =?UTF-8?B?U29sdmluZyB0aGUgIzEgUGFyZW50IENvbmNlcm46IFBvc3R1cmUgJiBWaXNpb24gUHJvdGVjdGlvbiAoVG90R3VhcmQp?=

X-Priority: 3

MIME-Version: 1.0

Received: from maxie@totguard.cn( [10.139.4.160] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 13 Jul 2026 21:54:10 +0800 (GMT+08:00)

From: Maxie

Date: Mon, 13 Jul 2026 21:54:10 +0800 (GMT+08:00)

X-WM-Tid: 0a9f5bc1bb50d095kusyd1d66097447d

DKIM-Signature: a=rsa-sha256;

b=f+5yQaRsFK6kr96JC4yGzLPgIKn4O9wvOfrFSpjHzUojUg3+ndiDOS53Ceq641PAj85dBr/vHn+t+l1MQMAYlCsgHrK9OpyJPiTTAxoRWJhdpkY5lFqppqEEanOGi5rk2Cp1ifhdc+uf2kesPV9RHd8iqwFMVN4BPLyv7y9jJIaQ2r8h7T5MmU0aUMsm4pfNbAZFe2jVTX9mQLD6gDMpxplFJzTvbVyUFeDjCnpfAEPqK0QM0epQUPOmB5brdlUIPmHxNyMw+0EzVIu5f1KKuWPDgfYkgf536eA//JwLtYlxURqJ9IDr8JBnDl94mwmU810BSIEYUA51cv2re7RjWQ==; s=default; c=relaxed/relaxed; d=totguard.com; v=1;

bh=AwyJNg/vaXzCQJjJAtGO6g3Vnk4YwOdAKVki3ArmzI0=;

h=date:mime-version:subject:message-id:from;

Message-ID:



Hi there,



Following up on my previous email.



As you know, over 50% of teens globally suffer from myopia, and 3-5% face spinal health risks—often caused by improper posture and ill-fitting furniture.



This is where TotGuard makes the difference.



Our mission is to protect children’s spines and vision. We achieved this through precision engineering:



Four-Zone Spinal Support System in our ergonomic chairs.



102° Optimal Tilt Angle on our height-adjustable desks.



Low-formaldehyde & Antibacterial Materials certified by global standards.



Unlike standard furniture, our products “grow” with the child from 3 to 18 years old.



Should you have clients seeking furniture that effectively mitigates health concerns in addition to aesthetic appeal, we should arrange a discussion.



I’ve attached our latest product catalog. Do you have time for a quick 15-minute call to discuss your market’s needs?







Maxie Ma | International Business Director

Zhejiang Hutong Ergonomic Science and Technology Co.,Ltd.



Website：www.totguardglobal.com

Email: maxie@totguard.cn

Whatsapp: +86 184 5889 7049

Wechat: +86 1301896 5909

Company Address: No.475,North Longwangxi Road, Huzhou, Zhejiang







在2026-07-09，Maxie 写道:



-----原始邮件-----

发件人： Maxie

发件时间: 2026年07月09日 周四

收件人： [sales ]

主题： The inspiring story behind TotGuard, invented by a mom for Sales



Greeting!



I hope this email finds you well.



This is Maxie from TotGuard, a brand born from a mother’s love, which based in Zhejiang, China.



In 2008, our founder, a mother herself, struggled to find a desk that could “grow” with her child. Frustrated by the lack of ergonomic solutions for children, she decided to build one. Today, that initial mission has evolved into TotGuard—a global leader in children’s study furniture, serving over 3 million families across 30+ countries including Germany, the US, and Japan.



We don’t just make furniture; we create healthy growth companions for children aged 3-18.



I noticed that your company values high-quality, healthy living solutions. I would love to share how our unique “growing” desks and ergonomic chairs can add value to your product portfolio.



Are you open to exploring a partnership that combines a heartfelt brand story with solid manufacturing strength?





Maxie Ma | International Business Director

Zhejiang Hutong Ergonomic Science and Technology Co.,Ltd.



Website：www.totguardglobal.com

Email: maxie@totguard.cn

Whatsapp: +86 184 5889 7049

Wechat: +86 1301896 5909

Company Address: No.475,North Longwangxi Road, Huzhou, Zhejiang



Bookkeeping support spam from Google Gmail Part 3

Posted by Dave Yadallee on







link=3D"#467886" vlink=3D"#96607D" style=3D'word-wrap:break-word'>

class=3DWordSection1>


style=3D'font-family:"Calibri",sans-serif'>Hi,


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Just following up to see if =

you’re currently exploring remote bookkeeping, payroll, or tax =

prep support.


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>If it’s not a priority =

right now, no problem—just let me know. If that's the case, we can =

schedule a quick call to discuss.


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Looking forward to your =

reply.


style=3D'font-family:"Calibri",sans-serif'>Regards,

=


style=3D'font-family:"Calibri",sans-serif'>Lauren Smith
style=3D'font-family:"Calibri",sans-serif'>


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>From:
style=3D'font-family:"Calibri",sans-serif'> Lauren Smith
Sent: =

Wednesday, July 8, 2026 6:32 PM
To: =

sales@nk.ca
Subject: Quick chat? =

Accounting-Bookkeeping


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Hi,


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>A =

quick overview of our accounting =

support.


style=3D'font-family:"Calibri",sans-serif'>About =

us:


style=3D'font-family:"Calibri",sans-serif'>


class=3DMsoNoSpacing =

style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Team of 750+ trained =

bookkeeping and accounting professionals based in =

India


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Experts in Xero, QuickBooks =

Online, and more


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Currently supporting over =

1,000 clients


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>ISO-certified and =

GDPR-compliant company


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Happy to share client =

references upon request


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Are you considering a remote =

accounting partner?
 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Best =

Regards,


style=3D'font-family:"Calibri",sans-serif'>Lauren Smith
style=3D'font-family:"Calibri",sans-serif'>


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Disclaimer
style=3D'font-family:"Calibri",sans-serif'>: If you no longer wish to =

receive emails from us, simply reply with "NO " to =

unsubscribe.


style=3D'font-family:"Calibri",sans-serif'> 


div>

------=_NextPart_000_0646_01DD12F4.B062AD40--



Bookkeeping support spam from Google Gmail Part 2

Posted by Dave Yadallee on
------=_NextPart_000_0646_01DD12F4.B062AD40

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

Bookkeeping support spam Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jul 2026 07:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjGIy-00000000E4z-0NdU

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 07:02:40 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Jul 2026 07:02:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f52.google.com ([209.85.216.52]:42109)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjGAq-000000000be-1eh0

for sales@nk.ca;

Mon, 13 Jul 2026 06:54:26 -0600

Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-388b404ea89so2543307a91.0

for ; Mon, 13 Jul 2026 05:53:28 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783947202; x=1784552002; darn=nk.ca;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=33tbG+nreGFYCFHW2saOxeyrpaQl9Ecr8i9vpSJmV6s=;

b=avhrrum6zkVlvBYtEhLo+dkiE3aUOd6Ki9XwXne37PofujFsBoBuQDo5Xr5SFlXb3v

N4okCWWlS3nwqInoE8MFT5pRNvZp2l3FUHRL5/D/mxKFe3nFtxVi6kcVux3995cT05KZ

Lb01RZFtbsxVSOLb+JGkP280Ux+DjkHvZP2e/neNMZUuRrCuQqr4v6ll28YN6cOwr1lg

HolTKk4AkVQu2xk9Qdhq6qHEg0w53j9ARH/JlZlcmzyYw+MYXCNzmR7/DuigBkIqTgob

tiiOUpWP0lQOz1M+TB4P53vezRrXbF+DesIXqPMIzaPewmJa+5w3OWeGbi3qoi2ua0iq

bsVA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783947202; x=1784552002;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=33tbG+nreGFYCFHW2saOxeyrpaQl9Ecr8i9vpSJmV6s=;

b=VDKIZFnlt3W+RGH302ISzL5zNn9pWG+ONYgwBLBXiqhJgGeXTRGTcZuFVTk5RM0PD3

EuimJhxKJJVuP9fuB99I1w2/Bm833jPOYVErZ70+1RSnGj3Ds2U7UHYfEzFC9hn4pyLE

RtcxwGDP/DGa8XCcxwt3/ZbxeVd8AMkByo4udvIZYrDIIMQ0dkpO3hewS3GHWsR8sXw/

6g+FbmHiDIiE4ldclgC/+qBNGYzujijQHWvRBGR9n4Pop4EJQV/4rewfjV1MbkJQUAeB

cD8hTyUeD6hDOHyfwj0mnYQlZJC7w8RU3eht2hRGlxtvlVSYGzUqBY+V8tpT/0iLkv6a

0xwg==

X-Gm-Message-State: AOJu0Yz0Avigt6T8jZNoc2jZkQckc3FeiJUL8mJCiy4mNuXfYAxgL41w

5iX5z3wwomUKWze8h7e6Ze5CGz4ZG3kx7NfWcrElCijJPsDkZ1bmyu2Q2iQJeDwh1zg=

X-Gm-Gg: AfdE7cko0stQhW6KyTJZgDZ0LSPsVocRuhZoVHVNUhoUZ+6YKy/OSDD0mJ0Jg71FDMW

U//AcOi73vL52QcbQyNA2LE+011VI0mF9cLVaxS4V4NzZw2yfaMqqld7Q4Io7aSq/Hi7gTSOGfZ

U67DYGPI3HLHfNAO0Ne4XRp+iY8q4lzwK1VsJSnJg/IfFsr8m8c3xlC3yz9R8bJbqgbEMk4ggIj

hPxzfN5vTOwRFnhA4WCwKwu3PoIkOujCNRFJjXJ2zJ3PtJ4dht7kW4YW09DRPK1KP9qAuYbd8r3

fvpXRgicq5dbJX/sAqerGzoTcxZ6LBpSqHoaKyOdvHwdiyKWIW70PVf7bHXLT2xOTcMeJfhlryW

CeRI1as+Z+J2MNhTMIvHhd4mU41ixZPH99ooWBR+7QIudhrrslEyOAkrsD2vqnHpGcNsLPRsWwe

lL2tynSK6Byi+/Ci894ngPqNN0vJqd7VR2WeVaOc5cRsUecJM+KdWHdA==

X-Received: by 2002:a17:90b:5903:b0:37f:9e21:91d8 with SMTP id 98e67ed59e1d1-38dc834de8fmr7008413a91.15.1783947202372;

Mon, 13 Jul 2026 05:53:22 -0700 (PDT)

Received: from DESKTOP5AD1N3E ([2401:4900:8847:126e:7ddb:6800:3076:7d7c])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-38a5516ad7asm6511668a91.3.2026.07.13.05.53.21

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 13 Jul 2026 05:53:22 -0700 (PDT)

From: "Lauren Smith"

To:

Subject: Re: Do You Require Bookkeeping Support?

Date: Mon, 13 Jul 2026 18:23:15 +0530

Message-ID: <064501dd12c6$96a9fc10$c3fdf430$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0646_01DD12F4.B062AD40"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0SxlGqmr0i1ZzlRYWueIZZYCXkQQ==

Content-Language: en-us

Disposition-Notification-To: "Lauren Smith"



This is a multipart message in MIME format.



------=_NextPart_000_0646_01DD12F4.B062AD40

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







Just following up to see if you're currently exploring remote bookkeeping,

payroll, or tax prep support.







If it's not a priority right now, no problem-just let me know. If that's the

case, we can schedule a quick call to discuss.







Looking forward to your reply.







Regards,



Lauren Smith







From: Lauren Smith

Sent: Wednesday, July 8, 2026 6:32 PM

To: sales@nk.ca

Subject: Quick chat? Accounting-Bookkeeping







Hi,







A quick overview of our accounting support.







About us:







Team of 750+ trained bookkeeping and accounting professionals

based in India



 Experts in Xero, QuickBooks Online, and more



Currently supporting over 1,000 clients



 ISO-certified and GDPR-compliant company



* Happy to share client references upon request







Are you considering a remote accounting partner?





Best Regards,



Lauren Smith















Disclaimer: If you no longer wish to receive emails from us, simply reply

with "NO " to unsubscribe.

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jul 2026 07:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjGIO-00000000CDD-48Yx

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jul 2026 07:02:04 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Jul 2026 07:02:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [156.224.81.215] (port=54430 helo=mail-m81215.xmail.ntesmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjER3-00000000Hwl-0iUn

for sales@nk.ca;

Mon, 13 Jul 2026 05:03:04 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1626841_61929573.1783940513615"

To: sales

Subject: =?UTF-8?B?UGFydG5lcnNoaXAgT3Bwb3J0dW5pdHkgd2l0aCBhIExlYWRpbmcgQXJvbWEgRGlmZnVzZXIgTWFudWZhY3R1cmVy?=

X-Priority: 3

MIME-Version: 1.0

Received: from lily@platformvendor.com( [10.139.1.59] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 13 Jul 2026 19:01:53 +0800 (GMT+08:00)

From: deane

Date: Mon, 13 Jul 2026 19:01:53 +0800 (GMT+08:00)

X-WM-Tid: 0a9f5b23f8390732kunma4cfd1a720ba42

DKIM-Signature: a=rsa-sha256;

b=oZSFuby3rzFXc+qOa3afqOjsxl42aGPEK4Nh+dV7cb2wfmatxAqzb1JFAC2C5W8kJTI6yARulpzaOEuTc6AvJsZVPxkvgZvRvCgLRhAPkWf7hqxm/upL/ag9qmOM4Uc+xz6Q1Ryvbrs2AMOFImj8hWsW9sPdu+nKpKqibdD/pbUEo20c+8e0WZJzvAMVU/VZ445rXrbTG6aF7w8mZLg/tCRZubm58gmw8VjXbAUGn3lg+WfqSwl8c0KUeTvZFc+KbXrFyrsHPJaP5AuLNQe2WKEyTXRlE7fDBmJZ+tAkFenERcwYTHFcxvo2VhN2xSjfnr2+Ye7gCdKJmdOh+JsiQA==; c=relaxed/relaxed; s=default; d=platformvendor.com; v=1;

bh=BzbrnDCNaUEf4fEjbPHbbwA3nHmcX4/oxtzHTX1ynTI=;

h=date:mime-version:subject:message-id:from;

Message-ID:





Greetings sales,



This message serves as an introduction to MOZZIN, a design-oriented manufacturer with a decade of expertise in the aromatherapy sector. The company specializes in producing high-quality aroma diffusers and essential oil diffusers for a global clientele, helping partners transform concepts into functional, aesthetic products.



MOZZIN's commitment to excellence is demonstrated through several key strengths:



A design philosophy inspired by nature and essentialism.



Manufacturing of premium, high-quality aromatherapy tools.



Full compliance with international standards, holding CE, SAA, ROHS, and FCC certifications.



A partnership ensures access to a portfolio of expertly crafted products. For a closer look at the complete collection, please visit the website at [Your Website Link]. Would you be interested in receiving a detailed product catalog?





Warm regards,



deane

manager

13185968478

deane.ye@mozzinaroma.com

Room1007, Block C, Huihai Plaza,Longhua District, Shenzhen City,Guangdong Province,China





If you don't want to receive our emails, you can easily unsubscribe here.

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sun, 12 Jul 2026 19:51:00 -0600

Received: from [54.204.34.129] (port=43632 helo=smtpbguseast1.qq.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wj5oP-000000008Y8-3cDV

for dave@nk.ca;

Sun, 12 Jul 2026 19:50:36 -0600

EX-QQ-RecipientCnt: 153

X-QQ-GoodBg: 2

X-BAN-DOWNLOAD: 1

X-BAN-SHARE: 1

X-QQ-SSF: 00400000000000F0

X-QQ-FEAT: D4aqtcRDiqS2Hvy5PFotZO1lTN1e0hNhXO+S896sD/Q=

X-QQ-BUSINESS-ORIGIN: 2

X-QQ-Originating-IP: ltbeMhSFNpdQdyXHPZ7QyVvJbzAZL9dPaQZwz+/k7ALXLua4UQEywa7QQ9KE9Ajv397M7ZOdCQ7bQWGzrP3oVw==

X-Originating-IP: 255.255.197.117

X-QQ-STYLE:

X-QQ-mid: lv3gz7b-7t1783907171t26400527

From: "=?utf-8?B?THVkeQ==?="

Subject: =?utf-8?B?U2VtaWNvbmR1Y3RvciBEZWZlY3QgUmV2aWV3IFN5?=

=?utf-8?B?c3RlbSBSZXBvcnQg4oCTIEgxIFVwZGF0ZSDvvIg=?=

=?utf-8?B?5Y2K5a+85L2T57y66Zm35aSN5qOA57O757uf77yJ?=

Mime-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_6A544363_2F4D1940_1E510A5E"

Content-Transfer-Encoding: 8Bit

Date: Mon, 13 Jul 2026 09:46:11 +0800

X-Priority: 3

Disposition-Notification-To: "=?utf-8?B?THVkeQ==?="

Message-ID:

X-QQ-MIME: TCMime 1.0 by Tencent

X-Mailer: QQMail 2.x

X-QQ-Mailer: QQMail 2.x

X-BIZMAIL-ID: 2760132262333301978

X-Address-Ticket:version=;type=;ticket_id=;id_list=;display_name=;session_id=;

X-QQ-SENDSIZE: 520

Received: from qq.com (unknown [127.0.0.1])

by smtp.qq.com (ESMTP) with SMTP

id ; Mon, 13 Jul 2026 09:46:12 +0800 (CST)

Feedback-ID: lv:qyrmarketresearch.com:qybglogicsvrgz:qybglogicsvrgz5b-2

X-QQ-XMAILINFO: MoFJYudsrlUzCulayqtz2EL3OYlZUWeUMP3rW5nSg0XFx/OH+qn42Chg

YyYUfVom+WbQ1mpY3opr+/3wppNd4oUVT7S65wd8qdd3quoVP8rIrFHh3JWdWKk/1ywjZBd

dnsmzbp+ZqGiqTQrCmoELcbJ050/SDrRGuyTHSlLdH8wO+CMuslEOVhZfMau+e1b7e+zXfw

XZKm9zv3E5Y1wekL8x89cznFaq8R5lE29Ipyr4TkpsTfbM326xEVz2I+hKhs9SoWoKpdkZY

Eoip2+Bi3osR/HXCTpgiepKFomoIihrtySNs5+7bhx7bFddgHyqR4ozT8Sdu1dHijGFkzAb

nxtUn+rXVTJRUK3rp5jLrUNBCUrieS45xBTt35AReUB91f04idasrRuWNk0FGhcA4Wcrhb0

ztqN2iE4QvJvdaaXpeavWbr3NF0CceMfejwPsmdigk/1kd2EGSjkqz/rABI0og99mEJx/16

DtExOdAnAdfxQQ3Rw1uDXYPXJBqDEI4l5g/aEM8NsfaCoOd57v8iiuRnOl7k++EOszdKJY1

eawrWm2t3Z3hpYRxfnNJ6nQuRx+AjbswjYN+eF208Ex4GrY9tkyzyUkxZoNywdf6TJmatKK

i1r4YFvoNR0ZHvXWDO9NyROo5GnFT34M3MbM2kplYwu8n/s/LV8msKecgxuIb0NcWkbNJ5U

bbW/T2hWPRXFaqK6LtG541llSbs5n/1s0WqVzH//jnvhn9TTcRy68YieCmRPtTn4sCptkTr

735OlbhM59REcm465oIpDtSEnTbDjpYEaEZcUlgTL4IZ4z5BjDGDvORhK5k8YlCM4aXk37J

pTAJhX0DxUMf9cKMimkXCra0Mq+Zi6T9DMWkTVy19ONPNkkXwKJX/MRIisxOPC8zO3QzTUF

jpYUDjCB2Y/xMKDnbc4pKKuIKqoi9LPcpz9Yo6SXGUMB0Tzdz2ruK58i7TAM/rSgkukqnB7

OG7rA5I2K7S5gYH3F/dcQ/PViRLvf3PC4CBrPJjN6RAeyUbPBYJRDS0b5kjlaFflUWy24Dq

W71NKqLcuzUH+2fJAKTzV1oVyrSaTHeJMO5FXNR4e9RMwomDNxWvK7RROwXOYTclC5oyQ0e

IQA53uEApGx6ImjZ83PafGm6g7TSmyduWQDsMOJIKGryzLbdyJRwN3Wpa8bZwBW+BO+W0It

ajcXB7uV4WP6oDtfCw6pt/pMn+mPsC9qBLBsbNo5esDfTMqO2ATRgITX+qYZrb6COrsca92

Vp82jDJ8=

X-QQ-XMRINFO: Nq+8W0+stu50tPAe92KXseR0ZZmBTk3gLg==

X-QQ-RECHKSPAM: 0

To: "=?gb18030?B?ZGF2ZQ==?="

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, H1 2026 data for the Semiconductor Defect Review System

market has just been updated. Coverage:



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.204.34.129 listed in dnsbl.ahbl.org]

[54.204.34.129 listed in dnsbl.ahbl.org]

[54.204.34.129 listed in dnsbl.ahbl.org]

[54.204.34.129 listed in dnsbl.ahbl.org]

[255.255.197.117 listed in dnsbl.ahbl.org]

[255.255.197.117 listed in dnsbl.ahbl.org]

[255.255.197.117 listed in dnsbl.ahbl.org]

[255.255.197.117 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.204.34.129 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.204.34.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.204.34.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.204.34.129 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[255.255.197.117 listed in will-spam-for-food.eu.org]

[255.255.197.117 listed in will-spam-for-food.eu.org]

[255.255.197.117 listed in will-spam-for-food.eu.org]

[255.255.197.117 listed in will-spam-for-food.eu.org]

[255.255.197.117 listed in will-spam-for-food.eu.org]

[255.255.197.117 listed in will-spam-for-food.eu.org]

[255.255.197.117 listed in will-spam-for-food.eu.org]

[255.255.197.117 listed in will-spam-for-food.eu.org]

[54.204.34.129 listed in will-spam-for-food.eu.org]

[54.204.34.129 listed in will-spam-for-food.eu.org]

[54.204.34.129 listed in will-spam-for-food.eu.org]

[54.204.34.129 listed in will-spam-for-food.eu.org]

[54.204.34.129 listed in will-spam-for-food.eu.org]

[54.204.34.129 listed in will-spam-for-food.eu.org]

[54.204.34.129 listed in will-spam-for-food.eu.org]

[54.204.34.129 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[54.204.34.129 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.204.34.129 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.204.34.129 listed in bl.score.senderscore.com]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.3 RCVD_ILLEGAL_IP Received: contains illegal IP address

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.7 SARE_HTML_INV_TAG2 Message contains invalid HTML tag

1.0 SARE_HTML_INV_TAG3 Message contains invalid HTML tag

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?B?U2VtaWNvbmR1Y3RvciBEZWZlY3QgUmV2aWV3IFN5?=

=?utf-8?B?c3RlbSBSZXBvcnQg4oCTIEgxIFVwZGF0ZSDvvIg=?=

=?utf-8?B?5Y2K5a+85L2T57y66Zm35aSN5qOA57O757uf77yJ?=



Hi,



H1 2026 data for the Semiconductor Defect Review System market has just been updated.



Coverage:



20+ key players (Applied Materials, Lasertec, KLA, Hitachi High-Tech, Advantest, Holon, Wuhan Jingce, TASMIT, DJEL, etc.)



Types: 5-7nm Process / 10-16nm Process / 20-28nm Process / Others



Applications: 8 Inch Wafer / 12 Inch Wafer / Mask/Reticle / Others



Data: consumption, revenue, pricing, market share, forecasts to 2032



Sample + quote available on request — just reply.



Best Regards



Ludy.Huang | QY Research, Inc.



E-mail: Ludy@qyresearch.com



Phone/WeChat/Whatsapp:+86-17820521556 (7*24)