Amazon phish from Google Gmail

Evidence on spamcop

Web/SEO/App Spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Dec 2025 18:34:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXrHY-000000001HQ-3eOo

for dave@doctor.nl2k.ab.ca;

Mon, 22 Dec 2025 18:33:48 -0700

Resent-From: The Doctor

Resent-Date: Mon, 22 Dec 2025 18:33:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westusazolkn19012061.outbound.protection.outlook.com ([52.103.2.61]:47916 helo=SJ2PR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXjkA-000000002xm-319s

for sales@nk.ca;

Mon, 22 Dec 2025 10:31:01 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Ei8C3bl/GF+M0j+f2WzrpZx2SJnEBOgpL2iZH3uFqYOjAJftUilugBn5K8ULpiI+OuIwAwCfdQR188pVpOS4O8Yfkm3vi3B1bam7aBaXnNSSHo3XYgO6TxTtCpbgGD1oQm9A/7pqlIAMg18Hw1ruL1oQSosQsJVbXJU0UqEsJp9a16h5sq8i704xBgM0J8v1vQda0fBPDUAzsg47HCI4py+vhkHIbHarBlIbBdoCzJ4xZcIqNUKmEVghrCKMLDNcgNJdQEVAcOSdsHvduMGAJCqRsBKsh43zhIG/mgX9RbAvLxbaN59dtwTUuHa28YJClVNIKOK4nd8IgYMwNzQxGA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=36dVRYGCMz7os2rc17BA7q1V/WPfGRXS2/GzMCszjdo=;

b=wz7mQAH79m4ha1OvtKIlmocU1fJoprzihW0v9KTSon0XNFAzq2pf0RZCuuxp1Ro8T9kFlH8jjcdJZJ08FXKrJQg+I+V2FW6B/sCcPfs5+T8YNY+P2Nlofm2dIM3gHjZ8BfFu2HIQbZPaZnawX+JhvENrtAIY1g04u1NsNJ+krpYlZ6KkTDeqerrrU/UwMN/1pZSLqw37nYnunlql7iaXtRQrpiaHNi/lj5/PQ5n1a07wakvea0nF70QTebR87JruuD74kjK4F2vHFv65qqp2fXzYsC4EDNB7sNEVs51dZUjMrVIvEtQak2Z90Dj8AwB04uR4M44WMC6B8g2u8SKoBg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=36dVRYGCMz7os2rc17BA7q1V/WPfGRXS2/GzMCszjdo=;

b=FGCGfoTSpp9U7PkVm7F8I49229Tefp1ENhiHyCqGSxZB2X4P9qPJJdUOxWn9+Fdona0Kv8usGIm0zibMOKd9vvZpTEB5oWclEAazx3vsJ2h+V1zIbTBYrmqxTpBfeH7b5PnVmcoI+4/uGps8c5irxNzMJdXRs5WsS64bQDOpLr7cbJVSK5+1h/Gk6gqqYkF+bLRB6PdCGN+XMpcil6JPzBmhG3VYkQXf8efaPCRuK5CO2gcMDo8fqywaz6gZ7Ng0/fCmQTGltW20RoDKuH5qFmyDmlw8/KMDRZn+PyfVZ0IQVupmzrDVmyk7CRnyQrBJJd2LHus9v3td3Zu/TA8VFg==

Received: from MN2PR19MB3807.namprd19.prod.outlook.com (2603:10b6:208:1e8::24)

by DS4PR19MB9049.namprd19.prod.outlook.com (2603:10b6:8:29f::19) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9434.11; Mon, 22 Dec

2025 17:29:56 +0000

Received: from MN2PR19MB3807.namprd19.prod.outlook.com

([fe80::aa91:f1dc:7b1f:becc]) by MN2PR19MB3807.namprd19.prod.outlook.com

([fe80::aa91:f1dc:7b1f:becc%6]) with mapi id 15.20.9434.009; Mon, 22 Dec 2025

17:29:56 +0000

From: "Joyce Tucker ."

To: "sales@nk.ca"

Subject: =?utf-8?B?UXVhbGl0eSBTRU8uIEhvbmVzdCBQcmljaW5nIOKchQ==?=

Thread-Topic: =?utf-8?B?UXVhbGl0eSBTRU8uIEhvbmVzdCBQcmljaW5nIOKchQ==?=

Thread-Index: AQHcc2iXMCJZLSIGwE+ZkbsWJyhPsw==

Date: Mon, 22 Dec 2025 17:29:56 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: MN2PR19MB3807:EE_|DS4PR19MB9049:EE_

x-ms-office365-filtering-correlation-id: 943d967b-94a7-4fa1-f273-08de417fb9b0

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|20031999003|8062599012|15080799012|19110799012|8060799015|39105399006|38102599003|7042599007|31061999003|40105399003|440099028|3412199025|102099032|3430499032|17111999006;

x-microsoft-antispam-message-info:

=?utf-8?B?OHIzci9haVUvUStyYW9OL01wTVlNd3NCSEltK1FxalQzaE0wck1INWR0WEVZ?=

=?utf-8?B?Q0hZT1QwZFNZWkd3VGxWeHBucGhOS3pXa0o2U0lacTFGUGN0bWFHNW5Nc1hu?=

=?utf-8?B?TE4rZHl0WCtkQmVrUmk4SVh3SDFHL0duMXZ4S1Uyc2F0SHcrZkJBWmd0c3dl?=

=?utf-8?B?VDJOeHdBSktzT1dMYXNuSE41WVRzNkFDbXpMdHRSb292ZjliRnN6V3JVWW43?=

=?utf-8?B?c1Q0ay9WUnR1RHdud3J6Vkw4VnNTY1AzaDM2Ui81M0FoeXM1dGtOME5Qc3Zu?=

=?utf-8?B?MjhzK3hBei9BQXVobk5mSmY3SHZ1T3EySGxLejhiM0lDdmE5U3lHZkUvM1FS?=

=?utf-8?B?dEJ6VDEreDdpNVFpQ29maUs3d2ZXVVFHOVlLeWRJTDdyT1lCSitVL0hTeHlW?=

=?utf-8?B?KzE4ZU9TOS83UkZTc0JIWkVzOHRYTTU4TVB3Uys1eS9IN09iK1FweXI4WHlh?=

=?utf-8?B?cnZKWS9HQXJxV3l6SWR2N29DdnZWL052eEhjQXJKbzgwdys5dUNjVGdNbDZE?=

=?utf-8?B?eHRkaC95OThyWjl5RmNuRzh4ZnlqdlM0ZlQvMFBkNk1QcUlXR1RvUDlnQmJj?=

=?utf-8?B?WGNXUUJtb3hsWlA2aHZ3RG5JRitCSGgyeUhEaTNVVTN3b3ZtMXdTQkdWY0FD?=

=?utf-8?B?QnhEN0JTU0xHTDZQN3BSWjREVjllZGRwZHNFRzZEOFF6V0tBR2FnZlBSbm9s?=

=?utf-8?B?akVkUjQ1UllpUHNUMXdtMnp4QTY3RGZMSE93QmdPSlRyUkdmd3U1VThLQ09p?=

=?utf-8?B?THR4UURaMVpCemZFaStJNWFDaHI2UnZUTjRGdjlPZXlaeC9hSndOMXhZbEhi?=

=?utf-8?B?Z2NUSWwvdVIybzNjaGpxaWhaVnFON1pIVWtKV1d3N3ZmVVhJTHRCVnFJUE1Y?=

=?utf-8?B?Ymc1ZEtoa2p3Ung3WUJxeW5Wc21nRnk2bzI0Qmt4SkpxU0JLWDZydHE0Ukl2?=

=?utf-8?B?NnU2K1ArMzFIZm41dmVMWUo2T0VHaGRIZkNhWGhiZVRNLzZHeG45bU1LcDBl?=

=?utf-8?B?NjY2ckxjay8zMWlGVXdQS0lRb2hLUVlFY1hHLzdmNEpxN3ZqZ3dSNzBkRVY4?=

=?utf-8?B?cnVUdUNmaTljQUdPVTFtN1A4WnJwbm1uWDZNbllDLzBXRGcvU016d1VGQ2RC?=

=?utf-8?B?TVJzQjFtU1hRWEFWVGVBS3U3elZvSFpubTk4NkZ4Vnc3SVhMVDVNeTZCUWd4?=

=?utf-8?B?ZDRKVmM1SFNIWmlQWXBYV3daN05hb3cyci9acTF5alFSdjhRandraW1IaGlO?=

=?utf-8?B?WFFIY3MyUXg3NGljdjRDVGJ5VkZuQ1I0dkhGRXVUbnk5ZEp0NXcyUlA4enV0?=

=?utf-8?B?RTZ6djI3RTJ4NkppTTYrVmNvdjZSRW55YWgyM1B4ZzlnQW1ubmF6VzhuaUcw?=

=?utf-8?B?MERrQ005dlNMall1VExnTnYyYW1mcm1vbmg5d3llenphZEFEaks2NVhLSzBX?=

=?utf-8?B?QjFNR2w3YlVoa2twQ2lhaDZqbFlZajVHR21tdHJ3ZlAwWWFLWDh1MXR1a2lJ?=

=?utf-8?B?bUc2UXUrVWhXQko3bWRzRWdQSFo3NHlLYWRDUzRTcG5IbkVOc1pyL1VHbmVn?=

=?utf-8?B?NjhCbC96U29jZXpvTUpYejB5UWpGVFkrL2J1WVNvdVkrMEhQYXdoODNtVlhl?=

=?utf-8?B?dEFiYXdmOFVXYURWTDVQd1B4ZUpqRCtQTmNhamhVRUZ0cEpSclZUWnVyWUhl?=

=?utf-8?B?UEdVYktOb1lxWWEybm1BbC9uRDFPTy8zZ2FEZm9yQzRES2dyM3dlSlBGOS9q?=

=?utf-8?Q?kFJGJeH36STcleztbQ=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?RHAxenpvM1RTWlZYWFVaM1BiTk4vc09weGZQWnF3N3lSbGU1eVdWVEMyQ0x3?=

=?utf-8?B?SVBUVms3QWRXaUtjNG1Wd25SVktFUW9uVENXUzFxbkE5YlBINC9CR0I4c0p3?=

=?utf-8?B?VnFDbmg4VURyUnFrQStGdnAyemtiTHVyLzdQTXJUVll5ekJxbC9YeCt0aEVZ?=

=?utf-8?B?bmtLK0tIOWkrbjV1SFRoVU5jQlVlYkkzUGJ6USs1cTZNWVIzb05NTUJ0b3ZF?=

=?utf-8?B?b2RGMTFsQ29UMkJ5c2xlTm5IYUJwTVo3cTlSVGFPbXAzNjVuWFpvUFYyNXZ4?=

=?utf-8?B?NDY5bjFKMm8wZjhKV3J4YmxNSWdPK3V0MzdsZ2xlK1k1dHpQSkZ1citTc2Nt?=

=?utf-8?B?Y3hFWElVaGNrUjU2ZlJtM21welNEd0ZvVUpFa2prbHFLcVUrK1Q3MUZON245?=

=?utf-8?B?UEJTcjhlOXF1NlhWQjdzaVYydmNJSFZuUkVhdHJVT0ZDZElSdHFXdkxSUG9q?=

=?utf-8?B?L25td3pWQzYxWGo3VXp5T2NybEJVT252SVBVM0xCdlhJRWFIYjgyTmJENWw0?=

=?utf-8?B?VzJiZWtkbHlGSUZGY1NDWTJvK0YxU0FWWG1OalQrMTFqRFFYREpyOU9JOXJY?=

=?utf-8?B?VWRDY0Y5cU9YdnlMVTZLYi80M2dZTVhzeFZSYUlTYU9FWk9IUlQrOElqYlU0?=

=?utf-8?B?WDl5Rk96ejEvbm94aENjWlo2amowcVQxek5GN2lDcFpCNFFQNjB2RCtGSGo1?=

=?utf-8?B?NjllcVV5cjk0V2oxa1BEWE1nM0ZBa1BCTm03OFlRNFAzTWl4KzFXS3V3UUFh?=

=?utf-8?B?V213blVvZ0U5OXZxZDI5eDNMUkVXSXlxTWpiSVU3YjNUcWdaUUN2dDFPUXBP?=

=?utf-8?B?c0RyNVFOQTg0NUUwTS9tdEpBZzVZbGZPS2VxMXZsOHRJOUFBZGZXRW94dk01?=

=?utf-8?B?K0Z6blNaMEZhM0FmeFExTlJsRloyMDRzSEUzcVFVR21BM3pCbjV5L2ZEYWJ2?=

=?utf-8?B?cERzQWJPcnFpNnZFTE02YlRtV1JzR3ArLzZXbzlhcExVeFhHTkk2VW9WOGxs?=

=?utf-8?B?aHJuVSt2TXNEbjJpLzNzR2EyK3MwdkdkVUxZc0pBTmxkaWxVb1RkYjhXU1d3?=

=?utf-8?B?NU9wUEt0amdtK1FsdUpqc0k3aUNBV1lqaHRuWDk5aHNuVWI2eWZNVFRlcG5V?=

=?utf-8?B?N3ZvYURSa045MFozNWl1Y2FMQWt3ZWMwRnRIU0haWXc4Z0laTytxeTBpV1Jh?=

=?utf-8?B?ZlFHNW50VElKZVBadnJpUWdtTmJhVW04SmJKVmljSTJIRWU2UjZNVkxjVmc2?=

=?utf-8?B?UTJEa0FjS1hWRFkweWZ5OXptZ3cyOXNWY3B5WENpdGJzaldETUw2TzRwcmxS?=

=?utf-8?B?a3NaRlJvV3QrMWovQ1RwVk4wYzJjS0tZaE4vYzFKL0pXaU1SWTJsZ0VBMG42?=

=?utf-8?B?VXFwR0xPelFudzRoTEJuZG9xeWpOZytGRitQd0RBQkJEeEpJM3BnS0tWRHF0?=

=?utf-8?B?NXpSNUs4MkVsa3UvMEJraGlpN3B6anU5S1pYRmJTbDliMTUzUmkyQU5tQ2dw?=

=?utf-8?B?SU1iTmVzTlNjK2VhS1ZMTzU0RUVoY1FVd0dTN0xZekpDTTVsTXRBRFJnVVVK?=

=?utf-8?B?QjFKS1ZVMGxrOCs1STNUejZvSXVpRW1CVWtEQi85dXQyeUUwMTEzU2phVFZW?=

=?utf-8?B?dCtFUk1oQVZzSmJGWFNZQzNhU3AzS3g0WTFVY0x4OEJaOXQzL0hVSnlIa2JZ?=

=?utf-8?B?VlJRMzQrTWZUcktuVUZ3YjB1dGJTL25RYzdKNVA2R1BUbmNvS1c5YmMvUFVz?=

=?utf-8?B?VlhUdjBIUC83VGJZT2J5NmlneHl2d1Vad2U1RXdFQWhNdkpwQlpuTmtyaWJk?=

=?utf-8?B?WFEvZlpIS1FkNVBQU0UyN2xZeW1PL0Y1WW16YkVPTFd2VVV5ditIQnl6a25l?=

=?utf-8?B?b1pqQmY1ek9QY044bEJOQnB3Q1FQUXFYRG9HTEc4RW1NdGc9PQ==?=

Content-Type: multipart/alternative;

boundary="_000_MN2PR19MB3807F9F0582C764F1F692712A5B4AMN2PR19MB3807namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MN2PR19MB3807.namprd19.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 943d967b-94a7-4fa1-f273-08de417fb9b0

X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Dec 2025 17:29:56.4674

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS4PR19MB9049



--_000_MN2PR19MB3807F9F0582C764F1F692712A5B4AMN2PR19MB3807namp_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



SGksDQoNCkkgd2FzIGV4YW1pbmluZyB5b3VyIHdlYnNpdGUgYW5kIHNhdyB5b3UgaGF2ZSBhIGdv

b2QgZGVzaWduLCBhbmQgaXQgbG9va3MgZ3JlYXQsIGJ1dCBpdCB3YXMgbm90IHJhbmtpbmcgb24g

YW55IHNlYXJjaCBlbmdpbmVzIGZvciBtb3N0IG9mIHRoZSBrZXl3b3Jkcy4gQXJlIHlvdSBpbnRl

cmVzdGVkIGluIHByb21vdGluZyB5b3VyIGJ1c2luZXNzPw0KDQpNYXkgSSBzZW5kIHlvdSBhIHBy

aWNlIGxpc3QgJiBRdW90ZT8NCg0KUmVnYXJkcywNCg0KSm95Y2UNCg==



--_000_MN2PR19MB3807F9F0582C764F1F692712A5B4AMN2PR19MB3807namp_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i

dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5Pg0KPHA+PHN0cm9uZz5I

aSw8L3N0cm9uZz48L3A+DQo8cD48c3Ryb25nPkkgd2FzIGV4YW1pbmluZyB5b3VyIHdlYnNpdGUg

YW5kIHNhdyB5b3UgaGF2ZSBhIGdvb2QgZGVzaWduLCBhbmQgaXQgbG9va3MgZ3JlYXQsIGJ1dCBp

dCB3YXMgbm90IHJhbmtpbmcgb24gYW55IHNlYXJjaCBlbmdpbmVzIGZvciBtb3N0IG9mIHRoZSBr

ZXl3b3Jkcy4mbmJzcDtBcmUgeW91IGludGVyZXN0ZWQgaW4gcHJvbW90aW5nIHlvdXIgYnVzaW5l

c3M/PC9zdHJvbmc+PC9wPg0KPHA+PHN0cm9uZz5NYXkgSSBzZW5kIHlvdSBhIHByaWNlIGxpc3Qg

JmFtcDsgUXVvdGU/PC9zdHJvbmc+PC9wPg0KPHA+PHN0cm9uZz5SZWdhcmRzLDwvc3Ryb25nPjwv

cD4NCjxwPjxzdHJvbmc+Sm95Y2U8L3N0cm9uZz48L3A+DQo8L2JvZHk+DQo8L2h0bWw+DQo=



--_000_MN2PR19MB3807F9F0582C764F1F692712A5B4AMN2PR19MB3807namp_--

Donation spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Dec 2025 18:34:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXrHL-000000001Gy-0eFu

for dave@doctor.nl2k.ab.ca;

Mon, 22 Dec 2025 18:33:35 -0700

Resent-From: The Doctor

Resent-Date: Mon, 22 Dec 2025 18:33:35 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vpn.ledick.de ([85.16.135.70]:42841)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXoYU-00000000PuX-2JN4

for doctor@nl2k.ab.ca;

Mon, 22 Dec 2025 15:39:15 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ledick.de;

s=s1; h=MIME-Version:Content-Type:Reply-To:Message-ID:Date:Subject:To:From:

Sender:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=O49KMMf5YWmkFu+qfUTRH1KZZNJlkTs7OBMBXSYZcxw=; b=JEadBOpVHh2EZagcJBgd9iS0JB

//8VRHSlNO824fDkZo6GCrPHLVt/8/jNTAel2s1fScOwJb6juOgp+m4+4xVcuJHj9EJCCQNN2KUKB

iYXgygrEeS+FAZ0BEnE5NZjt28GbFBmQrs358TH99pe69hNmwDEs9hDjJa8hkaXD3goW+oWNbDzum

/rhDb+31ygX+X5UNNgNMEaBf2Q1n2ra5EHNur+yD3y5/zfAog6hNqMVxUvzV8JTkTolu9UWk4kGOi

6OQM4r6vpV0I8ch6VhueohaBaEecALlXwmTbncBKrArN3Sg+AhWZ46QFvU50LL63NHGOd/mqHXLl0

ztR2S5EA==;

Received: from hvexchange ([172.16.1.251]:14517 helo=vpn.ledick.de)

by vpn.ledick.de with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1vXffO-000000000qw-0PnZ;

Mon, 22 Dec 2025 14:09:38 +0100

Received: from hvExchange.lfg.local (172.16.1.251) by hvExchange.lfg.local

(172.16.1.251) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.36; Mon, 22 Dec

2025 14:09:20 +0100

Received: from hvExchange.lfg.local ([fe80::8bd6:aa22:36f9:419b]) by

hvExchange.lfg.local ([fe80::8bd6:aa22:36f9:419b%12]) with mapi id

15.02.1544.036; Mon, 22 Dec 2025 14:09:20 +0100

From: Feyna Carstens

To: Feyna Carstens

Subject: HELLO

Thread-Topic: HELLO

Thread-Index: AdxzRC+Kxthc0a2yXEOrHGmWT07oJQ==

Date: Mon, 22 Dec 2025 13:09:20 +0000

Message-ID:

Reply-To: "mfrancafissolo00@gmail.com"

Accept-Language: en-AU, de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [212.102.39.209]

Content-Type: multipart/alternative;

boundary="_000_f1cf68b75e744501adca21158594c98eledickde_"

MIME-Version: 1.0

X-Spam_score: 14.1

X-Spam_score_int: 141

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Mrs maria has a donation of 3.5m for you . Reply for more

details. Mrs maria has a donation of 3.5m for you . Reply for more details.





Content analysis details: (14.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[212.102.39.209 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

[85.16.135.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.102.39.209 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[212.102.39.209 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

[85.16.135.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[212.102.39.209 listed in sbl-xbl.spamhaus.org]

[212.102.39.209 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[212.102.39.209 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mfrancafissolo00(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} HELLO



--_000_f1cf68b75e744501adca21158594c98eledickde_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Mrs maria has a donation of 3.5m for you . Reply for more details.





--_000_f1cf68b75e744501adca21158594c98eledickde_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>








break-word">



Mrs maria has a donation of 3.5m for you . Reply for=

more details.











--_000_f1cf68b75e744501adca21158594c98eledickde_--

Chineise products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Dec 2025 09:57:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXjCg-00000000OaX-3syT

for dave@doctor.nl2k.ab.ca;

Mon, 22 Dec 2025 09:56:14 -0700

Resent-From: The Doctor

Resent-Date: Mon, 22 Dec 2025 09:56:14 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out0-57.static.mail.aliyun.com ([59.82.0.57]:35916)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXhkJ-00000000HLm-0Lab

for root@nk.ca;

Mon, 22 Dec 2025 08:23:03 -0700

Received: from mail-serve.hagro.cn(mailfrom:manager28@pengyuaninc.com fp:SMTPD_---.fqW9voo_1766416910 cluster:ay29)

by smtp.aliyun-inc.com;

Mon, 22 Dec 2025 23:21:51 +0800

Date: Mon, 22 Dec 2025 23:21:50 +0800

To: root

From: manager28

Subject: tea bag filter paper

Message-ID:

X-Priority: 3

X-Mailer: PHPMailer 6.9.1 (https://github.com/PHPMailer/PHPMailer)

AICC-RANDSTR-UUID: 42656_91099431_2134549224636537430342918405651

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




=3Dutf-8"/>
=3D"https://fob.ai.cc/assets/plugins/ueditor/themes/iframe.css?v=3D1">
e id=3D"tablesort">table.sortEnabled tr.firstRow th,table.sortEnabled tr.fi=

rstRow td{padding-right:20px;background-repeat: No-repeat;background-positi=

on: Center Right; Background-image:url(https://fob.ai.cc/assets/plugins/u=

editor/themes/default/images/sortable.png);}


yle=3D"line-height: 1.5em;">
an";">Dear
Microsoft YaHei UI", sans-serif; font-size: 13px; letter-spacing: 0.49=

92px; text-wrap-mode: wrap; background-color: rgb(255, 255, 255);"> Ro=

ot 
,


font-family: "times new roman";">


-height: 1.5em;">=

Have a nice day.


font-family: "times new roman";">We are a manufacturer in China w=

hich founded in 2004  ,hope you have time to view my following product=

ion introduction.


"font-family: "times new roman";">We specialized in producing all=

kinds of metallized film ,PE coated MPET  ,laminated foil and thermal=

insulation material.


e=3D"font-family: "times new roman";">PET metallized film 12mic&n=

bsp;   PET metallized film 12mic+PE12mic

t-family: "times new roman";"> 


eight: 1.5em;">Mo=

re information will be provided according to special requirement

=


w roman";">Packaging:  


1.5em;"> &nb=

sp;   
9ecf863739104fda14089f2bf8a107.png" title=3D"202505839ecf863739104fda14089f=

2bf8a107.png" alt=3D"=E4=BC=81=E4=B8=9A=E5=BE=AE=E4=BF=A1=E6=88=AA=E5=9B=

=BE_17466909295483.png"/>
05efcb82dc063d75ec96285aabe4ef138b.png" title=3D"202505efcb82dc063d75ec9628=

5aabe4ef138b.png" alt=3D"=E4=BC=81=E4=B8=9A=E5=BE=AE=E4=BF=A1=E6=88=AA=

=E5=9B=BE_17466909339786.png"/>


> 
>


ew roman";">Please notices me if you have need to order ,i am always h=

ere for you !


t-family: "times new roman";"> 


eight: 1.5em;">Lo=

oking forwarder your early reply


>
://service.mailhagro.com/api/subscribe-email/554047?key=3D35bae37a54de39b90=

37213933f46f9bd+eyJmcm9tIjoibWFuYWdlcjI4QHBlbmd5dWFuaW5jLmNvbSIsInRvIjoicm9=

vdEBuay5jYSIsInN1YmplY3QiOiJ0ZWEgYmFnIGZpbHRlciBwYXBlciJ9" class=3D"subscri=

be" style=3D"display: inline-block;background: #ddd;border-radius: 4px;padd=

ing: 3px 15px;color: #a6a6a6;text-decoration: none;font-size: 12px;" target=

=3D"_blank">Subscribe

ribe-email/554047?key=3D35bae37a54de39b9037213933f46f9bd+eyJmcm9tIjoibWFuYW=

dlcjI4QHBlbmd5dWFuaW5jLmNvbSIsInRvIjoicm9vdEBuay5jYSIsInN1YmplY3QiOiJ0ZWEgY=

mFnIGZpbHRlciBwYXBlciJ9" class=3D"unsubscribe" style=3D"display: inline-blo=

ck;background: #ddd;border-radius: 4px;padding: 3px 15px;color: #a6a6a6;tex=

t-decoration: none;font-size: 12px;" target=3D"_blank">Unsubscribe

n>





Chinese products spam Part 2



dC1zaXplOjEycHQ7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRy

YW5zZm9ybTpub25lIj4gPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpOyBm

b250LXNpemU6MTJwdDsgZm9udC1zdHlsZTpub3JtYWw7IGZvbnQtd2VpZ2h0OmJvbGQ7IHRleHQt

dHJhbnNmb3JtOm5vbmUiPkF0bWVsLDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2Fs

aWJyaTsgZm9udC1zaXplOjEycHQ7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpib2xk

OyB0ZXh0LXRyYW5zZm9ybTpub25lIj4gPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpD

YWxpYnJpOyBmb250LXNpemU6MTJwdDsgZm9udC1zdHlsZTpub3JtYWw7IGZvbnQtd2VpZ2h0OmJv

bGQ7IHRleHQtdHJhbnNmb3JtOm5vbmUiPk1VUkFUQSw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt

ZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMnB0OyBmb250LXN0eWxlOm5vcm1hbDsgZm9udC13

ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+IDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u

dC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjEycHQ7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250

LXdlaWdodDpib2xkOyB0ZXh0LXRyYW5zZm9ybTpub25lIj5UREssPC9zcGFuPjxzcGFuIHN0eWxl

PSJmb250LWZhbWlseTpDYWxpYnJpOyBmb250LXNpemU6MTJwdDsgZm9udC1zdHlsZTpub3JtYWw7

IGZvbnQtd2VpZ2h0OmJvbGQ7IHRleHQtdHJhbnNmb3JtOm5vbmUiPiBBRCwgTW9sZXgsIFlhZ2Vv

LCBNYXhpbSwgVEkuLi48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7IGZv

bnQtc2l6ZToxMnB0Ij5mb3IgT0VNIGFuZCBFTVMgY29tcGFueSBmb3IgbW9yZSB0aGFuIDEwIHll

YXJzLjwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0ibWFyZ2luOjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQt

ZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMnB0Ij4mbmJzcDs8L3NwYW4+PC9wPgoKPHAgc3R5

bGU9Im1hcmdpbjowcHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpOyBmb250LXNp

emU6MTJwdCI+QmVsb3cgaXMgbmV3IGFycml2YWwgcGFydHM6PC9zcGFuPjwvcD4KCjxwIHN0eWxl

PSJtYXJnaW46MHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXpl

OjEycHQiPiZuYnNwOzwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0ibWFyZ2luOjBwdCI+TE00MTI4Q01G

WC0zLjMvTk9QQiBUSSAyMDIyKyZuYnNwOzxiciAvPgpMTTMzN0lNUC9OT1BCIFRJIDIwMTkrJm5i

c3A7PGJyIC8+CkxNMzE3QUVNUC9OT1BCIFRJIDIwMjArJm5ic3A7PGJyIC8+CkFEVU0xMjAxQlJa

LVJMNyBBREkgMjAyMismbmJzcDs8YnIgLz4KQURVTTE0MDFBUldaLVJMIEFESSAyMDI0KyZuYnNw

OzxiciAvPgpBRFVNMTEwMEFSIEFESSAyMDIyKyZuYnNwOzxiciAvPgombmJzcDs8L3A+Cgo8cCBz

dHlsZT0ibWFyZ2luOjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQt

c2l6ZToxMnB0Ij5XZWxjb21lIGZvciB5b3VyIG5ldyBpbnF1aXJ5Ljwvc3Bhbj48L3A+Cgo8cCBz

dHlsZT0ibWFyZ2luOjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsOyBmb250LXNp

emU6MTAuNXB0OyBmb250LXN0eWxlOm5vcm1hbDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+Jm5ic3A7

PC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJtYXJnaW46MHB0Ij48c3BhbiBzdHlsZT0iYmFja2dyb3Vu

ZC1jb2xvcjojZmZmZmZmOyBmb250LWZhbWlseTpDYWxpYnJpOyBmb250LXNpemU6MTJwdDsgZm9u

dC1zdHlsZTpub3JtYWw7IGZvbnQtd2VpZ2h0OmJvbGQ7IHRleHQtdHJhbnNmb3JtOm5vbmUiPkJl

c3QgUmVnYXJkczwvc3Bhbj48c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjojZmZmZmZmOyBm

b250LWZhbWlseTrlrovkvZM7IGZvbnQtc2l6ZToxMnB0OyBmb250LXN0eWxlOm5vcm1hbDsgZm9u

dC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+Jm5ic3A7PC9zcGFuPjwvcD4KCjxw

IHN0eWxlPSJtYXJnaW46MHB0Ij48c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjojZmZmZmZm

OyBmb250LWZhbWlseTpDYWxpYnJpOyBmb250LXNpemU6MTMuNXB0OyBmb250LXN0eWxlOm5vcm1h

bDsgZm9udC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+QW15PC9zcGFuPjwvcD4K

CjxwIHN0eWxlPSJtYXJnaW46MHB0Ij48c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjojZmZm

ZmZmOyBmb250LWZhbWlseTpDYWxpYnJpOyBmb250LXNpemU6MTJwdDsgZm9udC1zdHlsZTpub3Jt

YWw7IGZvbnQtd2VpZ2h0OmJvbGQ7IHRleHQtdHJhbnNmb3JtOm5vbmUiPlNhbGVzIG1hbmFnZXI8

L3NwYW4+PC9wPgoKPHAgc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjsgbWFyZ2luOjBw

dCI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjsgY29sb3I6IzkyZDA1MDsg

Zm9udC1mYW1pbHk6Zm9udC1zaXplOjE4cHQ7Zm9udC1zdHlsZTppdGFsaTsgZm9udC1zaXplOjEz

LjVwdDsgZm9udC1zdHlsZTpub3JtYWw7IGZvbnQtd2VpZ2h0OmJvbGQ7IHRleHQtdHJhbnNmb3Jt

Om5vbmUiPk9uZTwvc3Bhbj48c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjojZmZmZmZmOyBj

b2xvcjojOTJkMDUwOyBmb250LWZhbWlseTpmb250LXNpemU6MThwdDtmb250LXN0eWxlOml0YWxp

OyBmb250LXNpemU6MTMuNXB0OyBmb250LXN0eWxlOm5vcm1hbDsgZm9udC13ZWlnaHQ6Ym9sZDsg

dGV4dC10cmFuc2Zvcm06bm9uZSI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5k

LWNvbG9yOiNmZmZmZmY7IGNvbG9yOiM5MmQwNTA7IGZvbnQtZmFtaWx5OmZvbnQtc2l6ZToxOHB0

O2ZvbnQtc3R5bGU6aXRhbGk7IGZvbnQtc2l6ZToxMy41cHQ7IGZvbnQtc3R5bGU6bm9ybWFsOyBm

b250LXdlaWdodDpib2xkOyB0ZXh0LXRyYW5zZm9ybTpub25lIj5SaXZlcjwvc3Bhbj48c3BhbiBz

dHlsZT0iYmFja2dyb3VuZC1jb2xvcjojZmZmZmZmOyBjb2xvcjojMzM5OTMzOyBmb250LWZhbWls

eTpmb250LXNpemU6MThwdDtmb250LXN0eWxlOml0YWxpOyBmb250LXNpemU6MTMuNXB0OyBmb250

LXN0eWxlOm5vcm1hbDsgZm9udC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+Jm5i

c3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7IGNvbG9yOiM1

OTU5NTk7IGZvbnQtZmFtaWx5OmZvbnQtc2l6ZToxOHB0O2ZvbnQtc3R5bGU6aXRhbGk7IGZvbnQt

c2l6ZToxMy41cHQ7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRy

YW5zZm9ybTpub25lIj5FbGVjdHJvbmljczwvc3Bhbj48c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1j

b2xvcjojZmZmZmZmOyBjb2xvcjojNTk1OTU5OyBmb250LWZhbWlseTpmb250LXNpemU6MThwdDtm

b250LXN0eWxlOml0YWxpOyBmb250LXNpemU6MTMuNXB0OyBmb250LXN0eWxlOm5vcm1hbDsgZm9u

dC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0

eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7IGNvbG9yOiM1OTU5NTk7IGZvbnQtZmFtaWx5

OmZvbnQtc2l6ZToxOHB0O2ZvbnQtc3R5bGU6aXRhbGk7IGZvbnQtc2l6ZToxMy41cHQ7IGZvbnQt

c3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRyYW5zZm9ybTpub25lIj5MdGQu

PC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJtYXJnaW46MHB0Ij48c3BhbiBzdHlsZT0iYmFja2dyb3Vu

ZC1jb2xvcjojZmZmZmZmOyBmb250LWZhbWlseTpDYWxpYnJpOyBmb250LXNpemU6MTBwdDsgZm9u

dC1zdHlsZTpub3JtYWw7IGZvbnQtd2VpZ2h0OmJvbGQ7IHRleHQtdHJhbnNmb3JtOm5vbmUiPjgy

OCBOb3J0aCwgQ2VudGVyLDwvc3Bhbj48c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjojZmZm

ZmZmOyBmb250LWZhbWlseTpDYWxpYnJpOyBmb250LXNpemU6MTBwdDsgZm9udC1zdHlsZTpub3Jt

YWw7IGZvbnQtd2VpZ2h0OmJvbGQ7IHRleHQtdHJhbnNmb3JtOm5vbmUiPiZuYnNwOzwvc3Bhbj48

c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjojZmZmZmZmOyBmb250LWZhbWlseTpDYWxpYnJp

OyBmb250LXNpemU6MTBwdDsgZm9udC1zdHlsZTpub3JtYWw7IGZvbnQtd2VpZ2h0OmJvbGQ7IHRl

eHQtdHJhbnNmb3JtOm5vbmUiPkx1b0h1PC9zcGFuPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNv

bG9yOiNmZmZmZmY7IGZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMHB0OyBmb250LXN0

eWxlOm5vcm1hbDsgZm9udC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+Jm5ic3A7

PC9zcGFuPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7IGZvbnQtZmFtaWx5

OkNhbGlicmk7IGZvbnQtc2l6ZToxMHB0OyBmb250LXN0eWxlOm5vcm1hbDsgZm9udC13ZWlnaHQ6

Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+RGlzdCwgU2hlbnpoZW4sIEd1YW5nZG9uZywgQ2hp

bmEsIDUxODAwMCB1bWFpbDwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0ibWFyZ2luOjBwdCI+PHNwYW4g

c3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjsgZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9u

dC1zaXplOjEwcHQ7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRy

YW5zZm9ybTpub25lIj5UZWw6PC9zcGFuPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNm

ZmZmZmY7IGZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMHB0OyBmb250LXN0eWxlOm5v

cm1hbDsgZm9udC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+Jm5ic3A7PC9zcGFu

PjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7IGZvbnQtZmFtaWx5OkNhbGli

cmk7IGZvbnQtc2l6ZToxMHB0OyBmb250LXN0eWxlOm5vcm1hbDsgZm9udC13ZWlnaHQ6Ym9sZDsg

dGV4dC10cmFuc2Zvcm06bm9uZSI+Kzg2LTc1NS04NDE3IDU3MDk8L3NwYW4+PC9wPgoKPHAgc3R5

bGU9Im1hcmdpbjowcHQiPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7IGZv

bnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMHB0OyBmb250LXN0eWxlOm5vcm1hbDsgZm9u

dC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+RmF4OiArODYtNzU1LTI4NTQgODk4

NDwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0ibWFyZ2luOjBwdCI+PHNwYW4gc3R5bGU9ImJhY2tncm91

bmQtY29sb3I6I2ZmZmZmZjsgZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjEwcHQ7IGZv

bnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRyYW5zZm9ybTpub25lIj5T

a3lwZTo8L3NwYW4+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjsgZm9udC1m

YW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjEwcHQ7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdl

aWdodDpib2xkOyB0ZXh0LXRyYW5zZm9ybTpub25lIj4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9

ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjsgZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXpl

OjEwcHQ7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRyYW5zZm9y

bTpub25lIj5hbXkub25lcml2ZXI8L3NwYW4+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6

I2ZmZmZmZjsgZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjEwcHQ7IGZvbnQtc3R5bGU6

bm9ybWFsOyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRyYW5zZm9ybTpub25lIj4mbmJzcDs8L3Nw

YW4+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjsgZm9udC1mYW1pbHk6Q2Fs

aWJyaTsgZm9udC1zaXplOjEwcHQ7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpib2xk

OyB0ZXh0LXRyYW5zZm9ybTpub25lIj4mbmJzcDs8L3NwYW4+PC9wPgoKPHAgc3R5bGU9Im1hcmdp

bjowcHQiPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7IGZvbnQtZmFtaWx5

OkNhbGlicmk7IGZvbnQtc2l6ZToxMHB0OyBmb250LXN0eWxlOm5vcm1hbDsgZm9udC13ZWlnaHQ6

Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+RW1haWw6PC9zcGFuPjxzcGFuIHN0eWxlPSJiYWNr

Z3JvdW5kLWNvbG9yOiNmZmZmZmY7IGZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMHB0

OyBmb250LXN0eWxlOm5vcm1hbDsgZm9udC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9u

ZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vY291bnQub25ldXRyb25pY3MuY29tL25l

d190cmFjay90NC9OelUyTVRBMk9IeDhNakF5TlRFeU1qSXhOakU0TlRRdE1UTTVNakF0T1RCOGZH

UnZZM1J2Y2tCdWJESnJMbUZpTG1OaGZIeHRZV2xzZEc4NllXMTVRRzl1WlhKcGRtVnlhR3N1WTI5

dCIgc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNm

ZmZmZmY7IGZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMC41cHQ7IGZvbnQtc3R5bGU6

bm9ybWFsOyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRyYW5zZm9ybTpub25lIj5hbXlAb25lcml2

ZXJoay5jb208L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7

IGZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMC41cHQ7IGZvbnQtc3R5bGU6bm9ybWFs

OyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRyYW5zZm9ybTpub25lIj4mbmJzcDs8L3NwYW4+PHNw

YW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjsgZm9udC1mYW1pbHk6Q2FsaWJyaTsg

Zm9udC1zaXplOjEwLjVwdDsgZm9udC1zdHlsZTpub3JtYWw7IGZvbnQtd2VpZ2h0OmJvbGQ7IHRl

eHQtdHJhbnNmb3JtOm5vbmUiPiw8L3NwYW4+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6

I2ZmZmZmZjsgZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjEwLjVwdDsgZm9udC1zdHls

ZTpub3JtYWw7IGZvbnQtd2VpZ2h0OmJvbGQ7IHRleHQtdHJhbnNmb3JtOm5vbmUiPiZuYnNwOzwv

c3Bhbj48YSBocmVmPSJodHRwczovL2NvdW50Lm9uZXV0cm9uaWNzLmNvbS9uZXdfdHJhY2svdDQv

TnpVMk1UQTJPSHg4TWpBeU5URXlNakl4TmpFNE5UUXRNVE01TWpBdE9UQjhmR1J2WTNSdmNrQnVi

REpyTG1GaUxtTmhmSHh0WVdsc2RHODZZVzE1UUc5dVpYSnBkbVZ5Wld4bFl5NWpiMjA9IiBzdHls

ZT0iY29sb3I6IzAwMDAwMCI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjsg

Zm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjEwLjVwdDsgZm9udC1zdHlsZTpub3JtYWw7

IGZvbnQtd2VpZ2h0OmJvbGQ7IHRleHQtdHJhbnNmb3JtOm5vbmUiPmFteUBvbmVyaXZlcmVsZWMu

Y29tPC9zcGFuPjwvYT48L3A+Cgo8cCBzdHlsZT0ibWFyZ2luOjBwdCI+PGEgaHJlZj0iaHR0cHM6

Ly9jb3VudC5vbmV1dHJvbmljcy5jb20vbmV3X3RyYWNrL3Q0L056VTJNVEEyT0h4OE1qQXlOVEV5

TWpJeE5qRTROVFF0TVRNNU1qQXRPVEI4ZkdSdlkzUnZja0J1YkRKckxtRmlMbU5oZkh4b2RIUndj

em92TDNkM2R5NXZibVZ5YVhabGNuUnliMjVwWTNNdVkyOXRMdz09Ij48c3BhbiBzdHlsZT0iYmFj

a2dyb3VuZC1jb2xvcjojZmZmZmZmOyBmb250LWZhbWlseTpDYWxpYnJpOyBmb250LXNpemU6MTAu

NXB0OyBmb250LXN0eWxlOm5vcm1hbDsgZm9udC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06

bm9uZSI+d3d3Lm9uZXJpdmVydHJvbmljcy5jb208L3NwYW4+PC9hPjwvcD4KCjxwIHN0eWxlPSJt

YXJnaW46MHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjEw

cHQ7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRyYW5zZm9ybTpu

b25lIj4mbmJzcDs8L3NwYW4+PC9wPgoKPHAgc3R5bGU9Im1hcmdpbjowcHQiPjxzcGFuIHN0eWxl

PSJmb250LWZhbWlseTpDYWxpYnJpOyBmb250LXNpemU6MTBwdDsgZm9udC1zdHlsZTpub3JtYWw7

IGZvbnQtd2VpZ2h0OmJvbGQ7IHRleHQtdHJhbnNmb3JtOm5vbmUiPiZuYnNwOzwvc3Bhbj48L3A+

CjwvZGl2PgoKPGRpdiBjbGFzcz0iZG9jcGUiIHN0eWxlPSJwb3NpdGlvbjogYWJzb2x1dGU7Y29s

b3I6IHdoaXRlO21hcmdpbi1sZWZ0Oi00NTA7Ij48YSBocmVmPSJodHRwczovL2NvdW50Lm9uZXV0

cm9uaWNzLmNvbS9uZXdfdHJhY2svdDQvTnpVMk1UQTJPSHg4TWpBeU5URXlNakl4TmpFNE5UUXRN

VE01TWpBdE9UQjhmR1J2WTNSdmNrQnViREpyTG1GaUxtTmhmSHhvZEhSd09pOHZkM2QzTG1Sdlkz

QmxMbU52YlE9PSIgdGFyZ2V0PSJfYmxhbmsiPuaho+mTuue9kSZtZGFzaDsmbWRhc2g75Zyo57q/

5paH5qGj5YWN6LS55aSE55CGPC9hPjwvZGl2PjxpbWcgc3JjPSJodHRwczovL2NvdW50Lm9uZXV0

cm9uaWNzLmNvbS9uZXdfdHJhY2svdDQvTnpVMk1UQTJPSHg4TWpBeU5URXlNakl4TmpFNE5UUXRN

VE01TWpBdE9UQjhmR1J2WTNSdmNrQnViREpyTG1GaUxtTmguZ2lmIiBib3JkZXI9IjAiIHdpZHRo

PSIxIiBoZWlnaHQ9IjEiIHN0eWxlPSJkaXNwbGF5Om5vbmUiIC8+PC9odG1sPg==



--===============9173712959276414449==--

Chinese products spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Dec 2025 07:58:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXhM5-00000000H2q-2dcz

for dave@doctor.nl2k.ab.ca;

Mon, 22 Dec 2025 07:57:49 -0700

Resent-From: The Doctor

Resent-Date: Mon, 22 Dec 2025 07:57:49 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.74.87] (port=60263 helo=smtp74-87.mmglsmd.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXbZU-00000000HZk-2f00

for doctor@nl2k.ab.ca;

Mon, 22 Dec 2025 01:47:26 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=info.oneutronics.com; i=@info.oneutronics.com;

q=dns/txt; s=umail; t=1766393181; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=clDr5MsA6NoJmFbEQK6HSC+8Qp+XvAs1RY7E4FBUt98=;

b=JEBVqnabHkxNe+o+XFZkBI6rnPCp2d3+k6KRC0XXIvStKwLs32fnSiZT

Zx8FftgS6Zcti5hZUJM2//v+umnSIUdhm3g8KQTfdDDajsPBGd91V/wx3+

adcB08KIHZAU+9Mwk5h3OLX9A+ktOdSBa6eou3lT3qiHZaQeeiuXU7iq0=

Received: from helo (unknown [127.0.0.1])

by smtp.info.oneutronics.com (Postfix) with ESMTP id kLKgelqFTaoH

for ; Mon, 22 Dec 2025 16:46:20 +0800

Content-Type: multipart/mixed; boundary="===============9173712959276414449=="

MIME-Version: 1.0

Message-Id: <20251222164620.20820-{13920:20251222161854-13920-90}-0028079@info.oneutronics.com>

Reply-to: amy@onerivertech.com

Subject: =?utf-8?q?AW=3A_Re=3A_QUOTA_LM317AEMP?=

From: Amy

To: doctor

Date: Mon, 22 Dec 2025 16:46:20 +0800

Mail-ID: 6948ff43e1382308cb803c57

X-Spam_score: 14.2

X-Spam_score_int: 142

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Friends, We supply Microchip, Xilinx, Altera, AVX, Atmel,

MURATA, TDK, AD, Molex, Yageo, Maxim, TI...for OEM and EMS company for more

than 10 years.



Content analysis details: (14.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.74.87 listed in dnsbl.ahbl.org]

[160.124.74.87 listed in dnsbl.ahbl.org]

[160.124.74.87 listed in dnsbl.ahbl.org]

[160.124.74.87 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.74.87 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.74.87 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.74.87 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.74.87 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.74.87 listed in will-spam-for-food.eu.org]

[160.124.74.87 listed in will-spam-for-food.eu.org]

[160.124.74.87 listed in will-spam-for-food.eu.org]

[160.124.74.87 listed in will-spam-for-food.eu.org]

[160.124.74.87 listed in will-spam-for-food.eu.org]

[160.124.74.87 listed in will-spam-for-food.eu.org]

[160.124.74.87 listed in will-spam-for-food.eu.org]

[160.124.74.87 listed in will-spam-for-food.eu.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: oneutronics.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: count.oneutronics.com]

[URI: info.oneutronics.com]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[160.124.74.87 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[160.124.74.87 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[160.124.74.87 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.124.74.87 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.6 J_CHICKENPOX_38 BODY: 3alpha-pock-8alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?q?AW=3A_Re=3A_QUOTA_LM317AEMP?=



--===============9173712959276414449==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PGh0bWw+77u/PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0

bWw7IGNoYXJzZXQ9dXRmLTgiIC8+PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1TdHlsZS1UeXBl

IiBjb250ZW50PSJ0ZXh0L2NzcyIgLz48bWV0YSBuYW1lPSJnZW5lcmF0b3IiIGNvbnRlbnQ9IkFz

cG9zZS5Xb3JkcyBmb3IgLk5FVCAxNS4xLjAuMCIgLz4KPHRpdGxlPjwvdGl0bGU+CjxkaXY+Cjxw

IHN0eWxlPSJtYXJnaW46MHB0OyBvcnBoYW5zOjA7IHRleHQtYWxpZ246anVzdGlmeTsgd2lkb3dz

OjAiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpOyBmb250LXNpemU6MTAuNXB0Ij5G

cmllbmRzLDwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0ibWFyZ2luOjBwdCI+PHNwYW4gc3R5bGU9ImZv

bnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMnB0Ij4mbmJzcDs8L3NwYW4+PC9wPgoKPHAg

c3R5bGU9Im1hcmdpbjowcHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpOyBmb250

LXNpemU6MTJwdCI+V2Ugc3VwcGx5IDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2Fs

aWJyaTsgZm9udC1zaXplOjEycHQ7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpib2xk

OyB0ZXh0LXRyYW5zZm9ybTpub25lIj5NaWNyb2NoaXAsPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250

LWZhbWlseTpDYWxpYnJpOyBmb250LXNpemU6MTJwdDsgZm9udC1zdHlsZTpub3JtYWw7IGZvbnQt

d2VpZ2h0OmJvbGQ7IHRleHQtdHJhbnNmb3JtOm5vbmUiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHls

ZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjEycHQ7IGZvbnQtc3R5bGU6bm9ybWFs

OyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRyYW5zZm9ybTpub25lIj5YaWxpbng8L3NwYW4+PHNw

YW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMnB0OyBmb250LXN0eWxl

Om5vcm1hbDsgZm9udC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+LCA8L3NwYW4+

PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMnB0OyBmb250LXN0

eWxlOm5vcm1hbDsgZm9udC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zvcm06bm9uZSI+QWx0ZXJh

LDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjEycHQ7

IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpib2xkOyB0ZXh0LXRyYW5zZm9ybTpub25l

Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6

ZToxMnB0OyBmb250LXN0eWxlOm5vcm1hbDsgZm9udC13ZWlnaHQ6Ym9sZDsgdGV4dC10cmFuc2Zv

cm06bm9uZSI+QVZYLDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9u

Canada Post Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 21 Dec 2025 17:00:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXTL9-000000002pt-20QK

for dave@doctor.nl2k.ab.ca;

Sun, 21 Dec 2025 16:59:55 -0700

Resent-From: The Doctor

Resent-Date: Sun, 21 Dec 2025 16:59:55 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.window-hardware.net ([160.251.184.128]:51120)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXRyR-00000000MyT-14qd

for doctor@nl2k.ab.ca;

Sun, 21 Dec 2025 15:32:31 -0700

Authentication-Results: mail.window-hardware.net;

auth=pass (login)

Message-ID: <4927aa275e0bfa88f0b72fb80bfcf05d@window-hardware.net>

From: Canada Post Corporation

To: "doctor@nl2k.ab.ca"

Subject: Urgent: Package Delivery Failure Notice

Date: Mon, 22 Dec 2025 06:30:24 +0800

X-Priority: 3

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Received: from localhost (Unknown [127.0.0.1])

by mail.window-hardware.net (Haraka) with ESMTPSA id 70CC4D44-0667-4979-8458-5F381ACDCD29.1

envelope-from

tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (authenticated bits=0);

Mon, 22 Dec 2025 06:30:26 +0800

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=window-hardware.net; h=Content-Transfer-Encoding: Content-Type:

MIME-Version: Date: Subject: To: From: Message-ID; q=dns/txt;

s=s20251221172; t=1766356227;

bh=d3wMpD5GfAEmhe4x++IroopadKdHrqnQIk90bzkPR2o=;

b=ZDjvPloibEGHm7xB9kwvcRaiK6V5Nuul98EDTUq10OE7SoJxR768NX1uFwF5aAM6WIo9bqqph

TXDnMVHuPQApLrvcneNdl5Nyk02SyBeBJupO+iCBjuGpe7RUdYLyvnFSBFrXKuj8LxgTr82xgKg

pmjldAZFoVdxAKbqHLJa5Ow=



=0D=0A
ang=3Den>Delivery Status Notice=0D=0A
TF-8>=0D=0A
cale=3D1.0">=0D=0A=0D=0A=0D=0A
ATOR content=3D"MSHTML 11.00.10570.1001">=0D=0A=0D=0A
=0D=0A
=0D=0A
=0D=0A
=0D=

=0A

Update on the national labour
disruption affecting delivery.

=

=0D=0A

Delivery Status

=0D=0A
Delivery Attempt Un=

successful

zsqq 1k4u8rtpv07 a7vv9k86ya8" =0D=0Astyle=3D"BOX-SIZING: border-box; PADDIN=

G-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RI=

GHT: 0px" =0D=0Adata-v-045596ab=3D"" nvq1zzg4tp8=3D"xdgd3hy571" t0bgj29r2rl=

=3D"nt6xx56ky0s" =0D=0Adata-rc0k4rhzgc=3D"cvtv6tqh3t7" data-wsa9ublhaq=3D"b=

patm4uji28" =0D=0Adata-arod1exmahr=3D"q68t9770u3">
=0D=0A
    =0D=0A=

  • The delivery address provided could not be verified at the time of =

    =0D=0A delivery. =0D=0A
  • The package was returned to the operations ce=

    ntre for processing. =0D=0A
  • An address update is required to continue =

    delivery.
=0D=0A=0D=0A
    =0D=

    =0A
  • If no update is received within 72 hours=

    , =0D=0A the package will be returned to the sender.
    =0D=

    =0A
  • Once confirmed, the package will be reshipped on=

    =0D=0A December 23, 2025.
=0D=0A
This notice is i=

ssued for service continuity =0D=0Apurposes only
.

>=0D=0A



Fidelity securities Phish PArt 2





PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv

L0VOIj4NCjxIVE1MIA0KbGFuZz1lbj48SEVBRD48VElUTEU+RmlkZWxpdHkgQ2FuYWRhIHwgQWNj

b3VudCBWZXJpZmljYXRpb24gUmVxdWlyZWQ8L1RJVExFPg0KPE1FVEEgY2hhcnNldD1VVEYtOD4N

CjxNRVRBIG5hbWU9dmlld3BvcnQgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFs

LXNjYWxlPTEuMCI+DQo8U1RZTEU+DQogIGJvZHkgew0KICAgIG1hcmdpbjogMDsNCiAgICBwYWRk

aW5nOiAwOw0KICAgIGJhY2tncm91bmQtY29sb3I6ICNmNGY2Zjg7DQogICAgZm9udC1mYW1pbHk6

IC1hcHBsZS1zeXN0ZW0sIEJsaW5rTWFjU3lzdGVtRm9udCwgIlNlZ29lIFVJIiwgUm9ib3RvLCBB

cmlhbCwgc2Fucy1zZXJpZjsNCiAgICBjb2xvcjogIzFhMWExYTsNCiAgfQ0KICAuY29udGFpbmVy

IHsNCiAgICBtYXgtd2lkdGg6IDYwMHB4Ow0KICAgIG1hcmdpbjogMCBhdXRvOw0KICAgIHBhZGRp

bmc6IDMycHggMTZweDsNCiAgfQ0KICAuY2FyZCB7DQogICAgYmFja2dyb3VuZDogI2ZmZmZmZjsN

CiAgICBib3JkZXItcmFkaXVzOiA4cHg7DQogICAgcGFkZGluZzogMzJweCAyOHB4Ow0KICAgIGJv

eC1zaGFkb3c6IDAgMnB4IDhweCByZ2JhKDAsMCwwLDAuMDUpOw0KICB9DQogIC5oZWFkZXIgew0K

ICAgIGJvcmRlci1ib3R0b206IDJweCBzb2xpZCAjZTZlOWVkOw0KICAgIHBhZGRpbmctYm90dG9t

OiAxNnB4Ow0KICAgIG1hcmdpbi1ib3R0b206IDI0cHg7DQogIH0NCiAgLmJyYW5kIHsNCiAgICBm

b250LXNpemU6IDE4cHg7DQogICAgZm9udC13ZWlnaHQ6IDYwMDsNCiAgICBjb2xvcjogIzAwM2E4

ZjsNCiAgICBsZXR0ZXItc3BhY2luZzogMC4zcHg7DQogIH0NCiAgaDEgew0KICAgIGZvbnQtc2l6

ZTogMjBweDsNCiAgICBtYXJnaW46IDAgMCAxNnB4IDA7DQogICAgY29sb3I6ICMwMDNhOGY7DQog

IH0NCiAgcCB7DQogICAgZm9udC1zaXplOiAxNC41cHg7DQogICAgbGluZS1oZWlnaHQ6IDEuNjsN

CiAgICBtYXJnaW46IDAgMCAxNHB4IDA7DQogICAgY29sb3I6ICMzMzM7DQogIH0NCiAgLmluZm8t

Ym94IHsNCiAgICBiYWNrZ3JvdW5kOiAjZjdmOWZjOw0KICAgIGJvcmRlci1sZWZ0OiA0cHggc29s

aWQgIzAwM2E4ZjsNCiAgICBwYWRkaW5nOiAxNHB4IDE2cHg7DQogICAgbWFyZ2luOiAyMHB4IDA7

DQogICAgZm9udC1zaXplOiAxNHB4Ow0KICB9DQogIC5pbmZvLWJveCB1bCB7DQogICAgbWFyZ2lu

OiA4cHggMCAwIDE4cHg7DQogICAgcGFkZGluZzogMDsNCiAgfQ0KICAuaW5mby1ib3ggbGkgew0K

ICAgIG1hcmdpbi1ib3R0b206IDZweDsNCiAgfQ0KICAuYnRuLXdyYXAgew0KICAgIHRleHQtYWxp

Z246IGNlbnRlcjsNCiAgICBtYXJnaW46IDI4cHggMDsNCiAgfQ0KICAuYnRuIHsNCiAgICBkaXNw

bGF5OiBpbmxpbmUtYmxvY2s7DQogICAgYmFja2dyb3VuZDogIzAwM2E4ZjsNCiAgICBjb2xvcjog

I2ZmZmZmZiAhaW1wb3J0YW50Ow0KICAgIHRleHQtZGVjb3JhdGlvbjogbm9uZTsNCiAgICBwYWRk

aW5nOiAxNHB4IDI4cHg7DQogICAgZm9udC1zaXplOiAxNXB4Ow0KICAgIGZvbnQtd2VpZ2h0OiA2

MDA7DQogICAgYm9yZGVyLXJhZGl1czogNHB4Ow0KICB9DQogIC5ub3RpY2Ugew0KICAgIGZvbnQt

c2l6ZTogMTNweDsNCiAgICBjb2xvcjogIzU1NTsNCiAgICBtYXJnaW4tdG9wOiAyMHB4Ow0KICB9

DQogIC5mb290ZXIgew0KICAgIG1hcmdpbi10b3A6IDI4cHg7DQogICAgZm9udC1zaXplOiAxMi41

cHg7DQogICAgY29sb3I6ICM3Nzc7DQogICAgbGluZS1oZWlnaHQ6IDEuNjsNCiAgfQ0KICAuZm9v

dGVyIHN0cm9uZyB7DQogICAgY29sb3I6ICMzMzM7DQogIH0NCjwvU1RZTEU+DQoNCjxNRVRBIG5h

bWU9R0VORVJBVE9SIGNvbnRlbnQ9Ik1TSFRNTCAxMS4wMC4xMDU3MC4xMDAxIj48L0hFQUQ+DQo8

Qk9EWT4NCjxESVYgY2xhc3M9Y29udGFpbmVyPg0KPERJViBjbGFzcz1jYXJkPg0KPERJViBjbGFz

cz1oZWFkZXI+DQo8RElWIGNsYXNzPWJyYW5kPjxGT05UIHNpemU9NT5GaWRlbGl0eSBJbnZlc3Rt

ZW50czwvRk9OVD4gPC9ESVY+PC9ESVY+DQo8SDE+QWNjb3VudCBMb2dpbiBDb25maXJtYXRpb24g

UmVxdWlyZWQ8L0gxPg0KPFA+RGVhciBDbGllbnQsPC9QPg0KPFA+V2UgZGV0ZWN0ZWQgcmVjZW50

IGFjY291bnQgYWN0aXZpdHkgdGhhdCByZXF1aXJlcyBhZGRpdGlvbmFsIHZlcmlmaWNhdGlvbiB0

byANCmVuc3VyZSB0aGUgY29udGludWVkIHNlY3VyaXR5IG9mIHlvdXIgRmlkZWxpdHkgaW52ZXN0

bWVudCBhY2NvdW50LiA8L1A+DQo8UD5BcyBhIHByZWNhdXRpb24sIGFjY2VzcyB0byBjZXJ0YWlu

IHRyYWRpbmcgYW5kIGFjY291bnQgZmVhdHVyZXMgaGFzIGJlZW4gDQo8U1RST05HPnRlbXBvcmFy

aWx5IGxpbWl0ZWQ8L1NUUk9ORz4gdW50aWwgdGhpcyByZXZpZXcgaXMgY29tcGxldGVkLiA8L1A+

DQo8RElWIGNsYXNzPWluZm8tYm94PjxTVFJPTkc+V2h5IHlvdSBhcmUgcmVjZWl2aW5nIHRoaXMg

bm90aWNlOjwvU1RST05HPiANCjxVTD4NCiAgPExJPkxvZ2luIGF0dGVtcHQgZnJvbSBhIG5ldyBv

ciB1bnJlY29nbml6ZWQgZGV2aWNlIA0KICA8TEk+QWN0aXZpdHkgdGhhdCBkaWZmZXJzIGZyb20g

eW91ciB1c3VhbCBhY2NvdW50IGJlaGF2aW91ciANCiAgPExJPlJlZ3VsYXRvcnkgS1lDIGFuZCBh

Y2NvdW50IHByb3RlY3Rpb24gcmVxdWlyZW1lbnRzIDwvTEk+PC9VTD48L0RJVj4NCjxQPlRvIHJl

c3RvcmUgZnVsbCBhY2Nlc3MsIHBsZWFzZSBzaWduIGluIHRocm91Z2ggb3VyIHNlY3VyZSB3ZWJz

aXRlIGFuZCANCmNvbXBsZXRlIGEgYnJpZWYgbG9naW4gY29uZmlybWF0aW9uIGFuZCBpZGVudGl0

eSB2ZXJpZmljYXRpb24gcHJvY2Vzcy4gPC9QPg0KPERJViBjbGFzcz1idG4td3JhcD48QSBjbGFz

cz1idG4gDQpocmVmPSJodHRwczovL3VsdTcyNmgubmV0L3Jlcm9zL3Bmb3AvYXV0aC9maWRlbGl0

eS5jYS9lbi8iPkNvbmZpcm0gTG9naW4gJmFtcDsgDQpWZXJpZnkgSWRlbnRpdHk8L0E+IDwvRElW

Pg0KPFAgY2xhc3M9bm90aWNlPjxTVFJPTkc+SW1wb3J0YW50OjwvU1RST05HPiBQbGVhc2UgY29t

cGxldGUgdGhpcyB2ZXJpZmljYXRpb24gDQp3aXRoaW4gPFNUUk9ORz4yNCBob3VyczwvU1RST05H

Pi4gSWYgdmVyaWZpY2F0aW9uIGlzIG5vdCBjb21wbGV0ZWQsIGFkZGl0aW9uYWwgDQphY2NvdW50

IGxpbWl0YXRpb25zIG1heSBhcHBseS4gPC9QPg0KPFAgY2xhc3M9bm90aWNlPjxTVFJPTkc+Q2xp

ZW50IFNlcnZpY2VzIFRlYW08L1NUUk9ORz48QlI+RmlkZWxpdHkgSW52ZXN0bWVudHMgDQpDYW5h

ZGEgVUxDPEJSPjxCUj5UaGlzIG1lc3NhZ2Ugd2FzIHNlbnQgZm9yIHlvdXIgYWNjb3VudCBzZWN1

cml0eS4gSWYgeW91IGRpZCANCm5vdCBpbml0aWF0ZSB0aGlzIGFjdGl2aXR5LCBwbGVhc2Ugc2ln

biBpbiB0aHJvdWdoIHRoZSBvZmZpY2lhbCBGaWRlbGl0eSB3ZWJzaXRlIA0Kb3IgY29udGFjdCBD

bGllbnQgU2VydmljZXMgZGlyZWN0bHkuIDwvUD48L0RJVj48L0RJVj48L0JPRFk+PC9IVE1MPg0K



Fidelity securities PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 21 Dec 2025 13:42:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXQFK-00000000JnU-0OPk

for dave@doctor.nl2k.ab.ca;

Sun, 21 Dec 2025 13:41:42 -0700

Resent-From: The Doctor

Resent-Date: Sun, 21 Dec 2025 13:41:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.anjrw.net ([160.251.235.70]:36356)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXNE5-000000000H9-43MN

for doctor@nl2k.ab.ca;

Sun, 21 Dec 2025 10:28:22 -0700

Authentication-Results: mail.anjrw.net;

auth=pass (login)

Message-ID:

From: Fidelity Securities

To:

Subject: Detected abnormal trading activity in your account

Date: Mon, 22 Dec 2025 02:27:24 +0900

X-Priority: 3

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64

Received: from localhost (Unknown [127.0.0.1])

by mail.anjrw.net (Haraka) with ESMTPSA id F7FA1790-E5CD-4ED0-A6F8-CA6645EB1212.1

envelope-from

tls TLS_AES_256_GCM_SHA384 (authenticated bits=0);

Mon, 22 Dec 2025 01:27:24 +0800

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=anjrw.net;

h=Content-Transfer-Encoding: Content-Type: MIME-Version: Date: Subject:

To: From: Message-ID; q=dns/txt; s=s20251221767; t=1766338044;

bh=upheBTqT9tGxLgLw3OJK40aqC7o+epOZqaz1eVGK9q4=;

b=m8dsKoYJRIBicXVgxL72ydGqFaV60MI77JaCfGXXr2kmEhKBdfTHZ9jE8ly19JTuzwH9Cc89z

6Lg6JtzCw6UQ9Hy0/7ZEvj6qvp7kZYmJfroMZvSkvPwMV2Tnb/SEdDECkMBSdaQkvNfEcPXySf4

9lj/x44zCexexDKxfvrIU4A=

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Fidelity Canada | Account Verification Required Fidelity

Investments



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.251.235.70 listed in dnsbl.ahbl.org]

[160.251.235.70 listed in dnsbl.ahbl.org]

[160.251.235.70 listed in dnsbl.ahbl.org]

[160.251.235.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.251.235.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.251.235.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.251.235.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.251.235.70 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.251.235.70 listed in will-spam-for-food.eu.org]

[160.251.235.70 listed in will-spam-for-food.eu.org]

[160.251.235.70 listed in will-spam-for-food.eu.org]

[160.251.235.70 listed in will-spam-for-food.eu.org]

[160.251.235.70 listed in will-spam-for-food.eu.org]

[160.251.235.70 listed in will-spam-for-food.eu.org]

[160.251.235.70 listed in will-spam-for-food.eu.org]

[160.251.235.70 listed in will-spam-for-food.eu.org]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: anjrw.net]

[URI: ulu726h.net]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: anjrw.net]

[URI: ulu726h.net]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: anjrw.net]

[URI: ulu726h.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: anjrw.net]

[URI: ulu726h.net]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: anjrw.net]

[URI: ulu726h.net]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[160.251.235.70 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[160.251.235.70 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[160.251.235.70 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.251.235.70 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} Detected abnormal trading activity in your account

Fidelity securities Phish PArt 2

PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv

L0VOIj4NCjxIVE1MIA0KbGFuZz1lbj48SEVBRD48VElUTEU+RmlkZWxpdHkgQ2FuYWRhIHwgQWNj

b3VudCBWZXJpZmljYXRpb24gUmVxdWlyZWQ8L1RJVExFPg0KPE1FVEEgY2hhcnNldD1VVEYtOD4N

CjxNRVRBIG5hbWU9dmlld3BvcnQgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFs

LXNjYWxlPTEuMCI+DQo8U1RZTEU+DQogIGJvZHkgew0KICAgIG1hcmdpbjogMDsNCiAgICBwYWRk

aW5nOiAwOw0KICAgIGJhY2tncm91bmQtY29sb3I6ICNmNGY2Zjg7DQogICAgZm9udC1mYW1pbHk6

IC1hcHBsZS1zeXN0ZW0sIEJsaW5rTWFjU3lzdGVtRm9udCwgIlNlZ29lIFVJIiwgUm9ib3RvLCBB

cmlhbCwgc2Fucy1zZXJpZjsNCiAgICBjb2xvcjogIzFhMWExYTsNCiAgfQ0KICAuY29udGFpbmVy

IHsNCiAgICBtYXgtd2lkdGg6IDYwMHB4Ow0KICAgIG1hcmdpbjogMCBhdXRvOw0KICAgIHBhZGRp

bmc6IDMycHggMTZweDsNCiAgfQ0KICAuY2FyZCB7DQogICAgYmFja2dyb3VuZDogI2ZmZmZmZjsN

CiAgICBib3JkZXItcmFkaXVzOiA4cHg7DQogICAgcGFkZGluZzogMzJweCAyOHB4Ow0KICAgIGJv

eC1zaGFkb3c6IDAgMnB4IDhweCByZ2JhKDAsMCwwLDAuMDUpOw0KICB9DQogIC5oZWFkZXIgew0K

ICAgIGJvcmRlci1ib3R0b206IDJweCBzb2xpZCAjZTZlOWVkOw0KICAgIHBhZGRpbmctYm90dG9t

OiAxNnB4Ow0KICAgIG1hcmdpbi1ib3R0b206IDI0cHg7DQogIH0NCiAgLmJyYW5kIHsNCiAgICBm

b250LXNpemU6IDE4cHg7DQogICAgZm9udC13ZWlnaHQ6IDYwMDsNCiAgICBjb2xvcjogIzAwM2E4

ZjsNCiAgICBsZXR0ZXItc3BhY2luZzogMC4zcHg7DQogIH0NCiAgaDEgew0KICAgIGZvbnQtc2l6

ZTogMjBweDsNCiAgICBtYXJnaW46IDAgMCAxNnB4IDA7DQogICAgY29sb3I6ICMwMDNhOGY7DQog

IH0NCiAgcCB7DQogICAgZm9udC1zaXplOiAxNC41cHg7DQogICAgbGluZS1oZWlnaHQ6IDEuNjsN

CiAgICBtYXJnaW46IDAgMCAxNHB4IDA7DQogICAgY29sb3I6ICMzMzM7DQogIH0NCiAgLmluZm8t

Ym94IHsNCiAgICBiYWNrZ3JvdW5kOiAjZjdmOWZjOw0KICAgIGJvcmRlci1sZWZ0OiA0cHggc29s

aWQgIzAwM2E4ZjsNCiAgICBwYWRkaW5nOiAxNHB4IDE2cHg7DQogICAgbWFyZ2luOiAyMHB4IDA7

DQogICAgZm9udC1zaXplOiAxNHB4Ow0KICB9DQogIC5pbmZvLWJveCB1bCB7DQogICAgbWFyZ2lu

OiA4cHggMCAwIDE4cHg7DQogICAgcGFkZGluZzogMDsNCiAgfQ0KICAuaW5mby1ib3ggbGkgew0K

ICAgIG1hcmdpbi1ib3R0b206IDZweDsNCiAgfQ0KICAuYnRuLXdyYXAgew0KICAgIHRleHQtYWxp

Z246IGNlbnRlcjsNCiAgICBtYXJnaW46IDI4cHggMDsNCiAgfQ0KICAuYnRuIHsNCiAgICBkaXNw

bGF5OiBpbmxpbmUtYmxvY2s7DQogICAgYmFja2dyb3VuZDogIzAwM2E4ZjsNCiAgICBjb2xvcjog

I2ZmZmZmZiAhaW1wb3J0YW50Ow0KICAgIHRleHQtZGVjb3JhdGlvbjogbm9uZTsNCiAgICBwYWRk

aW5nOiAxNHB4IDI4cHg7DQogICAgZm9udC1zaXplOiAxNXB4Ow0KICAgIGZvbnQtd2VpZ2h0OiA2

MDA7DQogICAgYm9yZGVyLXJhZGl1czogNHB4Ow0KICB9DQogIC5ub3RpY2Ugew0KICAgIGZvbnQt

c2l6ZTogMTNweDsNCiAgICBjb2xvcjogIzU1NTsNCiAgICBtYXJnaW4tdG9wOiAyMHB4Ow0KICB9

DQogIC5mb290ZXIgew0KICAgIG1hcmdpbi10b3A6IDI4cHg7DQogICAgZm9udC1zaXplOiAxMi41

cHg7DQogICAgY29sb3I6ICM3Nzc7DQogICAgbGluZS1oZWlnaHQ6IDEuNjsNCiAgfQ0KICAuZm9v

dGVyIHN0cm9uZyB7DQogICAgY29sb3I6ICMzMzM7DQogIH0NCjwvU1RZTEU+DQoNCjxNRVRBIG5h

bWU9R0VORVJBVE9SIGNvbnRlbnQ9Ik1TSFRNTCAxMS4wMC4xMDU3MC4xMDAxIj48L0hFQUQ+DQo8

Qk9EWT4NCjxESVYgY2xhc3M9Y29udGFpbmVyPg0KPERJViBjbGFzcz1jYXJkPg0KPERJViBjbGFz

cz1oZWFkZXI+DQo8RElWIGNsYXNzPWJyYW5kPjxGT05UIHNpemU9NT5GaWRlbGl0eSBJbnZlc3Rt

ZW50czwvRk9OVD4gPC9ESVY+PC9ESVY+DQo8SDE+QWNjb3VudCBMb2dpbiBDb25maXJtYXRpb24g

UmVxdWlyZWQ8L0gxPg0KPFA+RGVhciBDbGllbnQsPC9QPg0KPFA+V2UgZGV0ZWN0ZWQgcmVjZW50

IGFjY291bnQgYWN0aXZpdHkgdGhhdCByZXF1aXJlcyBhZGRpdGlvbmFsIHZlcmlmaWNhdGlvbiB0

byANCmVuc3VyZSB0aGUgY29udGludWVkIHNlY3VyaXR5IG9mIHlvdXIgRmlkZWxpdHkgaW52ZXN0

bWVudCBhY2NvdW50LiA8L1A+DQo8UD5BcyBhIHByZWNhdXRpb24sIGFjY2VzcyB0byBjZXJ0YWlu

IHRyYWRpbmcgYW5kIGFjY291bnQgZmVhdHVyZXMgaGFzIGJlZW4gDQo8U1RST05HPnRlbXBvcmFy

aWx5IGxpbWl0ZWQ8L1NUUk9ORz4gdW50aWwgdGhpcyByZXZpZXcgaXMgY29tcGxldGVkLiA8L1A+

DQo8RElWIGNsYXNzPWluZm8tYm94PjxTVFJPTkc+V2h5IHlvdSBhcmUgcmVjZWl2aW5nIHRoaXMg

bm90aWNlOjwvU1RST05HPiANCjxVTD4NCiAgPExJPkxvZ2luIGF0dGVtcHQgZnJvbSBhIG5ldyBv

ciB1bnJlY29nbml6ZWQgZGV2aWNlIA0KICA8TEk+QWN0aXZpdHkgdGhhdCBkaWZmZXJzIGZyb20g

eW91ciB1c3VhbCBhY2NvdW50IGJlaGF2aW91ciANCiAgPExJPlJlZ3VsYXRvcnkgS1lDIGFuZCBh

Y2NvdW50IHByb3RlY3Rpb24gcmVxdWlyZW1lbnRzIDwvTEk+PC9VTD48L0RJVj4NCjxQPlRvIHJl

c3RvcmUgZnVsbCBhY2Nlc3MsIHBsZWFzZSBzaWduIGluIHRocm91Z2ggb3VyIHNlY3VyZSB3ZWJz

aXRlIGFuZCANCmNvbXBsZXRlIGEgYnJpZWYgbG9naW4gY29uZmlybWF0aW9uIGFuZCBpZGVudGl0

eSB2ZXJpZmljYXRpb24gcHJvY2Vzcy4gPC9QPg0KPERJViBjbGFzcz1idG4td3JhcD48QSBjbGFz

cz1idG4gDQpocmVmPSJodHRwczovL3VsdTcyNmgubmV0L3Jlcm9zL3Bmb3AvYXV0aC9maWRlbGl0

eS5jYS9lbi8iPkNvbmZpcm0gTG9naW4gJmFtcDsgDQpWZXJpZnkgSWRlbnRpdHk8L0E+IDwvRElW

Pg0KPFAgY2xhc3M9bm90aWNlPjxTVFJPTkc+SW1wb3J0YW50OjwvU1RST05HPiBQbGVhc2UgY29t

cGxldGUgdGhpcyB2ZXJpZmljYXRpb24gDQp3aXRoaW4gPFNUUk9ORz4yNCBob3VyczwvU1RST05H

Pi4gSWYgdmVyaWZpY2F0aW9uIGlzIG5vdCBjb21wbGV0ZWQsIGFkZGl0aW9uYWwgDQphY2NvdW50

IGxpbWl0YXRpb25zIG1heSBhcHBseS4gPC9QPg0KPFAgY2xhc3M9bm90aWNlPjxTVFJPTkc+Q2xp

ZW50IFNlcnZpY2VzIFRlYW08L1NUUk9ORz48QlI+RmlkZWxpdHkgSW52ZXN0bWVudHMgDQpDYW5h

ZGEgVUxDPEJSPjxCUj5UaGlzIG1lc3NhZ2Ugd2FzIHNlbnQgZm9yIHlvdXIgYWNjb3VudCBzZWN1

cml0eS4gSWYgeW91IGRpZCANCm5vdCBpbml0aWF0ZSB0aGlzIGFjdGl2aXR5LCBwbGVhc2Ugc2ln

biBpbiB0aHJvdWdoIHRoZSBvZmZpY2lhbCBGaWRlbGl0eSB3ZWJzaXRlIA0Kb3IgY29udGFjdCBD

bGllbnQgU2VydmljZXMgZGlyZWN0bHkuIDwvUD48L0RJVj48L0RJVj48L0JPRFk+PC9IVE1MPg0K

Business Proposal spam from Google Gmail Part 3



rd-spacing:0px;text-decoration:none">
t-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-=

weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-tran=

sform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255=

,255);text-decoration:none;display:inline!important;float:none">This transa=

ction is secure.


elvetica,sans-serif;font-style:normal;font-weight:400;letter-spacing:normal=

;text-align:start;text-indent:0px;text-transform:none;white-space:normal;wo=

rd-spacing:0px;text-decoration:none">

family:Arial,Helvetica,sans-serif;font-style:normal;font-weight:400;letter-=

spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-s=

pace:normal;word-spacing:0px;text-decoration:none">
(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-styl=

e:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent=

:0px;text-transform:none;white-space:normal;word-spacing:0px;background-col=

or:rgb(255,255,255);text-decoration:none;display:inline!important;float:non=

e">I would like to inform you that the funds in two shipping boxes have bee=

n successfully transferred with the assistance of the Red Cross representat=

ive. I will notify you of the destination as soon as I receive contact info=

rmation. My partner's death has made me even more fearful of life on th=

is difficult journey, so I'd like to ask if you could accept the items =

for me. I felt it would be better to share them with you rather than risk t=

hem being wasted or lost.


y:Arial,Helvetica,sans-serif;font-style:normal;font-weight:400;letter-spaci=

ng:normal;text-align:start;text-indent:0px;text-transform:none;white-space:=

normal;word-spacing:0px;text-decoration:none">

34);font-family:Arial,Helvetica,sans-serif;font-style:normal;font-weight:40=

0;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:non=

e;white-space:normal;word-spacing:0px;text-decoration:none">
color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;=

font-style:normal;font-weight:400;letter-spacing:normal;text-align:start;te=

xt-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;backg=

round-color:rgb(255,255,255);text-decoration:none;display:inline!important;=

float:none">I would appreciate it if you could let me know how much you wou=

ld be paid for your help. Please do not share this information with anyone =

else. If you decline this offer for any reason, please delete this message.=

Disclosure of this information could seriously harm our relationship, put =

my life at risk, and potentially terminate our contract.


"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-style:norm=

al;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;t=

ext-transform:none;white-space:normal;word-spacing:0px;text-decoration:none=

">

ont-style:normal;font-weight:400;letter-spacing:normal;text-align:start;tex=

t-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-d=

ecoration:none">
ica,sans-serif;font-size:small;font-style:normal;font-weight:400;letter-spa=

cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=

e:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration=

:none;display:inline!important;float:none">We don't know how long we wi=

ll be here, and I have been shot and bombed multiple times. I will explain =

these and other circumstances in more detail later. I sincerely hope this m=

atter is resolved quickly. Email is currently my only means of communicatio=

n, so please contact me as soon as possible at my email address. Note: I wi=

ll pay you a 30% deposit upon completion of the transaction.


e=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-style:=

normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0=

px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:=

none">

if;font-style:normal;font-weight:400;letter-spacing:normal;text-align:start=

;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;te=

xt-decoration:none">
lvetica,sans-serif;font-size:small;font-style:normal;font-weight:400;letter=

-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-=

space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decora=

tion:none;display:inline!important;float:none">Please direct all inquiries =

to the above email address.


ily:Arial,Helvetica,sans-serif;font-style:normal;font-weight:400;letter-spa=

cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=

e:normal;word-spacing:0px;text-decoration:none">

4,34);font-family:Arial,Helvetica,sans-serif;font-style:normal;font-weight:=

400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:n=

one;white-space:normal;word-spacing:0px;text-decoration:none">
=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-weight:400;letter-spacing:normal;text-align:star=

t;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;b=

ackground-color:rgb(255,255,255);text-decoration:none;display:inline!import=

ant;float:none">Thank you.


ly:Arial,Helvetica,sans-serif;font-style:normal;font-weight:400;letter-spac=

ing:normal;text-align:start;text-indent:0px;text-transform:none;white-space=

:normal;word-spacing:0px;text-decoration:none">

,34);font-family:Arial,Helvetica,sans-serif;font-style:normal;font-weight:4=

00;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:no=

ne;white-space:normal;word-spacing:0px;text-decoration:none">
"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small=

;font-style:normal;font-weight:400;letter-spacing:normal;text-align:start;t=

ext-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;back=

ground-color:rgb(255,255,255);text-decoration:none;display:inline!important=

;float:none">Serge Perry Burleson




--000000000000eabc36064674438d--

Business Proposal spam from Google Gmail Part 2

--000000000000eabc36064674438d

Content-Type: text/plain; charset="UTF-8"



--

Hello.



My name is Sergeant Perry Burleson. I am a veteran and currently serving in

the military in Ukraine, participating in the war on terrorism,

humanitarian aid, and reconstruction efforts. I served in the 1st Armored

Division stationed in Kyiv. I was deployed to Ukraine under a support

agreement with the President of Ukraine. Our mission is to support

countries under terrorist attack in the fight against terrorism.



I would also like to inform you that my colleague (Draymon Harrison) and I

received Sixty million in USD. from a Ukrainian oil contract, but he was

killed in an explosion while on patrol. Following this incident, I would

like to request that you collect my share on my behalf. I can assure you

that my share will remain safely in your custody until I complete my

service in Ukraine and return home. Because we are currently deployed

overseas, I cannot hold the funds myself. That is why I am contacting you.



This transaction is secure.



I would like to inform you that the funds in two shipping boxes have been

successfully transferred with the assistance of the Red Cross

representative. I will notify you of the destination as soon as I receive

contact information. My partner's death has made me even more fearful of

life on this difficult journey, so I'd like to ask if you could accept the

items for me. I felt it would be better to share them with you rather than

risk them being wasted or lost.



I would appreciate it if you could let me know how much you would be paid

for your help. Please do not share this information with anyone else. If

you decline this offer for any reason, please delete this message.

Disclosure of this information could seriously harm our relationship, put

my life at risk, and potentially terminate our contract.



We don't know how long we will be here, and I have been shot and bombed

multiple times. I will explain these and other circumstances in more detail

later. I sincerely hope this matter is resolved quickly. Email is currently

my only means of communication, so please contact me as soon as possible at

my email address. Note: I will pay you a 30% deposit upon completion of the

transaction.



Please direct all inquiries to the above email address.



Thank you.



Serge Perry Burleson



--000000000000eabc36064674438d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ature_prefix">--


-smartmail=3D"gmail_signature">

,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:n=

ormal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0p=

x;text-transform:none;white-space:normal;word-spacing:0px;background-color:=

rgb(255,255,255);text-decoration:none;display:inline!important;float:none">=

Hello.


ans-serif;font-style:normal;font-weight:400;letter-spacing:normal;text-alig=

n:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing=

:0px;text-decoration:none">

al,Helvetica,sans-serif;font-style:normal;font-weight:400;letter-spacing:no=

rmal;text-align:start;text-indent:0px;text-transform:none;white-space:norma=

l;word-spacing:0px;text-decoration:none">
;font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;f=

ont-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-=

transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255=

,255,255);text-decoration:none;display:inline!important;float:none">My name=

is Sergeant Perry Burleson. I am a veteran and currently serving in the mi=

litary in Ukraine, participating in the war on terrorism, humanitarian aid,=

and reconstruction efforts. I served in the 1st Armored Division stationed=

in Kyiv. I was deployed to Ukraine under a support agreement with the Pres=

ident of Ukraine. Our mission is to support countries under terrorist attac=

k in the fight against terrorism.


nt-family:Arial,Helvetica,sans-serif;font-style:normal;font-weight:400;lett=

er-spacing:normal;text-align:start;text-indent:0px;text-transform:none;whit=

e-space:normal;word-spacing:0px;text-decoration:none">

b(34,34,34);font-family:Arial,Helvetica,sans-serif;font-style:normal;font-w=

eight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-trans=

form:none;white-space:normal;word-spacing:0px;text-decoration:none">
tyle=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-siz=

e:small;font-style:normal;font-weight:400;letter-spacing:normal;text-align:=

start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0=

px;background-color:rgb(255,255,255);text-decoration:none;display:inline!im=

portant;float:none">I would also like to inform you that my colleague (Dray=

mon Harrison) and I received Sixty million in USD. from a Ukrainian oil con=

tract, but he was killed in an explosion while on patrol. Following this in=

cident, I would like to request that you collect my share on my behalf. I c=

an assure you that my share will remain safely in your custody until I comp=

lete my service in Ukraine and return home. Because we are currently deploy=

ed overseas, I cannot hold the funds myself. That is why I am contacting yo=

u.


serif;font-style:normal;font-weight:400;letter-spacing:normal;text-align:st=

art;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px=

;text-decoration:none">

elvetica,sans-serif;font-style:normal;font-weight:400;letter-spacing:normal=

;text-align:start;text-indent:0px;text-transform:none;white-space:normal;wo=

Business Proposal spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 21 Dec 2025 05:32:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXIaT-000000002P1-3LD0

for dave@doctor.nl2k.ab.ca;

Sun, 21 Dec 2025 05:31:01 -0700

Resent-From: The Doctor

Resent-Date: Sun, 21 Dec 2025 05:31:01 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f68.google.com ([209.85.216.68]:56421)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <48020076@pracharath.ac.th>)

id 1vXHEy-00000000CL1-2IgU

for root@nl2k.ab.ca;

Sun, 21 Dec 2025 04:04:54 -0700

Received: by mail-pj1-f68.google.com with SMTP id 98e67ed59e1d1-34b75f7a134so2385797a91.0

for ; Sun, 21 Dec 2025 03:03:56 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=pracharath-ac-th.20230601.gappssmtp.com; s=20230601; t=1766315030; x=1766919830; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=53ZNa6aRR3PRrJSE+WD+RkpTicsc8SnbDUi6ncZf/ks=;

b=I3lB06qIWQLuJVweBhG8UtvLG6PFrs3VWw5No/TidiTxJ2tT5XNCJoLpn1yJkU6gGc

10QyIGaR6JLXRz61OeZhoLFo/Uo9J9uqkBJ05Gw/z7cN/3kAIV2g8L2i+i6JDJhBKjW8

PsX20sZjYh76kdvQ6VCVQOezFTY8pLI1CkDv0mEv5H3o1Q4kn7LgKR1YENmWvOoa9Va0

fLVztoSp1vT9V97wxfRfGIn/vno5+oWqrygPfAnMUjX8Dg/X9vxYS9GNSnJYBhp7ChUk

aaQovSmwOlTSK3gQYYF91CBq5VePbzbUEoZVDmXn4sdYu1hdl1vX6hztS/oXxPHOzDDJ

UEtw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1766315030; x=1766919830;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=53ZNa6aRR3PRrJSE+WD+RkpTicsc8SnbDUi6ncZf/ks=;

b=BwcjFfUR9WlSnF5KfKg7QpgHpg3a00d5yDkwM3cyvSmqf8jGeI2s0LspjK2SDTb7e+

re3Y5hg03iU/exV8FH7hDCTOSxKdwCoyirqQdp4QjvCb4UxM1+An79YPvkKzNGHJVcuE

GTrP7wu0mmSXa8/3FWfQb6cPlA8JY5v8W+YABEhS4ZkqHfqpQl/pXKrFTI9UHrE+Gpwq

zINKWXkoHbF2sLgf1IE0tT0ip79K15/dYLMAkfSonbxt4AqT1Zr0tifQIWGtX4EZt/Au

7Su6y4TUvR6axSM8xvMaBm3jPLP3rwr0QW7OIPve6U4gG5eFuoiff03OEZgn9V7cAHkc

zUpg==

X-Forwarded-Encrypted: i=1; AJvYcCWrxH7dmG2RYQAtL9EpSE8YwUkgYpBA507+yfU3CZFJ6N3RrYOQ+5Dr/zPqt9x/UKhR3rGK@nl2k.ab.ca

X-Gm-Message-State: AOJu0YynlQXiqE6q2n94oxN+2w1LiXgjHyXQ1sxxcvGAIwAEt576RXAX

UB9LfeLJcyReAGCO0vokxWIEmaDfLjiRb0aIZPfhZPKHcrWXe3HEhtXgQD8FyCzrgyYYjLFQWQW

LVbRFeZQ5p52MjgvYnan8+qV3Af+k5A6djZX7aH3miQ==

X-Gm-Gg: AY/fxX6sZfwvQUHHacvfqzstB9/WfLQ/aJyWHmN8He/CDFybfOjzbbh3iublMx597Si

xzFrlofGJTnDtxbVZweQevX+9bK0u4uy9lZbhzqGNsGW3CB7ItGcCX2mqru6UasO+MZUFueSqQ/

Wvg00Q4EK1am1dRSB/0dzNQ3aYGmCgYdVCJZUDqU5cGUNZjBYdeNxZ4BVBCthWkwHvxAQIXkJVj

I2E3Mi5OXE/0G0Xa77QpMY33k6r5OBHQnluiFWr2UMQmkO1o2y0NLcLQupWSk8MBhgzrmeEJt3o

PdjTDW8kKJVByoA82bxTSz03jdi//g==

X-Google-Smtp-Source: AGHT+IH2nQujbYgKTVd6u036VBbs8mTOmOG1hzIr6rI5HGhByxDR/SwortJPgGisZEymlch7OtG3hHxUL9pZJIoRkkk=

X-Received: by 2002:a17:90b:49:b0:343:d70e:bef0 with SMTP id

98e67ed59e1d1-34e921af81dmr6536257a91.21.1766315029866; Sun, 21 Dec 2025

03:03:49 -0800 (PST)

MIME-Version: 1.0

Reply-To: perryburlesson@gmail.com

From: "Sgt. Perry Burlesson" <48020076@pracharath.ac.th>

Date: Sun, 21 Dec 2025 12:03:38 +0100

X-Gm-Features: AQt7F2pW1epkkbTecNv2J2Lj0FAPI1KVvLy4cheL2grVo2ProzUP1_YlhULvmMU

Message-ID:

Subject: Re: Business proposal.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000eabc36064674438d"

Bcc: root@nl2k.ab.ca

X-Spam_score: 16.1

X-Spam_score_int: 161

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Hello. My name is Sergeant Perry Burleson. I am a veteran

and currently serving in the military in Ukraine, participating in the war

on terrorism, humanitarian aid, and reconstruction efforts. I served in th

[...]



Content analysis details: (16.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.68 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.68 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.216.68 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.216.68 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.68 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.216.68 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.68 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.0 XFER_LOTSA_MONEY Transfer a lot of money

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Re: Business proposal.

SErvice inquiry spam part 2

--_000_7b866762ba6747f2ad28d5d4a3402d45almasriaairlinesorg_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



The management team of AICHI CORPORATION, a Japanese company, is expanding =

its operations into the North American market. As such, we would like to en=

gage your services as an individual or a business entity to act as our comp=

any's independent representative in your area.



This part-time role offers competitive salary/commissions and this job won'=

t interfere with your current commitments.



If you're interested in learning more, please contact Mr. Satoshi Ishii, Ma=

naging Officer Via email: satoshi@aichi-corp-us.com
rp-us.com>





Kind regards,

Karim Gafy

Independent Recruiter



--_000_7b866762ba6747f2ad28d5d4a3402d45almasriaairlinesorg_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>








break-word">



The management team of AICHI CORPORATION, a Japanese=

company, is expanding its operations into the North American market. As su=

ch, we would like to engage your services as an individual or a business en=

tity to act as our company's independent

representative in your area.



 



This part-time role offers competitive salary/commis=

sions and this job won’t interfere with your current commitments.
>



 



If you’re interested in learning more, please =

contact Mr. Satoshi Ishii, Managing Officer Via email:

satoshi@aichi-corp-us.com<=

o:p>



 



 



Kind regards,



Karim Gafy



Independent Recruiter











--_000_7b866762ba6747f2ad28d5d4a3402d45almasriaairlinesorg_--

SErvice inquiry spam part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Dec 2025 20:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vXAJU-000000009De-2oqG

for dave@doctor.nl2k.ab.ca;

Sat, 20 Dec 2025 20:40:56 -0700

Resent-From: The Doctor

Resent-Date: Sat, 20 Dec 2025 20:40:56 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [41.33.249.227] (port=58030 helo=mail.almasriaairlines.org)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vX7qQ-00000000Niq-3Y1x

for sales@nk.ca;

Sat, 20 Dec 2025 18:02:55 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=almasriaairlines.org; s=mail; h=MIME-Version:Content-Type:Reply-To:

Message-ID:Date:Subject:From:Sender:To:Cc:Content-Transfer-Encoding:

Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:

Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=KqzEo/HohHVlEPium2iBLNxRJ9jschzdr3rhoffUOvw=; b=MrKLfihmeBKLytdaD0SuUFpg+z

X6ljtoHkde+FFjnQB7CC/Ta/ZjtnygLA+zzULDWaOXj9ReGDRO3z1M7FuDbfrbe8+W9deSQSADG0p

teFRYyBDe/wJs3L2ZCejQ8ESUFldirQIcR+1OFP3eQDOPsA7+MvoOnxCH2O3Uudhp94CefMkvH2C7

7aDm+AGO8pd93b7KSHEbozD8zRFjtEIMYt3ues/3xCp3Z8CytJz1lDYcp8JTTzeaDzdAEFpxQfSp3

9mm/h9SzrTkvS2SHbHKJT2xg0LIwHr0/Qstwx8is0ylFGeqT29LtbA3DNTUIQNQNxG3TY/DqEtVR/

76uMhyDw==;

Received: from [192.168.210.103] (port=38339 helo=MBX.almasriaairlines.org)

by mail.almasriaairlines.org with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1vX3oJ-000000008KJ-260C

for sales@nk.ca;

Sat, 20 Dec 2025 22:44:19 +0200

Received: from MBX.almasriaairlines.org (192.168.210.103) by

MBX.almasriaairlines.org (192.168.210.103) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1544.4; Sat, 20 Dec 2025 19:38:18 +0200

Received: from MBX.almasriaairlines.org ([fe80::493a:2d1e:c1c4:b5e4]) by

MBX.almasriaairlines.org ([fe80::493a:2d1e:c1c4:b5e4%8]) with mapi id

15.02.1544.004; Sat, 20 Dec 2025 19:38:18 +0200

From: karim gafy

Subject: Service Inquiry

Thread-Topic: Service Inquiry

Thread-Index: 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

Date: Sat, 20 Dec 2025 17:38:18 +0000

Message-ID: <7b866762ba6747f2ad28d5d4a3402d45@almasriaairlines.org>

Reply-To: "satoshi@aichi-corp-us.com"

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [192.168.210.1]

Content-Type: multipart/alternative;

boundary="_000_7b866762ba6747f2ad28d5d4a3402d45almasriaairlinesorg_"

MIME-Version: 1.0

X-Sophos-OBS: success

X-SASI-Version: Antispam-Engine: 6.0.1, AntispamData: 2025.12.20.195719

X-SASI-RCODE: 200

X-SASI-SpamProbability: 82%

X-SASI-Hits: BODYTEXTH_SIZE_10000_LESS 0.000000,

BODYTEXTP_SIZE_3000_LESS 0.000000, BODY_SIZE_3000_3999 0.000000,

BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000,

MISSING_HEADERS 0.000000, NO_FUR_HEADER 0.000000, OUTBOUND 0.000000,

OUTBOUND_SOPHOS 0.000000, REPLYTO_FROM_DIFF_ADDY 0.100000,

SENDER_NO_AUTH 0.000000, TO_MALFORMED 0.000000,

URI_CLASS_ABS_DOMAIN 8.000000, WEBMAIL_SOURCE 0.000000,

WEBMAIL_XOIP 0.000000, WEBMAIL_X_IP_HDR 0.000000, __CT 0.000000,

__CTYPE_HAS_BOUNDARY 0.000000, __CTYPE_MULTIPART 0.000000,

__CTYPE_MULTIPART_ALT 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000,

__HAS_REPLYTO 0.000000, __HAS_XOIP 0.000000, __MIME_TEXT_H1 0.000000,

__MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MSGID_32HEX 0.000000,

__NAME_IN_SUBJ 0.000000, __OUTBOUND_SOPHOS_FUR 0.000000,

__OUTBOUND_SOPHOS_FUR_IP 0.000000, __RCVD_FROM_DOMAIN 0.000000,

__SANE_MSGID 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_SHORT 0.000000,

__URI_CLASS_ANY 0.000000

X-Spam_score: 9.4

X-Spam_score_int: 94

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: The management team of AICHI CORPORATION, a Japanese company,

is expanding its operations into the North American market. As such, we would

like to engage your services as an individual or a business [...]



Content analysis details: (9.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.33.249.227 listed in dnsbl.ahbl.org]

[41.33.249.227 listed in dnsbl.ahbl.org]

[41.33.249.227 listed in dnsbl.ahbl.org]

[41.33.249.227 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.33.249.227 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.33.249.227 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.33.249.227 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.33.249.227 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.33.249.227 listed in will-spam-for-food.eu.org]

[41.33.249.227 listed in will-spam-for-food.eu.org]

[41.33.249.227 listed in will-spam-for-food.eu.org]

[41.33.249.227 listed in will-spam-for-food.eu.org]

[41.33.249.227 listed in will-spam-for-food.eu.org]

[41.33.249.227 listed in will-spam-for-food.eu.org]

[41.33.249.227 listed in will-spam-for-food.eu.org]

[41.33.249.227 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.9 REPLYTO_WITHOUT_TO_CC No description available.

Subject: {SPAM?} Service Inquiry