Chinese products spam Part 2


in-top:auto;margin-bottom:auto">
16px">Dear Sir / Madam,


rgin-bottom:7px;margin-left:0;margin-top:auto;margin-bottom:auto">
";font-family:Calibri;font-size:16px">Greetings from XINNUO Machinery.
<=

/p>


argin-top:auto;margin-bottom:auto">
ze:16px">We are a professional manufacturer of cold roll forming machines with=

over 30 years of production experience in China. We provide customized soluti=

ons for roofing sheet production, steel structure systems, sandwich panel line=

s, and automatic profile forming equipment for global construction companies.<=

/span>


eft:0;margin-top:auto;margin-bottom:auto">
W3FKD/roll-forming-machine.jpg" _src=3D"https://i.postimg.cc/4xTW3FKD/roll-for=

ming-machine.jpg" referrerpolicy=3D"no-referrer"/>


family:Calibri;font-size:16px">As construction projects across Poland continue=

to grow in industrial buildings, warehouses, logistics centers, and residenti=

al roofing systems, we believe our equipment can help improve your production =

efficiency, reduce labor costs, and ensure stable profile quality.

<=

h2>Our=

Main Products

acing=3D"3" style=3D";margin-left:4px;border-left:1px solid windowtext;border-=

top:1px solid windowtext;border-right:1px solid windowtext;border-bottom:1px s=

olid windowtext"><=

tr>=


-width: 1px;border-style: solid;border-color: windowtext">


nt-family:Calibri;color:rgb(0,0,0);font-size:14px">Machine Type


>

olid;border-color: windowtext">


(0,0,0);font-size:14px">Application


=3D"padding: 1px;border-width: 1px;border-style: solid;border-color: windowtex=

t">

Feat=

ures


r-width: 1px;border-style: solid;border-color: windowtext">


ont-family:Calibri;color:rgb(0,0,0);font-size:14px">Roofing Sheet Roll Forming=

Machine


th: 1px;border-style: solid;border-color: windowtext">


amily:Calibri;color:rgb(0,0,0);font-size:14px">Roof & Wall Panels

p>


yle: solid;border-color: windowtext">


or:rgb(0,0,0);font-size:14px">High Speed, Stable Cutting


solid;border-color: windowtext">


gb(0,0,0);font-size:14px">CZ Purlin Machine


r" style=3D"padding: 1px;border-width: 1px;border-style: solid;border-color: w=

indowtext">


px">Steel Structure Buildings


dding: 1px;border-width: 1px;border-style: solid;border-color: windowtext">

=

Automatic =

Size Change


x;border-width: 1px;border-style: solid;border-color: windowtext">


le=3D"font-family:Calibri;color:rgb(0,0,0);font-size:14px">Double Layer Roll F=

orming Machine


er-width: 1px;border-style: solid;border-color: windowtext">


font-family:Calibri;color:rgb(0,0,0);font-size:14px">Two Profiles in One Machi=

ne


x;border-style: solid;border-color: windowtext">


Calibri;color:rgb(0,0,0);font-size:14px">Space Saving


lid;border-color: windowtext">


0,0,0);font-size:14px">Sandwich Panel Production Line


n=3D"center" style=3D"padding: 1px;border-width: 1px;border-style: solid;borde=

r-color: windowtext">


nt-size:14px">PU/PIR/Rockwool Panels


e=3D"padding: 1px;border-width: 1px;border-style: solid;border-color: windowte=

xt">

Ful=

ly Automatic System


ding: 1px;border-width: 1px;border-style: solid;border-color: windowtext">

<=

span style=3D"font-family:Calibri;color:rgb(0,0,0);font-size:14px">Ridge Cap M=

achine


: 1px;border-style: solid;border-color: windowtext">


ily:Calibri;color:rgb(0,0,0);font-size:14px">Roofing Accessories


d>

solid;border-color: windowtext">


b(0,0,0);font-size:14px">Customized Design


"center" style=3D"padding: 1px;border-width: 1px;border-style: solid;border-co=

lor: windowtext">


ize:14px">Floor Deck Machine


ding: 1px;border-width: 1px;border-style: solid;border-color: windowtext">

<=

span style=3D"font-family:Calibri;color:rgb(0,0,0);font-size:14px">Steel Decki=

ng Systems


idth: 1px;border-style: solid;border-color: windowtext">


-family:Calibri;color:rgb(0,0,0);font-size:14px">Heavy Duty Structure

p>


ottom:7px;margin-left:0;margin-top:auto;margin-bottom:auto">
nt-family:Calibri;font-size:16px">[ Machine Production Line Image ]

=

Wh=

y Choose XINNUO


x;margin-bottom:7px;margin-left:48px;margin-top:auto;margin-bottom:auto">
style=3D"font-family:Symbol;font-size:13px">=C2=B7
t-family:Calibri;font-size:14px">30 Years Manufacturing Experience

<=

p style=3D"margin-top:7px;margin-bottom:7px;margin-left:48px;margin-top:auto;m=

argin-bottom:auto">=C2=B7
span>Customized Machine So=

lutions


x;margin-top:auto;margin-bottom:auto">
ize:13px">=C2=B7
CE=

Standard Components


rgin-left:48px;margin-top:auto;margin-bottom:auto">
Symbol;font-size:13px">=C2=B7

size:14px">Overseas Installation Support


margin-bottom:7px;margin-left:48px;margin-top:auto;margin-bottom:auto">
tyle=3D"font-family:Symbol;font-size:13px">=C2=B7

family:Calibri;font-size:14px">Stable Quality & Competitive Price

p>


o;margin-bottom:auto">=C2=B7=

Long-Term Spare Pa=

rts Service

Chinese products spam Part 3



;font-size: 24px">Technical Advantages

able border=3D"1" cellspacing=3D"3" style=3D";margin-left:4px;border-left:1px =

solid windowtext;border-top:1px solid windowtext;border-right:1px solid window=

text;border-bottom:1px solid windowtext">
e=3D"padding:1px 1px 1px 1px ;border-left:1px solid windowtext;border-right:1p=

x solid windowtext;border-top:1px solid windowtext;border-bottom:1px solid win=

dowtext">


yle=3D"font-family:Calibri;font-size:14px">Item


enter" style=3D"padding:1px 1px 1px 1px ;border-left:1px solid windowtext;bord=

er-right:1px solid windowtext;border-top:1px solid windowtext;border-bottom:1p=

x solid windowtext">


h">Details

<=

/tr>
x solid windowtext;border-right:1px solid windowtext;border-top:1px solid wind=

owtext;border-bottom:1px solid windowtext">


-justify:inter-ideograph">M=

aterial Thickness


x 1px 1px ;border-left:1px solid windowtext;border-right:1px solid windowtext;=

border-top:1px solid windowtext;border-bottom:1px solid windowtext">


"text-align:justify;text-justify:inter-ideograph">
alibri;font-size:14px">0.3mm =E2=80=93 3.0mm


n=3D"center" style=3D"padding:1px 1px 1px 1px ;border-left:1px solid windowtex=

t;border-right:1px solid windowtext;border-top:1px solid windowtext;border-bot=

tom:1px solid windowtext">


eograph">Control System
an>


t:1px solid windowtext;border-right:1px solid windowtext;border-top:1px solid =

windowtext;border-bottom:1px solid windowtext">


text-justify:inter-ideograph">
x">PLC Automatic Control


"padding:1px 1px 1px 1px ;border-left:1px solid windowtext;border-right:1px so=

lid windowtext;border-top:1px solid windowtext;border-bottom:1px solid windowt=

ext">


"font-family:Calibri;font-size:14px">Drive System


"center" style=3D"padding:1px 1px 1px 1px ;border-left:1px solid windowtext;bo=

rder-right:1px solid windowtext;border-top:1px solid windowtext;border-bottom:=

1px solid windowtext">


aph">Chain / Gearbox Option=

al


1px ;border-left:1px solid windowtext;border-right:1px solid windowtext;border=

-top:1px solid windowtext;border-bottom:1px solid windowtext">


-align:justify;text-justify:inter-ideograph">
i;font-size:14px">Cutting Type


adding:1px 1px 1px 1px ;border-left:1px solid windowtext;border-right:1px soli=

d windowtext;border-top:1px solid windowtext;border-bottom:1px solid windowtex=

t">


"font-family:Calibri;font-size:14px">Hydraulic Cutting


>
windowtext;border-right:1px solid windowtext;border-top:1px solid windowtext;=

border-bottom:1px solid windowtext">


y:inter-ideograph">Voltage<=

/span>


left:1px solid windowtext;border-right:1px solid windowtext;border-top:1px sol=

id windowtext;border-bottom:1px solid windowtext">


fy;text-justify:inter-ideograph">
14px">Customized According to Your Country


"center" style=3D"padding:1px 1px 1px 1px ;border-left:1px solid windowtext;bo=

rder-right:1px solid windowtext;border-top:1px solid windowtext;border-bottom:=

1px solid windowtext">


aph">Production Speed
>


1px solid windowtext;border-right:1px solid windowtext;border-top:1px solid wi=

ndowtext;border-bottom:1px solid windowtext">


xt-justify:inter-ideograph">
>10-35m/min


Calibri;">We have exported machines to many countries and regions and underst=

and the requirements of international construction material manufacturers.
an>


:0;margin-top:auto;margin-bottom:auto">
t-size:16px">If you are planning to expand your production line or looking for=

reliable roll forming equipment suppliers, we would be glad to provide:
>


auto;margin-bottom:auto">=C2=

=B7
Machine catalog=

s


in-top:auto;margin-bottom:auto">
px">=C2=B7
Profile =

drawings


px;margin-top:auto;margin-bottom:auto">
size:13px">=C2=B7
Q=

uotation


px;margin-top:auto;margin-bottom:auto">
size:13px">=C2=B7
P=

roduction videos


-left:48px;margin-top:auto;margin-bottom:auto">
ol;font-size:13px">=C2=B7

:14px">Customized solutions


0;margin-bottom:7px;margin-left:0;margin-top:auto;margin-bottom:auto">
yle=3D";font-family:Calibri;font-size:16px">Please feel free to contact us for=

more information.


bottom:7px;margin-left:0;margin-top:auto;margin-bottom:auto">
ont-family:Calibri;font-size:16px">Best Regards,


top:7px;margin-right:0;margin-bottom:7px;margin-left:0;margin-top:auto;margin-=

bottom:auto">JARVIS=



";font-family:Calibri;font-size:16px">HEBEI XINNUO ROLL FORMING MACHINE CO., L=

TD


style=3D";font-family:Calibri;font-size:16px">WhatsApp: +86 188 3070 9860
an>

 
>




Chinese products spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 15 May 2026 07:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNsg7-00000000IKj-14f2

for dave@doctor.nl2k.ab.ca;

Fri, 15 May 2026 07:34:11 -0600

Resent-From: The Doctor

Resent-Date: Fri, 15 May 2026 07:34:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-128.dm.aliyun.com ([140.205.208.128]:20803)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNq6j-000000000L2-2t1n

for root@nk.ca;

Fri, 15 May 2026 04:49:39 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.rollermachinery.ltd:vip_edm_WebBatch:454356

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.rollermachinery.ltd; s=aliyun-cn-hangzhou;

t=1778842114; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=yQK3xYRtv1UITdiFzZaws3DaEdyQsXePRgTTzuzNgmY=;

b=HPvQeFSpVNEpLJCkdnvMHR+ZigeeZh7zlXIFoaWxcTmtPEHQHvdRQMwjnZUWPPouPbRcVXyrZ8X+AzVix7psdXAMauEQ0gpXdkvoeQ6+Q5JkbySAJVrkT1BcN5Kro4CB2tlf755L1Fxp6nLASG/2khOEi+cGSj/ip4KHBS3gzRE=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1778842114; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=yQK3xYRtv1UITdiFzZaws3DaEdyQsXePRgTTzuzNgmY=;

b=AR9JVVkWa2kERwYMdNeIO4oKvkQLKSLL50xFS0NjwKxU/gkB7+LfHMfy6kw5SQfGGBsxpSL55QQEX2rN1qwh51gbbrz7RtbBLkp+8PVRhTcOCCMUl/DCttLcvbTVd3/8mOu0KYQElT19S/xGxbLW8eEFi4QtMYI1lI6vuTSrY5U=

Received: from chitu-hsf(mailfrom:vip@vip.rollermachinery.ltd fp:ma_600000305051026787 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Fri, 15 May 2026 18:46:42 +0800

Date: Fri, 15 May 2026 18:46:42 +0800

From: "JARVIS"

To:

Reply-To:

Message-ID: <6d54da98-178f-4856-8c83-21869ade58b3@alibaba.com>

Subject: =?UTF-8?B?cm9sbCBmb3JtaW5nIG1hY2hpbmUgZmFjdG9yeQ==?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000305051026788

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir / Madam, Greetings from XINNUO Machinery.



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.128 listed in will-spam-for-food.eu.org]

[140.205.208.128 listed in will-spam-for-food.eu.org]

[140.205.208.128 listed in will-spam-for-food.eu.org]

[140.205.208.128 listed in will-spam-for-food.eu.org]

[140.205.208.128 listed in will-spam-for-food.eu.org]

[140.205.208.128 listed in will-spam-for-food.eu.org]

[140.205.208.128 listed in will-spam-for-food.eu.org]

[140.205.208.128 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.128 listed in dnsbl.ahbl.org]

[140.205.208.128 listed in dnsbl.ahbl.org]

[140.205.208.128 listed in dnsbl.ahbl.org]

[140.205.208.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.128 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.128 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.128 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.128 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[140.205.208.128 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.4 SALES_REPLY Your parents named you sales?

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?cm9sbCBmb3JtaW5nIG1hY2hpbmUgZmFjdG9yeQ==?=

Nigerian funds spam from Google Gmail Part 2

--0000000000005d703d0651d622cd

Content-Type: text/plain; charset="UTF-8"



Special Greetings to you,



Dear Fund Owner



The office of the United Nations High Commissioner For Human Rights (OHCHR)

has investigated why you have not received your fund yet...Sorry for making

this contact through e-mail since we could not reach your phone number.You

may not understand why this mail came to you today. We have been having a

meeting for quit sometime now and we just came to a logical conclusion few

days ago in affiliation with the World Bank president.



This email is to few well listed people that have been scammed in any part

of the world, the UNITED NATIONS in Affiliation with WORLD BANK have agreed

to compensate them with the sum of USD $12.4 Million Dollars each This

includes every foreign contractors that may have not received their

contract sum, and people that have had an unfinished transaction or

international businesses that failed due to Government problems etc. We

found your email in the list of those who are to benefit from this

compensation exercise and that is why we are contacting you, this have been

agreed upon and have been signed.



You are advised to contact Attorney James F. Kenney of our paying center in

United State of America, as He is our representative in United State of

America. Contact Him immediately for your ATM Carworth USD$12.4 Million

Dollars. This fund is in form of ATM Card for security purpose OK? So He

will send it to you because it is usable in any ATM machine around the

global world of your choice.



Therefore, you should send Him your full Name and Cell phone number your

correct mailing address where you want Him to send your Card to you.Contact

Attorney James F. Kennedy of ATM PAYMENT CENTER with your payment code: [

K7MM71-G3 ] immediately. I apologize on behalf of the United Nation

organization for any delay you might have encountered in receiving your

fund in the past.



Send your complete data including your phone number to the contact below so

that the payment is immediately transferred to your account or paid to you

in cash.



Mr. Attorney James F. Kenney

Email: attorneyjamesfkenney@outlook.com



kindly send an email to this email (attorneyjamesfkenney@outlook.com) to

get an immediate response from Attorney James F. Kenney



Best Regards

Attorney James F. Kenney



--0000000000005d703d0651d622cd

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Special Greetings to you,

Dear Fund Owner

Th=

e office of the United Nations High Commissioner For Human Rights (OHCHR) h=

as investigated why you have not received your fund yet...Sorry for making =

this contact through e-mail since we could not reach your phone number.You =

may not understand why this mail came to you today. We have been having a m=

eeting for quit sometime now and we just came to a logical conclusion few d=

ays ago in affiliation with the World Bank president.

This email is =

to few well listed people that have been scammed in any part of the world, =

the UNITED NATIONS in Affiliation with WORLD BANK have agreed to compensate=

them with the sum of USD $12.4 Million Dollars each This includes every fo=

reign contractors that may have not received their contract sum, and people=

that have had an unfinished transaction or international businesses that f=

ailed due to Government problems etc. We found your email in the list of th=

ose who are to benefit from this compensation exercise and that is why we a=

re contacting you, this have been agreed upon and have been signed.

=

You are advised to contact Attorney James F. Kenney of our paying center in=

United State of America, as He is our representative in United State of Am=

erica. Contact Him immediately for your ATM Carworth USD$12.4 Million Dolla=

rs. This fund is in form of ATM Card for security purpose OK? So He will se=

nd it to you because it is usable in any ATM machine around the global worl=

d of your choice.

Therefore, you should send Him your full Name and =

Cell phone number your correct mailing address where you want Him to send y=

our Card to you.Contact Attorney James F. Kennedy of ATM PAYMENT CENTER wit=

h your payment code: [ K7MM71-G3 ] immediately. I apologize on behalf of th=

e United Nation organization for any delay you might have encountered in re=

ceiving your fund in the past.
=C2=A0
Send your complete data includi=

ng your phone number to the contact below so that the payment is immediatel=

y transferred to your account or paid to you in cash.

Mr. Attorney J=

ames F. Kenney
Email:
">attorneyjamesfkenney@outlook.com


kindly send an email to this =

email (attorneyjamesfke=

nney@outlook.com
) to get an immediate response from Attorney James F. K=

enney

Best Regards
Attorney James F. Kenney




--0000000000005d703d0651d622cd--

Nigerian funds spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 15 May 2026 07:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNsfF-00000000GLw-2BE3

for dave@doctor.nl2k.ab.ca;

Fri, 15 May 2026 07:33:17 -0600

Resent-From: The Doctor

Resent-Date: Fri, 15 May 2026 07:33:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl1-f52.google.com ([74.125.82.52]:54455)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNmxM-000000000av-0HQB

for doctor@doctor.nl2k.ab.ca;

Fri, 15 May 2026 01:27:45 -0600

Received: by mail-dl1-f52.google.com with SMTP id a92af1059eb24-12c8f9846c8so13230681c88.0

for ; Fri, 15 May 2026 00:26:48 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1778830002; cv=none;

d=google.com; s=arc-20240605;

b=fgV6IC6UpwAgVXhfQuC2W4rGz1+QDYxUhS7AuW7km4xouGlVpEQdklI6Docm5D47QE

clqRKa96Ox85Zzv54cE0zK5DMOWftgqreiOleTFljB4PqMvqTB90uZtBqzTppZCCyuGp

7jHOgv6oCelqxpWnDHr30r500ZGyVCk3NYrTNuJ3My3qp+EE5cwIDYAL7pLX5yUmtfaw

sacHjZk28Tv7su/eSDfGQZRsI9kTEbXRgTMnw3HlYUYOIcExJoPqkxfS0Tavuh0MzvKT

bbwtGxvXJ3Oh3dn3rpwXuqOYREBl5CLVea+wiWDn1+2MFZg2DE5PBkkfjMbMAWVI6Mcz

3M2A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=f/O+rorPcm5MIJTOS62zy7IctNiGXKKEZ+PI9T6ig3E=;

fh=1cbuV3GZ8Ise7rGI3pS0JK2Cq4JAmPlMZx0BCfD9gEU=;

b=kwsRCPpP58HZTAzaxfyd8AjxgQ8nqgPHRR6kA/7SKWP58Yzg635Umtv0wQtlSG7/Yn

29qQbJffvo8hFcSPrwLR9KID08RzZNvb+bGO/yCdWi2shKAu/LhGnxVyQhQJeO+kw9OL

xp9n2ECtp1WdHJP6iFmH35wBw1M6UuL7fooGfO+c+qOkERHyDKHyu9PSU4dF7Dwgm7UH

s/vlPCG2fP0AbPpdCxSIQiRLs8LFL8pkfPYYQ0vu2A4HAOyJ81sf8zrp/lqe3foWMzpk

eNFcb1cE4hoI/F4Iveoc5SG7JvQz/M/QTOuaK+yU5FAzvCCokZ1OTDmGZRJpNUCMfKrn

eRwg==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1778830002; x=1779434802; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=f/O+rorPcm5MIJTOS62zy7IctNiGXKKEZ+PI9T6ig3E=;

b=B79THDdHhXGy70o47gy/+gtfQdDFQQPXXBtvszwjEMxeJsodlnHMHEukQRo6S9FMAy

6bGzeu7t6wsmDtD6BoThMdS5zILBvlhgHlR7hO8KYXGWAdXS1/przSI4VpHHOcHNvTjX

r2XhKhuarSkwAWh9xJgGajh+iC6TcQDS5XKUa8D64kBemECM064Qw9jx+LexsizhaFQT

HfJ/wUTPffNqo9TlcApUdxom4JWbU1F2OZwJEEG4FUAO3kOi+PaHEmiF5dTCJ+ZizzLt

u9nbsjfJl/cu3vTfg/f8nU4I7FHhLGGuP1Kv7Nl1dxHJUNCQTuJXscX5RzuFyeTcc8Et

BfhQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778830002; x=1779434802;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=f/O+rorPcm5MIJTOS62zy7IctNiGXKKEZ+PI9T6ig3E=;

b=NMmLtCtvNKcATOh3M4pUt31tEdAJnh/anM2D9WRsOvt4rBfNt44h03p6mCHTsG0E/5

qnLFks9GhsqoWJ4526YH1oRxdVWzRAKNh1EYTFGLvuFeEVPDzZ+i0JU/SzGhyY/6N+Jg

K8RC2wCznvV56MS/s9JWaJ1xIfrjGmXnSSIYeAnPeI2/0aDE8rtXoZPdYDTga6MEOzbC

AdF9FYOzN528EDIQ++JJxVlH4P1DSv8TCQeudARZ55/F1Axc4IbL15H6XRvx7iHmgrMv

acfGkGxi3ZbnAi73MQjSkBdrxmCl3VYZAmE57p4Y/Bso58NN6lDY5VSurxUQ8s1pPyx0

2VuA==

X-Forwarded-Encrypted: i=1; AFNElJ/z1ft4BC94iJInqs6pNJBxgL5ZN/byG/paEncYu/XvaeSplJEA/MNaRcfhX+FNMhQxCQUb/U0=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxAql8xhAsFar4IKx9d9T2+ybrxUlecBO4FfLPs6ef7PSYqj4vc

O1Tl2HMLP2D22ttydhYQKLphO5JLtB2MoDepHQuJ8bYZWhDIlIjXGFmfY/eX/0AO1SiPEkBARrE

PqZ391sA4FKF6evbqHyXnbIywnXdvLxg=

X-Gm-Gg: Acq92OFeLniTfKr7Q3MN/wkviqBuve4uswg3bWh/wn6uo1ecd80nOdyv6JkyjrgZ6RX

CL6b+6hETzgAvkPWqMYdwr5Tw4zLemBBxz5JdYkLItD0ubUdzlnBAQyjXTvNIKLq3RLV42iOHyk

uVXlA9bN4W1mea3kYbY0W/nddFNtoqoEKfXUHugTJvzpy3suTc1QvN4XoMZlUgLHW4qMZ6Xfgcj

ceL4UITB2PbQVSRXveox5k/Iv+lSKlvZUrlDR3sv9hwQpkxMfo5v3Sjg0wWYpZM9eSU2ahF22/N

u0o4XVuzOZRAy0loUQ6g0B20MrJyJP8uZm8lB9T3PcUhhoHSzfxt5Z+Doo/I/Nh0AzC14B/tX4U

HHNLXfdSgv3E=

X-Received: by 2002:a05:7022:6627:b0:128:bae0:e043 with SMTP id

a92af1059eb24-13504943020mr1292246c88.31.1778830001662; Fri, 15 May 2026

00:26:41 -0700 (PDT)

MIME-Version: 1.0

Reply-To: attorneyjamesfkenney@outlook.com

From: "Attorney James F. Kenney"

Date: Fri, 15 May 2026 08:27:53 +0100

X-Gm-Features: AVHnY4KOK_hKoORuc4Hbn0apLfL-0KEWbqzfaGEUutnCK4YRQdKJNVaTHOfCPTI

Message-ID:

Subject: Dear Fund Owner

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000005d703d0651d622cd"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 15.0

X-Spam_score_int: 150

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Special Greetings to you, Dear Fund Owner The office of the

United Nations High Commissioner For Human Rights (OHCHR) has investigated

why you have not received your fund yet...Sorry for making this contact through

e-mail since we could not r [...]



Content analysis details: (15.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.82.52 listed in dnsbl.ahbl.org]

[74.125.82.52 listed in dnsbl.ahbl.org]

[74.125.82.52 listed in dnsbl.ahbl.org]

[74.125.82.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.82.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.82.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.82.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.82.52 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[nasudbvdushsk(at)gmail.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.52 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.52 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.52 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dear Fund Owner

Netflix Phish from nxcli

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 15 May 2026 07:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNsf7-00000000Foq-0HhW

for dave@doctor.nl2k.ab.ca;

Fri, 15 May 2026 07:33:09 -0600

Resent-From: The Doctor

Resent-Date: Fri, 15 May 2026 07:33:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-10356447.uk-south-2.nxcli.net ([165.84.217.7]:61952)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNnXw-000000003hG-1TPA

for sales@nk.ca;

Fri, 15 May 2026 02:05:33 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=default; d=3c7410a965.nxcli.io;

b=BqS3EI37TtgbB0eV6tCr1u62tQrgNVmkbyGwwPZg8VIfEkYwmDOidBr9NLyJMRLlWK957EkVtEPQcESold9fBNqeDUbzqPlulhtjN+w/HKowu/EqopGL68jCYu7ig+eYZTbl3E/5qosUDHl/G1/ny0OyGJHdpxFs6frxKfsLrJ/5rD2WsmSYL/wSPgWuny38wJqAo07jtLmRH5tlPRkMFAgJrE3QkW5AVtcGr3djq27PNqKkjVBkAVd+2vGNYrCpjeWCGPR5aVYLgEfLkgfbeCNNmqNFCxuCFt+VBoQaa7PWvdPl+mISvFiXCwPx9//D1kC9xoEYDYWHVpd+cED5ig==;

h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=3c7410a965.nxcli.io; h=

date:message-id:to:subject:from:reply-to:mime-version

:content-type; s=default; bh=BhLlJo260DoYW5VJyrc8Qk++dK9ldy+Q/Iv

iCMGeCzg=; b=YA4OlSF+Rgnh9dwJIGv1GwFFhpYbU5bw8kp4st9kC1Ohj4TL5+6

wyoYq2LG+JJN/F21QnBUwZVPgPhC4dEyJxQlax8DlegYh+n4fq77mN347dYKiu6D

tQOKUEfH5tX3iJxG91Qh4nyu6GiVGCSKM651GP0UWOIepzJJqiocXidc3VVnmiol

fneXuuKGIA8LxzJo41sp2ECqxyJpFJBH29RHlbPjMXLiwzi1nRTTyLPmwYgZNU4O

Ty47k4oOQkC0PSUOwMuqM/LpG/6RFEdPFK60RLvuHkZpNDEtwpFYJ51onPOguQl4

cyYd+mfqRJcDS5RzFmKFkO6sJxlrtV3wdcw==

Received: (qmail 5480 invoked by uid 10119); 15 May 2026 08:26:33 +0100

Date: 15 May 2026 08:26:33 +0100

Message-ID: <20260515072633.5472.qmail@cloudhost-10356447.uk-south-2.nxcli.net>

To: sales@nk.ca

Subject: Your membership will be canceled TODAY!😭

X-PHP-Originating-Script: 10119:rpcs.php

From: "Nеtflix.cоm" <46jp2uyg@mvh.io>

Reply-To: <46jp2uyg@mvh.io>

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8





































































Netflix

















!



Your account is on hold.





Update your payment details



Dear Customer,



We are having problems with your current billing information. We will try again, but in the meantime, you may want to update your payment details to avoid any interruption.



















UPDATE ACCOUNT NOW







Need help? Visit the Help Center or contact us now.



–Your friends on Netflix





Questions? Call 800-130-365



This account email has been sent to you as part of your membership. To change your email preferences, visit the Communication Settings page.



Please do not reply to this email. For help, visit help.netflix.com.





















Terms of Use |

Privacy Statement



Netflix International B.V.







Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 15 May 2026 07:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNseL-00000000CmW-42O4

for dave@doctor.nl2k.ab.ca;

Fri, 15 May 2026 07:32:21 -0600

Resent-From: The Doctor

Resent-Date: Fri, 15 May 2026 07:32:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.254.50.253] (port=49358 helo=mail-proxy50253.vip.163.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNmEg-00000000MLh-2aLC

for doctor@nl2k.ab.ca;

Fri, 15 May 2026 00:41:37 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.163.com; s=s110527; h=Date:From:To:Subject:Content-Type:

MIME-Version:Message-ID; bh=w8lMVW1tbhE0HXbWT8pn8V9wI2uH6BVFIySJ

8UqmVZw=; b=OPHk/OrOzQhM+IhbQY8U0VSKKcABa0GkIYG3M/UPz9qKXTSRE1hd

0XLqEjXiqKrutshjObqiQFGcVjXCUkfAuU0vL/HodqJ5HaEKdkYyPdsDjAb9yhOy

wuEi3PDPAeFM6FS8156AMLKQSOA4bD+hBUVzSsckdjQfKDS0B0ckI00=

Received: from qianfana3$vip.163.com ( [183.48.245.247] ) by

ajax-webmail-wmsvr-207-11 (Coremail) ; Fri, 15 May 2026 11:15:57 +0800

(CST)

X-Originating-IP: [183.48.245.247]

Date: Fri, 15 May 2026 11:15:57 +0800 (CST)

From: qianfana3

To: doctor@nl2k.ab.ca

Subject: Quotation For Aprons And Daily Necessities Related Products

X-Priority: 3

X-Mailer: Coremail Webmail Server Version 2023.4-cmXT build

20260403(27802f6d) Copyright (c) 2002-2026 www.mailtech.cn 163vip

X-NTES-SC: AL_Qu2cCvSau0Eu4SecZOkfm0wRgO46XMCwvfkg2YZfPp5+jBLk2ysRfnBMGEbE7/qXGiKHkzGmbSdU9MZaeo5JbpoR7kkXm/6Gfa/JA7WpFAJgcQ==

Content-Type: multipart/alternative;

boundary="----=_Part_29826_1717902288.1778814957749"

MIME-Version: 1.0

Message-ID: <74583fd5.1fe1.19e29a238b5.Coremail.qianfana3@vip.163.com>

X-Coremail-Locale: zh_CN

X-CM-TRANSID:C88vCgD3t07tjwZqUVxgAA--.6441W

X-CM-SenderInfo: htld0wpdqdjqxylshiywtou0bp/1tbiNA07d2oGj+3iTgAA3X

X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU==



Hi,Hope you doing well!We are very interested in your aprons and daily necessities. If you are interested in the Chinese market and have complete export qualifications, we can discuss potential partnership opportunities. Our business covers a wide range of regions and the trade terms are flexible. We hope to have the chance to cooperate.



Best Wishes!



QIANFAN INTL TEAM

Intelcom phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 14 May 2026 18:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNfzL-00000000L7J-3Pml

for dave@doctor.nl2k.ab.ca;

Thu, 14 May 2026 18:01:11 -0600

Resent-From: The Doctor

Resent-Date: Thu, 14 May 2026 18:01:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from v71123.phpnet.fr ([46.255.164.209]:33570 helo=v71123.webmo.fr)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNd7r-0000000086W-07Qj

for root@nk.ca;

Thu, 14 May 2026 14:57:54 -0600

Received: by v71123.webmo.fr (Postfix, from userid 10000)

id 9667D1FAB21; Thu, 14 May 2026 20:11:43 +0000 (UTC)

To: root@nk.ca

Subject: Customs fees must be paid (delivery delay).

Date: Thu, 14 May 2026 20:11:43 +0000

From: Intelcom

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_bda9bb99a54e75819f95cc840169ee86"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--b1_bda9bb99a54e75819f95cc840169ee86

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



























Goods imported into Canada may be subject to applicable duties and/or taxes. Couriers are authorized by the CBSA (Canada Border Services Agency) to account for casual shipments in lieu of the importer or owner and may remit any applicable duties and/or taxes to the CBSA.







In the meanwhile, a parcel belonging to you has been seized by customs for failure to declare its contents by the sender and we ask you to pay the amount of 2.96 CAD in duties and taxes to by contacting us as soon as possible using the button below:









Plan my delivery



Thanks for choosing Intelcom.









This email was sent from an automated system. Please do not reply.



© 2026 Intelcom Express - Dragonfly Express. All rights reserved.









--b1_bda9bb99a54e75819f95cc840169ee86

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit













Intelcom















Goods imported into Canada may be subject to applicable duties and/or taxes. Couriers are authorized by the CBSA (Canada Border Services Agency) to account for casual shipments in lieu of the importer or owner and may remit any applicable duties and/or taxes to the CBSA.









In the meanwhile, a parcel belonging to you has been seized by customs for failure to declare its contents by the sender and we ask you to pay the amount of 2.96 CAD in duties and taxes to by contacting us as soon as possible using the button below:











Plan my delivery





Thanks for choosing Intelcom.





















--b1_bda9bb99a54e75819f95cc840169ee86--



Intelcom phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 14 May 2026 18:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNfzG-00000000L6X-120J

for dave@doctor.nl2k.ab.ca;

Thu, 14 May 2026 18:01:06 -0600

Resent-From: The Doctor

Resent-Date: Thu, 14 May 2026 18:01:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from v71123.phpnet.fr ([46.255.164.209]:48312 helo=v71123.webmo.fr)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNcvu-000000007JL-40hl

for sales@netknow.ca;

Thu, 14 May 2026 14:45:34 -0600

Received: by v71123.webmo.fr (Postfix, from userid 10000)

id 5ADF51FA933; Thu, 14 May 2026 20:11:43 +0000 (UTC)

To: sales@netknow.ca

Subject: Customs fees must be paid (delivery delay).

Date: Thu, 14 May 2026 20:11:42 +0000

From: Intelcom

Message-ID: <79459da19152e2d883bfcbe5c80e4e10@accord-cadre-hp.qualitycorporate.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_79459da19152e2d883bfcbe5c80e4e10"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--b1_79459da19152e2d883bfcbe5c80e4e10

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



























Goods imported into Canada may be subject to applicable duties and/or taxes. Couriers are authorized by the CBSA (Canada Border Services Agency) to account for casual shipments in lieu of the importer or owner and may remit any applicable duties and/or taxes to the CBSA.







In the meanwhile, a parcel belonging to you has been seized by customs for failure to declare its contents by the sender and we ask you to pay the amount of 2.96 CAD in duties and taxes to by contacting us as soon as possible using the button below:









Plan my delivery



Thanks for choosing Intelcom.









This email was sent from an automated system. Please do not reply.



© 2026 Intelcom Express - Dragonfly Express. All rights reserved.









--b1_79459da19152e2d883bfcbe5c80e4e10

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit













Intelcom















Goods imported into Canada may be subject to applicable duties and/or taxes. Couriers are authorized by the CBSA (Canada Border Services Agency) to account for casual shipments in lieu of the importer or owner and may remit any applicable duties and/or taxes to the CBSA.









In the meanwhile, a parcel belonging to you has been seized by customs for failure to declare its contents by the sender and we ask you to pay the amount of 2.96 CAD in duties and taxes to by contacting us as soon as possible using the button below:











Plan my delivery





Thanks for choosing Intelcom.





















--b1_79459da19152e2d883bfcbe5c80e4e10--



Web/SEO/App spam from Microsoft Outlook PArt 3


d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

;">

From: 
=3D"color: rgb(12, 100, 192);">Charles Huggies



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">

Sent: Monday, January 05, 2026, 6:54 PM


Subject: Website New Look 2026





Hi,



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

;">

=

Could I talk to you about the website


04, 204);">would you be interested in build or Re-build your websit=

e? or designing new website
,

background-color: rgb(204, 204, 204);"> with

additional feature that might benefit the overall usability and user exper=

ience which usually leads to better sales.



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(200, 38, 19);">

1. Enhance your we=

bsite=92s look.



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(200, 38, 19);">

2. Improve site sp=

eed.



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(200, 38, 19);">

3. Boost conversio=

n rates!



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(200, 38, 19);">

Let us handle the =

redesign for you.



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">

If you=92re interested, I can share our pricing portfolio and previous w=

ork.



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">

Thanks & Regards,


Charles Huggies.










--_000_TY2PPFF4FD188E151C4DDAA19E01933BF33B2072TY2PPFF4FD188E1_--

Web/SEO/App spam from Microsoft Outlook PArt 2

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi We will send you our price list. Thanks & Regards,



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.66.59 listed in dnsbl.ahbl.org]

[52.103.66.59 listed in dnsbl.ahbl.org]

[52.103.66.59 listed in dnsbl.ahbl.org]

[52.103.66.59 listed in dnsbl.ahbl.org]

[2603:1096:408:0:0:0:0:3df listed in]

[dnsbl.ahbl.org]

[2603:1096:408:0:0:0:0:3df listed in]

[dnsbl.ahbl.org]

[2603:1096:408:0:0:0:0:3df listed in]

[dnsbl.ahbl.org]

[2603:1096:408:0:0:0:0:3df listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.66.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.66.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.66.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.66.59 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:408:0:0:0:0:3df listed in]

[will-spam-for-food.eu.org]

[2603:1096:408:0:0:0:0:3df listed in]

[will-spam-for-food.eu.org]

[2603:1096:408:0:0:0:0:3df listed in]

[will-spam-for-food.eu.org]

[2603:1096:408:0:0:0:0:3df listed in]

[will-spam-for-food.eu.org]

[2603:1096:408:0:0:0:0:3df listed in]

[will-spam-for-food.eu.org]

[2603:1096:408:0:0:0:0:3df listed in]

[will-spam-for-food.eu.org]

[2603:1096:408:0:0:0:0:3df listed in]

[will-spam-for-food.eu.org]

[2603:1096:408:0:0:0:0:3df listed in]

[will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

[52.103.66.59 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[cxbxfs57cxc(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.66.59 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.66.59 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.66.59 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

1.5 VOWEL_TOCC_6 To or Cc header with 6 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: HTML



--_000_TY2PPFF4FD188E151C4DDAA19E01933BF33B2072TY2PPFF4FD188E1_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi



We will send you our price list.



Thanks & Regards,

-----Original Message-----

From: Charles Huggies

Sent: Monday, January 05, 2026, 6:54 PM

Subject: Website New Look 2026



Hi,

Could I talk to you about the website would you be interested in build or R=

e-build your website? or designing new website, with additional feature tha=

t might benefit the overall usability and user experience which usually lea=

ds to better sales.

1. Enhance your website=92s look.

2. Improve site speed.

3. Boost conversion rates!

Let us handle the redesign for you.

If you=92re interested, I can share our pricing portfolio and previous work=

.

Thanks & Regards,

Charles Huggies.



--_000_TY2PPFF4FD188E151C4DDAA19E01933BF33B2072TY2PPFF4FD188E1_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

   Hi



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



eft: 1px solid rgb(204, 204, 204);">


d-color: rgb(255, 255, 255); margin: 0in 0in 12pt; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt;">

We will send you our price list=

.






Thanks & Regards, &nbs=

p;



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);">

-----Original Message-----

Web/SEO/App spam from Microsoft Outlook PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 14 May 2026 18:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNfz3-00000000L5C-2XJC

for dave@doctor.nl2k.ab.ca;

Thu, 14 May 2026 18:00:53 -0600

Resent-From: The Doctor

Resent-Date: Thu, 14 May 2026 18:00:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012059.outbound.protection.outlook.com ([52.103.66.59]:39435 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNc01-0000000030b-380E

for root@nk.ca;

Thu, 14 May 2026 13:45:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=N4ZsU/8IEP/lpoZwETPUmQV5dYbXuhpBXviT9TAMg3KpNBfS0iCtQd8Bkisj7N8+20zuOcUHeNIlNJfcpJDZTApky8WQMOK6Fuuy3s4Kkbk/AhqH27RJsDOGuSoTBHH8ei38blQ9PBPQTxWs2uJuYPEpiEjdM68OS5lr+k65Mf+KBGPYrsBSasfyR2prM+s82xqEsqzWaJnJxxoClK0asBg1z0Ma6VG+0gLjwo3QLaCwcqfeSCTwJ6H3cc/0G9gDIAwsosTbMyPuK2A41iBKl+toPW87EAxqnFLyfmuDoIC37aBFX5oCt5jutiN2WqSnunFFEFX7lZLtk+sRrzhLYQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=DQGm9+FkxlM4jIgAEMbT051coJFPu+jIQY0DXWZAgNg=;

b=dYAM+Z8pXm04ZjkdGqLalH5XOaOmGR89NW+reJ4godjNk9AWTElzTdzH6M2p9Iq79Wv0huC/1CHFAgh/DUCuOQScg4qzF0Hr8nds9vi2jXDREkOQNxXoYjhgZdwvANwDKWM0v/F0ukk0XpnUvvQJJobXWKs6kbso5mdDguujeffuDx2HDKsME3SrG84Q+OI/0ENOdOAHlYEv0+gdgOWsLOzWGorjZpVcbOz1i31pgO+xrB+GOUHYvn8lRw5U2KLzu4VIznG5zFgA5S92jeibYeEfsH3SMmqRbTx9h5f/tGfG9cmCUIZikDizKTxWbAdZWdm3aKaIanXxQjw3QSu6cw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=DQGm9+FkxlM4jIgAEMbT051coJFPu+jIQY0DXWZAgNg=;

b=YaSfJ9njCb5BAXpEKthS824SPApqSo1HHqMvJ4gYzds8RIm74noioDkSWk1lFFetWaQbVQfbycKgmIXaCMAF4SYhAOpJgZHQVbEXccy8RLxEA3deEHfUVlmqZhLTgad4H/ma9Tqg+XofbokwHfbu0kK5rStWA/yEacPWrQwYjzIEGfHq2SmkoV+TvJoKX5SCDTm5Gm3JQY3cNLc90BHa/lWdqsc6H+JJxf5fRz1vl1N/hPMf6HxlFkZszgUBajfbxUXy1Hm3jZb2nDJtER+5Hy62dGY5vZIWrvuFOzta2lC3bAEGwymMHQXpRbMGegCmzN/znQS3bN8htSuPgTSi1w==

Received: from TY2PPFF4FD188E1.apcprd01.prod.exchangelabs.com

(2603:1096:408::3df) by SEZPR01MB4825.apcprd01.prod.exchangelabs.com

(2603:1096:101:a5::7) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.25.18; Thu, 14 May

2026 19:43:47 +0000

Received: from TY2PPFF4FD188E1.apcprd01.prod.exchangelabs.com

([fe80::7543:bdb1:507f:c918]) by

TY2PPFF4FD188E1.apcprd01.prod.exchangelabs.com

([fe80::7543:bdb1:507f:c918%3]) with mapi id 15.20.9913.009; Thu, 14 May 2026

19:43:47 +0000

From: Charles Huggies

To: Charles Huggies

Subject: Re: HTML

Thread-Topic: HTML

Thread-Index:

AQHc0Kaw0QFvwJeVWUeV9PjOT5LquLXqzgtBgAGYgAWAAYtAP4AABBvQgAG6A02AAAQeL4ADVozSgAE13j+ADLBeBYABpmfBgAniKM6AAZk0vA==

Date: Thu, 14 May 2026 19:43:46 +0000

Message-ID:



References:





























In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY2PPFF4FD188E1:EE_|SEZPR01MB4825:EE_

x-ms-office365-filtering-correlation-id: 22e3acb3-bc74-4876-3ff1-08deb1f11cc0

x-microsoft-antispam:

BCL:0;ARA:14566002|55001999006|704163111799003|2604032031799003|16051099003|39105399006|37011999003|19101099003|24121999003|22091999003|48001999003|19110799012|15080799012|31061999003|15030799006|8062599012|8060799015|43065399003|31055399003|40105399003|26121999007|440099028|3412199025|18071099003|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?57Pq8Ha23Dt4ATdbhGWtL8N+x2dsSXYrEzs9mwRZ+lWBOkfeqU7M6JQH?=

=?Windows-1252?Q?peIY/hAq9ktFgKO214ylEHhwGw2tkLRtBYD53Q7XWg5TQElemN1BuLqv?=

=?Windows-1252?Q?gHMcabepm0V7iC67r9I3PlQFbX0MOX3pab/GaD0wTiu3Tt3awVB7Zv/T?=

=?Windows-1252?Q?FB4O9jtWYHvfUetBVuzMl11QnAJSVv9wwPWILm/onXgAGDyl638AoU2k?=

=?Windows-1252?Q?hlMr7Fw2o6bUrVo0nZHE2PxlZXgfIkdGeIR8DLcxexf52f9vu+x9tjHF?=

=?Windows-1252?Q?uD9Ati3Cr9/Qa/eBc4inIkagEk3W4xxu08hGuBGgDRzuSnFB/DYmTOh6?=

=?Windows-1252?Q?BUaE4eHHnvaFcwZqlpOAqTeuMO0PyUwVHy8L3wHanxHOm0nVKSMYl+/O?=

=?Windows-1252?Q?HC9APhdB1NKgYqI5ngfUUuBVW4IsZ1AwNSZL+hkh9xBo94k52+CpSLH9?=

=?Windows-1252?Q?ukG4OndHAZmY/WdKpj5Bz377oYHEsIH7c/X34vgmZZdXR+vDIFKT6Sgb?=

=?Windows-1252?Q?oDR72qFkWfIkhjXjwsPkagCbsOO9gjFUq9WeGVxkezO9FA+wc8S31zTX?=

=?Windows-1252?Q?5ism5BAYX7NLOf7RrZ/E1Zo2m7tWMwSSMhjxaEvuTZkYt02HCO3cIvpi?=

=?Windows-1252?Q?/vJirGL6ZsTm0QTfljoyCOCUnyMfMyJiUih4F6FpYEX0aHDqqTCwrrXR?=

=?Windows-1252?Q?7bUBvmzCCGnAv/SlSsELXDcYTzewDS/ymtbKw9J04nOkSP2YO0mRBRYg?=

=?Windows-1252?Q?4wVwY8D8gFNzVj5pxkKk4Fvtz2Cjdexav73zdhZ/l/25zQJX7gKWY8wP?=

=?Windows-1252?Q?kGD8ef0arxtePiiRIPN09ruCyfDWbghap6PywiPmEXofmT+o70Vyojn9?=

=?Windows-1252?Q?ZRuKI/zNMOBgoQHBSDuViOq+11FMZwGXGcNxSNWO/t/r8A0/eIgEbHRT?=

=?Windows-1252?Q?ix7kFXqhiFOH7MpbyvTDeA6epErBXlRrNfBTQp5fw3yhWzpBecnkueQY?=

=?Windows-1252?Q?XbJzWyTjLqOsTsJTt7kuoWIqBcL40cR3QKzDB3YELPBmbU3+ELBwE7k8?=

=?Windows-1252?Q?Blqcgwv4J1kacYaGyE6C4d0T4nvxDlxZ7il1hX30p+egrNWYLRde8N5P?=

=?Windows-1252?Q?Wl9i/j8NsLEc7jKergua85rFPxZKV6zVbDzHVIRGRFCglHcTbAnF4NKo?=

=?Windows-1252?Q?mg3cClBYe8Z2joC7xkmw9W//M1YiMaU9J0lp23n7TmewX6/n1511wLm6?=

=?Windows-1252?Q?jNoq2/tPU8WbTQh20KrdlgrEYyduLhTdtQRgOhOI/DNDboqUguf5EWyE?=

=?Windows-1252?Q?22PEJIfiV7CvNTMAW15WF3yW0FRjuHHksEPXAsZBlwdxx3kKW4eJJ2gT?=

=?Windows-1252?Q?giptz2hNnRIMlJudjQhLWZhdCaKiw74kVbh+Z2YXhyYZOcFGFVTzTjMs?=

=?Windows-1252?Q?NHD0vJagty/L3zTjJY8Zvu8mEIz2UbOcnG9ZCDYAZJTXpL6Yuh2yg1PC?=

=?Windows-1252?Q?a1uoqLetyNKaF1BRzJQPF7pKHmpeRg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?i38oBIuN/NUnYyHaQTokE4VDnqhgcOc6Cc2il4uIBJydQhWZH8iTARve?=

=?Windows-1252?Q?H+mpR8jMGEyVPRxjZ0wHsV0B5TD3bD4NdX0E/8zo/sqkJB80qxnoIt/t?=

=?Windows-1252?Q?6PQ5Bnt8HWY/29CrGUEpthRuaEhcAb1i+Ni+oV76jUR3WVPCo0l2ndjH?=

=?Windows-1252?Q?wqCweGwpXjjTzhITcg2GAHc3GMzo1l4KKvbZi7P9YUCRggY3BrpVgFRW?=

=?Windows-1252?Q?aBeA33Kca5NRbwKWETpBWJPqBLQfTG00eej/y6fEly9uSa15Z3PTgA5Q?=

=?Windows-1252?Q?M5auQ/BMe5ae847ELgeY1rLDCfNXJo5Jbr8slP2nBEs0aUcKDTRt1v8g?=

=?Windows-1252?Q?3amAr+lzk2pFOcjETSHbHf76smpLTjR1PGi61V1paxJUuRFcAPYrobpq?=

=?Windows-1252?Q?rHbGpM1TkyqbPfY7gFrtMce7wzISdc/cdzeVDHdzeznBlyTLVmW2f4rv?=

=?Windows-1252?Q?6wrDuQepwG3VR7fuEtEcR9gDCotRWCUpQzhX7sd4WddNHKSRWjT73VvR?=

=?Windows-1252?Q?IMdWe7x5HAJHJ1rONZNqgy+jbUTqyqpMrJXkexvQZF+jB2LvSNq1gagv?=

=?Windows-1252?Q?fGHQcCUASe9Xz+VG+AwRKMNP3UvJepx8wGfvDjAKku/HOzuOM0RpWYtz?=

=?Windows-1252?Q?2HufWfyENymNIGSZoAzTlQd5RhQZ589nQXr6OElxSrXGesmfwikV5JPN?=

=?Windows-1252?Q?uJumrKxeKySsbF4QB9xSlF2FTkXO/tknRZppsn6p0OTeEpuIptAdRzku?=

=?Windows-1252?Q?16qOk0ob+XMLOMuTz3Ba5gHosyjBLxBCTPI+7+6fLRqc457ub67XcHnV?=

=?Windows-1252?Q?DQ5B9epAfuexh8ESmGVOjrw2jfui8JJBwAdzZyNE2zeP3g7J65Y++QNt?=

=?Windows-1252?Q?Mna2v57U4GgmJYJw0tltako52F0eM9/PH6i0sQ/KnsQC5y8/mryfad24?=

=?Windows-1252?Q?8DY59LyWd9nJs8VDFv0hoysydE/terNe+58cgiL25G2lEREJrqMtH52R?=

=?Windows-1252?Q?4E0MfNx/be/aonhyY3x2kgyLuOqlr+5XCpwGOFIaBJXPpFzikVqXdhPo?=

=?Windows-1252?Q?pFvrfBkJKr6PRCqHFESDHG7XKaJD76QX1QnAGWm6ukoK6PxQ+B0xuDH1?=

=?Windows-1252?Q?bgWFhD7XmyU96qTmZMXatQFl7dm7mW2uaZ2j9N18gxqSNGsIbnEfAOe6?=

=?Windows-1252?Q?JX67xq7g/D1fNOQeu1zOdiRu+SXAvE6rLhyXwlDVBt0ByV4VH5XBlZM8?=

=?Windows-1252?Q?cG8ebt6+KnaS0K/RXXbXGBWW602IwrCSu3yk0Fa+DUMhOSUjWlYWJvFx?=

=?Windows-1252?Q?vlmW7KOLp6GzaoZt6BqWajukKxt0M58DpyX2XN3AHu5NmTchakjp8/vl?=

=?Windows-1252?Q?/DFzcs7jVD9BvNvbLPHUz1eLR7vgI6e7AS4m3mdF5sNgxGTyuyjQ31gi?=

=?Windows-1252?Q?cpuNW/JLh70WX0XtvcqInEV38tfLBEQ2qHUUfHiyRdMsnCqs3taV8Xz6?=

=?Windows-1252?Q?wOrjA2BT/PuaUFXo04ULgb335LkmG9M6NTfhsDKiiHlRaVFjMc2fzMj8?=

=?Windows-1252?Q?XxzAHOuxUcYFbM3m?=

Content-Type: multipart/alternative;

boundary="_000_TY2PPFF4FD188E151C4DDAA19E01933BF33B2072TY2PPFF4FD188E1_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY2PPFF4FD188E1.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 22e3acb3-bc74-4876-3ff1-08deb1f11cc0

X-MS-Exchange-CrossTenant-originalarrivaltime: 14 May 2026 19:43:46.0615

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB4825

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

costco rewards phish from Microsoft Outlook Part 2

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.248.37.74 listed in will-spam-for-food.eu.org]

[45.248.37.74 listed in will-spam-for-food.eu.org]

[45.248.37.74 listed in will-spam-for-food.eu.org]

[45.248.37.74 listed in will-spam-for-food.eu.org]

[45.248.37.74 listed in will-spam-for-food.eu.org]

[45.248.37.74 listed in will-spam-for-food.eu.org]

[45.248.37.74 listed in will-spam-for-food.eu.org]

[45.248.37.74 listed in will-spam-for-food.eu.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[40.93.201.124 listed in will-spam-for-food.eu.org]

[40.93.201.124 listed in will-spam-for-food.eu.org]

[40.93.201.124 listed in will-spam-for-food.eu.org]

[40.93.201.124 listed in will-spam-for-food.eu.org]

[40.93.201.124 listed in will-spam-for-food.eu.org]

[40.93.201.124 listed in will-spam-for-food.eu.org]

[40.93.201.124 listed in will-spam-for-food.eu.org]

[40.93.201.124 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

1.0 HK_RANDOM_FROM From username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[pjifvpqc(at)cancerservicesinc.onmicrosoft.com]

0.3 OFFER_2 BODY: Offers you Something (2)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.201.124 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.201.124 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.201.124 listed in bl.score.senderscore.com]

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} 🎁 Your Costco Reward Is Ready



--_2ecef92a-3229-4541-92c6-bc54ce856fd0_

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 7bit













Costco Rewards















































































































LIMITED-TIME MEMBER REWARD











COSTCO







MEMBER REWARDS CENTER













EXCLUSIVE GIVEAWAY



costco rewards phish from Microsoft Outlook Part 3





Win a YETI Beach Wagon











As a valued Costco member, you have been selected for a special opportunity to claim a premium

YETI Beach Lounge Wagon.



Complete a short confirmation step to reserve your entry before this offer expires.












style="background:#f7fbff;

border:2px dashed #c9d8ee;

border-radius:14px;">



















✔ No Purchase Required







✔ Fast 60-Second Confirmation







✔ Limited Quantities Available














target="_blank"

style="background:#E53935;

color:#ffffff;

font-size:20px;

font-weight:bold;

text-decoration:none;

padding:20px 55px;

border-radius:10px;

display:inline-block;">



CLAIM YOUR REWARD











Offer reserved for selected Costco members only.











You are receiving this email because you subscribed to promotional reward notifications.










style="color:#0054A6;

text-decoration:none;

font-weight:bold;">



Unsubscribe

























--_2ecef92a-3229-4541-92c6-bc54ce856fd0_--

costco rewards phish from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 14 May 2026 18:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNfyj-00000000L41-1MzV

for dave@doctor.nl2k.ab.ca;

Thu, 14 May 2026 18:00:33 -0600

Resent-From: The Doctor

Resent-Date: Thu, 14 May 2026 18:00:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westcentralusazon11023124.outbound.protection.outlook.com ([40.93.201.124]:26135 helo=CY3PR05CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wNbe4-000000001Tr-1IMN

for doctor@doctor.nl2k.ab.ca;

Thu, 14 May 2026 13:23:06 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Z/2rFzr5nV8QoeUQODSkpGsEXUNi6N9Ff9PN+4r6Hku6X7bMTnQXPtVkAdNhmcDr4hFUeslotJSFWW5/lANez8ajkZwB0kSfb6HBFkEcCmBa1chUUaZDhDqfAMUZRKMdT2LxQUTedY0hOCFf8LSxGqUjC/0gm4JIttjQq/RtRGnp+qMiPXIO5SVnTyoHTd35lT7dBpLYpeeFp7FGQYMizY/jJ8a8CMRln/D1cqs6xhGXGWncsw2sRI+ABYyUETF55zdUd38OHCWWL60G70PEHTtAqjDD/xBNzGwsLIpxuEClHBPtmF6R7mVP6FaaeXV73nTlGuFZRXCmcYbTnz3bag==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=AMs379Xx17aQ+jf6kfD387EYims8I7QCX/xrnf+p8YM=;

b=Q1cgBD8ETwTq08/I1Zy7G3SIY0gCE+PDccNogPKOzEB2ctuMrv/gRPBIolj26SHDAP1eNTkFhwMTsL4hhdUns2Aw9H0vhIVLZoZb932pJz7DI33A8xlutO/JZvVGO89IavH23kOGjY6tIhR3FaMtMNE8KpGQqiVTRKHn+fWrnqvATjpuEkTm7Ud8sk3d+2iDFqghGVEQR5RxMU+FIqvRhzgLyC0k17kiiCB+D+PvbY/GvtBsplE61/hqSjTPuwG1gYKmByvUZra+shaQvtngofdQQrDo/7RdVdD2AZxpjRc2M73tsCYz/eSstiH/lVyhpaC3ub9bKy1OOcC3W6mKPQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.248.37.74) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=cancerservicesinc.onmicrosoft.com; dmarc=none action=none

header.from=cancerservicesinc.onmicrosoft.com; dkim=none (message not

signed); arc=none (0)

Received: from PH7P221CA0082.NAMP221.PROD.OUTLOOK.COM (2603:10b6:510:328::21)

by SJ2PR15MB5742.namprd15.prod.outlook.com (2603:10b6:a03:4ca::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9870.25; Thu, 14 May

2026 19:22:02 +0000

Received: from CY4PEPF0000FCC0.namprd03.prod.outlook.com

(2603:10b6:510:328:cafe::13) by PH7P221CA0082.outlook.office365.com

(2603:10b6:510:328::21) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.25.18 via Frontend Transport; Thu, 14

May 2026 19:22:01 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.248.37.74)

smtp.mailfrom=cancerservicesinc.onmicrosoft.com; dkim=none (message not

signed) header.d=none;dmarc=none action=none

header.from=cancerservicesinc.onmicrosoft.com;

Received-SPF: Fail (protection.outlook.com: domain of

cancerservicesinc.onmicrosoft.com does not designate 45.248.37.74 as

permitted sender) receiver=protection.outlook.com; client-ip=45.248.37.74;

helo=cancerservicesinc.onmicrosoft.com;

Received: from cancerservicesinc.onmicrosoft.com (45.248.37.74) by

CY4PEPF0000FCC0.mail.protection.outlook.com (10.167.242.102) with Microsoft

SMTP Server id 15.21.25.13 via Frontend Transport; Thu, 14 May 2026 19:22:00

+0000

MIME-Version: 1.0

From: Costco Rewards

Subject: 🎁 Your Costco Reward Is Ready

Date: Thu, 14 May 2026 20:18:29 +0100

To: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative;

boundary="_2ecef92a-3229-4541-92c6-bc54ce856fd0_"

Message-ID:



X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CY4PEPF0000FCC0:EE_|SJ2PR15MB5742:EE_

X-MS-Office365-Filtering-Correlation-Id: 7a14b739-5077-4ec7-5670-08deb1ee12b6

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|82310400026|36860700016|4022899009|34020700016|61400799027|376014|8096899003|56012099003|18002099003|16102099003;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:45.248.37.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:cancerservicesinc.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(82310400026)(36860700016)(4022899009)(34020700016)(61400799027)(376014)(8096899003)(56012099003)(18002099003)(16102099003);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

V5E1ZBHTv9tU1P+1PAStoWSQ2VFTP1LdvZIsUuWt989Zq244i+anJ5tXEgD4gd89Jd8e/2RleCgFsY/zgHE28aerg/fZ3rMAExb6pdu2tLPiAFozEPU0YNs0GPVbx6hYXppB/CVSk2xvNlyOD/WR83AcpKD85lmTtP1mY2xBG0Vmt3s/vCqjEACf7NJd3IcHtyWdOoW1kJgR5GchIVY9D1Si4GwziYJ5YQbCYVmOVC+hZwXNEK9xJNGbYT7Z1J8511RSdspsFvRtPcrfVCOKUrTa4fikYxX90ZkhLuMS3no3xrLDzz8F63xE9NjBWeDNUWniNum8TGBQd3gJygHPsN7/zXlcYPZp0U5VHyaxzSrdhkLHC0B0zC8F466NlnJpHHnxtq97nDwLpHdNJataezACpBT22hnyQ3zFd6Sy6IuLNGxE92sJqt1VfoYhNIGm

X-OriginatorOrg: cancerservicesinc.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 May 2026 19:22:00.4135

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 7a14b739-5077-4ec7-5670-08deb1ee12b6

X-MS-Exchange-CrossTenant-Id: ff35aeae-ace5-4824-9279-49f902cc11d3

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ff35aeae-ace5-4824-9279-49f902cc11d3;Ip=[45.248.37.74];Helo=[cancerservicesinc.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

CY4PEPF0000FCC0.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR15MB5742

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Costco Rewards LIMITED-TIME MEMBER REWARD



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.201.124 listed in dnsbl.ahbl.org]

[40.93.201.124 listed in dnsbl.ahbl.org]

[40.93.201.124 listed in dnsbl.ahbl.org]

[40.93.201.124 listed in dnsbl.ahbl.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:328:cafe:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:328:0:0:0:21 listed in]

[dnsbl.ahbl.org]

[45.248.37.74 listed in dnsbl.ahbl.org]

[45.248.37.74 listed in dnsbl.ahbl.org]

[45.248.37.74 listed in dnsbl.ahbl.org]

[45.248.37.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.201.124 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.201.124 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.201.124 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.201.124 listed in dnsbl.ahbl.org]