German language spam from Google Gmail part 2

Posted by Dave Yadallee on
ANMERKUNG: Sie k=C3=B6nnen nach =E2=80=9EEdwin Castro=E2=80=9C suchen, dem =

Gewinner des

Rekord-Powerball-Jackpots in H=C3=B6he von 2,04 Milliarden US-Dollar, der a=

m 7.

November 2022 in Kalifornien gewonnen hat.



Bitte senden Sie uns die folgenden Informationen, damit wir Ihre Daten an

die Bank weiterleiten k=C3=B6nnen, um Ihnen eine Bankkarte mit einem Guthab=

en

von 2,5 Millionen US-Dollar auszustellen.

VOLLST=C3=84NDIGER NAME:

TELEFONNUMMER:

ADRESSE:

NATIONALIT=C3=84T:

GESCHLECHT:

ZIVILSTAND:

BERUF:



Mit freundlichen Gr=C3=BC=C3=9Fen,

Edwin Castro Stiftung

Edwin Castro, Jackpot-Gewinner



--000000000000e9d06a064624a539

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=3D"gmail_signature" data-smartmail=3D"gmail_signature">

iv style=3D"color:rgb(34,34,34)">Herzlichen Gl=C3=BCckwunsch! Sie geh=C3=B6=

ren zu den ausgew=C3=A4hlten Beg=C3=BCnstigten.

b(34,34,34)">Diese Nachricht erhalten Sie im Namen von Edwin Castro, dem Ge=

winner des Powerball-Jackpots in H=C3=B6he von 2,04 Milliarden US-Dollar. I=

ch bin der gr=C3=B6=C3=9Fte Powerball-Jackpot-Gewinner in der Geschichte de=

r USA. Ich habe diese Lotterie am 7. November 2022 gewonnen.

e=3D"color:rgb(34,34,34)">Ich m=C3=B6chte Sie informieren, dass Google in Z=

usammenarbeit mit Microsoft auf meinen Wunsch hin Ihre E-Mail-Adresse erhal=

ten hat, damit Sie eine Spende von 2,5 Millionen US-Dollar erhalten k=C3=B6=

nnen. Ich m=C3=B6chte Ihnen diese 2,5 Millionen US-Dollar f=C3=BCr wohlt=C3=

=A4tige Zwecke und zur Unterst=C3=BCtzung Bed=C3=BCrftiger in Ihrer Region =

zukommen lassen, um die Welt f=C3=BCr alle zu einem besseren Ort zu machen.=



34,34,34)">Weitere Informationen finden Sie auf der folgenden Website, dami=

t Sie an der Spende von 2,5 Millionen US-Dollar nicht zweifeln.


=3D"color:rgb(34,34,34)">ANMERKUNG: Sie k=C3=B6nnen nach =E2=80=9EEdwin Cas=

tro=E2=80=9C suchen, dem Gewinner des Rekord-Powerball-Jackpots in H=C3=B6h=

e von 2,04 Milliarden US-Dollar, der am 7. November 2022 in Kalifornien gew=

onnen hat.


color:rgb(34,34,34)">Bitte senden Sie uns die folgenden Informationen, dami=

t wir Ihre Daten an die Bank weiterleiten k=C3=B6nnen, um Ihnen eine Bankka=

rte mit einem Guthaben von 2,5 Millionen US-Dollar auszustellen.

style=3D"color:rgb(34,34,34)">VOLLST=C3=84NDIGER NAME:

olor:rgb(34,34,34)">TELEFONNUMMER:
=

ADRESSE:
NATIONALIT=C3=84T:

iv style=3D"color:rgb(34,34,34)">GESCHLECHT:

4,34,34)">ZIVILSTAND:
BERUF:
<=

div style=3D"color:rgb(34,34,34)">

4)">Mit freundlichen Gr=C3=BC=C3=9Fen,

4)">Edwin Castro Stiftung
Edwin Cas=

tro, Jackpot-Gewinner




--000000000000e9d06a064624a539--

German language spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Dec 2025 06:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVrfp-00000000AvX-0UXH

for dave@doctor.nl2k.ab.ca;

Wed, 17 Dec 2025 06:34:37 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Dec 2025 06:34:37 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f177.google.com ([209.85.128.177]:51369)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVqHZ-00000000MjQ-06cA

for bin@nl2k.ab.ca;

Wed, 17 Dec 2025 05:05:38 -0700

Received: by mail-yw1-f177.google.com with SMTP id 00721157ae682-78c6a53187dso59520167b3.2

for ; Wed, 17 Dec 2025 04:04:43 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765973077; x=1766577877; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=LYjT9vludADb+M/QGIHEzo4moGy11Q1PyrEa3gkS3IE=;

b=Mw1fjpi+Q/NtZa9NKvEvSmDTBXtqVnvNAZh0TLTuKLq1nbEUQ6UlhuJsl/eYPTYWgb

8e4HIs8dUkxAfAOkjDURtDGOTh5AutmMgGlENz4M7h6F5PPFx9DFp4HaRCJMDCP3QbfM

ZWrHI4i59/RLOeUKVs4Cbn9bqbU6JaaqfRQuC+FzWvSn970D8UIDdaF3vZhBulJ3K9Jw

bAB9sM1ZnTyJ6ay3EXs+OrV7W+goNCXecGGoR0TPECBST8KFwBex3RYUtnP9fRyyzCVI

uKguQ5QIMOz01/8LgJypUnQu4l1P3p+P7/v6EFpGJtRXZ8oI5tr3Br/OZxvebo6B/Q0D

scbQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765973077; x=1766577877;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=LYjT9vludADb+M/QGIHEzo4moGy11Q1PyrEa3gkS3IE=;

b=I6J+yfRA2RlLuJgfJEj9RlEKGuNS8XE4S5VAEbX4ifZZ2r1seaEV3afz6Bjt8OdhYf

p8Wsild8v0NG33qTM0KuNMVXBsTniXW0C1hIwWLG6yhGFMOuqv7tRWW03SrdLwYWIsC/

bCZYyHTsHutfCXua1OrGvTN6iKcQgveZXhpViQYQMtumo1CxpdvHAGzuqkE5CKVUw4QG

sVups7R7wEMm3PftRotLFMuJLHGC0NA6rRwFCPnidP74792kA7DzOufXWvG/w7W1b5MK

7RtPl8kNiyddwWLwxopeKpGJ3NkdpwM7WU9GuyUTOMjUXYiYSr2WEgg9ckG87SsPhOrV

2i8A==

X-Forwarded-Encrypted: i=1; AJvYcCUdPxdM7jMxJAT7Zp3JHtii76zc5lte27qrGFOVEoClasYkCDzwOEqPyr6gEArIQKAY2hc=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YzObrCiynmLOOsCAhcB7cUb4PjP9H0wl3umY3/ocEnIqDN+LQcj

HGmI10xY+4o4IRKhMdyWf3WnBkSwBqeB6DWKWLeLYdq9+FjN7rRBVL7DrRYxXzqjMcrtuOqX8ML

A2xdbIfMTM328XGrDAgDLoHr30vcYcv4=

X-Gm-Gg: AY/fxX7idXEZZNrJgbq0KR9KVdAp/BhVJIkvi6+jzbyXvaMsAriGEEQBpCcP728NP4N

VQxEbg6ElSaoRm1lhh2i5eLFJtshq1RvOklTqweAzH4pmREPVtYwOBqjz8zxTkb3PWT7rebaNwV

uWCX+xQlVZbxv1wHfQgLGOcAnIddQOWHzMQXNDGhUayZ4Xg6fn5alKh/Pd2hyjVqJitQMQgsCkn

5tgJa6u5pDN44VspMfdNJSyr7HaGrONxIJzjwkECUDvdHk1kAetBDu9TFTDsXfcGeKJFNs=

X-Google-Smtp-Source: AGHT+IEpDqV4Ac62XljhhEi9fgKrzNPtt1qI9j52aXMdLrxSoeiQOrWNuPnA+k8Ud6B2o9GdrkzqqaDslKvsiLqTrM4=

X-Received: by 2002:a05:690c:6993:b0:78c:6805:3d20 with SMTP id

00721157ae682-78e66c26922mr131331887b3.39.1765973076593; Wed, 17 Dec 2025

04:04:36 -0800 (PST)

MIME-Version: 1.0

Reply-To: privatedonation7@gmail.com

From: EDWIN CASTRO DONATION

Date: Wed, 17 Dec 2025 05:04:19 -0700

X-Gm-Features: AQt7F2pxMlHsJDJL9JhNQvXf_zGpYN04Dd2vENe6mnGQTPv-LPPg-YqtqQuX8-I

Message-ID:

Subject: SPENDE

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000e9d06a064624a539"

Bcc: bin@nl2k.ab.ca

X-Spam_score: 15.4

X-Spam_score_int: 154

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Herzlichen Glückwunsch! Sie gehören zu den ausgewählten

Begünstigten. Diese Nachricht erhalten Sie im Namen von Edwin Castro, dem

Gewinner des Powerball-Jackpots in Höhe von 2,04 Milliarden US-Do [...]



Content analysis details: (15.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.177 listed in dnsbl.ahbl.org]

[209.85.128.177 listed in dnsbl.ahbl.org]

[209.85.128.177 listed in dnsbl.ahbl.org]

[209.85.128.177 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.177 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.177 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.177 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.177 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.177 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.177 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[privatedonation7(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[christianstolte172(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[christianstolte172(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} SPENDE



--000000000000e9d06a064624a539

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Herzlichen Gl=C3=BCckwunsch! Sie geh=C3=B6ren zu den ausgew=C3=A4hlten Beg=

=C3=BCnstigten.

Diese Nachricht erhalten Sie im Namen von Edwin Castro, dem Gewinner des

Powerball-Jackpots in H=C3=B6he von 2,04 Milliarden US-Dollar. Ich bin der

gr=C3=B6=C3=9Fte Powerball-Jackpot-Gewinner in der Geschichte der USA. Ich =

habe diese

Lotterie am 7. November 2022 gewonnen.

Ich m=C3=B6chte Sie informieren, dass Google in Zusammenarbeit mit Microsof=

t auf

meinen Wunsch hin Ihre E-Mail-Adresse erhalten hat, damit Sie eine Spende

von 2,5 Millionen US-Dollar erhalten k=C3=B6nnen. Ich m=C3=B6chte Ihnen die=

se 2,5

Millionen US-Dollar f=C3=BCr wohlt=C3=A4tige Zwecke und zur Unterst=C3=BCtz=

ung Bed=C3=BCrftiger

in Ihrer Region zukommen lassen, um die Welt f=C3=BCr alle zu einem bessere=

n Ort

zu machen.



Weitere Informationen finden Sie auf der folgenden Website, damit Sie an

der Spende von 2,5 Millionen US-Dollar nicht zweifeln.

https://edition.cnn.com/2023/02/14/us/powerball-winner-named/index.html

Virtual Assistant spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Dec 2025 06:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVrg2-00000000BFU-2udV

for dave@doctor.nl2k.ab.ca;

Wed, 17 Dec 2025 06:34:50 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Dec 2025 06:34:50 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f69.google.com ([209.85.210.69]:47180)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVo1q-00000000HPP-1Y2x

for root@nk.ca;

Wed, 17 Dec 2025 02:41:16 -0700

Received: by mail-ot1-f69.google.com with SMTP id 46e09a7af769-7cb133bc2d0so1743404a34.2

for ; Wed, 17 Dec 2025 01:40:19 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765964413; x=1766569213; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;

b=GTewut6TQZHPJt5sF+AsqARWOdEa1jnWFM0riEH0HtT0eu3479bot7SuJBD+0XCJ4E

MEJVsLT88/ZKn0qTlUn4L1h10sqQl7Yi1BDiDS6P0s6RsWjY9h3Og51BXUjquQEXvioN

UrEJdeZHGGg308z/bwzHuQ2Fj61raut2/8Fq+a6ipVptTbS185jLWsA7hlgzp5EZ45j8

AuV1lRnU06P+r/YDyjwQszYaNXMlNmgATRDNo+1lyHY98u5UDjfcoz6gLCy7NJ6x0Rg/

28Xc2zZb/V1OmDd6q1WCfbE35ukG69ZFD6xgR4PNmthHh2f2OQycm0xZy85XeH6sQvu1

K3dA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765964413; x=1766569213;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;

b=FNRUuFrw7n8jJR+J6dhbbAhd56YmwUlARzedZy81T/AxRXXNIJOKNXx7YbI6gSexPf

PxrJn5HpuoFGxdC2KIdL+M3VR2lso3eSzY6xqNm6OlDuJqyDUNveVY7XbgnLqZ3jRBgg

PyLNdpETFzu8eIhW/Tt/XPprZhI+9zNqt0fHo2/GGTZN2RZifSypBG3x4qVXYHsxfDnn

e5VsJyWt+4D7sBV/hMXtm4/x2K3khOI5LTzc7DpbpLEDunkBAqnRkePiQ/P4kbLwRzkA

RL6ZehiJzdI+yR2PNNAddER7I2zSES/EYVOy4nguNwu88x5nskE5WajlfHlNFOA5O7Ns

udWg==

X-Gm-Message-State: AOJu0Yx6VRP43/zk2UM7uAZhviy9fHJK5/dcbWZFCGaj+JXKNzVvPs4N

ovvhwcaHOMirJEssJ4MtohCcySU82xLtheHz/WC2pNe52zEmSWTEkMXMU4ZxTBQcsXgHT22FuXl

hnoc=

X-Google-Smtp-Source: AGHT+IEL5Fi6EsKsvKFQIXXT8eg92KoKBW6235PvtoFhEjLmy0XBUOUIVuZxFZCWytgAlm87qTKAjgJmRw==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:2003:b0:659:9a49:90c9 with SMTP id

006d021491bc7-65b4521362bmr7127238eaf.72.1765964413122; Wed, 17 Dec 2025

01:40:13 -0800 (PST)

Message-ID:

Date: Wed, 17 Dec 2025 09:40:13 +0000

Subject: Re: Follow Up / Remote Support ? root@nk.ca

From: kundankumarheadfield@gmail.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="00000000000087be90064622a1df"

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Just following up on my email from Friday. Limited-time

Christmas offer: Save 20% on Virtual Assistant & Remote Support services.

Would you be available for a quick call this week/ next? Thank you [...]



Content analysis details: (8.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.69 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kundankumarheadfield(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.69 listed in wl.mailspike.net]

1.0 SAVE_PERCENT BODY: Save some percentage

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Re: Follow Up / Remote Support ? root@nk.ca



--00000000000087be90064622a1df

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,

Just following up on my email from Friday. Limited-time Christmas offer:

Save 20% on Virtual Assistant & Remote Support services.

Would you be available for a quick call this week/ next?

Thank you,

Kundan

VA Team!!



On Fri, Dec 5, 2025, at 9:43 AM < > wrote:



Hi root@nk.ca,



Are you looking to hire an affordable Remote Virtual Assistant?

We support bookkeeping, CRM, lead generation, calls, email management, SEO,

digital marketing, design, and more.



May I share our pricing or schedule a quick call?



Best regards,

Kundan

VA Team!!



--00000000000087be90064622a1df

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,
Just following up on my email from Friday. Limited-time Christmas of=

fer: Save 20% on Virtual Assistant & Remote Support services.
Would you =

be available for a quick call this week/ next?
Thank you,
Kundan
V=

A Team!!

On Fri, Dec 5, 2025, at 9:43=E2=80=AFAM < > wrote:

H=

i root@nk.ca,

Are you looking to hire an affordable Remote Virtual A=

ssistant?
We support bookkeeping, CRM, lead generation, calls, email man=

agement, SEO, digital marketing, design, and more.

May I share our p=

ricing or schedule a quick call?

Best regards,
Kundan
VA Team!=

!

--00000000000087be90064622a1df--

Virtual Assistant spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Dec 2025 06:31:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVrc6-000000008tz-1eiA

for dave@doctor.nl2k.ab.ca;

Wed, 17 Dec 2025 06:30:46 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Dec 2025 06:30:46 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f69.google.com ([209.85.210.69]:47180)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVo1q-00000000HPP-1Y2x

for root@nk.ca;

Wed, 17 Dec 2025 02:41:16 -0700

Received: by mail-ot1-f69.google.com with SMTP id 46e09a7af769-7cb133bc2d0so1743404a34.2

for ; Wed, 17 Dec 2025 01:40:19 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765964413; x=1766569213; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;

b=GTewut6TQZHPJt5sF+AsqARWOdEa1jnWFM0riEH0HtT0eu3479bot7SuJBD+0XCJ4E

MEJVsLT88/ZKn0qTlUn4L1h10sqQl7Yi1BDiDS6P0s6RsWjY9h3Og51BXUjquQEXvioN

UrEJdeZHGGg308z/bwzHuQ2Fj61raut2/8Fq+a6ipVptTbS185jLWsA7hlgzp5EZ45j8

AuV1lRnU06P+r/YDyjwQszYaNXMlNmgATRDNo+1lyHY98u5UDjfcoz6gLCy7NJ6x0Rg/

28Xc2zZb/V1OmDd6q1WCfbE35ukG69ZFD6xgR4PNmthHh2f2OQycm0xZy85XeH6sQvu1

K3dA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765964413; x=1766569213;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;

b=FNRUuFrw7n8jJR+J6dhbbAhd56YmwUlARzedZy81T/AxRXXNIJOKNXx7YbI6gSexPf

PxrJn5HpuoFGxdC2KIdL+M3VR2lso3eSzY6xqNm6OlDuJqyDUNveVY7XbgnLqZ3jRBgg

PyLNdpETFzu8eIhW/Tt/XPprZhI+9zNqt0fHo2/GGTZN2RZifSypBG3x4qVXYHsxfDnn

e5VsJyWt+4D7sBV/hMXtm4/x2K3khOI5LTzc7DpbpLEDunkBAqnRkePiQ/P4kbLwRzkA

RL6ZehiJzdI+yR2PNNAddER7I2zSES/EYVOy4nguNwu88x5nskE5WajlfHlNFOA5O7Ns

udWg==

X-Gm-Message-State: AOJu0Yx6VRP43/zk2UM7uAZhviy9fHJK5/dcbWZFCGaj+JXKNzVvPs4N

ovvhwcaHOMirJEssJ4MtohCcySU82xLtheHz/WC2pNe52zEmSWTEkMXMU4ZxTBQcsXgHT22FuXl

hnoc=

X-Google-Smtp-Source: AGHT+IEL5Fi6EsKsvKFQIXXT8eg92KoKBW6235PvtoFhEjLmy0XBUOUIVuZxFZCWytgAlm87qTKAjgJmRw==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:2003:b0:659:9a49:90c9 with SMTP id

006d021491bc7-65b4521362bmr7127238eaf.72.1765964413122; Wed, 17 Dec 2025

01:40:13 -0800 (PST)

Message-ID:

Date: Wed, 17 Dec 2025 09:40:13 +0000

Subject: Re: Follow Up / Remote Support ? root@nk.ca

From: kundankumarheadfield@gmail.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="00000000000087be90064622a1df"

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Just following up on my email from Friday. Limited-time

Christmas offer: Save 20% on Virtual Assistant & Remote Support services.

Would you be available for a quick call this week/ next? Thank you [...]



Content analysis details: (8.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.69 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kundankumarheadfield(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.69 listed in wl.mailspike.net]

1.0 SAVE_PERCENT BODY: Save some percentage

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Re: Follow Up / Remote Support ? root@nk.ca



--00000000000087be90064622a1df

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,

Just following up on my email from Friday. Limited-time Christmas offer:

Save 20% on Virtual Assistant & Remote Support services.

Would you be available for a quick call this week/ next?

Thank you,

Kundan

VA Team!!



On Fri, Dec 5, 2025, at 9:43 AM < > wrote:



Hi root@nk.ca,



Are you looking to hire an affordable Remote Virtual Assistant?

We support bookkeeping, CRM, lead generation, calls, email management, SEO,

digital marketing, design, and more.



May I share our pricing or schedule a quick call?



Best regards,

Kundan

VA Team!!



--00000000000087be90064622a1df

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,
Just following up on my email from Friday. Limited-time Christmas of=

fer: Save 20% on Virtual Assistant & Remote Support services.
Would you =

be available for a quick call this week/ next?
Thank you,
Kundan
V=

A Team!!

On Fri, Dec 5, 2025, at 9:43=E2=80=AFAM < > wrote:

H=

i root@nk.ca,

Are you looking to hire an affordable Remote Virtual A=

ssistant?
We support bookkeeping, CRM, lead generation, calls, email man=

agement, SEO, digital marketing, design, and more.

May I share our p=

ricing or schedule a quick call?

Best regards,
Kundan
VA Team!=

!

--00000000000087be90064622a1df--

Chinese products spam

Posted by Dave Yadallee on
Evidence at Spamcop

Digital art phisher from Google Gmail Part 3

Posted by Dave Yadallee on
>=20




>> Send me a message here on my telegram link




>>=20




>>
er noreferrer noreferrer noreferrer noreferrer" target=3D"_blank">https://t=

.me/gardenermstar




>>=20




>> On Thu, 7 Aug 2025 at 23:06, dave <
o:dave@nk.ca" rel=3D"noreferrer noreferrer noreferrer noreferrer" target=3D=

"_blank">dave@nk.ca> wrote:




>>=20




>>> On 2025-08-08 09:01, Madeline Gardener wrote:




>>>> Do you use telegram?




>>>=20




>>> yes.




>>>>=20




>>>> On Thu, 7 Aug 2025 at 22:49, dave <
=3D"mailto:dave@nk.ca" rel=3D"noreferrer noreferrer noreferrer noreferrer" =

target=3D"_blank">dave@nk.ca> wrote:




>>>>=20




>>>>> On 2025-08-08 08:37, Madeline Gardener wro=

te:




>>>>>> Hello dave




>>>>>>=20




>>>>>> I'm not able to use my whatsapp ri=

ght now and that's why I




>>> used a




>>>>>> different number earlier but it seems =

the problem persists so




>>>>> let's




>>>>>> talk here on email.




>>>>>=20




>>>>> No problem.




>>>>>=20




>>>>>>=20




>>>>>> On Sun, 27 Jul 2025 at 16:13, Madeline=

Gardener




>>>>>> <
29@gmail.com" rel=3D"noreferrer noreferrer noreferrer noreferrer" target=3D=

"_blank">madelinegardener29@gmail.com> wrote:




>>>>>>=20




>>>>>>> Send it to my whatsapp




>>>>>>>=20




>>>>>>> On Sun, 27 Jul 2025 at 16:05, dave=

<
noreferrer" target=3D"_blank">dave@nk.ca> wrote:




>>>>>>>=20




>>>>>>>> On 2025-07-26 20:07, Madeline =

Gardener wrote:




>>>>>>>>> Hello I am Madeline garden=

er from Canada and I have




>>> intentions




>>>>>>>> of




>>>>>>>>> buying your artworks I fou=

nd online. Kindly send me a




>>> whatsapp




>>>>>>>> message




>>>>>>>>> so we can discuss about my=

request.




>>>>>>>>>=20




>>>>>>>>> +1 (226) 829-6043




>>>>>>>>=20




>>>>>>>>
htcafe.studio/u/rootnk" rel=3D"noreferrer noreferrer noreferrer noreferrer =

noreferrer" target=3D"_blank">https://creator.nightcafe.studio/u/rootnk=

is the link you




>>> are




>>>>>>>> looking




>>>>>>>> for.




>>>>>>>> --




>>>>>>>> Created by round cube




>>>>>=20




>>>>> --




>>>>> Created by round cube




>>>=20




>>> --




>>> Created by round cube







--=20




Created by round cube




































--0000000000009a3b6e06461b325c--

Digital art phisher from Google Gmail Part 2

Posted by Dave Yadallee on


>>>>>>>>> >>>>>

>>>>>>>>> >>>>>>

>>>>>>>>> >>>>>> On Sun, 27 Jul 2025 at 16:13, Madeline Gardener

>>>>>>>>> >>>>>> wrote:

>>>>>>>>> >>>>>>

>>>>>>>>> >>>>>>> Send it to my whatsapp

>>>>>>>>> >>>>>>>

>>>>>>>>> >>>>>>> On Sun, 27 Jul 2025 at 16:05, dave wrote:

>>>>>>>>> >>>>>>>

>>>>>>>>> >>>>>>>> On 2025-07-26 20:07, Madeline Gardener wrote:

>>>>>>>>> >>>>>>>>> Hello I am Madeline gardener from Canada and I have

>>>>>>>>> >>> intentions

>>>>>>>>> >>>>>>>> of

>>>>>>>>> >>>>>>>>> buying your artworks I found online. Kindly send me a

>>>>>>>>> >>> whatsapp

>>>>>>>>> >>>>>>>> message

>>>>>>>>> >>>>>>>>> so we can discuss about my request.

>>>>>>>>> >>>>>>>>>

>>>>>>>>> >>>>>>>>> +1 (226) 829-6043

>>>>>>>>> >>>>>>>>

>>>>>>>>> >>>>>>>> https://creator.nightcafe.studio/u/rootnk is the link

>>>>>>>>> you

>>>>>>>>> >>> are

>>>>>>>>> >>>>>>>> looking

>>>>>>>>> >>>>>>>> for.

>>>>>>>>> >>>>>>>> --

>>>>>>>>> >>>>>>>> Created by round cube

>>>>>>>>> >>>>>

>>>>>>>>> >>>>> --

>>>>>>>>> >>>>> Created by round cube

>>>>>>>>> >>>

>>>>>>>>> >>> --

>>>>>>>>> >>> Created by round cube

>>>>>>>>>

>>>>>>>>> --

>>>>>>>>> Created by round cube

>>>>>>>>>

>>>>>>>>



--0000000000009a3b6e06461b325c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello=C2=A0DAVE


quote_container">
On Wed, Aug 20, 2025=

, 3:46 PM Madeline Gardener <
com">madelinegardener29@gmail.com> wrote:

=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=

ing-left:1ex">
Hello Dave can we cancel the transaction so=

I can get my money back?


=3D"ltr" class=3D"gmail_attr">On Sat, 16 Aug 2025 at 18:02, Madeline Garden=

er <
l=3D"noreferrer">madelinegardener29@gmail.com> wrote:

kquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-=

width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(20=

4,204,204)">
Hello Dave how are you?

">Why have you not responded to any of my messages?


s=3D"gmail_quote">
---------- Forwarde=

d message ---------
From:
">Madeline Gardener <
inegardener29@gmail.com" target=3D"_blank" rel=3D"noreferrer">madelinegarde=

ner29@gmail.com>
Date: Tue, 12 Aug 2025 at 15:59
Subjec=

t: Re: Hello Dave
To: DAVE y <
"_blank" rel=3D"noreferrer">dave@nk.ca>



"auto">Hello dave I'm not comfortable with the manner at which you go w=

ith this, I've been deducted a huge amount of money and you're not =

making any move to redeem the NFT or even give me back. Why?


class=3D"gmail_quote">
On Sat, Aug 9, =

2025, 10:45=E2=80=AFPM Madeline Gardener <
ener29@gmail.com" target=3D"_blank" rel=3D"noreferrer">madelinegardener29@g=

mail.com> wrote:

"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;pad=

ding-left:1ex;border-left-color:rgb(204,204,204)">
Come on=

line on Whatsapp=C2=A0


class=3D"gmail_attr">On Sat, Aug 9, 2025, 10:35=E2=80=AFPM DAVE y <
ref=3D"mailto:dave@nk.ca" rel=3D"noreferrer noreferrer" target=3D"_blank">d=

ave@nk.ca> wrote:

=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;=

padding-left:1ex;border-left-color:rgb(204,204,204)">

>
Got it. Also multifailure authenticAtion happening on si=

gnal and telegram





On Aug 8, 2025, at 12:38 p.m., Madeline Gardener=

<
ferrer noreferrer" target=3D"_blank">madelinegardener29@gmail.com> w=

rote:

rder-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-co=

lor:rgb(204,204,204)">



Hello dave I sent you a message on Whatsapp=C2=A0










On Fri, Aug 8, 2025, 2:08=E2=80=AFPM Madeline Gardener <
lto:madelinegardener29@gmail.com" rel=3D"noreferrer noreferrer noreferrer" =

target=3D"_blank">madelinegardener29@gmail.com> wrote:







-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:=

rgb(204,204,204)">



Hello Dave=C2=A0












You know I'm not happy when you leave me unreplyed and now I've =

been deducted 24 ETH for the purchase so let me direct you how to confirm t=

he transaction and receive the amount deducted from=C2=A0my account.












On Fri, 8 Aug 2025 at 02:40, Madeline Gardener <
adelinegardener29@gmail.com" rel=3D"noreferrer noreferrer noreferrer norefe=

rrer" target=3D"_blank">madelinegardener29@gmail.com> wrote:







der-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-col=

or:rgb(204,204,204)">



Hello dave












On Fri, 8 Aug 2025 at 01:55, Madeline Gardener <
o:madelinegardener29@gmail.com" rel=3D"noreferrer noreferrer noreferrer nor=

eferrer" target=3D"_blank">madelinegardener29@gmail.com> wrote:







border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-=

color:rgb(204,204,204)">



Do you have signal?





It's a chat app like WhatsApp=C2=A0












On Fri, 8 Aug 2025 at 01:54, dave <
ca" rel=3D"noreferrer noreferrer noreferrer noreferrer" target=3D"_blank">d=

ave@nk.ca> wrote:







ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-le=

ft-color:rgb(204,204,204)">

On 2025-08-07 18:49, Madeline Gardener wrote:




> Are you there?







Yes I am but telegram is not letting me back in.







>=20




> On Fri, 8 Aug 2025 at 16:18, Madeline Gardener




> <
"noreferrer noreferrer noreferrer noreferrer" target=3D"_blank">madelinegar=

dener29@gmail.com> wrote:


Digital art phisher from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 16 Dec 2025 17:50:00 -0700

Received: from mail-qk1-f177.google.com ([209.85.222.177]:58498)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVfit-00000000Ch3-1oYL

for dave@nk.ca;

Tue, 16 Dec 2025 17:49:07 -0700

Received: by mail-qk1-f177.google.com with SMTP id af79cd13be357-8b5ed9e7500so398434785a.0

for ; Tue, 16 Dec 2025 16:48:14 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765932487; x=1766537287; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=QglbnY6004aKYcEYmuZws4/I6w9eli0HiWPEkVxnQSc=;

b=IOCzop8zvc0Icgt6M+0fQI8e9yij5x0hda72iDzWNjWUErx5WmQeDjIkjdLGOv4Wpv

2JM2oIJowrT+9nwyDFus7Vh9Royh5tqApJmeS9DIKrNPYHauKSey747gcAfwqz1dARmR

xA+hrIJ1WvulqVGiogg3/FOZTlFYk4RYKxYS1XKqw6zrwNBVpwS/8EnDOvctISgTc4h7

yzoINYpY1t2WVUpZkGuwfOpN+iWl/qWZSaXS8Jg+J+zKEaP2dQGBGpmTrizf8uVog+i6

IaYu5r86i2QnEuPeot3Q8VHY0GdCUn4Nb2ZeGBSLv9R4Ga7Ui1QNs6tq8l0VP5Fepqc4

8srA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765932487; x=1766537287;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=QglbnY6004aKYcEYmuZws4/I6w9eli0HiWPEkVxnQSc=;

b=ItSHAInMhJDC4lTByZORUWEXM4bukE+2eALB0Ur1bsfO8ekAWVyLlfn/n6xyXGGPy5

s9wtxdy5tbIXkmr+utPiJ69iU3ESjBARCO3i2BaHMBhDkwhWJaXV6pTeOBN9nzddfibL

zuWAedHOgJq1xXxjpHd8wJGkLzvXLmL+OoiKOeyoz//nFwTUQQ2rTlfT2yuxeo57xktw

Rb2iqRmF+48FVJJwep+yRkSW1KajXkWK2A75ruZpJLWfR7AObGHAsemyLTXSMDcBdvJl

eOXBYn9Rb2trcOYHWI60v9UoxiAl1GAOA4o88E1P9M6F5dudgZxFpyV9r5/FxaE1NLuL

Eb2w==

X-Gm-Message-State: AOJu0YzZOuVY3YT325a7pIU+p4gf19YQ8ugainOCo7XNU909Vk0HaXK4

UYiZOD+h0UzS1X99ovVBeBjd6ZUqmaLNXx7NCVrEdbIGWlABdgGnZuny8Rh5XmE3L7uM2h1rIPO

pTBV7mzf8K0xRd20+jVsiWwJr/jCq6tg9B1y8

X-Gm-Gg: AY/fxX5uSFdowSLX+dSz0CuwZgJ3TuEB/MvjyXLjUwjrQsL0z0Ojf//dhVBNJQ9TpXw

FnQ4C+NAfD7stPms96pom+N/v4n+xNvdAXNnNPnXZq4cahKoUOH0BEAJjrFG1sNDFfGzVnGwk1q

6sbfGOLdsZOLux1wo/SxgtNFxYe02yUG2bkGtBt7Q4uwx6L7Dw4O95q8QUWD32VxzghLmK1KtxI

wKQpgrbNTfj+4EFB6maZg/MgVkUFpLxEoiWbq90SOSdjq+mRH1wPvAMaoks6u/3aruF0TcGFfq+

o1DWFnAGms3gWnIZX6cD1nPB9WwnAvITvZn+f9lH6Mk=

X-Google-Smtp-Source: AGHT+IEHp3OTqXUoDokKEDDoEdlE4HVe+5rA3VflipG+C8xcKAeZEpI+vuVsA1JyUigVvy4owGnvq5Nc4fnnhG8XrPM=

X-Received: by 2002:a05:6214:5191:b0:7f5:eda2:a54b with SMTP id

6a1803df08f44-8887e7fb301mr236689146d6.62.1765932487292; Tue, 16 Dec 2025

16:48:07 -0800 (PST)

MIME-Version: 1.0

References:

<73aade3baea0c30b1fff80932e961b88@nk.ca>









<5b29740c3f70603dd26de1abc4f4e039@nk.ca>







<724cc1cc-f7b1-4d7d-92a9-3a603d426a63@nk.ca>





In-Reply-To:

From: Madeline Gardener

Date: Wed, 17 Dec 2025 01:47:56 +0100

X-Gm-Features: AQt7F2rem1pwowj8y5ydWse7YulUWZGlwSmHgXL_Hwi5N4ESITc-GdW0ne4xbWI

Message-ID:

Subject: Re: Hello Dave

To: DAVE y

Content-Type: multipart/alternative; boundary="0000000000009a3b6e06461b325c"



--0000000000009a3b6e06461b325c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello DAVE



On Wed, Aug 20, 2025, 3:46 PM Madeline Gardener <

madelinegardener29@gmail.com> wrote:



> Hello Dave can we cancel the transaction so I can get my money back?

>

> On Sat, 16 Aug 2025 at 18:02, Madeline Gardener <

> madelinegardener29@gmail.com> wrote:

>

>> Hello Dave how are you?

>> Why have you not responded to any of my messages?

>>

>> ---------- Forwarded message ---------

>> From: Madeline Gardener

>> Date: Tue, 12 Aug 2025 at 15:59

>> Subject: Re: Hello Dave

>> To: DAVE y

>>

>>

>> Hello dave I'm not comfortable with the manner at which you go with this=

,

>> I've been deducted a huge amount of money and you're not making any move=

to

>> redeem the NFT or even give me back. Why?

>>

>> On Sat, Aug 9, 2025, 10:45=E2=80=AFPM Madeline Gardener <

>> madelinegardener29@gmail.com> wrote:

>>

>>> Come online on Whatsapp

>>>

>>> On Sat, Aug 9, 2025, 10:35=E2=80=AFPM DAVE y wrote:

>>>

>>>> Got it. Also multifailure authenticAtion happening on signal and

>>>> telegram

>>>>

>>>> Get BlueMail for Android

>>>> On Aug 8, 2025, at 12:38 p.m., Madeline Gardener <

>>>> madelinegardener29@gmail.com> wrote:

>>>>>

>>>>> Hello dave I sent you a message on Whatsapp

>>>>>

>>>>> On Fri, Aug 8, 2025, 2:08=E2=80=AFPM Madeline Gardener <

>>>>> madelinegardener29@gmail.com> wrote:

>>>>>

>>>>>> Hello Dave

>>>>>>

>>>>>> You know I'm not happy when you leave me unreplyed and now I've been

>>>>>> deducted 24 ETH for the purchase so let me direct you how to confirm=

the

>>>>>> transaction and receive the amount deducted from my account.

>>>>>>

>>>>>> On Fri, 8 Aug 2025 at 02:40, Madeline Gardener <

>>>>>> madelinegardener29@gmail.com> wrote:

>>>>>>

>>>>>>> Hello dave

>>>>>>>

>>>>>>> On Fri, 8 Aug 2025 at 01:55, Madeline Gardener <

>>>>>>> madelinegardener29@gmail.com> wrote:

>>>>>>>

>>>>>>>> Do you have signal?

>>>>>>>> It's a chat app like WhatsApp

>>>>>>>>

>>>>>>>> On Fri, 8 Aug 2025 at 01:54, dave wrote:

>>>>>>>>

>>>>>>>>> On 2025-08-07 18:49, Madeline Gardener wrote:

>>>>>>>>> > Are you there?

>>>>>>>>>

>>>>>>>>> Yes I am but telegram is not letting me back in.

>>>>>>>>>

>>>>>>>>> >

>>>>>>>>> > On Fri, 8 Aug 2025 at 16:18, Madeline Gardener

>>>>>>>>> > wrote:

>>>>>>>>> >

>>>>>>>>> >> Send me a message here on my telegram link

>>>>>>>>> >>

>>>>>>>>> >> https://t.me/gardenermstar

>>>>>>>>> >>

>>>>>>>>> >> On Thu, 7 Aug 2025 at 23:06, dave wrote:

>>>>>>>>> >>

>>>>>>>>> >>> On 2025-08-08 09:01, Madeline Gardener wrote:

>>>>>>>>> >>>> Do you use telegram?

>>>>>>>>> >>>

>>>>>>>>> >>> yes.

>>>>>>>>> >>>>

>>>>>>>>> >>>> On Thu, 7 Aug 2025 at 22:49, dave wrote:

>>>>>>>>> >>>>

>>>>>>>>> >>>>> On 2025-08-08 08:37, Madeline Gardener wrote:

>>>>>>>>> >>>>>> Hello dave

>>>>>>>>> >>>>>>

>>>>>>>>> >>>>>> I'm not able to use my whatsapp right now and that's why I

>>>>>>>>> >>> used a

>>>>>>>>> >>>>>> different number earlier but it seems the problem persists

>>>>>>>>> so

>>>>>>>>> >>>>> let's

>>>>>>>>> >>>>>> talk here on email.

>>>>>>>>> >>>>>

>>>>>>>>> >>>>> No problem.

German language spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Dec 2025 19:56:59 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVhi4-0000000053T-26gG

for dave@doctor.nl2k.ab.ca;

Tue, 16 Dec 2025 19:56:16 -0700

Resent-From: The Doctor

Resent-Date: Tue, 16 Dec 2025 19:56:16 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [195.83.153.8] (port=49779 helo=smtp-out2-webmail-8.u-picardie.fr)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVdzD-0000000014c-2lHW

for doctor@doctor.nl2k.ab.ca;

Tue, 16 Dec 2025 15:57:53 -0700

Received: from passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142])

by smtp-out2-webmail-8.u-picardie.fr (Postfix) with ESMTP id 4dWC1X4LM3zBtg0;

Tue, 16 Dec 2025 23:54:56 +0100 (CET)

X-Virus-Scanned: Debian amavisd-new at u-picardie.fr

Received: from smtp.u-picardie.fr ([10.0.132.227])

by passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142]) (amavisd-new, port 10048)

with LMTP id QuiKsw4jPj_p; Tue, 16 Dec 2025 23:54:52 +0100 (CET)

Received: from horde-ext-01 (horde-ext-01.vm.u-picardie.fr [10.0.132.193])

(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))

(No client certificate requested)

(Authenticated sender: c22407550)

by smtp.u-picardie.fr (Postfix) with ESMTPSA id 4dWC182vZ2z3yq9;

Tue, 16 Dec 2025 23:54:36 +0100 (CET)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=u-picardie.fr;

s=smtp; t=1765925692; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type: content-transfer-encoding:content-transfer-encoding;

bh=D6incc/GghzehHq9Te79Od6jonpbqGIJcQRXtO0RfmI=;

b=waMfIKQns2r8ZYpVwDrZEwP44B9pKF1K5P/Fa7+2WDELO0Rpv13E1aXXGzjNdycBE/Q33U

MdfyAZ5183LnqXGVxq53KkPL0XSDf9ba9ZQ0LD2jwDuKrVYpVEwl1TsyP+QMTi7wfScVD+

MJgg+mczISHGLviRNEl6g7BUYRaZapIe1YAdwE4NFORwJjhdeFF24EbBYkuCwN+E0eYsv7

nHAW6rW2+qiaRYH4UZBDREXyIO8Qdamqmu4IDg2ezf6M3/mJR1lhhiUwz8fyELuLXVxxnY

4RZdg/gXUOIeCZOK2SEgj3p6gl8UJvWdJ72OLrEmTAwWfiT/mIqIpfPNnoUecA==

Received: from ec2-3-70-126-251.eu-central-1.compute.amazonaws.com

(ec2-3-70-126-251.eu-central-1.compute.amazonaws.com [3.70.126.251]) by

webmail.etud.u-picardie.fr (Horde Framework) with HTTPS; Tue, 16 Dec 2025

23:54:36 +0100

Date: Tue, 16 Dec 2025 23:54:36 +0100

Message-ID: <20251216235436.Horde.LWwow1SAUdlktIoHaQEnWQr@webmail.etud.u-picardie.fr>

From: Hallo

To: tungs6771@gmail.com

Subject: Investitionsprojekt

Reply-to: stung@shuntung-hk-cn.com

User-Agent: Horde Application Framework 5

Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes

MIME-Version: 1.0

Content-Disposition: inline

Content-Transfer-Encoding: 8bit

X-Spamd-Bar: +++++

Authentication-Results: smtp.u-picardie.fr;

auth=pass smtp.auth=c22407550 smtp.mailfrom=lou.carpentier-pichard@etud.u-picardie.fr

X-Rspamd-Server: passoire-04

X-Rspamd-Queue-Id: 4dWC182vZ2z3yq9

X-Spamd-Result: default: False [5.90 / 1000.00];

BAYES_SPAM(6.00)[99.99%];

MIME_GOOD(-0.10)[text/plain];

DKIM_SIGNED(0.00)[u-picardie.fr:s=smtp];

MID_RHS_MATCH_FROMTLD(0.00)[];

RCPT_COUNT_ONE(0.00)[1];

ARC_NA(0.00)[];

NEURAL_HAM(-0.00)[-0.994];

FROM_EQ_ENVFROM(0.00)[];

FREEMAIL_TO(0.00)[gmail.com];

MIME_TRACE(0.00)[0:+];

RCVD_COUNT_TWO(0.00)[2];

ETUD_FROM(0.00)[etud.u-picardie.fr];

REPLYTO_DOM_NEQ_FROM_DOM(0.00)[];

RCVD_VIA_SMTP_AUTH(0.00)[];

HAS_REPLYTO(0.00)[stung@shuntung-hk-cn.com];

TO_DN_NONE(0.00)[];

FROM_HAS_DN(0.00)[];

TO_MATCH_ENVRCPT_ALL(0.00)[];

FREEMAIL_ENVRCPT(0.00)[gmail.com,yahoo.com.au,yahoo.co.uk,gmx.de,web.de,phreaker.net,operamail.com,earthlink.net,hotmail.com,mail.com,yahoo.com,mac.com,bellsouth.net,club-internet.fr,compuserve.com,me.com,xtra.co.nz,xs4all.nl,iname.com,sci.fi,outlook.com,bigfoot.com,engineer.com,juno.com,ftml.net,gmx.net,mindspring.com,t-online.de,rocketmail.com,btinternet.com,op.pl,aol.com,mail.ru,optusnet.com.au,freesurf.fr,onet.pl,att.net,arcor.de,centrum.cz,worldnet.att.net,libero.it,gmx.at,laposte.net,yahoo.ca,yahoo.co.jp,neuf.fr,hotmail.fr,caramail.fr];

TAGGED_RCPT(0.00)[];

RCVD_TLS_ALL(0.00)[]

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Guten Morgen, mein Name ist Shun Tung, und ich vertrete die

Interessen der Familie Wing Mau, die an verschiedenen Investitionsmöglichkeiten

in Ihrem Land interessiert ist. Besonders interessieren wir uns für die

[...]



Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[195.83.153.8 listed in dnsbl.ahbl.org]

[195.83.153.8 listed in dnsbl.ahbl.org]

[195.83.153.8 listed in dnsbl.ahbl.org]

[195.83.153.8 listed in dnsbl.ahbl.org]

[3.70.126.251 listed in dnsbl.ahbl.org]

[3.70.126.251 listed in dnsbl.ahbl.org]

[3.70.126.251 listed in dnsbl.ahbl.org]

[3.70.126.251 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[195.83.153.8 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[195.83.153.8 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[195.83.153.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[195.83.153.8 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[3.70.126.251 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 T_TVD_FUZZY_SECTOR BODY: No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Investitionsprojekt



Guten Morgen,



mein Name ist Shun Tung, und ich vertrete die Interessen der Familie

Wing Mau, die an verschiedenen Investitionsmöglichkeiten in Ihrem Land

interessiert ist. Besonders interessieren wir uns für die Sektoren

Immobilien, Tourismus, erneuerbare Energien und Fertigung.



Aufgrund politischer Herausforderungen in unserem Heimatland suchen

wir einen zuverlässigen und vertrauenswürdigen Partner im Ausland, der

diese Investitionen in unserem Auftrag verwaltet und absichert.



Ihre Rolle würde darin bestehen, die Investitionen zu überwachen und

sicherzustellen, dass sie erfolgreich sind. Im Gegenzug würden Sie

einen vereinbarten Prozentsatz der Managementgebühren erhalten,

während die Gewinne gleichmäßig zwischen beiden Parteien aufgeteilt

werden.



Falls dieses Angebot Ihr Interesse weckt, würde ich mich über ein

weiteres Gespräch freuen. Ich freue mich auf Ihre Antwort.



Mit freundlichen Grüßen,



Shun Tung



CAA phish Part 6

Posted by Dave Yadallee on


follow" href=3D"mailto:Campbell=EF=BF=BCdistribution.manager@fremantleheral=

d.com">
distribution.manager@fremantlehe=

rald.com
=0D=0A=0D=0A=0D=0A=0D=0A
table>=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
=3D"presentation" border=3D"0" class=3D"container" align=3D"center" cellpad=

ding=3D"0" cellspacing=3D"0" style=3D"margin-bottom: 0px; position: static;=

padding-top: 5px; padding-bottom: 5px;" eo-row=3D"one-column" bgcolor=3D""=

width=3D"100%">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

ntainer" style=3D"padding: 0 15px 15px;" eo-block-container=3D"">=0D=0A
>=0D=0A
=0D=0A=0D=0A=0D=0A
>=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
=3D"background: none;">=0D=0A
eo-footer=3D"" bgcolor=3D"">=0D=0A
=3D"0" cellpadding=3D"0" border=3D"0" align=3D"center" width=3D"100%" eo-ro=

w=3D"one-column">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=

=0A
=

=0D=0A
ellpadding=3D"0" border=3D"0" align=3D"center" width=3D"100%" eo-block=3D"s=

ocial-follow" bgcolor=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

" valign=3D"top" style=3D"padding-top: 5px; padding-bottom: 5px;">=0D=0A
ble class=3D"social-links-container" align=3D"center" border=3D"0" cellpadd=

ing=3D"0" cellspacing=3D"0" style=3D"border-collapse: collapse;" role=3D"pr=

esentation">=0D=0A

social-link-container" align=3D"center" valign=3D"middle" width=3D"48" styl=

e=3D"padding: 5px;">=0D=0A
TdZFhAuTC9o7JDu0Q~~/AAAHUQA~/RgRooWqEP0UgNWFlMTgyM2E4MTcyZWNkY2VhNTM0MzY3ND=

UyNzdhYWVEKGh0dHBzOi8vd3d3LmZhY2Vib29rLmNvbS9GcmVtYW50bGVIZXJhbGRXBXNwY2V1Q=

gpmvITlvmbG6W_ZUhZqb2Uud2FrZXJzZW5AeWFob28uY29tWAQAAI8N" target=3D"_blank">=

=0D=0A
-block/square-facebook.png" style=3D"display: block; border: 0; height: aut=

o; outline: none; text-decoration: none; -ms-interpolation-mode: bicubic;" =

height=3D"48" width=3D"48" alt=3D"facebook social link">=0D=0A=0D=0A
d>
=0D=0A
=0D=0A
=3D"0" border=3D"0" align=3D"center" width=3D"100%" eo-block=3D"text" style=

=3D"position: static;" bgcolor=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

=3D"container" style=3D"padding-top: 20px;padding-bottom: 10px;">=0D=0A
class=3D"text-block fr-inner" style=3D"font-size: 11px; text-align: center=

; color: #313638">=0D=0A
=0D=

=0A
container" align=3D"center" cellpadding=3D"0" cellspacing=3D"0" width=3D"10=

0%" style=3D"margin-bottom: 10px;margin-top: 0px;" eo-block=3D"image">=0D=

=0A=0D=0A=0D=0A=0D=0A=0D=0A

er-collapse: collapse; border-spacing: 0; margin: 0;padding: 0;" valign=3D"=

top">=0D=0A
mw~~/AAAHUQA~/RgRooWqEP0TSaHR0cHM6Ly9iYWxib2FpLmVvY2FtcGFpZ24xLmNvbS9yZXdhc=

mRzP2xjPTY1OWQxMzY4LTUzYmEtMTFlZi1iMDY3LWNkZjYzMjIzMjc3YiZwPTI0NzVhYjJlLTVi=

OTAtMTFlZi1hNGZiLWIxODg4ZDdiNzNiNiZwdD1jYW1wYWlnbiZ0PTE3MjM3ODY2Mjgmcz03ZDJ=

jZDM1NmM2ZTA3MWZkMzVhMDE2MWFjOWVmY2VhYzIwOGRkYmNmZTBhODZlMzBlYjNhOTVjMmIxOD=

NkMWZhVwVzcGNldUIKZryE5b5mxulv2VIWam9lLndha2Vyc2VuQHlhaG9vLmNvbVgEAACPDQ~~"=

style=3D"display: block;">=0D=0A
2-72c3-11ea-a3d0-06b4694bee2a%2F1586536266496-bottom-badge.png" alt=3D"Powe=

red by EmailOctopus" width=3D"150" style=3D"width: 150px;object-fit: cover;=

padding: 0;outline: none;border: none;display: block;">=0D=0A=0D=0A
>=0D=0A
=0D=0A=0D=0A=0D=0A
>=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
>=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
=3D"1" height=3D"1" alt=3D"" src=3D"https://sptr.eocampaign1.com/q/_RCMwXi8=

ZV9whFOI5NXUWw~~/AAAHUQA~/RgRooWqEPlcFc3BjZXVCCma8hOW-Zsbpb9lSFmpvZS53YWtlc=

nNlbkB5YWhvby5jb21YBAAAjw0~">=0D=0A=0D=0A

--h7hQwmWe--

CAA phish Part 5

Posted by Dave Yadallee on


er: none;=0D=0Adisplay: block;=0D=0A">=0D=0A=0D=0A=0D=0A
dy>=0D=0A
=3D"0" border=3D"0" align=3D"center" width=3D"100%" eo-block=3D"text" bgcol=

or=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

ng-top: 15px; padding-bottom: 15px;">=0D=0A

r">
Click the cover to read your latest ed=

ition!
=0D=0A

width=3D"100%" style=3D"=0D=0Atable-layout: fixed;=0D=0Awidth: 100%;=0D=0A"=

eo-block=3D"divider" role=3D"presentation" aria=3D"hidden">=0D=0A=

=0D=0A=0D=0A=0D=0A=0D=0A
y>=0D=0A

m:15px;">=0D=0A
n=3D"center" style=3D"border-top:1px solid #DCD6D1;border-collapse:collapse=

; width:100%">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
=0D=0A=0D=0A
d>=0D=0A
=0D=0A

llpadding=3D"0" cellspacing=3D"0" width=3D"100%" style=3D"margin-bottom: 5p=

x;margin-top: 5px;" eo-block=3D"image" role=3D"presentation" bgcolor=3D"">=

=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

order-collapse: collapse; border-spacing: 0px; margin: 0px; padding: 0px;" =

valign=3D"top">=0D=0A
1MRNe2cUAoEg~~/AAAHUQA~/RgRooWqEP0UgMTAzMzFkNmM4YThmZGJjZTc5NTRiYjE1MmRmMDA=

4ZDBEKWh0dHBzOi8vd3d3LmluZGlhbm9jZWFuZXhwZXJpZW5jZXMuY29tLmF1VwVzcGNldUIKZr=

yE5b5mxulv2VIWam9lLndha2Vyc2VuQHlhaG9vLmNvbVgEAACPDQ~~" >
//gallery.eocampaign1.com/a9b87556-3763-11ef-8fd1-fb3aafa3750b%2Fmedia-mana=

ger%2F1723786243372-Screenshot%202024-08-16%20at%201.29.48%20pm.png" width=

=3D"600" style=3D"=0D=0Awidth: 100%;=0D=0Amax-width: 100%;=0D=0Aobject-fit:=

cover;=0D=0Apadding: 0;=0D=0Aoutline: none;=0D=0Aborder: none;=0D=0Adispla=

y: block;=0D=0A">=0D=0A

le role=3D"presentation" cellspacing=3D"0" cellpadding=3D"0" border=3D"0" a=

lign=3D"center" width=3D"100%" eo-block=3D"text" bgcolor=3D"">=0D=0A=

=0D=0A=0D=0A
-bottom: 15px;">=0D=0A

-align: center">ADVERTISEMENT: Click to find out more abou=

t Indian Ocean Experiences.
Would you like this space to promote=

your business=3F 
Email matt.eeles@fremantleherald.com to=

find out how. 
=0D=0A=0D=0A=0D=0A=0D=0A<=

/table>
: 100%;=0D=0A" eo-block=3D"divider" role=3D"presentation" aria=3D"hidden">=

=0D=0A=0D=0A=0D=0A=0D=0A
>=0D=0A=0D=0A

padding-bottom:15px;">=0D=0A
ng=3D"0" align=3D"center" style=3D"border-top:1px solid #DCD6D1;border-coll=

apse:collapse; width:100%">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
=0D=0A
pan>=0D=0A
=0D=0A

s=3D"container" align=3D"center" cellpadding=3D"0" cellspacing=3D"0" width=

=3D"100%" style=3D"margin-bottom: 0px; margin-top: 0px; position: static;" =

eo-block=3D"image" bgcolor=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

enter" class=3D"hero" style=3D"border-collapse: collapse; border-spacing: 0=

px; margin: 0px; padding: 0px;" valign=3D"top">=0D=0A
r.eocampaign1.com/f/a/zz7niI_omIWpqdRllH-kpA~~/AAAHUQA~/RgRooWqEP0UgNDBjZDB=

iODMzZDFlZmNmMmU5M2U1ZjA3NjcyMTYxYWNERmh0dHBzOi8vaGVyYWxkb25saW5lam91cm5hbC=

5jb20vd3AtY29udGVudC91cGxvYWRzLzIwMjQvMDgvdm9pY2UtMS5wZGZXBXNwY2V1QgpmvITlv=

mbG6W_ZUhZqb2Uud2FrZXJzZW5AeWFob28uY29tWAQAAI8N" >
ry.eocampaign1.com/a9b87556-3763-11ef-8fd1-fb3aafa3750b%2Fmedia-manager%2F1=

723786143425-Screenshot%202024-08-16%20at%201.23.09%20pm.png" width=3D"600"=

alt=3D"" style=3D"=0D=0Awidth: 100%;=0D=0Amax-width: 100%;=0D=0Aobject-fit=

: cover;=0D=0Apadding: 0;=0D=0Aoutline: none;=0D=0Aborder: none;=0D=0Adispl=

ay: block;=0D=0A">=0D=0A

ble role=3D"presentation" cellspacing=3D"0" cellpadding=3D"0" border=3D"0" =

align=3D"center" width=3D"100%" eo-block=3D"text" bgcolor=3D"">=0D=0A
>=0D=0A=0D=0A
g-bottom: 15px;">=0D=0A

t-align: center">Click the cover to read your latest edition!
=

=0D=0A=0D=0A=0D=0A=0D=0A
=3D"container" align=3D"center" cellpadding=3D"0" cellspacing=3D"0" width=

=3D"100%" style=3D"margin-bottom: 5px;margin-top: 5px;" eo-block=3D"image" =

role=3D"presentation" bgcolor=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

=3D"center" class=3D"hero" style=3D"border-collapse: collapse; border-spaci=

ng: 0px; margin: 0px; padding: 0px;" valign=3D"top">=0D=0A
://gallery.eocampaign1.com/a9b87556-3763-11ef-8fd1-fb3aafa3750b%2Fmedia-man=

ager%2F1721969714543-Screenshot%202024-07-26%20at%2012.55.06%20pm.png" widt=

h=3D"600" style=3D"=0D=0Awidth: 100%;=0D=0Amax-width: 100%;=0D=0Aobject-fit=

: cover;=0D=0Apadding: 0;=0D=0Aoutline: none;=0D=0Aborder: none;=0D=0Adispl=

ay: block;=0D=0A">=0D=0A

role=3D"presentation" cellspacing=3D"0" cellpadding=3D"0" border=3D"0" alig=

n=3D"center" width=3D"100%" eo-block=3D"text" bgcolor=3D"">=0D=0A=0D=

=0A=0D=0A

ttom: 15px;">=0D=0A

ign: center">Your family-owned, ind=

ependent newspaper since 1989!

-align: center">
NEWSPAPER HOUSE=


37-45 Cliff Street,&nbs=

p;Fremantle WA 6160
Postal: PO Box 85 North Freman=

tle, WA 6159

ont-size: 14px">
Editor / Chief of Staff: Steve Grant&n=

bsp;
=3D"mailto:Grant=EF=BF=BCnews@fremantleherald.com">
: 14px">
news@fremantleherald.com
px"> or
oreferrer nofollow" href=3D"mailto:news@perthvoice.com">
-size: 14px">news@perthvoice.com=



Advertising Director: Matt Eeles

et=3D"_blank" rel=3D"noopener noreferrer nofollow" href=3D"mailto:matt.eele=

s@fremantleherald.com">matt.eeles@fremantle=

herald.com

GET PA=

ID TO GET FIT!
Become a
px">Herald and
style=3D"font-size: 14px">Perth Voice
14px"> distributor today! 
Distribution Manager: =

Stephanie Campbell

CAA phish Part 4

Posted by Dave Yadallee on


=0D=0A.x-gmail-data-detectors,=0D=0A.x-gmail-data-detectors ,=0D=0A.aBn {=

=0D=0Aborder-bottom: 0 !important;=0D=0Acursor: default !important;=0D=0A}=

=0D=0A/ Define font /=0D=0Abody,=0D=0Ahtml,=0D=0Atd {=0D=0Afont-family: A=

rial, "Helvetica Neue", Helvetica, sans-serif; / Font family /=0D=0Acolor=

: rgb(0, 0, 0); / Font color /=0D=0A}=0D=0Aa, .container a {=0D=0Acolor: =

#70C2C3; / Link color /=0D=0Atext-decoration: underline; / Link decorati=

on /=0D=0A}=0D=0A/ Froala specific styling to make the link take wrapper =

styling /=0D=0Aspan > a {=0D=0Acolor: inherit !important;=0D=0A}=0D=0A/ M=

edia queries o' doom. /=0D=0A@media screen and (max-width: 450px) {=0D=0A/=

 Transitions container to a fluid layout. /=0D=0A.container {=0D=0Awidth:=

100%;=0D=0Amargin: auto;=0D=0A}=0D=0A/ Collapses table cells into full-wi=

dth rows. /=0D=0A.stack {=0D=0Adisplay: block!important;=0D=0Awidth: 100%!=

important;=0D=0Amax-width: 100%!important;=0D=0A}=0D=0A/ Centers and expan=

ds CTA. */=0D=0A.eo-button{=0D=0Awidth: 100%!important;=0D=0Atext-align: ce=

nter;=0D=0Amargin: auto!important;=0D=0A}=0D=0A.eo-button td, .eo-button tr=

{=0D=0Adisplay: block!important;=0D=0A}=0D=0A}=0D=0A=0D=0A=

=0D=0A
Arial, "Helvetica Neue", Helvetica, sans-serif; font-size: 16px; =

background-color: #e8e9eb;" eo-background=3D"" class=3D"">=0D=0A

=3D"color:transparent;visibility:hidden;opacity:0;font-size:0px;border:0;ma=

x-height:1px;width:1px;margin:0px;padding:0px;border-width:0px!important;di=

splay:none!important;line-height:0px!important;">
"1" height=3D"1" src=3D"https://sptr.eocampaign1.com/q/1VLWBuyPj7xLPARbzvU8=

uw~~/AAAHUQA~/RgRooWqEPVcFc3BjZXVCCma8hOW-Zsbpb9lSFmpvZS53YWtlcnNlbkB5YWhvb=

y5jb21YBAAAjw0~" alt=3D""/>
=0D=0A=0D=0A=0D=0A

ax-height: 0px; overflow: hidden;">=0D=0ARead them right here!=0D=0A
=

=0D=0A=0D=0A

le=3D"display: none; max-height: 0px; overflow: hidden;"> =E2=80=8C&nb=

sp;=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C&nb=

sp;=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C&nb=

sp;=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C&nb=

sp;=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C&nb=

sp;=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C&nb=

sp; =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=

=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=

=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=

=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=

=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=

=8C =E2=80=8C 
=0D=0A
ocument" align=3D"center">=0D=0A=0D=0A=0D=0A
=

=0D=0A=0D=0A
lpadding=3D"0" border=3D"0" align=3D"center" width=3D"600" class=3D"contain=

er" eo-background-container=3D"" style=3D"margin: 0px auto;">=0D=0A=

=0D=0A=0D=0A=0D=0A=0D=

=0A=0D=0A
#ffffff;" eo-body=3D"">=0D=0A
=0D=0A
cellspacing=3D"0" cellpadding=3D"0" border=3D"0" align=3D"center" width=3D=

"100%">=0D=0A=0D=0A=0D=0A=0D=0A<=

td class=3D"container" style=3D"background-color: #ffffff;" eo-header=3D"" =

bgcolor=3D"#ffffff">=0D=0A
=0D=

=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
=0D=

=0A
=3D"0" align=3D"center" width=3D"100%" eo-row=3D"one-column" style=3D"posit=

ion: static;" bgcolor=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

g: 0 15px 0 15px;" eo-block-container=3D"">
lspacing=3D"0" cellpadding=3D"0" border=3D"0" align=3D"center" width=3D"100=

%" eo-block=3D"text" bgcolor=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=

=0A=0D=0A

"container" style=3D"padding-top: 15px; padding-bottom: 15px;">=0D=0A

lass=3D"text-block fr-inner" style=3D"line-height: 150%;">

t-align: center">READ YOUR LATEST EDITIONS HERE

style=3D"text-align: center">
r nofollow" href=3D"https://sptr.eocampaign1.com/f/a/hGPgsMzXdoX_-nv7QZ9qLg=

~~/AAAHUQA~/RgRooWqEP0UgODExNzMzMWQwMWNjOWVkNTQ0YmVjYWQwNGFiZmMzZmVESmh0dHB=

zOi8vaGVyYWxkb25saW5lam91cm5hbC5jb20vd3AtY29udGVudC91cGxvYWRzLzIwMjQvMDgvZn=

JlbWFudGxlLTEucGRmVwVzcGNldUIKZryE5b5mxulv2VIWam9lLndha2Vyc2VuQHlhaG9vLmNvb=

VgEAACPDQ~~" >Fremantle Herald

noreferrer nofollow" href=3D"https://sptr.eocampaign1.com/f/a/WRFBBG5842SCC=

WbXWVOWzg~~/AAAHUQA~/RgRooWqEP0UgY2YyNDIyODA2MTEwZmFiYmUwMWViNWYyNmI5NzU2Yz=

RESWh0dHBzOi8vaGVyYWxkb25saW5lam91cm5hbC5jb20vd3AtY29udGVudC91cGxvYWRzLzIwM=

jQvMDgvbWVsdmlsbGUtMS5wZGZXBXNwY2V1QgpmvITlvmbG6W_ZUhZqb2Uud2FrZXJzZW5AeWFo=

b28uY29tWAQAAI8N" >Melville Herald

ner noreferrer nofollow" href=3D"https://sptr.eocampaign1.com/f/a/l9jZCTDbc=

_yOuY4TdYGiTA~~/AAAHUQA~/RgRooWqEP0UgNzUwNTM4YWZmNTU1OTdlZWEzYWNmZmY5MDU0ZW=

Y5NTlESWh0dHBzOi8vaGVyYWxkb25saW5lam91cm5hbC5jb20vd3AtY29udGVudC91cGxvYWRzL=

zIwMjQvMDgvY29ja2J1cm4tMS5wZGZXBXNwY2V1QgpmvITlvmbG6W_ZUhZqb2Uud2FrZXJzZW5A=

eWFob28uY29tWAQAAI8N" >Cockburn Herald

oopener noreferrer nofollow" href=3D"https://sptr.eocampaign1.com/f/a/zz7ni=

I_omIWpqdRllH-kpA~~/AAAHUQA~/RgRooWqEP0UgNDBjZDBiODMzZDFlZmNmMmU5M2U1ZjA3Nj=

cyMTYxYWNERmh0dHBzOi8vaGVyYWxkb25saW5lam91cm5hbC5jb20vd3AtY29udGVudC91cGxvY=

WRzLzIwMjQvMDgvdm9pY2UtMS5wZGZXBXNwY2V1QgpmvITlvmbG6W_ZUhZqb2Uud2FrZXJzZW5A=

eWFob28uY29tWAQAAI8N" >Perth Voice
=0D=0A
=0D=0A
=

=0D=0A
=0D=0A

>=0D=0A
der=3D"0" align=3D"center" width=3D"100%" eo-row=3D"one-column" style=3D"po=

sition: static;" bgcolor=3D"">=0D=0A=0D=0A=0D=0A

ding: 0px;" eo-block-container=3D"">=0D=0A
er=3D"0" class=3D"container" align=3D"center" cellpadding=3D"0" cellspacing=

=3D"0" width=3D"100%" style=3D"margin-bottom: 0px; margin-top: 0px; positio=

n: static;" eo-block=3D"image" bgcolor=3D"">=0D=0A=0D=0A=0D=0A
d align=3D"center" class=3D"hero" style=3D"border-collapse: collapse; borde=

r-spacing: 0px; margin: 0px; padding: 0px;" valign=3D"top">=0D=0A
"https://sptr.eocampaign1.com/f/a/hGPgsMzXdoX_-nv7QZ9qLg~~/AAAHUQA~/RgRooWq=

EP0UgODExNzMzMWQwMWNjOWVkNTQ0YmVjYWQwNGFiZmMzZmVESmh0dHBzOi8vaGVyYWxkb25saW=

5lam91cm5hbC5jb20vd3AtY29udGVudC91cGxvYWRzLzIwMjQvMDgvZnJlbWFudGxlLTEucGRmV=

wVzcGNldUIKZryE5b5mxulv2VIWam9lLndha2Vyc2VuQHlhaG9vLmNvbVgEAACPDQ~~" >
src=3D"https://gallery.eocampaign1.com/a9b87556-3763-11ef-8fd1-fb3aafa3750b=

%2Fmedia-manager%2F1723786102340-Screenshot%202024-08-16%20at%201.22.57%20p=

m.png" width=3D"600" alt=3D"" style=3D"=0D=0Awidth: 100%;=0D=0Amax-width: 1=

00%;=0D=0Aobject-fit: cover;=0D=0Apadding: 0;=0D=0Aoutline: none;=0D=0Abord=

CAA phish Part 3

Posted by Dave Yadallee on


.img {

border-radius: 10px;

}

.content {

z-index: 1000;

}

@media (max-width: 500px) {

.gift-card-image img {

max-width: 200px;

}

body{

padding: 5px;

}

}

.p-footer{

padding-top: 15px;

color: #999999;

text-align: center;

font-size: 10px;

}

.a-footer{

margin: auto;

justify-content: center;

display: flex;

padding-top: 15px;

color: #999999;

text-align: center;

font-size: 10px;

}










































































































































































































































































































































































































































w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">=0D=0A=0D=0A
charset=3D"UTF-8">=0D=0A=0D=

=0A
=3D"1">=0D=0A=

=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=

=0D=0A=0D=0A=0D=0A