Gold for sale Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 20:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whHoM-00000000Lzm-3ENv

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 20:14:54 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 20:14:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [195.64.137.83] (port=48304 helo=inpn.org.ua)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whGW9-00000000HnT-2l6r

for bin@nl2k.ab.ca;

Tue, 07 Jul 2026 18:52:10 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=inpn.org.ua; s=mail;

t=1783470627; bh=/eOgGrTddnGaD9Q32v24MrfNLIfYCPvlSJOds9OPe5g=;

h=From:Subject:To:Reply-To;

b=ekoO0REufuFuTNcvqTweUZacnUqG3WW7R2HSMyZjmfo5EBkKY4VRESpeasAj02byw

6C9TPLqlXIfdPfrAM8j9Q4tOAP6TPksrqWUWJVNbJCRUvp9yk7REMuGkt+OZAUDXHX

qExAC4w5WknXtYXJUzyY25oyc4PT5OzksCxyQXVwFO/gcpG6Su0vGq9Oi4u1AM4T41

CFqMwndFh7SWA0lcDQ1HaXblH4be/SRYKHGOZo6C7cG0fgRxkEj2TjFGOngNJ5rove

rzussSy8M+OqumPKu74E013oownH+BSyH0vbTYvz5HnuUV4RXelPhRGzxI0VsCQNvy

Vc5e7aFiyDohA==

From: Mr Owusu Kwesi

Date: Tue, 07 Jul 2026 13:01:04 -0700

Subject: Re Offer of Gold Bars for Sale

Message-Id:

To: bin@nl2k.ab.ca

Sender: Mr Owusu Kwesi

Reply-To: Mr Owusu Kwesi

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, We are pleased to offer for sale high-quality

gold bars mined directly from our concessions. The details of our product

are as follows: Commodity: Gold Form: Alluvial Bar Purity: 22+ Carat (94%)

Quantity Available: 4,000 kilograms Price: USD 95,000 per kilogram Origin:

Ghana Deleterious Elements: 0% Cyanide



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[195.64.137.83 listed in dnsbl.ahbl.org]

[195.64.137.83 listed in dnsbl.ahbl.org]

[195.64.137.83 listed in dnsbl.ahbl.org]

[195.64.137.83 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[195.64.137.83 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[195.64.137.83 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[195.64.137.83 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[195.64.137.83 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[195.64.137.83 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[owusukwe65(at)gmail.com]

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[195.64.137.83 listed in bl.score.senderscore.com]

0.0 LOTS_OF_MONEY Huge... sums of money

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 MONEY_NOHTML Lots of money in plain text

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_NAME_MR_MRS No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Re Offer of Gold Bars for Sale



Dear Sir/Madam,



We are pleased to offer for sale high-quality gold bars mined directly from our concessions. The details of our product are as follows:



Commodity: Gold

Form: Alluvial Bar

Purity: 22+ Carat (94%)

Quantity Available: 4,000 kilograms

Price: USD 95,000 per kilogram

Origin: Ghana

Deleterious Elements: 0% Cyanide



A full corporate offer and detailed documentation can be provided upon request. We are committed to professional, secure, and transparent business transactions and would be glad to discuss further steps to facilitate this opportunity.



Please feel free to contact me via email at (kweo296@gmail.com)

or WhatsApp at (+233532452351) for additional information or to request our corporate offer.



Thank you for your time and consideration. We look forward to the possibility of working together.



Yours faithfully,



Owusu Kwesi

[Position, manager]

Tarkwa, Western Region, Ghana

Prject phish spam



--000000000000fb512e065609cee2

Content-Type: text/plain; charset="UTF-8"



Hello,





The premium domain

VoipEdmonton.com is currently available for purchase on GoDaddy Marketplace.





This domain is a strong match for businesses offering VOIP IN EDMONTON and

could help increase your online reach and brand visibility.





The domain is available for $499 at www.VoipEdmonton.com.





Please let me know if you are interested or would like to discuss further.





Best regards,





John.



--000000000000fb512e065609cee2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

The premium domain=C2=A0
v>
VoipEdmonton.com is currently available for purchase on=

GoDaddy Marketplace.


r>
This domain is a strong match for businesses offe=

ring VOIP IN EDMONTON and could help increase your online reach and brand v=

isibility.



v dir=3D"auto">The domain is available for $499 at
ipEdmonton.com">www.VoipEdmonton.com
.

=


Please let me know if you are=

interested or would like to discuss further.


div>

Best regards,

ir=3D"auto">

John.
div>




--000000000000fb512e065609cee2--

Domain for sale phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 16:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whEEd-00000000C8d-3sal

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 16:25:47 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 16:25:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f177.google.com ([209.85.210.177]:52377)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whApH-00000000NSh-35y3

for root@nk.ca;

Tue, 07 Jul 2026 12:47:31 -0600

Received: by mail-pf1-f177.google.com with SMTP id d2e1a72fcca58-845eb7b96feso4465044b3a.0

for ; Tue, 07 Jul 2026 11:46:33 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783449988; cv=none;

d=google.com; s=arc-20260327;

b=EBMCdsOcytIF8JlUeqTLE8b9fhOdp1bFcWBiq6jC/Wm4SNB6hGUrWQkOVXVn/nBPu3

Zyzyd4BqtZ8wW7NE8bvhL+/0XNqDmvJo0xdoFP8wgGELyREj/hWS0lHWfzwBLLSg+upZ

whhSQ/NkfjP/TdEcKdzl3b0cHCYA0z3vXiP8ghZOFaHnbzLn3wcYTh2SJNQ6U4h3YtVX

5a9Jp/+j+cqmCIx6CYiAiKA8329JVTEniPCat3egZxnIIH2Kmd1wS1RjQQm87l8e42D+

sPdrKF1Z3oUSw3CakjvKHAvBNyt50XIETG6hw9XefE4NuF4eRMaBXHcYp77iUAPeYV95

Q4Pg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=RPh/SbMYk//MyAmrNNKqei8SDL/mlc5J50xeev01zDk=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=af/abhB+7mRD90WI7QQxhvok0B/1ZYk5o2dpC+HW1d2KCFeDofH84WSHOCVig6ovkY

mXdOwwpIqWXlx9NdChOXE2al3x4qdht6vranxIBRgALJOhGK3u1Y6tykxEM9XLbIVRNH

EEhVNklGEx4RrLtyWnUJRFhTJZDf/lYfGFBNRKCP7hCyfDTH65lnQIojs6yEoTWRJPtY

vDslo2t9Gt0zybmJz3upAm0niX/a3iGegUsaIJCkb8p0sPw4ixNRTALCmL1uPLRbR9Cs

rGJyPL7/LrGfAKk5wEIwLP0QbRGSTJ56kuPE5lOCm3b4co3Zl3GfO8G3z794+25PCfFw

QCGg==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783449988; x=1784054788; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=RPh/SbMYk//MyAmrNNKqei8SDL/mlc5J50xeev01zDk=;

b=qSh0lYbNUZ3lBLkv2ecpx0J/O+TiUMl5xVmRamT09fPYWKQpwWUee/hBjWtVSsAjrO

WhoNNFQ9iQCpp+wEmOa7/K7BCAdmL9HSc0acND/o6V0Oyvs2mMK19272saCoc8SueXuz

yfgyleAsp4CoGnWfiyvHlHmCoPmRZlxffQYKrEOx8FOIpEELmSr2Z6KqDjevdD+iTBjd

Oor1dim/6i4QeiHnQfdND6ERo83jw+ohjKa3DKoGvNC8giLDFv8+dGdYfV5kRFmDOXdw

cN2eC7uJdHkXeDarP9MIp8SJV8uUXr5T0cCWH3yWhkfWhilmCtNAGvRtEldM6Ks4C/zy

qEfg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783449988; x=1784054788;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=RPh/SbMYk//MyAmrNNKqei8SDL/mlc5J50xeev01zDk=;

b=pq9FhCDu1y208DFd/pS02CSkrwc95SV1uHh73FTF2Ety3ppoLle0r0fjrzb1LLXPoD

bp7L7Clu6M/8Uw921ZuzjMMq8UrpzyK6k16zFxPT08dUgye6hx2a0Y04YIES6wOKalki

rRvyODvKUQvi3KWgGofPFi8a/VyfMqjROMc9Ondjb2coviis4qmkddkofkE/mxa58OdV

iDjMyAhaucJe4kB8Wt4kas7KEEwngz5pxWRsaWvshUQcW1erKPhWx+PoWkqbsFGdrzcL

gj4nUj9gh66FZpWw4UQyjsnsGybhZQzqmaz6FaP/ecaTZXSeLyYVc8R3DzvZgi7EVtqi

nSHA==

X-Gm-Message-State: AOJu0Ywn+am0RgIsC6k0/oN/TDw/Gu9cyF3SbhoXIH4qV2XDv+cQGqvg

e4rhrtvrirKt0LM4Baw99U3ygwNzLh9aOT03hmFXEyAltw5ykdOMnglZwFoMJ8/rxnl84gU4ovL

69cPwdg7YA8Zd/En2fk0zz+yws4mbcpChkX0q

X-Gm-Gg: AfdE7cnJg46dqo9O8P2NJSu0outDo1ohDNXEU25bJJiwm9/px/va3ToctZmJBzULowt

Pj1YqR2yshEYKkrua2bx+6/OBLDmgF0DD1QEKX0y33e9ON5sCklk6lslHEd111Ioarjh4xH7Bj1

RgUYbEHHDo4p0N5dly+kdUG7C3/ttpGITP6UCjBaPnioB9/5qEuoEGp71PGRLR7CDoMX9z5hETu

Bhvmj1wqoM+GDDNqYvnjbi0O5Hfua5+YytD479WOH1pnDu5O282ZpM0Y6B4u0aoJMnHSB6d

X-Received: by 2002:a05:6a00:4fd4:b0:848:2f7a:2e53 with SMTP id

d2e1a72fcca58-8482f7a364amr3918205b3a.66.1783449987533; Tue, 07 Jul 2026

11:46:27 -0700 (PDT)

MIME-Version: 1.0

From: Peter John

Date: Tue, 7 Jul 2026 19:46:16 +0100

X-Gm-Features: AVVi8CfCp4B_z6EQcX3h_fUujEqIyD10oMaP6Ku4GQSn92IOVwK-cN9FRIDkKSY

Message-ID:

Subject: EDMONTON VOIP

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000fb512e065609cee2"

Domain for sale phish from Google GMail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 16:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whEEa-00000000C8Q-2Hfk

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 16:25:44 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 16:25:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f174.google.com ([209.85.214.174]:58561)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whAow-00000000NRv-3A8Q

for sales@nk.ca;

Tue, 07 Jul 2026 12:47:11 -0600

Received: by mail-pl1-f174.google.com with SMTP id d9443c01a7336-2c7c61b5292so65578585ad.0

for ; Tue, 07 Jul 2026 11:46:15 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783449970; cv=none;

d=google.com; s=arc-20260327;

b=TFcE1YXSSMneQiHYfanxRrz5X3pl614l+fLMp+nDGR3KcdIji3KCOXmDa3OivHwJqk

8bjvTzhurA5uzHQHfw0/Mly/XJB2StTat7nVTxoiRrcoX8AD8QydQTcpxmuTdQ6X1KB5

wHpvInM9UZT3QK3/cOjR4pyIJL9meO18iDG828WveyKwR6uB33sSY7eLe41OJlShis2P

PfgCr/Csxk+wbfCCChMi7iwLc4ncaaMLxIzbN0HuCLp2sMe5WUE4wrl14asYyY9dkE8X

+W/EHARDk41OL6ZZ5srxkwJycbkZteqDTsPB3WcGKHK4UiBAppYS6blWP8C4Ckpjm8hg

VObg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=8hgiwdtbtnMRzxsiQZL0+D8wDzHjaTBX3ZOOzoGdLGc=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=TTrlZ+sbSC1aYgZkT32D23Kh4eIoMn1R7HCKDNAGhAxUjb1lhZakmkBxlc1FKm/xok

mq/V9TzDKwv4IDNZIALto2EWa3grqZ3LM8wygrC6AebbJwZwrYC9nMvTC92dnyOgLeOF

WZDEtxAsMn56Y698W5G8lWViuaR7obwfYuMOImwsTm/QZGg+dg3bKC1qTs4yFF3HQ4zr

FJus+hiUxR6CnVjXF2MllRgDF55wbLlXTm/6dTSTl7Udn30scNHhWPIhbWlGX6hIiK4y

0pqoNN0E+q+xGxhdOmCEPpFQbrV2a16xE+AwIXp8iKuiYiAIq3KH5u77J7TbmtQDqVU9

G3Lg==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783449970; x=1784054770; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=8hgiwdtbtnMRzxsiQZL0+D8wDzHjaTBX3ZOOzoGdLGc=;

b=cmfSpfhxoc5F3q49iLIiyA4nX77HuGZWcdKG+SPqTOBo5QovCtQ5rKIj4VdkIjacTQ

Rpqsz6nbvHAhSHv9grJSMhNvhPRT4aof0YE+uYbBADrYmPHwi8kA1TRhCh+bU0qda7vh

xO5ACcAVlEIB3SRGTLD3Pi/NCrpvodt6/TKqrhrRDaWEBCcFcYzEDcMhZt1Z0HrftSEf

SM1GicjhGDC5uVrI7ZyfiT7oUCe+2EvHLMjZ6g+lA7Z67UYW/peayeKUsTX54DZHC3eG

VlFq77Wlgusa98FD4fs3ZRrYOFBMlYeizPMzArt7NlQ+CGkGIacEvaZwbUkmXOG26J3x

7KEA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783449970; x=1784054770;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=8hgiwdtbtnMRzxsiQZL0+D8wDzHjaTBX3ZOOzoGdLGc=;

b=qBdTBfFgmi1lTRiE0i9PGNbX7k+IRj1Xv5TyMoq++GNscDu1nPGtZqtUULcBPctcTM

E0QHsUNbocOgVfawqotmpBDXAv1TCc6yPG/F+m8cr+XTHYGcHPmRmPNh+Q+fe62JzzI/

cWk10rs2XcFf6lH6IkhoXZ2JZRV388vs1HnHxqOMYBk4Zn+mTDERviiavQmBYuxwWMXd

nfETHUylJ8/ZvJ2Q2k53qtSUQBzmkDm5Nwn8Yidkx0SB6Q048b/Y1dT3p0MT3kECrW4V

mBZora5RyBqkqEdwW3pr6qFGgK64e3e967BnKpbxOJ0O09grzaDFNqe67+L7bFFugZD8

YV3Q==

X-Gm-Message-State: AOJu0Yzdi6ZaLsBZpdp98HtGvc77Bohjegz57y2JSXFMQ9WBrO6cuHN5

QwaprWy300YcZfLABb1FfPnAxjeHUYKh634b3otKjNJO6CUsGicoXMEupmEBpljPT49UojRfYka

q56nnesEy21KFCGq3sxo3XvW6YolIen03no2m

X-Gm-Gg: AfdE7clXkMJbfp+UVGuUmLTzfZJpWpNgI+mxG015m5aQvAaIUvzVmSUOFTocciJASH4

ij7hiXXG6QuCx3trq+PaHy/ZLvYu8GdpvLbtJolfYrNmfmb6L+kPBf6jygfRbx6haaquhrzvOZJ

MsFiIaBQOWi+AauIP1PWrgW4SeFbbzt6As+G/iYdX2sNg4+5ehjdK5ji7L3IL1xTbQujhhgTHyj

ZlMR6QtaG13H0m4Fe76whldRyUkBg+JKr0CChXZ9EBhgPK8fmrB8crEkdIO/dOIZJc7R1uh

X-Received: by 2002:a17:903:41cd:b0:2c9:d55d:2d1 with SMTP id

d9443c01a7336-2ccbf07a42fmr65348945ad.33.1783449969527; Tue, 07 Jul 2026

11:46:09 -0700 (PDT)

MIME-Version: 1.0

From: Peter John

Date: Tue, 7 Jul 2026 19:45:57 +0100

X-Gm-Features: AVVi8CfGGfPH3nEAcjaKg2dUIj60GUZ2aroDjKBg9MOglyXfhdAnnIdu7NeJkmE

Message-ID:

Subject: EDMONTON VOIP

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000e88f2e065609cd31"



--000000000000e88f2e065609cd31

Content-Type: text/plain; charset="UTF-8"



Hello,





The premium domain

VoipEdmonton.com is currently available for purchase on GoDaddy Marketplace.





This domain is a strong match for businesses offering VOIP IN EDMONTON and

could help increase your online reach and brand visibility.





The domain is available for $499 at www.VoipEdmonton.com.





Please let me know if you are interested or would like to discuss further.





Best regards,





John.



--000000000000e88f2e065609cd31

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

The premium domain=C2=A0
v>
VoipEdmonton.com is currently available for purchase on=

GoDaddy Marketplace.


r>
This domain is a strong match for businesses offe=

ring VOIP IN EDMONTON and could help increase your online reach and brand v=

isibility.



v dir=3D"auto">The domain is available for $499 at
ipEdmonton.com">www.VoipEdmonton.com
.

=


Please let me know if you are=

interested or would like to discuss further.


div>

Best regards,

ir=3D"auto">

John.
div>




--000000000000e88f2e065609cd31--

Spotifiy Phish Part 3









iinet











Thank you for being with Spotify



Hello,





We are sending you this email to inform you that we've been advised by your financial institution that your recent auto card direct debit has not been processed.







Notice

We will make additional attempts to process your renewal, but your service may be interrupted.




To avoid a delay in your service. please visit the link below:





Â

My Account

.









We hope to see you again soon.















Account



#100248







Plan



Premium







Renewal



07/07/26































--1e17f10edf1d0c2a022f2f6eef82302de--

Spotifiy Phish Part 2

Thank you for being with Spotify



Hello,



We are sending you this email to inform you that we've been advised by your financial institution that your recent auto card direct debit has not been processed.





NoticeWe will make additional attempts to process your renewal, but your service may be interrupted.



To avoid a delay in your service. please visit the link below:



Â

My Account

.







We hope to see you again soon.













Account

#100248







Plan

Premium







Renewal

07/07/26















Spotify® Support Team















--1e17f10edf1d0c2a022f2f6eef82302de

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit









MusicFlow







Spotifiy Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 12:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whApT-00000000NVK-1I7Q

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 12:47:35 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 12:47:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps.metric-hosting.ca ([108.62.187.1]:45545)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whAnz-00000000NPF-1a0D

for root@nl2k.ab.ca;

Tue, 07 Jul 2026 12:46:11 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=conservatorypipeband.org; s=default; h=Content-Transfer-Encoding:

Content-Type:MIME-Version:Message-ID:Subject:From:To:Date:Sender:Reply-To:Cc:

Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:

Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=oz3D3ltB6EVRidCSDtQBtv4iA/eKHS19jv0iG11o3Yg=; b=f8wQD/aE2IHBImvOxv+tIXNZck

0XVtqXc84Uv8NNkSe6P6M0ydKC8s6z5I0l2plWbeS6OPIhR0AxmWc4w0uqVRMROr3rQg2/R8cp/em

uSt5TbYG22PukuuATQz+wjxKweXu2E75+hcKgsHKxI76712JDwZ4EDuKkP+TybZdH4V4=;

Received: from conserva by vps.metric-hosting.ca with local (Exim 4.99.4)

(envelope-from )

id 1whAn5-00000006XrP-1uLG

for root@nl2k.ab.ca;

Tue, 07 Jul 2026 18:45:08 +0000

Date: Tue, 7 Jul 2026 18:33:34 +0000

To: root@nl2k.ab.ca

From: Spotify

Subject: Account notice

Message-ID: <057c45bff6305a218946934f0c41d23f@conservatorypipeband.org>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1e17f10edf1d0c2a022f2f6eef82302de"

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - vps.metric-hosting.ca

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [1008 978] / [47 12]

X-AntiAbuse: Sender Address Domain - vps.metric-hosting.ca

X-Get-Message-Sender-Via: vps.metric-hosting.ca: authenticated_id: conserva/from_h

X-Authenticated-Sender: vps.metric-hosting.ca: Mail@conservatorypipeband.org

X-Source:

X-Source-Args: php-fpm: pool conservatorypipeband_org

X-Source-Dir: conservatorypipeband.org:/public_html



This is a multi-part message in MIME format.



--1e17f10edf1d0c2a022f2f6eef82302de

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit









MusicFlow





*{

margin:0;

padding:0;

box-sizing:border-box;

font-family:Arial,sans-serif;

}



body{

background:#eef2f5;

padding:40px;

}



.container{

max-width:850px;

margin:auto;

background:#fff;

border-radius:20px;

overflow:hidden;

box-shadow:0 10px 30px rgba(0,0,0,.1);

}



.header{

background:#14a44d;

padding:35px;

color:#fff;

font-size:38px;

font-weight:bold;

}



.content{

display:flex;

gap:30px;

padding:40px;

}



.left{

flex:2;

}



.right{

flex:1;

}



h1{

font-size:34px;

margin-bottom:25px;

color:#111;

}



p{

font-size:17px;

line-height:1.7;

margin-bottom:20px;

color:#555;

}



.card{

background:#fff;

border-radius:15px;

padding:20px;

margin-bottom:20px;

box-shadow:0 5px 15px rgba(0,0,0,.08);

}



.warning{

background:#fff8e6;

border-left:6px solid #ffc107;

}



.info{

background:#f4fff5;

}



.btn{

display:inline-block;

padding:15px 35px;

background:#14a44d;

color:#fff;

text-decoration:none;

border-radius:10px;

font-weight:bold;

margin-top:15px;

}







.box{

background:#fff;

padding:20px;

border-radius:15px;

margin-bottom:20px;

box-shadow:0 5px 15px rgba(0,0,0,.08);

}



.box h3{

margin-bottom:10px;

color:#14a44d;

}



.footer{

padding:30px;

background:#f7fff8;

font-size:16px;

}



@media(max-width:768px){



.content{

display:block;

}



.right{

margin-top:30px;

}



}

WEb/SEo/App spam from Google gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 12:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whApP-00000000NV9-2FKL

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 12:47:31 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 12:47:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f199.google.com ([209.85.128.199]:59588)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whAbz-00000000MrU-3VcD

for sales@nk.ca;

Tue, 07 Jul 2026 12:33:49 -0600

Received: by mail-yw1-f199.google.com with SMTP id 00721157ae682-80533a7a4ebso62545607b3.2

for ; Tue, 07 Jul 2026 11:32:52 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783449166; x=1784053966; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=i+lYPMfVX/WF3+EfOTeH+wESomVZTkFFNmb9FZ3W9LY=;

b=Ns9pSuyiEejthwp/aGm5aWy5ccXBTRR2123VyW+nFzQG0+TdQGDss/pLQf8LuQ8Lm/

BexV8pBJ1HX93sElyGUUc/Bx/KQmMjffBhiEz2lTmrYntdc0bLcCU4fmEIXBY/8QoEhq

6smcdCBLqwM+bagKe8bu44c5OFbKNN6SXjlX9h5opKFQ21l0elhBuMOBbQtJWhnzgrWa

9XN+vU/Kk/z5/5fp6WkCr42gHpqsqxheKKxIsHXKQJWPk7dIQ2f/pqpOd8HNFGbn3uv7

/s7ErTCPDz3MwJHnAc1ihcBvm0sB+cLKAWL4vJpslFGkiglCmNEwpdt7gZzKY1WkQldt

Y1wg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783449166; x=1784053966;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=i+lYPMfVX/WF3+EfOTeH+wESomVZTkFFNmb9FZ3W9LY=;

b=spOvpbxOhp+milNqKqg/i/7CnBlyqhWRumc8T8C3qFFPlmaSAs+hRKh5DGep8ZhUbr

+jtMXxntAVfGnFCVbnDw2EKzkpqLM2yTTci7V2sWnCAdF3SMaUyJtguyJM7vc+itXAYo

kKk6LhNKHEDq8xX5NSFNbZB9Fm7+VzibOhek6f+t01wrTs4yBC/RLvJsHL2BQ1rWs7mq

AUeDDGHEouQVXFmg8UgKOCg7iaA/7yzI+oHavE6u8bVo3C/uPDVLsKSJ3qq79KeNcfev

NCC6rc48zJM/lxEGh9xqiIU4YTJ0yVG3FWNP57NwoIyaUIPOQhQO+ZEQdZuLBZud8XE3

FzgA==

X-Gm-Message-State: AOJu0Yylx97Yd3GrpaQqNe4CbE8WcUHHvivIOGQx4DXJe+unIB21PsDs

G1irk54jnDldP9Bku2jv7Q7tWaHRa8lEBAi3cKGOrcx2Fagoxzi9kG0WCioy+b0sctZnwc+P10a

FFrZg

MIME-Version: 1.0

X-Received: by 2002:a05:690c:4442:b0:812:9417:2c6f with SMTP id

00721157ae682-81be1b4697amr48520107b3.21.1783449166360; Tue, 07 Jul 2026

11:32:46 -0700 (PDT)

Message-ID:

Date: Tue, 07 Jul 2026 18:32:46 +0000

Subject: Ideas to Improve Your Google Rankings

From: autummsra@gmail.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000000934b50656099eeb"



--0000000000000934b50656099eeb

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hello sales@nk.ca,



While reviewing your website, I noticed a few SEO opportunities that could

help you rank higher on Google.



I've summarized my findings along with a pricing proposal.



Would you like me to email the details?



Best regards,



Autumm Sra



--0000000000000934b50656099eeb

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello sales@nk.ca,

While reviewing your website, I noticed a few SEO=

opportunities that could help you rank higher on Google.

I've summa=

rized my findings along with a pricing proposal.

Would you like me t=

o email the details?

Best regards,

Autumm Sra

--0000000000000934b50656099eeb--

Docusign phish from Google Gmail Part 2



-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.104 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.104 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.104 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?B?S2luZGx5IFZpZXcgYW5kIFJldmVydA==?=








initial-scale=3D1.0">











Document Review Request





=20



Hello,



Please review and sign the pending=

document. All other parties have completed their signature requirements.=



=20



=20

By clicking the link above, you can complete the electronic =

signature process securely.



Note: This =

link will expire on Wed Jul 08 2026.









Security =

Notice:
Do not share this email or the secure link with others. If=

you have questions regarding the content of the document, please contact =

the sender directly.



=C2=A9 2024 Your Company Name | =

Powered by SecureSign











Docusign phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 12:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whAp5-00000000NUf-3sCJ

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 12:47:11 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 12:47:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f104.google.com ([209.85.219.104]:53691)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wh9r8-0000000074X-20Ii

for doctor@nk.ca;

Tue, 07 Jul 2026 11:45:23 -0600

Received: by mail-qv1-f104.google.com with SMTP id 6a1803df08f44-8efcfdb2b43so33990546d6.3

for ; Tue, 07 Jul 2026 10:44:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=modalmu-com.20251104.gappssmtp.com; s=20251104; t=1783446260; x=1784051060; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=UXAK9GsuNSyQ6BTzPNMZDlXucISQuHnWxZJRDwVUxss=;

b=ira4tNPNVrZfeGQ+c9BFdCk95KPAL9S4rK1k5qfVc/AgjFmTvk6REmEpTxvc70ddnQ

U/NGv/Ns0KA0Vi35Gx6F5XtrP5XLwXBa2HCFplQ8x8mRjFWL95j9PAU2OvOsWpK4gATO

AqddDy/tWRYzzpAXxfkB6PJ7Md+A6Fwc2IX6ln6RRXaWZ/Ovie4oStY7Z0Ud7Ufk1R5F

xooIT97ZLnUTldOQo2VqmXHG6WhV3l2lBAn+PKXVP/5KEsYyfMhufEbJdBSAjSnnhU41

SHFQs02gj6W/ALwYbXsaEPvYtZpZGcmROAnChrnCAwOe288F6aLiSCUiZU+z3KwxXFCN

UBYg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783446260; x=1784051060;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=UXAK9GsuNSyQ6BTzPNMZDlXucISQuHnWxZJRDwVUxss=;

b=sUHe33gfE7ipsggs8LVKxhbc1rG5KOMfiVdqyCdLC9qf1b5nmQJxj458Cgw4M6c7oP

tqz7tVEivC4/6EIm+36YSXBRLh54H8bruovbJKUmBJ7OMrfTtpUFru60ioskbDoKHFB4

jQUBs+RR+Mu1u6QTdRhF1XXG2xCGDovSTbjhABSTgRzvz80rn31gBVt+oFKd+Guyp0wD

/RTDDrKp4SD6PmUz6cshjJkHxZuYu631vXJ7lbkaSa7DQ7KCInHJxOZq//xe4gO+VzvJ

0W/svg8fyw3PTEUPtF5Xq7vsgAPa+cljciAHZk2wk8kNr/5D9E5RpDNboU24novzXmMg

UHQQ==

X-Gm-Message-State: AOJu0YwsQLVGmrlituIdsyRYl4CYQWKch/ArtVxC2Ez+emD6LWzxWzFA

LjavQGZn8+pVT9Md9Ng00dvX0+1oaSRcz5844BR16FZLj8K6hiwEKg8Velu89/+ti3OJBx0WFGc

MeUzMW5Z/9NZU7Ba82oGytIQEckgQoM8vpP2+vfsSdZAk8ys=

X-Gm-Gg: AfdE7cnVM7DNS1gdykuoxZtv+D6V/kCw24yopYUsZfALcl9lVJ/HiZD5KHZitiESe92

c2bg5IHqMz5pkgTRugNq2TgtvVVcYNZ1ZH6uDtTIyrQ1EO8ayYKQI+pvPgwLtu1TWIf7hm1qvZ9

8LQffmA0cLiSGzJCdroN1+s/tgqjLbxXqKHL7T9JRQFyAeJmEoi7DgNxJY1/3xK9RKbexPJ29Mr

MCuqcQA/1xOW5l9TjHAMt5c1OA+E0grWkF3COtC7dH68AcUDLPyFFKTYZ4vCuAIkpQu49UrbL4I

vkyc0PeUWBaQ+kRllvdrto7NhY1iAUNUjI/3fYL+Fu87x0yvTE+1d8+1uoBGOiOScJ05KJLhNlR

/0/71cgtedGxDUtttwO1KEtnMeDhS789tbw==

X-Received: by 2002:a05:6214:e46:b0:8ef:1dc9:27e8 with SMTP id 6a1803df08f44-8fcb5bba3e9mr72641466d6.49.1783446260217;

Tue, 07 Jul 2026 10:44:20 -0700 (PDT)

Received: from brainworks.id ([23.171.177.175])

by smtp-relay.gmail.com with ESMTPS id 6a1803df08f44-8f62b0e9e7csm11119356d6.20.2026.07.07.10.44.20

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 07 Jul 2026 10:44:20 -0700 (PDT)

X-Relaying-Domain: brainworks.id

From: Brad Purvis

To: doctor@nk.ca

Subject: =?UTF-8?B?S2luZGx5IFZpZXcgYW5kIFJldmVydA==?=

Message-ID: <4f03697c-3db6-8471-a8d5-ee77054132d1@brainworks.id>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 07 Jul 2026 17:44:15 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Document Review Request Hello,



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.104 listed in dnsbl.ahbl.org]

[209.85.219.104 listed in dnsbl.ahbl.org]

[209.85.219.104 listed in dnsbl.ahbl.org]

[209.85.219.104 listed in dnsbl.ahbl.org]

[23.171.177.175 listed in dnsbl.ahbl.org]

[23.171.177.175 listed in dnsbl.ahbl.org]

[23.171.177.175 listed in dnsbl.ahbl.org]

[23.171.177.175 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.104 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.171.177.175 listed in will-spam-for-food.eu.org]

[23.171.177.175 listed in will-spam-for-food.eu.org]

[23.171.177.175 listed in will-spam-for-food.eu.org]

[23.171.177.175 listed in will-spam-for-food.eu.org]

[23.171.177.175 listed in will-spam-for-food.eu.org]

[23.171.177.175 listed in will-spam-for-food.eu.org]

[23.171.177.175 listed in will-spam-for-food.eu.org]

[23.171.177.175 listed in will-spam-for-food.eu.org]

[209.85.219.104 listed in will-spam-for-food.eu.org]

[209.85.219.104 listed in will-spam-for-food.eu.org]

[209.85.219.104 listed in will-spam-for-food.eu.org]

[209.85.219.104 listed in will-spam-for-food.eu.org]

[209.85.219.104 listed in will-spam-for-food.eu.org]

[209.85.219.104 listed in will-spam-for-food.eu.org]

[209.85.219.104 listed in will-spam-for-food.eu.org]

[209.85.219.104 listed in will-spam-for-food.eu.org]

Web/SEO/App spam from Microsoft Outlook part 2

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@searchsmiths.com header.s=google header.b=m5qnUeeB;

arc=pass (i=1);

spf=pass (google.com: domain of michael@searchsmiths.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=michael@searchsmiths.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=searchsmiths.com;

dara=neutral header.i=@rankaily.com

Received: from mail-sor-f65.google.com (mail-sor-f65.google.com. [209.85.220.65])

by mx.google.com with SMTPS id 586e51a60fabf-44cfeb3e408sor4688278fac.6.2026.07.07.09.17.11

for

(Google Transport Security);

Tue, 07 Jul 2026 09:17:11 -0700 (PDT)

Received-SPF: pass (google.com: domain of michael@searchsmiths.com designates 209.85.220.65 as permitted sender) client-ip=209.85.220.65;

ARC-Seal: i=1; a=rsa-sha256; t=1783441031; cv=none;

d=google.com; s=arc-20260327;

b=gClJ+Rboi8HW0w9Dz3uCGYZiZpSIIZZQ6C+TwyLNWo8N9HbeoVpV7NIN3/ppoEUh71

uXXCdHNsysPzSJXOSc/YHKNOvBt2Qvc0jRYnFIQJxsN/ruVwPh0ZOMYlwfPk9y4a8UkA

cXPQpYfbYl4bTmAefvN8XW8yK4NFN68CSzqDAfWHGcQV59vJ4ynBcR8/HL7ZYv/cFTLX

3pLz86K0Rid2g9Ty9zbpTIkrKUV34OKX5vIoJI3WlUN1ok47o6Qq+uJ7UdbVR2+UGoWN

1SPWuWQ3n3VHOSXK8iLncQ+yQ2FKPQERdKRdj4d7dH586Ezb+nPMvv2J0kNVM4bDXLSN

//8A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=xQhAsDTbaRp3338z7p2PK9F4K0XmhgWmR7NlmTXITew=;

fh=DQJUBg4Y7D/usf9rmFKsccHBC+CLNwbKu2BUIVSZjas=;

b=bg6mqZESTznOxGXGTUXCPas+7ZbQ6kcCtkXZFuFq76QNY7lpjYQthB883ZP61N8C5v

VklG/Im4ec6QWlbsYpH9vHfnMR3SoiIlmUuml5oAFV6WXH7L5lS2JUkknzq1NBL393X7

LfhVdJ8zxKOddf0wawmGl8zvk9luF2egKCzMrzPMitSw9l3pPjkLG+iYX739/JM9qMUM

JPL3sdX5FVdoUZC2bzWeaXvvrqdXfN1cBQ+JolnjnMc9LicQG11LOgUMjShM59CLIM0q

nDBKrRNa/n3T7atJVFg1/HLOwwKmIjdbf31TSaH6agzEbyI3wcZyc4Y54tLGxOvPU56F

8yow==;

darn=rankaily.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AfdE7cnv0F8FrnoD6OCz6CMfznHOq83g0YI0V7e03Hy0RY4mLw7VsdpmwKOhT5LTGo5

9WbmLeVEFM/Fmf03933L4xSH6qJgzvI4SOMBq0l9JGWcpOonOfbTAGw2B5hkjL6HT7AOeDsk441

4EggXnxn7Vz1q5cRbC65wlGY0QxkyTOyqzQ5fmFpXYq3g3TUmXjcvmgxtMgyYbyy4d6748hWQ6n

Vip3x5mnPu/9TJB7piEuv1fDIYeZ/wPYnxyK2Vt69opEkDfGxCQszOxdFp2Ok+/EOg3+4Daykgu

uAwuHXEk8go1mrIY/kMC/fVeOg5Jku3LZx9T0W9jT/iYOOxrROSCPBTBb0DVWA0=

X-Received: by 2002:a05:6870:b0ef:b0:448:71f4:a28 with SMTP id

586e51a60fabf-45105ba01bdmr3326264fac.2.1783441030954; Tue, 07 Jul 2026

09:17:10 -0700 (PDT)

MIME-Version: 1.0

From: "'Michael Brown' via Analytics_point"

Date: Tue, 7 Jul 2026 21:49:03 +0530

X-Gm-Features: AVVi8CeHDCOsH7imhBxuiLHFHBB7vgFeIMBmNGQjqegcQql8HcPw0NmFy4et0Nc

Message-ID:

Subject: Quick Win

To: Analytics_point@rankaily.com

Content-Type: multipart/alternative; boundary="00000000000020d033065607b997"

X-Original-Sender: michael@searchsmiths.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@searchsmiths.com header.s=google header.b=m5qnUeeB; arc=pass

(i=1); spf=pass (google.com: domain of michael@searchsmiths.com

designates 209.85.220.65 as permitted sender) smtp.mailfrom=michael@searchsmiths.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=searchsmiths.com;

dara=neutral header.i=@rankaily.com

X-Original-From: Michael Brown

Reply-To: Michael Brown

Precedence: list

Mailing-list: list Analytics_point@rankaily.com; contact Analytics_point+owners@rankaily.com

List-ID:

X-Spam-Checked-In-Group: Analytics_point@rankaily.com

X-Google-Group-Id: 1061744572349

List-Post: ,



List-Help: ,



List-Archive:

List-Unsubscribe: ,





--00000000000020d033065607b997

Content-Type: text/plain; charset="UTF-8"



Hi,

We help businesses generate more qualified traffic, increase inquiries, and

grow revenue through digital marketing.

Reply "OK, Sure" and I'll send over a few suggestions.

Thanks,



To unsubscribe from this group and stop receiving emails from it, send an email to Analytics_point+unsubscribe@rankaily.com.



--00000000000020d033065607b997

Content-Type: text/html; charset="UTF-8"



Hi,
We help businesses generate more qualified traffic, increase inquiries, and grow revenue through digital marketing.
Reply "OK, Sure" and I'll send over a few suggestions.
Thanks,








To unsubscribe from this group and stop receiving emails from it, send an email to Analytics_point+unsubscribe@rankaily.com.




--00000000000020d033065607b997--

Web/SEO/App spam from Microsoft Outlook part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 12:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whAod-00000000NTK-2cdD

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 12:46:43 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 12:46:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f69.google.com ([209.85.210.69]:47592)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wh8VP-00000000OnB-23cO

for root@nk.ca;

Tue, 07 Jul 2026 10:18:53 -0600

Received: by mail-ot1-f69.google.com with SMTP id 46e09a7af769-7eb60cfd476sf2775675a34.3

for ; Tue, 07 Jul 2026 09:17:55 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1783441069; cv=pass;

d=google.com; s=arc-20260327;

b=jxhkErVsUsh0I7s8dOItblZMDpS9Kk3vKNnDXXkS4O2nVnUe+CHGPhYvA9MZdl+7HL

vruWHUMnJoLKemUGH97guK63IEyf9+DOq0FFTq7eVf6wdC8CfqHWcxPHNNZ6pc07jmDo

wZKWtMyodJH9e4Ejc8t7WX1HPqgvag0rLHVDZD8H87OYNxAAl984bc1D6eCa9WEla87R

lW7eIria1/VNoMSI8TSH3SVqPSMmlcGO9hGydnbwtmMyBrShQOyE5UfT03vlfDSuzD+W

g+4oMET4CMsmtwhkxHy1fdriHP9dulWL+D2lafJL5xucDM/BQOXeunAYB34UC3WOlB9F

Srig==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=6N89RGmks7adVJM38kme5fcTwdsh2II9R1ZHmpnqCxc=;

fh=dcJLrCI7JBFkIYOdjKZl45FQAF8oAUqal9A7klkEyYQ=;

b=lz0xWWezJlJO89KJmyJp1UcYyiXZJ23O/ltedOOKlhrc9mrpJUnVpJuQ+g53k1MtUW

nEQOZgRhJAnVAKRvnmuo+vhB234ky9WY+3E5Z2vM+OGcoeBH3CyYHpWEkCwHE73eF3E1

vO507KEV+eXFRsE2IOOQ2ucBDkMtsBGL39r/gEzkLZBrPixw3sMkETyq67cAz7wIdJAp

C00Ln+yzCFLccixTf/vhr/L92NHEZhDB4IUOnkev336QfaCzBIvNEnA6TNKJHD7f7No9

z12ar5ZEISthUrKUJ6uiJajseokZLOPMXWrt3J7v02A58bt9EISyvkTR9ISjeWKuIQ8a

l1sA==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@searchsmiths.com header.s=google header.b=m5qnUeeB;

arc=pass (i=1);

spf=pass (google.com: domain of michael@searchsmiths.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=michael@searchsmiths.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=searchsmiths.com;

dara=neutral header.i=@rankaily.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rankaily-com.20251104.gappssmtp.com; s=20251104; t=1783441069; x=1784045869; darn=nk.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=6N89RGmks7adVJM38kme5fcTwdsh2II9R1ZHmpnqCxc=;

b=yq6ffb5wtCSL+/QbDGMlYqpYVP5OESMYu9vxLBQVaiHtzuB62gFPH1zYEFFVYbJVLC

YbnQwTNWDXAzqbcM0E53TbbYo/aXbt207BS+5kAR2qs7SKoQu/e4ET4kl7m+ztwHewuC

70pbPqFjY5FEpdMY67YBBNFuWF3XPRZpqN4xcR/uOX0Gq3rekRJp0boed6Lm6Mx1WntC

xvdoT9yPUiyMT1OsaYM9l2q+0SpklLBGYmztK5QFGjCk5txuAVPZKOG7Q7F6mWdNPK9p

xbNBhEv8pqwIvvb7o1WkNdD6PdS04t2VK5PyY+AIiV+CgPutbJpkuDuEQUZKGCvwGobQ

X6lw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783441069; x=1784045869;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=6N89RGmks7adVJM38kme5fcTwdsh2II9R1ZHmpnqCxc=;

b=LMio2EoIT3v76tSsZsR0jbltrksPAF4igbI7cCCcyrFn5Tk4qTjnSc7PlmAj9REqv0

v8z4MOgYkZFTCDTqG1Idkj/V6uwzCPmt4II4zhrkyVXZRoUkiko3BCtCmQms7DA6ME83

vjXHWD1R8ML314SKDv6IBBubxQ1DkvKI4AY095opcCxRnnIXjmHh0QHYueICmzrGLgIi

XFAwVRfLXjSb0UxW7Jx53bB1V6XRkyypBsEsEWTSpmHUVAWrJ/jk+N7hKnFsuWQgboNe

7TPOxfa/VUNnPXwnsAYODCb+unkUJC8q+9IdSPqc9u26/OgTjSKQa8GpG5bYVExxoQR8

8Hww==

X-Forwarded-Encrypted: i=3; AFNElJ9ppYhUfrkk9zDqRFy5gU+maoC+lkXbbD9bD7zMy7aE9OlEwst+eghAb61MTl1+SyNwJTz+@nk.ca

X-Gm-Message-State: AOJu0YyZ05nrNmRGWXydGF/22wdB0v4B7v5OGZ6+Ia7VnLueofkYym7j

11v9t4L6CP8gqB2KORSm5ZUtGc/RziLw73YkuHtfYpcd7TYMToGRkATHWBFeyZ71nYA=

X-Received: by 2002:a05:6820:174a:b0:6a1:463b:86f3 with SMTP id 006d021491bc7-6a3556e723dmr3924379eaf.54.1783441068687;

Tue, 07 Jul 2026 09:17:48 -0700 (PDT)

X-BeenThere: analytics_point@rankaily.com; h="AX0PUUdZ6nq0Uj7tb1jVPfPm4/LPaQZrEvAZJChJU+tvkCPyeg=="

Received: by 2002:a05:6820:983:b0:69e:ba3c:135 with SMTP id

006d021491bc7-6a1c15b1738ls4078704eaf.1.-pod-prod-02-us; Tue, 07 Jul 2026

09:17:11 -0700 (PDT)

X-Received: by 2002:a05:6870:2402:b0:417:533b:7999 with SMTP id 586e51a60fabf-45105ba01cemr3654701fac.1.1783441031455;

Tue, 07 Jul 2026 09:17:11 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1783441031; cv=pass;

d=google.com; s=arc-20260327;

b=D9/8jysy6rW3Eaq+NFNMBDTPk2CXwirYeCa6e84+PSRGHs8xqR2SuwknwFnhfrhmxM

mDjRm7G2pI1Sp7FIoZSuOtiF3ermS3ALRZFTANzR1rwrXt+BlQKPg3cfq312C3lbuxKP

UGLwMnCOLTJIluATLyiT4ro6h9BsjchQsdcIt/makthz4M+5mJcgoZV1MISKGH9mX9Dl

uYxzM1vyQYVS/1uvcjPkc5OSOTBzhqvE59Ewl8NRzbAWw5OhYEVq9qNM8Y5Na1/rQ1o9

W8hiCBw5HOz45vW01SHwC5jNsAHyEIGYKR8u9r68jpGIcEVHYmAICTfo3yClHCW+Yfae

BWkA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=xQhAsDTbaRp3338z7p2PK9F4K0XmhgWmR7NlmTXITew=;

fh=DQJUBg4Y7D/usf9rmFKsccHBC+CLNwbKu2BUIVSZjas=;

b=ByPkdjIIusjOwUa+g4LKX3SFMqydYPq3MGnlkR/BbxpnIoHvCXyDCMHskm3qY9Q1BS

SmPixPPJoO2G9urnoUNV87ThW726ExvpK4Zh5sOWC4guIlxXuzr7QiWa6eUa2FxeFrUD

CbaoDkrbFunWklQfxHdx8xlyV4pP07BjZEJuOsX6bbO9bhWkJwnqCVS1oz/Ple4R1RVC

68MMG9RiyY7JPi0KOM7pqWyDInS+693HgEAEj7kDpnH6s0Lqs+P6UYNDccZJAtDwM4Cr

IEccqInaWN8ZfxT8yLk9UHJrrId6yD+alrbyDYVdRSun5MzS0EPmxW9zCVs7OslmimrV

cI/w==;

dara=google.com

Web/SEo/App spam from Microsoft Outlook Part 2

--_000_TYPPR03MB95178D241FC14B45B61F8EB19FF02TYPPR03MB9517apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Hi,



I had a look at your website and identified a few areas where improvements =

can help boost your online presence.

I would be happy to share a website audit report with suggestions and a pla=

n for better rankings.

Should I send it over?

Thanks & Regards,

Charles





--_000_TYPPR03MB95178D241FC14B45B61F8EB19FF02TYPPR03MB9517apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



margin-right: 0px; margin-left: 5px; padding-left: 10px; border-left: 1px =

solid rgb(204, 204, 204);">


px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif, serif, EmojiFont; font-size: 12pt; color: rgb(0, 0, 0=

);">

Hi,



em 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibr=

i, Helvetica, sans-serif, serif, EmojiFont; font-size: 12pt; color: rgb(0, =

0, 0);">







em 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibr=

i, Helvetica, sans-serif, serif, EmojiFont; font-size: 12pt; color: rgb(0, =

0, 0);">

I had a look at your website and identified a few areas where improvements =

can help boost your online presence.



em 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibr=

i, Helvetica, sans-serif, serif, EmojiFont; font-size: 12pt; color: rgb(0, =

0, 0);">

I would be happy to share a website audit report with suggestions and a pla=

n for better rankings.



em 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibr=

i, Helvetica, sans-serif, serif, EmojiFont; font-size: 12pt; color: rgb(0, =

0, 0);">

Should I send it over?



em 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibr=

i, Helvetica, sans-serif, serif, EmojiFont; font-size: 12pt; color: rgb(0, =

0, 0);">

Thanks & Regards,



px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif, serif, EmojiFont; font-size: 12pt; color: rgb(0, 0, 0=

);">

Charles





_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












--_000_TYPPR03MB95178D241FC14B45B61F8EB19FF02TYPPR03MB9517apcp_--

Web/SEo/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 07 Jul 2026 09:13:00 -0600

Received: from mail-japanwestazolkn19012058.outbound.protection.outlook.com ([52.103.66.58]:6881 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wh7TR-00000000B9C-3BNp

for dave@nk.ca;

Tue, 07 Jul 2026 09:12:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=L6hAl+EJm0MQJtFUvXoLtc+sVHPvj77+Eu4r0A2TZOBa70LZk+0FeISlaJNz7UITZcjhrl0UZCiUl5HhI9d/62iVm88nlq+ZQNstwdUQVO6LPnm04bI0s8nlCwvUYoxMq8qpsM+o2sOaQJCCn/iAVnx9C+P2sZwaEPMsnrlVoKBs3WIkh87wxm7qsmHK0NofxY7uii2c+mr4yWN5k+4T64eRjHZFO862MJpP3l+6gxAIWxHi6Sul+OsLHzBCm1Lf3IoPOFl6/CeFVEirLY1/wPbrDFKylQqwojjuMIXTxoSrzzs8+6OexKP+jLoq7t+mrl7v0TqvrFoWJdjiTP935w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=/kJDJKwJDWDYF6cugpNCq9R6TOhOtrOIdo1PazrK6z4=;

b=Su6G10ywry+y1x2jmHTq7+V7F6FlyaR5bzKoxjhfP4QmSQ8MA5ZspLc88H6FxzhOboKUlNN+GmQBmJsXEOFQJeSxDcBoQGYZp1OznyWUAU41fxPlDNBw2S7QJ0AFAuarpR2axQz/tuVsrCOLeXv0ljcuoAKXNs14U6xTR61gIl7MUG//iathGwBMpGi6ilkXS1EsF5c8Q1dg/7gw53+TSzzrXmuwEzMTrksonkHEkUcn6KjdYCgKcIhRvkhahuaIBlB+dRbxE+R+5nYSYTTimr7xR6YnHmOgDNTu50tH0n7mM0H63yO28K3nqMuKty+sxdGIMvlIWHcBiLLfl2utiw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=/kJDJKwJDWDYF6cugpNCq9R6TOhOtrOIdo1PazrK6z4=;

b=QPlVe6nKYKMFhwyFiWNSlgE2c1iXxep4VbYZLxOGhXcOLOqHooBZEhBk+F01z4m+cDcpC58S916yeIJHaIFeD9Db9BUP+o8iok76Mx4P9EIO5Zc1eyD+uwf7Iy7ZwLAsCgpeIOrezJ2BfpZn8VxUmfhZWU9arLoAKnm5JUvW4N2NRj3GC7UFcSdRcqN/TMGWErhHRgzZw6LIpNFzZeBXIq7S69JUBF+JDSmukNy7RokS0AA5yNDSt3nDARrzai65+Dfa7ZGjawpeKqHtmBq9lj6DwJDQ9wSRO7zD+g4bFrTyt7SnWRaQmlkVy+R2HoHU9tKiPVw+mWCjMNVwbgB4Ng==

Received: from TYPPR03MB9517.apcprd03.prod.outlook.com (2603:1096:405:384::7)

by SEZPR03MB10307.apcprd03.prod.outlook.com (2603:1096:101:337::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.10; Tue, 7 Jul

2026 15:11:10 +0000

Received: from TYPPR03MB9517.apcprd03.prod.outlook.com

([fe80::ccfd:f4de:3004:d301]) by TYPPR03MB9517.apcprd03.prod.outlook.com

([fe80::ccfd:f4de:3004:d301%4]) with mapi id 15.21.0181.008; Tue, 7 Jul 2026

15:11:10 +0000

From: charles smith

To: charles smith

Subject: Re: Yes-audit report~

Thread-Topic: Yes-audit report~

Thread-Index: AQHdDXGqIAh9dVV3xUapl1esdCEWhbZgyLA7gAFhu64=

Date: Tue, 7 Jul 2026 15:11:05 +0000

Message-ID:



References:







In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYPPR03MB9517:EE_|SEZPR03MB10307:EE_

x-ms-office365-filtering-correlation-id: e7f040b8-6fd0-42a6-70c0-08dedc39f9b9

x-microsoft-antispam:

BCL:0;ARA:14566002|8060799015|37011999003|15001099006|8062599012|22091999003|8022599003|25010399006|19110799012|31061999003|24021099003|55001999006|24121999003|15030799006|704163111799003|16051099003|2604032031799003|15080799012|102099032|3412199025|440099028|26121999007|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?zddpIBmeSE3ZiGIJKOREPVlN0z+wYHDij7NAxbp89FBdqi1HydvdyNBSeY?=

=?iso-8859-1?Q?l5fwFD/1q777UkgsNr5hij2uHjpTiTHDnwzownQo0x8G+NWPXJAdVIQLg9?=

=?iso-8859-1?Q?9ET1OBtcM0obkBeJy5EQxsfIF1FuVhBXDGUfycZ9bhajd2u0+NZqZjjBF6?=

=?iso-8859-1?Q?hQ8z30RwT5EaKhrOG3CUdtYglMOaSNbq6KS6G+BLSfhSt5OmCHKcvB5XjI?=

=?iso-8859-1?Q?iwppgayE+RPWKVH+xtBuNoQKfbxECeOKZPvWpEXvtGf8XhG2GHh1jUdgWT?=

=?iso-8859-1?Q?QDvqsrgA7jRgQiPCbMSF58nrFp5araH7D/qGSBQ4RCRbrztZpXW5In+L7G?=

=?iso-8859-1?Q?8urEO6a5F6Q1TXYGF3m40j9zPIonutG3Atjgfx9uq33V+kyEjOh932ruig?=

=?iso-8859-1?Q?qfhFy3i6D/4FELzrE4xxjwgYCSUDgEABtOHkgNlQf4gW6uWud1nFKuSGma?=

=?iso-8859-1?Q?YZFd++1VmlrL/IS9XtycBPULTbayFJFTiqrROZmsfUnxR+/2cTesI9bJJu?=

=?iso-8859-1?Q?zwPzMQVgI7QFbKcNrcvJyeW7UJ+ly6/sCDFis926qc3iXN1VDJabkVE2D5?=

=?iso-8859-1?Q?TNg+fCfEvNVdHv7xYwt3W5ol0KqJSjkTbAjK3QADZPBziCR+8r1CbtU167?=

=?iso-8859-1?Q?FEeSGZy2Ekq+7Q0KxdPzesufD3rQ3dFHdSTHL5UiESSgVeM80IFcOCgrPX?=

=?iso-8859-1?Q?Ud/Hs8fGix9sGIRbmKmeyfEi5ofdLn7Ow7K6B5QqsFnk3zDTjdYgk8s0pT?=

=?iso-8859-1?Q?sEXeV9SNLYuHZ3t1Q8qr1X9H1hMNCdtCNvZoBVAz5zebqTBSiym8j+dRuZ?=

=?iso-8859-1?Q?pCCx53WYeSkrRgbkNipgmUTNuA2uYxH4O03f3/+WrcxX4zv9hafes3jaak?=

=?iso-8859-1?Q?2qdEZWVPHP7OIQgK199RpQB+1ml0KbgjcZBiJLEtjGX6GBSs5CBvPndWYE?=

=?iso-8859-1?Q?zcIGeno0bl2cNR9GUODOEGNB1VQ4LuGwkNcT9oMYS6wgJii2RlwQRuNZPi?=

=?iso-8859-1?Q?XINIaoZIGRJqhncJ7OWKMcvc1HJYoGGMd6bZQUpYTPkTV0AgmMhgUqn2t2?=

=?iso-8859-1?Q?H1wNtbGV+nFRLf6y5LwQj/vONJe5qvEJ2ZnJFvqo8FmhJgUuKnACWSds57?=

=?iso-8859-1?Q?Co3ug2zOSdtRIYs3vkaKto0YZiCPnuUgZX7LQrDoZCCD7pnM5BZR6e32VE?=

=?iso-8859-1?Q?qHA60oD1oNxeX69hVpCAv50T//HnouO5WiXMRVMDZYXn+UjAjSGy7MZRta?=

=?iso-8859-1?Q?E0wbCnjnYUyCFy0hu4YeVSM1hXRrVdEekzc0USC24fLRIt4JrxALmseOTE?=

=?iso-8859-1?Q?s/SoYdDAIQLZZU7b3XcZ5v/bjQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?Dny2QYBmvQpBU7wE+3SjoQWJ/1RkLs2c2X4PrYaeq0Jqw+NGk6MbbU/AuI?=

=?iso-8859-1?Q?Bs00JWHlbqR0tnw4cVFFW1VJnRVuKU9oPP/dkMCJMcvsqMuSf30D4DPj3e?=

=?iso-8859-1?Q?u0orS8d/vV9n7GmwktiJFC/2YwoFxjaAHVK+Ovrl6wB2KFYH205o4/K1+v?=

=?iso-8859-1?Q?1mKxFYdlTjH13zlVaiGLXbn7Isrejm7oflxW45rpuZpvGKt6HgvpLlXwZv?=

=?iso-8859-1?Q?+qTMlhK3K+03E5G+x0UYug2RE+YjFOX/AzVhaOjQqpU2wH5R8/G5DvMk7m?=

=?iso-8859-1?Q?gRn1O/KH6KXDXtj+HE7oX2SpVNHkFs0Ad0jt084KYu1IQ5RTjzHfZ/PwB/?=

=?iso-8859-1?Q?78IEotury8eEEpbtcXTRbS9S9M7luqdLt0w/bVWy25SSYWrc3yElqBZG38?=

=?iso-8859-1?Q?QjmcOUqNewedwqcoeYaaNFGDD+P+aN5rQCisnUa/Lb/OPBOuq1rlM6JPnd?=

=?iso-8859-1?Q?a58dSZ0xqPwpQCEnKmtuOH10m+ckSeBwWprRy4Oi0vJQbf2n+MCZqgEq+p?=

=?iso-8859-1?Q?K0Gn0buUZZUqZ7MyHnFyGkHtIh8XS3IwQPTd7O1MQwijZKZ/ruSma4aARI?=

=?iso-8859-1?Q?XULJb08V3JPjKjd5mVhrIJHYNvtIEqGnxAXiFzKXTirJ4aDLeoDwY9GE7H?=

=?iso-8859-1?Q?wKHYPWr3rc/QBSYdavQHMm3nYhRIRIym1jZ5f8sQsNPmhQGP9Enevfxpel?=

=?iso-8859-1?Q?PsxARlguOZg6eVIxGFCMpx43txDBVPKXybMRRPVI7GtQLet6rnQXnyxvRO?=

=?iso-8859-1?Q?cx2td9Od1UGa3Q7QviqJ532SJ7Omgoiv7LGn+wxIVoTSy5SJjk3dj2AJQE?=

=?iso-8859-1?Q?kRrgjlG32YX1+YE5oIXHPJK0fa9T0cmy8Vk/RlvFxxTWAr8+csmrFtvx8d?=

=?iso-8859-1?Q?UoDKD8+hiId6Ge4IkS74ZmiiChVw2Zg9/Dmd1v4Tl3bipklz+/ibxZ51TG?=

=?iso-8859-1?Q?MmYXp2ziaxUMhzHGwUerYV96tkWrQnD+68+M+K/SlN951KCayN63u+lnxx?=

=?iso-8859-1?Q?TMjRtM1Nmu7zRsvz3Az691p2UJMyHRhONi1p+PMkYj4AwEpDdP9BScm7LY?=

=?iso-8859-1?Q?p6Yr6EZNKd0OWzTuN2dwFuL9klMMK1pMUBXChRYdrCejzBPbWymguKJLN2?=

=?iso-8859-1?Q?J/tt49jlD3M1ErHMXzI1L1pawjiYELC1kprGQUTE9sB28SyCYVmy9vayg3?=

=?iso-8859-1?Q?oTx8rDzVE/LaYnyWq9YrCga8a+g49XeSChlozMkVdn7XF48nqq/RFYAiWR?=

=?iso-8859-1?Q?+wDvBxWVNTUMLvlJ5WnKUXN3nEKsNm8A5WdyAabgKXg1JaPu0HHDuv0tTu?=

=?iso-8859-1?Q?lkFz1GXqwN3SLjKo2qaX8YoxTmVdLPFnRThvJ1s7WBq7ceLXT1D7S7efIo?=

=?iso-8859-1?Q?0yFtOO8E4g3WBpfY5Xoob3tPsVvU95xGqsgIInNPNwGuNlr9tlhSDIDmQJ?=

=?iso-8859-1?Q?Q6DKZMGuXyI4PU7m/koDOsSAI+U9IAeRW9dj6ikLuby4l1qG7OrNMcvYzm?=

=?iso-8859-1?Q?yq/twN4XtVhsFws0t8WaLe?=

Content-Type: multipart/alternative;

boundary="_000_TYPPR03MB95178D241FC14B45B61F8EB19FF02TYPPR03MB9517apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYPPR03MB9517.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e7f040b8-6fd0-42a6-70c0-08dedc39f9b9

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jul 2026 15:11:05.9896

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR03MB10307

WEb/SEo/APP spam from Microsoft Outlook Part 3

Content preview: Confirmation of PayPal Payment for BTC Purchase utorok 7.

júl 2026 Dear Customer, Thank you for your payment. We have successfully

received your PayPal transaction for your Bitcoin order.



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.14.44 listed in dnsbl.ahbl.org]

[40.93.14.44 listed in dnsbl.ahbl.org]

[40.93.14.44 listed in dnsbl.ahbl.org]

[40.93.14.44 listed in dnsbl.ahbl.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.14.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.14.44 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.14.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.14.44 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:e listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[40.93.14.44 listed in will-spam-for-food.eu.org]

[40.93.14.44 listed in will-spam-for-food.eu.org]

[40.93.14.44 listed in will-spam-for-food.eu.org]

[40.93.14.44 listed in will-spam-for-food.eu.org]

[40.93.14.44 listed in will-spam-for-food.eu.org]

[40.93.14.44 listed in will-spam-for-food.eu.org]

[40.93.14.44 listed in will-spam-for-food.eu.org]

[40.93.14.44 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.14.44 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.14.44 listed in wl.mailspike.net]

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.14.44 listed in bl.score.senderscore.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 TO_IN_SUBJ To address is in Subject

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Confirmation_of_PayPal_Payment_for_BTC_Pu?=

=?UTF-8?Q?rchase_=40_ut_7=2E_j=C3=BAl_2026_=28cynthiaperez389903=40groups=2Eoutlook=2E?=

=?UTF-8?Q?com=29?=