Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:45:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6lC-00000000Ja7-19fE

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:45:02 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:45:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej2-f3.google.com ([74.125.228.131]:40627)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR4Vp-00000000M9T-35ln

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 03:21:04 -0600

Received: by mail-ej2-f3.google.com with SMTP id a640c23a62f3a-c50485c0cb8so98586066b.0

for ; Wed, 11 Nov 2026 01:20:07 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1794388800; cv=none;

d=google.com; s=arc-20260327;

b=a1T8gKG0pQbJo0ajyQ/S7wWXX7RyxaLCVR3RPxGVoKjZFKo5DiNkCFjOTJAeYTs582

C+KhpJslbQpxNjlQDos7nTyzKgb7wR9VMA6ivqjqxeM5FzFoFjnvW21fovk2gM68Vp8W

Uo3HN+RdJ+ZvxUsbRUvSqlEtm+1BcIG68IQE4XMONj8C4V56JuJKROlxm/zyb5lWkxU2

Hcy/cy89R7cqduo+D1cFgBpGfMBczdNtDesLJ9sPTqDFRa2/DeBa8WL+PlSMHSrWVd2i

olR2OosdV2/63yxl0ChhVGad+sWhGlywZ20oMh1ZEuGvrEdT4yPNYFxVZeTkePc98E2n

2fUQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=5yFNbJw0AgQox9Hl+K6aiqgTN5pt+wP1oDYqRR1gVts=;

fh=cK6liuWNhQOyaO6o5idOempiAiSnPc5gnNgpewLK4+0=;

b=OPPDloXPHQ2otrl/STTm/59qzkoFSXO77JU6FK+GahiFH4y1TFiyZwBks6immt9Cv2

p6x5tJRVtaWgeC6/nRkbF4MsKE+582hR8COLNmavVk4qQIxDh8H08FOjpq6eSmARw4+D

vsR85O/n7wTBB8/ZKYdQkqDv+JIgSBEjQz3EniMo9s9BZ+gaVtLOI9pjLkY3mJkS7bBS

IDjM1mDjatMfhtrpxrVxhpth2B2l72hl2SGuBweqWNL0w8l+cgO8eydME6XINsCjCqhq

xKOo02SKI+nbCjgcQ0tECdI3QDycfCszv+VNMP104Mv/nTiTyOrH+uD0cKzx8jtvbe6X

iEXA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=noun-edu-ng.20260707.gappssmtp.com; s=20260707; t=1794388800; x=1794993600; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=5yFNbJw0AgQox9Hl+K6aiqgTN5pt+wP1oDYqRR1gVts=;

b=RTJnt8cuNkyDUsnQDX/IZBQqpJ2lgRqydIFvA68tG2qwos0P3AJ8T0uumRN6L6IjOP

LDqXSGrbI1/LDbzQcd926/3dzcC5nMZut3LWfSzn4TTLPleaNch+ZwItmHhCKTuv0LNA

E62+On+QqK4N9IG6/TkisrnWJsNL3a4B3YQcriaWfyF4DA5mA+E5hMzo78FpfXjVaalR

Hj4qsoqptJPSU8mwmtlkCpocZhm28suQ/Ja3MU077YJD2J2UdXIwg7N+06AbWJlvjbEF

tqB29b4k/EjG47MGr3xQdMKMwlptbuUk7OCh3nMFxGv0mHv6DLxPCubR5sz977De6C8l

JGFA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794388800; x=1794993600;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=5yFNbJw0AgQox9Hl+K6aiqgTN5pt+wP1oDYqRR1gVts=;

b=lyGNHNcK1fXZFZrLx1eUpftP7Fri6pLzCv0IJnrWXUYNZdKWe6ZJi2THSxNEfOZWez

LCWZfOfHXhlKDVjszpR/r3QclC3GmZMjqKImu7t1EoOWCO4FdAXHjaZSOftMyVwWpuqR

vP2V7cB3o/ArW7AdVBKFEiYWiHKpwQdWi/ok7yQCTZlPo5CXWdbDrYtDRID6dWQrVRNa

2HcCP+wdIs1ltANQTN37k64SNDzQKCwCi9k1DudSh/Le8bMIClNC0npQkjMDNauTHWy3

BdjyP5zCcGr894W7t8wcN2OagL8N+jgq/Am7GwRF3AHBFIp2p9tVG8v/70/ZAcLZvMxI

80BQ==

X-Forwarded-Encrypted: i=1; AL+hErGvVZaGEEusIS0ElzmWTAaVgNc0PUVNElM5lHS6U+vkDKXCxSK5zgOa94wgCScEHhNktBu7PsM=@doctor.nl2k.ab.ca

X-Gm-Message-State: APuU4Z8W1dLAnjMVyOUFf0uB6TxeamoE6QfRAPjwnSQwakNEa6AD33jQ

Jjez/rlreLnXGQbNu9HAuH7u/y2+CL/uEP9XEP4wH9XYVlD5r65B+1/arosIbUg/QK8qNwV1riB

OhO0oF3H3pdWU6I2dKvcKCfWdAbktys7DRye2N6YEnR0IsNnMTzMDbKYgViJknNUeHavdNfeUV0

7vXkk9dQvfQwMBJwX+xSGcEfT8IyU4

X-Gm-Gg: AYBFou2qWhiXMaSlSaB5Tt//oALM/DqQJSOc9fbcxUL75UtOjk7pVB23Ifz+ppMl2hp

qx56QlqKIpQuZ1qexy19RDTSWgwTWGUfHVIT7+jB+P/ysNiMy9JdXEszRsiKdSKMmtvh4PW3kZP

74R68swWqDAkROYiH3csC+qWpjjjiPesRv/6i6ZMCk2evaZeZG/6V/ZufFwQZS0kcNzrPF+6F1m

sd4mkWjFaoLiwQ3/8TNJtH68BZ802T3on7K1urmVQBDOAhnUrozOMYfn7qfJy4I2YXyF3EXeoSv

MLcseLLck4FzQ+FIC5cnUJh7IyfYSCyMIzWDRqA3xte2awPazVH7X6uoWgrsSKc/70HsRv0IA2O

LaToO3+6qeFRcqRF4VsQBGl2NhlGR4PwingCnohxvUpZJVAKz+MIF6BygdYHCs8E9yecO8O/oYS

FmjTbPorRUqWGp40c2eaZgCBQadHI2I9RHqWR/12rj

X-Received: by 2002:a17:907:1c9a:b0:c29:f5d8:9c78 with SMTP id

a640c23a62f3a-c5066b5f523mr130670266b.39.1794388799714; Wed, 11 Nov 2026

01:19:59 -0800 (PST)

MIME-Version: 1.0

Reply-To: mj6690849@gmail.com

From: "Mrs. Mary Johnson"

Date: Wed, 11 Nov 2026 01:07:58 -0800

X-Gm-Features: AclHuK__SRYTIqKmvW3KqBhWic8POsEMl_CF1I-V2ifD6jGP-dOFzevy2fwha2I

Message-ID:

Subject: Trust

To: undisclosed-recipients:;

Bcc: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000ff0ab2065ffcb2bb"

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I know it will be a great surprise reading from me

today but consider this a divine intervention. My name is Mrs. Mary Johnson,

a widow from Milwaukee, WI 53204. I am presently writing to you from my [...]





Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

[74.125.228.131 listed in dnsbl.ahbl.org]

[74.125.228.131 listed in dnsbl.ahbl.org]

[74.125.228.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.228.131 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.228.131 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.228.131 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mj6690849(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_NAME_MR_MRS No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Trust



--000000000000ff0ab2065ffcb2bb

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



I know it will be a great surprise reading from me today but consider this

a divine intervention. My name is Mrs. Mary Johnson, a widow from

Milwaukee, WI 53204. I am presently writing to you from my sickbed because

I have been fighting cancer and the doctor says I have a few weeks left.



I want to entrust my money $8.5 million dollars to your care for charity

purposes and crave your indulgence as a concerned individual to help use my

money for charity and also assist the poor with less privileged in the

society so reply to my private email (mj6690849@gmail.com) for more

information as I'm not always online due to my health and my late husband's

brother wants me dead so that he will claim all my late husband and i

worked for.



I will tell you more about myself and what you need to do with the money

once you receive it. Give me your word that you will not betray my trust so

that i furnish you with more details about the Charity Funds. Please reply

now as my health is pretty bad, It=E2=80=99s urgent and very important you =

keep

this email confidential.



Have a blessed day and do not forget to pray for me.



Bless you.

Mrs. Mary Johnson



--=20

Disclaimer: This email and any attachments may contain confidential,=20

privileged, or sensitive information and are intended solely for the use of=

=20

the named recipient(s). The views, opinions, and information expressed in=

=20

this email are those of the author and do not necessarily reflect the=20

official position or policy of the National Open University of Nigeria=20

(NOUN).



If you are not the intended recipient, you are hereby notified=20

that any review, use, disclosure, copying, distribution, or reliance upon=

=20

the contents of this email is strictly prohibited. If you have received=20

this email in error, please notify the sender immediately and permanently=

=20

delete the email and any attachments from your system. The National Open=20

University of Nigeria accepts no responsibility for any unauthorised use,=

=20

disclosure, alteration, or reliance on the contents of this message.



--000000000000ff0ab2065ffcb2bb

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

I know it will be a great surprise reading f=

rom me today but consider this a divine intervention. My name is Mrs. Mary =

Johnson, a widow from Milwaukee, WI 53204. I am presently writing to you fr=

om my sickbed because I have been fighting cancer and the doctor says I hav=

e a few weeks left.

I want to entrust my money $8.5 million dollars =

to your care for charity purposes and crave your indulgence as a concerned =

individual to help use my money for charity and also assist the poor with l=

ess privileged in the society so reply to my private email (
to:mj6690849@gmail.com">mj6690849@gmail.com) for more information as I&=

#39;m not always online due to my health and my late husband's brother =

wants me dead so that he will claim all my late husband and i worked for.
r>
I will tell you more about myself and what you need to do with the mo=

ney once you receive it. Give me your word that you will not betray my trus=

t so that i furnish you with more details about the Charity Funds. Please r=

eply now as my health is pretty bad, It=E2=80=99s urgent and very important=

you keep this email confidential.

Have a blessed day and do not for=

get to pray for me.

Bless you.
Mrs. Mary Johnson







Disclaimer: This email and any attachments may contain confidential,=

privileged, or sensitive information and are intended solely for the use o=

f the named recipient(s). The views, opinions, and information expressed in=

this email are those of the author and do not necessarily reflect the offi=

cial position or policy of the National Open University of Nigeria (NOUN=

).

If you are not the intended recipient, you are hereby notifie=

d that any review, use, disclosure, copying, distribution, or reliance upon=

the contents of this email is strictly prohibited. If you have received th=

is email in error, please notify the sender immediately and permanently del=

ete the email and any attachments from your system. The National Open Unive=

rsity of Nigeria accepts no responsibility for any unauthorised use, disclo=

sure, alteration, or reliance on the contents of this message.

--000000000000ff0ab2065ffcb2bb--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:44:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6l1-00000000J6u-2MbX

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:44:51 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:44:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [207.57.121.169] (port=57539 helo=mk.ukowsy.top)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR3zy-00000000Ifa-1vDC

for sales@nk.ca;

Wed, 11 Nov 2026 02:48:11 -0600

Received: from SK-20240731QRVM (123.144.84.56) by mk.ukowsy.top id hugls00e97cq for ; Wed, 11 Nov 2026 08:47:05 +0000 (envelope-from )

From: "Seren"

Subject: Custom trays & lidstock =?UTF-8?B?4oCT?= quick intro

To: sales@nk.ca

Content-Type: text/html; charset=UTF-8

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Sender: info5@mk.ukowsy.top

Reply-To: wityk.Mike@witykpack.com

Date: Wed, 11 Nov 2026 16:47:05 +0800

X-Priority: 3

X-MSMail-Priority: Normal

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913

Content-Disposition: inline

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, We're a sterile barrier packaging supplier

for the medical device industry. We focus on one thing—designing packaging

that works with your device and your sterilization process.



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

[207.57.121.169 listed in dnsbl.ahbl.org]

[207.57.121.169 listed in dnsbl.ahbl.org]

[207.57.121.169 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[207.57.121.169 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[207.57.121.169 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

1.0 XPRIO Has X-Priority header

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

Subject: {SPAM?} Custom trays & lidstock =?UTF-8?B?4oCT?= quick intro







Dear Sir/Madam,







We're a sterile barrier packaging supplier for the medical device industry. We focus on one thing—designing packaging that works with your device and your sterilization process.







Products:







· PETG blister trays



· Tyvek® lidstock



· Sterilization pouches & rolls



· Self-seal, header, and flat bags







Why choose us:







· Packaging matched to your sterilization method



· Fast turnaround for trial orders



· Stable supply with consistent quality







All produced in ISO-certified cleanrooms. Let us know if you need a proposal.







Best regards,



Seren



Wityk Packaging (Shenzhen) Co., Ltd.



Email: sales@witykpack.com



Whatsapp: +86 18716641670

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:44:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6kn-00000000ITo-0iEG

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:44:37 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:44:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from c4-17.my-control-panel.com ([23.153.104.17]:52251)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR1Xp-00000000Ptn-2S3y

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 00:10:57 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=mairesdafrique.net; s=default; h=Content-Transfer-Encoding:Content-Type:

MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Unsubscribe-Post:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=MLo6RW4e5/2Uh/YhtO0IzyBVmdq22wmE1vdq30L6EQA=; b=jvpmPB952a6LXanj0TuTuhmtOl

uVfkN+wFuzQpGZlJu0OP3MYpr2j1PtWnTRCWalycE+NGQU1bToI80EKg8lToF+Ooxr+o7queH6BBn

P0pBdk0aFBBuQlHiJZwtS/JB98/+2J0u5R4HNVp87UJ5PJ9ALNWrjaeSd8FIyjJ8yAgQQgxTIhByX

AqGdxRsZLc/ZwH+S+kjq5MV1uyd/wVo7Yh0xGk1SnV0xIjnZ12GCsBv1EiwMPgjvYSkza1i0ek/Bh

Vl7q3yDYQpFduz+Pc0eKY5OKNr4lMjD+bMZt1PdxUouUDolnRgz4QMVad324ShBEIwgTntSEVbsj7

4OrE7Xtg==;

Received: from [107.149.8.131] (port=49422)

by c4.my-control-panel.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1)

(envelope-from )

id 1xR1Wn-00000006utb-3vZP

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 09:09:50 +0300

Reply-To: timothykolb.info@gmail.com

From: Timothy Kolb

To: doctor@doctor.nl2k.ab.ca

Subject: Hello Good day

Date: 10 Nov 2026 22:09:45 -0800

Message-ID: <20261110220941.588982BF64CEF504@mairesdafrique.net>

MIME-Version: 1.0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - c4.my-control-panel.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - mairesdafrique.net

X-Get-Message-Sender-Via: c4.my-control-panel.com: authenticated_id: access_jmovh1327@mairesdafrique.net

X-Authenticated-Sender: c4.my-control-panel.com: access_jmovh1327@mairesdafrique.net

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 9.9

X-Spam_score_int: 99

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, My name is Mr. Timothy Kolb, Manager In charge of Foreign

Remittance department of Westbay Trusts Bank (WTB). The main reason for contacting

you is to propose a business cooperation that will b [...]



Content analysis details: (9.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

[23.153.104.17 listed in dnsbl.ahbl.org]

[23.153.104.17 listed in dnsbl.ahbl.org]

[23.153.104.17 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[23.153.104.17 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 LOTTO_DEPT Claims Department

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

Subject: {SPAM?} Hello Good day



Hello,=20

My name is Mr. Timothy Kolb, Manager In charge of Foreign=20

Remittance=20

department of Westbay Trusts Bank (WTB). The main reason for=20

contacting you is to propose a business cooperation that will be=20

of mutual benefit to both of us and requires absolute trust and=20

total confidentiality. To get down to brass tacks, I want you to=20

accommodate a large volume of funds worth (US$19.5 Million) which=20

I want to transfer from an abandoned account to your personal=20

bank account, It is 100% risk free.



If you are interested in this proposition, kindly respond back to=20

me through my email (timothykolb.info@gmail.com) So I can give=20

you=20

further details and what is required for our trust, We will also=20

negotiate an appropriate compensation for your efforts.



Yours faithfully

Mr. Timothy Kolb.

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:44:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6ke-00000000I6Q-2Uh5

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:44:28 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:44:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012057.outbound.protection.outlook.com ([52.103.43.57]:24294 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQzyT-00000000DoN-0t5n

for sales@nk.ca;

Tue, 10 Nov 2026 22:30:21 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=AOZGnB40TevjtRQbc4YCNbobhlllSMf1AcASwPjAgTWFIQmKcMqKTJs8qtTImC4qcvJsDdDXG6lHTd8YFABYUVzJ8mhpq5M/+x4TH8Ud58HTAi0bKWjAeR1qxVFo0GiOdVOfXw+9077pnRJHDMyRtej3IYtdPdJZDH5t2kghhKZ+rJYNWqaXlOqQQpsNQYaS/2MpfPzwOT2eh01EnG7idd+MQu0HViliOKXNWKAcCU70hfv9HbKtoZ43WXpp7bZUsf6Mb+rKj1P570OI9HHGo//EeiBSMRyZ0FwmRk2dybA9s7/7AdkObM7Hc3lYASZY7snMujUplCZxhZU39uihgg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=E+j0FNth89rxrRq0j9nuBCI9O1kDK3eGCwFzzl2H0MI=;

b=mCOamF8wJr86cMqKbUfHb28QYq4HqmzM0AXnWtaPdCZUOH+xdB/Awh6CluDO9bSF+x0XhDRgE41j/ap5t5iwo8Ani7/eutRTxSSOAu3uBPEju12zktrOx7tSJSycehcp6DmtpDEldHT2x/XQd9sSg+syC6pXI6rPkE3OzrseEOoIOMNkc+L+jByB9jIrajovKNKWcAfR23lWADwY8xJAYcLDxtPzzIPlMhxq5711sQKe/Ntu0sseGaJMj0uX/xwooYqzortURwHjx3YiDP81M/cOKUJSfGERkCaN8NZzCku+KiAasM2XXEf2l3GRRUNuCE9TpLEXnyx0kE6lKARzMw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=E+j0FNth89rxrRq0j9nuBCI9O1kDK3eGCwFzzl2H0MI=;

b=jqqyYi2n46ywSFwqn6puotVovd4le7EumFUSptAjKol9gBBPMT27aLR+diS3fN5AmGxoiEYaj8VXjtN1nOtDAgBpq9NpsKCgdJmkF6AGdXEhmaNHX5i2nGyG/8gzKMfuqXI35ryBYJwZKRDGLYkTGEZ968gL3zUE5iQ+qIY2RSymMVLzg9kr9oqEsSv4DambajBM4KKjScBW4RUa3mCr1XfmOhtnhZJLhuFvjNgJ3KmtlvUWy21xwrSmytvFSlxo79hSOOpT+GM7tw81orkSk3zkQhu7to98A1dhbmBCaBKAVgZcY4/8/tD1S5Lcb3FMbjYS/wn76p7ercrVgk4R8A==

Received: from TY2PPFFD5F4C141.apcprd06.prod.outlook.com (2603:1096:408::7b3)

by SEYPR06MB8221.apcprd06.prod.outlook.com (2603:1096:101:2f1::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.615.8; Wed, 11 Nov

2026 04:27:27 +0000

Received: from TY2PPFFD5F4C141.apcprd06.prod.outlook.com

([fe80::cd25:c570:d860:4217]) by TY2PPFFD5F4C141.apcprd06.prod.outlook.com

([fe80::cd25:c570:d860:4217%8]) with mapi id 15.21.0615.005; Wed, 11 Nov 2026

04:27:27 +0000

From: Puja Gupta

To: Puja Gupta

Subject: Re: Proposal

Thread-Topic: Proposal

Thread-Index: AQHdUAx7XFEoY2cFk0G8A1epedFifLcoiWWi

Date: Wed, 11 Nov 2026 04:27:26 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY2PPFFD5F4C141:EE_|SEYPR06MB8221:EE_

x-ms-office365-filtering-correlation-id: 3057dfab-2a91-4b9c-85cc-08df3fac172b

x-microsoft-antispam:

BCL:0;ARA:14566002|39105399006|15080799012|15030799006|31061999003|22091999003|24121999003|55001999006|24021099003|2604032031799003|48001999003|8062599012|8060799015|19110799012|25010399006|4140399003|56899033|440099028|3412199025|102099032|12091999003|260806224601699006|43065399003|31055399003|40105399003|26121999007|18071099003|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?N7vA4WtEDqQUHvt9qSbjtItcCEf4tQ5UTJVcCP8gsELigdogYn0tBtDB2FYZ?=

=?us-ascii?Q?azhLEWpVgYvvweeadIu5dLmIURTbSkFfyeJQyDH8ONexZVj03UV2yvW0fMb5?=

=?us-ascii?Q?lUO72DIKm4d0IuWrbuRwNafrjyZcb2AkJLp8h34ixRaaOUrJzN4LouhzyY0C?=

=?us-ascii?Q?OthMmVuOax96q5nUluWx8zI6gZMO2+aOt/PzRzrmU3gNXLJH8XJ7hytuGBEb?=

=?us-ascii?Q?7AKtdUOKyUiqz13EeAVhpQw7jADuGTXPtAQAOXlfSeGtBTQ7nIy4mqpqsOTD?=

=?us-ascii?Q?t5LoJzf72YceByq7Zpqb6UEiL02zXb0tb1askIQrCerPdQTIAlz96A0Ph677?=

=?us-ascii?Q?Tlpge2EurrV8IRlGD6CUhkuDiopyyr4vOPSJbZhnI6uaiBduM5Oa9AbjneTX?=

=?us-ascii?Q?3DvBEVh2WNNLa2ujg8ZKR1s6Mgzy8tVvoJp61WI6G+h8SafRLyO40SzL9nHE?=

=?us-ascii?Q?7eCxNW/P/jhNX9bk9ljifJcTzBYJ7gWYYg/AQh1XmMuqv46aY3eb6oiRDUwN?=

=?us-ascii?Q?WWnz4ibqYLSLkk7a/TiPioxG0O9twQXpl/pMm7+hQ+CWmeFXAa0pjsOYUmgg?=

=?us-ascii?Q?seiECwpGWQwBPlOE3OP9GBHkHI55/5no7Q6i5JWBS+cWtziKDTqJcIPniqQH?=

=?us-ascii?Q?HkOfj91EkxHiwTvZX+A/tvNBRvj/YJWr/VGpwMUEyFzryczK8oy1DYQstlJ2?=

=?us-ascii?Q?Np/Ayn8dWNeFkw1GQ6iilihb2l2d0ac3xMB1kGes/Lbj2C2XGVNZ7G+ETZXH?=

=?us-ascii?Q?vwlCcT60dIcmoPBpOyCmYAkLV6mzQy5x37fbeytUH5WOGEehPu6a0denTZa2?=

=?us-ascii?Q?m4Lsr6myoWEOAPIo8/LKtCz+hyoX/gMHm6p+SlrIWqVtHPoNJMCW43cS6HoL?=

=?us-ascii?Q?vgu5G6gGK4GzonFzC2OIxyCKtS8Kq5TY+ZvMKei857p6Jt+Vfemc/gJLN8Zp?=

=?us-ascii?Q?QvoT7Sp/1BfYedpsbbxzHuMxQVl186/MeSXjoGVqS3j+gja6By4+qfKoCurP?=

=?us-ascii?Q?d6FBo5ogi3sH12gTcyE3E352uWpuGvAlkWVyZFnigAXWOC9DO/6xZBVyd7wx?=

=?us-ascii?Q?ejPqXo9f+pT0pd31UACJ9x7Mqc3dLqOSYFLUA41ey4BCZgMT7W218uF16CL6?=

=?us-ascii?Q?kuKQITiiFMlG5gnCyjuIc7PALPdQVINeUZGL3XwR/PvHNcfldxrOqL6hGRCC?=

=?us-ascii?Q?pJQi3wL6YbUSo36MKIFPjamNLA2FQefuymbE2Ij8ooQWYQUljZCXlJl2zP10?=

=?us-ascii?Q?B/soz8Kqd/SrNOup4Atvym0oohQe6WWNBUCh1sxVA/fOasUXLDIu9FTazTdp?=

=?us-ascii?Q?lm0WLxjBLoyBlbcFt4WRDNAV5thnt60mTKfnRDMZMo6okBHrNxfjHrNOsJXq?=

=?us-ascii?Q?D2o48unp4LzFC/qtFgB5jE66Fdp/?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?Wb4KfmcU1/fekgWWfYwDtJwH0uAsZVwFRI1FRJskcATh5s1ectGUDBcAJL/o?=

=?us-ascii?Q?6aXLV+AFkZ/wrtDqPN7qFUu2wvkfWY9htPcwXcxz3af39iB0EpiNrxNXo/hV?=

=?us-ascii?Q?xksQYijxTq4gOtxBWNGCIOq+vDMoxOhDK/bD+saDK6Q4koGP4X1ESY/BlUIH?=

=?us-ascii?Q?QcU4DrYBvXPgCfCw+NFHeqQTkzbIqyTwlFm0bjyvuMQOEv07PClA7g44sRGb?=

=?us-ascii?Q?QDaYinWRHon/ZMxgCdqXkedXitaby2xUFJsPuuHFtrkQDwOBz2iLcvMs6loD?=

=?us-ascii?Q?RRa4Kr6jWarKiC89Vz8wTXCDGfuDdYWqhGgmZOmapDrKaAcSgs/U13eRVEMh?=

=?us-ascii?Q?p6vm7r6Px6Cry7qf9/wZaF6f7/M6Lfrz0YhOvpBitaRDGKDwi1nZmkSaYcEH?=

=?us-ascii?Q?eagWjUywjLZl09xDYZpy1G6JP4E3T5TqtfOEWgXWe9p68qe/zF9T2zRBXaRQ?=

=?us-ascii?Q?c8c2mKiUnyz7aap1dBipMF1Azz3hEEaFMXIhSJGjfWlbPryp3HxAtdJsJHId?=

=?us-ascii?Q?1Q1Mz8v0zfoK44hwh8eiSYawl+iFobmbKyhcvczDa761DRWBHJNLKGWxsLRE?=

=?us-ascii?Q?mAcezQ2eo5kn9SqCsOi+gnRuJBXcu3rjEsBdOhIodh/UZAQUS06zf/I3P9su?=

=?us-ascii?Q?RRoHmghXE7Q1I5KfA2N0Vd3ueOBEeKQY8RO6aoBBHLez8SpxTu7keo8OR0zp?=

=?us-ascii?Q?ig37Tx+NYbZrM8otRTJDO7bJY9vpV+CaokQ0bKwDduW1qBU9hPDZ4+Qze1pW?=

=?us-ascii?Q?g2O/AqG31JxMTLwtatu8tRI8CCio5P85M3v4sOP1ozLGAAVMlOHF0pqLv3iW?=

=?us-ascii?Q?kInjiNQ5SSN/82mpE5/j2da5o6/ZdI2wtZemmXl012nsh1erRUegVOky3OND?=

=?us-ascii?Q?XarVRD8at171NxkZ+JFpwzVBpTy29KvdMC8E/yTknNOxeWdLrS0qeBhBQRCq?=

=?us-ascii?Q?ScJ5yN9K0uv4h86yGk3xslQx+dKsVeoGFrVGs3lOs4hwBos7r+mrMTgFHcNI?=

=?us-ascii?Q?BzFNupuu17jcOBkYLQNWi9cS4py5QDEYIYcVd9l5dlDCVV3L+VmDIPHA+8Ss?=

=?us-ascii?Q?QDUpvkULHilNpXDfBPwr4esXx4vl7hhmJr8vRm0yrwzJnZ09qsxMhI8gJ0S6?=

=?us-ascii?Q?mg1CSkhyO3edIuT5nxrtRXUA4o+SF/7C8HpKc23+WRIXNpOgFYubbJApVJAW?=

=?us-ascii?Q?lFGt4qXICjpbA0vsYp0OY3RBLBWQfMvS2pqIOjq+ahb7hy6B/84DRZrMl+kJ?=

=?us-ascii?Q?FwSEnH1Gj5PNT2mwyDaQk/9qPJRsjyDtTQyGjih1SBOq9EIK9WXdVKT49C2X?=

=?us-ascii?Q?LJ1ipFO8zbXA9AuYKs0Lm7wrADR3Ok84SSfuRhYKDGO07wgOJuInb+QdLC+6?=

=?us-ascii?Q?FTmj8UoOZ0Nm8sTtTQRxFZ55XAmeTcZHx7C9Y/gw1PlSyjygELa3VqPQ0uHh?=

=?us-ascii?Q?tObIRnCU3MU=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY2PPFFD5F4C141.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 3057dfab-2a91-4b9c-85cc-08df3fac172b

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Nov 2026 04:27:26.5527

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR06MB8221



--_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello

I'm still waiting for your response.

Can I send you our best offer & price with work activities?

Thank you,

Puja



________________________________

From: Puja Gupta

Sent: Tuesday, September 29, 2026 5:17 PM

Subject: Proposal



Hi,



Hope you are doing well.



Google SEO is changing fast. Customers are now using ChatGPT, Gemini, Perpl=

exity and Google AI to find businesses and make buying decisions.



We help businesses build visibility across SEO + AEO + GEO so they can be f=

ound on Google as well as AI search.



We can prepare a free AI Search Visibility Audit for your website, includin=

g competitor gaps and opportunities.



If the opportunity looks right, we can discuss a complete monthly growth pl=

an.



Interested?



Thanks,

Puja





--_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hello



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I'm still waiting for your response.



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Can I send you our best offer & price with work activities?
>


8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you,



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Puja



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Puja Gupta


Sent: Tuesday, September 29, 2026 5:17 PM


Subject: Proposal

 









8pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hi,





Hope you are doing well.





Google SEO is changing fast. Customers are now using ChatGPT, Gemini, Perpl=

exity and Google AI to find businesses and make buying decisions.





We help businesses build visibility across SEO + AEO + GEO so they can be f=

ound on Google as well as AI search.





We can prepare a free AI Search Visibility Audit for your website, includin=

g competitor gaps and opportunities.





If the opportunity looks right, we can discuss a complete monthly growth pl=

an.





Interested?





Thanks,


Puja



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">














--_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_--

Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 21:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQz5q-00000000OKf-0F8t

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 21:33:50 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 21:33:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:59852)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgn-00000000FXD-2cxF

for doctor@nk.ca;

Tue, 10 Nov 2026 17:55:48 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=Gwek8L1BIeSUry+M0f2+GIdThX

tESHa7ridL3WXn2jTvQH2ZJGrRjLBj9RMOPE5zv3rwBBU/nQGs93+AEzSX45SUTFQAaze69k3rR/T

whYBkljxjAEDuelwb2KDQzxaDxOeYDqJ2/SeXLFO4eoGLGf1765W5rzdW8j7CjQzBhUnFfpX/MyhH

mQuQW04NOr9OD5VtskboyEjnP4h4GsYG4NiSQ8FsljaSoIwxIuo5L0GKHMkak9T9hXP60hU3qp0sj

e+SlFO8vxYxsp3LscaclfqJmHOUiiOtkSGrZ9MwkNXCc8UNqSLd+CwfTh/NX4aD6GpubJzQbCns04

ha3ERGrw==;

Received: from [160.179.183.202] (port=51961 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfl-0000000Gkr8-43S6

for doctor@nk.ca;

Wed, 11 Nov 2026 00:54:41 +0100

Content-Type: text/html

From: Dragonfly

To: doctor@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <422e78b4-c233-8bf0-6bb1-851aa796b844@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:39 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 17:56:00 -0600

Received: from us19.acugis-dns.com ([152.53.80.197]:59836)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgn-00000000FX8-2cv4

for dave@nl2k.ab.ca;

Tue, 10 Nov 2026 17:55:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=yywKF7aneKfM6raLIoH75//0Mr

DuA8ncGabG2bPetOMmJPAYsc9F8Tla32kgeuGTcYqwnk+9kJIxI0wL76ViGg+Mb4PHT8cx3HCVs3r

QjegwtU0EPQfZ4uG9ZZaYOTF3tm5llaPLULbrk1dwJsDptX1x94kbw9l7WYPUPY98JaXcPBbSBSvl

oEg7wFi7Am5jm6euRs87NSZAd3pusHw7LJ78dLUrf7Hmz+5W0iev1qb6dheuMpbCtup0cZgM/QSKv

11ZKaUIRVeWkYkVV/cqtQqcjh+PucQQYlj2avreP7ecJxNzQR30tXtalMU7FhtpgSEb5SwJ5TYtfI

VCAdaFuQ==;

Received: from [160.179.183.202] (port=51954 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfl-0000000GkqP-1Tqr

for dave@nl2k.ab.ca;

Wed, 11 Nov 2026 00:54:40 +0100

Content-Type: text/html

From: Dragonfly

To: dave@nl2k.ab.ca

Subject: Dragonfly Delivery Notification

Message-ID: <4c2daa55-ab2b-c955-062e-0834ea74ca11@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:38 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 10 Nov 2026 17:56:00 -0600

Received: from us19.acugis-dns.com ([152.53.80.197]:59820)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgf-00000000FX1-2DfL

for dave@nk.ca;

Tue, 10 Nov 2026 17:55:44 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=KVY/rOVpgTFlWelAcPKqCRBC4+

A4d1iNbKAHu61VpKvmebROXUSREbam56GtvE8+f+O3wpPG+Ug9AYpYSvWnWIH2PUmpHA28HwSofiy

UVv5kh6aLlNhT6BkVY+6WqZlWLeA40NcnX27ELxOe3HiTSfJI6AwYer+RrbJP6De3itCD5t2U8/Hc

FoLha0aoxa2Q8e4SiX7VM0JNB/YQFk+p9DbUdZwc2wy/Wan6UYY3Z2slqYIT1xMCo1g4owIQnQ20r

VRpqKFqW3rlqynms4ceP40wotjypNEcOUJr11gfjxIxDsVNZv3bi6rbp3udc/o+HGOclh3cZiOtcg

vpzH3YGg==;

Received: from [160.179.183.202] (port=51951 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfk-0000000GkpH-0LuD

for dave@nk.ca;

Wed, 11 Nov 2026 00:54:39 +0100

Content-Type: text/html

From: Dragonfly

To: dave@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <8bbcec54-ac4d-efb8-d180-72932946cd97@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:37 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 21:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQz5Z-00000000OIq-0omP

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 21:33:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 21:33:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:59810)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgm-00000000FWz-0MFo

for root@nk.ca;

Tue, 10 Nov 2026 17:55:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=r8GymFOkYR3eVyjVNblHoXYpmc

17b6c8RmKNOuTvoCoseJdFgDx4hUroOJA+aj4wLAyCaM0Kqio/imhBCRrtN9CN49RRVKC5FCz2uFR

SzJyR3RRNd/xLvZPINTL4uF8TTl//P58qtWUpnPZCYIZch/PIhXPYI2l/UWPyOZRLgHpZY5fVNmMA

mITu5rl9sYzc6cIiLDCtYASunWxW+C5HSr5b674PFOhk9g/jkwhHsPZYo6gXAnl0OAnFc+L95b7sb

szZltJMPtAR1hPi5p2b9kFYzImD8DJF1z3y22PWHuYKyGPy78SO19/3wN40zzGftLgxaSPFDBkzXh

IMgXJRhQ==;

Received: from [160.179.183.202] (port=51947 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfk-0000000GkpE-0EXQ

for root@nk.ca;

Wed, 11 Nov 2026 00:54:39 +0100

Content-Type: text/html

From: Dragonfly

To: root@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <45a7ae55-5e84-75d8-1b93-7bd3ec4feba1@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:37 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 17:56:00 -0600

Received: from us19.acugis-dns.com ([152.53.80.197]:57022)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgi-00000000FWc-3m4D

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 17:55:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=rfvJSXpi2x/Fv2693QJvuFpk98

ZqzoAOcGroJfgq1pSxckGPS/BBXiItC6HU+jZ1sh1nzV0wBxzI4zSNSnIkZTrKT6yr8gjwo2JOLfd

Xp4prbaXbJ0n9QGSAdUbFLKYGe+zQf59PpcZNb9Rbz3XSE8mK1neq7PJvBqXoYvBC0EHvFbW04MRR

JexWpBwnPUHfPgGAv3pSIrjIrsa//oXVmjiKtHy/fzs5tXV56OVSlT9BTvcUYx4fE+0prBEbCh97K

PxDeThuMIxas9NHLZTz+FDLbGt1X+EvHICgnq1F459jJafUORE628D/ZFtMl/fqr5RXuFv4rDJ7rk

04vZIu5Q==;

Received: from [160.179.183.202] (port=51928 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfg-0000000Gkmi-0yEl

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 00:54:35 +0100

Content-Type: text/html

From: Dragonfly

To: dave@doctor.nl2k.ab.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:33 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 21:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQz5M-00000000OHg-0qsu

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 21:33:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 21:33:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:57032)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgi-00000000FWe-3YAk

for doctor@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 17:55:48 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=d0xITNd0mkbZJOeSNJM35/TYB/

tpBW/VVueQ5O+6u43kZL3xl/b03jR1FOCVbAnh+KuwHR0MBhb16jYAd0iKvJrvZ+yz/uz/qNvfqUv

gPX1PABR027yx4Q8LCRbX9Xl8nrZ/emcvJpg4RjbPSHWK3QTFD9f+GaHSHYFsiG03yh0EaVtk4Rf2

nm0+VXVSpow2Hrua2BH2q2iM27QNE5mDLynaBKtZ7E9QZVDUkh3vKI+n76KV9akqEDnnhHpehndNa

9t1kHFSD9pNTiac01kWuaJIuz9yt5O3G3mX1Dv0OhnCd3xbCd1g6pcEuAWryvUCCr7aIFZT8P1Ydq

E0OrX+4A==;

Received: from [160.179.183.202] (port=51927 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfg-0000000Gkmm-141d

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 00:54:35 +0100

Content-Type: text/html

From: Dragonfly

To: doctor@doctor.nl2k.ab.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:33 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 07:29:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQluN-00000000ObP-0wsL

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 07:29:07 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 07:29:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013077.outbound.protection.outlook.com ([52.103.74.77]:5401 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQk07-000000000PL-0ysK

for sales@nk.ca;

Tue, 10 Nov 2026 05:26:59 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=qVDsI220IIkdrPIEqJUgaM68InlZsgyIsmkVDc17BTzjCcAmz3JBT4M9klUiODIujLj9Ry4sTKuT7VArz2EuWo7gt+HBP5EbmohUhzIe7C7uH4U7E2/Ju+L11qepv8iEx/adLFjzjHaAh62F3fWChnuAFaHxNIkEc1djBC0v2Ebl3gxA0J4cGBwf59hHn+CjeVKCNAhBk444xpJC6Ibq8mb/7lJU+l0gysOPw437QPhrpb9EwNg4yxLxRH98CKNREfQsylkG3UzY62Y92aXHU4T3g+BHJFcfIKpDGvfan4BSeQAI5IM6Nii1KH54PUB2Ax30PceGAjsVKeXg8tm9Lg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=L26LYtdLvpKY99ojKt5c/EhB7yjAbyRso5Q/BLaTqes=;

b=Gv6M9hb2Vgpc/t5y42+aVDU4hECygXbM4DPPo/KRPbpATkV/OGoKFHtUM/evfxvTJDr1REa5LoitTeFbRMydqHUissBG05QcWfmJ2g2Oby0At9GufozBqeQfQGYireqbi8C98u/KaNFne/CuQTI/j1mjUaj/UUIbV+99mrMND9wJw/TkcdjUobgmiTUd4y0zYwVlIFLdiAo8r+RNEafN7aGbXf300CrgdrVRXkwAozEsh7k1SiB7m5pPYz3x8QNyUOlK9Ex/ueS5eKYUm94ex8bgXBGPCY/U5x5cBxBXoLPpktNsE2JVsFiW/PVg3XW78w+sYfEt0L6xH1UVyNMK0Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=L26LYtdLvpKY99ojKt5c/EhB7yjAbyRso5Q/BLaTqes=;

b=dd3mseL9yHKA3CSTIapTuFElQmDEsY20FxsIwgX0/rGmUFz+7OGAVbOVq6CSZnWg7vhG/a7IVyFO5ISyM8GelF6qIYBka36NV7ckiIJArTe5o6U0XBfoSt0xe+V4/k9j2aG6O8WFX4kHf6zBqGmYKcLHtE0kCktcud0jpHVq3al4YCcJ7y/2xYdXX6PGYhWsas4VPKc68NAzPcTYvGAasyJ4vhEg9ys0gqZytkFThuPWPAFlxXRCsbN0Ix43g2Yq5+Bek+zJFAPN5fy/bG/2dfAbR+lSZuFcPKgGKnlaVmGdTpYp9UI17hMPOQAsU112wq6CfgmC3K/eKyQUxYi5EQ==

Received: from SI2PR04MB4731.apcprd04.prod.outlook.com (2603:1096:4:127::5) by

TYZPR04MB6788.apcprd04.prod.outlook.com (2603:1096:400:341::9) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.21.592.13; Tue, 10 Nov 2026 11:25:26 +0000

Received: from SI2PR04MB4731.apcprd04.prod.outlook.com

([fe80::736e:82d3:f5e1:8a2d]) by SI2PR04MB4731.apcprd04.prod.outlook.com

([fe80::736e:82d3:f5e1:8a2d%5]) with mapi id 15.21.0592.012; Tue, 10 Nov 2026

11:25:26 +0000

From: Harvey Kitelinger

Subject: Re: Few Details

Thread-Topic: Few Details

Thread-Index: AQHdbGMmbAiUNHk930ihSOavTvRNwbcfIVw6gAHl8aKABiwzzw==

Date: Tue, 10 Nov 2026 11:25:26 +0000

Message-ID:



References:







In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR04MB4731:EE_|TYZPR04MB6788:EE_

x-ms-office365-filtering-correlation-id: de9d733b-1462-4b20-1b44-08df3f1d5190

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|20031999006|15030799006|24071999003|39105399006|31061999003|37011999003|8062599012|55001999006|16051099003|19110799012|8060799015|4140399003|24021099003|25010399006|440099028|3412199025|102099032|261005200801699003|261007181701699018|11120399003|260806224601699006|51015399003|40105399003;

x-microsoft-antispam-message-info:

=?us-ascii?Q?WZkkCa1Ah11PQo5QrnTt2QsWByvqdaXqXuPOEaNipClvtOXnB9FMf7Puo7Vt?=

=?us-ascii?Q?9EXJV3LO0NOJ5hdUjJZhqEX+dUKFXKtM7Flcew1EH1+Sa072UPeG3AGjm2bp?=

=?us-ascii?Q?DLTOPLqd+yq7DDARjbxDLTsg9tXxz2duybwIHhx8rIrnPNEmuR+s8rwONEdT?=

=?us-ascii?Q?bX2OFMmFLwodxV9lr0PdtTdxOZdF/TfaeK9ZbaniH6+fqIsh5bq4MMV1GGDm?=

=?us-ascii?Q?34N5ZQf7WMd82fnFj6g3bT+kmdmY/PFik4aZZxx3lkemtWJlTLZfn7qhxoPd?=

=?us-ascii?Q?167Mkqb1Kd1kc3ZdedMg/1s3elm+HBCl6B0D3jlc2y0V/kHWX+JPqT/qDLeD?=

=?us-ascii?Q?UhHE9U1nAbNjNU1T66YpWd/e9dq518hDSQVs/zCi/RNVF3/91lMXcZzcIpoF?=

=?us-ascii?Q?24OePuPxOmx5qMI4jpT7wORG72VhX1UwvdG4tFSdzaYIIa5oqNDpbs4snuPR?=

=?us-ascii?Q?x3vCNYfcRWGwv9sN04z4+2VLl9y2cfJ3gXoQbjP6GwE4LhslrF7Pv+40BTR1?=

=?us-ascii?Q?WUM9/7N7ZAnbcw1CS/x9LJtC9eHeIvpE/7uyks0WjsTCBboRMbNpXJsNYJKX?=

=?us-ascii?Q?j086VmYUIyvKl4eub4NIn7oi0JlyoaS12tLQfQ+KIDSLOPjvwqTfIdqtzFgr?=

=?us-ascii?Q?kcJEghqxwkErJqayDSGOSyzMSQlOYAaZfuYtgQBWbPy/dd6XTkXCI8ryLtLO?=

=?us-ascii?Q?Yr/CQCaZpggFbE0A9BFoRMMVSreQgoUEYtN0GwAoiqE6JY/HqsYzqbXV/cGu?=

=?us-ascii?Q?n81CwIYo+kiuSUPB0Phts6pCgbaU7MphclNyWQfxdxwvajsRhmFN9gYXLEea?=

=?us-ascii?Q?jETg9gXV45u+Wi0H9VZVTkLmJt32P8I0leDfFcZ/EQypdXxRMcHQwNIiBX0R?=

=?us-ascii?Q?LNr/Ymx88dpUQ8aeqGvK+cNwbxQRdr/vc91ZHeuyjfsxabXumeO3fJVh22yG?=

=?us-ascii?Q?GJ5CHyDyJf1xFIiIGrn+83DnjjJQL8v4gqDzaZggF2hoyIyeU7o99+xEhdJj?=

=?us-ascii?Q?NtJUpkM5nQWf5rvrxiBn4lXMtX5iJhi+HCzI2wfdp8mtueBr0nrbJLa3DhZR?=

=?us-ascii?Q?0xBNAaAHPXBgnB0EUGBudsVABQfSfvkzR6EXGz0ty4k+6DjOT0wGfiRNtLEM?=

=?us-ascii?Q?mlyUmskWp4Zz44oS2kaPNgOFvFoXUG46NeHt0LSapbE/5LPsEZf233ma9MgP?=

=?us-ascii?Q?JsbU0owPlohkl1cJmYyhLnwQ1Y2/NDNlQZuGYnTKSEdKgULDjdiePW5c6RGd?=

=?us-ascii?Q?wOzM7E5qvGpBUwNXodmA?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?rIly8KvtLvyFJbiPWBQNSS/AjU+wZohT/FsZJ9ElvmAXjEttyLKMlDYleqan?=

=?us-ascii?Q?4T3aUA9373W5Mh6HotQ7/zIgrEps33PLJkllWVdC5rzri2/BA5e7GsETa4O2?=

=?us-ascii?Q?3Zm1DvAI6B0jCkzOpPLxGPEHZ52quuGLJ48Y427xkumxohQ2jv34o6gMF6if?=

=?us-ascii?Q?0MEnCcjacEDs5+JUcXS7sBU+VAQNUfgzNkpUIFTVp0cjoa/9V9Eozuj6C9ot?=

=?us-ascii?Q?nbn6x9DzteNPAzdFsKou2bOeffgsHX32NeZOMnSD26Loq6cyJvQT3lX9pxN9?=

=?us-ascii?Q?7ieoUgcw5FEeYaR4VSz2Qc/JVWvTw6D1QBqNacYbsoS95QQ2mYia0DbF3GfE?=

=?us-ascii?Q?+YEEI/ctq4E78F158ibrm78giM973FZOEhwbtaehKi4gqOVqSDdlhwZJZlqb?=

=?us-ascii?Q?dmXdrlI09jsws5wmJ/IMFTQm/HlQsETY5726VHVyF2McoKE61eVNU52t2S5H?=

=?us-ascii?Q?wk1c+NCkAY3fCHugN1tsBzX6C5QdNGFZF0hYuJlgNMItdWKuiopcqCM67cWl?=

=?us-ascii?Q?h3vJPWujVsDmIZMj7sI1SzZTRyqE39cADMo/qEZNONqk05ID0QRCo6LeqCkT?=

=?us-ascii?Q?nhwaX+AF0/Y8j7oaggBrO7eun3TcV5GYyRghwA3x5E6gtrMCF0Ld9XA8GEPt?=

=?us-ascii?Q?8ifm13yv/exB4X6Oke7iIWETd8KtcZ9Josj4kZs6NnVsQjzSS4+rKlkOpBDT?=

=?us-ascii?Q?kk8WJ23bHvTxgIBNPpZ2bDPIX1tbhtSLEKVw8C9NCe4U2Ogupi9mtgBnnSRj?=

=?us-ascii?Q?DnjpFyWttqNc2K7wTRRoJqxyjmGkUO0FsuV//94lWVCte4p20BgRoQ/KJJRw?=

=?us-ascii?Q?ZDco43dfowDtPzhy0Ghs652juf+NoxhKLgKf0iGQ+3b7uYG+w7oDphH78y3o?=

=?us-ascii?Q?Ucn7hvQJVvNCVs4RIGjBavuRXQK6t8VPwFofBJmqsuXIUAbHCwZ6UVVczyfE?=

=?us-ascii?Q?dXzOda6I14pogSNIenEAYeQWYdA0qi2I1XHV0xL0IIBxgavn7VY4uPRb7A5Q?=

=?us-ascii?Q?jntCsGEvObwEpoRwc58zmRQMWXsXx9oPXs5WbfVdnhBbmlXMsrTS84B+zrAX?=

=?us-ascii?Q?NwLmTKwy2y2aHlNWPfYXuWf/Jii6vpXqtLj7v0cqiX8Gd+ZmWaOqV18ieQXP?=

=?us-ascii?Q?Mq94pJkhw89QFnAIpZiBNltTLrh6V+cFo31lLc9l6OfeB6eB3sYgncbc6eCz?=

=?us-ascii?Q?wiHcYQoL3c8Rma6ylaGcYOesd6oT5jxVmkmJxRgx1gIDPSi8L+g0NzIzWe4a?=

=?us-ascii?Q?kHlKbP+QX87OV3Bb4R5IxMU836x/EzcCQC36aViyAbNoFBsY8IJSKKvOYfj1?=

=?us-ascii?Q?L1ODFeSYB2DZi2yoc20TAIHm8pFZo4lxoQnK8lztjYHd0JrUsz//zPp1ls2d?=

=?us-ascii?Q?Zpn0GF74bmEWBYFE9ATCze+qXbdcCo/1xI/mdvEK0Y6ER2dBLA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR04MB4731.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: de9d733b-1462-4b20-1b44-08df3f1d5190

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Nov 2026 11:25:26.4890

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB6788



--_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello,

Would you still be interested in hearing how I could help improve your webs=

ite's Google ranking?



________________________________

From: Harvey Kitelinger

Sent: Friday, November 6, 2026 1:09 PM

Subject: Re: Few Details



Would you mind letting me know if you'd like to hear more about my earlier =

message?



________________________________

From: Harvey Kitelinger

Sent: Thursday, November 5, 2026 8:10 AM

Subject: Re: Few Details



Hello,

Would it be helpful to see the recommendations behind my suggestion?

Thanks,



________________________________

From: Harvey Kitelinger

Sent: Wednesday, November 4, 2026 1:49 PM

Subject: Few Details



Hello,

I noticed that your website may not be making the most of the ways people d=

iscover businesses online, including Google and AI platforms like ChatGPT, =

Claude and Gemini.

Shall I share a few ideas?

Best,





--_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hello,



font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Would you still be interested in hearing how I could help improve your webs=

ite's Google ranking?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Harvey Kitelinger <=

;Harvey.Kitelinger@outlook.com>


Sent: Friday, November 6, 2026 1:09 PM


Subject: Re: Few Details

 









font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica=

,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Would you mind letting me know if you'd like to hear more about my earlier =

message?



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">











color=3D"#000000" style=3D"font-size:11pt">From: Harvey Kitelinger &=

lt;Harvey.Kitelinger@outlook.com>


Sent: Thursday, November 5, 2026 8:10 AM


Subject: Re: Few Details

 









m; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helveti=

ca,sans-serif; font-size:12pt; color:rgb(102,102,102)">

Hello,



m; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helveti=

ca,sans-serif; font-size:12pt; color:rgb(102,102,102)">

Would it be helpful to see the recommendations behind my suggestion?=




m; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helveti=

ca,sans-serif; font-size:12pt; color:rgb(102,102,102)">

Thanks,



Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=

r:rgb(0,0,0)">











" color=3D"#000000" style=3D"font-size:11pt">From: Harvey Kitelinger=




Sent: Wednesday, November 4, 2026 1:49 PM


Subject: Few Details

 









1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hello,



1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

I noticed that your website may not be making the most of the ways people d=

iscover businesses online, including Google and AI platforms like ChatGPT, =

Claude and Gemini.



1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Shall I share a few ideas?



1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Best,



edFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; co=

lor:rgb(0,0,0)">


















--_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 07:28:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQltc-00000000OXR-3qVq

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 07:28:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 07:28:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.75.189] (port=36245 helo=mta75-189.mmglsmd.net)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQi6g-00000000ENQ-3eax

for root@nk.ca;

Tue, 10 Nov 2026 03:25:36 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1794302672; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : list-unsubscribe : subject : from : date;

bh=wR8hQeolvQYnb4u9wVE+jwZ6V9ZXxmFnnRzOFCS3RZY=;

b=XFqPlq/klvkcmE/9WAkbMPAUGaHyt+vaUp8W0naFadGMapQ3cFbva0O0

Jo9JYbNY5crZDs/y5EBvV+3sA6EJ8MoplxOvL7xrnOSSLOKpLJnE828K4V

vnsd3yINObPAJMeFwjVZ5K2FYygiXiZ4H0BgRQBr1z8FuJhXtGDTQfe7Q=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id KhBlXAgCiyVP

for ; Tue, 10 Nov 2026 17:13:00 +0800

Content-Type: multipart/mixed; boundary="===============1768781589010434004=="

MIME-Version: 1.0

Message-Id: <20261110171300.93117-{13453:20261110170236-13453-39}-0092902@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?b?UmU6QVBJL1NHUy9JU0/CoENlcnRpZmllZMKgU3RlZWzCoHBpcGVzwqBhbmQ=?=

=?utf-8?b?wqBmaXR0aW5nczs=?=

From: Sophia-Threewaysteel

To: "www.nk.ca"

Date: Tue, 10 Nov 2026 17:13:00 +0800

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Mail-ID: 6af2ddecd1fe1c5a7761f93a

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, Good day !



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

[160.124.75.189 listed in dnsbl.ahbl.org]

[160.124.75.189 listed in dnsbl.ahbl.org]

[160.124.75.189 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.124.75.189 listed in bl.score.senderscore.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: threeway-pipe.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: hn.threeway-pipe.com]

[URI: count.threeway-pipe.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?b?UmU6QVBJL1NHUy9JU0/CoENlcnRpZmllZMKgU3RlZWzCoHBpcGVzwqBhbmQ=?=

=?utf-8?b?wqBmaXR0aW5nczs=?=







Dear Purchasing Manager,



Good day !



I hope this email finds you well.



This is Sophia from Threeway Steel. With 33 years of history in the steel pipe industry, we have established ourselves as a highly reliable partner for the Oil & Gas, Offshore, and Construction sectors.



To give you a quick background, we are proud to have been a trusted supplier to some of the world's most demanding energy companies, including ADNOC, Shell, Petronas (Malaysia Oil), and Pemex.



Our expertise lies in manufacturing and supplying high-quality pipelines that strictly meet international standards. Recent project examples include:



API 5L Gr. X65 PSL2 Line Pipes for a project in Nigeria.



3PE Coated API 5L X42 PSL2 for Chile.



Yellow Jacket Insulated Line Pipes for Peru.



Large Diameter SSAW & LSAW Pipes for Saudi Arabia and Canada.



Because we have successfully passed the strict audits of companies like Shell and ADNOC, you can rest assured of our quality control and material traceability.



Could you please share if you have any current or upcoming piping requirements? I would be more than happy to provide our latest catalog or a competitive quotation for your project.



Looking forward to hearing from you.





Best regards,

Sophia

THREEWAY STEEL CO.,LTD



Add: Hunan steel Industrial Zone, No 9 Xiangfu Road, Hunan,Changsha, China

Tel: +86-13574889509(direct line) | Fax: +86-731-88678578

Web: www.threewaysteel.com

Email: sophia@threewaysteel.com

Skype: zeng.sophia1 | whatsapp : +86 13544036536



P Please consider the environment before printing this e-mail

mailing list phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 07:27:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQlsb-00000000NED-3Nr4

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 07:27:17 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 07:27:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.freebsd.org ([96.47.72.81]:29297)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQflg-00000000NLm-0kgr

for doctor@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:55:48 -0600

Received: from mx1.freebsd.org (mx1.freebsd.org [96.47.72.80])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519)

(No client certificate requested)

by mx2.freebsd.org (Postfix) with ESMTPS id 4jNy7r3Dqfz3Qqm

for ; Tue, 10 Nov 2026 06:54:48 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8594-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jNy7r1Cv7z3QRB

for ; Tue, 10 Nov 2026 06:54:48 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8594-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim;

t=1794293688; h=from:from:sender:sender:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post;

bh=iQwqEpbdMzlm/J4JAYqiLj/zhFUEHIw0cxPAF4p0tbA=;

b=MlgVpYI8wg6SKecmfZp9S18mZ1Mf5+nBp3qI5PDVwDgU9D5PvA69S7Cfd3p6CaaDB2S9A8

kSFRFnQ26AhHwvJpDnUxU3hcTsLutu/WNZuKD0l1IIVWK2EYF/38L4FlHs4x/54V9VDI+e

za44ZMklNN8knCrs70nUPcKqBBOv9ZzfV2p9e2LdSNqQG2+X+4OTgs7sNrqaLQ8Z5vxpzH

vO7UjB2Z6q0Nr3g0Q+7110tj9xp80blwOB3kHBzMazY32vaN/zEUiJscZatz3vR3EZh1qZ

h2zLU6Tb8ucLUCtEVwWbypP9zuj2kuP7lHq2NaizQtDK2YbhtufBpeF9iNxePA==

ARC-Seal: i=1; a=rsa-sha256; d=freebsd.org; s=dkim; cv=none; t=1794293688;

b=ZfcxwZwqwldTkWYPNOJnwIUe+QsW8VmdN+/fsJr4ejVwsHqFsPbiQWE/0w4dEtFNXCwho3

oMoO5FIzM+zJENzGz5Ie+O8gJbmCZyE7DWGUbCHpZ8zHj5mse/5CmfYzbi0dAzKcvjnR4w

FpUMvlKDQzFexuB0ivzhUUWvuJeidg9LWqSCgP0V5+upfNbjqmcgZBY2YCc8MXL2oUJAD4

8gCRrpJ02pasxodzxOnTYVUAEdbQ3ietDtSJDH8lBE8eSGn/Z6uJBb2MgEWBwhQRDc35BF

5Hwb6PWNYmMFK6B+CCS/IZNvO+k8nDTqHDhrwLGdbQIFv6Dlf+0qM/TOyPbSig==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;

s=dkim; t=1794293688;

h=from:from:sender:sender:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post;

bh=iQwqEpbdMzlm/J4JAYqiLj/zhFUEHIw0cxPAF4p0tbA=;

b=QfCkFG3HO2IY8+RtLD7NV4ztO4SYxij/QU/g4zqovGqWwdJKcQ07iN4aUd4X4eKPTJPO1h

meoMwclYr3bNwWfTfbj1f+N/Pl4/C3Ua9Lt99zhw0pbBM8FSpqs2/9kiwQujJu9jio7AYt

MR5118t3GrAJXEEyUJF6UsBpIaxiWuYnaKo+PL00NH2ZmqYJymXiJBp+T1bH3djFq2xk1l

s5jR1glip7rgxRlGTmzBBAsBuS9W8Kfa7ksMP3J+d21b9B2sn4hTkEdjI6DSNTMUMYYSSF

jlsp0Md4a0ZpJxf6jUzmYiD2iRtzojUIDKj+NWhYfIynHtTiRHzjPYjAW5yROQ==

ARC-Authentication-Results: i=1;

mx1.freebsd.org;

dkim=none;

dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=freebsd.org (policy=none);

spf=pass (mx1.freebsd.org: domain of info@zh-live-wellbet.com designates 212.86.125.173 as permitted sender) smtp.mailfrom=info@zh-live-wellbet.com

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jNy7D6LKlz6xqwc;

Tue, 10 Nov 2026 06:54:16 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8594@FreeBSD.org)

X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org

Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jNy7C08d2z6xqwZ

for ; Tue, 10 Nov 2026 06:54:15 +0000 (UTC)

(envelope-from info@zh-live-wellbet.com)

Received: from mail.zh-live-wellbet.com (mail.zh-live-wellbet.com [212.86.125.173])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA512)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jNy7B5n9gz3Pf5

for ; Tue, 10 Nov 2026 06:54:14 +0000 (UTC)

(envelope-from info@zh-live-wellbet.com)

Authentication-Results: mx1.freebsd.org;

dkim=none;

dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=freebsd.org (policy=none);

spf=pass (mx1.freebsd.org: domain of info@zh-live-wellbet.com designates 212.86.125.173 as permitted sender) smtp.mailfrom=info@zh-live-wellbet.com

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50IjoiZnJlZWJzZC1xdWVzdGlvbnNAZnJlZWJzZC5vcmc

ifQ==

Received: from [94.154.32.81] (::ffff:94.154.32.81)

by mail.zh-live-wellbet.com (KumoMTA ::ffff:212.86.125.173)

with ESMTPSA (TLSv1_3:TLS13_AES_256_GCM_SHA384) id 8a8bd45cdcd311f1af73bc2411dfa1c2 for ;

Tue, 10 Nov 2026 06:54:14 +0000

From: Freebsd

To: freebsd-questions@freebsd.org

Subject: Security alert: A new untrusted device added to your Email account

Date: 9 Nov 2026 22:54:20 -0800

Message-ID: <20261109225420.3BA6DD847D887195@freebsd.org>

List-Archive: https://lists.freebsd.org/archives/freebsd-questions

X-BeenThere: freebsd-questions@freebsd.org

Sender: owner-freebsd-questions@FreeBSD.org

List-Id: User questions

List-Post:

List-Help:

List-Subscribe:

List-Unsubscribe:

List-Owner:

Precedence: list

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Rspamd-Queue-Id: 4jNy7B5n9gz3Pf5

X-Spamd-Bar: +

X-Spamd-Result: default: False [1.55 / 15.00];

R_NO_SPACE_IN_FROM(1.00)[];

FORGED_SENDER(0.30)[no-reply@freebsd.org,info@zh-live-wellbet.com];

MIME_HTML_ONLY(0.20)[];

R_SPF_ALLOW(-0.20)[+a:c];

DMARC_POLICY_SOFTFAIL(0.10)[freebsd.org : SPF not aligned (relaxed), No valid DKIM,none];

ZERO_FONT(0.10)[1];

MANY_INVISIBLE_PARTS(0.05)[1];

RCVD_VIA_SMTP_AUTH(0.00)[];

MIME_TRACE(0.00)[0:~];

RCVD_COUNT_ONE(0.00)[1];

ARC_NA(0.00)[];

MISSING_XM_UA(0.00)[];

ASN(0.00)[asn:43641, ipnet:212.86.125.0/24, country:PL];

MID_RHS_MATCH_FROM(0.00)[];

RCPT_COUNT_ONE(0.00)[1];

TO_DN_NONE(0.00)[];

FROM_NEQ_ENVFROM(0.00)[no-reply@freebsd.org,info@zh-live-wellbet.com];

FROM_HAS_DN(0.00)[];

TO_DOM_EQ_FROM_DOM(0.00)[];

TO_MATCH_ENVRCPT_ALL(0.00)[];

MLMMJ_DEST(0.00)[freebsd-questions@freebsd.org];

PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org];

R_DKIM_NA(0.00)[];

RCVD_TLS_ALL(0.00)[]

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: freebsd-questions@freebsd.org A new untrusted device was

added to your email account If this was you, no action is needed. If you don't

recognize this activity, review your devices and secure your account now.

Device Electron on Windows · Frederick Location Frederick, Maryland, US IP

[...]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[96.47.72.81 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[94.154.32.81 listed in sbl-xbl.spamhaus.org]

[212.86.125.173 listed in sbl-xbl.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[94.154.32.81 listed in zen.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[212.86.125.173 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[96.47.72.81 listed in bl.score.senderscore.com]

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Security alert: A new untrusted device added to your Email account














us: 20px; border: 0.5px solid rgba(135, 134, 127, 0.25); border-image: none=

; text-align: center; color: rgb(34, 34, 34); text-transform: none; text-in=

dent: 0px; letter-spacing: normal; font-family: Arial, Helvetica, sans-seri=

f; font-size: 0px; font-style: normal; font-weight: 400; word-spacing: 0px;=

white-space: normal; max-width: 592px; orphans: 2; widows: 2; font-variant=

-ligatures: normal; font-variant-caps: normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=

coration-style: initial; text-decoration-color: initial;">
enter" role=3D"presentation" style=3D"border-radius: 20px; width: 589.33px;=

border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpadding=3D"=

0">

lapse: collapse; direction: ltr;">


33px; text-align: left; vertical-align: top; display: inline-block; directi=

on: ltr; max-width: 100%;">
e=3D"vertical-align: top; border-collapse: collapse;" border=3D"0" cellspac=

ing=3D"0" cellpadding=3D"0">



=


: 0px; padding: 36px 25px 10px; border-collapse: collapse;">


cing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
style=3D"margin: 0px; width: 128px; border-collapse: collapse;">
e=3D"font-weight: bolder; box-sizing: border-box;">
b(249, 83, 22); box-sizing: border-box;">freebsd-questions=

@freebsd.org

llapse: collapse;">

; line-height: 34px; font-family: Helvetica, sans-serif; font-size: 28px; f=

ont-weight: bold;">A new untrusted device was added to your email acco=

unt

px 25px 18px; border-collapse: collapse;">


; font-family: Helvetica, sans-serif; font-size: 16px;">If this was you, no=

action is needed. If you don't recognize this activity, review your device=

s and secure your account now.

=3D"margin: 0px; padding: 4px 25px; border-collapse: collapse;">


1); line-height: 24px; font-family: Helvetica, sans-serif; font-size: 15px;=

border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpadding=3D"=

0">


13, 99); white-space: nowrap; border-collapse: collapse;">Device
yle=3D"margin: 0px; padding: 6px 0px; text-align: right; border-collapse: c=

ollapse;">Electron on Windows · Frederick

-space: nowrap; border-collapse: collapse;">Location
n: 0px; padding: 6px 0px; text-align: right; border-collapse: collapse;">Fr=

ederick, Maryland, US

px; color: rgb(115, 113, 99); white-space: nowrap; border-collapse: collaps=

e;">IP address
right; border-collapse: collapse;">

2601:147:4c00:7a20:5cbc:1d86:76a:75e7

: 0px; padding: 6px 0px; color: rgb(115, 113, 99); white-space: nowrap; bor=

der-collapse: collapse;">When
x; text-align: right; border-collapse: collapse;">11/9/2026 10:54:20 p.m.
td>

0px; padding: 24px 25px; border-collapse: collapse;">


er=3D"0" cellspacing=3D"0" cellpadding=3D"0">


" role=3D"presentation" valign=3D"middle" style=3D"background: rgb(0, 0, 0)=

; margin: 0px; border-radius: 12px; border: currentColor; border-image: non=

e; border-collapse: collapse;" bgcolor=3D"#000000">


olor: rgb(255, 255, 255); line-height: 15.6px; font-family: Helvetica, sans=

-serif; font-size: 13px; display: inline-block;">


18px; text-decoration: none; display: inline-block;" href=3D"https://track=

ingservice.monday.com/tracker/link?token=3DeyJhbGciOiJIUzI1NiIsInR5cCI6IkpX=

VCJ9.eyJvcmlnaW5hbFVybCI6Imh0dHBzOi8vY291cmFnZW91cy1jeWFuLW1tM2dlc2JxLmVkZ2=

VvbmUuZGV2IiwiZW1haWxJZCI6ImNjMDFkNDQzLWFkYmItNGYwYi05ODMxLTQ2MzY2NjdhMDhlZ=

iIsImlhdCI6MTc5MzA5Njg5Nn0.aFRqNspxugjxQzTKcbcPpmKt7wg6WzQ95vCCPFhYWZY&=

r=3Deuc1#freebsd-questions@freebsd.org" target=3D"_blank">

Manage your devices

: collapse;">

ne-height: 22px; font-family: Arial; font-size: 14px;">You're receiving thi=

s email because a new untrusted device was added to your account.
If you=

're experiencing issues, please contact lT Support.



text-transform: none; text-indent: 0px; letter-spacing: normal; font-famil=

y: Arial, Helvetica, sans-serif; font-size: 0px; font-style: normal; font-w=

eight: 400; word-spacing: 0px; white-space: normal; max-width: 592px; orpha=

ns: 2; widows: 2; background-color: rgb(250, 249, 245); font-variant-ligatu=

res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; tex=

t-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">
gn=3D"center" role=3D"presentation" style=3D"width: 592px; border-collapse:=

collapse;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
style=3D"margin: 0px; padding: 20px 0px; border-collapse: collapse; direct=

ion: ltr;">




Guest articling spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 00:22:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQfFv-00000000JBB-0QeV

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:22:55 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 00:22:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from daprose.net ([70.225.174.106]:61307 helo=mail.daprose.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQcta-000000001f6-0NrK

for doctor@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 21:51:44 -0600

DKIM-Signature: v=1; c=relaxed/relaxed; h=mime-version:from:to:date:subject:content-type:content-transfer-encoding:message-id;

d=mybbs.org; s=dkim; a=rsa-sha256;

bh=FvURVymqdDbwsqhgnbBCfPEsyamWsk9KEWfioxsbrCU=;

b=TqXAqK/p3s7Md9FaVrB2SkEByHv1RNGZJA+VKtfIdD35dadKmAn/HpS0hivPERalh

Z2ybq+ymwQtp+ejUVu1usS6uiV1LBPuD+cxRPVq/JEpwsaljUPSpPIL7F/N+xppopvl

2vnKOITxR/9BNfRAcrN9yCtFtojeXwCxl7okEd4=;

Received: from WIN-QVC5523TPPM ([70.225.174.106]) by daprose.net with

MailEnable ESMTPA; Mon, 9 Nov 2026 21:50:37 -0600

MIME-Version: 1.0

From: admin@mybbs.org

To: doctor@doctor.nl2k.ab.ca

Date: 9 Nov 2026 21:50:37 -0600

Subject: Greetings doctor. A friendly salute from the MyBBS.org Administrator

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

Message-ID:

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello doctor, I've visited your website (FRESHPORTS.ORG),

and I would like to ask you to send me any or all of your press releases,

if available, at pressreleases@mybbs.org. Please also add this email address

to yo [...]



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[70.225.174.106 listed in dnsbl.ahbl.org]

[70.225.174.106 listed in dnsbl.ahbl.org]

[70.225.174.106 listed in dnsbl.ahbl.org]

[70.225.174.106 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[70.225.174.106 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[70.225.174.106 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[70.225.174.106 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[70.225.174.106 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[70.225.174.106 listed in bb.barracudacentral.org]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[70.225.174.106 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} Greetings doctor. A friendly salute from the MyBBS.org Administrator







Hello doctor,



I've visited your website (FRESHPORTS.ORG), and I would like to ask you to send me any or all of your press releases, if available, at pressreleases@mybbs.org. Please also add this email address to your distribution list.



When sending your press releases, please ensure that the subject line of your email contains only the words "PRESS RELEASE", this will automatically activate our feeder and publish your press release in the appropriate forum.



If you have products or services to offer, please use the Classifieds section on MyBBS.org or start a new discussion by creating a topic about them.



If you need help or have any questions, please write to support@mybbs.org instead. Alternatively, if you experience any problems with our email system or website, please take a screenshot and email it to us at daprose.usa@gmail.com. We will fix the problem as soon as possible. I thank you in advance for your help and cooperation.



Thanks to the technology implemented on our website, we can certainly help you make your voice heard as widely, clearly, and publicly as possible. There are absolutely no charges to you; our service is 100% FREE..



Cordially,





Peter (Pedro) Jaramillo

Programmer/Analyst

Webmaster/Admin at https://mybbs.org

Phone: +1.713-714-7852



MyBBS.org is a proud iniciative of DAPROSE. A Houston, TX USA based Internet Consulting Company specializing in Server and Workstation Programming and Data Processing Services.





This email, and any files sent with it, are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named recipient, please do not read, print, re-transmit, store, or otherwise use this message. If you received this email in error, please notify the sender immediately and delete all copies from your system.



Unsubscribe: To unsubscribe, send an empty message to subscribers@mybbs.org with the word UNSUBSCRIBE In the subject line.





Este correo electrónico, y todos los archivos adjuntos, son confidenciales y están destinados exclusivamente a la persona o entidad a la que van dirigidos. Si usted no es el destinatario indicado, le rogamos que no lea, imprima, retransmita, almacene, ni utilice de ninguna otra forma este mensaje. Si ha recibido este correo por Error, notifique inmediatamente al remitente y elimine todas las copias de su sistema.



Unsubscribe: Para cancelar su suscripcion, envie un mensaje vacio a subscribers@mybbs.org con la palabra UNSUBSCRIBE en el asunto del mensaje.





DAPROSE, 440 Benmar Dr, Suite 2270, Houston, TX 77060, USA.



This message was sent to you using: MyEmailer3 v.1.0.75

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 00:22:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQfFg-00000000J8h-1gBz

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:22:40 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 00:22:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-139.dm.aliyun.com ([140.205.208.139]:45693)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQcNF-00000000Gh5-16n0

for doctor@nl2k.ab.ca;

Mon, 09 Nov 2026 21:18:20 -0600

X-AliDM-RcptTo: ZG9jdG9yQG5sMmsuYWIuY2E=

Feedback-ID: default:vip@vip.fychem.ltd:alibabak_WebBatch:541082

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.fychem.ltd; s=aliyun-cn-hangzhou;

t=1794280633; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=FKsVbPcWHr8Ciz0/0D65lHWbf63P3ZRUe3waOSAjvPM=;

b=Iy8M01cAGtn5sw7QHyIHAuzDMbI1z93lIMUKiKzrZ5xNxpnacODJJhoz6auwiXr1QVYNhavuiIMkWsEfuukC1aOO1/U/Ch86NQ2i3Fm1xhtJaYqEBT1qAufLC3ev4tBZQpyf0CNUlACAGlMxeugkMJJA2V7ye2vjliKdx4hT7H4=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1794280633; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=FKsVbPcWHr8Ciz0/0D65lHWbf63P3ZRUe3waOSAjvPM=;

b=osb8Rwj4Xn3A4dFuIhIyAyPghddbSjVCLpOfE7vnI0vEJx1ObEso0CrtfB8VY4NhZa73MYhondoYkHh0gInRLB4bS+Ro2h/v/ENz3wec5M6PD0jpINkz6xgqByO/IgdomqQuYUAtD0xb7Ie0Gu3i3lIbXs4FDE6BjGZq6d9RK3Q=

Received: from chitu-hsf(mailfrom:vip@vip.fychem.ltd fp:ma_600000367600596865 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Tue, 10 Nov 2026 11:15:09 +0800

Date: Tue, 10 Nov 2026 11:15:09 +0800

From: "Jeanine"

To:

Reply-To:

Message-ID: <94634417-41c7-42be-97ed-f136a17b0fab@alibaba.com>

Subject: =?UTF-8?B?UkVBQ0gtQ2VydGlmaWVkIENhdXN0aWMgU29kYQ==?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000367600596866

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Cher client, bonjour ! De nombreux clients profitent de la

conjoncture actuelle pour reconstituer leurs stocks. En raison de la récente

baisse du coût des matières premières, les prix de la soude caustique

se situent ac [...]



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

[140.205.208.139 listed in dnsbl.ahbl.org]

[140.205.208.139 listed in dnsbl.ahbl.org]

[140.205.208.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.139 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.139 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)

[140.205.208.139 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.4 SALES_REPLY Your parents named you sales?

2.3 MANGLED_LSBIAN BODY: mangled lesbian(s)

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?UkVBQ0gtQ2VydGlmaWVkIENhdXN0aWMgU29kYQ==?=



Cher client, bonjour !


>De nombreux clients profitent de la c=

onjoncture actuelle pour reconstituer leurs stocks.
34">En raison de la r=C3=A9cente baisse du co=C3=BBt des mati=C3=A8res premi=C3=

=A8res, les prix de la soude caustique se situent actuellement =C3=A0 un nivea=

u tr=C3=A8s attractif et comp=C3=A9titif.


der: none" cellspacing=3D"0" border=3D"1"><=

/tr><=

td style=3D"width: 284px;padding: 0 7px;border-left-width: 1px;border-left-col=

or: windowtext;border-right-width: 1px;border-right-color: windowtext;border-t=

op: none;border-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"t=

op" width=3D"284">

Appare=

nce

=

<=

/tbody>

;padding: 0 7px;border-width: 1px;border-color: windowtext" valign=3D"top" wid=

th=3D"284">

Article
>


lor: windowtext" valign=3D"top" width=3D"284">


libri;font-size:16px">Sp=C3=A9cification


width: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: windowte=

xt;border-right-width: 1px;border-right-color: windowtext;border-top: none;bor=

der-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D=

"284">

Code SH

=


ft-color: windowtext;border-right-width: 1px;border-right-color: windowtext;bo=

rder-top: none;border-bottom-width: 1px;border-bottom-color: windowtext" valig=

n=3D"top" width=3D"284">

=

2815110000


rder-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;bor=

der-right-color: windowtext;border-top: none;border-bottom-width: 1px;border-b=

ottom-color: windowtext" valign=3D"top" width=3D"284">


amily:Calibri;font-size:16px">N=C2=B0 CAS


84px;padding: 0 7px;border-left-width: 1px;border-left-color: windowtext;borde=

r-right-width: 1px;border-right-color: windowtext;border-top: none;border-bott=

om-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D"284">
>1310-73-2


-left-color: windowtext;border-right-width: 1px;border-right-color: windowtext=

;border-top: none;border-bottom-width: 1px;border-bottom-color: windowtext" va=

lign=3D"top" width=3D"284">


x">Puret=C3=A9


left-width: 1px;border-left-color: windowtext;border-right-width: 1px;border-r=

ight-color: windowtext;border-top: none;border-bottom-width: 1px;border-bottom=

-color: windowtext" valign=3D"top" width=3D"284">


:Calibri;font-size:16px">98% / 98.5% / 99%; 32%/ 50%


1px;border-left-color: windowtext;border-right-width: 1px;border-right-color:=

windowtext;border-top: none;border-bottom-width: 1px;border-bottom-color: win=

dowtext" valign=3D"top" width=3D"284">


nt-size:16px">Flocons solides blancs / Perles blanches / Liquide


d>

der-left-color: windowtext;border-right-width: 1px;border-right-color: windowt=

ext;border-top: none;border-bottom-width: 1px;border-bottom-color: windowtext"=

valign=3D"top" width=3D"284">


16px">Conditionnement


border-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;b=

order-right-color: windowtext;border-top: none;border-bottom-width: 1px;border=

-bottom-color: windowtext" valign=3D"top" width=3D"284">


-family:Calibri;font-size:16px">Sac en PP de 25 kg, grand sac (big bag) de 100=

0 kg, conteneur IBC de 1
ont-size:16pxfont-family:Calibri">.
ont-size:16px">5 t (
,94);font-size:16px">avec ou sans palettes)


"width: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: windowt=

ext;border-right-width: 1px;border-right-color: windowtext;border-top: none;bo=

rder-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D=

"284">

Application=


r-left-color: windowtext;border-right-width: 1px;border-right-color: windowtex=

t;border-top: none;border-bottom-width: 1px;border-bottom-color: windowtext" v=

align=3D"top" width=3D"284">


px">=E2=80=A2 Fabrication de PVC


Calibri;font-size:16px"> 


;font-size:16px">=E2=80=A2 Traitement de l
ly:Calibri;font-size:16px">=E2=80=99
font-size:16px">eau


16px"> 

=E2=

=80=A2 Industrie textile


font-size:16px"> 


ze:16px">=E2=80=A2 D=C3=A9sulfuration en m=C3=A9tallurgie


pan style=3D"font-family:Calibri;font-size:16px"> 


le=3D"font-family:Calibri;font-size:16px">=E2=80=A2 Industrie p=C3=A9troc=

himique

 =

=E2=80=A2&nbs=

p;Produits chimiques courants et raffinage p=C3=A9trolier


t-color: windowtext;border-right-width: 1px;border-right-color: windowtext;bor=

der-top: none;border-bottom-width: 1px;border-bottom-color: windowtext" colspa=

n=3D"2" valign=3D"top" width=3D"568">


t-size:16px">Conditionn=C3=A9 avec un film PE interne r=C3=A9sistant =C3=A0 l'=

humidit=C3=A9, palettis=C3=A9 et renforc=C3=A9 par un film =C3=A9tirable pour =

un transport maritime en toute s=C3=A9curit=C3=A9. Documentation compl=C3=A8te=

disponible pour le d=C3=A9douanement : COA, TDS, SDS et certificats
pan style=3D"font-family:Calibri;color:rgb(132,19,32);font-size:16px">REACH
pan>.

Usine : Plus de
n style=3D"color:#ff0000">20 ans d=E2=80=99exp=C3=A9rience en productio=

n

Capacit=C3=A9 mensuelle=

: jusqu=E2=80=99=C3=A0 10 000 tonnes par=

mois


b(95, 73, 122);color:#ffffff">Pourquoi choisir notre soude caustique ?<=

/p>

=E2=9C=85 Prix tr=C3=A8s comp=C3=

=A9titifs gr=C3=A2ce =C3=A0 la baisse r=C3=A9cente du co=C3=BBt des mati=C3=A8=

res premi=C3=A8res

=E2=9C=

=85 Haute puret=C3=A9 constante, avec certificat d=E2=80=99analyse (COA) fourn=

i pour chaque lot

=E2=9C=85=

Contr=C3=B4le rigoureux des impuret=C3=A9s


rap-mode: nowrap;">=E2=9C=85 Approvisionnement direct depuis l=E2=80=99usine ;=

remises suppl=C3=A9mentaires pour les commandes en gros


yle=3D"text-wrap-mode: nowrap;">=E2=9C=85 Emballage renforc=C3=A9 r=C3=A9sista=

nt =C3=A0 l=E2=80=99humidit=C3=A9 (diverses options disponibles)

=

=E2=9C=85
">=C3=89chantillons gratuits (500 g =C3=A0 1000 g) disponibles ; frais =

de transport =C3=A0 la charge du destinataire


r:#e36c09">C'est le moment id=C3=A9al pour passer commande et r=C3=A9duire vos=

co=C3=BBts de production. Veuillez nous indiquer la quantit=C3=A9 souhait=C3=A9=

e, le degr=C3=A9 de puret=C3=A9 ainsi que le type de conditionnement ; nous pr=

=C3=A9parerons rapidement une offre promotionnelle actualis=C3=A9e.
=3D"color: rgb(0, 0, 0);">

<=

span style=3D"color: rgb(0, 0, 0);">


olor:#e36c09">

<=

span style=3D"color:#e36c09">
n>

Dear Client, Good day!=

Many clients are taking advanta=

ge of the current timing to restock. Due to the =

recent drop in raw material costs, caustic soda prices are currently at a very=

attractive and competitive level.


ne" cellspacing=3D"0" border=3D"1">
>

Factory: With
:#c0504d">20+ years of production


-mode: nowrap;">Monthly capacity: up to <=

span style=3D"color:#92cddc">10,000 MT per month


le=3D"text-wrap-mode: nowrap;">


e: nowrap; background-color: rgb(95, 73, 122);color:#ffffff">Why our Caustic S=

oda?

=E2=9C=85Very compet=

itive price due to recent raw material cost drops


text-wrap-mode: nowrap;">=E2=9C=85Stable high purity with batch COA

=

=E2=9C=85Strict impurity control
pan>

=E2=9C=85Factory direct sup=

ply, extra discount for bulk orders


: nowrap;">=E2=9C=85Moisture-proof reinforced packing, various options<=

/p>

=E2=9C=85Free samples available =

within 500g=E2=80=931000g, freight collected


wrap-mode: nowrap;color:#ff0000">It is an ideal timing to place orders and low=

er your production costs. Please share your required quantity, purity grade an=

d packing type, we will prepare the latest promotional quotation promptly.
an>

<=

br/>
jpg" _src=3D"https://i.postimg.cc/w6g9Kscp/REACH-certificate.jpg" referrerpoli=

cy=3D"no-referrer"/>




g: 0 7px;border-width: 1px;border-color: windowtext" valign=3D"top" width=3D"2=

84">

Item


;border-color: windowtext" valign=3D"top" width=3D"284">


-size: 16px;">Specification


padding: 0 7px;border-left-width: 1px;border-left-color: windowtext;border-rig=

ht-width: 1px;border-right-color: windowtext;border-top: none;border-bottom-wi=

dth: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D"284">


n style=3D"font-size: 16px;">HS Code


padding: 0 7px;border-left-width: 1px;border-left-color: windowtext;border-rig=

ht-width: 1px;border-right-color: windowtext;border-top: none;border-bottom-wi=

dth: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D"284">


n style=3D"font-size: 16px;">2815110000


idth: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: windowtex=

t;border-right-width: 1px;border-right-color: windowtext;border-top: none;bord=

er-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D"=

284">

CAS NO


dth: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: windowtext=

;border-right-width: 1px;border-right-color: windowtext;border-top: none;borde=

r-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D"2=

84">

1310-73-2


style=3D"width: 284px;padding: 0 7px;border-left-width: 1px;border-left-color:=

windowtext;border-right-width: 1px;border-right-color: windowtext;border-top:=

none;border-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top"=

width=3D"284">

Purity


tyle=3D"width: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: =

windowtext;border-right-width: 1px;border-right-color: windowtext;border-top: =

none;border-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" =

width=3D"284">

98% / 98.5% / 99%; 32%/ 50%<=

/span>


idth: 1px;border-left-color: windowtext;border-right-width: 1px;border-right-c=

olor: windowtext;border-top: none;border-bottom-width: 1px;border-bottom-color=

: windowtext" valign=3D"top" width=3D"284">

Appearance


width: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: windowte=

xt;border-right-width: 1px;border-right-color: windowtext;border-top: none;bor=

der-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D=

"284">

White Solid Flakes / White Pearls/ L=

iquid


left-width: 1px;border-left-color: windowtext;border-right-width: 1px;border-r=

ight-color: windowtext;border-top: none;border-bottom-width: 1px;border-bottom=

-color: windowtext" valign=3D"top" width=3D"284">


16px;">Packaging


r-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;border=

-right-color: windowtext;border-top: none;border-bottom-width: 1px;border-bott=

om-color: windowtext" valign=3D"top" width=3D"284">


: 16px;">25kg PP bag, 1000kg jumbo bag, 1.5MT IBC(
rgb(45, 84, 160); font-size: 16px;">With/ Without Pallets
yle=3D"font-size: 16px;">)


adding: 0 7px;border-left-width: 1px;border-left-color: windowtext;border-righ=

t-width: 1px;border-right-color: windowtext;border-top: none;border-bottom-wid=

th: 1px;border-bottom-color: windowtext" valign=3D"center" width=3D"284">


yle=3D"text-align:justify;text-justify:inter-ideograph">
ze: 16px;">Application


;border-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;=

border-right-color: windowtext;border-top: none;border-bottom-width: 1px;borde=

r-bottom-color: windowtext" valign=3D"top" width=3D"284">


t-size: 16px;">=E2=80=A2 PVC Manufacturing


nt-size: 16px;"> 

=E2=80=A2=

 Water Treatment

 
an>

=E2=80=A2 Textile Industry
an>

 


font-size: 16px;">=E2=80=A2 Metallurgy Desulfurization


style=3D"font-size: 16px;"> 


;">=E2=80=A2 Petrochemical Industry


: 16px;"> 

=E2=80=A2 D=

aily Chemical & Oil Processing


568px;padding: 0 7px;border-left-width: 1px;border-left-color: windowtext;bor=

der-right-width: 1px;border-right-color: windowtext;border-top: none;border-bo=

ttom-width: 1px;border-bottom-color: windowtext" colspan=3D"2" valign=3D"top" =

width=3D"568">

Packed with inner moisture-p=

roof PE film, palletized and stretch film reinforced for safe ocean shipment. =

Full documents: COA, TDS, SDS, 
134); font-size: 16px;">REACH cer=

tificates available for customs clearance.
Mon Tue Wed Thu Fri Sat Sun
← Back November '26 Forward →
            1
2 3 4 5 6 7 8
9 10 11 12 13 14 15
16 17 18 19 20 21 22
23 24 25 26 27 28 29
30            

Archives

Categories

Syndicate This Blog

  • XML

Blog Administration

Open login screen

Powered by

NetKnow Navigation

Home


VPNs


Dialup Service


Web Design


Web Hosting


E-Commerce


Server Colocation


Domain Registration


Web Mail


Support


Testimonials




Client List


FAQs


Interested in NetKnow Services?


Links


Disclaimer


Acceptable Use


Security





Technorati Profile







AddThis Feed Button

Remote RSS/OPML-Blogroll Feed

No RSS/OPML feed selected

Error

serendipity error: could not include serendipity_plugin_statistics:9cbc0e29a86fd9359ac6748399d6ba5b - exiting.

addthis





AddThis Social Bookmark Button









Blog Grade for www.nk.ca/blog

Empire Avenue





Error

serendipity error: could not include serendipity_plugin_freetag:6c39baf097de002d8b1c2e33b9661474 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:f520e0fa688ba61bd1ed85c0fd80d550 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:b18e142d4998b6b0092d068ad858683d - exiting.

Syndicate This Blog

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:7aefbb7ca9b764849be35e938b6fc9b2 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:c7a92f670894afa9e3097574359fe38d - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:8b72cc4261ddc7ff15df253b17c29c23 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:a0bd1a65cd9ff1c3e289829cc26557c4 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:dcd26c048e45c234c054530ef1492953 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:6d4c66aeb83aeb9524a7cc609051cf0f - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:acc1042e790905e499445a6890081492 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:158fb50035b12269ec43107b29253af3 - exiting.

Error

serendipity error: could not include serendipity_plugin_topreferers:6b7e3336713d0a60294c7e310ca5cf1a - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:d3f047ee6f925c138fae56dcd7a99400 - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:5544ace5c8b19bb8592464810b48df10 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:5624ac0b69cdbe32d0cdc40814d7eb41 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:b8387d3a378247c1c9ede46fffb084e1 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:bacdc0652131449ebc68ebde2bcb9ce2 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:8c84ca587b64b627d986e9d5ce98ead1 - exiting.