Norton Phish from Google Gmail Part 2

















Norton Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Jan 2026 08:01:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkO4r-000000006J7-0U43

for dave@doctor.nl2k.ab.ca;

Mon, 26 Jan 2026 08:00:29 -0700

Resent-From: The Doctor

Resent-Date: Mon, 26 Jan 2026 08:00:29 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f74.google.com ([209.85.210.74]:43156)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkNTL-000000003PB-0iDe

for doctor@nl2k.ab.ca;

Mon, 26 Jan 2026 07:21:52 -0700

Received: by mail-ot1-f74.google.com with SMTP id 46e09a7af769-7cfcc8890d2so13683251a34.0

for ; Mon, 26 Jan 2026 06:20:56 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1769437250; x=1770042050; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=8/rEYJSgc1T8lPBIed4x0sJ75pYZul/zSL8EtFncc/A=;

b=mrBx9uj8DtZPODIpHhWpyWkO1BYyNjNQOG3YHB4LIFrZwpzEblIZ42pGo6ixncD9yO

ogFlAHb3NRGiZP6C+dcA8Yb+IA7Cqz9tBL0vbmLKpjyAYR0dqhX7nJPKaOQyV/xZ163N

Knta0EJw8usxLwrt4QgI5e8qlsjDqJN2cyKWNg2XN1vRbxtJHkO6659Zw8cvR3921U72

Qn7KUy0rtPr4sF3wWBy7OfpIQpcUJUXzMPiu0NoeTszegEHBqTN1j3jhM5yJ72z9kAhg

9ZAK++GXcGJYt7zpHdB79nbWYzxEgn/PO43D000cOxPQL9i5x23HO7LnzaWjznoGt37S

LJnw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=eanosa-org.20230601.gappssmtp.com; s=20230601; t=1769437250; x=1770042050; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=8/rEYJSgc1T8lPBIed4x0sJ75pYZul/zSL8EtFncc/A=;

b=y1QOCYnyxzUWuhYcxAwGmXeiBdCQK3BSjCYpAvk+gysgQKKwXnPutaujDXvY92RBD1

Eq3E+pM1OjiftZbLTwexn97kmGAx93IhoONuQsdbcPlvzyvRpEp2za6ko16323Shu+OS

yH1Ws4oxPBo6UeNr3ZgcU/XsHqkDoR2bjv/vU8k90svTgj8ZxZkFgNKVbSMe8Cc7h2os

R83qT8er3Lv9WOdtMxUggojYcBkUwtwanX3cSSeCTqIPcvbT7CKXpGcaqM5JUwd1EBWX

+fK6NWLHrjbJeD+LHC2Rgu5baD3yhDqRF4TbTQiWj7l/v1v2Q35PFL4ceZDvSmya7ntR

PJaA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769437250; x=1770042050;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=8/rEYJSgc1T8lPBIed4x0sJ75pYZul/zSL8EtFncc/A=;

b=ib/MCTz21qQxhQv9c+cwBDA4gm2Q/nOA6J3Zcehtn7DDBgUbyzwSBvWH3DNGW5/l93

YVXK9Hzsbyxg1wykdqoXoZh+a4XB32J//v8qT+F90tS0uxjL0tMm5i1Vb1aJ1R3oaSh4

GZN4xM19KpB5kNdYauel1buRCwjLdmhwa+qOryfbEZS8mYqr/VFXfvnyxCmeeG160bGv

wAh/voC28tXuCCsu+HvtuZfYodYqx3SJYPSJiV1HoQgvTaI45pRD9H/BePtOj4ojrgnP

y2pyHMLy+PEaWqPQzQ2Xw9g4kVYO4I2ZyqQYKWG3MpDSUza0gkVcpJnea6uZZ1uCiavs

SCyA==

X-Forwarded-Encrypted: i=1; AJvYcCWG0YcMonvUWl5O5Wz13WDhcry2RRWPJ8ezvqdVp7HcgZQxV59L4cjippuxngT8X0eiSU/YKEk=@nl2k.ab.ca

X-Gm-Message-State: AOJu0Yx9TNWRt7QvMO6Hkxy4j/MEy3eYy8BGFC9JZOMDGyI2fCHL946c

3jvyMv1A3dla84mLDyVD1GRB1sIurbNgczt9CO8zbTyWl3Eq5WszrdGwFyXEjT0Q/qlkUQnByH5

StdmfUNttftwT/lvXIh2RPp+Z5uCHbGyfUP65I2uiukKjJA==

MIME-Version: 1.0

X-Received: by 2002:a05:6830:34a0:b0:7cf:d42d:edb1 with SMTP id

46e09a7af769-7d170762fc2mt2040436a34.10.1769437249451; Mon, 26 Jan 2026

06:20:49 -0800 (PST)

Reply-To: Autumn Beckham

Sender: Google Calendar

Message-ID:

Date: Mon, 26 Jan 2026 14:20:49 +0000

Subject: Order W19S7LLP approval record

From: Autumn Beckham

Content-Type: multipart/alternative; boundary="000000000000b974ee06494b3669"

X-Spam_score: 14.1

X-Spam_score_int: 141

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Order W19S7LLP approval record Order W19S7LLP approval record

Monday Jan 26, 2026 â‹… 8:20pm Mountain Standard Time - Phoenix Norton Price

Estimate Date: Monday, 26 January 2026Price Estimate No: PC53353UHZ4265Support

Outreach Line: (865)-291-8559Membership Information EmailHi,This email is

provided to document your membersh [...]



Content analysis details: (14.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.74 listed in list.dnswl.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_74 BODY: 7alpha-pock-4alpha

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.74 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.4 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Order W19S7LLP approval record



--000000000000b974ee06494b3669

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



T3JkZXIgVzE5UzdMTFAgYXBwcm92YWwgcmVjb3JkDQoNCk9yZGVyIFcxOVM3TExQIGFwcHJvdmFs

IHJlY29yZA0KTW9uZGF5IEphbiAyNiwgMjAyNiDii4UgODoyMHBtDQpNb3VudGFpbiBTdGFuZGFy

ZCBUaW1lIC0gUGhvZW5peA0KDQoNCg0KTm9ydG9uIFByaWNlIEVzdGltYXRlIERhdGU6IE1vbmRh

eSwgMjYgSmFudWFyeSAyMDI2UHJpY2UgRXN0aW1hdGUgTm86ICANClBDNTMzNTNVSFo0MjY1U3Vw

cG9ydCBPdXRyZWFjaCBMaW5lOiAoODY1KS0yOTEtODU1OU1lbWJlcnNoaXAgSW5mb3JtYXRpb24g

IA0KRW1haWxIaSxUaGlzIGVtYWlsIGlzIHByb3ZpZGVkIHRvIGRvY3VtZW50IHlvdXIgbWVtYmVy

c2hpcCBpbmZvcm1hdGlvbiB3aXRoICANCk5vcnRvbi4gVGhlIGVudHJ5IGJlbG93IGlzIHNob3du

IGZvciByZWZlcmVuY2UgYXMgb2YgTW9uZGF5LCAyNiBKYW51YXJ5ICANCjIwMjYuKipQYXltZW50

IERldGFpbHMgUGFuZWw6KiotIExpY2Vuc2UgS2V5OiAgDQo2NzdjMjliMy02NTdjLTRmY2EtYjEy

My0xMDQ0MzU1YTcwMjAtIFByb2R1Y3QgUHVyY2hhc2VkOiBQcmVtaXVtKyAgDQpNZW1iZXJzaGlw

LSBTdXBwb3J0IFRlcm06IEZpdmUgWWVhcnMtIFBheW1lbnQgU3RhdHVzOiBSZWNvcmRlZC0gQW1v

dW50OiAgDQokMzgwLjQ0LSBSZWNvcmRlZCBEYXRlOiBNb25kYXksIDI2IEphbnVhcnkgMjAyNi0g

UmVmZXJlbmNlIElEOiAgDQpSMjAxSDFXWlZRWW91ciBtZW1iZXJzaGlwIHdpbGwgY29udGludWUg

dW5kZXIgdGhlIHN0YW5kYXJkIHBsYW4gc2V0dGluZ3MgIA0KdW5sZXNzIHlvdSByZXF1ZXN0IGFk

anVzdG1lbnRzIGJlZm9yZSByZW5ld2FsLklmIHlvdSBoYXZlIHF1ZXN0aW9ucywgeW91ICANCm1h

eSBjb250YWN0IG91ciBzdXBwb3J0IHRlYW0gYXQgKDg2NSktMjkxLTg1NTkuV2lzaGluZyB5b3Ug

Y2FsbSBhbmQgIA0Kd2VsbC1iZWluZywsTm9ydG9uIDM2MEJpbGxpbmcgQWRtaW5pc3RyYXRvcjog

Uml0YSBSaWNrZXR0c0NvbnRhY3QgTnVtYmVyOiAgDQooODU5KSAgMjIyLTY0NTJPcGVyYXRpb25h

bCBBZGRyZXNzLDogMTQxNyBCcnVzaHkgTW91bnRhaW4gRHIgTmV3IFlvcmsgTnkgIA0KMTAwMjUg

VVMmY29weTsgMjAyNiBDb21wYW55LiBBbGwgcmlnaHRzIHJlc2VydmVkLg0KDQpPcmdhbml6ZXIN

CkF1dHVtbiBCZWNraGFtDQphbmt1c2hyYWozNTA3QGVhbm9zYS5vcmcNCg0KR3Vlc3RzDQooR3Vl

c3QgbGlzdCBoYXMgYmVlbiBoaWRkZW4gYXQgb3JnYW5pemVyJ3MgcmVxdWVzdCkNCg0K

--000000000000b974ee06494b3669

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

Web/SEO/App Spam from Microsoft Outlook Part 2

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?58W/I76BVnSDw5imQomcIDVQvtG1zv381lrkXEWeE0obhDmccKqQRkTD?=

=?Windows-1252?Q?h1w/AF9BC7PMfxoCwenD/zrULDnuybE9Yce6keJOzfN/6eTz7tuaQxKB?=

=?Windows-1252?Q?PoWAK2XMOTSsPgKt0s/amUHtJyZgSxXIbnRFCf+t9Iwc6IeYBsObGkPA?=

=?Windows-1252?Q?Pb+FoIy8LJMZg68Sue+S6YxCzdT24qTQQTtCYx43GOXTZk8VPSzMHN1O?=

=?Windows-1252?Q?HFMCHxoHKkIQQ7Yo3tTs0lGvC4w52pSFQEe/LymcTlb2CH0G4WNG/ydp?=

=?Windows-1252?Q?4+DR8sPGpWXEvwa1eRNlAKBDmVYo2RIF1AAP1Ky1l+C0DvHa3gEhTEx8?=

=?Windows-1252?Q?Iwj3NtNrFL34uVHz1iThwb2S7SYFSthU+sX1cCCwmCn8f1kBECy2nZE3?=

=?Windows-1252?Q?O3GU9yv9RRoLyktCvfuBp0cxAGyhJ8b+LwxvKzPWLaJSSgvxaXOs7Q5r?=

=?Windows-1252?Q?bbXX14YQoNHwJP0KsaNWaKGZxzmXqf7KWE8uiJpw45W5nfECvPEyHopR?=

=?Windows-1252?Q?o1othYJRNH45+emjqFq51YTS95pxEEmFcg4iMamYUscp8PUwxF1u62/P?=

=?Windows-1252?Q?VT8x6hfl5fQTxI7RXJB20pX2WFF/dk0iLp14wBkxY7KKaZUVo+skfr0R?=

=?Windows-1252?Q?YkmtwbYuvrFxNeeMEgyvkXqXHNaSWoRYdSeTPzrvZlH/DU/NGHm7hx25?=

=?Windows-1252?Q?CMiFwK2Oe23V+0tol9mSd/YGzSG2FMO4S5NIN/ih72E2D4xQO855clOc?=

=?Windows-1252?Q?6wWRVmReoPQqGZQSF86T+4h965sqQzDfdhb+ONaGAEDCI3ccpBEzWaHA?=

=?Windows-1252?Q?zmceHoVxEt9oe8hGzxFvy6aQINal4aVxpG9DAc9t2ZVXwU5GLUqJ/mEi?=

=?Windows-1252?Q?p+YDIHsloLadCQbgyVfkoSexlQdxQ3+iXwk7dVLlNFyBKATwi6HCm1TR?=

=?Windows-1252?Q?eZqP+zd5gxyZjqqTX9eY1Bmy9UVLEums9j6vgOqS8ygI06pTOdfgOw2t?=

=?Windows-1252?Q?A4fcqyzkO7Naz+U9QWtm6wQwqUlTcuG5XVYeU2DkC3+0MqAdv81W1N9F?=

=?Windows-1252?Q?Yds+ZqVut2VOSLBK/UwdCpCTg0rT18cnzQoXNHbvR+xAtpSKKB0HmolI?=

=?Windows-1252?Q?3enHlOTHAZckm6vMFjO8MM22jL4V1rJlXv6A/dw8MUDqYDBukCWaDFOt?=

=?Windows-1252?Q?Qf52WzRRYvsPmmR2xUn3cpmFH59C9jatnT4izrlyW9LDVP95cvL9fGOa?=

=?Windows-1252?Q?G6jo32I5E5w2nHyYlXyqSURPTnu8FPuAjOLl3vi0KSz8CGylziyNZ+sw?=

=?Windows-1252?Q?XD0v7W+rRH/zxqkkKaoD99zVI5OIq9gzKFrwmwCKSnWDT0uK2gmGBJTe?=

=?Windows-1252?Q?6Ify9YkGxGpEIQPZw43EhXPPM069kZOVS1GnEe+ZoQhSIEvb+mGOyyU/?=

=?Windows-1252?Q?/dDmWZWKgQMMsNNRaM6oeoaiKqwjY4VuDl8Tq8npqgB0Baz6/91sZ00/?=

=?Windows-1252?Q?hZwAvxErpqX2ksMC1mu+VnADsVmyZyJgX9blqq8MhUgC5gw4W6QtTr/s?=

=?Windows-1252?Q?POhv3K0WO2k2Lb/lFpF3pIX9rLRHiaQVeIUfVQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SE1P216MB24698EB4D6C744BE380C82938B93ASE1P216MB2469KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE1P216MB2469.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: a8169d5e-b395-46dd-9e61-08de5cd97496

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jan 2026 12:50:16.6470

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU4P216MB1950



--_000_SE1P216MB24698EB4D6C744BE380C82938B93ASE1P216MB2469KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I personally visited your website when I was browsing it.



In order to significantly improve these search results for you, I would lik=

e to send you an Ranking report of your website.



Can I Send you Quote=94 and Cost/=94?



Best regards,



--_000_SE1P216MB24698EB4D6C744BE380C82938B93ASE1P216MB2469KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I personally visited your website when I was browsing it.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

In order to significantly improve these search results for you, I would lik=

e to send you an Ranking report of your website.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Can I Send you Quote=94 and Cost/=94?



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Best regards,








--_000_SE1P216MB24698EB4D6C744BE380C82938B93ASE1P216MB2469KORP_--

Web/SEO/App Spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Jan 2026 05:52:00 -0700

Received: from mail-koreacentralazolkn19011025.outbound.protection.outlook.com ([52.103.74.25]:35512 helo=SLXP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkM3y-00000000Iql-1MbS

for dave@doctor.nl2k.ab.ca;

Mon, 26 Jan 2026 05:51:37 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=B66AAqzbx6LlDqeKEWnu/4awIxYb0Wb9CkbmFpU68z5ye5lYDb4V55izfR0PW5XsKfYZKlZ4Lx/hxJpIp+Rxnz3pNHDubJQyWaU+vXBxiy4VvnocM/z25U7PdV9Frb79HYLQl+Z/mMK2JElbn8gUhT/ZI7ram6a4li1eSoABQQaMqqs7dk48FWgcwOrvpKUccrEgronyRMOHYc2gH4YUUYskzAfJOV1qDx2s1nadRwsz7u1e1ycpjXt4V0fSj2bOVUXdxZv9W58g5iZxabPrb/gKvP54XmaRzZfIZgMaE+w0ha0d0MdmPdr/FnI/s4IishY/Fs5JPMFg1fVDyNJcDg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=xvZ2srNKhnoAi6VNxxlxnlUYE9JrszO3MeaQlWh5bEs=;

b=Q3qcFhJsl+nqAma3sYsH+D+JuttKpEfDAa4tbMHroJMEmV0Onzhy4yqkOpeeikc1HmKJC34YIX1LP2gheaVg9HzhL2a1zYgri7t82ECsnz4fFFMrL7JeCy+Wgx4lEXPW/ZI+uu3uyvneTWPvyH0ETj0uxXiY2XCN4nowRDi0V4Lk5WaLfdclZXNqb7fLH0CasZeSrrHDAyjQIGBSI1dVR7TjB5POK3xR78mMuu/iAUvryVt/hr7OhpI93djjxYDIidB6xFb38FJedy6GyK50f0di22y/4lYtvhHiAqwLLhv7lol2Hnxnxs7J1Np/L/2tdYngEciJTZxOpq9MsHgNUQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=xvZ2srNKhnoAi6VNxxlxnlUYE9JrszO3MeaQlWh5bEs=;

b=S63Ovfe7Gj2RLEv7nqp7Q9TmuzHeCBiXqWvhkU5Cw3qkm8B2fSRg/GMgfkJPCPkfnI9HY6b2Y/RTKwzUqtL13oQzObCxxRtlfz4sG7z2O5koqlLz57b5XdfWcAKG2cN6RqJEtreESoauPFw2Ws1jBx1P51IfPNwsFlJxpWV/pm4U+8o5JndvWURXButeXOIYDh4JnNNF1pERWDj4OuP9/LNDENrON1ib1u01TMbC1KbjoxBZUtbKFSj6XGDxcllgVVQ7JkwBmRl7yifujCb2soMG1a8zGbcTtpkIw/GRnqIIIVes69a1Cn4CgJbH52G6XRgYwSLcmAJtIIMK3PC74Q==

Received: from SE1P216MB2469.KORP216.PROD.OUTLOOK.COM (2603:1096:101:1ca::5)

by PU4P216MB1950.KORP216.PROD.OUTLOOK.COM (2603:1096:301:108::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9542.16; Mon, 26 Jan

2026 12:50:16 +0000

Received: from SE1P216MB2469.KORP216.PROD.OUTLOOK.COM

([fe80::5c52:ef0f:6225:12d0]) by SE1P216MB2469.KORP216.PROD.OUTLOOK.COM

([fe80::5c52:ef0f:6225:12d0%4]) with mapi id 15.20.9542.010; Mon, 26 Jan 2026

12:50:16 +0000

From: Harry Pro

To: Harry Pro

Subject: Re: Send

Thread-Topic: Send

Thread-Index: AQHcjsJS/uavqBGcrEyTybnPcEmYjw==

Date: Mon, 26 Jan 2026 12:50:16 +0000

Message-ID:



References:



































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE1P216MB2469:EE_|PU4P216MB1950:EE_

x-ms-office365-filtering-correlation-id: a8169d5e-b395-46dd-9e61-08de5cd97496

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|461199028|7071999006|10112599003|19110799012|8062599012|20031999003|39105399006|15030799006|8060799015|15080799012|440099028|3412199025|51015399003|40105399003|35041999009|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?e+N67QiO9ABd5Z8ewmOVoHZo4srq+GTdwUm0sCJ6VvubiPilXlZDJMeF?=

=?Windows-1252?Q?Q2OYej6dYD313lynjjvhtdcXPOSEfnTpW3DFvTFZQ7f4214RGp4Ro2rP?=

=?Windows-1252?Q?WQSr4H3oGjEQiNtgFSnggWrZ/atmCTxwi6jE5dRThMKGPSBMNiSZcHMQ?=

=?Windows-1252?Q?JwxdTav8kxdamomF/xDxYqCIXU6MBrbYTy/f2ljVSnv+DIKCgNB8N3zv?=

=?Windows-1252?Q?1I2O3Pp6Mz0wdjHFfBaWf3UJ2ayKX3rehexTO+vBTm2oTz7D0Z/7XlZu?=

=?Windows-1252?Q?ngFeLi4+9FsGOzAx4MkjQt3ZkLPRQx/bV0djfpt+DagIoOCasRxSAGo8?=

=?Windows-1252?Q?69A9OrxvLJjz1OGObFQkGjBLDCcr7PfpgeXzTNa7Heua2ZtWojiSK5F3?=

=?Windows-1252?Q?T2sIPfqxMEt9NIaeYEOSafF7XMRei8s3OuXZ8dfgQFF5KTnzYn4a/xJZ?=

=?Windows-1252?Q?FXZ+pbyeu2FzpDUPDDmyVcpVeNSDHom1lKK02tUuhmlv4iplvBb+Ax1Z?=

=?Windows-1252?Q?/NoFrMNfkgS/i7qeR3ysWp8mpCncu10J0v0TZjoL4sBSQEsn9+cIZGBh?=

=?Windows-1252?Q?H+MpFpfsWWBVFozIXXSZipf6jGN7AeasK9PuC9zQ506jhH52izfiEWK3?=

=?Windows-1252?Q?odXQshDYLEWaw+S+q0WPoGHbJ2irKRtthyTiTlBzVLKcifCdbJVHO3C1?=

=?Windows-1252?Q?n3cOtlYP/MkRNwOxfyKBsTMO5CrHo1BkQzljMiZgL1BJQi7W5pZgflaY?=

=?Windows-1252?Q?zkxyq9W+WZOaEVZS4OzujDnPOkU1YuLu5tC1/4XW0KFmBArjezbZJuyU?=

=?Windows-1252?Q?aaLGxDDU4FhJTnbirxQjJK8Qmw0gkyKpCc/dHNpNxPPr0DVrKv4WlXFX?=

=?Windows-1252?Q?A0r5lQESNvbUtrPFR1Y+zzjH1l69PKum8/gW3a3TsroI6FHAQb/zgw/Y?=

=?Windows-1252?Q?wELkRLPj4WfH8NJuaIQWJY0m05Fkv8odjeJqQPIFyDWyJM++TmW92QI7?=

=?Windows-1252?Q?0HsafOeH7Ff7rADJLJ7MGrMahFfsxqK1Gzm8bGL3Vr7U0dD2JDgdRgMu?=

=?Windows-1252?Q?WL0/l+ceqLtB5OXagSf7+CbUljtINwAlxf6w7aTBXwiMtTjC98hP61VL?=

=?Windows-1252?Q?BbbnK10GsgZWIi2Z27vllz/0kwONhUHb9snKIiDM7WP/4DVqvnAOpTb0?=

=?Windows-1252?Q?rrzano2vOcnmi0M3iky5yaaxy0ughD4Hx2vW5rplZrohGtuMsQPsAuE5?=

=?Windows-1252?Q?B2RrGbnR/GSiXTC8zuJZIyV67ibFKfoJrA4RDxF3Fdfe55jY2nFrUmJY?=

=?Windows-1252?Q?+5Iofqq5qwsVt2qAGXj+awJbT9KRqC7/NrndeG+qO42uBsqDiJeMREBh?=

=?Windows-1252?Q?0dpZkbfx9xcTk/Lp1jytHqIw8nAAAAthgLSWtniT+7Uq1anyFIKg6vNV?=

=?Windows-1252?Q?tbusZPmBJa0RWsbelOSPEjOLIKuVRTtu1YEGofgwVd/yOKV58CkY/HcW?=

=?Windows-1252?Q?Yphoz0sSGU0aG5Pkawt1O6KdD8/oqw=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

Netflix Phish from mailgun

Domain Name for sale spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 25 Jan 2026 12:29:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vk5mP-00000000OCb-0maL

for dave@doctor.nl2k.ab.ca;

Sun, 25 Jan 2026 12:28:13 -0700

Resent-From: The Doctor

Resent-Date: Sun, 25 Jan 2026 12:28:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f195.google.com ([209.85.210.195]:46167)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vk4Cu-00000000FhO-1i2R

for root@nk.ca;

Sun, 25 Jan 2026 10:47:36 -0700

Received: by mail-pf1-f195.google.com with SMTP id d2e1a72fcca58-8230f8f27cfso1555878b3a.0

for ; Sun, 25 Jan 2026 09:46:41 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1769363196; cv=none;

d=google.com; s=arc-20240605;

b=F7HLRe5Y+smvvWjrIxQYYTN948DbsjvIzIOidFItVCqwYTyBDEnGHlO8Ck+f+Lh7Vb

A0nvwdVEfs1GNCwKElKhDi4128j0d0WW6gfmiOZ7UOpdHQE7SgsuIYaFIJXHPtBTdQ8p

3WQ+ZCjRe2hFUqw2rbTWhwJsMMiitOBY630es8bVuoDb0eINTut+N92jSebTN5X+8oss

FNW3gpVIn2CmeNDxD0vF7BFyakWJEH1qnEDcx7fVULBExRd6+OuTaKtRbRExg2UnC+la

M6ouVarQZfelyRsbtTUFJDSGhxYgeTWdMZHttaYKtTbuKq87xg+FxbzNXFkDNvbqN1w5

LTew==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=ln0gNQsWUbV2SU37uIzZhTUl3R7NKzA2W78HPcEoTlU=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=EO88/vm6LuGvlKvWyaxznDtjCTUJse5Jp5BfXj+yM1rMEVb3Eq9xY3eO04wz0zm7Bw

eLdZ6wS5ml9phaiS69DBNlDgOpvNcLuS1pX6ehf5zwIVRmE/aUIz+cHaw6t24pPE3eVB

n2gMtb7DpxCS7l4YU8oUrvufTBSkuishVcVbFR87EheZSQPq78VbDslBxuATOKFM9uBd

OTvDGMmIidgbLD2oxz6C1FPbYuPpwiEpoz8UUmA+jGPX89wVn/6bCn5NhlGd4qdYLYhK

F71VHMVL1nT/jyRXtH9vAOUCUaEDjqPzeaSoXSOY3mtpsj7qIrUJMIuta2scmQKUjIWW

BHWg==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1769363196; x=1769967996; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=ln0gNQsWUbV2SU37uIzZhTUl3R7NKzA2W78HPcEoTlU=;

b=VN0ZFRkdq+txIrFj64o71HCUBbWOVijUYewfWHWHIuI76vrEoUT/AI7mSwKcWGugWO

3U//zYicuw+FkpnNfTvM+LkHQS1o9iSLmEhbhgUgS7F+kimdNDb018ECnnjeU7vZ/2vP

wvM27fH3yD3UlkjW1j9aNp/sf2EOq/jTufN31wrXgY/MGIa9wgGyfXoK/384P59wtXvq

jsvh8CY8l5NOEFsSLK6ZTplGKGB6435AhKP9cQCOs4XQyqUk61iKRnrcrer0mzpNR4P2

QXHzPJm91rqAf3a5Xfpv0JZYj0EFGyLXYqUo/LMWvEVyGsbj9tGWQQzRvPMR93n/Ehyo

YA3A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769363196; x=1769967996;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ln0gNQsWUbV2SU37uIzZhTUl3R7NKzA2W78HPcEoTlU=;

b=CVJEUd61q57NXV7i0qV8iNvgRfDRTTM255O7joTNx3OKk9bcjgIJhhf8ngyWUstdrG

Z0ma1kAY0ARhm4PhrVcINK659wPXsYkKJM2q/0MhN/z4VUE8jLkLM5i6/jm1KhZU8ppt

XeJq8OMnQXzBA0rCCitOmsIK9BefndIjkkygJGUUxU3qveWG9IwRS66d7ui38mb2GLMz

fqpKkD9s/ev6v7jxandYGvaK8KVcpbqFChPjthxKxPDqz0Y+12Ibq+D8t3f5nN5tLQES

MklvAD8hSKP44tvw6Egtp1+AR7ObeV/t8a8FpZNRwq+jfEVPg+CbwIBE2uRCJJ5k+RWu

IoFg==

X-Gm-Message-State: AOJu0YzPcpE5DAn3fRkvQQQnOZjIDmZ1IU+MLDlAndZifr+xICUzmdYy

3Uf/1CynJp70nt2AZIzoreL6DzUhEpPFYtkkjRc2tPVFLAZ1W5DlboF3ebeWj3EWL4P2ZEFrkfj

esZCcfHrrLqHaS1MAGH7PfzJ+D2iudDF7WLaIHXA=

X-Gm-Gg: AZuq6aK5wEe+v0E3EKgcqalQZ40H3JOi94jZlb/OKXB+PL53qTQpH5XqYGypd6V72/b

zEOr3O2873Pe112092yqygTK/QTwiXJ457s/RtU79ZeU1zrvU9QXPU2RadLEln982VMj25tfWUh

OS6C+waODpMvONNDWF/dpqm0CaEUjsgg5PhZfRL3lits3MwEQjr11v5CfOu83hjcMBEwy/V+0nV

l68798+NZmYWNqBLBdbj3YyUziOMAqjPfu1v1vx+l56ayJyiAbsKTDRGm5b3os+j/xiuruwFc8=

X-Received: by 2002:a17:90b:1f81:b0:343:b610:901c with SMTP id

98e67ed59e1d1-353c4186d44mr2027286a91.26.1769363195481; Sun, 25 Jan 2026

09:46:35 -0800 (PST)

MIME-Version: 1.0

From: John Riley

Date: Sun, 25 Jan 2026 18:46:24 +0100

X-Gm-Features: AZwV_QjfvAM00V1TYtsIUhb0K7SboEku5NPTueGGOiurfhwRa_nXb8j4GaJSHA0

Message-ID:

Subject: EDMONTON VOIP

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000bed293064939f867"

X-Spam_score: 6.4

X-Spam_score_int: 64

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Are you looking to strengthen your brand and increase

your online visibility? The premier domain www.VoipEdmonton.com is available

for purchase at Godaddy.



Content analysis details: (6.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

[209.85.210.195 listed in dnsbl.ahbl.org]

[209.85.210.195 listed in dnsbl.ahbl.org]

[209.85.210.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.195 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[johnriley.domain(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.195 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} EDMONTON VOIP



--000000000000bed293064939f867

Content-Type: text/plain; charset="UTF-8"



Hello,



Are you looking to strengthen your brand and increase your online

visibility?



The premier domain

www.VoipEdmonton.com is available for purchase at Godaddy.



This domain would be really good for attracting clients looking for your

VOIP IN EDMONTON



If the domain is developed or redirected to your current website, it would

be extremely beneficial to your company and services in terms of catching

more leads and clients while retaining your brand identity.



You can get this domain for $499 at www.VoipEdmonton.com and claim the

immediate ownership



thank you for your time and I look forward to your reply



Best Regards,



John.



--000000000000bed293064939f867

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>
Are you looking to strengthen your brand and increase yo=

ur online visibility?=C2=A0


to">The premier domain=C2=A0

oipEdmonton.com">www.VoipEdmonton.com
is available for purchase at Goda=

ddy.

This domain would b=

e really good for attracting clients looking for your VOIP IN EDMONTON=C2=

=A0

If the domain is dev=

eloped or redirected to your current website, it would be extremely benefic=

ial to your company and services in terms of catching more leads and client=

s while retaining your brand identity.


v dir=3D"auto">You can get this domain for $499 at
ipEdmonton.com">www.VoipEdmonton.com
and claim the immediate ownership=

=C2=A0

thank you for you=

r time and I look forward to your reply


iv dir=3D"auto">Best Regards,


auto">John.




--000000000000bed293064939f867--

Domain name for sale spam from google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 25 Jan 2026 12:29:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vk5mK-00000000OCE-470I

for dave@doctor.nl2k.ab.ca;

Sun, 25 Jan 2026 12:28:08 -0700

Resent-From: The Doctor

Resent-Date: Sun, 25 Jan 2026 12:28:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f65.google.com ([209.85.216.65]:50312)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vk4CY-00000000Ffo-0Ulx

for sales@nk.ca;

Sun, 25 Jan 2026 10:47:14 -0700

Received: by mail-pj1-f65.google.com with SMTP id 98e67ed59e1d1-34c24f4dfb7so1816006a91.0

for ; Sun, 25 Jan 2026 09:46:17 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1769363171; cv=none;

d=google.com; s=arc-20240605;

b=Xn2u3Q0vfkSUm6e+QExOXFUMZksPdUi5+Gb/mMD4u8eZz9mICiYrkI3oKyddRvftZd

oqJE/XuYS7fIDbDGb+3R9qgN3bcgrgodyuIeXbVx9t31vPmcLHQM/EKXgTBOEcEaTUDZ

x4SFth/7dnJH6bBqPaeWiaem29wdosKFnoHtDA09J02j5Pso3rTPOCH33nmUexN5TTRt

LSF3QWTdHRYwKVxX6w7OoQQdd7uBymO6/2U9cicmqq1Wu/uFBTl90TjrvKwJsMXb0VAX

WWp59byqyG60Ww6fZlA8ZGuu9APMHoZB59mX+1stKtbx6BgzskBbjZODJw1faotxNDjV

/svQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=V+7uoyGeCX+WFcCG/O/KO6RCPJGutxOADN/34LriCdU=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=WA8ejYAN03qpczAWy+4tEc032zPCig0e8VyCHWuvbEdnZ0HAi0Wlyp4yIapjwqQRdr

o0HzLNbXGMf/U22KVXAWexo0ICu+b7eo4I8A4lpdYEyDwEkTUN7QkQTwOVLZ/X3IZmwz

4gM9U9dts3u2yWgh0a6Ryx8Q+Ca+3MHiPR7/YRvEzl9zSKgDZULay2kJeBG5Nha2h7nK

jPrFOHnTXr6gthvllshEP1L4xNULHsjuKiCp/tw88vAx1gLAAGxT0+F4vxRdq5Vt9ERJ

IDWHMX/WF0FFt00rBJkj1IsKyzTVaWAUkVQ/NTHiT+iV2t9xSwgsF+G+HVYZWsb518Sh

RFoQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1769363171; x=1769967971; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=V+7uoyGeCX+WFcCG/O/KO6RCPJGutxOADN/34LriCdU=;

b=BoCILKaHcbF+o9OKxepm/zIebF2ckPc+2Z8FlRdox9ka9aOW91Ygw2qWMppLkRSVj2

ZLV51YaA67JzxROixMtCUcZTIu1oEaKQCrdzm9s4rdYpYXqxiQxUXiMPAHY1gM35Yy33

ZVH394NCmp7x/GglQna2mankZb9pbrRgMhSfz7UmeQIyLip3PIDe4nIuoY8wQObh5U5e

MSvnAf4sFvWfD6A0GKLCgObai8XPuvcxSaroXwiR6ZiEaxEb78yKGwZQ6qzyIK3Lnrev

xvVjKXkhfSLB0Z+5arSiA1w1rjTG3QRjVWjf+Cbc149d+bHl20ma9dbcDim/MxA2dV1t

3h9w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769363171; x=1769967971;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=V+7uoyGeCX+WFcCG/O/KO6RCPJGutxOADN/34LriCdU=;

b=cxXPkKo4+WrhkZr4JN6UYOHB5H8HVDE6AhdfZG9mLkzEshS9/23s3j18jFM5oWENGJ

M8JLgGP4MOyDf/gnVoFG78+/QfJOe0HGckWjbAGc5Ua3ubFgOumf1OMASzViDe11jQ/G

bXkNI3Am+dn15IBxqGCdazHx/ej1WnqNDsUZWLoIzt1ybv37HSErJYKOLW9PzIyQut75

mWbIdSxPPx+VS4S9sR/pvKBDYkD5Fgx3+X0nlolkq2pL8gSf+O8936cO3Nvh7RUVitPP

pgwCXIUy7nhQw0QoTg+SsYSmCgfJgzpP9nz7G7JnAl1yAXDOSRjfbE5xEkiNWE3PtgKt

1HpQ==

X-Gm-Message-State: AOJu0YyaABHWiS9IvEAuo/vYUckNo2gwXAoRcQXx2iJNcg+AetUipKP6

B50vIjIVevgmefnaHj17OTBh924Of2XypqJxl1KVhKOJeEuZxSQYzaB7fk2HnwoiNVPwJXfv8Wv

k9X87rkKOQWVZ3N364JtpIvojRaiWGQfgRd6zJbs=

X-Gm-Gg: AZuq6aIZaeWWEc0zbUJ8lBBUl7P8W7yC9XUe8FzqNw9YJ/n/t1i/adjdKjFxG6tqTpX

loijt+9GGsM1YQQIxS7TDg1hxqN2i7CeKbLkL1r2qu+zVTcB4WLO2zxCMO/hLTZ1F+D1gbGYNRt

HHW5sL3lZPz/PWu29VmQjPAYxztFxRWJRJxeKjh8fBPsC2I2WK8WSTlBsvN0diJQybu9nRYUuau

Y1BIWZDNyVksXqsG0XkmBnDrDfqqTNTvBV8dsfn8a+tvCnbiwOqnL2ZEZj5vt+2pH1fBqgaANs=

X-Received: by 2002:a17:90b:2c86:b0:34a:8c77:d37b with SMTP id

98e67ed59e1d1-353c40c6914mr1949501a91.16.1769363171302; Sun, 25 Jan 2026

09:46:11 -0800 (PST)

MIME-Version: 1.0

From: John Riley

Date: Sun, 25 Jan 2026 18:46:00 +0100

X-Gm-Features: AZwV_Qgqpfg24O-wvP61BHAf_zwZhDQGqU_XyUiaJ3wL4u_2XT3AVzg2G7q1QZY

Message-ID:

Subject: EDMONTON VOIP

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000004de39c064939f726"



--0000000000004de39c064939f726

Content-Type: text/plain; charset="UTF-8"



Hello,



Are you looking to strengthen your brand and increase your online

visibility?



The premier domain

www.VoipEdmonton.com is available for purchase at Godaddy.



This domain would be really good for attracting clients looking for your

VOIP IN EDMONTON



If the domain is developed or redirected to your current website, it would

be extremely beneficial to your company and services in terms of catching

more leads and clients while retaining your brand identity.



You can get this domain for $499 at www.VoipEdmonton.com and claim the

immediate ownership



thank you for your time and I look forward to your reply



Best Regards,



John.



--0000000000004de39c064939f726

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>
Are you looking to strengthen your brand and increase yo=

ur online visibility?=C2=A0


to">The premier domain=C2=A0

oipEdmonton.com">www.VoipEdmonton.com
is available for purchase at Goda=

ddy.

This domain would b=

e really good for attracting clients looking for your VOIP IN EDMONTON=C2=

=A0

If the domain is dev=

eloped or redirected to your current website, it would be extremely benefic=

ial to your company and services in terms of catching more leads and client=

s while retaining your brand identity.


v dir=3D"auto">You can get this domain for $499 at
ipEdmonton.com">www.VoipEdmonton.com
and claim the immediate ownership=

=C2=A0

thank you for you=

r time and I look forward to your reply


iv dir=3D"auto">Best Regards,


auto">John.




--0000000000004de39c064939f726--

Loan spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 25 Jan 2026 05:22:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vjz7u-00000000CNW-1qI9

for dave@doctor.nl2k.ab.ca;

Sun, 25 Jan 2026 05:21:58 -0700

Resent-From: The Doctor

Resent-Date: Sun, 25 Jan 2026 05:21:58 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f227.google.com ([209.85.214.227]:57495)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vjvjQ-000000006Zf-24mL

for root@nk.ca;

Sun, 25 Jan 2026 01:44:37 -0700

Received: by mail-pl1-f227.google.com with SMTP id d9443c01a7336-2a1022dda33so20822855ad.2

for ; Sun, 25 Jan 2026 00:43:41 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769330615; x=1769935415;

h=thread-index:thread-topic:mime-version:subject:message-id:reply-to

:from:date:dkim-signature:dkim-filter:x-gm-gg:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=xyiAz+qFQFRgJleyuroZKT/FG0rie6dGemrPIhufYM0=;

b=j373JC4SiWs5e6C/4/5yd2xqoVcwO7Ga0rP1FalRzznX4UQ/NiLaapmmSjy7AfwLlC

b+enwFm6pSydQIEUVGrh2FeiNbMUq+VaZJ9QWaziyaG092AJ5XVVzdZ59ME8NEBuLcO0

+3iQAUKft/qjvMyuEvLBplKVQOaMM0A5TOREbvYomJGN1BuvOMjAAo8814897XBiyJAL

kYNX9/3BjsilYZwChyvWdvB4NQ3ONc4Zm/hWiwXz+z9guXMbI0n7qCWlRq9+iEtIg8OK

C3QJL/JbE7vADyEp9vI1oIsybC29PaRjX+uPFLpnCjy5imSNzEXTGB+MO2SvTEQOiOxo

+HcQ==

X-Forwarded-Encrypted: i=1; AJvYcCWli4ASqYRqpl1x29krpdn8mZkVFf+wIDMv/3t6pXnWYGpRq82ZMhsEcHGia+vaAtwW+WTp@nk.ca

X-Gm-Message-State: AOJu0YwRQtBi7BwQhgiH4kd29bEbzQGAgjhwhucqRKjtsvNgRzmN5eOL

GKd8SvdpEnHjAnzkRobTDXChSCUKeF5I6iQm8KPcrP2J8OXPZrjxKdkgSKa3mrsqfm0nV9lw9sw

BTjMGc9Qye83nKCI87EqvtzalcDGV1/bMYYLo

X-Gm-Gg: AZuq6aLDBIoylD6b4qohxcuQRzXtzcT06X3CyvKs9SwenmhXC5xtKulbg9nLoq5nQ7H

z0MuvtVuZH4kezARjTYlx8jCnut1+qP6kc+YdEIJPIp7XQI9jv/FF+nPmDHk4IUddZUnKudSX9X

tikeI5z8ujleCIGHnYFEm9M5qhiQwPlYXLTGfiMEdC56wDR5fsXPcl38KYFONr9mBghZ03zv1Jr

W0LLaxAbM/xyXKiMcszmz4p9smbZcd0CGD0Z5DXJSnK+feHT88pmJ93Tg3TgMkYd63csVOqzhUP

yUUpwytVPuCiLFdxLq5VCooL3ILCn80ZHeKpWQuQB3lytCYmLvaseEESLxYFNihww/XrFexxn26

l

X-Received: by 2002:a17:902:e892:b0:29f:2734:6ffb with SMTP id d9443c01a7336-2a84523ad24mr10420565ad.22.1769330614933;

Sun, 25 Jan 2026 00:43:34 -0800 (PST)

Received: from mail.activos.com.co ([190.216.205.98])

by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-2a804bef6a3sm6685675ad.42.2026.01.25.00.43.34

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Sun, 25 Jan 2026 00:43:34 -0800 (PST)

X-Relaying-Domain: activos.com.co

Received: from mail.activos.com.co (localhost [127.0.0.1])

by mail.activos.com.co (Postfix) with ESMTPS id 06A0F1752093;

Sun, 25 Jan 2026 03:40:38 -0500 (-05)

Received: from localhost (localhost [127.0.0.1])

by mail.activos.com.co (Postfix) with ESMTP id 21953175208A;

Sun, 25 Jan 2026 03:40:37 -0500 (-05)

DKIM-Filter: OpenDKIM Filter v2.9.2 mail.activos.com.co 21953175208A

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=activos.com.co;

s=3617E2B2-E791-11E8-974D-5040C871AF00; t=1769330437;

bh=fEAiQJpJ/ZkXYaZJ5ERIvobQemAsK9z57oDRa26LTjs=;

h=Date:From:Reply-To:Message-ID:Subject:MIME-Version:Content-Type;

b=SzP/z03VE7o+Ca1ISWDkyyWiX99km9ZQilM8EElQB6cVbQE5Ji9CDxFjswmitdsbd

nUD1+SJnTuqO+qBvvI/elGkUMhGezNoMt9D2Fyhqw2tVmRu/hoDDPXilSp+2b88Fct

uEErswEYr4hf6F6lrjbxatBTSBw0q1Dfom6KE6jU=

X-Amavis-Modified: Mail body modified (using disclaimer) - mail.activos.com.co

Received: from mail.activos.com.co ([127.0.0.1])

by localhost (mail.activos.com.co [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id SgJUA-Qizg5f; Sun, 25 Jan 2026 03:40:36 -0500 (-05)

Received: from mail.activos.com.co (localhost [127.0.0.1])

by mail.activos.com.co (Postfix) with ESMTP id 9DA27175209C;

Sun, 25 Jan 2026 03:40:32 -0500 (-05)

Date: Sun, 25 Jan 2026 03:40:32 -0500 (COT)

From: QIA

Reply-To: QIA

Message-ID: <1799386315.4973921.1769330432525.JavaMail.zimbra@activos.com.co>

Subject: We provide funding for projects....

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_4973920_1697717932.1769330432521"

X-Mailer: Zimbra 8.6.0_GA_1153 (zclient/8.6.0_GA_1153)

Thread-Topic: We provide funding for projects....

Thread-Index: AKBKMd5N/WghFKajlqACJx00A+lALg==

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, If you are currently seeking financial assistance,

our organization offers funding support to individuals and enterprises for

a wide range of projects. If you would like more information about this op

[...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.227 listed in dnsbl.ahbl.org]

[209.85.214.227 listed in dnsbl.ahbl.org]

[209.85.214.227 listed in dnsbl.ahbl.org]

[209.85.214.227 listed in dnsbl.ahbl.org]

[190.216.205.98 listed in dnsbl.ahbl.org]

[190.216.205.98 listed in dnsbl.ahbl.org]

[190.216.205.98 listed in dnsbl.ahbl.org]

[190.216.205.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.227 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.227 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.227 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.227 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.227 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.227 listed in sa-accredit.habeas.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.227 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.227 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.227 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.227 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[qia7625331(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} We provide funding for projects....

Loan spam from Google Gmail Part 2

------=_Part_4973920_1697717932.1769330432521

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit









Hello,



If you are currently seeking financial assistance, our organization offers funding support to individuals and enterprises for a wide range of projects. If you would like more information about this opportunity, please reply to this message and we will be happy to assist you.



Regards,

Cali Al Thani,

Publicity Manager, QIA.

Este mensaje de correo electronico y sus adjuntos puede contener informacion confidencial, privilegiada o legalmente protegida y esta destinado unicamente para el uso del destinatario(s) previsto(s). Cualquier divulgacion, difusion, distribucion, copia o la toma de cualquier accion basada en la informacion aqui contenida esta prohibido. Los correos electronicos no son seguros y no se pueden garantizar que esten libre de errores, ya que pueden ser interceptados, modificados, o contener virus. Cualquier persona que se comunica con esta organizacion por e-mail se considera que ha aceptado estos riesgos. La organizacion no se hace responsable de los errores u omisiones de este mensaje y no sera responsable por daños derivados de la utilizacion del correo electronico situacion que conoce y acepta el destinatario. Cualquier opinion y otra declaracion contenida en este mensaje y cualquier archivo adjunto son de exclusiva responsabilidad del autor y no representan necesariamente la posicion

de la empresa. Si recibe este mensaje por error, por favor notificarlo al remitente de inmediato y desecharlo de su sistema. El destinatario autoriza a la empresa remitente el tratamiento y proteccion de los datos de contacto (direcciones de correo físico, electronico, redes sociales y telefono).

------=_Part_4973920_1697717932.1769330432521

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit






Hello,

If you are currently seeking financial assistance, our organization offers funding support to individuals and enterprises for a wide range of projects. If you would like more information about this opportunity, please reply to this message and we will be happy to assist you.

Regards,
Cali Al Thani,
Publicity Manager, QIA.





Este mensaje de correo electronico y sus adjuntos puede contener informacion confidencial, privilegiada o legalmente protegida y esta destinado unicamente para el uso del destinatario(s) previsto(s). Cualquier divulgacion, difusion, distribucion, copia o la toma de cualquier accion basada en la informacion aqui contenida esta prohibido. Los correos electronicos no son seguros y no se pueden garantizar que esten libre de errores, ya que pueden ser interceptados, modificados, o contener virus. Cualquier persona que se comunica con esta organizacion por e-mail se considera que ha aceptado estos riesgos. La organizacion no se hace responsable de los errores u omisiones de este mensaje y no sera responsable por danos derivados de la utilizacion del correo electronico situacion que conoce y acepta el destinatario. Cualquier opinion y otra declaracion contenida en este mensaje y cualquier archivo adjunto son de exclusiva responsabilidad del autor y no representan necesariamente

la posicion de la empresa. Si recibe este mensaje por error, por favor notificarlo al remitente de inmediato y desecharlo de su sistema. El destinatario autoriza a la empresa remitente el tratamiento y proteccion de los datos de contacto (direcciones de correo físico, electronico, redes sociales y telefono).






------=_Part_4973920_1697717932.1769330432521--

Web/SEO/App Spam from Google Gmail Part 3






class=3DWordSection1>


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>Hi,


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>Just checking in=E2=80=94would you like me to share =

our seo price list?


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>Happy to explain the options and help you choose the =

most cost-effective plan.


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>Please advice.


class=3DMsoNormal style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>On Fri, Jan 16, 2026 at 12:42=E2=80=AFPM <> =

wrote:


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>Hi, 

style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif'>root@nk.ca
pan>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222'=

>


style=3D'font-family:"Calibri",sans-serif;color:black'>
=


style=3D'font-family:"Calibri",sans-serif;color:black'>Are you looking =

for effective yet affordable SEO =

services
?


style=3D'background:white'>
style=3D'font-family:"Calibri",sans-serif;color:black'> <=

/span>


style=3D'font-family:"Calibri",sans-serif;color:black'>I=E2=80=99m an =

SEO Expert, and I helped over 250+ businesses rank on the 1st Page on =

Google. My rates are very =

affordable
.


style=3D'background:white'>
style=3D'font-family:"Calibri",sans-serif;color:black'> <=

/span>


style=3D'font-family:"Calibri",sans-serif;color:black'>Would you like me =

to share our pricing and service details?

style=3D'font-family:"Calibri",sans-serif;color:black'>
=


style=3D'font-family:"Calibri",sans-serif;color:black'> <=

/span>


style=3D'font-family:"Calibri",sans-serif;color:black'>Thanks!=


style=3D'font-family:"Calibri",sans-serif;color:black'>SEO =

Team!


style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif'> 
o:p>



------=_NextPart_000_10FC_01DC8D8A.344850B0--



Web/SEO/App Spam from Google Gmail Part 2

This is a multipart message in MIME format.



------=_NextPart_000_10FC_01DC8D8A.344850B0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable



Hi,



=20



Just checking in=E2=80=94would you like me to share our seo price list?



=20



Happy to explain the options and help you choose the most cost-effective =

plan.



=20



Please advice.



=20



=20



On Fri, Jan 16, 2026 at 12:42=E2=80=AFPM <> wrote:



=20



Hi, root@nk.ca







Are you looking for effective yet affordable SEO services?



=20



I=E2=80=99m an SEO Expert, and I helped over 250+ businesses rank on the =

1st Page on Google. My rates are very affordable.



=20



Would you like me to share our pricing and service details?



=20



Thanks!



SEO Team!



=20





------=_NextPart_000_10FC_01DC8D8A.344850B0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable




charset=3Dutf-8">


xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
content=3D"Microsoft Word 15 (filtered medium)">

Web/SEO/App Spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Jan 2026 14:05:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vjkoE-00000000Gsp-419v

for dave@doctor.nl2k.ab.ca;

Sat, 24 Jan 2026 14:04:42 -0700

Resent-From: The Doctor

Resent-Date: Sat, 24 Jan 2026 14:04:42 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f172.google.com ([209.85.214.172]:45072)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vji2D-000000004av-0F7I

for root@nk.ca;

Sat, 24 Jan 2026 11:07:08 -0700

Received: by mail-pl1-f172.google.com with SMTP id d9443c01a7336-2a7a23f5915so20241965ad.2

for ; Sat, 24 Jan 2026 10:06:09 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1769277964; x=1769882764; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=Cr6y4sICmsYYB6JP3u+BvEBfK620IG4HSyGGZA6vfaw=;

b=TxqIItd0FkZMUD4cGIppXTJTF0fZFd2X+9VrLZxxw3YVChmLnsJrRajnFafYVzLfTk

/tUHyshxqIqOAo8hXO/0XcfGUsBhu3moDcjfFC15dEgrIapJkznAbEn/8kDUMJahDfIk

bFdlJByogvtGLKAA4Z3Au4+870qxCTu55DF0as9iG56VGsXcwRlSGzj1Kxclf5MFeQly

DMO4xx02/boC+X5AZ2QcF65iZAkXVgCCQ06ybVNocCTwt2ofCk02/6V0fn7Vl4+JZX7J

ZzPn9hnk4veDns6aaL2wgsSA+FXOzrgjQcs+imYbJ24n2n85asnPoOhZZMQz0xgcWd4b

8mFQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769277964; x=1769882764;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=Cr6y4sICmsYYB6JP3u+BvEBfK620IG4HSyGGZA6vfaw=;

b=Lfa99u29MPBCddgOKbISNilFCYmrb9JPHkqlHz7n6Oy7hJ56qhFmQXqypLfjYk2Sdz

fxFomkiBLcFs6ZfnZD4DAl9TqlbpCSD3giqSomqYZY6B+Y/LEMc+N047qg5ORIWj/BXQ

WGkD6VQWaDHtomN47SDSjttkFPaIqWD0efo9FJrBhWPjxedCXdCdETmDp2nCIe4cTuSL

y4RKpZhjYrxM5spB9fOs8FduUJ4//Yo60srJuJDWmAewpZkNzIsMjgysDj0aRDz9qqt7

cX6x4o9v7jCNa4w+EsNzBxbUmCm6XtdPkJ1/ho/wMpx6e8jQPK7eaavVVSDozN1a+5nw

XxGw==

X-Gm-Message-State: AOJu0YwxBl29A/tmZQtQhVjnvzfnSjb9XercK89cOXVNRoMYl6HoyQen

Xr5pS2bfLmEcPYF413FeAITmOGkea42kA0O8KDA0oAT2l5nGuxLHYgYJ5gvTsg==

X-Gm-Gg: AZuq6aLZLOZpJ8gC+X71tryUkbVViI2HyCgVCHnd74Ih77otQCR9hexcvoIN4FX1Twi

tvZTJFszxuq3z36oQINKBhysMHb+mb6g+CWts92It85wnaLSKiwaRnFxKYyt5UIvOXm16qK4CQt

3CqBK2udIK6R6sSFHm9e8HlFAulC2uslzgM6bZeJLNAAVsgw0TK5QsYgRgkKwz65PBynvB7RULR

STh0ldJYHdc17KWL24VtPOaBXW8dBQnmcDgkcg+WWw0Tx5kbEiV6ZEXZILVZOLJga10lja48uo6

2pY2NayMWE8XJ8+f81GZHAB8qNVzcCQhS64zH7nPYjYVJQJR80Zowve/fSwxYL0TVnTvyeADqag

0K8JomVx7dLG0jp7YMFYWS3SE2PP9QOmSf3iFGEXRSp2aaNI873TNOsfAfHs9IVyLEoCS2qjxf2

0tPa4e+Xk4ksES783ZMCFkYzArULjiUIA6

X-Received: by 2002:a17:902:f548:b0:2a7:77ce:d75d with SMTP id d9443c01a7336-2a80ec93218mr42936085ad.61.1769277963476;

Sat, 24 Jan 2026 10:06:03 -0800 (PST)

Received: from DESKTOPVFI8GCA ([2401:4900:a00c:f193:a0d2:cd3e:14dc:2701])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2a802dcd781sm49980705ad.24.2026.01.24.10.06.01

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Sat, 24 Jan 2026 10:06:02 -0800 (PST)

From: Wilkins

X-Google-Original-From: "Wilkins"

To:

Subject: Re: SEO packages??

Date: Sat, 24 Jan 2026 23:35:28 +0530

Message-ID: <10fb01dc8d5c$1a8e8e10$4fabaa30$@Gmail.Com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_10FC_01DC8D8A.344850B0"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AdyNW/PWquVapNX4TGyWCTdNz5EqkQ==

Content-Language: en-us

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Just checking in—would you like me to share our seo

price list? Happy to explain the options and help you choose the most cost-effective

plan.



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.172 listed in dnsbl.ahbl.org]

[209.85.214.172 listed in dnsbl.ahbl.org]

[209.85.214.172 listed in dnsbl.ahbl.org]

[209.85.214.172 listed in dnsbl.ahbl.org]

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in dnsbl.ahbl.org]

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in dnsbl.ahbl.org]

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in dnsbl.ahbl.org]

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.172 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.172 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.172 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.172 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a00c:f193:a0d2:cd3e:14dc:2701 listed]

[in will-spam-for-food.eu.org]

[209.85.214.172 listed in will-spam-for-food.eu.org]

[209.85.214.172 listed in will-spam-for-food.eu.org]

[209.85.214.172 listed in will-spam-for-food.eu.org]

[209.85.214.172 listed in will-spam-for-food.eu.org]

[209.85.214.172 listed in will-spam-for-food.eu.org]

[209.85.214.172 listed in will-spam-for-food.eu.org]

[209.85.214.172 listed in will-spam-for-food.eu.org]

[209.85.214.172 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.172 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[wilkinsbarterq1(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[wilkinsbarterq1(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.172 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Re: SEO packages??

Invoice Phish Part 3

gO9fut9uxXJftBfC/Tf2gvgt4m8F6nn7F4g06Wy83/n3Zl/dyL/tRvtYe6ivgsd4eYZ05zpz

m5u7V7b/AHH9R8PfSpzunicPhMVhqEcOnGMuWM01DRO3vtXS8j8A7LXb/wANaxZ6nps7Wep6

ZcRXlnc7P+Pe4jZZI269mWv6D/2YP2gbP9pH9n3wx45sv3MPiCyW4ki/59rhf3c0P/bOVZF/

4DX8+HiLRr3wxr+oaNqcHk6not3NZXsf/PO4hcxyfqtfoR/wQs/aa+xa14n+Fd7N+5n3a9ov

+/8ALHdw/wDomQD1aY18pwRjlh8c8LU+3p81sfs/0kuFI5xwzDPMEuaeH97TrTla9u/R+lz9

Qf7S4615X+2l8Cov2qf2YvFvgv8A5fdTs/M06T/n3vYv3kDfTzVUH/ZYjvXa/bv85pPt2K/Y

sTgYVqUqU9mrH8A5XndbL8XSxuHdp05KSfmmmj8Wv+CTYms/2+PB0N7DNZTQwalFJHL9+OVb

OZWVv9oNwfda/Y3ca+ANa/Z9/wCFFf8ABazwxqdlB5Hh/wCIMeoa1bf3PtDWky3cf/f3bL7f

afavvndXhcD4OeFw9bDT3jNr8FqfrH0is/w+eZpgM2wzvGrhoP0fNK69U7pk241534f/ANM/

a0sv+mM8H/jtud1d9uFeGaL8TL34ffE++8QTaZ++mu5/LjvY2RNjEr/Lbiv0rLsNOrCqqau3

FperP5ZzvGU8PUw86rtFTUm/JH2Bmg8CvH/BX7X2jamyrqun3Gk5H/HwhM8H/wAV+ODXrOi6

xZazYw3tlNDe2c4/dyxyb0NfGYzA4jCvlxEHH12+/Y/VsszzAY+PNg6ql+D+56k9FDHmivNP

VCtTw3/y2/4D/WsutTw3/wAtv+A/1pPYmO5l0UUdKZPOQ65rdl4Z0Sa9vZvslnZx+ZJJJ/yz

X/PQd6+S/jR+0frXxo1r+xdAhvbPTJv9XbR/669T+9K38Ke3Qd8mtH9tv40y+JfE3/CJafzY

aW6Lc+X/AMvt433Y/wDgPyj/AHm9qm+Gvw/XwJpfKodQu+by4PX/AK5L/sD9TzX3mUZXTwdC

ONxEbzesU+nn/Wx+TcR53XzXGSyvBS5aUPjkt2+3oZfgv9n6ysf32tTfbZv+faOTZax/1b9B

XoWjWVlollFZ2cMNlBB/q44vuVBUmK66+KrVnecnbt0+4jBZdhsJG1GCv36/fuXhL81TJMMV

mrJipUnxXIdpk+C/hlZ+DPid4t8Xf67VPFsdlbS/9Mre2jZY41/4HJMxP/TQeldiNR/zmshb

3JqVXzWcaEKekOrv95218fWxE1OvK7SS+UVZL5JGqNSIpRqjD1/Os8TKB2o80UHP7Rmp/abe

/wCdH9pt7/nWf5oo80Ug9qz4W/bc/wCCUHif46/tH6z408Gan4Z0yy8QRxXN7bajJMj/AG1V

8uRl2Rn5XVYyc87s+tct+z7/AMErvjJ8Cvjp4Y8aWeu+BPP8P6ilzLH9ouv9Jt2/d3Ef+p/j

iaQD3wa/RLzRR5wr5GtwRldTE/WuVqV76PS5+2YX6RHGNHJ1kcp050FD2dpU03y2ta++xpf2

oaP7Vqh5wo84V9aqWh+Kus27mH8QfhjpnxB8aeEvEE//ACE/Bd7Le2Un+xNbTW00f+6VkU/7

0aV0fme9Vs0vm+9RHDwhJyju9/yNquOrVoQp1ZXUFZeSu3p822SGXBpu+q/m/wCc0eb/AJzW

pynJeMPgtputwGTSwNFvOn7sfuZP95f6jFcT4M+IHiD4F+J/J/1P/PxZSf8AHrer/eX+jjkH

r6V7JvFc58QPBcPxB0XyZv3N5B+8spf+eb/4HoR+NephcZePscUuem+/Q+dzDJ0prF5f+7qx

1VtL/wBf8Oe0fDv4hab8TvDEGp6b/qv9XJE/37dv4lb/AGvQ9xzW5Xxx+z98WpvhL8Tv9N/c

2d7J9i1WLP8Aq/m2q31Ru/8AdzX2Vmvj88yr6lX5Y/BLVf5fI/Q+EuIP7VwnNU0qR0kvPv8A

MZWp4b/5bf8AAf61l1qeG/8Alt/wH+teLLY+qp/EZYOKpeJ9bHhjwvqepy/8w22luP8Avld1

Xa4f9qNvsf7Pvi7308/+PFVrrwcFVrwpvq0vvZx5lWdHCVa8d4xb+5HyH8GIpvF/xUm1S++9

Yo1/Kf8AptKSF/Lc1e37hXjf7MX/AB8+KP8Aetv/AECSvWlkIr9Lzl2xPKtkkj8T4Y/3JVXv

Jtv77foXg+KcJc1UWTFPD14/IfScxcWSnB6qK9PEmaOQLos1+VOi/wDByTrWtftoQ/D7/hX/

AIf/AOESm8cJ4Y/tr+1ZvO+xNe/ZFu9uzbn/AJaYzjHGe9fof+1l8Yf+FAfsxfEDxp/0LXhy

/wBSH+9FAzKv4mv529Z+BU3hj/gkN4S+Kvk+T4gvfivdW8Wox/6/yo9O2x/N/dF3bSOB13Nk

V42a16tOUY0n5s+iyXC0KsJSrK/RH9N4b3rhP2svilqnwK/Zi+IHjTRfsUuqeGfDl/q1lHex

s8PmwW7SL5iqylhuXkAg47iuT8T/ALaHhn4ffsK/8L11qb/in4fDFv4jkjttu+582BZI4Y93

G+R5FjUHA3MMkV+UHiL/AILPftHftM/AH4ra7qHwo0jU/gpeaTf+H9TutIs5kPhl7uApEz3r

OyzvF5kZkAhVSG+bytwroxGLpwjZvVo58Fl9WtNvRKLs7n3Z/wAEP/8Agov4/wD+Ci/wl8c6

z4/tPDNhd+HdXt9Psxo1pLbRSLJbLN83mzSfxN2xX3NX5K/8Gt+tWfhb9mz4zXt7PBDZad4j

t5bi4k+5Gi6dHub8K5zxV/wXO/aU/ap8W+OdX/Zz+F+k33w18ARfbby6v9Pa9vJbT5ts0i+d

FteRFaQW8QeQDrmsMNjIxoRdTdm+Ny2VXFTjQSSXnY/XzxNrU2jeGNTvYP8AXQW0sn02rX5+

f8ERP+Cq3xM/4KIeNfiDpnxAs/BllD4Y06yubL+xdOmheR5ZJlk3M88vyjy1wMDO6vSP+CZH

/BTiy/4KV/sreJtTm0yHw/4z8MRvZa9p1vIz2v7yFmhu4GbnyZQrYB+ZWjdSWADH8h/+CQn7

VPxU/Zw1L4laZ8F/hxe/EH4j+J9LtPsX7tprXRbW2lka5uZoVx5rHzIUjHmKN/8AezsMV8Wu

aE1tqVgsuk6dalUS5lbc/pI3UZNfm/8A8EYP+CyXif8Abe8f+J/hx8TtM0XTPGmjWz6jp1xp

1tJbQ3sUcnk3MMkLuxSaJ2jPB+YO3yqYznM/bD/4K+/Fzxp+2he/AX9l3wdoni3xP4f3x61q

uqjfDHLHt8+ONfMijRIWaON5ZH5lby1QkZPaswoumqvRnF/Zlb2zo9VrfpY/TMscVC0hzX59

f8ElP+Ctni39qn4z+Lfg98YfDNl4Y+KnhKOW4/0KNoYb1IZPKuY5IXLeVNE0kJ4kZZEk3LgL

z9/lsmtqNeFaHPA5sThp0J8k9yTzqPOqv5nvR5nvWhzkvn+9N3A1DuNJ5nPWgDxj9oDR4tM8

fpJgeTrFuXPHV1JDf+y19Zfs9eKP+Ey+C/h+9m/132f7PJ/vx/J/7LXyz+06D9r8N5677r/v

nale9fsRH/iwdr/2Ebr/ANGGuriFKeVUqvVO35/5HlcHVHQ4kr4aHwyjd+uj/U9dxitLw9/y

1/4D/Ws09a0vD3/LX/gP9a/O5bH7PHczTXPfFvwv/wAJp8LvEOmf8trzTpYo/wDe27l/XbXS

0hGa0oVHTmpro0zCvRValKjLaSt95+d37MetfYviTf2c3/MasBJH/wBdbctuX8pGr3YNg145

+1f8Mr74F/Gx73R/9VLcnWdGk/gl3E+bbt/s5ZlP+zIDXpHgvxpZfELwxBrWm/6m8/5Zfx20

q/6yGT/bRuCPx6Gv1bMJLEU4Y2lrGSPwTIKrwlSrlNfSdOT08m/6+VjoBJTlfFVFkyKesteO

fT3LivTvM4qosuKeJKBcx8T/APBw98W/+FYf8E1Nb0v/AJbeOtWsdBj/AN1pGuZvw8q3kB9m

x3r8uvGf7b39s/8ABJTw/wDAT/hUni2zh0W4i1WPxhL5n2K5l+3yXMk23yRxJ5zRj95j5l5I

4r9AP+Dgj9kn40ftnW3w08PfDHwlP4g0XRje6jqVx9ttoUjupFSC3/1sgPyI05OOPmWvrv47

/stweN/2A/Ffwi0aGIRzeCZvDelJxgSpaGK37nowj57bc14OKw1XEVpyjoku259VgsXSw+Gp

Rlq2777fcfmV8S/i3e/EL/g2G8KRQzef/wAI/rtn4Y1I/wDPOK0v3WJf++FtD9GFe/fsLWVn

/wAQ3niTyf8Al98J+K5L3/ppK02oK27/AMdH0WuT/wCCc3/BMr4n+JP+CcPxt+A3xh8PXHgs

eKb2LVvD91Jc292La6aON1k2xOSPKuLaMsOMq2B3ryD9mr9hT9tzQfhh4t/ZtMOmeDPhd4om

ujq+tXTxXsUELLiVbCVHDlLnaAUKgjzHbMZL1z041YTU3B6xt8zsnUoz5o86XLPm36GH/wAE

sr29sf8Agi9+2RNZf67Y0f8AwFtMjWT/AMcZq+oP+DYyys/+GHviXN/y2m8bXEcn+4um2O3/

ANmrQ/4IdfsEeOvgV+zb8ZfAvxn8GT+H7L4g3Sx/ZpL2Cb7bazWHkTr+6c/Svm/4f/sX/tr/

APBMjWfiB4E+D2jWfjTwl46/d22tR+S/8PlR3scbyKbe7EXysHDx5UMNwUGqpQqU1TqOLaSa

8x1q1GvKrRjNJtpp30a0Mr/g22M1j8c/jpZWX/IG/wCEPfzP+2d06wf+OtNXZf8ABqoc/Ef4

1zf9QzRP3n8f+tvvu/Xv/uivqH/gkP8A8EvNZ/4J9/sxeM5vEH2K8+JHxAtv9JsrKXfDp1vF

DIttZLK333DSSNI4wpaXaMrGHPxZ+xf/AME/P20P2CPBfiD4j/D/AMP2emeLb25TQb3wpey2

97/aOn+X5q3seJgjPDMzIEyG+ZzypIOVKlVoqnKUW7X2CrXo15VoqaV7JXNj9ieyhsv+DmLx

zDo3/Hl/b3ieS58v7nzW+6T/AMmG59DXjH/BNP4g/tE2X7X3xb1P4F+GPDHi3x1qcl/Lr0Wv

yRp5du2ouzMrSzxfN520EAnO0ZHANfdn/BED/gmR4+/Z9+K3jD41fGiF7fxz4rjuLW0sLi4W

a7jNzOLi8vbhk4WWV1UKB91VfP3sDzz9pX/gmf8AtE/sX/tz618cP2Y/7P1yx8SXNzdz6M8s

fn2f2mTzbq0kglKpPavN+8QxyLJGeMDyw5Hhaypqo4vdvz1B42j7WdJOL91K72uiz+wr+xF+

1EP+Ctll8dfi38PtF8M2Wpx3v9tXOnatZPDG7WH2aFVgSeV+Wjhyeeckmv1p8z3r4y/4J0fF

T9rf4n/FnXZP2gPBXhbwj4MTSM6amn+VFcvfeav3l82V9vl7uTtAKrwa+xtxr2cvpRhB8qer

vrufP5rXnOsuezsvs7DzLg0eb71BuIo3+9egeWTFuKidvmpN9YXxB+INn8MfC82s3v8Ayx/d

29v/AB3srfdhX/aPf0GT2ojTcpKMd2RVrwpQdSo7JHmP7SHib7b8SrWy/wCgNYfvP9+Yhv8A

0FV/76r6x/ZS8Mf8Ix8A/DcU3+uvEa8k/wC2rFv5V8c/AzwBefHP4sw2V5++n1S5bUdZuP8A

nnF/H+m2Nfwr9ClsvsYEMf8Aqov9XWXGGIhRo0sBB6rV/wBfeYeGuFeMxmIzma0fuxv+P3JI

bsNaWgLt838P61T2ir2ijHmfh/WvgpbH7HDcoHYP4qTzIx/FWTLrTgf6qqkuvSKf9UfwFbGX

tDN+O/wW0z46/D+bR7z9zPD+8srwffs5f73+6ejDuPfFfn54mPi39kv4m3kM1l++n/4/dNkk

/wBG1qJfuzRSfwv6SAeziv0HvfHUlj/y63n4R15z8abzw/8AFvwz/ZnibwX4g1qz/wCWf2bT

m863f+9FIpyG+nB7g19Vw7nEsGnh60eelLdaXXmr/wBeZ+dcZcLLHtY3Bz9niI7S6Pyl/nr5

qx4t8Mf2g/DPxb/c6Xe+Tqn/AC00m5+S9t/+2f8AGvuhINdgt/z/AI18h/tAfsxz6Le+d4Y8

JfFrWoYf9VHJ4TnS9tv92VDhvrgGqvgrSfj7ox/4llr8TooP+fbVdGeby/8Av8uf1r73+xsF

XiqmExEUn0k7P+vkflq4mzbASdDNcDUbX2qa54v7tF959mDUuOo/Ol/tL3H518v/ANo/tL/9

ArXP/Cbho/tD9pf/AKBWuf8AhNxVh/YH/T+l/wCB/wDAN/8AXaj/ANAuI/8ABT/zPqT+0vcf

nSpqQ/vD86+Xv7Q/aY/6BWuf+E1FSrf/ALS//QM1sfXw1FR/YH/URS/8D/4Af67Uf+gTEf8A

gl/5n1MupLj7w/Ol/tFf7618urqH7SmObDWB9fDUNL/aH7Sf/Plq/wD4TUNH9gf9RFL/AMD/

AOAL/Xej/wBAmI/8FP8AzPqX+0V/vrR/aK/31r5e/tD9pP8A58tX/wDCaho/tD9pP/ny1f8A

8JqGj/V//qIp/wDgf/AH/rvD/oExH/gp/wCZ9Q/2kv8AfX86P7RX+8K+Xv7Q/aT/AOfLV/8A

wmoaUah+0n/z46v/AOE1DR/q+v8An/T/APA/+AH+u8P+gTEf+Cn/AJn1EdTU+/5Uf2oP84r5

fGpftI/8+Wqf+EzDR/af7SP/AD5an/4TMNL/AFf/AOn9P/wP/gD/ANd4f9AmI/8ABT/zPpz+

1B/nFKupjP8A+qvl7+0/2kf+fLU//CZho/tP9pH/AJ8dU/8ACYhp/wCr/wD0/pf+B/8AAF/r

vD/oExH/AIKf+Z9SXN4sTjI+b/PamnVFm42Nn/Z//VXyzcar+0pKuF0/V/oPC0Ib/P4Vy/iv

TfjrqSY1mx+KF4v/ADx0/TDAB+EIB/Wj+wF9uvTX/b9/0RlU43/584LESfb2TX46n038Tv2g

vDHwx/cXl79t1r/llpNlte5k/wCunaJfeTH0NeOWd94m/aM8f2f+hfbdTm/d6dpNt/qdOT+L

5j/F/fmbHoMDiuO+BXwS1S9vf+J14O+Kvhiy/wCWvl+EZnubn/a3M2PxOT7V9x/Aq98PfCTR

fsfhnwX4s0zzf+Pi5vdNb7Vcf9dJG6+wGAKxx+NwuVRf1b95VfXovz/C78zsyrK824hqpZgv

q9Ba8t/efqt7+tkuzO5/Z1/Z/sfgT4SNv5qXmuaiVk1G76b3/hjjz0Re3qcsa9E3cVx1l4/m

vv8AmH30P/XSD/7Kr3/CRzH/AJYTf98f/Xr8rxM61ao61d3kz97y/DYbCUI4bCxtGKsv67vq

dD5mKv6G27zfw/rXLwas0vVGH1FdB4Un84T+23+tcc9j0KfxGH1pCoPaloJxVEDDFmjyRQZc

UecK09oAeSKQwAil84UecKDMia3DGk+yj1qXzR6UeaPSgCL7KPWj7KPWpfNHpR5o9KA9nAi2

D/Io2D/IqXaKNooD2UCLYP8AIo2D/IqXaKNorT2geygRbB/kUbB/kVLtFG0Ue1D2UCH7NR9m

qXzP84o8z/OKj2hp7OAn2aj7NUvmf5xR5n+cVftDP2UCL7NR9mqXzP8AOKPM/wA4rMPZkX2a

j7NUvmf5xR5n+cUe0NPZDfJFHkik87/OKPO/zis7gS+SK2fCKbPtH/Af61i+d/nFbXhB9/2j

/gP9adT4S6fxH//Z



------=_NextPart_000_0012_D3E3F715.6E969EA7--



Invoice Phish Part 2

------=_NextPart_000_0012_D3E3F715.6E969EA7

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




w3.org/TR/html4/loose.dtd">









3D""
=3D"baseline" width=3D"222" height=3D"159">



We would like to inform you that you=

r payment document in PDF format has been made available.
Due to storage=

limitations, the document cannot be attached directly to this email.
T=

o view and download the document, please use the secure link provided below=

:



[
s-onlinecopy.appwrite.network/#sales@nk.ca">Transaction Receipt.pdf
]
>

Please review the document at your e=

arliest convenience. Should you encounter any issues or require assistance,=

do not hesitate to contact our support team at
-projects-onlinecopy.appwrite.network/#sales@nk.ca">[Support Contact Inform=

ation].



Thank you for your attention to this=

matter.



Sincerely,

a-end=3D"677">Adobe Systems



------=_NextPart_000_0012_D3E3F715.6E969EA7

Content-Type: image/jpeg; name="untitled.jpg"

Content-Transfer-Encoding: base64

Content-ID:



/9j/4AAQSkZJRgABAQEAkACQAAD/2wBDAAIBAQIBAQICAgICAgICAwUDAwMDAwYEBAMFBwYH

BwcGBwcICQsJCAgKCAcHCg0KCgsMDAwMBwkODw0MDgsMDAz/2wBDAQICAgMDAwYDAwYMCAcI

DAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAz/wAAR

CACfAN4DASIAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAA

AgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkK

FhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWG

h4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl

5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREA

AgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYk

NOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOE

hYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk

5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD9zKKMUYroMwooxRigAooxRigy5AooxRg0

ByBRXwV/wUN/4KweOv2Pf2jbzwZonh/wxqljBp0Fx5t753nb33f3HC14SP8Ag4F+J/8A0Jng

f/ya/wDjtfO4nijA0KjpVG7p22Z+v5N4FcWZpgqeYYOlB06iTV5xTs/Ju5+tdAr8mP8AiIF+

J5/5kzwP/wCTX/x2ks/+C/HxVvryGGz8C+B7y8nkS3t4o/te+WVm2xqv73qW4Hu1Y/64Zc+r

+5noT+jxxlBc0qVOy/6eR/zP1rlkwGDhETOdvRs9RnPXHao3O5zn+Id/z+lJ4B0PVZvBGinx

I1mmutaxNqC2OVtzcbMyeWG52buntW2PDkZVv3shz1zjAPrX0XtT8WqUnCbho/Tb5GEKkq/q

XhyaOwuDaTHzhFmPzPubq/JrxL/wXZ+MPgLxJqeg6z4H8DRaxoF5Lp96n+l4jniZkkX/AFnq

rY9sGvPzHOcNgYqWJuk/K59hwd4eZvxPOpSyhRlKnZtSko6PrrufqtRX5Mf8RBPxO/6EzwL/

AOTf/wAdoP8AwcE/E3/oTPAv/k3/APHa8j/W7Lf5n9zPvv8AiXXjRb0Yf+DIf5n6z0V+d37D

P/BYbx3+1N+1T4Z8C6z4Z8I2Wma0l1JLcWZuPOi8q3eVdu5yOq4PtX6K17WX4+hjKftcO7q9

trH5txbwZmfDeMWBzWKjUcVKykpaO63XoR0U7y6PLr0j5kbRTvLo8umA6iiigArW8L/8t/8A

gP8AWsmtbwv/AMt/+A/1qZbDW5k0UUVIgooooAKKKKBXCiiigLn4vf8ABbk/8Z5ah/2CbH+b

V8iV9d/8Fu/+T8tQ/wCwRYfzavkSvxLO3/t1X/Ez/TnwwduFMB/17iFfWn/BFv8AZjb9oH9s

3StXu4PO8P8Aw7jGu3XHySXOWSzj/CQNL9bYetfJdft7/wAESf2ZB8BP2NrDW7yHydf+IrjX

7vj5o4HQC1j/AAh2tjs0jV2cM4H6zjYye0Nf8j5nxv4uWS8MVadOVqtf93H0a95/KN16tH2U

FwuKMcUJ92jNfrp/niHavxZ/4Lt/szN8JP2rrTxzZxf8SX4jWoac/wDPPUbZVR/+/kPlEepj

lr9pm6V80/8ABVj9mI/tS/sbeJdOsrbz/EHh9P7c0XA+f7VbqzeWv/XWMyxf9ta8bPsF9Zwc

oLdao/SvCbix8P8AEtDEydqc3yT7csur9HaXyPwOooJwKUda/GPI/wBK9HG6Ppf/AII+jH/B

QjwIP+mWof8ApFLX7iV+EX/BMTWpfDP7cPhG8g/1sMN+R/4ByV+03w9+NNl40/0Kf/Q9T/55

fwSf9c2/pX69wNgK1TK5V4q8VJp/cj/P36TubYahxhRwlWVpyoxavs/en1O3ooA4or6Y/CAo

oooAKKKKCOcK1vC//Lf/AID/AFrJrW8L/wDLf/gP9aT2HGV2ZNFFFMyCiiigAoooB5oLEzS1

DrOtWWi2M17eTw2UMP8ArJZPuV5b4p/a4sdJTy9FsH1AH/l5uj5Mf/AV6/niu7B5diMV/Ai2

u/T7zyczzzBZer4uoo+W7+5an5a/8Fuf+T8tQ/7BNj/Nq+Ra+lf+CsXjO8+IH7Xl1qV75Pmn

SLP/AFf/AAKvmo9a/CeI6M6GZVqVTdSZ/qX4TYuGI4Oy6tT+GVKNvuPT/wBjj9nWb9q/9qLw

d4HGPsepXqXGq5/5Z2EXz3P/AH2i+WP9qYV/RdpunxWFisMXG0V+bX/Bvd+zH/ZXgXxR8WdU

g/0rXZToWjS+lpA37+Rf+uk+VP8A16rX6XKeK+74SwPsMH7V7z1+XQ/kf6QHFqzbiN4Ki708

MuT/ALefxv77R/7dFHArNOt2n9tw2Pnwi9mie4jg8z53jVlVm2+gLKD7kVpM2xCfQZr8efi3

/wAFMP7I/wCCzNp4viuz/wAIT4Tu28BXCn7j2bvtu7j22Xe1890tBXtY7MqWDUXU+00j864Q

4Lx/EVSvTwK1o05Tel722ivOT0R+w9NkTfGV9RiiKUSxqw/iANOrvPj9mfz4f8FLf2aP+GWf

2yvFvh+GPy9B1aX/AISDRz0VLW5ZmaMe0UyyoP8AZCeteDjg1+wf/Bf39mv/AIWB+zjpnxEs

ImfU/h7d/wCl7Ry+n3BWOX/vh/Jkz2VJK/HhRk1+NcRYD6tjpJbS1XzP9I/B7iz+3uGKNapK

9Wn+7n3vHZ/NWfqfR/8AwSaOf29/B3/XDUv/AEjkr9UviD8JfsP+m6N/qf8AWSW//PP/AGo/

8Oo7V+Vv/BJr/k/fwb/1w1L/ANI5K/Zyv13wvxE6OAnKP836I/ir6YWBpYriehCotfYxs+q9

6Rk/Av4z/wDCT/8AEl1Sb/iZwx/6NL/z+L/tf7Y/Ue9elYr52+J3hj/hC9bh1nTf3MM0n/gP

cfwt/un09frXuXw+8Zj4geGLLU4f+W3+tj/55yr95f6j2r67PcDTjbF0PhluuzP5z4TzWvPm

y3GO9SGz/mj39V/Wpr0UHrRXzp9mFFFFAgrW8L/8t/8AgP8AWsmtbwv/AMt/+A/1pPYun8Rk

0UUVqQFFFFAwrJ8aeNbL4e+GJtT1P/Uw/wCrj/juHb7qr/ngc1rHivmj4z+J5/jR8Wv7Gspf

+Jbpm6OOT+CNF/103+92H4V6mUZasZXtU0hHWT8v+CfPcR51/Z2G5qavUk7RXn/wCle614g/

aC8T+dN+5soZP+3Wy/2VX+N/U9foK7fwx8K9F8M/8sXvbz/n5uFDv/wFei1oaHYw6LosNlZw

+TDD/q4//Zm9/U1dr6qvimo+xorlprZL9T4XCZbFT+s4r95Verb1+7sfk1/wWI/5PLuv+wPZ

f+zV80+D/Bup/Erxno/hrRofO1jxBexafZR/9NZW2ru/2fmyT2Ck19Lf8Fh/+TzLn/sD2X/s

1d9/wQa/Zv8A+Fh/tMan8QL2HGmeALQpZ/8ATW/uQy/+Q4d5PoZ4zX8y4/BPGZ9UoLrN/d1P

9Z+G+JaeQeGGFzWf2KEbecmrRX32P1l+APwh0v8AZ8+DHhnwZouf7O8N6fFYR56ybF2tI3uz

ZYnuSa7bfuXrWT9vqT7f2/rX6ysMoRUVsj/PrE46piKsq9V3lJtt9292eL/8FIf2nv8Ahk39

kLxP4lt2H9tXMQ0rRlP8d9P+7ib/AIBzIf8AZiav5+f+XPFfev8AwXq/aa/4WD+0Dovw6s5R

/ZvgW2+2ah/00v50+Xd/1yt9uP8Ar5NfBfavyXi/HqtjfZQ2hp8+p/oD9H7hNZTw2sdXjari

nzP/AAbQX3Xl/wBvH7sf8EhP2nz+0z+xloL3s5n8QeEv+Kf1XzPvySQKvlTN/wBdIWic+7Gv

qouPWvxK/wCCHn7TZ+C37Ww8J3k3k6L8Rrf7Ef7kd/Fuktm/4Enmp7s8Y7V+z4vCe9ffcN4r

65goylvHRn8leMfDH+r/ABLWoRVqVR+0h2tLovR3XyKfxI8D6X8T/AuteH9Yh+0abrtnLYXc

Wf8AWxyrsb9K/nF+OHwm1L4A/GbxL4H1Mf6Z4T1GXTpJD/y8RL80M3/bSJo3/wCBV/SIZ9x6

1+U//BwF+ziPD/xE8M/FKxi/ceIo/wCw9Yx/z9Qq0ltIfdo/NQn0hjFeZxlljqYVV4bw/J7n

2/0ceMVgM9llNZ+5iFp/jjt96uvN2Pnj/gkz/wAn7+Df+uGpf+kclfsuTgV+NH/BJof8Z8eD

v+uOpf8ApHJX7J7q9zw1/wCRdP8Axfoj5v6W2vFeH/68x/8ASpFLXNE/4SbRp7OX/l8j8v8A

65t/C351gfsr+JprPWdU0Wb0+0R/70beXJ/7LXWbq878Dn+xP2o1h/5/J5P/ACLFur9NjTVX

CVqL7cy+R/IlR/V8xw2Jj/Nyv0Z9Ak5NFFFfEH6oFFFFAwrW8L/8t/8AgP8AWsmtbwv/AMt/

+A/1qZbFU/iM2iiiqKCkPSlHNB5oLMD4o+J/+EL+Getan/y2s7N/L/3m+Vf/AEKvnv8AZx0b

GiXuqf8AP5cfZ4/9yP8Axfcf+A12/wC1J8afD194A1Dw/ZanDeanMYv3Vv8AOke1x96Tp+GT

XNfAk/8AFo9E/wB2T/0bJX2mV4adHLpVJxacpLftY/Ks+xlHFZ5CnTkpKnC+jvq3Z/gdor81

Mj1TVqlR6DU/KD/gsMf+Mzbn/sD2X/s1fpl/wTf/AGff+GVf2SvD3h+eHyPEN8rarrX/AF+T

jcyt/wBc02RD2iFfHnxp/Z//AOGkP+Cwui6Zexedovh/SbLWtVP/AE72zM0MLf7MlxJGCO6e

Z6V+jX24CvzbI8n5szxWMn/M0v1P6q8TeNuXg7JeHMPLalGpP1taK/N/czoRqOR0Hfof8mqf

iHxHc6N4dvr2zsptSvba2klhs0babyRRlIwegJ96ym1HA+8ML1A7jPNPTU8T/wAUxYmNULbR

IRzknsAPWvr5YXQ/nyhmHLLm38j8avGX/BOD9pX4meMtZ8Taz8PpptZ8QXsuo3v/ABNrL/Wy

tuZV/ffdHQDsqgVwHxo/YT+Lv7P3gubxN4u8GT6N4fhkitpb37dbTeW8jbY9yxSE7SzKATxl

Invoice Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Jan 2026 14:04:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vjknX-00000000GoO-3T6V

for dave@doctor.nl2k.ab.ca;

Sat, 24 Jan 2026 14:03:59 -0700

Resent-From: The Doctor

Resent-Date: Sat, 24 Jan 2026 14:03:59 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [217.194.215.119] (port=60167 helo=hukcentos72onyx.hostinguk.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vjhEo-000000000U0-1AlB

for sales@nk.ca;

Sat, 24 Jan 2026 10:16:04 -0700

Received: from scottishpsc.org.uk (ec2-54-226-138-61.compute-1.amazonaws.com [54.226.138.61])

by hukcentos72onyx.hostinguk.net (Postfix) with ESMTPSA id 81BFA2B208C

for ; Sat, 24 Jan 2026 17:01:21 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=scottishpsc.org.uk;

s=default; t=1769274083;

bh=ifEw2N6ravtYPdquC7gcBjgNd6WSCc82VHvLGSa01DY=; h=From:To:Subject;

b=I5qSN9OQpCUaWEDf/gtEOXconZgSUPaBbVISxf2N7zHd4QWXFeKpVFNm+BRTVe7y9

BWyebdDjkNUY5Wo4dOUL92i494ws58eqofH6ORf/eBHaIwFrYtzO3ZNKC4SwfxHpQo

WhUb1OiosZ4DQcKmLdUcfswLCeviQiB0NZ9ion6/lkJf0aLxyNGFhxv3w623exF2H3

x6kaRsq2YUZ2itO3mwRXbAQcuTyfhGLHM1mEwe4LQW1ozDibZwXdMUcXHbn2kf+gxY

AfijPhHNCnrvORY0CEZnoBYHSFlI2y0eqDy+K5LuLbmLth1Hk1gt0djPT0/YoSWhSt

f3lJGaxJQ+yMg==

From: Adobe

To: sales@nk.ca

Subject: Payment Document Now Available

Date: 24 Jan 2026 17:01:20 +0000

Message-ID: <20260124170120.01BA83C0F2066A9E@scottishpsc.org.uk>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_D3E3F715.6E969EA7"

X-Spam_score: 12.3

X-Spam_score_int: 123

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: We would like to inform you that your payment document in

PDF format has been made available. Due to storage limitations, the document

cannot be attached directly to this email. To view and download t [...]



Content analysis details: (12.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[217.194.215.119 listed in dnsbl.ahbl.org]

[217.194.215.119 listed in dnsbl.ahbl.org]

[217.194.215.119 listed in dnsbl.ahbl.org]

[217.194.215.119 listed in dnsbl.ahbl.org]

[54.226.138.61 listed in dnsbl.ahbl.org]

[54.226.138.61 listed in dnsbl.ahbl.org]

[54.226.138.61 listed in dnsbl.ahbl.org]

[54.226.138.61 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[217.194.215.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[217.194.215.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[217.194.215.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[217.194.215.119 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.226.138.61 listed in will-spam-for-food.eu.org]

[54.226.138.61 listed in will-spam-for-food.eu.org]

[54.226.138.61 listed in will-spam-for-food.eu.org]

[54.226.138.61 listed in will-spam-for-food.eu.org]

[54.226.138.61 listed in will-spam-for-food.eu.org]

[54.226.138.61 listed in will-spam-for-food.eu.org]

[54.226.138.61 listed in will-spam-for-food.eu.org]

[54.226.138.61 listed in will-spam-for-food.eu.org]

[217.194.215.119 listed in will-spam-for-food.eu.org]

[217.194.215.119 listed in will-spam-for-food.eu.org]

[217.194.215.119 listed in will-spam-for-food.eu.org]

[217.194.215.119 listed in will-spam-for-food.eu.org]

[217.194.215.119 listed in will-spam-for-food.eu.org]

[217.194.215.119 listed in will-spam-for-food.eu.org]

[217.194.215.119 listed in will-spam-for-food.eu.org]

[217.194.215.119 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: appwrite.network]

2.5 URIBL_DBL_BOTNETCC Contains a botned C&C URL listed in the DBL

blocklist

[URI: appwrite.network]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[217.194.215.119 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[217.194.215.119 listed in sa-accredit.habeas.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[217.194.215.119 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[217.194.215.119 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[217.194.215.119 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 MIXED_HREF_CASE Has href in mixed case

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} Payment Document Now Available