Co-operation spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jun 2026 06:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY1Pq-000000002Iy-3Jun

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jun 2026 06:55:18 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jun 2026 06:55:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f182.google.com ([209.85.222.182]:55788)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY0UJ-000000009O3-3Mu5

for root@nk.ca;

Fri, 12 Jun 2026 05:56:00 -0600

Received: by mail-qk1-f182.google.com with SMTP id af79cd13be357-915671abde5so104704385a.3

for ; Fri, 12 Jun 2026 04:55:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=apexlattice.org; s=google; t=1781265298; x=1781870098; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=ncOTaR9s76ihX8zOpSTNt4fpNimFL494yko7HS7C7Ys=;

b=F5k003jG/LThJUq11KmJh35Sm4b4nErRS0Bvy4I482BIModYCe8JspZ5e0KQ3FS++w

qlkH6DEHOCzDJWOquckF1juCYFN/2Hq5CDMot6b7RxMJee4ehziobYkPa1lZ6JZBkK1l

1pUmBIm7QtndgqVcr2Y4Tm009L43+aE2UPXH6ksCgOCRZzzBw06xwHyJO3flLQ0QNre/

4KxUdyv9i7mLxR6ZFwneitAzqcsH+T36a4w5A8HGcEVOO9pRqlE2kPrzfSq2MMOH35Uh

ry5TAu/ZnYWoufBWFK/+ZlB1LYf00Y/+zFCvv69Pln7Q9rEsi7nPz9by39j8C71dhMdy

9hyQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781265298; x=1781870098;

h=mime-version:date:content-transfer-encoding:subject:to:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=ncOTaR9s76ihX8zOpSTNt4fpNimFL494yko7HS7C7Ys=;

b=sVWXTlHopTCZdd6z7bd5wvOCyP2SHU2bjcuc3b5XvlD9DJm0/7uQEs07a9fEUJHaCL

8vUq+W4G5fx8glLPgQtnBQepMZpds8cFlnGiPOoGD/r/U81LCspZn20DQZTZIbUM4VzZ

Ph2j7s+DmO/DQcuHWJhiDWjYCl+S1qW4zV6lipM9ENpu3CBAtGZaw8Eq57XXw6YXrILF

EW7pZLWBsr2ISy9vuncqNSRKkXrO8ffyBYZhqlPMaeSSlj1ubmC4RIk6VfmCPq2Qp406

ekYe9blsavsUBiL4G0gC3ufIEaZiEAAVMgMTnPVFHet1nVwwzvuzxhUA42tJmldXRJMW

VuLw==

X-Gm-Message-State: AOJu0YzjL7lzNvqxMOVOMD9uT/byI/ZxrW0jziwKwJJmvaiUEVmLvmPW

dSnprJfMuOGEic3Pg9MvN5H3DP8NIRIucm8dgupSBcdAqwilBj96GBYKPgNpsHOXo5JMGbgpzsm

u+4o=

X-Gm-Gg: Acq92OFEktVyUcF0/Kg/8xNTkuslzHJW66ResJaH+Zk4VtYMorE96NOZEGAXg+U2RqA

pGRD16pYPkzzOTIFXaLbacUCD8DManPskc5yu5H9sSR6nCXbfkC+wFNd4DThNJcKbC3smy0EEUN

IdQiBWfigt7mpH04p8UKkijYv1L2IwvyY0i4DZC6K+Ye8wQjzQXYR0aKAA/B5W8lsZezmcoAr6s

Hqu6mBRKaF5RfyYxULoHrN8j6HG4k80Lfm1gNN+qxgR1ZpaBsicbE/TgBdH3ZX9TU68xspYNbJ0

DmEp8a2SIOoSMyZF36vUBbcojzZonDWWqAqvUvAkkuA7ngAcXD41e+oB94l20NV9MyL/HAXGalD

9eUTmSnqpYEYf1+C2z2Y/6mdeZC83eiOt7crxCBcUmK4C+oi1wvlZ2sKdBLaiTLkllSklOq7GJ5

KHJNHE2a8poUOmNNNgrPPChsSp8/yI1oxtUI5RPkjzspctuH0BQzAaiAEQ9+h/BlxfV4eRmgCWL

RHi1wLMg3viimPR5gP+LO0ptBQPviilBnQnZDCZmNDmnS8PxtU=

X-Received: by 2002:a05:620a:394b:b0:910:87f4:9a26 with SMTP id af79cd13be357-9161bd5b222mr318920585a.41.1781265298366;

Fri, 12 Jun 2026 04:54:58 -0700 (PDT)

Received: from 019ebbae-cf09-75dc-add5-809b8fa305c2.local (ec2-52-0-99-245.compute-1.amazonaws.com. [52.0.99.245])

by smtp.gmail.com with ESMTPSA id af79cd13be357-9161a00598fsm185979085a.31.2026.06.12.04.54.57

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 12 Jun 2026 04:54:58 -0700 (PDT)

Message-ID: <019ebbae-cf09-75dc-add5-809b8fa305c2@apexlattice.org>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019ebbae-cf09-75dc-add5-809b8fa305c2

From: Olivia Flores

To: root@nk.ca

Subject: NK new clients

Content-Transfer-Encoding: quoted-printable

Date: Fri, 12 Jun 2026 11:54:57 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8



Hi =C2=A0



I came across NK online and wanted to reach out because we're =

working with other internet providers that are offering internet services.=

=E2=80=8D



I=E2=80=99m currently working with a few internet providers on =

campaigns that are getting their sales teams meetings with warm leads every=

month. We=E2=80=99re targeting people who need internet services using =

personalized email sequences.=C2=A0



If I could help you connect with =

potential clients like this, would that be helpful to you?=E2=80=8D



Thanks,

Olivia

422 Richards St, Suite 170. Vancouver, BC V6B 2Z4

P.S. Please let me know if you don't want to hear from me =

again

Investment phish from Microsoft Outlook Part 3

Posted by Dave Yadallee on
This is a multi-part message in MIME format



--CyWOgAEIHMdjrw2jSrmfrVwZjNjIjyJO=_0

Content-Type: text/plain ; charset="ISO-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



I=92m Peter Densen, CEO of AGP Global Capital. We provide fast, busine=

ss-purpose funding for companies and principals who need capital witho=

ut bank delays.



We fund:



=20

Bridge loans



=20

Working capital



=20

Asset-backed and structured financing



Recent closings include:



=20

$12.5M bridge funded in 14 days



=20

$2M working capital for a logistics firm



=20

$4.8M asset-backed liquidity loan



You=92re on our outreach list because your profile indicates active ca=

pital needs.



If you have a real transaction you=92re looking to close in Q1, let=92=

s speak briefly and see if we=92re a fit. Calls are straightforward an=

d decision-driven.



Reply here, and we=92ll take it from there



--CyWOgAEIHMdjrw2jSrmfrVwZjNjIjyJO=_0

Content-Type: text/html ; charset="ISO-8859-1"

Content-Transfer-Encoding: quoted-printable









Hi,



I=92m Peter Densen=

, CEO of AGP Global Capital=

. We provide fast, business=

-purpose funding for companies and principals wh=

o need capital without bank delays.



We fund:







  • Bridge loans





  • Working capital





  • Asset-backed and structured financing
    SPAN>



Recent closings include:







  • $12.5M bridge funded in 14 days=





  • $2M working capital for a logis=

    tics firm





  • $4.8M asset-backed liquidity lo=

    an



You=92re on our outreach list because y=

our profile indicates active capital needs.



If you have a real=

transaction you=92re looking to close in Q1, le=

t=92s speak briefly and see if we=92re a fit. Calls are straightforwar=

d and decision-driven.



Reply here, and we=92ll take it from there

<=

/HTML>



--CyWOgAEIHMdjrw2jSrmfrVwZjNjIjyJO=_0--

Investment phish from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.198.101 listed in dnsbl.ahbl.org]

[40.93.198.101 listed in dnsbl.ahbl.org]

[40.93.198.101 listed in dnsbl.ahbl.org]

[40.93.198.101 listed in dnsbl.ahbl.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[dnsbl.ahbl.org]

[66.235.168.164 listed in dnsbl.ahbl.org]

[66.235.168.164 listed in dnsbl.ahbl.org]

[66.235.168.164 listed in dnsbl.ahbl.org]

[66.235.168.164 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.198.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.198.101 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.198.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.198.101 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.198.101 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 MY_DSL I could use a BL for this.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.198.101 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.198.101 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 FORGED_SPF_HELO No description available.

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Opportunities with AGP Global Capital

Investment phish from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jun 2026 06:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY1Nr-00000000Pbq-3kON

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jun 2026 06:53:15 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jun 2026 06:53:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westcentralusazon11020101.outbound.protection.outlook.com ([40.93.198.101]:53099 helo=CY7PR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXtVW-00000000DSL-0hkl

for root@nk.ca;

Thu, 11 Jun 2026 22:28:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ub+6hWFw4iiwk9nER0AhYUFWdm42I/RRLtmk/toLC3sQwdqCKQO2mEbi3Ps2+o2Z9efc9IZxz35ZHQLmidrC4wVkj4i0IrR9CBepRjRH5ANDVZjFL5G2fxAijJQqVUJ8yClUY0cmz61F7lklU6sQgYxEmexd4CQSoa972/hOErsHVp4ydvMCJ6kXOI4eL/sNpQE3/ciSEtnIzjY+ileJXg/ZMEaiW8a/31VFjjUIO6x9rBlSltTjcXVfO4FbWQc3Y1/3KEZIAinfFDPvRwpz4BTMW20C0jcbNXDRx0ZVA4m2qMsiZDds7egHEb9/jBAEt5iy3ucN7FIFR3QGVPLjeA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Aqgx5b7X7M0N/06RfWj2Eplj1Z0hTBx95Ehu2+xycGs=;

b=ECQxqZKDEWThIqpTakH+RowBhjCuvR0YRpMABsyduAj3p+LXetb/uIuomNymLkAqsFUC24bo2R4ZkAtB42xWXIc0ZJOPd+2dMqouulcWNugU8d+MaB5K8eWwAtPSZtfJlzD3ll1c2FRXad6YzW2iJq1Usg9UO0dve+eTnH6veJ8IIZCsolndHdsPgqni4ICfNpSNSOsIHkJybQPlf0dzjRa4M7pp4y3w0jA3IuLGms1vaIeBzydBHG6w6WKmy/M3wGe8r9YjNVtPswIXd44JkOu/ytRcL/xNpxpTrbGCBBw4KkbByJVfzvRxw8E1u+1hZG6wtz3Wt0Fh/VvLtbqxtA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

66.235.168.164) smtp.rcpttodomain=nk.ca

smtp.mailfrom=securefinancesolutions.com; dmarc=none action=none

header.from=securefinancesolutions.com; dkim=none (message not signed);

arc=none (0)

Received: from MN0PR04CA0020.namprd04.prod.outlook.com (2603:10b6:208:52d::19)

by LV8PR03MB7517.namprd03.prod.outlook.com (2603:10b6:408:185::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.113.14; Fri, 12 Jun

2026 04:26:41 +0000

Received: from BN3PEPF0000B06F.namprd21.prod.outlook.com

(2603:10b6:208:52d:cafe::12) by MN0PR04CA0020.outlook.office365.com

(2603:10b6:208:52d::19) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.113.14 via Frontend Transport; Fri,

12 Jun 2026 04:26:41 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 66.235.168.164)

smtp.mailfrom=SecureFinanceSolutions.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=SecureFinanceSolutions.com;

Received-SPF: None (protection.outlook.com: SecureFinanceSolutions.com does

not designate permitted sender hosts)

Received: from WIN-OEM8GK9H1E8 (66.235.168.164) by

BN3PEPF0000B06F.mail.protection.outlook.com (10.167.243.74) with Microsoft

SMTP Server id 15.21.139.1 via Frontend Transport; Fri, 12 Jun 2026 04:26:40

+0000

From: "PETER DENSE"

Subject: Opportunities with AGP Global Capital

To: root@nk.ca

Content-Type: multipart/alternative; charset="ISO-8859-1"; boundary="CyWOgAEIHMdjrw2jSrmfrVwZjNjIjyJO=_0"

MIME-Version: 1.0

Reply-To: peterdensen@outlook.com

Date: Thu, 11 Jun 2026 21:26:40 -0700

Message-ID:

<50601137021251329@SecureFinanceSolutions-com.mail.protection.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN3PEPF0000B06F:EE_|LV8PR03MB7517:EE_

X-MS-Office365-Filtering-Correlation-Id: 871f8602-99a8-40e3-5ccf-08dec83accfa

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|1800799024|376014|23010399003|36860700016|82310400026|56012099006|8096899003|18002099003;

X-Microsoft-Antispam-Message-Info:

BVTZ1Mbsiyfbx/eSNVx18EROv85lI2tbtdYziS+CKBmNvzJ/zUiLgD2mEDHwaZ0sFxejjX23iI07WLaGIVe90Ffo5ztzL+DB0fVJ4uauKISzfBVWNl3ZDGBH8dmvPx3sGovdmZNtuCrdVtbfKI79CVDDkaRJYap/zTsZ/IzW9sgBr1Y2dlPGjwvkfYk7HGpEHg8Wimlnu7A1st/X28vZ8E4E6U+sFOZbhL4yydf5rYpboYr5b1amdCd3KrhjbvXgQa+oGjAcGNbLM7WJX1usGSB1Q/UVylhXH9+iM3JI1iJLdJKE4WBqd5v5W3n1w/t/Wqe+q63Wh/qRk5CO1orSIwFZScYvka+j55FdAsa0LIvHCw0l901JD5gQzA2NdgzgzdcpwaYSMwdnmhFFDaKIFq7H//FcbxvJ/r4gpfRsitbdKHDST8ujMANzuKqGBctDK7nwLSWqX6/m1i5jtAxnjzWrf2AeR7UCVG1kwhRP1MbowH4o78iQ1XNO23HX4WoKNEUESGIxvvACeim+Oyf/UZOKh0FSXGbxYtuz7SeigEkgb/bkdA/H5VLEBZz5SISiwCflahxNmWE2l8H32m576GjlfyF0MEb+iYqxIN/Fx18tePaOZFMWiSEMHo8teDCBaYsWAxPzmko4F/UhCCyNM7zXeAvrsG8oI+kQW2cHuyUza5fjzCXG05zpZ23VR6Ky/03jmO4bxrsL7527/vijvxJ5/8lnqv2eJg/a7S2izJk=

X-Forefront-Antispam-Report:

CIP:66.235.168.164;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:WIN-OEM8GK9H1E8;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(1800799024)(376014)(23010399003)(36860700016)(82310400026)(56012099006)(8096899003)(18002099003);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

E3auQ2z1A0DVM6192ItNKkyYBRboTL4BPEnt71emKSTvaqG4KM0TtFYsNtHO788julUMg31aJRzvKYZcfihuPZoNr9tGwrj+6MSWBigpN9U4M5aTqsKOfe/+PlGYwi53cwm8OAHSXDlf6pbTR74TeX2ae4TjzQt8i9Wz/qL3xRY9dPwhwqnChUjsVmemrMSTtyZDvAlwZZvy82gFx0FIM2swkLWkVA/ZrD0RnAarwk2sIheT6CiF2L/yUfMpJE8DQabi4mdEe1IA9nkZJ4tz2dWM86gJqh9ApU5UUS6HRASICoxlxfSeJe6AFMvb5S3g7mJPUGECkvOyaLwWKyi9cL6Lvr0ktkGKUq25nyHLrQH2P/IYiw+Z0mhGSn/NQfRTHlbCunyP4sIiluPxbW23vCQ4hmwrcJGwQZtjdOp6LVY19ltrCQQLjqERAJ+6SC0X

X-OriginatorOrg: SecureFinanceSolutions.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Jun 2026 04:26:40.3456

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 871f8602-99a8-40e3-5ccf-08dec83accfa

X-MS-Exchange-CrossTenant-Id: 59deaa40-bef6-411c-b65a-c8ed36f4cc85

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=59deaa40-bef6-411c-b65a-c8ed36f4cc85;Ip=[66.235.168.164];Helo=[WIN-OEM8GK9H1E8]

X-MS-Exchange-CrossTenant-AuthSource:

BN3PEPF0000B06F.namprd21.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV8PR03MB7517

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I’m Peter Densen, CEO of AGP Global Capital. We provide

fast, business-purpose funding for companies and principals who need capital

without bank delays. We fund:

Nigerian Lottery spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jun 2026 09:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY3bA-00000000IbI-1KyQ

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jun 2026 09:15:08 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jun 2026 09:15:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [142.132.158.170] (port=41104 helo=server12.mediapartner.cz)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY2yx-00000000CTV-3tkI

for sales@nk.ca;

Fri, 12 Jun 2026 08:35:49 -0600

Received: from [10.100.0.2] (unknown [185.228.19.248])

(Authenticated sender: info-dcuu@judita.cz)

by server12.mediapartner.cz (Postfix) with ESMTPSA id 193D947C38B9;

Fri, 12 Jun 2026 16:01:56 +0200 (CEST)

Authentication-Results: server12.mediapartner.cz;

auth=pass smtp.auth=info-dcuu@judita.cz smtp.mailfrom=info-dcuu@judita.cz

Content-Type: multipart/alternative; boundary="===============2124114047=="

MIME-Version: 1.0

Subject: Good News, FOR YOU!

To: Recipients

From: "Charlotte Phoenix"

Date: Fri, 12 Jun 2026 15:01:44 +0100

Reply-To: charlottefoundationphoenix@gmail.com

X-Spam: Yes

X-Spam_score: 10.8

X-Spam_score_int: 108

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Kindly confirm ownership of your email, It was randomly selected,

after an electronic computer Spinball draw, to receive a Grant Donation of

$1,250,000.00 USD from Phoenix Foundation. Send a confirmat [...]



Content analysis details: (10.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[142.132.158.170 listed in dnsbl.ahbl.org]

[142.132.158.170 listed in dnsbl.ahbl.org]

[142.132.158.170 listed in dnsbl.ahbl.org]

[142.132.158.170 listed in dnsbl.ahbl.org]

[185.228.19.248 listed in dnsbl.ahbl.org]

[185.228.19.248 listed in dnsbl.ahbl.org]

[185.228.19.248 listed in dnsbl.ahbl.org]

[185.228.19.248 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[142.132.158.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[142.132.158.170 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[142.132.158.170 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[142.132.158.170 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[142.132.158.170 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[142.132.158.170 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 LOTS_OF_MONEY Huge... sums of money

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Good News, FOR YOU!



You will not see this in a MIME-aware mail reader.

--===============2124114047==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Kindly confirm ownership of your email, It was randomly selected, after an =

electronic computer Spinball draw, to receive a Grant Donation of $1,250,00=

0.00 USD from Phoenix Foundation. Send a confirmation Email to ( grace@char=

lottephoenixfou.com ) or reply for more details.

--===============2124114047==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>Kindly confirm ownership of your email, It was rando=

mly selected, after an electronic computer Spinball draw, to receive a Gran=

t Donation of $1,250,000.00 USD from Phoenix Foundation. Send a confirmatio=

n Email to ( grace@charlottephoenixfou.com ) or reply for more details.
ml>

--===============2124114047==--

Bitcoin Paypal phish from Microsoft Outlook Part 3

Posted by Dave Yadallee on
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.1.6 listed in dnsbl.ahbl.org]

[40.93.1.6 listed in dnsbl.ahbl.org]

[40.93.1.6 listed in dnsbl.ahbl.org]

[40.93.1.6 listed in dnsbl.ahbl.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.1.6 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.1.6 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.1.6 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.1.6 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.1.6 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

1.0 HK_RANDOM_FROM From username looks random

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.1.6 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.1.6 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.1 TO_IN_SUBJ To address is in Subject

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Bitcoin_Purchase_Confirmation_=2D_PayPal_Tr?=

=?UTF-8?Q?ansaction_Succes=2E=2E=2E_=40_=C5=A1t_11=2E_j=C3=BAn_2026_=28cynthiaperez389903=40?=

=?UTF-8?Q?groups=2Eoutlook=2Ecom=29?=





Haresasz Nxysarwsa has invited you to Bitcoin Purchase Confirmation – PayPal Transaction Successful

Title: Bitcoin Purchase Confirmation – PayPal Transaction Successful

When: June 11, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,



Thank you for your recent payment. We have successfully received your PayPal transaction for your Bitcoin (BTC) purchase request.



Payment Details:

Asset Purchased: Bitcoin (BTC)

Payment Method: PayPal

Total Amount Charged: $750.00

Current Status: Under Verification



Your transaction is currently under review as part of our routine security and processing procedures. Please allow a short period for final confirmation and completion.



If you do not recognize this transaction or did not initiate this purchase, please contact our support team immediately at +1 806 466 7708.



We appreciate your prompt attention.



Best Regards,

Transaction Review Team

Attendees:



cynthiaperez389903@groups.outlook.com



Bitcoin Purchase Confirmation – PayPal Transaction Successful

Dear Customer, Thank you for your recent payment. We have successfully received your PayPal transaction for your Bitcoin (BTC) purchase request. Payment Details: Asset Purchased: Bitcoin (BTC) Payme



Dear Customer,



Thank you for your recent payment. We have successfully received your PayPal transaction for your Bitcoin (BTC) purchase request.



Payment Details:

Asset Purchased: Bitcoin (BTC)

Payment Method: PayPal

Total Amount Charged: $750.00

Current Status: Under Verification



Your transaction is currently under review as part of our routine security and processing procedures. Please allow a short period for final confirmation and completion.



If you do not recognize this transaction or did not initiate this purchase, please contact our support team immediately at +1 806 466 7708.



We appreciate your prompt attention.



Best Regards,

Transaction Review Team

Kedy

štvrtok 11. jún 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Bitcoin Paypal phish from Microsoft Outlook Part 2

Posted by Dave Yadallee on
X-Microsoft-Antispam-Message-Info:

=?utf-8?B?UVkweVNsRTNURHRzQjI0T1VkbnlaRjRnN2VmcnZjU0QxVllMcU8ybXBFTU84?=

=?utf-8?B?cmNqc1NBMUFmTmVFQ1daZU1CMmtmaEhRRkNaOVZrL1VUMlo4eUdBNWdiUndO?=

=?utf-8?B?ZnJXbzhvT0JQR3FJVHN4MFhDSDNBb0EwYnZlVGpOZFFyREE0OGJmM0tpTUtE?=

=?utf-8?B?T2h1VTcrNmRZWkY1NDhWVlh6dlRON2VuSzhPUDkwRnFwUmY2bzRuREhDVWsx?=

=?utf-8?B?RnBxRzNuMWsyTEx4TjZodkRUVUF2cG1sNUlGZ25ZVHhrd09hQTZIQytDR2My?=

=?utf-8?B?UXJYZ0Q1VlZlbS9MSVIvWG1uZmRUanJmRmtaUGFyMzI0K2VxajhYSEwyRlFG?=

=?utf-8?B?NlllbVRYYzBMeXVCOGRxb2FmbTRqN05EYllGV1VVb0J2OWZiaFowWUdteGJK?=

=?utf-8?B?dlAxc09KRXUzcVdLb2lzUEZva1Z6Z1plYnpmNzFPbHhqRGY4MUFmN2VkaGg5?=

=?utf-8?B?R3JLdGgrWVF6WSs3UUU4Vk1seDJYV2w2TFJFNHR4VXhSRjk3bEQ1Vmw0R1NP?=

=?utf-8?B?d0ZvcVRNVWJHMGJUQldBeHhabndIRkhmVENGaDQrQVZIQkh6d0FkZUxGbG9U?=

=?utf-8?B?QVQ3dmVwTllIRmJudHJZVVdLNHBtcVhuejZRZjR4SFFSSmFRdzhlTlR1V3ZU?=

=?utf-8?B?R29SYW5KMnBGNVI2UUgyYUpETVFwcmRQYWVSTU1nSXBSRWwxOHFmOXBsTmdL?=

=?utf-8?B?ak54ZWpvNnRISnRtUzdienQ5ZklQQTNheHFFUjRRdldSNVdwTFJGdXpZYU9x?=

=?utf-8?B?UTYrczhyWUtDOUxvMVM4TURuZDVNanR3cDU2ZUhRT3hWdStpVlQyMEpOTWdR?=

=?utf-8?B?ZlgrQ0ZTbHQxUDVZSU5oeU5yN2FxMTZpZmRtaC9DRVVxaXhmOUpEOG9YRVJu?=

=?utf-8?B?cldNTEFYMnB3clRvY3BkN2VJTVZJZjNab0xjVTUydmQ0bXFxT0xOcjFRUTQz?=

=?utf-8?B?YktISksrQ0lSaVBpTUpRUWJQZFh5aUVaWmFPckhYMjY3U1lVbnZocnd2TGFP?=

=?utf-8?B?dDh1UXRORWkzZzlHa0dtSUZ3NFgvTzJWakw5dlgwUVNBVG9pT2FRd0Z2UjZU?=

=?utf-8?B?eVA2c1dqd01rR09VZktVUTFNRzVMWFJpVjljSmhXOUc2T3MvK3hOd3AyYlph?=

=?utf-8?B?RFpkY2VEQjk0bnNYR0wxQnNiOG1FTTNhY1BJYVNsUUtpZXlyeCtXTVRRV2Rs?=

=?utf-8?B?TElxU2hwZU5OY1o3UnJHOG0yYVQ4TlVzbTlZcUxER21yOVRuWjVUMjRRdk94?=

=?utf-8?B?V21zMCtXQ1pyelJURUl1enE0MnF1eXNHRnFxYXcrRVRvcDJWYU5MbUZxZmw0?=

=?utf-8?B?SXRLNlF2eHh5MFRielZwQ1doU0hxNW5xeXdkYzkyLzQ1Y1IrU0ZaVk9uaGVI?=

=?utf-8?B?aVBtOUpWTUtkR1V6VmFCYkhOUjVVaW1oQjhQRFh6Wkw5MW9WWTZORFl1MCtw?=

=?utf-8?B?ZnRsWmIycFFQbi9jbEhycWh5Q3BaYml6NGl6eURyeW1oR25TTnQ3R1hEdXVr?=

=?utf-8?B?MHB6NjAvOGI5bTBidlZ6UWY4NCtvcnduRHU3MlVkQWpKdzMvdGRld2JYeGR6?=

=?utf-8?B?WHp3dkpubnpDM01Rdjc5RnVSNk5RWmtBbk81dEhidnNELzdtYkg0QUh4cnZC?=

=?utf-8?B?T2tPNUdBWDZ0a0pYL2lzNFBiSHYvNGZucWx0TEsvWkp6VTdURlFFNHBxWCti?=

=?utf-8?B?WFpuS1IrZFVjR1NvU01RK2h3Rm9GMUN0U0Fsc2c1U1pRS0ZuWk5yMG84ejFh?=

=?utf-8?B?NWFpdHVLNWlZczdzRCs1T1MxZEV1RDRvM25zWUZDcTRoaGNpTU5qL1J6aThG?=

=?utf-8?B?cTRZS2NuQUFDN1dHazZwSzBRV2tucHVxWUhqZVMySWszYkNLeG8raWdKRmMx?=

=?utf-8?B?SnZLeTU4TmlTZGtHTWZSRW9ldUFHRnVnSjdHQklOc2RmejJoOFdya2svbHoy?=

=?utf-8?B?ajZQSkJpeEZWQ2F4QjB5VmY3bFlvWFUvUE1xZUpvcTJKV1BnWW9qWFYvaXpJ?=

=?utf-8?B?VmFKMnZzMzRXQXo3RjBMOGZaRUFYTEhkeWVlK3NDWm94R2o5N2swT2grb0F6?=

=?utf-8?B?OTg2dVZkajBSZ2w4Q3BndEdoSVk0djNVcDhLMG1zM0dmdWlsRExIY01CdzhS?=

=?utf-8?B?VVcyczZvbWdnbkFHa3BSVmIzcEhaM2I3Z1YzaDF1blRvSmVEeThhVmoxcFh6?=

=?utf-8?B?SnBXTDdRYitncmlGK2luU0JjenFxbmdOenF1TjdGRFlwZnFlbUY5WmpFS0Jv?=

=?utf-8?B?dXcyRHpFNFhLZzlWOUc2RkFDVEs1cXYybTVxNHlVTmdRU3FOVnZ2RCtqcmxw?=

=?utf-8?B?YnJBWjVxZmd0S3ljYVBtVExocTg0aHdNQjc2a1I0N1RmRk13TlRZUllsamJn?=

=?utf-8?B?QUE0ZjRvV2YwRE02djFwL0tUU09URUpJSGR3M21YQWRmdG5pQXlXZ3BuQk9Y?=

=?utf-8?B?OXV4ejhDZDlqcm1VZWJPM3pKUHlQa0RCOUJFMlBtN0VDdjdSd3lRcFExN3FX?=

=?utf-8?B?eTdnMnp4aDNwc2xmSmhpSzM2dzhqRjE2eE5HUXUra0c4RisvOWpBbXNYS2VD?=

=?utf-8?B?dzVJeGlUZ2ZrU3NYNEcranFrd21yWHd5Nkh3SDc4S2dvd1pnSU9YVVVNRGQv?=

=?utf-8?B?RGJBdnVGMWNIZWJlb245UERIR3I1NlBFVCsxdDRaUTlhYW55YWtPZktyektt?=

=?utf-8?B?NHQvNStjSHVQM1J6clpQa1ZlaFpjcXU5aTdQUmxQamhRMDFYakl2K2VnOSt5?=

=?utf-8?B?L296clcyci9HZkhYd25zTXNJSS9CNG5vamZ2Rmdoa1Boa2pPY0p6OHBWS3Bq?=

=?utf-8?B?OGRNTFgxWFJHbWNsV1JCb3Nzb3FDMWtqdlljMTNUQlNqd3dJdlpPUjRkMzhx?=

=?utf-8?B?YU1IODRiaVJ2UTBjaVNLZFc5NmpZMWE2ZDQxR3piYXhUM01YVUFESERkSmZ3?=

=?utf-8?B?ZzJzOCtjSEVmK1N1WGNNYWJJRzFCbVNiWlgydkdpVmFWL0JvOWNvY3hTbWI5?=

=?utf-8?B?UVdBUjlGVVJ5cWhzeFpreWlXbkdvZXkzNXIwSmgrc1E1YXBwMGd4SDFGQWxX?=

=?utf-8?B?dlpxamducFRZbDhXYktDWE02NG1vQmpiM1JuOU5jaWRFS0d3eGUvQ3BFMUNS?=

=?utf-8?B?U05PUi9rZGlFdHN3U1dMK21sZnMrYlQ5Y3ZQS1krNXVBbzhyYkdIV3EyYWR1?=

=?utf-8?B?ZmQrZkgrN3dFdEVadG1qMFZ4aGQzSzg2L3p3d21ndUJ3V3Ryc1dwa0hHQ3NK?=

=?utf-8?B?L0hjVFFKbUhjSnpxWnU0K2x1cUFYMzNGTVBtUmtTY01makFBdVdEbkdJRnRp?=

=?utf-8?B?V3I4ZTcyYjlPTko0MGNJQjcrN2hqRktPUzFuQ1N0d2VucmVxRkZtN3R1NHVN?=

=?utf-8?B?b0FONGVIMVBrN3h5RTc1NW5ha29hOGlXQnZMZXhWb1FmVzlFMThaK0RRd1FI?=

=?utf-8?B?bisrSkMwc1NMWlR1d1d0RS9xVk5BTHFPLzFlM3o1VXczQkpYQ0wvdmxBSFlO?=

=?utf-8?B?clBIWXdSNWZ0WXdkRTU2dzZZOVFaeUMxYnpzVmN4ZXFOOTYyYzJHNXBtdGw2?=

=?utf-8?B?TjlLV2NIdm94bFphQ3VDZDQrR0tqNC9VUStFN1JETUE4b0ZMT1ZYUHhUM01I?=

=?utf-8?Q?5nT6oeRKfTPc=3D?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Jun 2026 16:36:43.0986

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: e1296726-3aed-4de1-74a4-08dec7d79eeb

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: BN1PEPF0000468A.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR18MB3517

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Bitcoin Purchase Confirmation – PayPal Transaction Successful

štvrtok 11. jún 2026 Dear Customer, Thank you for your recent payment.

We have successfully received your PayPal transaction for your Bitcoin (BTC)

purchase request.



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

Bitcoin Paypal phish from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Jun 2026 10:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXijB-000000007gR-3PJG

for dave@doctor.nl2k.ab.ca;

Thu, 11 Jun 2026 10:58:01 -0600

Resent-From: The Doctor

Resent-Date: Thu, 11 Jun 2026 10:58:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westusazlp17010006.outbound.protection.outlook.com ([40.93.1.6]:42745 helo=BYAPR05CU005.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXiPX-0000000062n-0T7B

for doctor@doctor.nl2k.ab.ca;

Thu, 11 Jun 2026 10:37:56 -0600

Received: from MN2PR20CA0054.namprd20.prod.outlook.com (2603:10b6:208:235::23)

by SA0PR18MB3517.namprd18.prod.outlook.com (2603:10b6:806:95::20) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.18; Thu, 11 Jun

2026 16:36:43 +0000

Received: from BN1PEPF0000468A.namprd05.prod.outlook.com

(2603:10b6:208:235:cafe::4a) by MN2PR20CA0054.outlook.office365.com

(2603:10b6:208:235::23) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.113.13 via Frontend Transport; Thu,

11 Jun 2026 16:36:43 +0000

Authentication-Results: spf=pass (sender IP is 209.85.221.71)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.221.71 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.221.71; helo=mail-wr1-f71.google.com; pr=C

Received: from mail-wr1-f71.google.com (209.85.221.71) by

BN1PEPF0000468A.mail.protection.outlook.com (10.167.243.135) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.113.7

via Frontend Transport; Thu, 11 Jun 2026 16:36:43 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:46C9143CAB819CA7906F3F808002D081E33F02325ED7C2FE27DAAD1F5C5839A3;UpperCasedChecksum:714EC9B1A3BE7E296A989DA9A6BDA2E9C2B06CC92FB630886D5AD07D6D71D6D0;SizeAsReceived:3428;Count:15

Received: by mail-wr1-f71.google.com with SMTP id ffacd0b85a97d-45ef9437b7aso21770f8f.0

for ; Thu, 11 Jun 2026 09:36:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1781195802; x=1781800602; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=rTAYtedL/31r8kwCOaBddK2TvXTyUvqhV1O1/uLQf6A=;

b=a7IPI/x9r1Q8E8HxM8W5a2Jgpjpvlr4Tg6TYIkSl87cko7RoEbk5V6QGgVMYYQn+y8

nzFMSjcvntQRTM4AZ7VtZAgyVZpfgD3K86nQkKWxjcLa7A7p0f2IiwXVzFPfGmmrgZzN

pp7t4tarBeygoHU09ka0OUHYAZ9kWoHLx5eXOsB/6GuucbDSPEmhSUQljJPNlCEyJ/We

hfq8xcIpXNoVUsUZ6XhQCjxVvRT496K7Z8zcXIS/iGItO10nYj+wdnr6A/r8iOu5Qq90

ANSRsd1rMTZZF1pH1Sv3MuNx9o0ED2bf1BZQeGi6D7NfVKn4J7ND2IyZHbjG+R/2RMEZ

jNwg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1781195802; x=1781800602; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=rTAYtedL/31r8kwCOaBddK2TvXTyUvqhV1O1/uLQf6A=;

b=AMjNFfwdGkZWqmUEM+lCRRTjSx++Ocs5dUxBa1aNrwCTRcMLRaXhdLRWosnauLc1MS

UdnkVr8Oq9S45AzXCTCU6qALh+2EUbHpqGESneyvqpAu6Tf+u5xYczPQGSrT4XSamMJ0

yqdTOTpCVL1dulEyq+vmZP1zHTZR6CvvpMw0H87LhophBeJQBoq2UMxHbt7F4SSyXuGV

NIrRdi4wKt5f26lI7NvHXdNhLievjLemr+MKq5Wrgh/2GGt9Fevud3zGUG1Tjc26evim

RfiUBQEceSH9BAVxm/di5ey9vzt4RBIH9cp/yt1jcEagA+sIsEShPvjz2yZu1d2XRodu

sIlw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781195802; x=1781800602;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=rTAYtedL/31r8kwCOaBddK2TvXTyUvqhV1O1/uLQf6A=;

b=ptJWisrQtWXlRGsBAWXrayu+byuOBfWTAcDQZ09Ie9gHLh+7EGwPdKczwkFIcaUNg9

aDS9L4QahU0U1ZChhyTQbWRNbDifHfFuvCxxjvWkxh+LFiem61ZoqGamtqw02ieUCgsH

tInNI6K1x64GkqObDqKoGnA9fNgv8pMj/BXxHwIePIjJKntBnekmql7gxHm5EDqGVbRO

VqksJZYKxiuqAVVKU3gxuHefQN82QON9uD/CCLvfPmICslx2mmtnTScmB/Nd8+AbXEuv

GQCsnPRXHP7bpFGtAk31DRcmRgQCzRkjLRgwS4kfPTCvGOhmetWkTmQyM1UzwoGmkdW8

zDvQ==

X-Gm-Message-State: AOJu0YxzSkXSaTLiYPwPb4xcgFPj9e3uqA99Sz2dUpiDpxUkGvCflDM2

pW5WqSi5t7W53uPf3UkTMsRzOvDSRvta5DqHn4DQABslFzk/hOIPYeE6QQaxv0jrMOEhBagkVou

zt2gCJQ2+d9amBFe119ZwxxVyvvJLy1dXN+g=

MIME-Version: 1.0

X-Received: by 2002:a05:600c:b8d:b0:490:be8e:c890 with SMTP id

5b1f17b1804b1-490e55dbecamr55499035e9.13.1781195802100; Thu, 11 Jun 2026

09:36:42 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Thu, 11 Jun 2026 16:36:42 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Bitcoin_Purchase_Confirmation_=2D_PayPal_Tr?=

=?UTF-8?Q?ansaction_Succes=2E=2E=2E_=40_=C5=A1t_11=2E_j=C3=BAn_2026_=28cynthiaperez389903=40?=

=?UTF-8?Q?groups=2Eoutlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="0000000000000f483c0653fcf733"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN1PEPF0000468A:EE_|SA0PR18MB3517:EE_

X-MS-Office365-Filtering-Correlation-Id: e1296726-3aed-4de1-74a4-08dec7d79eeb

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 209.85.221.71

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|9020799019|6149299003|24102599021|6092099016|3151999006|9000799056|9400799043|41010799006|1680799066|16200799027|5139299004|26000799027|22000799015|29080799009|970799063|32020799003|4040799016|26130799012|34130799006|440099028|4302099013|3412199025|18021999003|30041999003|2145499017|21002599022;

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on




--_000_TY0PR04MB5910F47DA456CB552238A3A3851B2TY0PR04MB5910apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,



I am a professional Web Design & Mobile App Developer, with 14 years of exp=

erience. I will create an amazing, beautiful and unique website for you. I =

can upgrade, rebuild and redesign your website.



May I send you previous work examples & price, if interested?



Thanks,





--_000_TY0PR04MB5910F47DA456CB552238A3A3851B2TY0PR04MB5910apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>













Hi,


 


I am a professional Web Design & Mobile Ap=

p Developer, with 14 years of experience. I =

will create an amazing, beautiful and unique website for you. I can =

upgrade, rebuild and redesign

your website.


 


May I send you previous work examples &=

 price, if interested?
b>


 


Thanks,



t;"> 










--_000_TY0PR04MB5910F47DA456CB552238A3A3851B2TY0PR04MB5910apcp_--

Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Jun 2026 10:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXiiW-000000007eL-13TU

for dave@doctor.nl2k.ab.ca;

Thu, 11 Jun 2026 10:57:20 -0600

Resent-From: The Doctor

Resent-Date: Thu, 11 Jun 2026 10:57:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013076.outbound.protection.outlook.com ([52.103.74.76]:38409 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXgf3-00000000NEt-1kca

for root@nk.ca;

Thu, 11 Jun 2026 08:45:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=l5eyLi0p8mYrsm/2OZlpdzl7o3Yb2EyGgCA1msO8pm5bbbtFJVwzNZT9B3uYS10NM5OiuqhHiGBvhd1VhfzR2LRqq4ubJ1BMPSoK1IAC5RmaEBS6Keg38Q6caQEF2ByU8ZzOoTqvyXcWL0RPx7/mIlUDWWpopOPDy1bMEuYe3tDLdQl5QbVuc7Blk6JO/nqn1jNoDO0i0ncBa9c9/mL5Kbdwr8KEMZF6sIc/1fY1pQK8hKmG0NXXJUo5//Wv+vvK6d6NJVg+R7vW/7MudaUV6SJCi7SjZ/GxCuR1OvBtqS7+ey6SrxL/vVY0Z2gsG0zhtS5KRthFyi+jxpJ9K/Blnw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=nM73bc5w14Fucq0WqXa4MWUACqs6F1hsEmDlco+EJbU=;

b=BHslxaPEU7DlaGm7EhDSkOgrBucbAIxBEmfcpuVU02/7qrwnDrJ+qfOyZa667LHutYoSv5RCzTp/JYPoP1BN94VzUTq+VT9Ihui8HjqomAbjbnephHeNHhJOcpmjFt/YX4yEvbKwhyT0jGJwQkid+4nf/GV34C4tFwKh+C00VtMZ8vMkb2l+SoOHZSHcUabcaCu0LyBePlzJykV9wcmlm+Qv0sV7S/mBTAu7P9W4QJrGAf2l1xwqtZBiVwBhY9Z5J43+uwDPqyel8vdUMyE58A/va9PjzGiqsD9smXWs2lkbC0xtn/lNiRqdt+leUR4C3zRi+sygzu7ZKgGFBjpf2A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=nM73bc5w14Fucq0WqXa4MWUACqs6F1hsEmDlco+EJbU=;

b=TQSb6vbMevZ5uaB4W4wKSJH5dVUjHycCjZ5+esY7HDKTl7pdKFiiNB2kOgLTSd8pSIjBmdE1JBReFpuGe//yQ26TaNRS4ngqAqgBuEVGJFt9HsDdvaRa0LCF7Z+NiN3kfYkEMFjaVg5XSSDOKXUUHg+B+9xutXSLFXSAPUanyky+EPc3MtfwExu51unrL6+ZbvFu3UPh38bbc96CyK9YKqzcY/IhFHEbvU+yvtcG8ptubyOAG/UGRTJNM0rJ5OY3+8jiBVeLSMSmBzLxueWyyvU/nIZUlJmIjSOJhIOA0Q2v/F9R9hEEtTVdw0vkNmAfYFRScmjS8QZCG/EhHuR7Dw==

Received: from TY0PR04MB5910.apcprd04.prod.outlook.com (2603:1096:400:214::8)

by PUZPR04MB6796.apcprd04.prod.outlook.com (2603:1096:301:11d::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.18; Thu, 11 Jun

2026 14:43:29 +0000

Received: from TY0PR04MB5910.apcprd04.prod.outlook.com

([fe80::12a2:7317:ab9b:4d98]) by TY0PR04MB5910.apcprd04.prod.outlook.com

([fe80::12a2:7317:ab9b:4d98%5]) with mapi id 15.21.0113.013; Thu, 11 Jun 2026

14:43:28 +0000

From: Jessica Hughes

Subject: Re: Cost for website..!!

Thread-Topic: Re: Cost for website..!!

Thread-Index: Adz5sCSjWwp3P39fTM21f5WjwYIRXA==

Date: Thu, 11 Jun 2026 14:43:28 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY0PR04MB5910:EE_|PUZPR04MB6796:EE_

x-ms-office365-filtering-correlation-id: 8259aed0-fee7-4b63-9288-08dec7c7cd2f

x-microsoft-antispam:

BCL:0;ARA:14566002|12300799018|55001999006|24021099003|37011999003|24121999003|20031999006|22091999003|39105399006|24071999003|31061999003|8060799015|15080799012|8062599012|13091999003|19110799012|4295299021|31055399003|43065399003|40105399003|440099028|3412199025|102099032;

x-microsoft-antispam-message-info:

=?us-ascii?Q?RqfV+c+osfmHooZcgNc9Ka+e42caqNXQwCagdYnSmmhIt9UDosxMZMEWgIiQ?=

=?us-ascii?Q?eUw9+4QpWHjSTv9LhPjAznQWDIXTIxW3EYLYUhI7ThGs5otTze6UuZv+QG4V?=

=?us-ascii?Q?2zVHA1MDvVnFn8aGOA8Ltc9AvOFfBV3Qyj8c+tieTW2kIsDkLxREGsFSMjKP?=

=?us-ascii?Q?RCKp4zUZ53ruRmILr3AIlzRbeTf41YdpBkAqluo60Fp8aG2ff6TMLsz97mkO?=

=?us-ascii?Q?9Vy1jNSk03Vtz1KveIRXOVYN90nWixUI6mcP84HKslHURtTyukqWz8PwUuz0?=

=?us-ascii?Q?qZ7XtScZsdm3MfCs8KmsZaC8fXMjqnVEE4kiIiowkDmGM7Xle1qmR/eW/Gef?=

=?us-ascii?Q?VQ383pufOJnRLZvBVbJZh+9Kf5lZ8pxjEzIt0fW4YeLDFYTIjACpAxYL65pj?=

=?us-ascii?Q?WOjv6LAbRqg6e9xcjY/HxCNWb4tS9v1xUyRy8/Lnr64+58vusO0n1vfKS1ob?=

=?us-ascii?Q?JgVZ1WvN9nJMzJ26nVH8QEj55vYjK7iUiY3Y9Td4pVebE/VpbqRkZ7/3UhfU?=

=?us-ascii?Q?AhVd0bFX7FgmTBSbA9ncS6RU4XC2UsrDNgLbBgSujeS26U+N6Tc3h1yDAuzN?=

=?us-ascii?Q?xAz2T2une43UtXq9n8kQE5Ts/OCK9g3WcK3csWNeTvv4/V5IdtMJQ5lmhNcC?=

=?us-ascii?Q?ll8oQXijSb4ldBRLpAHQ2He0dHqRZ3wbRxeti6INAj+uY+X93RRIbKMUDaEs?=

=?us-ascii?Q?5M97VYUg4BTtZmrIrto0bQOd13QGD7yNigHobF12Ftn5HxIpm+VnWga/8XgP?=

=?us-ascii?Q?/flOf9Y5MAWTz7WHgcMCySgKrCc7Db8+qFXlPRgzviiJLLFLcrDNLeWPpEQb?=

=?us-ascii?Q?Hj0TsapyhmIUHpnRjw4R98wQfR7v6QC6z9EJLP1t64UriwYpyWf1xMsqfztg?=

=?us-ascii?Q?mlMBVmZFtEiGTiCqxbmqH/0mlOqNcH0gcy2vyly/pNTh04uR4eOTkahfJ87m?=

=?us-ascii?Q?3LWCnpgU+biylA0afVTiivog4l0N6bRW9+dodWSY6rs/sxWIYjGmZLly5IuS?=

=?us-ascii?Q?wPEguiIhltk7M0XXT5joJdlxc5Wm1a/YC+u7fHp3Ct+8sLGysLa/4R4syLxU?=

=?us-ascii?Q?hhQQ7piQvibWbc5upby+WHf3bGGB7ay3HzgPCJqvdTICJPNrndN5OdUInR6P?=

=?us-ascii?Q?aVWVUja+MO4QcxrT714ixTGOMRzkxtnPkt6ggOlQXdFtXSqm4RUoTrh8/QGg?=

=?us-ascii?Q?hZQ1IlgUh3zEDhLgO8N1Td5wHf+axTqyRXZ4EUMhO1P0bd36enqsCe97zNEf?=

=?us-ascii?Q?wdWQBupWNIBELEcUUi3G?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?45Lelkk1jKY3FIiYVPPtQgH9cr2wE52FMPfwBgA0W0zdvF+YiKDtmgmpf/nv?=

=?us-ascii?Q?GijFJFDIqha4HlDmgmrGSNNzJm/sFMf/1ELfvftZicWh35QahEg4Ve+rmFu+?=

=?us-ascii?Q?Tbe0plbPYxOo9eJS1etO7ljqYN9mz2yPymIqU8bjO8eSC3DujWddXUptELwP?=

=?us-ascii?Q?JweiB4EYTKR7WKJPihjXtrbFqP7v/H4E9cCZdbM7uK4z/TFB4sum+YrQPAcw?=

=?us-ascii?Q?TBaJdmwkWCPKQ31Pd5xGndTdcf1D1dkhiZhDTLR3Z3cgAAGTxw70/s6rFrwc?=

=?us-ascii?Q?krHFv5yaV4TcUHmnLkLRjSixYEch8MQFBLdYscK8RFOJAEFF2I6FYSny9Gc1?=

=?us-ascii?Q?UuarLP4glJTt9W9ddaew4WGhK91w9/DwNx4YwD+UfPIdETyzIDlGA8AwMAUy?=

=?us-ascii?Q?zMYDQJcKmRYgM+jS6WE+d7br1Yc/UnUfCZ5MS4S9YU1PVr0Hk7HsCHxWLXX8?=

=?us-ascii?Q?q8oBJ85lfIfg4aWNNapmOloZXdzh/uNYaDSAIvQPVCZCMCvwdFP1/Imk8+FP?=

=?us-ascii?Q?K+341XX3NCaddljS8A4NG05VoK8RdGcroSGu6cuFNIb536oU9v58gHomNCJW?=

=?us-ascii?Q?u3r3Lx+qrNYFlavTaQ6m/w4c0Ys1DsLljq8PzR+Y1aWbYzwgS8Yt21Nq9awH?=

=?us-ascii?Q?I9cXJ2AGkRfAUBIa5tI7XMhH1MouW+ajHtqvzrfAs10fyJCX5x9wV9Ruh2E1?=

=?us-ascii?Q?dCsTjlfj1DdEYj9CRrg1/8Z9Gbs2pItuUFAc2kX+pkO124b0wT/8xlKjK70N?=

=?us-ascii?Q?tVvHqv30tAxJR6p7fH4JWzBoDI/THY1MuvNYAsV7oel437D59BkZN9pwpQo7?=

=?us-ascii?Q?EBmKrS/Wq6jvgJJGhbOBm6yXqSB7s9cjtT2x/algre3AQbFv9yWEE8KnrCMK?=

=?us-ascii?Q?aGQgu8gCKbK6gcu6dAdZATYCMGkHxeoxPQkZ1gDGbxDHW3cqUtAPhiP+qd4h?=

=?us-ascii?Q?GmG/SnK+8rYu+8hpAz9rJ0G1Czxf0jpucOuRKbyoUePPkcfYX7VlpXyHdZLI?=

=?us-ascii?Q?j3I7t007GqkxbbaR8YKZlyoo4hZXhvKJqtW9i0yDe+3GMF0z5CYzmue7q81M?=

=?us-ascii?Q?SAS9+7cV4zAn60ynOWSMoNN6bR7Qbf7bHf4HybT+5VYx8r6m+DbhrSHNJXsq?=

=?us-ascii?Q?7/+UyGFD9/b0bTT3rR/WHtwqofstkL1zhlndOY0Xzp+SHRX7+Pp3rBr8aLiW?=

=?us-ascii?Q?qlUUUSAFiTJRFz8IHoZ3yFdBtndBTts34oPMk76uh2SGshAnAU47d8gPilsu?=

=?us-ascii?Q?CxOHsSvGuno0NNEISDYsvVRdDIg39VVKSN7L03kvVNSX2lu7NLonxyKp/GRB?=

=?us-ascii?Q?gd5nOOBdO4NdDGBXJWJzyejwfKXa6hH2F1RRNTvFixwkUarTg3Ue97KwfgdG?=

=?us-ascii?Q?Rs29/dADDmtNtMs6h+G0kyOWSIWyKBwHTQY7YYggNlnZ50aJtlSQ7UlCxlV8?=

=?us-ascii?Q?4xPctJpsnGzSHp2QwvX5i6Mu2bHnMtnm?=

Content-Type: multipart/alternative;

boundary="_000_TY0PR04MB5910F47DA456CB552238A3A3851B2TY0PR04MB5910apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-c3e7a.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY0PR04MB5910.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 8259aed0-fee7-4b63-9288-08dec7c7cd2f

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jun 2026 14:43:28.7613

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR04MB6796

Web/SEO/App spam from Google Gmail Part 2

Posted by Dave Yadallee on




--000000000000f5d1400653f6eb00

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Sir/Madam,



I hope you are doing well.



We help businesses grow online through professional website design, SEO,

digital marketing, social media graphics, and promotional videos.



Our creative solutions improve brand visibility, attract more customers,

and strengthen your online presence.



We would be happy to discuss how we can help your business grow.



Want a free website SEO audit?



Reply YES and I=E2=80=99ll send it over.



Best Regards,











Channix Technologies Pvt.Ltd www.channix.ltd info@channix.ltd +91 70082

11573

[image: beacon]



--000000000000f5d1400653f6eb00

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




e:12pt;font-family:"Times New Roman","serif"">Dear Sir/=

Madam,






ot;Times New Roman","serif"">I hope you are doing well.






ot;Times New Roman","serif"">We help businesses grow online =

through professional website design, SEO,

digital marketing, social media graphics, and promotional videos.






ot;Times New Roman","serif"">Our creative solutions improve =

brand visibility, attract more customers, and

strengthen your online presence.






ot;Times New Roman","serif"">We would be happy to discuss ho=

w we can help your business grow.






ot;Times New Roman","serif"">Want a free website SEO audi=

t?





Reply YES and I=E2=80=99ll send it over.


lass=3D"gmail_signature" data-smartmail=3D"gmail_signature">

">


al;background-position:initial;background-repeat:initial;margin:0cm 0cm 10p=

t;font-family:Calibri,"sans-serif"">
:Verdana,"sans-serif";color:rgb(34,34,34)">Best Regards,
b>


le=3D"line-height:normal;background-image:initial;background-position:initi=

al;background-repeat:initial;margin:0cm 0cm 10pt;font-family:Calibri,"=

sans-serif"">
ot;;color:rgb(34,34,34)">
3.googleusercontent.com/mail-sig/AIorK4zSVIQLLYWFMn9zg7lK3v4ooQvYoZbB6DEbx2=

xwoPqOgEvzTkTWGhhpAaeb0g4_avQ3nExD65AP-WYd">


MsoNormal" style=3D"line-height:normal;background-image:initial;background-=

position:initial;background-repeat:initial;margin:0cm 0cm 10pt;font-family:=

Calibri,"sans-serif"">
ily:Verdana,"sans-serif";color:rgb(34,34,34)">Channix Technologie=

s Pvt.Ltd


www.channix.ltd


info@channix.ltd


+91 70082 11573
amily:Verdana,"sans-serif";color:rgb(34,34,34)">


div>



lgfjhJLXf0WTb5Z1SvU-zqjsz9f61ngGEu8xExQReFXzb8PS8yxL6z0AgLBbpIQXcvM5wU_lVON=

u51zLY-woOQ2_fNO7tQId6M-lo1kYit8hjzNoGwe8ORcFT2-h1sYABYndLERomHUaatw" width=

=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:none!impo=

rtant;">



--000000000000f5d1400653f6eb00--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Jun 2026 10:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXiiA-000000007dV-30BX

for dave@doctor.nl2k.ab.ca;

Thu, 11 Jun 2026 10:56:58 -0600

Resent-From: The Doctor

Resent-Date: Thu, 11 Jun 2026 10:56:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.75.197] (port=58320 helo=mta75-197.mmglsmd.net)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXfe9-00000000HYz-27Iu

for root@nk.ca;

Thu, 11 Jun 2026 07:40:44 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1781185187; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=IgZ8r4j9Hxa/0hD7IpiWscVRox4TCv6KYJ0yNgCi7iM=;

b=yJcDS0yciCqAyWE1VCtzALNWYnsLoghBlV/BfJLLpWI4WCjB9ZGHlGP8

vnUZGuWUuu1piZHY9MLqdgmEfHd1OnUJfwXU0z0wxutKVbVg+8KAFONjnG

1BJqG1/KkFURHpuCrW8ghY4MwnxNsrBuuNkrI5GyWKM9HTSP4AEQeEpXQ=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id yVinvlOqweSI

for ; Thu, 11 Jun 2026 21:38:17 +0800

Content-Type: multipart/mixed; boundary="===============2394163532435256187=="

MIME-Version: 1.0

Message-Id: <20260611213817.95529-{13453:20260611213329-13453-35}-0095263@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?Re=3ASpecialty_Alloy_Steel_Pipes_=E2=80=93_Alternative_Source_f?=

=?utf-8?q?or_Canadian_EPCs?=

From: Sophia-Threeway steel

To: "www.nk.ca"

Date: Thu, 11 Jun 2026 21:38:17 +0800

Mail-ID: 6a2ab945e1382308cbf992e1

X-Spam_score: 13.9

X-Spam_score_int: 139

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, Good day !



Content analysis details: (13.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.75.197 listed in will-spam-for-food.eu.org]

[160.124.75.197 listed in will-spam-for-food.eu.org]

[160.124.75.197 listed in will-spam-for-food.eu.org]

[160.124.75.197 listed in will-spam-for-food.eu.org]

[160.124.75.197 listed in will-spam-for-food.eu.org]

[160.124.75.197 listed in will-spam-for-food.eu.org]

[160.124.75.197 listed in will-spam-for-food.eu.org]

[160.124.75.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.75.197 listed in dnsbl.ahbl.org]

[160.124.75.197 listed in dnsbl.ahbl.org]

[160.124.75.197 listed in dnsbl.ahbl.org]

[160.124.75.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.75.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.75.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.75.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.75.197 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: threeway-pipe.com]

[URI: shinestarsteel.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: count.shinestarsteel.com]

[URI: count.threeway-pipe.com]

[URI: hn.threeway-pipe.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: ns17.xincache.com/112.80.181.45]

[URI: ns18.xincache.com/112.80.181.111]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Re=3ASpecialty_Alloy_Steel_Pipes_=E2=80=93_Alternative_Source_f?=

=?utf-8?q?or_Canadian_EPCs?=









Dear Purchasing Manager,



Good day !



This is Sophia from Threeway steel .



We understand Canadian buyers are facing steel import quota restrictions (only 20%-50% of 2024 levels).



To help you navigate this, we offer specialty steel pipes that are less commonly produced in North America:



High-strength alloy: P620 / P690 / 10CrMo9-10



Sour service: API 5L X65/X70 with NACE/HIC/SSC



Marine grade pipes (ABS/DNV/Lloyd's certified)



Our products are not subject to standard TRQ competition. We can provide EN 10204 3.2 and work with your EPC requirements.



Do you have any upcoming projects requiring non-standard grades? A brief call might be valuable.



Best regards,





















If you have any inquiry, pls keep me posted. Thank you.



Wish you have a nice day.



Best regards,



Sophia Zeng

Sales Manager | Industrial Pipe Division



Threeway Steel Co.,Ltd

Tel:+86-731-88736283 Fax:+86-731-88896236

Mobile : +86-13544036536

Email: sophia@threewaysteel.com

Website: www.threewaysteel.com

Skype: zeng.sophia1 Wechat:meiping77



Hunan Steel Industrial Zone, Tianxin Special District,

Changsha City,China



Web/SEO/App spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Jun 2026 03:26:00 -0600

Received: from mail-oa1-f67.google.com ([209.85.160.67]:59668)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXbel-00000000N3K-2EaH

for dave@doctor.nl2k.ab.ca;

Thu, 11 Jun 2026 03:25:12 -0600

Received: by mail-oa1-f67.google.com with SMTP id 586e51a60fabf-441080fd7b9so4854576fac.3

for ; Thu, 11 Jun 2026 02:24:12 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1781169846; cv=none;

d=google.com; s=arc-20240605;

b=dQ8UrjqVnCZnqBtrRlEqzPXoV+2mkQJamcfLtWU4ZCbrGA62Tj9Zc0BxFM0w17tWTA

U1DOZnbInaJElJoRbTIzYFWD7ZmmDf41E8V9Ztm29OsjRKN46YDtIo17njANUldVp8U3

usA7r/gkvEFXpXJ9YjN33YRUjhIpqppujpcHmBSP+85wUl2jw/WFxmuJd51lFrJ+U07u

wQljJF2iIENNb2zvSdohnjq/BRYd3PbUUl6Sqn4+Aen/JTtDSxP+QD+xqXCuB6u2WekJ

AXZz2tRuuNsLABHaH2XkhSbCLNj1XDPgCEazXt1c6CmNQnj2B1ZkI3VeNbELYRpFZKvN

Qcsw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:sender:mime-version:dkim-signature;

bh=K6C8HlcN84JaFH16Xi3GesfyYjjEsslOkdOXcZ2xt88=;

fh=vaHEEg7v0pChjzOwnsiRdrLa5hIWKKZVIRijrgmCVtI=;

b=ZaUYVyEsrQHSBMy4VE9Qwe/sX8hI58RRSsCuzH6O3eQcKUwN5hp5poS8UK41RvKwzP

Pb/Tz/c6V91kkEGR1wwF07YS1Wh1bT2Y83AN8Vb7AIOZqicMB3hbrZhEPFNwuLRREE39

hETdilopVO9yCfLYuVms71as8YhGyodg/U2VMSqXs56SadymB3gOWMincLW/ifJqBHuO

ui+U5KWRRoHute7prYYODMKp+KpbO5wjnM9kKKaD13n6QMSDS8t0TrFAj5ZkHw7ldOJy

cK1aAlT80zNSlUjaoysbFJPL1ziPsVb0m+KerpUPtGiWaET+Rl+Hkv0+C2sJpHxWY+tT

ORuw==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=channix.ltd; s=google; t=1781169846; x=1781774646; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=K6C8HlcN84JaFH16Xi3GesfyYjjEsslOkdOXcZ2xt88=;

b=I3xhoJPwf2s5d0fDFhZANfqYxdm0VFDU5ao8wlJVnH8iYQxFQxgobjqt+tQPaHkHFf

MrHaF4zU3MLbupNJlPGy3+Fv/LN2PrdyZpg9kMMI2Q0zqHBmNvhQEM0ogintXBHsvJUY

Qa9+koWlEjBwSmw6gdSzyNhCZ23hCt/bVFUhkXH6sNg9lRsES5XILyQUCDcbytNDbh99

DPXweB4pT+4F/JkBy42DAJ+Kj241rhQOtIaj+SBOztOFgoeznjY47A2Y7NKWU+vKQDiM

sYkm4BkKKgkPR32jumSPDxTFwFONR1cI69mZeVLm7mGMzFJFiG+G+vyoTl/lXwiqdeir

+Isg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781169846; x=1781774646;

h=to:subject:message-id:date:from:sender:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=K6C8HlcN84JaFH16Xi3GesfyYjjEsslOkdOXcZ2xt88=;

b=XFDVPcDM5BNj2FqQe5r5bFI8oqC4bzVXsa51tksz0mE6RESuvaLJKqQHknVFODm23K

zSfuOPbtdttbfAPgtNnmS6s/Fm315twb4cubBv3yJwq3qOGgglP8+TooW5qp2PcPh8I3

Lk7p55gmEEdsLW27mcDTxOTjKU3sGISksiEXueEeRZbRDsj76m+UdqMfTWbHEL7Pqi/n

acKSq4JRJdpP+klRJ8MrcgR+TjlAYywRV7mB9QAhINorgHwyYUuxLxCFjByehxHoMfAo

M2TZfuGrXTw5vDRKMMzISy/cLUniRQqS1G+OzpPSW8Hvv5K8odMeVQwVPAzTkqjonYSk

CHaA==

X-Gm-Message-State: AOJu0YyA7AeH0olgyEtF5oq6s3j7q93snfnBY6E2sdMbf3GTIPyOykFD

ikwTA8pmh+M7RbxitLi5+BPkWODXPEyD/m3ljmvUcF6vXOcI/2bJSPpsHxKN2ymjkGgqfhRpDHf

nCb9vVn9L+UWLxpj/+8RmrnQ48o4hw45h5DeOhfxp2BZQJF2sHbLsI/2EHAk=

X-Gm-Gg: Acq92OEjD8Agb9LMpr9x3VfOdxkvadZymey9kWLF9ai67nHq+5fmV8Dy78nbmYf1gPp

cTUhm2Anf5SGkP6p5nw1qqsrGhgk5NOlhGwwIUrvfKHv0UWmk2NM/LfMRx9o81ZCFNQ2jKE4YeV

Dme3HzS3GKvx+OlZOn/Zj5++TtHtsNUONp3a6jcLKh/GqphV/3XatmmuPywcH/jFhgim2ADM4vM

uqxo8Ora2M6K987LaELcUdwJvWCRnrRxXungjcvR5+PIBPbnfD4g/Pg/mpazGsSzu9laJJYPUXJ

vq0RoNmLnoAQqbufdQ==

X-Received: by 2002:a05:6870:64a9:b0:441:5147:1aff with SMTP id

586e51a60fabf-4424183e550mr1129235fac.4.1781169846074; Thu, 11 Jun 2026

02:24:06 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Thu, 11 Jun 2026 02:24:05 -0700

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Thu, 11 Jun 2026 02:24:05 -0700

MIME-Version: 1.0

Sender: Channix Technologies

From: Channix Technologies

Date: Thu, 11 Jun 2026 02:24:05 -0700

X-Google-Sender-Auth: S8k9SFtHcmSdKCxCFJdpbXWRKvA

X-Gm-Features: AVVi8Cei2ePVnhRHpCJebo-Elr1dccUhyRXOXlHEsWZFDYurS8MjVZ6O8c4yJ-I

Message-ID:

Subject: Increase Brand Visibility & Reach More Customers

To: Dave

Content-Type: multipart/alternative; boundary="000000000000f5d1400653f6eb00"

Food request spam from Google Gmail Part 2

Posted by Dave Yadallee on


Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.66 listed in dnsbl.ahbl.org]

[209.85.161.66 listed in dnsbl.ahbl.org]

[209.85.161.66 listed in dnsbl.ahbl.org]

[209.85.161.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.66 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.66 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.66 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.161.66 listed in bl.score.senderscore.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[abdulibrahim1941(at)outlook.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?}



--0000000000001ec6ec0653f6b393

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Would your company be able to supply us 50'000 MT of white rice 5% broken

for human consumption?

Sugar 15000 MT

Kidney beans 25000 MT

If yes, please what is your price on CIF to mombasa sea Port Kenya



Regards

Ibrahim Abdul

........................................

Votre entreprise serait-elle en mesure de nous fournir 50 000 tonnes de riz

blanc (5 % de brisures) destin=C3=A9 =C3=A0 la consommation humaine ?



15 000 tonnes de sucre



25 000 tonnes de haricots rouges



Si oui, veuillez nous indiquer votre prix CIF jusqu=E2=80=99au port maritim=

e de

Mombasa, au Kenya.



Cordialement, Ibrahim Abdul



--0000000000001ec6ec0653f6b393

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Would your company be able to supply us 50'000 MT of w=

hite rice 5% broken for human consumption?
Sugar 15000 MT
Kidney bean=

s 25000 MT
If yes, please what is your price on CIF to mombasa sea Port =

Kenya

Regards
Ibrahim Abdul
.................................=

.......
Votre entreprise serait-elle en mesure de nous fournir 50 000 to=

nnes de riz blanc (5 % de brisures) destin=C3=A9 =C3=A0 la consommation hum=

aine ?

15 000 tonnes de sucre

25 000 tonnes de haricots rouge=

s

Si oui, veuillez nous indiquer votre prix CIF jusqu=E2=80=99au por=

t maritime de Mombasa, au Kenya.

Cordialement, Ibrahim Abdul

v>



--0000000000001ec6ec0653f6b393--

Food request spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Jun 2026 04:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXcUp-000000001iW-1PcB

for dave@doctor.nl2k.ab.ca;

Thu, 11 Jun 2026 04:18:47 -0600

Resent-From: The Doctor

Resent-Date: Thu, 11 Jun 2026 04:18:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f66.google.com ([209.85.161.66]:46484)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from <2315071055@students.unila.ac.id>)

id 1wXbPO-00000000LTN-1LtQ

for root@doctor.nl2k.ab.ca;

Thu, 11 Jun 2026 03:09:16 -0600

Received: by mail-oo1-f66.google.com with SMTP id 006d021491bc7-69d8091533bso3113409eaf.1

for ; Thu, 11 Jun 2026 02:08:19 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1781168893; cv=none;

d=google.com; s=arc-20240605;

b=lPb6KhyhUoDeqXUoJnlCJPWUuMkSiKa+2ID6TGaUj4wWqAaPo5fiKOhoWbspw8jEt/

s6/NI5rxYzdKOeyjazw0kapQwdU9ypw1kRQTRA+wMStSrXyTAWbc+Wi2WaAYxr0CUe32

+JohAqxXjUjZYor5We1uIeSSsgdl4CIvOVUf2QH/Uv7MD6Se0YAEePhgvBP1ROtH1KiH

DeyOgsUguuQFIc0iTIPam4hvw/Z/mptYjTrwmBXZ0DLZfQd8/aHUW3lX07ldXTDW75Y5

ScQk5pCV/t5wro11hmHrIfhKStEJMBVfnkCnyybPZNyUfPvblcGzTHE2b/dDykhQtqnS

gZTw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=NjmmuGShaKMOnrK4iTybTZvgNFSobkKPi6/K4yCS0Ko=;

fh=GAe2nAdW+118+VBA3UOc7JxNS9He+JzfuRHZ3G+C8FA=;

b=Oi5iBKT6Bv0Se3kSAqVSfKRokJunKnEvUd8QZiOhBgJdnLP/3W8kQm4bB7FGIGhqGT

QVG/vg/erg/7bmDGVP3YWqVPdwoNkSLEc38ifxJPS3y+pU+rt3xYAGywZv5AQ3V8i9/C

FnhEgSzdYA6LUsz4X2LXqD1gYE5NE4vDhZG2KwXL+oighSawccb626Mv/c9u+1uvLerH

wa+dlgicr7RYmGSnR2xPAB+rq7Ogk8BUpSzvwtgd2Ft1FRCtn5Az8cfpHmnPL/HRyR6h

CD0PBnqVckhqCr9nYz1pzx/ifpvbEC7n7nRNDC1AFqHaTH/ci1tAKC3y2akMgdJPDnO8

OGWQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=students-unila-ac-id.20251104.gappssmtp.com; s=20251104; t=1781168893; x=1781773693; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=NjmmuGShaKMOnrK4iTybTZvgNFSobkKPi6/K4yCS0Ko=;

b=VrJwazytFPrl/O8R2mLoOUEAIMJ30CvWeXHGRVAljH4sBqahq850MsTzklZ9Z6BzBT

Ax2/dfTtc/nPCo/eWr1CAxO8FSsWPcoNLf/7ZIt6Bg0KLAPXef6Yio0bXsXSNC0OfDEM

xf6FX6O4Kl8G2V9SMdOBqpjFChWAlb2Gs4f7Xnx+myms2IGmOVHpLOpm4y9+cbjerfql

WrFTDbDD/QzEA8TPzIvGo0va54XZ3DgeprjKKEM1BmfJmNRwSl3BYFisAFtks+jpJtqH

oQRk4kmXmtlzdwSk1qkN7qOArXAdvm8zjqWsp1geVU31wbypXHI27XzqxWEw3GqOzVgY

JkHg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781168893; x=1781773693;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=NjmmuGShaKMOnrK4iTybTZvgNFSobkKPi6/K4yCS0Ko=;

b=OEKFcr/KlVaKlyf5l0fbmzkbe7CLS5QnPFQoTy75bYZoS+YYztoSjts6ASEITTOpi7

2QgBZTVge0djAIrNXDkWD7CW3bRZ8QWvByisUxhudNWgRtA4RNa6la06ZQf25m2Zho+j

TuWQh0BpedHu2xTPHtrFD7ZbAEwLyv4Cpq3qynNrn2JZ08K2xLJ3AdNmRMY4vSYBcbVn

m5Aq2k+0IPiElNj5Q5oU8B6nEndgxIIksCHa38f13Txcl+tj9vokHdQH3uGtz0OKPY32

vSio/BG1jhWY+U7lHgNaD+bm8ozvDxX5cO11zLgqaJepzBHv7QMLhrVnu7+A1jywsPSo

tKfg==

X-Forwarded-Encrypted: i=1; AFNElJ9MolBBUiCa+eByb5iNO7fTpXUoZ95mq4hd82E/Dxr0UoOMVBQZ3Wzga0/630TdaGiedcLQ@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yx445J17taXGab7w3bLU/stmcoyyy2leKM0IOYZzxVbepGdJiY3

e7Ia2qqgXwd5Ad4jzaokUCr5Rov24CCl0ddhbRtCf8SXDVyl1t52VNKtZ9ck84RZlcnOa9kTzFi

86rw5lupPY32fuRkiOFgI8BHvTWpOjGgZkgBIwLiTsQ==

X-Gm-Gg: Acq92OF7OHNqFSGrjeugaR2xksDf2anofgJHNTrSGQQEEsAepfzgGC78bnsLG/AlGUf

nB3a656NT2Sw8myHD9yADYvMXwFXSNI5RoQ2bm15hOasEWQNN49Fj/nFTUDmqQ2lqRYlNG+F1uw

5FBRgIH5Yq8pmFspwylwHnEZIdw1SJQ54tUgAzJdXiAVijvqYkqcFMObTiMWB8RHBLqK97zw6MU

JLgkEZuc8GSHkW2IMU9HwbaAmNb9awG1jLc5C3kJNzDWBftVS6aU+qrW7rCSVayjtyzVzIqOQHe

TrBncbFgbrVrf1kYEGwk

X-Received: by 2002:a05:6820:82b:b0:69e:b86b:1aa2 with SMTP id

006d021491bc7-69ecb05da18mr1253663eaf.56.1781168892455; Thu, 11 Jun 2026

02:08:12 -0700 (PDT)

MIME-Version: 1.0

Reply-To: abdulibrahim1941@outlook.com

From: Ibrahim Abdul <2315071055@students.unila.ac.id>

Date: Thu, 11 Jun 2026 09:07:53 +0000

X-Gm-Features: AVVi8CcX_CsRUOBmnmHfuYGT2bT0qa2tU9PUdhSyEjkPBg1tgw_OlQfNdOAujfE

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000001ec6ec0653f6b393"

Bcc: root@doctor.nl2k.ab.ca

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Would your company be able to supply us 50'000 MT of white

rice 5% broken for human consumption? Sugar 15000 MT Kidney beans 25000 MT

If yes, please what is your price on CIF to mombasa sea Port Kenya