Web/SEO/App spam from OVH

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 14:24:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxAje-00000000AYr-3X76

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 14:23:26 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 14:23:26 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp34.univalence.com ([142.44.227.66]:61913)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx7dC-000000003U5-2mwC

for sales@nk.ca;

Mon, 02 Mar 2026 11:04:43 -0700

Received: from mail.univalence.com (mail.univalence.com [54.39.51.108])

by smtp34.univalence.com (Postfix) with ESMTP id 1454A4A8C8C9

for ; Mon, 2 Mar 2026 18:03:47 +0000 (UTC)

DKIM-Filter: OpenDKIM Filter v2.11.0 smtp34.univalence.com 1454A4A8C8C9

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=univalence.com;

s=smtp00; t=1772474627;

bh=ZjiTBOTPYFdvtoSUWZjEE3f54u80dScA9iOL7kws/OY=;

h=Date:Subject:From:Reply-To:To:List-Unsubscribe:From;

b=XzOQcuIWBzJkrNLGoieRQ4Toa5SNws+MyGC+4QMSYVrFnFyXZXlG3VbaZjnpJewdT

ImssvZvmN+g5R/8rwmGja8EHJEpL/1uxUgZsRp7kzMQKZSfztexrkRqA2pP8tU90T+

Ma9USINrUzv9NKRSkSyJcPJETmph2KTKioUP8GytogcBt8gLp7U83jQsYTevg6gtIg

9gDgrAF+cSicgwpjYmmP7PqCz6z01qqkmXacHsY/FIvIYO+U4D62E5tMbybE+Qxt1+

qBRMhH9AbfhhoXz2wa+URM1QFBb51fPbImV76PFrQtbm/jjvIBhYWZqsJnqp+KtyEO

TvIzDfhl3Ymig==

Received: from [127.0.0.1] (ns559509.ip-54-39-51.net [54.39.51.107])

by mail.univalence.com (Postfix) with ESMTPSA id 4fPmyW0Bv0zll1Wp

for ; Mon, 2 Mar 2026 18:03:47 +0000 (UTC)

Message-ID: <13485016e1de30984447af6cb7a6226d@swift.generated>

Date: Mon, 02 Mar 2026 18:03:47 +0000

Subject: Netknow Internet Service: AI discovery across nearby locations in

Edmonton

From: "Support @ Computers1000"

Reply-To: featured@computers1000.com

To: sales@nk.ca

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe: ,

Feedback-ID: retarget_feature_listing_start3:Computers1000:NTR_en:MultiSite

X-Spam_score: 13.6

X-Spam_score_int: 136

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Netknow Internet Service, AI assistants and search engines

increasingly rely on structured directory data to understand which organisations

operate in specific cities and areas. A Featured Listing on Computers1000

strengthens these signals. Your entry appears at the top of its category

and across related listings in that location, helping people, search engines,

and AI system [...]



Content analysis details: (13.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.39.51.107 listed in will-spam-for-food.eu.org]

[54.39.51.107 listed in will-spam-for-food.eu.org]

[54.39.51.107 listed in will-spam-for-food.eu.org]

[54.39.51.107 listed in will-spam-for-food.eu.org]

[54.39.51.107 listed in will-spam-for-food.eu.org]

[54.39.51.107 listed in will-spam-for-food.eu.org]

[54.39.51.107 listed in will-spam-for-food.eu.org]

[54.39.51.107 listed in will-spam-for-food.eu.org]

[54.39.51.108 listed in will-spam-for-food.eu.org]

[54.39.51.108 listed in will-spam-for-food.eu.org]

[54.39.51.108 listed in will-spam-for-food.eu.org]

[54.39.51.108 listed in will-spam-for-food.eu.org]

[54.39.51.108 listed in will-spam-for-food.eu.org]

[54.39.51.108 listed in will-spam-for-food.eu.org]

[54.39.51.108 listed in will-spam-for-food.eu.org]

[54.39.51.108 listed in will-spam-for-food.eu.org]

[142.44.227.66 listed in will-spam-for-food.eu.org]

[142.44.227.66 listed in will-spam-for-food.eu.org]

[142.44.227.66 listed in will-spam-for-food.eu.org]

[142.44.227.66 listed in will-spam-for-food.eu.org]

[142.44.227.66 listed in will-spam-for-food.eu.org]

[142.44.227.66 listed in will-spam-for-food.eu.org]

[142.44.227.66 listed in will-spam-for-food.eu.org]

[142.44.227.66 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.39.51.107 listed in dnsbl.ahbl.org]

[54.39.51.107 listed in dnsbl.ahbl.org]

[54.39.51.107 listed in dnsbl.ahbl.org]

[54.39.51.107 listed in dnsbl.ahbl.org]

[54.39.51.108 listed in dnsbl.ahbl.org]

[54.39.51.108 listed in dnsbl.ahbl.org]

[54.39.51.108 listed in dnsbl.ahbl.org]

[54.39.51.108 listed in dnsbl.ahbl.org]

[142.44.227.66 listed in dnsbl.ahbl.org]

[142.44.227.66 listed in dnsbl.ahbl.org]

[142.44.227.66 listed in dnsbl.ahbl.org]

[142.44.227.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.39.51.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.39.51.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.39.51.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.39.51.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[54.39.51.107 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: computers1000.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: www.computers1000.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: univalence.com]

[URI: computers1000.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Netknow Internet Service: AI discovery across nearby locations in

Edmonton



Dear Netknow Internet Service,



AI assistants and search engines increasingly rely on structured directory =

data to understand which organisations operate in specific cities and areas=

.



A Featured Listing on Computers1000 strengthens these signals. Your entry a=

ppears at the top of its category and across related listings in that locat=

ion, helping people, search engines, and AI systems discover it more easily=

.



Where Featured Listing slots are still available today, they can currently =

be secured at a 50% discount.



Each city or area supports only two Featured Listings, so availability can =

fill quickly.



Check availability:

https://www.computers1000.com/login/101520784895984?e=3D2283704448





Warm regards,

The Computers1000 Team



Unsubscribe: https://www.computers1000.com/login/101520784895984/unsubscrib=

e?e=3D2283704448



Webroot phish from Google Gmail Part 3

Posted by Dave Yadallee on
@font-face {

font-family: 'Google Sans';

font-style: normal;

font-weight: 700;

src: url(//fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLV154t=

zCwM.ttf) format('truetype');

}





=20



=20



=20



=20

















Webroot phish from Google Gmail Part 4

Posted by Dave Yadallee on

/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Cindy Lowry: Invoice date: 2026-03-03 Bill Number: 1021-845-AQY Ac=

count Update, Thank you for being a valued customer of Webroot Tech Support=

. Your subscription term of 5 Years has now concluded. For clarification or=

support, please reach us at +1-(803) 201-2340. Financial Insights Hub Quan=

tity: 1 Device Product: Total Shield Plan Coverage: 60 Months Warranty Paym=

ent Method: Auto Debit Total Charged: USD 452.11 Should you need further as=

sistance regarding this order, contact +1 (803)-201-2106. Gratefully, Victo=

r Jowell Webroot Tech Support, LLC 252 Coronado Etna Oh 43018 United States=

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . =

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .=

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . =

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .=

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ."/>=


ent">
uled"/>
/Organization">=


95b0"/>
ht: 1px; height: 0; max-height: 0; width: 0; max-width: 0; opacity: 0; over=

flow: hidden;" itemprop=3D"name">Shipping Activity Confirmed
ia-hidden=3D"true"><=

/span>
ntation" align=3D"center" style=3D"width:100%;" class=3D"body-container">
body>

6px;" aria-hidden=3D"true">  

=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"">=


tp://schema.org/EmailMessage">

Invoice date: 202=

6-03-03
Bill Number: 1021-845-AQY

Account Update,

Thank you for bein=

g a valued customer of Webroot Tech Support. Your subscription term of 5 Ye=

ars has now concluded.

For clarification or support, please reach us at +=

1-(803) 201-2340.

Financial Insights Hub
Quantity: 1 Device
Produc=

t: Total Shield Plan
Coverage: 60 Months Warranty
Payment Method: Aut=

o Debit
Total Charged: USD 452.11

Should you need further assistance r=

egarding this order, contact +1 (803)-201-2106.

Gratefully,
Victor Jow=

ell
Webroot Tech Support, LLC
252 Coronado Etna Oh 43018 United State=

s
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.


border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" alig=

n=3D"center" style=3D"width:100%;" class=3D"">
>
>

r: solid 1px #dadce0; border-radius: 8px; direction: rtl; font-size: 0; pad=

ding: 24px 32px; text-align: left; vertical-align: top;" class=3D"main-cont=

ainer-inner">

font-size: 13px; text-align: left; direction: ltr; display: inline-block; v=

ertical-align: top; width: 100%;overflow: hidden; word-wrap: break-word;"><=

table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation=

" width=3D"100%" class=3D"main-column-table-ltr" style=3D"padding-right: 32=

px; padding-left: 0;;table-layout: fixed;">

umn-td" style=3D"padding:0; vertical-align:top;">
dding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" style=3D=

"table-layout: fixed;">
tr>

n: left; word-break: break-word;;padding-bottom:2px;">

mily: 'Google Sans', Roboto, sans-serif;font-weight: 400; font-size=

: 22px; line-height: 28px;color: #3c4043; text-decoration: none;" class=3D"=

primary-text" role=3D"presentation">Shipping Activi=

ty Confirmed

0; text-align: left; word-break: break-word;;padding-bottom:24px;">

le=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400;=

font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; =

text-decoration: none;" class=3D"primary-text" role=3D"presentation">
aria-hidden=3D"true">Monday Mar 2 =E2=8B=85 11pm =E2=80=93 Tuesday Mar 3, 2026 =E2=

=8B=85 10:30pm (Central Time - Chicago)

=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;pad=

ding-bottom:24px;">

: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spac=

ing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" r=

ole=3D"presentation">
" role=3D"presentation" style=3D"padding-bottom: 4px;">


"primary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: no=

ne;font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding:=

0;">Organizer


lass=3D"notranslate">
display: inline-block;;color: #3c4043; text-decoration: none;" href=3D"mail=

to:wadiwasonam102@webuserupdate.org">Cindy Lowry
=3D"organizer" itemscope itemtype=3D"http://schema.org/Person">
op=3D"name" content=3D"Cindy Lowry"/>
diwasonam102@webuserupdate.org"/>

break-word;;padding-bottom:24px;">

serif;font-style: normal; font-weight: 400; font-size: 14px; line-height: 2=

0px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D=

"primary-text" role=3D"presentation">
cellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;">=


t-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased;mar=

gin: 0; padding: 0;">Guests

(Guest list has been hidd=

en at organizer's request)


--000000000000b3e86f064c0d4376--

Webroot phish from Google Gmail Part 2

Posted by Dave Yadallee on
--000000000000b3e86f064c0d4376

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SW52b2ljZSBkYXRlOiAyMDI2LTAzLTAzIEJpbGwgTnVtYmVyOiAxMDIxLTg0NS1BUVkgQWNjb3Vu

dCBVcGRhdGUsIFRoYW5rICANCnlvdSBmb3IgYmVpbmcgYSB2YWx1ZWQgY3VzdG9tZXIgb2YgV2Vi

cm9vdCBUZWNoIFN1cHBvcnQuIFlvdXIgc3Vic2NyaXB0aW9uICANCnRlcm0gb2YgNSBZZWFycyBo

YXMgbm93IGNvbmNsdWRlZC4gRm9yIGNsYXJpZmljYXRpb24gb3Igc3VwcG9ydCwgcGxlYXNlICAN

CnJlYWNoIHVzIGF0ICsxLSg4MDMpIDIwMS0yMzQwLiBGaW5hbmNpYWwgSW5zaWdodHMgSHViIFF1

YW50aXR5OiAxIERldmljZSAgDQpQcm9kdWN0OiBUb3RhbCBTaGllbGQgUGxhbiBDb3ZlcmFnZTog

NjAgTW9udGhzIFdhcnJhbnR5IFBheW1lbnQgTWV0aG9kOiAgDQpBdXRvIERlYml0IFRvdGFsIENo

YXJnZWQ6IFVTRCA0NTIuMTEgU2hvdWxkIHlvdSBuZWVkIGZ1cnRoZXIgYXNzaXN0YW5jZSAgDQpy

ZWdhcmRpbmcgdGhpcyBvcmRlciwgY29udGFjdCArMSAoODAzKS0yMDEtMjEwNi4gR3JhdGVmdWxs

eSwgVmljdG9yIEpvd2VsbCAgDQpXZWJyb290IFRlY2ggU3VwcG9ydCwgTExDIDI1MiBDb3JvbmFk

byBFdG5hIE9oIDQzMDE4IFVuaXRlZCAgDQpTdGF0ZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4NCg0KU2hpcHBpbmcgQWN0aXZpdHkgQ29uZmlybWVkDQpNb25kYXkgTWFyIDIg4ouFIDEx

cG0g4oCTIFR1ZXNkYXkgTWFyIDMsIDIwMjYg4ouFIDEwOjMwcG0NCkNlbnRyYWwgVGltZSAtIENo

aWNhZ28NCg0KDQoNCk9yZ2FuaXplcg0KQ2luZHkgTG93cnkNCndhZGl3YXNvbmFtMTAyQHdlYnVz

ZXJ1cGRhdGUub3JnDQoNCg==

--000000000000b3e86f064c0d4376

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">























Customs Clearance









Your shipment needs additional information to clear customs.







Shipment ID: INTLXXXXXX





Origin: International





Status: Awaiting Clearance





Provide Required Information





Need help? Call 1-888-744-1155 or reply to this email.











Intelcom Logistics • Delivering Excellence













--b1_07ad313fcb5da5c306d1533d809db85d--



Wealthsimple Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3za-00000000B2n-0Kzn

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:11:26 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:11:25 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail9.stofferrussell.com ([34.124.114.211]:35510)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3dM-000000005B0-2Y1O

for root@nk.ca;

Mon, 02 Mar 2026 06:48:36 -0700

Authentication-Results: mail9.stofferrussell.com;

auth=pass (login)

Message-ID: <8a577bf9fe92db5b16213d913026b6fb@mail9.stofferrussell.com>

From: =?utf-8?B?U2VjdXJpdHkgVGVhbQ==?=

To: =?utf-8?B?cm9vdEBuay5jYQ==?=

Subject: =?utf-8?B?RmluYWwgcmVtaW5kZXI6IFZlcmlmeSB5b3VyIFdlYWx0aHNp?=

=?utf-8?B?bXBsZSBhY2NvdW50?=

Date: Mon, 02 Mar 2026 13:47:42 +0000

X-Priority: 3

X-Mailer: Coremail Copyright Tebie

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64

Received: from localhost (Unknown [127.0.0.1])

by mail9.stofferrussell.com (Haraka) with ESMTPSA id 9A6D2F1C-2D60-4134-9754-D11D39F522A6.1

envelope-from

tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (authenticated bits=0);

Mon, 02 Mar 2026 13:47:43 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mail9.stofferrussell.com; h=Content-Transfer-Encoding: Content-Type:

MIME-Version: Date: Subject: To: From: Message-ID; q=dns/txt;

s=s20260301150; t=1772459264;

bh=9Ckj4D+cXu8DSNA3P8/cMjVwdP7apToCC1J58xTFLWU=;

b=jlRPnYTWS5Sm4aKsJfMJ8FO0DRQA4jNELnErKX92i8YXscdKmcSgqZxKNTZn6i7EgmiB3Wq3R

9DWkeXDIEqM3wEerM0YDvvvzQuPB1QSn9hO8vYmEt4F5oyNgLfe23yZNX8MgLuqA11dAGNS4X6l

4OH8rU+qGZCDW+98NDR4BVw=

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: wealth Complete your identity verification



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.124.114.211 listed in dnsbl.ahbl.org]

[34.124.114.211 listed in dnsbl.ahbl.org]

[34.124.114.211 listed in dnsbl.ahbl.org]

[34.124.114.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.124.114.211 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.124.114.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.124.114.211 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.124.114.211 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 ADDR_OFFER From address contains OFFER

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.2 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: c.dnspod.com/125.94.59.175]

[URI: b.dnspod.com/43.161.3.75]

[URI: a.dnspod.com/43.130.172.75]

[URI: c.dnspod.com/43.134.249.75]

[URI: a.dnspod.com/43.134.249.74]

[URI: c.dnspod.com/112.80.181.175]

[URI: b.dnspod.com/220.196.136.75]

[URI: b.dnspod.com/163.177.5.79]

[URI: a.dnspod.com/117.135.128.175]

[URI: a.dnspod.com/101.227.168.75]

Subject: {SPAM?} =?utf-8?B?RmluYWwgcmVtaW5kZXI6IFZlcmlmeSB5b3VyIFdlYWx0aHNp?=

=?utf-8?B?bXBsZSBhY2NvdW50?=





Complete your identity verification



Due to recently updated regulatory requirements, we kindly request that you verify your identity so we can continue to keep your account secure.



Only after successful verification will you be able to use all the features of your account without restrictions.



Please click the "Verify Account" button to start the verification process. You will then be redirected to the official Wealthsimple website, where you can securely complete the process.

Verify Account



We recommend completing this process as soon as possible to ensure uninterrupted access to your account and its latest features.



If you have already completed verification, please allow up to 24 hours for your account status to update.



Thank you for your understanding.



Sincerely,

Wealthsimple Team

© 2016–2026 Wealthsimple Technologies Inc. All Rights Reserved. For further details see our Legal Disclosures. By using this website, you accept our Terms of Use and Privacy Policy.

Web/SEO/App spam from Google Gmail Part 2

Posted by Dave Yadallee on


Date: Mon, 2 Mar 2026 16:57:47 +0530

X-Gm-Features: AaiRm52cNz2y9j6Au_NOynKIWQQH_JY9hRic8KZyQ_eDwKiMS8w7UpbCZk4ghWo

Message-ID:

Subject: # Taxi/Cab Booking & UBER-like Geofencing App's..??

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000282a2d064c08e1aa"

Bcc: liambell963@digitalappsdev.com

X-Original-Sender: liambell831@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=FR1blY1g; arc=pass

(i=1); spf=pass (google.com: domain of liambell831@gmail.com designates

209.85.220.41 as permitted sender) smtp.mailfrom=liambell831@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

Precedence: list

Mailing-list: list liambell963@digitalappsdev.com; contact liambell963+owners@digitalappsdev.com

List-ID:

X-Spam-Checked-In-Group: liambell963@digitalappsdev.com

X-Google-Group-Id: 409416084642

List-Post: ,



List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hii, Good Morning! We offer Best Mobile App Development Solutions

in iOS, Android, Hybrid & Native Apps.



Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.200 listed in dnsbl.ahbl.org]

[209.85.208.200 listed in dnsbl.ahbl.org]

[209.85.208.200 listed in dnsbl.ahbl.org]

[209.85.208.200 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.200 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.200 listed in list.dnswl.org]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[liambell831(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.200 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} # Taxi/Cab Booking & UBER-like Geofencing App's..??



--000000000000282a2d064c08e1aa

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hii,



Good Morning!



We offer Best Mobile App Development Solutions in iOS, Android, Hybrid &

Native Apps.





We have expertise in:-

=E2=9C=AB UBER-like Geofencing Apps =E2=9C=AB Taxi=

/Cab Booking Apps

=E2=9C=AB Food Apps like Zomato =E2=9C=AB Tr=

avel Apps

=E2=9C=AB Restaurants / Hotel Apps =E2=9C=AB Re=

ntal Apps

=E2=9C=AB Appointment booking apps =E2=9C=AB GPS-b=

ased Apps

=E2=9C=AB App for booking/Delivery services =E2=9C=AB Cleani=

ng Apps

=E2=9C=AB App for health and wellness =E2=9C=AB Rea=

l Estate Apps



=E2=9C=AB Medical Apps =E2=9C=

=AB Logistics Apps

=E2=9C=AB E-commerce Apps =E2=9C=AB G=

rocery Apps

=E2=9C=AB Events Apps =E2=9C=

=AB Ridesharing

Apps

=E2=9C=AB Solar Panel Apps =E2=9C=

=AB Scheduling Apps

=E2=9C=AB Gaming Apps =E2=9C=

=AB E-learning Apps

=E2=9C=AB On-Demand Services Apps =E2=9C=AB Produ=

ct-based Apps

=E2=9C=AB Driver Apps =E2=9C=AB And many Mor=

e.



Kindly share your Mobile App requirements; short details of projects (like

what functionalities and features you want in your Mobile App) please share

your Contact number.



Thank You!!

Liambell



--000000000000282a2d064c08e1aa

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



PGRpdiBkaXI9Imx0ciI+PGZvbnQgZmFjZT0idmVyZGFuYSwgc2Fucy1zZXJpZiIgY29sb3I9IiMw

MDAwMDAiPkhpaSw8YnI+PGJyPkdvb2QgTW9ybmluZyE8YnI+PGJyPldlIG9mZmVyIEJlc3QgTW9i

aWxlIEFwcCBEZXZlbG9wbWVudCBTb2x1dGlvbnMgaW4gaU9TLCBBbmRyb2lkLCBIeWJyaWQgJmFt

cDsgTmF0aXZlIEFwcHMuPGJyPjxicj48Yj5XZSBoYXZlIGV4cGVydGlzZSBpbjotPGJyPjwvYj48

YnI+4pyrIFVCRVItbGlrZSBHZW9mZW5jaW5nIEFwcHMgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

wqAgwqAgwqAgwqAgwqDinKsgVGF4aS9DYWIgQm9va2luZyBBcHBzPGJyPuKcqyBGb29kIEFwcHMg

bGlrZSBab21hdG8gwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

wqDinKsgVHJhdmVsIEFwcHM8YnI+4pyrIFJlc3RhdXJhbnRzIC8gSG90ZWwgQXBwcyDCoCDCoCDC

oCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDinKsgUmVudGFsIEFwcHM8YnI+4pyr

IEFwcG9pbnRtZW50IGJvb2tpbmcgYXBwcyDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDC

oCDCoCDCoOKcqyBHUFMtYmFzZWQgQXBwczxicj7inKsgQXBwIGZvciBib29raW5nL0RlbGl2ZXJ5

IHNlcnZpY2VzIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKg4pyrIENsZWFuaW5nIEFwcHMgwqAgwqA8

YnI+4pyrIEFwcCBmb3IgaGVhbHRoIGFuZCB3ZWxsbmVzcyDCoCDCoCDCoCDCoCDCoCDCoCDCoCDC

oCDCoCDCoCDCoCDCoCDinKsgUmVhbCBFc3RhdGUgQXBwcyDCoCDCoCDCoCDCoCDCoDxicj7inKsg

TWVkaWNhbCBBcHBzIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKg

IMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKg4pyrIExvZ2lzdGljcyBBcHBzPGJyPuKcqyBFLWNvbW1l

cmNlIEFwcHMgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

wqAgwqAgwqAg4pyrIEdyb2NlcnkgQXBwczxicj7inKsgRXZlbnRzIEFwcHMgwqAgwqAgwqAgwqAg

wqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

4pyrIFJpZGVzaGFyaW5nIEFwcHM8YnI+4pyrIFNvbGFyIFBhbmVsIEFwcHMgwqAgwqAgwqAgwqAg

wqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg4pyrIFNjaGVk

dWxpbmcgQXBwczxicj7inKsgR2FtaW5nIEFwcHMgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

wqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqDinKsgRS1sZWFybmluZyBB

cHBzPGJyPuKcqyBPbi1EZW1hbmQgU2VydmljZXMgQXBwcyDCoCDCoCDCoCDCoCDCoCDCoCDCoCDC

oCDCoCDCoCDCoCDCoCDCoCDinKsgUHJvZHVjdC1iYXNlZCBBcHBzPGJyPjwvZm9udD48c3BhbiBz

dHlsZT0iY29sb3I6cmdiKDAsMCwwKTtmb250LWZhbWlseTp2ZXJkYW5hLHNhbnMtc2VyaWYiPuKc

qzwvc3Bhbj7CoERyaXZlciBBcHBzwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

wqAgwqAgwqAgwqDCoDxmb250IGZhY2U9InZlcmRhbmEsIHNhbnMtc2VyaWYiIGNvbG9yPSIjMDAw

MDAwIj7inKsgQW5kIG1hbnkgTW9yZS48YnI+PGJyPktpbmRseSBzaGFyZSB5b3VyIE1vYmlsZSBB

cHAgcmVxdWlyZW1lbnRzOyBzaG9ydCBkZXRhaWxzIG9mIHByb2plY3RzIChsaWtlIHdoYXQgZnVu

Y3Rpb25hbGl0aWVzIGFuZCBmZWF0dXJlcyB5b3Ugd2FudCBpbiB5b3VyIE1vYmlsZSBBcHApIHBs

ZWFzZSBzaGFyZSB5b3VyIENvbnRhY3QgbnVtYmVyLjxicj48YnI+VGhhbmsgWW91ISE8L2ZvbnQ+

PGRpdj48Zm9udCBmYWNlPSJ2ZXJkYW5hLCBzYW5zLXNlcmlmIiBjb2xvcj0iIzAwMDAwMCI+TGlh

bWJlbGw8L2ZvbnQ+PC9kaXY+PC9kaXY+DQo=

--000000000000282a2d064c08e1aa--

Web/SEO/App spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3yn-00000000B0G-3ZFc

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:10:37 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:10:37 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f200.google.com ([209.85.208.200]:60471)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx1Sx-00000000OMg-2eYT

for root@nk.ca;

Mon, 02 Mar 2026 04:29:46 -0700

Received: by mail-lj1-f200.google.com with SMTP id 38308e7fff4ca-389ebb088d5sf47838691fa.0

for ; Mon, 02 Mar 2026 03:28:47 -0800 (PST)

ARC-Seal: i=3; a=rsa-sha256; t=1772450921; cv=pass;

d=google.com; s=arc-20240605;

b=PJYQdRYbaOTJzlvQbM8RyuixtY1QBcVoUUVD/8XSyJ+Ely74KdpgcFwOKrQbcocLc7

BCYBfbKMXgPb2Xv0kXutYixKJzCrWYei3BkOyydcowtjrA8ntaH7EKsF4W8gnchh4BKZ

NdbVj/1ei4kJM1vIqaWfU1intXl4rDE8STZsWwcqFO9M68J5QoFrIS6ZF4VCpjHjjj6F

TIfKBskTjy4T7ciPDyP69UzPgYpDRvDshLjaV2kJn10rDVeJz5WlxRI3jVadOkXkxVdP

dfbDJ+1zAgorEeMww51vlKnZ7RBkn+RgzbyxVaNi8WDUbN27PI+V9iqTwyUW58KcIiEO

zxEA==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=BA71/URbw6+69g1rl7hbSIVfw//iHo8oeZ/tyMrYje8=;

fh=7DbYyfc72kfAqd2ioaevk8biHE7XA19HiLp6UU3gIPc=;

b=XjtPru1Z589+2VLVZA8Vi+8xwVNkawE4d+M67hQkH9lpoR6PqSTfgsDyRS5Jxoi/ir

pIVGG1EdLdsdfeJSLL76Ala8j81T4zf5uHLyKKhJ7cTwpdaYL+0sNfrS2ZCHhpdk98cA

CFLfO7ilC+6dHQRMSzejEr3DZw1/ltMsqTY/hJ8d2XE8vW9HXiMvR12afyqTLpTc5DI2

B7B6YdHUQmXQ8gA7GFE6NjF7RB//GYOwc5acI5VlEXVttoF4ufng2tiLK3m7LYe6Ain8

ZdFZvpzFZavLrWMkROVnMY5MSLf1l06I1wfzQ/jEFyHOz+JK1uzpSW3sYkHpEa4DXSX2

+wYA==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=FR1blY1g;

arc=pass (i=1);

spf=pass (google.com: domain of liambell831@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=liambell831@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=digitalappsdev-com.20230601.gappssmtp.com; s=20230601; t=1772450921; x=1773055721; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=BA71/URbw6+69g1rl7hbSIVfw//iHo8oeZ/tyMrYje8=;

b=DE/qEVBGE2b+dEwFdXXMt2CLtj0BLCvib3z12uHXwMIE/URcQ4Jup+yjx1oTs7BNPk

nqdMsShx+ZBVQFMkE3IGL1K2GkQaguCbLeVlpZOBvq4gJOkh6iArpyDT47jrTw3ecJvG

VxedovTbJlrVDiMse7jlzngSqnCB6AuAfk8435mQpbIYu/LRgr8tzmfTsma/YQSy71i1

qMgq6dMd/ASZyp3XnulLqm1hljNpwzWxpMi3sB9KXhD/Bk8B/5JJsbxHCiSweTQ1DSJ+

WDXGwW4XT2wk1zgP8MskU+wD2Cl30JFTqhj77VKGKHKt+CN6eGSZ5tBbRtfSssWUYzsx

P2fg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772450921; x=1773055721;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=BA71/URbw6+69g1rl7hbSIVfw//iHo8oeZ/tyMrYje8=;

b=TyIahoTv1LBuMfRBQ4E49aKUdxm+3K8YwJqTvbN0srPx1YbvrXLIIuSgrJOIHOvBlq

GaUyNR+1F/bBPJpMbU2BU1b1vsW6N1BZz8LvVdqilkWxJMadTN3QZr3zQ3pNPDudza78

mEv1BJF/76rvvdguM7ZVZaKYyw6oioukOgTDm6Z4z/b6ZAwp/tY56SdzAyjRpj2PfpUI

t9Kf9niCgcp0dJQZm107M7KTEeCACQ0lFHL5lxLfgthXJPuUjAMAlNdIXAF53L7hnnjs

zFyHQgHVplLFfwXL7s8JomSWLZLU/x4obAbmN/e61jCzoy2bvr5Nxgl8s649RUOkK0j7

oXQQ==

X-Forwarded-Encrypted: i=3; AJvYcCVoMV381Lv01HBJ2do6zBlDs3ZxcYV45mIPvqG3G5ubmnWIn4cYBsoe5OdF7qwUamnpeUko@nk.ca

X-Gm-Message-State: AOJu0Yz1utoSqx/mQI1twC5aXsEdhY56IdV26QUR6PC1wzPsZQnFXe5w

1UCkP+dUfBT8GC/lSHhmrDjNakZ4KlTYlaIYnGUlLUt/JymOjUWewT1EoRQRkbEwHEo=

X-Received: by 2002:a05:651c:1443:b0:38a:6f5:4b54 with SMTP id 38308e7fff4ca-38a06f54e3fmr59118671fa.4.1772450920283;

Mon, 02 Mar 2026 03:28:40 -0800 (PST)

X-BeenThere: liambell963@digitalappsdev.com; h="AV1CL+ExZP8Ceqcj/kF/21y75dL1K3TE0BDKg3Mz3j/jbTaW/Q=="

Received: by 2002:a05:651c:ca:b0:37b:9709:9756 with SMTP id

38308e7fff4ca-389e3a24300ls16828891fa.2.-pod-prod-09-eu; Mon, 02 Mar 2026

03:28:02 -0800 (PST)

X-Forwarded-Encrypted: i=3; AJvYcCVfXnhuVYr39mZOcZiGEzJ17czXR+O273O6u3E2MWQeIH5/X9dxQtsHIIVHsiUQIOO7noh8nHoBWGTh1Q==@digitalappsdev.com

X-Received: by 2002:a2e:8045:0:b0:389:fc6b:944e with SMTP id 38308e7fff4ca-389ff3637e9mr67603821fa.34.1772450882285;

Mon, 02 Mar 2026 03:28:02 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1772450882; cv=pass;

d=google.com; s=arc-20240605;

b=itjp8FMUIe30Qokwko474DPw3xsKKrlxKCXG5CxHxZ4HZc30dCaxr2h5QhcqdUgXBe

ZRcTQzC6hm5vL55KZ65tqq/cO6NVJc19fuZt66Yz2stALb7yqF9kupEkBtIuw1UBmlJb

nD/7Xz0JkdIXLCqbyE8M3lUJLWEfBbN9VEVW+dEgdqSHa0mn4JUlbgfBiJcC/wd9FO6i

yxCPNDhBMF6LwmBmc4HirMMeSfU5rlXMnFSYDYN7/9s2BYQH9zcutOcFebQpVt7G7hMI

g9ag29xs8sSBpeDVWOzoVDQY13nOpsJH0BySw/v1QfkH+N6VOjNFaGVA6Q1ApNNqDOfI

WUvw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=BA71/URbw6+69g1rl7hbSIVfw//iHo8oeZ/tyMrYje8=;

fh=pbFix2YRKmEmXEiO13VDFksQxysCQrB5Zf1IMm9qJFU=;

b=B9pN7CngqrCIQXBn18fq30FxNKbHIUT9GiLqXCTcH7SbLEkK3QIfHdYwApAfu5c8GB

7WkuQv67zkcKdLHjgMZLTUPjhW3tQ2ktAbfjTZEKl58HxLG8zes5rBirdoB9UpsMzAiW

tkYAEnihXVNNlPigeNVoe/qDu95rsaS7EZX48Hjjf6bkr0L+9RuCM6GAmFIta0GFi/hR

oSJw/HDkNvRYcOdiAhOum1NwPz4/GfgTOZnX43BnXNSsmCka74UoMMZUc2//JPN1/9Jf

TT1/lAWoGw1p11XWc9pNNTpcq+1md34Y0vLNf62fcq//fRM2Eg/a0veyAK/eWwp4SkMo

tc5w==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=FR1blY1g;

arc=pass (i=1);

spf=pass (google.com: domain of liambell831@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=liambell831@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 38308e7fff4ca-389f2fcd9c1sor19909961fa.20.2026.03.02.03.28.02

for

(Google Transport Security);

Mon, 02 Mar 2026 03:28:02 -0800 (PST)

Received-SPF: pass (google.com: domain of liambell831@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1772450882; cv=none;

d=google.com; s=arc-20240605;

b=ZHCgbYs7xEhNqZVxQAem46ZuHd60sC+JXxqbgCqYLl1jkUQ7ciD7YTqTFW4WAH8wwX

lZr0fHyJlVgLpEuL0caRg6/sfF+Le9GUGRPSafrIZKjFX5jN+ZJ/N3X7ZQJzwWJzLiOj

8poju8oetxWS0KrzEyE/ni97ChHk0GmEhdXnjvP3BluBlHIWgc7Ffqmk6xSbhltnD2i8

msYloXQZ2Kq2cPhdmX/nfgPxgtbn+Qfa6hsQLyVHHEpesGFHb4vQWnb6mkfF0TXO1ov2

Y95cp4yO7qHXnPJO161sXe/RwgCwmkjdjKq2d/uEeb4D9FrPZJuUr6DDhurfOSUy5z+o

+CAQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=BA71/URbw6+69g1rl7hbSIVfw//iHo8oeZ/tyMrYje8=;

fh=pbFix2YRKmEmXEiO13VDFksQxysCQrB5Zf1IMm9qJFU=;

b=f/PDBDZxQf85E26yMfzezYGaaPE1chfql4anLzDSx8L47U6QGP6WiYlMOm/jjcSAh4

FHRhj2RzEPruSyOSmlWTzpuqAJvhocceYBll4y3Y9W1Ic80G2lnIWY78q5HrsTWU8yXq

A3QFHOUTuB7q4Dd9+zuPy0THKH4WJdSqH2VKZqMwDyeMAPSI8/sWColNFu4Ecydrg1Wr

MwhcKordatCSR3i/df8ZhEvkENJB0eEEh2I5S7MHdqlViFdPthjBDN+ofsJ5TU73d5Xk

jwXgh5wl91cjVgPjamMWZJHqWFxs5B78b6GmFxGPvyC2rwGbagq6o3i8EpD/FgeJH1Ff

F8Rg==;

darn=digitalappsdev.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Forwarded-Encrypted: i=1; AJvYcCUjdWruQcubIVpuIYv3mDicS9vZ61m3SotD7ckuX8XMN8HTFKZC2rbP//49UTfl8cGz8fnv0G1UNcbdEw==@digitalappsdev.com

X-Gm-Gg: ATEYQzyBB7R7M0zQecZKCjpC1dgswwURm0ct5ZaytUhYNmeNh2OgJYYEPmfU3BiQJrN

y0eq+/5zqhg3+c8dloq7DGm5NGq3K2X6kzhdlkLHPBM0rldNLLb6WuSBWPiEmBzdGtFbwhkR3sY

5xQUngt30GbDolNZa+ogmAMGEkl8eorGI/bT1Xae82zGeoO38Bq5VioVkN6JpgVHSCqlCHC+/Bs

OnJgpS372F0s8vunL5gdheIcVtYXX8f9niGDs5Lxnh0zzYWDidIlhSJQTEXAwqSB8LFNXeupiZe

94PpF4VdANwzrFk5tQIQzVj+r6lQa1CA6Bfhew==

X-Received: by 2002:a05:651c:40cf:b0:389:fe5d:567a with SMTP id

38308e7fff4ca-389ff13fce9mr56482071fa.17.1772450881217; Mon, 02 Mar 2026

03:28:01 -0800 (PST)

MIME-Version: 1.0

From: Liambell

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.75 listed in dnsbl.ahbl.org]

[52.103.43.75 listed in dnsbl.ahbl.org]

[52.103.43.75 listed in dnsbl.ahbl.org]

[52.103.43.75 listed in dnsbl.ahbl.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.75 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.75 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.75 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.75 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.75 listed in sa-trusted.bondedsender.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ranugupta3142(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ranugupta3142(at)hotmail.com]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.75 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.75 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.75 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.43.75 listed in bl.score.senderscore.com]

Subject: {SPAM?} Re: Quick SEO Question



--_000_SEZPR01MB6078B000BCB6C34D428FDD24B47EASEZPR01MB6078apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



Top Rank in GOOGLE,



You can get your website on the 1st page of GOOGLE.



So, if you are interested, I will send you a price list.



This Service is available at an affordable Price.



Regards,



Rani Gupta





--_000_SEZPR01MB6078B000BCB6C34D428FDD24B47EASEZPR01MB6078apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0);">Hi,




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0); font-weight: 700;">Top Rank in GOOGLE,




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0);">You can get your website on the


e: 11pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 0); font-weig=

ht: 700;">1st page of GOOGLE.




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0);">So, if you are interested, I will send you a price =

list.




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0); background-color: rgb(192, 192, 192); font-weight: 7=

00;">This Service is available at an affordable Price.




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0);">Regards,




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0);">Rani Gupta




Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_SEZPR01MB6078B000BCB6C34D428FDD24B47EASEZPR01MB6078apcp_--

Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3yS-00000000Azi-20pL

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:10:16 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:10:16 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013075.outbound.protection.outlook.com ([52.103.43.75]:52828 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx1I5-00000000NPH-3Qyp

for root@nk.ca;

Mon, 02 Mar 2026 04:18:32 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=MIZ2V5Z+z6my5/PGjLR+brxn/0W3tHM67hfLiEUw9KeaqiDFzwCuVCU7Y/mKLOiuijdvRkiNinKiE8xiM6ZgQNdWLQL2B+oK0oiPTbFXDUcLJWOlCk8qrCin4AOZq/zggGefgC38kyh4Qyke/uDw/m9hLaJZGMTN4UcMsl+66KSTATe79mwNPaPUaWPQ376a4iDpAfwdy8DlU6dzpmabrnhPTHREnJM90Me3kMWv2CazZKgpuzTDLD5el2txz8VMZSjGZK1/LG/Yx2SJn0a9xhz8Wm7zk+8rsI0gS4xrguu4TZ12DlUv/7TCDmA6dV0xSwtAaLemmaPX2uHPEqAfcg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fSoQG8o7s1vvZ90ly8NUGCcEYwZ2sMTtg+/Y43oWBrk=;

b=M2qKTCbuF46cg2RzY5MBtNkX/BFDzNGKiQ91TTFlVaXyFySlHBoU51V4j1jcOOFcNmrETJTwcwrdhNe4ICOb1YRWLV105QgfsQLuFRHg3L/UZ0R0//4XJ4gJ2F7LqyAe7j8b4CwP+f8USXPOxhr+vSQ8lYTVk8gEYJbuLfJoDnivKAWe+qLvZD6TO76d/HnOgo1lWTLgKMTtiEoAcBl4hCAFlbVTq+xgVej4be+jDkGDEFud2KC5Iakzd0mPd4ZHrfeE9dgPmhzNaLpfX8qI31bpo+OKoAcTzE0LM9jC9R17oA0LQvtqg3lLPkrKjToufCMhbw5TVIQd2iU+7mahaA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=fSoQG8o7s1vvZ90ly8NUGCcEYwZ2sMTtg+/Y43oWBrk=;

b=YhZzRdVXOD02KM3z7H8nQKD9pS19QKxa+6p4C64vXXeoL5jCNr4rygGg7nu6fCtYvcavjhSwm+3WL4bgioTo3uy6XA0BpY05gI8TRBp/HTUdNSuCyiTpwhoJL0je6bO80Brf6NOp5DcOVfkAtSK9+K4av2KqqwA1kB11Pxcwhs48CR+DUFUaMrh9Bib3zhTT0XP1rCU59tnfIoYSlpSrd3+sKVa28Tjub7FUXgcf1E9y6xY/faz4qJV64wqr7QLEtL8EzVjo+rTlx+YbN3T37kIVyRgO/XCewaAR/2uGhWa0gAncNjEtWLSGG7tRN6yItudGi2/3/fol34AgzV5AEQ==

Received: from SEZPR01MB6078.apcprd01.prod.exchangelabs.com

(2603:1096:101:21d::12) by KL1PR01MB4742.apcprd01.prod.exchangelabs.com

(2603:1096:820:be::9) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.20; Mon, 2 Mar

2026 11:17:03 +0000

Received: from SEZPR01MB6078.apcprd01.prod.exchangelabs.com

([fe80::695b:1fcb:92c7:b08e]) by SEZPR01MB6078.apcprd01.prod.exchangelabs.com

([fe80::695b:1fcb:92c7:b08e%4]) with mapi id 15.20.9654.015; Mon, 2 Mar 2026

11:17:03 +0000

From: Rani Guptaa

Subject: Re: Quick SEO Question

Thread-Topic: Quick SEO Question

Thread-Index: AQHcqjPizhZMBdLy10iC6uPMw0Ix2w==

Date: Mon, 2 Mar 2026 11:17:03 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR01MB6078:EE_|KL1PR01MB4742:EE_

x-ms-office365-filtering-correlation-id: 176c34b0-a2f2-4138-88ed-08de784d3b0b

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|8060799015|8062599012|15030799006|15080799012|31061999003|461199028|20031999003|39105399006|440099028|3412199025|26104999006|102099032|51015399003|40105399003|39145399003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?uZ5Mhv6bBg810SP27XH02kGn5qwTH3KzZZS5JobYS8MnjA6zRR2oGlkrBn?=

=?iso-8859-1?Q?7JM5w3PBhBbX8/gkIzCjBT5rShYAZK1b+xQw1ARjZXzkM/Wbi3cdggDG2q?=

=?iso-8859-1?Q?LlF9KiTbM9Bvd04JNU8ArI++cOlA0mJWsn2vJcBNcEQOviMVsuF4HMb4CC?=

=?iso-8859-1?Q?G0kZElijGBjqIBGqveXlUPfsLebqekD0enhmnFznBxCo/iko81TSLzA69f?=

=?iso-8859-1?Q?eG1e7Bm9tU2BvU+h6h7rgjasmBOObl47nRWnm129DLQzYkr4oo4RbfrFsD?=

=?iso-8859-1?Q?+cW19J6BGWqosQbcWLWVS+3RrrCyrRD7m1DR36OSzI1GyANyMohc5zDpXP?=

=?iso-8859-1?Q?4AUrOm15m/nSWQHsazRj5qDhg0nb1R4vD3ji1bMFVa/1JvnOnPhaVL68/w?=

=?iso-8859-1?Q?O/s1AVoMhM24CyjFXuI+BxN21Y59MYckvo4Ggq2JfuqNOILzVb/owMnvMj?=

=?iso-8859-1?Q?nKPZngxa72f97m0rgsADxVnCj/zhzOS4OV/aX0m4dglVjiSDJM6NslKbYq?=

=?iso-8859-1?Q?RSbqNuN6wg21rStJ+UHMWs1Icnh2fMbERfHcGawtyFhRTBb36HF+Gv3kJV?=

=?iso-8859-1?Q?Wn2AG4nbsp7FEUOJzSzePOQ2RtLgcJ2uzl/EOnewweCAxvRcN437IZaJw6?=

=?iso-8859-1?Q?KuRD1V6VKlWJKy5+yxAVDC75bRkq2ksHk34tzcX+aG83T1FuD/+896+o2M?=

=?iso-8859-1?Q?z9pImhuNP2sPtAlrVbsDrVLq+1qVm7NjTGBXV4WW0V88Ff4wn3FNF5cHaF?=

=?iso-8859-1?Q?VXm7ZwXp1wLHC4E60XgKJBGa9YWDgp12Yuo0cV9c73sxMsHDnYQ5Iqk7Qk?=

=?iso-8859-1?Q?PDUUFwsfaHFMkwba+FYJNxClWc15c9hIHEz4u2MIiEwdm61lvr5Hb40HWB?=

=?iso-8859-1?Q?9dC7OOBKPZatNGoreTeh+mRG7jDrtWoyRo1SI7ktN5LOiHHRnfL0Oexhmp?=

=?iso-8859-1?Q?0ByNP4vA/cpNM2UcFa4xhWlJWYDpSboz5HpOSte3wbbV15a7vYRkpLkXnp?=

=?iso-8859-1?Q?8SFiS/6Mlrw6BgJvs+zxiC6LI8JpnfDBbJB6wIuM3xPFyPEjIGSLWhDVOc?=

=?iso-8859-1?Q?NjKhZlRA+zSkVt3tkCsyF00dXeJ5FbYNJt1dgXew1z1j?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?XUEW98IJk+DrGUUhHRQkskppzY9pPM+CMLtsaZerdl6R5FbG+jbIiRVqaG?=

=?iso-8859-1?Q?rxln2pZY1g+gyxLp7PVgmKQw4pjPVt+aOxGhBMGUvkgIfEBGAkcefcsRrh?=

=?iso-8859-1?Q?VQt8Dr/jGcJxEHRjs43vS2HbUdwwV6etGOvrJDpHFfGsrGRxt6zNpgt/Pz?=

=?iso-8859-1?Q?uCFCDVM5JFgP+L18ylDcvra0FZqooLcf2F4TzVcW1wJDO0Zt2fi6TjnJ21?=

=?iso-8859-1?Q?aS8w1MxO7xgHz5fpCcdZdOcjXZ+90NG3JLeYcSd0pD3nSECyK2jsKgK3yc?=

=?iso-8859-1?Q?xrZSImAyIB5Crzqwkd796hEAh12n1abqueR9T685pht8Mt//MaONefgrRF?=

=?iso-8859-1?Q?/GayPPi2mztA59fhWQ8NqhjXQJtLRgmjzfuhbMW2UcVhmNkjFi7K/B52+C?=

=?iso-8859-1?Q?/gKtyASRbGPXMRL5RH3HZyPZ4W5vO08EdQaRbLVQaA2AHhV0XUTVnT5DX4?=

=?iso-8859-1?Q?YRDZ+bktRzdlVdB9z9TzaIKwdfCxzDdFeKQJD+NS9e5VE2tM1aIP5WMuiL?=

=?iso-8859-1?Q?VRlSqTxM+6OfC0/H9YrrV4XBDxf4AzUzI/pajbhHSjdlvQ88BGjKfKjo3j?=

=?iso-8859-1?Q?MJVfrZZaX2lcSMi6kNwvo/M/Q+wQUe0SzoaAon6PkKC4LHRQXDE9S1i0TH?=

=?iso-8859-1?Q?OwblPvmtQXmVhglrISwBAgtVpfK/ECQZmR0ytLVOHpoaq7vWNPrYpy/Tm2?=

=?iso-8859-1?Q?1CP3HfM4C0i1wU4lz9Egmzf8K6UNP+5CbUQgToIbBPa5pZ+FmQ5orlkPhV?=

=?iso-8859-1?Q?1kDG40I+RhTdECsxAhoXdeaR+hZQjtwbXuZeNMSyvppcBFHzvKy5UqCoFJ?=

=?iso-8859-1?Q?EwgFXxUtg9obxjtWvGnVIHZZVtA31zAutgvzjK7YAolmkdTwPwnmIrwfKp?=

=?iso-8859-1?Q?qVORADH7ofIDp72HNa0WQrCX/nHpkXnrnWHFJeAG+/PyGD+MVc9v8lxEFh?=

=?iso-8859-1?Q?v5BP2Sc9zVY4+cUQ8wpvNV0jeB4JK4yzlBjvJboZc1JwNwKNC4olOGGALk?=

=?iso-8859-1?Q?PunUGvXWJYQTZq+934FZd6capydJX0Xm+X+b1zo8BYBJR5ExhVaemHygSA?=

=?iso-8859-1?Q?Dr5TbCD6o3bsX/+sCBu1z3nC0SIh0dnLufaj4DuI0sZTwsi6gBqEqpE80a?=

=?iso-8859-1?Q?qbo+0TPzz0atSWlz8c++Z8ctS7/5EXZqDZ5gEu3/7LUhu6D6Th/q/pGBrb?=

=?iso-8859-1?Q?po2KQbHRqIZlI4BISakmrBoCcH568WkmggkHcb64vQLHadhtwt6tt3Gl2u?=

=?iso-8859-1?Q?Vl63ag9jzsh5fMU7S3FPnWbFg50b+JPPRHebIMtVoBJziS5YV71InJgFfi?=

=?iso-8859-1?Q?mPR24kwI5f1G8BRvjn6gpJrovuc5+2tsrwGRJXo1TpwjXliwZA7S3cXMBU?=

=?iso-8859-1?Q?mZnw/RHfVZPOICRkTIrBGHCSngf+0PxYlG46gYwFKuTwn1AaLfLBMwxtCF?=

=?iso-8859-1?Q?8B5peafiXjKY2Hu5kbu48CEXRNyTOicVioE/qIESj0slt9J1w4wvU9KNH7?=

=?iso-8859-1?Q?wmMr1teYTEd8XoxIP0IPz/?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR01MB6078B000BCB6C34D428FDD24B47EASEZPR01MB6078apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-3e488.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB6078.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 176c34b0-a2f2-4138-88ed-08de784d3b0b

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Mar 2026 11:17:03.1531

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR01MB4742

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Top Rank in GOOGLE, You can get your website on the 1st

page of GOOGLE.

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3yK-00000000AzU-1L3B

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:10:08 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:10:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f198.google.com ([209.85.160.198]:60507)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx0ff-00000000LE5-2GS8

for sales@nk.ca;

Mon, 02 Mar 2026 03:38:47 -0700

Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-5061d1ef1f3so540946181cf.0

for ; Mon, 02 Mar 2026 02:37:52 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webandappdevelopments-com.20230601.gappssmtp.com; s=20230601; t=1772447866; x=1773052666; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=/F4UX5xNmMj4KfvBMq51T67pfZsMUZ0FDXa+885pisM=;

b=uCiLq7pOHFA1wI2Sj57+jEiZ/hhF6whpJKKnFz9C2hg7GDf5foIHmovCNVmXfSVGJH

UyM7nu+nUkPebBnfXf8EzKhCFeUd5uvN+J59xTreVljUTd9IMZP09o6R7IfrBAOWPCen

8fNSXs9FwQ7FunLznwVK4h1u2c+1M/KKOTXqE8/DX63OVheZ8xDzFSfykS437w765D7f

dmomZ/Ss/wU/uhTrB8+Ksimiac1vIyUvlYwcVLNTocetHD+aS+9rbv57++jtHUaM6hUF

JRWxzsFwS0/wjhu5b2SOg8y0mCLlb95XszkOxfhW9xgx/mBjgdZenEI22g9mc/JpKzdx

8Yjg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772447866; x=1773052666;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=/F4UX5xNmMj4KfvBMq51T67pfZsMUZ0FDXa+885pisM=;

b=evTpxMcmsInOJbdv9mcZocSnB/MY1F4CSVFsfM1IzREM/xf28tTFZRHMx4HdrcRo5B

nDPnDhkc2YjyLl1jPR1DCjLE4FCC2MTMdv7/06XuPbyeVLqUOJ59UswpRdkny+Y8XhLw

5YoM+8+umPoAdvTq1PpxfYP5B7TKUa17lMNzxlOVbtWFyzO6KvrOiG8Kab7Q7IGcgtXY

UbwFqnsUa1P/4Fw+8V77xFjjEgSjSEPr1t0uOPs30Zh19NMOc5Gq6NWivHTx5gv5SZZ+

Rtd+gqyCkYEtYz02ZmLnQ4gvYb6DXF/EjV8P4wBrdZHjtuHvnn97zDX+zOfoYMMd5/lq

rGkw==

X-Gm-Message-State: AOJu0YxfBAIhYqVW7iv9/Q9ezJtRpgNIWNbL9aVLhyUPmgiKUsMNJln0

+advmsk6OSb3Mof+/vOY4hKM0llCldGa0KEJ2YYGbiq/7zqjTSGkWhCqMIOVDQ5DMjxrkzs60BV

s9U/uYgaVbZYLKUFF30DxyA==

MIME-Version: 1.0

X-Received: by 2002:a05:622a:c9:b0:4f1:ba52:2529 with SMTP id

d75a77b69052e-507527cb25bmr142527271cf.2.1772447865984; Mon, 02 Mar 2026

02:37:45 -0800 (PST)

Message-ID:

Date: Mon, 02 Mar 2026 10:37:45 +0000

Subject: Re: www.nk.ca

From: georgia@webandappdevelopments.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000006f64b8064c082d5e"

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Are you considering a website www.nk.ca redesign but worried

about the costs? We have a solution for you! I am searching online and found

your email sales@nk.ca and saw you have a website but your website www.nk.ca

could use a boost to improve how it looks visually in order to make it look

like the more u [...]



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.198 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.198 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Re: www.nk.ca



--0000000000006f64b8064c082d5e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,



Are you considering a website www.nk.ca redesign but worried about the

costs? We have a solution for you!



I am searching online and found your email sales@nk.ca and saw you have a

website but your website www.nk.ca could use a boost to improve how it

looks visually in order to make it look like the more up-to-date and modern

sites.



I am a web designer and I can help you if you'd like to add graphics,

logos, calls to action, additional buttons, etc. at a very low cost. Those

features really help to sell.



If you're interested, I can also provide information on our website

promotion packages and explain how they can benefit your business. Or Could

we set up a meeting? How about tomorrow at 10 to 12 AM?



May I send you a Website Sample & Prices ?



Thanks & Regards,

Georgia Staton



We are waiting for your reply, whether you are interested or not. Please do

reply to this email, even if it's just to let us know your decision, so

that we don't send you any further emails unnecessarily.



--0000000000006f64b8064c082d5e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

Are you considering a website www.nk.ca redesign but worried abo=

ut the costs? We have a solution for you!

I am searching online and =

found your email sales@nk.ca and saw you have a website but your website ww=

w.nk.ca could use a boost to improve how it looks visually in order to make=

it look like the more up-to-date and modern sites.

I am a web desig=

ner and I can help you if you=E2=80=99d like to add graphics, logos, calls =

to action, additional buttons, etc. at a very low cost. Those features real=

ly help to sell.

If you're interested, I can also provide informatio=

n on our website promotion packages and explain how they can benefit your b=

usiness. Or Could we set up a meeting? How about tomorrow at 10 to 12 AM?
r>
May I send you a Website Sample & Prices ?

Thanks & Regards,
r>Georgia Staton

We are waiting for your reply, whether you are inte=

rested or not. Please do reply to this email, even if it's just to let us k=

now your decision, so that we don't send you any further emails unnecessari=

ly.

--0000000000006f64b8064c082d5e--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3yE-00000000AzP-3QvM

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:10:02 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:10:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f199.google.com ([209.85.222.199]:53347)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx0ZG-00000000KsE-3lY3

for root@nk.ca;

Mon, 02 Mar 2026 03:32:11 -0700

Received: by mail-qk1-f199.google.com with SMTP id af79cd13be357-8c882774f0dso3287315985a.2

for ; Mon, 02 Mar 2026 02:31:14 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webandappdevelopments-com.20230601.gappssmtp.com; s=20230601; t=1772447468; x=1773052268; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=MqirowAg9D9AgNMIobkJj0ued12igV76UTIzlNXpkYQ=;

b=tfL3pwX3WmBNguUyrfU6Uu6I+C8EbbU2+hv/CVKZMvFuLE2NeP1YuTS0MjpOwbrYXu

3JeotyYDp+iHHpBydU/EePhv+7+9zHYVMFDrqyGnRQHOZrzHLihdf6HCYhGoQCjNsxam

pFiatW/rOqeKsOZtVHiDRvQMoKrnGH9JV5yaspp7XAOe+Na64h3Oj7NQaPYhIWv1ylQq

ZUGjoO5pFVp0yIUfUuvDE3j8AggQvRw0IGS/hwHwpX7uUWpEprQukTPKhO12kUWlcSYI

Ah0osKWCiK+yXNAlbTDz9rtPwFqlsRpiMaPCLkaXoKqX+TNmeTjEufKv2FCMG/GwohXI

p1gQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772447468; x=1773052268;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=MqirowAg9D9AgNMIobkJj0ued12igV76UTIzlNXpkYQ=;

b=TQEybk/5aDdEHK6NkJYJ4Ey7wZmce5UU8xCj+ChMT3A2zuegFOYn24AwnqlJ35lCy7

vqzqCb9N7GS0jyFjEHo2s7qNnbfbqZIFJyJyAWqQaLeL4VVCgzJXRSoWP0A7HClj36dT

1HIE6cLbK4bB3JrzTHYWhSV5+CiWJkuPWHIUxvH/1JTPTnWN9bD0toqKOyBxI1OWpqiH

8NcwrhvngbOlYzThm5xvdiWFwdMwMCurwOJOD/dUGdFuqySIPhJBIiO/4K1zczIprepi

vcJTwddh5h+W5YMqyNYJ9CeSB5PeZPcPHeGO4eqUB/ExDhGA7COgBEW4wMzpJPzEKEgm

GgXA==

X-Gm-Message-State: AOJu0YyhFZw07fwvoM3ahPJxIG/GZKq90u4m/R/ESTbqdKW1vN9U9+jZ

BWnRj5CLumDdd1WQALn0DTTUoNmcy68p6ihiiW3+4dVsE9gPc8c/8XNOHUU0fkEz0KFZ/qzcv87

iDUQwZLA/5ZpFnH1t7lnuhg==

MIME-Version: 1.0

X-Received: by 2002:a05:620a:28c5:b0:8cb:68ed:cc28 with SMTP id

af79cd13be357-8cbc8d733ebmr1360982385a.11.1772447468312; Mon, 02 Mar 2026

02:31:08 -0800 (PST)

Message-ID:

Date: Mon, 02 Mar 2026 10:31:08 +0000

Subject: Re: www.nk.ca

From: georgia@webandappdevelopments.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000bb6a74064c08157b"

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Are you considering a website www.nk.ca redesign but worried

about the costs? We have a solution for you! I am searching online and found

your email root@nk.ca and saw you have a website but your website www.nk.ca

could use a boost to improve how it looks visually in order to make it look

like the more up [...]



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.199 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.222.199 listed in sa-trusted.bondedsender.org]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.222.199 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.199 listed in wl.mailspike.net]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.222.199 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.199 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: www.nk.ca



--000000000000bb6a74064c08157b

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,



Are you considering a website www.nk.ca redesign but worried about the

costs? We have a solution for you!



I am searching online and found your email root@nk.ca and saw you have a

website but your website www.nk.ca could use a boost to improve how it

looks visually in order to make it look like the more up-to-date and modern

sites.



I am a web designer and I can help you if you'd like to add graphics,

logos, calls to action, additional buttons, etc. at a very low cost. Those

features really help to sell.



If you're interested, I can also provide information on our website

promotion packages and explain how they can benefit your business. Or Could

we set up a meeting? How about tomorrow at 10 to 12 AM?



May I send you a Website Sample & Prices ?



Thanks & Regards,

Georgia Staton



We are waiting for your reply, whether you are interested or not. Please do

reply to this email, even if it's just to let us know your decision, so

that we don't send you any further emails unnecessarily.



--000000000000bb6a74064c08157b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

Are you considering a website www.nk.ca redesign but worried abo=

ut the costs? We have a solution for you!

I am searching online and =

found your email root@nk.ca and saw you have a website but your website www=

.nk.ca could use a boost to improve how it looks visually in order to make =

it look like the more up-to-date and modern sites.

I am a web design=

er and I can help you if you=E2=80=99d like to add graphics, logos, calls t=

o action, additional buttons, etc. at a very low cost. Those features reall=

y help to sell.

If you're interested, I can also provide information=

on our website promotion packages and explain how they can benefit your bu=

siness. Or Could we set up a meeting? How about tomorrow at 10 to 12 AM?
>
May I send you a Website Sample & Prices ?

Thanks & Regards,
>Georgia Staton

We are waiting for your reply, whether you are inter=

ested or not. Please do reply to this email, even if it's just to let us kn=

ow your decision, so that we don't send you any further emails unnecessaril=

y.

--000000000000bb6a74064c08157b--

French cabinet making phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:09:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3wz-000000009QZ-0CK3

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:08:45 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:08:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.83.240.131] (port=46902 helo=karaca.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwzmZ-00000000HqQ-0orS

for doctor@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 02:41:51 -0700

Received: by karaca.com (Postfix, from userid 33)

id 60F34FF2F9; Mon, 2 Mar 2026 09:40:34 +0000 (UTC)

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?Q?Accus=C3=A9_de_r=C3=A9ception?=

Date: Mon, 2 Mar 2026 10:39:10 +0100

From: Cabinet LEGRAND & ASSOCIES

Reply-To: noreplycontact473@gmail.com

Message-ID: <98c562d341f028a32c183360dfda71dc@notaires-france.fr>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1785048028cdd0ced86738fd688f87c32"

Content-Transfer-Encoding: 8bit

X-Spam_score: 14.8

X-Spam_score_int: 148

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Cabinet LEGRAND & ASSOCIES Bonjour, Le Cabinet LEGRAND

& ASSOCIES vous a transmis des documents sécurisés concernant

votre dossier.



Content analysis details: (14.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: pneuf.cfd]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[noreplycontact473(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.6 J_CHICKENPOX_52 BODY: 5alpha-pock-2alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

Subject: {SPAM?} =?UTF-8?Q?Accus=C3=A9_de_r=C3=A9ception?=



This is a multi-part message in MIME format.



--1785048028cdd0ced86738fd688f87c32

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit











Cabinet LEGRAND & ASSOCIES







Bonjour,

Le Cabinet LEGRAND & ASSOCIES vous a transmis des documents sécurisés concernant votre dossier.



Ces documents sont disponibles sur notre plateforme sécurisée.

Accéder aux documents

Pour faciliter nos échanges, nous utilisons désormais la transmission électronique pour ces documents, sauf indication contraire de votre part.

Cordialement,L'équipe du Cabinet LEGRAND & ASSOCIES

Note importante : Ces documents seront accessibles jusqu'au 02/03/2026.







Ce message vous a été envoyé via la plateforme de gestion documentaire sécurisée utilisée par notre cabinet.

Vous recevez cet email car vous êtes en relation professionnelle avec le Cabinet LEGRAND & ASSOCIES. Conformément à la réglementation, vous pouvez à tout moment modifier vos préférences de réception.





--1785048028cdd0ced86738fd688f87c32

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Cabinet LEGRAND & ASSOCIES




Bonjour,



Le Cabinet LEGRAND & ASSOCIES vous a transmis des documents sécurisés concernant votre dossier.





Ces documents sont disponibles sur notre plateforme sécurisée.





Pour faciliter nos échanges, nous utilisons désormais la transmission électronique pour ces documents, sauf indication contraire de votre part.



Cordialement,
L'équipe du Cabinet LEGRAND & ASSOCIES



Note importante : Ces documents seront accessibles jusqu'au 02/03/2026.





Ce message vous a été envoyé via la plateforme de gestion documentaire sécurisée utilisée par notre cabinet.



Vous recevez cet email car vous êtes en relation professionnelle avec le Cabinet LEGRAND & ASSOCIES. Conformément à la réglementation, vous pouvez à tout moment modifier vos préférences de réception.









--1785048028cdd0ced86738fd688f87c32--



French cabinet making phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:09:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3wv-000000008i4-0TmS

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:08:41 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:08:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.83.240.131] (port=46928 helo=karaca.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwzmZ-00000000HqS-0ola

for sales@nk.ca;

Mon, 02 Mar 2026 02:41:54 -0700

Received: by karaca.com (Postfix, from userid 33)

id 761F1FF641; Mon, 2 Mar 2026 09:40:34 +0000 (UTC)

To: sales@nk.ca

Subject: =?UTF-8?Q?Accus=C3=A9_de_r=C3=A9ception?=

Date: Mon, 2 Mar 2026 10:39:10 +0100

From: Cabinet LEGRAND & ASSOCIES

Reply-To: noreplycontact473@gmail.com

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1dd402f0db64d438a08b85598c086fd05"

Content-Transfer-Encoding: 8bit

X-Spam_score: 14.8

X-Spam_score_int: 148

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Cabinet LEGRAND & ASSOCIES Bonjour, Le Cabinet LEGRAND

& ASSOCIES vous a transmis des documents sécurisés concernant

votre dossier.



Content analysis details: (14.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: pneuf.cfd]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[noreplycontact473(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.6 J_CHICKENPOX_52 BODY: 5alpha-pock-2alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} =?UTF-8?Q?Accus=C3=A9_de_r=C3=A9ception?=



This is a multi-part message in MIME format.



--1dd402f0db64d438a08b85598c086fd05

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit











Cabinet LEGRAND & ASSOCIES







Bonjour,

Le Cabinet LEGRAND & ASSOCIES vous a transmis des documents sécurisés concernant votre dossier.



Ces documents sont disponibles sur notre plateforme sécurisée.

Accéder aux documents

Pour faciliter nos échanges, nous utilisons désormais la transmission électronique pour ces documents, sauf indication contraire de votre part.

Cordialement,L'équipe du Cabinet LEGRAND & ASSOCIES

Note importante : Ces documents seront accessibles jusqu'au 02/03/2026.







Ce message vous a été envoyé via la plateforme de gestion documentaire sécurisée utilisée par notre cabinet.

Vous recevez cet email car vous êtes en relation professionnelle avec le Cabinet LEGRAND & ASSOCIES. Conformément à la réglementation, vous pouvez à tout moment modifier vos préférences de réception.





--1dd402f0db64d438a08b85598c086fd05

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Cabinet LEGRAND & ASSOCIES




Bonjour,



Le Cabinet LEGRAND & ASSOCIES vous a transmis des documents sécurisés concernant votre dossier.





Ces documents sont disponibles sur notre plateforme sécurisée.





Pour faciliter nos échanges, nous utilisons désormais la transmission électronique pour ces documents, sauf indication contraire de votre part.



Cordialement,
L'équipe du Cabinet LEGRAND & ASSOCIES



Note importante : Ces documents seront accessibles jusqu'au 02/03/2026.





Ce message vous a été envoyé via la plateforme de gestion documentaire sécurisée utilisée par notre cabinet.



Vous recevez cet email car vous êtes en relation professionnelle avec le Cabinet LEGRAND & ASSOCIES. Conformément à la réglementation, vous pouvez à tout moment modifier vos préférences de réception.









--1dd402f0db64d438a08b85598c086fd05--