Webroot phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 14:23:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxAiU-00000000AWR-18Pr

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 14:22:14 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 14:22:14 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f73.google.com ([209.85.210.73]:44401)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx6M3-00000000Fp3-04G3

for doctor@nl2k.ab.ca;

Mon, 02 Mar 2026 09:42:56 -0700

Received: by mail-ot1-f73.google.com with SMTP id 46e09a7af769-7d4d668425dso59056268a34.1

for ; Mon, 02 Mar 2026 08:42:00 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1772469714; x=1773074514; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=ZCBIqVtZVNl+G6J+Fl5gNaPQmMHju/xNfINhIFb9ge0=;

b=C1JFcg8PDSI8e7qdI3Lasp9fRVykd0ELNxo1H/3PiUZKFYzeaOEb/x4hIIBxBpy/6n

mB9juvWPyJUfEwo92SOD+Mvq+Uy4D8NoVCKPRCFJf0vuT46dLffrTrjXAarxXtxasBmw

ZOJhzemZjaUWbjyNK8jssNQhmiIpXPVLPppmusAR2ZfxjshdOsTN+TtTF8I0BW6JmbFw

70geH3qThTwT8e7g810p9QJhGixszSrdPWwgezcEk2cLOxcAJ6xVF5BHJusGsA55bIAi

aRFPgCt5UXwDVK5YhOMtQBgFU5BYCviohCx/6MBVL5tSBtE3Ers5qZTUPzC7J4+S+OkH

Rnsg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webuserupdate-org.20230601.gappssmtp.com; s=20230601; t=1772469714; x=1773074514; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=ZCBIqVtZVNl+G6J+Fl5gNaPQmMHju/xNfINhIFb9ge0=;

b=SGDRlzsyqlFKVlFGiTaLgSYKqFJdEdLO6Mjr3y+aYtmmklg5chd/Heze/glIT3OMg5

XhnJyv0s2yJTjoTdBgbgNsjnCmBSaaPC9hli+lz83n7bp2wfp5BPlUozRb1+mHr7GyX/

1ap0B5e9xDq3xAFgbk7esh5tEePhTZQrc3W6f/jjJAD5dmzLuk8NowJlt8aFKsRjVvJb

06v6Wu3b9VyQ6p9tEFGPEDcS9kBZrecs77qyPeZglSjryaGNEZquH9qnB1fq6H7cI0So

vBB7fJuGSk+saqR/gCrlmnGCCtz+SXUT4iBObcuTpRS6Z3b+W4b81trc9H87Kk6ByoeT

r9dQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772469714; x=1773074514;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ZCBIqVtZVNl+G6J+Fl5gNaPQmMHju/xNfINhIFb9ge0=;

b=pD8KTHO9ZMOvSsGQZeCBE7S/rz0IFA8yBnDyqMysT9+2f0z8XgaINB4QedMCbs2H2p

HXyqJZWUzsaOthltBGKL0Pw5+yVFEn1MoVW4eJIl8SjYPU/Wglr+uIPjm+olpPRabVsl

eSyNJy4xRN9+UjeboE2uoMDHDi5iH9XruLQY9TYIir14haY3TWGqm9P7IkKcWAJ9J/23

MMEQNLhNZxmZTEYOEAaLVHOXANWuX8QNLGQ+OuMasrGlR85roXEOJd/IxJC+OSGXRpoc

IG2q34fXfL9WTNgtj4spe1RyMlVijbLHQ/6lbF2O/hr6adsbUsRjFmlSatG4FWziCtxm

wfmg==

X-Forwarded-Encrypted: i=1; AJvYcCWUO2hVPxK9BigIr30pM8h9aoEI5Uu3Fu0yEFQ1rvr93rra80P4cGFKsfw0skikirxDVOYy1bM=@nl2k.ab.ca

X-Gm-Message-State: AOJu0Yw6dp1kgEQMjJn5nFHARG1AubgVmzVPDQyje6EsGbP1/rbUQqWJ

NsEGZDkpCjCkupTiLs/SxgnecNR325AiWw5X6ES7BI5DYYEgUnTmGYCBnaSb7OC6wCDiE8K4R+V

88/uBNmYxrOn2UF1/yraCaSyU1xRQNsSEqQ3DwWoVAMBrEw==

MIME-Version: 1.0

X-Received: by 2002:a05:6830:600b:b0:7ca:e8bf:8c4c with SMTP id

46e09a7af769-7d591b27b8dmt14534672a34.12.1772469714232; Mon, 02 Mar 2026

08:41:54 -0800 (PST)

Reply-To: Cindy Lowry

Sender: Google Calendar

Message-ID:

Date: Mon, 02 Mar 2026 16:41:54 +0000

Subject: Shipping Activity Confirmed

From: Cindy Lowry

Content-Type: multipart/alternative; boundary="000000000000b3e86f064c0d4376"

X-Spam_score: 12.8

X-Spam_score_int: 128

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Invoice date: 2026-03-03 Bill Number: 1021-845-AQY Account

Update, Thank you for being a valued customer of Webroot Tech Support. Your

subscription term of 5 Years has now concluded. For clarification [...]



Content analysis details: (12.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

[209.85.210.73 listed in dnsbl.ahbl.org]

[209.85.210.73 listed in dnsbl.ahbl.org]

[209.85.210.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.73 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.73 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Shipping Activity Confirmed

intelcom Phish from digital ocean

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 13:07:00 -0700

Received: from [192.241.168.10] (port=34136 helo=vtwo.tyentusa.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx9WX-000000007hl-2erS

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 13:06:01 -0700

Received: from www-data by vtwo.tyentusa.com with local (Exim 4.90_1)

(envelope-from )

id 1vx9Vj-00051j-1o

for dave@doctor.nl2k.ab.ca; Mon, 02 Mar 2026 20:04:59 +0000

To: dave@doctor.nl2k.ab.ca

Subject: Important: Your Package Requires Customs Clearance - 2.96 CAD Due

Date: Mon, 2 Mar 2026 20:04:59 +0000

From: Intelcom

Message-ID: <07ad313fcb5da5c306d1533d809db85d@tyentshowroom.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_07ad313fcb5da5c306d1533d809db85d"

Content-Transfer-Encoding: 8bit

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Intelcom Customs Update @media only screen and (max-width:

600px) { .container { width: 100% !important; padding: 20px !important; }

} Customs Clearance



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.241.168.10 listed in will-spam-for-food.eu.org]

[192.241.168.10 listed in will-spam-for-food.eu.org]

[192.241.168.10 listed in will-spam-for-food.eu.org]

[192.241.168.10 listed in will-spam-for-food.eu.org]

[192.241.168.10 listed in will-spam-for-food.eu.org]

[192.241.168.10 listed in will-spam-for-food.eu.org]

[192.241.168.10 listed in will-spam-for-food.eu.org]

[192.241.168.10 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.241.168.10 listed in dnsbl.ahbl.org]

[192.241.168.10 listed in dnsbl.ahbl.org]

[192.241.168.10 listed in dnsbl.ahbl.org]

[192.241.168.10 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.241.168.10 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.241.168.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.241.168.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.241.168.10 listed in dnsbl.ahbl.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} Important: Your Package Requires Customs Clearance - 2.96 CAD Due



This is a multi-part message in MIME format.



--b1_07ad313fcb5da5c306d1533d809db85d

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit









Â



Intelcom Customs Update

@media only screen and (max-width: 600px) {

.container { width: 100% !important; padding: 20px !important; }

}







Customs Clearance







Your shipment needs additional information to clear customs.





Shipment ID: INTLXXXXXX



Origin: International



Status: Awaiting Clearance



Provide Required Information





Need help? Call 1-888-744-1155 or reply to this email.









Intelcom Logistics • Delivering Excellence







--b1_07ad313fcb5da5c306d1533d809db85d

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit









Â



Intelcom Customs Update







Customs Clearance









Your shipment needs additional information to clear customs.







Shipment ID: INTLXXXXXX





Origin: International





Status: Awaiting Clearance





Provide Required Information





Need help? Call 1-888-744-1155 or reply to this email.











Intelcom Logistics • Delivering Excellence













--b1_07ad313fcb5da5c306d1533d809db85d--



Wealthsimple Phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3za-00000000B2n-0Kzn

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:11:26 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:11:25 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail9.stofferrussell.com ([34.124.114.211]:35510)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3dM-000000005B0-2Y1O

for root@nk.ca;

Mon, 02 Mar 2026 06:48:36 -0700

Authentication-Results: mail9.stofferrussell.com;

auth=pass (login)

Message-ID: <8a577bf9fe92db5b16213d913026b6fb@mail9.stofferrussell.com>

From: =?utf-8?B?U2VjdXJpdHkgVGVhbQ==?=

To: =?utf-8?B?cm9vdEBuay5jYQ==?=

Subject: =?utf-8?B?RmluYWwgcmVtaW5kZXI6IFZlcmlmeSB5b3VyIFdlYWx0aHNp?=

=?utf-8?B?bXBsZSBhY2NvdW50?=

Date: Mon, 02 Mar 2026 13:47:42 +0000

X-Priority: 3

X-Mailer: Coremail Copyright Tebie

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64

Received: from localhost (Unknown [127.0.0.1])

by mail9.stofferrussell.com (Haraka) with ESMTPSA id 9A6D2F1C-2D60-4134-9754-D11D39F522A6.1

envelope-from

tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (authenticated bits=0);

Mon, 02 Mar 2026 13:47:43 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mail9.stofferrussell.com; h=Content-Transfer-Encoding: Content-Type:

MIME-Version: Date: Subject: To: From: Message-ID; q=dns/txt;

s=s20260301150; t=1772459264;

bh=9Ckj4D+cXu8DSNA3P8/cMjVwdP7apToCC1J58xTFLWU=;

b=jlRPnYTWS5Sm4aKsJfMJ8FO0DRQA4jNELnErKX92i8YXscdKmcSgqZxKNTZn6i7EgmiB3Wq3R

9DWkeXDIEqM3wEerM0YDvvvzQuPB1QSn9hO8vYmEt4F5oyNgLfe23yZNX8MgLuqA11dAGNS4X6l

4OH8rU+qGZCDW+98NDR4BVw=

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: wealth Complete your identity verification



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

[34.124.114.211 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.124.114.211 listed in dnsbl.ahbl.org]

[34.124.114.211 listed in dnsbl.ahbl.org]

[34.124.114.211 listed in dnsbl.ahbl.org]

[34.124.114.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.124.114.211 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.124.114.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.124.114.211 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.124.114.211 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 ADDR_OFFER From address contains OFFER

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.2 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: c.dnspod.com/125.94.59.175]

[URI: b.dnspod.com/43.161.3.75]

[URI: a.dnspod.com/43.130.172.75]

[URI: c.dnspod.com/43.134.249.75]

[URI: a.dnspod.com/43.134.249.74]

[URI: c.dnspod.com/112.80.181.175]

[URI: b.dnspod.com/220.196.136.75]

[URI: b.dnspod.com/163.177.5.79]

[URI: a.dnspod.com/117.135.128.175]

[URI: a.dnspod.com/101.227.168.75]

Subject: {SPAM?} =?utf-8?B?RmluYWwgcmVtaW5kZXI6IFZlcmlmeSB5b3VyIFdlYWx0aHNp?=

=?utf-8?B?bXBsZSBhY2NvdW50?=





Complete your identity verification



Due to recently updated regulatory requirements, we kindly request that you verify your identity so we can continue to keep your account secure.



Only after successful verification will you be able to use all the features of your account without restrictions.



Please click the "Verify Account" button to start the verification process. You will then be redirected to the official Wealthsimple website, where you can securely complete the process.

Verify Account



We recommend completing this process as soon as possible to ensure uninterrupted access to your account and its latest features.



If you have already completed verification, please allow up to 24 hours for your account status to update.



Thank you for your understanding.



Sincerely,

Wealthsimple Team

© 2016–2026 Wealthsimple Technologies Inc. All Rights Reserved. For further details see our Legal Disclosures. By using this website, you accept our Terms of Use and Privacy Policy.

Web/SEO/App spam from Google Gmail Part 2



Date: Mon, 2 Mar 2026 16:57:47 +0530

X-Gm-Features: AaiRm52cNz2y9j6Au_NOynKIWQQH_JY9hRic8KZyQ_eDwKiMS8w7UpbCZk4ghWo

Message-ID:

Subject: # Taxi/Cab Booking & UBER-like Geofencing App's..??

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000282a2d064c08e1aa"

Bcc: liambell963@digitalappsdev.com

X-Original-Sender: liambell831@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=FR1blY1g; arc=pass

(i=1); spf=pass (google.com: domain of liambell831@gmail.com designates

209.85.220.41 as permitted sender) smtp.mailfrom=liambell831@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

Precedence: list

Mailing-list: list liambell963@digitalappsdev.com; contact liambell963+owners@digitalappsdev.com

List-ID:

X-Spam-Checked-In-Group: liambell963@digitalappsdev.com

X-Google-Group-Id: 409416084642

List-Post: ,



List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hii, Good Morning! We offer Best Mobile App Development Solutions

in iOS, Android, Hybrid & Native Apps.



Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.200 listed in dnsbl.ahbl.org]

[209.85.208.200 listed in dnsbl.ahbl.org]

[209.85.208.200 listed in dnsbl.ahbl.org]

[209.85.208.200 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.200 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.200 listed in list.dnswl.org]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[liambell831(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.200 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} # Taxi/Cab Booking & UBER-like Geofencing App's..??



--000000000000282a2d064c08e1aa

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hii,



Good Morning!



We offer Best Mobile App Development Solutions in iOS, Android, Hybrid &

Native Apps.





We have expertise in:-

=E2=9C=AB UBER-like Geofencing Apps =E2=9C=AB Taxi=

/Cab Booking Apps

=E2=9C=AB Food Apps like Zomato =E2=9C=AB Tr=

avel Apps

=E2=9C=AB Restaurants / Hotel Apps =E2=9C=AB Re=

ntal Apps

=E2=9C=AB Appointment booking apps =E2=9C=AB GPS-b=

ased Apps

=E2=9C=AB App for booking/Delivery services =E2=9C=AB Cleani=

ng Apps

=E2=9C=AB App for health and wellness =E2=9C=AB Rea=

l Estate Apps



=E2=9C=AB Medical Apps =E2=9C=

=AB Logistics Apps

=E2=9C=AB E-commerce Apps =E2=9C=AB G=

rocery Apps

=E2=9C=AB Events Apps =E2=9C=

=AB Ridesharing

Apps

=E2=9C=AB Solar Panel Apps =E2=9C=

=AB Scheduling Apps

=E2=9C=AB Gaming Apps =E2=9C=

=AB E-learning Apps

=E2=9C=AB On-Demand Services Apps =E2=9C=AB Produ=

ct-based Apps

=E2=9C=AB Driver Apps =E2=9C=AB And many Mor=

e.



Kindly share your Mobile App requirements; short details of projects (like

what functionalities and features you want in your Mobile App) please share

your Contact number.



Thank You!!

Liambell



--000000000000282a2d064c08e1aa

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



PGRpdiBkaXI9Imx0ciI+PGZvbnQgZmFjZT0idmVyZGFuYSwgc2Fucy1zZXJpZiIgY29sb3I9IiMw

MDAwMDAiPkhpaSw8YnI+PGJyPkdvb2QgTW9ybmluZyE8YnI+PGJyPldlIG9mZmVyIEJlc3QgTW9i

aWxlIEFwcCBEZXZlbG9wbWVudCBTb2x1dGlvbnMgaW4gaU9TLCBBbmRyb2lkLCBIeWJyaWQgJmFt

cDsgTmF0aXZlIEFwcHMuPGJyPjxicj48Yj5XZSBoYXZlIGV4cGVydGlzZSBpbjotPGJyPjwvYj48

YnI+4pyrIFVCRVItbGlrZSBHZW9mZW5jaW5nIEFwcHMgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

wqAgwqAgwqAgwqAgwqDinKsgVGF4aS9DYWIgQm9va2luZyBBcHBzPGJyPuKcqyBGb29kIEFwcHMg

bGlrZSBab21hdG8gwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

wqDinKsgVHJhdmVsIEFwcHM8YnI+4pyrIFJlc3RhdXJhbnRzIC8gSG90ZWwgQXBwcyDCoCDCoCDC

oCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDinKsgUmVudGFsIEFwcHM8YnI+4pyr

IEFwcG9pbnRtZW50IGJvb2tpbmcgYXBwcyDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDC

oCDCoCDCoOKcqyBHUFMtYmFzZWQgQXBwczxicj7inKsgQXBwIGZvciBib29raW5nL0RlbGl2ZXJ5

IHNlcnZpY2VzIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKg4pyrIENsZWFuaW5nIEFwcHMgwqAgwqA8

YnI+4pyrIEFwcCBmb3IgaGVhbHRoIGFuZCB3ZWxsbmVzcyDCoCDCoCDCoCDCoCDCoCDCoCDCoCDC

oCDCoCDCoCDCoCDCoCDinKsgUmVhbCBFc3RhdGUgQXBwcyDCoCDCoCDCoCDCoCDCoDxicj7inKsg

TWVkaWNhbCBBcHBzIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKg

IMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKg4pyrIExvZ2lzdGljcyBBcHBzPGJyPuKcqyBFLWNvbW1l

cmNlIEFwcHMgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

wqAgwqAgwqAg4pyrIEdyb2NlcnkgQXBwczxicj7inKsgRXZlbnRzIEFwcHMgwqAgwqAgwqAgwqAg

wqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

4pyrIFJpZGVzaGFyaW5nIEFwcHM8YnI+4pyrIFNvbGFyIFBhbmVsIEFwcHMgwqAgwqAgwqAgwqAg

wqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg4pyrIFNjaGVk

dWxpbmcgQXBwczxicj7inKsgR2FtaW5nIEFwcHMgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

wqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqDinKsgRS1sZWFybmluZyBB

cHBzPGJyPuKcqyBPbi1EZW1hbmQgU2VydmljZXMgQXBwcyDCoCDCoCDCoCDCoCDCoCDCoCDCoCDC

oCDCoCDCoCDCoCDCoCDCoCDinKsgUHJvZHVjdC1iYXNlZCBBcHBzPGJyPjwvZm9udD48c3BhbiBz

dHlsZT0iY29sb3I6cmdiKDAsMCwwKTtmb250LWZhbWlseTp2ZXJkYW5hLHNhbnMtc2VyaWYiPuKc

qzwvc3Bhbj7CoERyaXZlciBBcHBzwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAg

wqAgwqAgwqAgwqDCoDxmb250IGZhY2U9InZlcmRhbmEsIHNhbnMtc2VyaWYiIGNvbG9yPSIjMDAw

MDAwIj7inKsgQW5kIG1hbnkgTW9yZS48YnI+PGJyPktpbmRseSBzaGFyZSB5b3VyIE1vYmlsZSBB

cHAgcmVxdWlyZW1lbnRzOyBzaG9ydCBkZXRhaWxzIG9mIHByb2plY3RzIChsaWtlIHdoYXQgZnVu

Y3Rpb25hbGl0aWVzIGFuZCBmZWF0dXJlcyB5b3Ugd2FudCBpbiB5b3VyIE1vYmlsZSBBcHApIHBs

ZWFzZSBzaGFyZSB5b3VyIENvbnRhY3QgbnVtYmVyLjxicj48YnI+VGhhbmsgWW91ISE8L2ZvbnQ+

PGRpdj48Zm9udCBmYWNlPSJ2ZXJkYW5hLCBzYW5zLXNlcmlmIiBjb2xvcj0iIzAwMDAwMCI+TGlh

bWJlbGw8L2ZvbnQ+PC9kaXY+PC9kaXY+DQo=

--000000000000282a2d064c08e1aa--

Web/SEO/App spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3yn-00000000B0G-3ZFc

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:10:37 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:10:37 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f200.google.com ([209.85.208.200]:60471)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx1Sx-00000000OMg-2eYT

for root@nk.ca;

Mon, 02 Mar 2026 04:29:46 -0700

Received: by mail-lj1-f200.google.com with SMTP id 38308e7fff4ca-389ebb088d5sf47838691fa.0

for ; Mon, 02 Mar 2026 03:28:47 -0800 (PST)

ARC-Seal: i=3; a=rsa-sha256; t=1772450921; cv=pass;

d=google.com; s=arc-20240605;

b=PJYQdRYbaOTJzlvQbM8RyuixtY1QBcVoUUVD/8XSyJ+Ely74KdpgcFwOKrQbcocLc7

BCYBfbKMXgPb2Xv0kXutYixKJzCrWYei3BkOyydcowtjrA8ntaH7EKsF4W8gnchh4BKZ

NdbVj/1ei4kJM1vIqaWfU1intXl4rDE8STZsWwcqFO9M68J5QoFrIS6ZF4VCpjHjjj6F

TIfKBskTjy4T7ciPDyP69UzPgYpDRvDshLjaV2kJn10rDVeJz5WlxRI3jVadOkXkxVdP

dfbDJ+1zAgorEeMww51vlKnZ7RBkn+RgzbyxVaNi8WDUbN27PI+V9iqTwyUW58KcIiEO

zxEA==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=BA71/URbw6+69g1rl7hbSIVfw//iHo8oeZ/tyMrYje8=;

fh=7DbYyfc72kfAqd2ioaevk8biHE7XA19HiLp6UU3gIPc=;

b=XjtPru1Z589+2VLVZA8Vi+8xwVNkawE4d+M67hQkH9lpoR6PqSTfgsDyRS5Jxoi/ir

pIVGG1EdLdsdfeJSLL76Ala8j81T4zf5uHLyKKhJ7cTwpdaYL+0sNfrS2ZCHhpdk98cA

CFLfO7ilC+6dHQRMSzejEr3DZw1/ltMsqTY/hJ8d2XE8vW9HXiMvR12afyqTLpTc5DI2

B7B6YdHUQmXQ8gA7GFE6NjF7RB//GYOwc5acI5VlEXVttoF4ufng2tiLK3m7LYe6Ain8

ZdFZvpzFZavLrWMkROVnMY5MSLf1l06I1wfzQ/jEFyHOz+JK1uzpSW3sYkHpEa4DXSX2

+wYA==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=FR1blY1g;

arc=pass (i=1);

spf=pass (google.com: domain of liambell831@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=liambell831@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=digitalappsdev-com.20230601.gappssmtp.com; s=20230601; t=1772450921; x=1773055721; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=BA71/URbw6+69g1rl7hbSIVfw//iHo8oeZ/tyMrYje8=;

b=DE/qEVBGE2b+dEwFdXXMt2CLtj0BLCvib3z12uHXwMIE/URcQ4Jup+yjx1oTs7BNPk

nqdMsShx+ZBVQFMkE3IGL1K2GkQaguCbLeVlpZOBvq4gJOkh6iArpyDT47jrTw3ecJvG

VxedovTbJlrVDiMse7jlzngSqnCB6AuAfk8435mQpbIYu/LRgr8tzmfTsma/YQSy71i1

qMgq6dMd/ASZyp3XnulLqm1hljNpwzWxpMi3sB9KXhD/Bk8B/5JJsbxHCiSweTQ1DSJ+

WDXGwW4XT2wk1zgP8MskU+wD2Cl30JFTqhj77VKGKHKt+CN6eGSZ5tBbRtfSssWUYzsx

P2fg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772450921; x=1773055721;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=BA71/URbw6+69g1rl7hbSIVfw//iHo8oeZ/tyMrYje8=;

b=TyIahoTv1LBuMfRBQ4E49aKUdxm+3K8YwJqTvbN0srPx1YbvrXLIIuSgrJOIHOvBlq

GaUyNR+1F/bBPJpMbU2BU1b1vsW6N1BZz8LvVdqilkWxJMadTN3QZr3zQ3pNPDudza78

mEv1BJF/76rvvdguM7ZVZaKYyw6oioukOgTDm6Z4z/b6ZAwp/tY56SdzAyjRpj2PfpUI

t9Kf9niCgcp0dJQZm107M7KTEeCACQ0lFHL5lxLfgthXJPuUjAMAlNdIXAF53L7hnnjs

zFyHQgHVplLFfwXL7s8JomSWLZLU/x4obAbmN/e61jCzoy2bvr5Nxgl8s649RUOkK0j7

oXQQ==

X-Forwarded-Encrypted: i=3; AJvYcCVoMV381Lv01HBJ2do6zBlDs3ZxcYV45mIPvqG3G5ubmnWIn4cYBsoe5OdF7qwUamnpeUko@nk.ca

X-Gm-Message-State: AOJu0Yz1utoSqx/mQI1twC5aXsEdhY56IdV26QUR6PC1wzPsZQnFXe5w

1UCkP+dUfBT8GC/lSHhmrDjNakZ4KlTYlaIYnGUlLUt/JymOjUWewT1EoRQRkbEwHEo=

X-Received: by 2002:a05:651c:1443:b0:38a:6f5:4b54 with SMTP id 38308e7fff4ca-38a06f54e3fmr59118671fa.4.1772450920283;

Mon, 02 Mar 2026 03:28:40 -0800 (PST)

X-BeenThere: liambell963@digitalappsdev.com; h="AV1CL+ExZP8Ceqcj/kF/21y75dL1K3TE0BDKg3Mz3j/jbTaW/Q=="

Received: by 2002:a05:651c:ca:b0:37b:9709:9756 with SMTP id

38308e7fff4ca-389e3a24300ls16828891fa.2.-pod-prod-09-eu; Mon, 02 Mar 2026

03:28:02 -0800 (PST)

X-Forwarded-Encrypted: i=3; AJvYcCVfXnhuVYr39mZOcZiGEzJ17czXR+O273O6u3E2MWQeIH5/X9dxQtsHIIVHsiUQIOO7noh8nHoBWGTh1Q==@digitalappsdev.com

X-Received: by 2002:a2e:8045:0:b0:389:fc6b:944e with SMTP id 38308e7fff4ca-389ff3637e9mr67603821fa.34.1772450882285;

Mon, 02 Mar 2026 03:28:02 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1772450882; cv=pass;

d=google.com; s=arc-20240605;

b=itjp8FMUIe30Qokwko474DPw3xsKKrlxKCXG5CxHxZ4HZc30dCaxr2h5QhcqdUgXBe

ZRcTQzC6hm5vL55KZ65tqq/cO6NVJc19fuZt66Yz2stALb7yqF9kupEkBtIuw1UBmlJb

nD/7Xz0JkdIXLCqbyE8M3lUJLWEfBbN9VEVW+dEgdqSHa0mn4JUlbgfBiJcC/wd9FO6i

yxCPNDhBMF6LwmBmc4HirMMeSfU5rlXMnFSYDYN7/9s2BYQH9zcutOcFebQpVt7G7hMI

g9ag29xs8sSBpeDVWOzoVDQY13nOpsJH0BySw/v1QfkH+N6VOjNFaGVA6Q1ApNNqDOfI

WUvw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=BA71/URbw6+69g1rl7hbSIVfw//iHo8oeZ/tyMrYje8=;

fh=pbFix2YRKmEmXEiO13VDFksQxysCQrB5Zf1IMm9qJFU=;

b=B9pN7CngqrCIQXBn18fq30FxNKbHIUT9GiLqXCTcH7SbLEkK3QIfHdYwApAfu5c8GB

7WkuQv67zkcKdLHjgMZLTUPjhW3tQ2ktAbfjTZEKl58HxLG8zes5rBirdoB9UpsMzAiW

tkYAEnihXVNNlPigeNVoe/qDu95rsaS7EZX48Hjjf6bkr0L+9RuCM6GAmFIta0GFi/hR

oSJw/HDkNvRYcOdiAhOum1NwPz4/GfgTOZnX43BnXNSsmCka74UoMMZUc2//JPN1/9Jf

TT1/lAWoGw1p11XWc9pNNTpcq+1md34Y0vLNf62fcq//fRM2Eg/a0veyAK/eWwp4SkMo

tc5w==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=FR1blY1g;

arc=pass (i=1);

spf=pass (google.com: domain of liambell831@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=liambell831@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 38308e7fff4ca-389f2fcd9c1sor19909961fa.20.2026.03.02.03.28.02

for

(Google Transport Security);

Mon, 02 Mar 2026 03:28:02 -0800 (PST)

Received-SPF: pass (google.com: domain of liambell831@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1772450882; cv=none;

d=google.com; s=arc-20240605;

b=ZHCgbYs7xEhNqZVxQAem46ZuHd60sC+JXxqbgCqYLl1jkUQ7ciD7YTqTFW4WAH8wwX

lZr0fHyJlVgLpEuL0caRg6/sfF+Le9GUGRPSafrIZKjFX5jN+ZJ/N3X7ZQJzwWJzLiOj

8poju8oetxWS0KrzEyE/ni97ChHk0GmEhdXnjvP3BluBlHIWgc7Ffqmk6xSbhltnD2i8

msYloXQZ2Kq2cPhdmX/nfgPxgtbn+Qfa6hsQLyVHHEpesGFHb4vQWnb6mkfF0TXO1ov2

Y95cp4yO7qHXnPJO161sXe/RwgCwmkjdjKq2d/uEeb4D9FrPZJuUr6DDhurfOSUy5z+o

+CAQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=BA71/URbw6+69g1rl7hbSIVfw//iHo8oeZ/tyMrYje8=;

fh=pbFix2YRKmEmXEiO13VDFksQxysCQrB5Zf1IMm9qJFU=;

b=f/PDBDZxQf85E26yMfzezYGaaPE1chfql4anLzDSx8L47U6QGP6WiYlMOm/jjcSAh4

FHRhj2RzEPruSyOSmlWTzpuqAJvhocceYBll4y3Y9W1Ic80G2lnIWY78q5HrsTWU8yXq

A3QFHOUTuB7q4Dd9+zuPy0THKH4WJdSqH2VKZqMwDyeMAPSI8/sWColNFu4Ecydrg1Wr

MwhcKordatCSR3i/df8ZhEvkENJB0eEEh2I5S7MHdqlViFdPthjBDN+ofsJ5TU73d5Xk

jwXgh5wl91cjVgPjamMWZJHqWFxs5B78b6GmFxGPvyC2rwGbagq6o3i8EpD/FgeJH1Ff

F8Rg==;

darn=digitalappsdev.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Forwarded-Encrypted: i=1; AJvYcCUjdWruQcubIVpuIYv3mDicS9vZ61m3SotD7ckuX8XMN8HTFKZC2rbP//49UTfl8cGz8fnv0G1UNcbdEw==@digitalappsdev.com

X-Gm-Gg: ATEYQzyBB7R7M0zQecZKCjpC1dgswwURm0ct5ZaytUhYNmeNh2OgJYYEPmfU3BiQJrN

y0eq+/5zqhg3+c8dloq7DGm5NGq3K2X6kzhdlkLHPBM0rldNLLb6WuSBWPiEmBzdGtFbwhkR3sY

5xQUngt30GbDolNZa+ogmAMGEkl8eorGI/bT1Xae82zGeoO38Bq5VioVkN6JpgVHSCqlCHC+/Bs

OnJgpS372F0s8vunL5gdheIcVtYXX8f9niGDs5Lxnh0zzYWDidIlhSJQTEXAwqSB8LFNXeupiZe

94PpF4VdANwzrFk5tQIQzVj+r6lQa1CA6Bfhew==

X-Received: by 2002:a05:651c:40cf:b0:389:fe5d:567a with SMTP id

38308e7fff4ca-389ff13fce9mr56482071fa.17.1772450881217; Mon, 02 Mar 2026

03:28:01 -0800 (PST)

MIME-Version: 1.0

From: Liambell

Web/SEO/App spam from Microsoft Outlook Part 2

Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

[52.103.43.75 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.75 listed in dnsbl.ahbl.org]

[52.103.43.75 listed in dnsbl.ahbl.org]

[52.103.43.75 listed in dnsbl.ahbl.org]

[52.103.43.75 listed in dnsbl.ahbl.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:21d:0:0:0:12 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.75 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.75 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.75 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.75 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.75 listed in sa-trusted.bondedsender.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ranugupta3142(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ranugupta3142(at)hotmail.com]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.75 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.75 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.75 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.43.75 listed in bl.score.senderscore.com]

Subject: {SPAM?} Re: Quick SEO Question



--_000_SEZPR01MB6078B000BCB6C34D428FDD24B47EASEZPR01MB6078apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



Top Rank in GOOGLE,



You can get your website on the 1st page of GOOGLE.



So, if you are interested, I will send you a price list.



This Service is available at an affordable Price.



Regards,



Rani Gupta





--_000_SEZPR01MB6078B000BCB6C34D428FDD24B47EASEZPR01MB6078apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0);">Hi,




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0); font-weight: 700;">Top Rank in GOOGLE,




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0);">You can get your website on the


e: 11pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 0); font-weig=

ht: 700;">1st page of GOOGLE.




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0);">So, if you are interested, I will send you a price =

list.




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0); background-color: rgb(192, 192, 192); font-weight: 7=

00;">This Service is available at an affordable Price.




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0);">Regards,




tom: 12pt;" class=3D"elementToProof">


; color: rgb(0, 0, 0);">Rani Gupta




Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_SEZPR01MB6078B000BCB6C34D428FDD24B47EASEZPR01MB6078apcp_--

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3yS-00000000Azi-20pL

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:10:16 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:10:16 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013075.outbound.protection.outlook.com ([52.103.43.75]:52828 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx1I5-00000000NPH-3Qyp

for root@nk.ca;

Mon, 02 Mar 2026 04:18:32 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=MIZ2V5Z+z6my5/PGjLR+brxn/0W3tHM67hfLiEUw9KeaqiDFzwCuVCU7Y/mKLOiuijdvRkiNinKiE8xiM6ZgQNdWLQL2B+oK0oiPTbFXDUcLJWOlCk8qrCin4AOZq/zggGefgC38kyh4Qyke/uDw/m9hLaJZGMTN4UcMsl+66KSTATe79mwNPaPUaWPQ376a4iDpAfwdy8DlU6dzpmabrnhPTHREnJM90Me3kMWv2CazZKgpuzTDLD5el2txz8VMZSjGZK1/LG/Yx2SJn0a9xhz8Wm7zk+8rsI0gS4xrguu4TZ12DlUv/7TCDmA6dV0xSwtAaLemmaPX2uHPEqAfcg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fSoQG8o7s1vvZ90ly8NUGCcEYwZ2sMTtg+/Y43oWBrk=;

b=M2qKTCbuF46cg2RzY5MBtNkX/BFDzNGKiQ91TTFlVaXyFySlHBoU51V4j1jcOOFcNmrETJTwcwrdhNe4ICOb1YRWLV105QgfsQLuFRHg3L/UZ0R0//4XJ4gJ2F7LqyAe7j8b4CwP+f8USXPOxhr+vSQ8lYTVk8gEYJbuLfJoDnivKAWe+qLvZD6TO76d/HnOgo1lWTLgKMTtiEoAcBl4hCAFlbVTq+xgVej4be+jDkGDEFud2KC5Iakzd0mPd4ZHrfeE9dgPmhzNaLpfX8qI31bpo+OKoAcTzE0LM9jC9R17oA0LQvtqg3lLPkrKjToufCMhbw5TVIQd2iU+7mahaA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=fSoQG8o7s1vvZ90ly8NUGCcEYwZ2sMTtg+/Y43oWBrk=;

b=YhZzRdVXOD02KM3z7H8nQKD9pS19QKxa+6p4C64vXXeoL5jCNr4rygGg7nu6fCtYvcavjhSwm+3WL4bgioTo3uy6XA0BpY05gI8TRBp/HTUdNSuCyiTpwhoJL0je6bO80Brf6NOp5DcOVfkAtSK9+K4av2KqqwA1kB11Pxcwhs48CR+DUFUaMrh9Bib3zhTT0XP1rCU59tnfIoYSlpSrd3+sKVa28Tjub7FUXgcf1E9y6xY/faz4qJV64wqr7QLEtL8EzVjo+rTlx+YbN3T37kIVyRgO/XCewaAR/2uGhWa0gAncNjEtWLSGG7tRN6yItudGi2/3/fol34AgzV5AEQ==

Received: from SEZPR01MB6078.apcprd01.prod.exchangelabs.com

(2603:1096:101:21d::12) by KL1PR01MB4742.apcprd01.prod.exchangelabs.com

(2603:1096:820:be::9) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.20; Mon, 2 Mar

2026 11:17:03 +0000

Received: from SEZPR01MB6078.apcprd01.prod.exchangelabs.com

([fe80::695b:1fcb:92c7:b08e]) by SEZPR01MB6078.apcprd01.prod.exchangelabs.com

([fe80::695b:1fcb:92c7:b08e%4]) with mapi id 15.20.9654.015; Mon, 2 Mar 2026

11:17:03 +0000

From: Rani Guptaa

Subject: Re: Quick SEO Question

Thread-Topic: Quick SEO Question

Thread-Index: AQHcqjPizhZMBdLy10iC6uPMw0Ix2w==

Date: Mon, 2 Mar 2026 11:17:03 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR01MB6078:EE_|KL1PR01MB4742:EE_

x-ms-office365-filtering-correlation-id: 176c34b0-a2f2-4138-88ed-08de784d3b0b

x-ms-exchange-slblob-mailprops:

VTa9p188PRMAZ2nTFE5GE8mes4GaiFflzYJhUirvyB4DENHn5CzQXEMozsEHv9BCfQX5T4X98dlqBfuWdCtwNll3CF4H6Ue3Dv29bTzoNgvWBVLZDEiGIqvfkwRwJh49Tbgm/8t7O7oDP1vqQRbUHtelqCFvHtvtQaJIrFO/UFCrpMaDIu4/ykXlmji7JNOZ3a009UH5e54SHQtQ5RMVfzj0NEZXMEx25WCCZg+yeGKWlUnEtYJgFO+HjHo5gQkATdL26eL0wuf5OLSDzHgb93RLLTa3v1BO+yDDuOZ84I851zL+I51qxMIMZRJvMCgnl85sPIhSwcKgGaIxyQYp/ViY3L3Gz8w/arcQpypbb7jPThy8lclyz8zIiuRkE+6o9YyV19QtE5IXtrHiuNnUFsbg7qBygxuy8wd+cyD1E7SLrXi2gzJnlgI2UYRKkFjv67gpPviOx1Yt1r0H3cIoXZ9H8JVw6QWllhq+TxEYb0ZtN57Eby/vIybJvYOoKNBdZGacoNEmRBjVsA65ri2DzYMxL3iYB28kChPF3VtcvTjL6Fd9XAnsGbUnXkWcmr9fpTJnzVurRK+P38xNiuYYoD0ulFSNGDcaYjH6r+CZXqEij95iDUqMGTs6pl4AKQaE

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|8060799015|8062599012|15030799006|15080799012|31061999003|461199028|20031999003|39105399006|440099028|3412199025|26104999006|102099032|51015399003|40105399003|39145399003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?uZ5Mhv6bBg810SP27XH02kGn5qwTH3KzZZS5JobYS8MnjA6zRR2oGlkrBn?=

=?iso-8859-1?Q?7JM5w3PBhBbX8/gkIzCjBT5rShYAZK1b+xQw1ARjZXzkM/Wbi3cdggDG2q?=

=?iso-8859-1?Q?LlF9KiTbM9Bvd04JNU8ArI++cOlA0mJWsn2vJcBNcEQOviMVsuF4HMb4CC?=

=?iso-8859-1?Q?G0kZElijGBjqIBGqveXlUPfsLebqekD0enhmnFznBxCo/iko81TSLzA69f?=

=?iso-8859-1?Q?eG1e7Bm9tU2BvU+h6h7rgjasmBOObl47nRWnm129DLQzYkr4oo4RbfrFsD?=

=?iso-8859-1?Q?+cW19J6BGWqosQbcWLWVS+3RrrCyrRD7m1DR36OSzI1GyANyMohc5zDpXP?=

=?iso-8859-1?Q?4AUrOm15m/nSWQHsazRj5qDhg0nb1R4vD3ji1bMFVa/1JvnOnPhaVL68/w?=

=?iso-8859-1?Q?O/s1AVoMhM24CyjFXuI+BxN21Y59MYckvo4Ggq2JfuqNOILzVb/owMnvMj?=

=?iso-8859-1?Q?nKPZngxa72f97m0rgsADxVnCj/zhzOS4OV/aX0m4dglVjiSDJM6NslKbYq?=

=?iso-8859-1?Q?RSbqNuN6wg21rStJ+UHMWs1Icnh2fMbERfHcGawtyFhRTBb36HF+Gv3kJV?=

=?iso-8859-1?Q?Wn2AG4nbsp7FEUOJzSzePOQ2RtLgcJ2uzl/EOnewweCAxvRcN437IZaJw6?=

=?iso-8859-1?Q?KuRD1V6VKlWJKy5+yxAVDC75bRkq2ksHk34tzcX+aG83T1FuD/+896+o2M?=

=?iso-8859-1?Q?z9pImhuNP2sPtAlrVbsDrVLq+1qVm7NjTGBXV4WW0V88Ff4wn3FNF5cHaF?=

=?iso-8859-1?Q?VXm7ZwXp1wLHC4E60XgKJBGa9YWDgp12Yuo0cV9c73sxMsHDnYQ5Iqk7Qk?=

=?iso-8859-1?Q?PDUUFwsfaHFMkwba+FYJNxClWc15c9hIHEz4u2MIiEwdm61lvr5Hb40HWB?=

=?iso-8859-1?Q?9dC7OOBKPZatNGoreTeh+mRG7jDrtWoyRo1SI7ktN5LOiHHRnfL0Oexhmp?=

=?iso-8859-1?Q?0ByNP4vA/cpNM2UcFa4xhWlJWYDpSboz5HpOSte3wbbV15a7vYRkpLkXnp?=

=?iso-8859-1?Q?8SFiS/6Mlrw6BgJvs+zxiC6LI8JpnfDBbJB6wIuM3xPFyPEjIGSLWhDVOc?=

=?iso-8859-1?Q?NjKhZlRA+zSkVt3tkCsyF00dXeJ5FbYNJt1dgXew1z1j?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?XUEW98IJk+DrGUUhHRQkskppzY9pPM+CMLtsaZerdl6R5FbG+jbIiRVqaG?=

=?iso-8859-1?Q?rxln2pZY1g+gyxLp7PVgmKQw4pjPVt+aOxGhBMGUvkgIfEBGAkcefcsRrh?=

=?iso-8859-1?Q?VQt8Dr/jGcJxEHRjs43vS2HbUdwwV6etGOvrJDpHFfGsrGRxt6zNpgt/Pz?=

=?iso-8859-1?Q?uCFCDVM5JFgP+L18ylDcvra0FZqooLcf2F4TzVcW1wJDO0Zt2fi6TjnJ21?=

=?iso-8859-1?Q?aS8w1MxO7xgHz5fpCcdZdOcjXZ+90NG3JLeYcSd0pD3nSECyK2jsKgK3yc?=

=?iso-8859-1?Q?xrZSImAyIB5Crzqwkd796hEAh12n1abqueR9T685pht8Mt//MaONefgrRF?=

=?iso-8859-1?Q?/GayPPi2mztA59fhWQ8NqhjXQJtLRgmjzfuhbMW2UcVhmNkjFi7K/B52+C?=

=?iso-8859-1?Q?/gKtyASRbGPXMRL5RH3HZyPZ4W5vO08EdQaRbLVQaA2AHhV0XUTVnT5DX4?=

=?iso-8859-1?Q?YRDZ+bktRzdlVdB9z9TzaIKwdfCxzDdFeKQJD+NS9e5VE2tM1aIP5WMuiL?=

=?iso-8859-1?Q?VRlSqTxM+6OfC0/H9YrrV4XBDxf4AzUzI/pajbhHSjdlvQ88BGjKfKjo3j?=

=?iso-8859-1?Q?MJVfrZZaX2lcSMi6kNwvo/M/Q+wQUe0SzoaAon6PkKC4LHRQXDE9S1i0TH?=

=?iso-8859-1?Q?OwblPvmtQXmVhglrISwBAgtVpfK/ECQZmR0ytLVOHpoaq7vWNPrYpy/Tm2?=

=?iso-8859-1?Q?1CP3HfM4C0i1wU4lz9Egmzf8K6UNP+5CbUQgToIbBPa5pZ+FmQ5orlkPhV?=

=?iso-8859-1?Q?1kDG40I+RhTdECsxAhoXdeaR+hZQjtwbXuZeNMSyvppcBFHzvKy5UqCoFJ?=

=?iso-8859-1?Q?EwgFXxUtg9obxjtWvGnVIHZZVtA31zAutgvzjK7YAolmkdTwPwnmIrwfKp?=

=?iso-8859-1?Q?qVORADH7ofIDp72HNa0WQrCX/nHpkXnrnWHFJeAG+/PyGD+MVc9v8lxEFh?=

=?iso-8859-1?Q?v5BP2Sc9zVY4+cUQ8wpvNV0jeB4JK4yzlBjvJboZc1JwNwKNC4olOGGALk?=

=?iso-8859-1?Q?PunUGvXWJYQTZq+934FZd6capydJX0Xm+X+b1zo8BYBJR5ExhVaemHygSA?=

=?iso-8859-1?Q?Dr5TbCD6o3bsX/+sCBu1z3nC0SIh0dnLufaj4DuI0sZTwsi6gBqEqpE80a?=

=?iso-8859-1?Q?qbo+0TPzz0atSWlz8c++Z8ctS7/5EXZqDZ5gEu3/7LUhu6D6Th/q/pGBrb?=

=?iso-8859-1?Q?po2KQbHRqIZlI4BISakmrBoCcH568WkmggkHcb64vQLHadhtwt6tt3Gl2u?=

=?iso-8859-1?Q?Vl63ag9jzsh5fMU7S3FPnWbFg50b+JPPRHebIMtVoBJziS5YV71InJgFfi?=

=?iso-8859-1?Q?mPR24kwI5f1G8BRvjn6gpJrovuc5+2tsrwGRJXo1TpwjXliwZA7S3cXMBU?=

=?iso-8859-1?Q?mZnw/RHfVZPOICRkTIrBGHCSngf+0PxYlG46gYwFKuTwn1AaLfLBMwxtCF?=

=?iso-8859-1?Q?8B5peafiXjKY2Hu5kbu48CEXRNyTOicVioE/qIESj0slt9J1w4wvU9KNH7?=

=?iso-8859-1?Q?wmMr1teYTEd8XoxIP0IPz/?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR01MB6078B000BCB6C34D428FDD24B47EASEZPR01MB6078apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-3e488.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB6078.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 176c34b0-a2f2-4138-88ed-08de784d3b0b

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Mar 2026 11:17:03.1531

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR01MB4742

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Top Rank in GOOGLE, You can get your website on the 1st

page of GOOGLE.

Web/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3yK-00000000AzU-1L3B

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:10:08 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:10:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f198.google.com ([209.85.160.198]:60507)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx0ff-00000000LE5-2GS8

for sales@nk.ca;

Mon, 02 Mar 2026 03:38:47 -0700

Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-5061d1ef1f3so540946181cf.0

for ; Mon, 02 Mar 2026 02:37:52 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webandappdevelopments-com.20230601.gappssmtp.com; s=20230601; t=1772447866; x=1773052666; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=/F4UX5xNmMj4KfvBMq51T67pfZsMUZ0FDXa+885pisM=;

b=uCiLq7pOHFA1wI2Sj57+jEiZ/hhF6whpJKKnFz9C2hg7GDf5foIHmovCNVmXfSVGJH

UyM7nu+nUkPebBnfXf8EzKhCFeUd5uvN+J59xTreVljUTd9IMZP09o6R7IfrBAOWPCen

8fNSXs9FwQ7FunLznwVK4h1u2c+1M/KKOTXqE8/DX63OVheZ8xDzFSfykS437w765D7f

dmomZ/Ss/wU/uhTrB8+Ksimiac1vIyUvlYwcVLNTocetHD+aS+9rbv57++jtHUaM6hUF

JRWxzsFwS0/wjhu5b2SOg8y0mCLlb95XszkOxfhW9xgx/mBjgdZenEI22g9mc/JpKzdx

8Yjg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772447866; x=1773052666;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=/F4UX5xNmMj4KfvBMq51T67pfZsMUZ0FDXa+885pisM=;

b=evTpxMcmsInOJbdv9mcZocSnB/MY1F4CSVFsfM1IzREM/xf28tTFZRHMx4HdrcRo5B

nDPnDhkc2YjyLl1jPR1DCjLE4FCC2MTMdv7/06XuPbyeVLqUOJ59UswpRdkny+Y8XhLw

5YoM+8+umPoAdvTq1PpxfYP5B7TKUa17lMNzxlOVbtWFyzO6KvrOiG8Kab7Q7IGcgtXY

UbwFqnsUa1P/4Fw+8V77xFjjEgSjSEPr1t0uOPs30Zh19NMOc5Gq6NWivHTx5gv5SZZ+

Rtd+gqyCkYEtYz02ZmLnQ4gvYb6DXF/EjV8P4wBrdZHjtuHvnn97zDX+zOfoYMMd5/lq

rGkw==

X-Gm-Message-State: AOJu0YxfBAIhYqVW7iv9/Q9ezJtRpgNIWNbL9aVLhyUPmgiKUsMNJln0

+advmsk6OSb3Mof+/vOY4hKM0llCldGa0KEJ2YYGbiq/7zqjTSGkWhCqMIOVDQ5DMjxrkzs60BV

s9U/uYgaVbZYLKUFF30DxyA==

MIME-Version: 1.0

X-Received: by 2002:a05:622a:c9:b0:4f1:ba52:2529 with SMTP id

d75a77b69052e-507527cb25bmr142527271cf.2.1772447865984; Mon, 02 Mar 2026

02:37:45 -0800 (PST)

Message-ID:

Date: Mon, 02 Mar 2026 10:37:45 +0000

Subject: Re: www.nk.ca

From: georgia@webandappdevelopments.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000006f64b8064c082d5e"

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Are you considering a website www.nk.ca redesign but worried

about the costs? We have a solution for you! I am searching online and found

your email sales@nk.ca and saw you have a website but your website www.nk.ca

could use a boost to improve how it looks visually in order to make it look

like the more u [...]



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.198 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.198 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Re: www.nk.ca



--0000000000006f64b8064c082d5e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,



Are you considering a website www.nk.ca redesign but worried about the

costs? We have a solution for you!



I am searching online and found your email sales@nk.ca and saw you have a

website but your website www.nk.ca could use a boost to improve how it

looks visually in order to make it look like the more up-to-date and modern

sites.



I am a web designer and I can help you if you'd like to add graphics,

logos, calls to action, additional buttons, etc. at a very low cost. Those

features really help to sell.



If you're interested, I can also provide information on our website

promotion packages and explain how they can benefit your business. Or Could

we set up a meeting? How about tomorrow at 10 to 12 AM?



May I send you a Website Sample & Prices ?



Thanks & Regards,

Georgia Staton



We are waiting for your reply, whether you are interested or not. Please do

reply to this email, even if it's just to let us know your decision, so

that we don't send you any further emails unnecessarily.



--0000000000006f64b8064c082d5e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

Are you considering a website www.nk.ca redesign but worried abo=

ut the costs? We have a solution for you!

I am searching online and =

found your email sales@nk.ca and saw you have a website but your website ww=

w.nk.ca could use a boost to improve how it looks visually in order to make=

it look like the more up-to-date and modern sites.

I am a web desig=

ner and I can help you if you=E2=80=99d like to add graphics, logos, calls =

to action, additional buttons, etc. at a very low cost. Those features real=

ly help to sell.

If you're interested, I can also provide informatio=

n on our website promotion packages and explain how they can benefit your b=

usiness. Or Could we set up a meeting? How about tomorrow at 10 to 12 AM?
r>
May I send you a Website Sample & Prices ?

Thanks & Regards,
r>Georgia Staton

We are waiting for your reply, whether you are inte=

rested or not. Please do reply to this email, even if it's just to let us k=

now your decision, so that we don't send you any further emails unnecessari=

ly.

--0000000000006f64b8064c082d5e--

Web/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3yE-00000000AzP-3QvM

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:10:02 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:10:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f199.google.com ([209.85.222.199]:53347)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx0ZG-00000000KsE-3lY3

for root@nk.ca;

Mon, 02 Mar 2026 03:32:11 -0700

Received: by mail-qk1-f199.google.com with SMTP id af79cd13be357-8c882774f0dso3287315985a.2

for ; Mon, 02 Mar 2026 02:31:14 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webandappdevelopments-com.20230601.gappssmtp.com; s=20230601; t=1772447468; x=1773052268; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=MqirowAg9D9AgNMIobkJj0ued12igV76UTIzlNXpkYQ=;

b=tfL3pwX3WmBNguUyrfU6Uu6I+C8EbbU2+hv/CVKZMvFuLE2NeP1YuTS0MjpOwbrYXu

3JeotyYDp+iHHpBydU/EePhv+7+9zHYVMFDrqyGnRQHOZrzHLihdf6HCYhGoQCjNsxam

pFiatW/rOqeKsOZtVHiDRvQMoKrnGH9JV5yaspp7XAOe+Na64h3Oj7NQaPYhIWv1ylQq

ZUGjoO5pFVp0yIUfUuvDE3j8AggQvRw0IGS/hwHwpX7uUWpEprQukTPKhO12kUWlcSYI

Ah0osKWCiK+yXNAlbTDz9rtPwFqlsRpiMaPCLkaXoKqX+TNmeTjEufKv2FCMG/GwohXI

p1gQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772447468; x=1773052268;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=MqirowAg9D9AgNMIobkJj0ued12igV76UTIzlNXpkYQ=;

b=TQEybk/5aDdEHK6NkJYJ4Ey7wZmce5UU8xCj+ChMT3A2zuegFOYn24AwnqlJ35lCy7

vqzqCb9N7GS0jyFjEHo2s7qNnbfbqZIFJyJyAWqQaLeL4VVCgzJXRSoWP0A7HClj36dT

1HIE6cLbK4bB3JrzTHYWhSV5+CiWJkuPWHIUxvH/1JTPTnWN9bD0toqKOyBxI1OWpqiH

8NcwrhvngbOlYzThm5xvdiWFwdMwMCurwOJOD/dUGdFuqySIPhJBIiO/4K1zczIprepi

vcJTwddh5h+W5YMqyNYJ9CeSB5PeZPcPHeGO4eqUB/ExDhGA7COgBEW4wMzpJPzEKEgm

GgXA==

X-Gm-Message-State: AOJu0YyhFZw07fwvoM3ahPJxIG/GZKq90u4m/R/ESTbqdKW1vN9U9+jZ

BWnRj5CLumDdd1WQALn0DTTUoNmcy68p6ihiiW3+4dVsE9gPc8c/8XNOHUU0fkEz0KFZ/qzcv87

iDUQwZLA/5ZpFnH1t7lnuhg==

MIME-Version: 1.0

X-Received: by 2002:a05:620a:28c5:b0:8cb:68ed:cc28 with SMTP id

af79cd13be357-8cbc8d733ebmr1360982385a.11.1772447468312; Mon, 02 Mar 2026

02:31:08 -0800 (PST)

Message-ID:

Date: Mon, 02 Mar 2026 10:31:08 +0000

Subject: Re: www.nk.ca

From: georgia@webandappdevelopments.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000bb6a74064c08157b"

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Are you considering a website www.nk.ca redesign but worried

about the costs? We have a solution for you! I am searching online and found

your email root@nk.ca and saw you have a website but your website www.nk.ca

could use a boost to improve how it looks visually in order to make it look

like the more up [...]



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.199 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.222.199 listed in sa-trusted.bondedsender.org]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.222.199 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.199 listed in wl.mailspike.net]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.222.199 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.199 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: www.nk.ca



--000000000000bb6a74064c08157b

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,



Are you considering a website www.nk.ca redesign but worried about the

costs? We have a solution for you!



I am searching online and found your email root@nk.ca and saw you have a

website but your website www.nk.ca could use a boost to improve how it

looks visually in order to make it look like the more up-to-date and modern

sites.



I am a web designer and I can help you if you'd like to add graphics,

logos, calls to action, additional buttons, etc. at a very low cost. Those

features really help to sell.



If you're interested, I can also provide information on our website

promotion packages and explain how they can benefit your business. Or Could

we set up a meeting? How about tomorrow at 10 to 12 AM?



May I send you a Website Sample & Prices ?



Thanks & Regards,

Georgia Staton



We are waiting for your reply, whether you are interested or not. Please do

reply to this email, even if it's just to let us know your decision, so

that we don't send you any further emails unnecessarily.



--000000000000bb6a74064c08157b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

Are you considering a website www.nk.ca redesign but worried abo=

ut the costs? We have a solution for you!

I am searching online and =

found your email root@nk.ca and saw you have a website but your website www=

.nk.ca could use a boost to improve how it looks visually in order to make =

it look like the more up-to-date and modern sites.

I am a web design=

er and I can help you if you=E2=80=99d like to add graphics, logos, calls t=

o action, additional buttons, etc. at a very low cost. Those features reall=

y help to sell.

If you're interested, I can also provide information=

on our website promotion packages and explain how they can benefit your bu=

siness. Or Could we set up a meeting? How about tomorrow at 10 to 12 AM?
>
May I send you a Website Sample & Prices ?

Thanks & Regards,
>Georgia Staton

We are waiting for your reply, whether you are inter=

ested or not. Please do reply to this email, even if it's just to let us kn=

ow your decision, so that we don't send you any further emails unnecessaril=

y.

--000000000000bb6a74064c08157b--

French cabinet making phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:09:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3wz-000000009QZ-0CK3

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:08:45 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:08:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.83.240.131] (port=46902 helo=karaca.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwzmZ-00000000HqQ-0orS

for doctor@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 02:41:51 -0700

Received: by karaca.com (Postfix, from userid 33)

id 60F34FF2F9; Mon, 2 Mar 2026 09:40:34 +0000 (UTC)

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?Q?Accus=C3=A9_de_r=C3=A9ception?=

Date: Mon, 2 Mar 2026 10:39:10 +0100

From: Cabinet LEGRAND & ASSOCIES

Reply-To: noreplycontact473@gmail.com

Message-ID: <98c562d341f028a32c183360dfda71dc@notaires-france.fr>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1785048028cdd0ced86738fd688f87c32"

Content-Transfer-Encoding: 8bit

X-Spam_score: 14.8

X-Spam_score_int: 148

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Cabinet LEGRAND & ASSOCIES Bonjour, Le Cabinet LEGRAND

& ASSOCIES vous a transmis des documents sécurisés concernant

votre dossier.



Content analysis details: (14.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: pneuf.cfd]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[noreplycontact473(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.6 J_CHICKENPOX_52 BODY: 5alpha-pock-2alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

Subject: {SPAM?} =?UTF-8?Q?Accus=C3=A9_de_r=C3=A9ception?=



This is a multi-part message in MIME format.



--1785048028cdd0ced86738fd688f87c32

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit











Cabinet LEGRAND & ASSOCIES







Bonjour,

Le Cabinet LEGRAND & ASSOCIES vous a transmis des documents sécurisés concernant votre dossier.



Ces documents sont disponibles sur notre plateforme sécurisée.

Accéder aux documents

Pour faciliter nos échanges, nous utilisons désormais la transmission électronique pour ces documents, sauf indication contraire de votre part.

Cordialement,L'équipe du Cabinet LEGRAND & ASSOCIES

Note importante : Ces documents seront accessibles jusqu'au 02/03/2026.







Ce message vous a été envoyé via la plateforme de gestion documentaire sécurisée utilisée par notre cabinet.

Vous recevez cet email car vous êtes en relation professionnelle avec le Cabinet LEGRAND & ASSOCIES. Conformément à la réglementation, vous pouvez à tout moment modifier vos préférences de réception.





--1785048028cdd0ced86738fd688f87c32

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Cabinet LEGRAND & ASSOCIES




Bonjour,



Le Cabinet LEGRAND & ASSOCIES vous a transmis des documents sécurisés concernant votre dossier.





Ces documents sont disponibles sur notre plateforme sécurisée.





Pour faciliter nos échanges, nous utilisons désormais la transmission électronique pour ces documents, sauf indication contraire de votre part.



Cordialement,
L'équipe du Cabinet LEGRAND & ASSOCIES



Note importante : Ces documents seront accessibles jusqu'au 02/03/2026.





Ce message vous a été envoyé via la plateforme de gestion documentaire sécurisée utilisée par notre cabinet.



Vous recevez cet email car vous êtes en relation professionnelle avec le Cabinet LEGRAND & ASSOCIES. Conformément à la réglementation, vous pouvez à tout moment modifier vos préférences de réception.









--1785048028cdd0ced86738fd688f87c32--



French cabinet making phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 07:09:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vx3wv-000000008i4-0TmS

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 07:08:41 -0700

Resent-From: The Doctor

Resent-Date: Mon, 2 Mar 2026 07:08:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.83.240.131] (port=46928 helo=karaca.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwzmZ-00000000HqS-0ola

for sales@nk.ca;

Mon, 02 Mar 2026 02:41:54 -0700

Received: by karaca.com (Postfix, from userid 33)

id 761F1FF641; Mon, 2 Mar 2026 09:40:34 +0000 (UTC)

To: sales@nk.ca

Subject: =?UTF-8?Q?Accus=C3=A9_de_r=C3=A9ception?=

Date: Mon, 2 Mar 2026 10:39:10 +0100

From: Cabinet LEGRAND & ASSOCIES

Reply-To: noreplycontact473@gmail.com

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1dd402f0db64d438a08b85598c086fd05"

Content-Transfer-Encoding: 8bit

X-Spam_score: 14.8

X-Spam_score_int: 148

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Cabinet LEGRAND & ASSOCIES Bonjour, Le Cabinet LEGRAND

& ASSOCIES vous a transmis des documents sécurisés concernant

votre dossier.



Content analysis details: (14.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: pneuf.cfd]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[noreplycontact473(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.6 J_CHICKENPOX_52 BODY: 5alpha-pock-2alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} =?UTF-8?Q?Accus=C3=A9_de_r=C3=A9ception?=



This is a multi-part message in MIME format.



--1dd402f0db64d438a08b85598c086fd05

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit











Cabinet LEGRAND & ASSOCIES







Bonjour,

Le Cabinet LEGRAND & ASSOCIES vous a transmis des documents sécurisés concernant votre dossier.



Ces documents sont disponibles sur notre plateforme sécurisée.

Accéder aux documents

Pour faciliter nos échanges, nous utilisons désormais la transmission électronique pour ces documents, sauf indication contraire de votre part.

Cordialement,L'équipe du Cabinet LEGRAND & ASSOCIES

Note importante : Ces documents seront accessibles jusqu'au 02/03/2026.







Ce message vous a été envoyé via la plateforme de gestion documentaire sécurisée utilisée par notre cabinet.

Vous recevez cet email car vous êtes en relation professionnelle avec le Cabinet LEGRAND & ASSOCIES. Conformément à la réglementation, vous pouvez à tout moment modifier vos préférences de réception.





--1dd402f0db64d438a08b85598c086fd05

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Cabinet LEGRAND & ASSOCIES




Bonjour,



Le Cabinet LEGRAND & ASSOCIES vous a transmis des documents sécurisés concernant votre dossier.





Ces documents sont disponibles sur notre plateforme sécurisée.





Pour faciliter nos échanges, nous utilisons désormais la transmission électronique pour ces documents, sauf indication contraire de votre part.



Cordialement,
L'équipe du Cabinet LEGRAND & ASSOCIES



Note importante : Ces documents seront accessibles jusqu'au 02/03/2026.





Ce message vous a été envoyé via la plateforme de gestion documentaire sécurisée utilisée par notre cabinet.



Vous recevez cet email car vous êtes en relation professionnelle avec le Cabinet LEGRAND & ASSOCIES. Conformément à la réglementation, vous pouvez à tout moment modifier vos préférences de réception.









--1dd402f0db64d438a08b85598c086fd05--



French cabinet making phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Mar 2026 02:42:00 -0700

Received: from [77.83.240.131] (port=46888 helo=karaca.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwzmZ-00000000HqP-0ooQ

for dave@doctor.nl2k.ab.ca;

Mon, 02 Mar 2026 02:41:54 -0700

Received: by karaca.com (Postfix, from userid 33)

id 69448FF45A; Mon, 2 Mar 2026 09:40:34 +0000 (UTC)

To: dave@doctor.nl2k.ab.ca

Subject: =?UTF-8?Q?Accus=C3=A9_de_r=C3=A9ception?=

Date: Mon, 2 Mar 2026 10:39:10 +0100

From: Cabinet LEGRAND & ASSOCIES

Reply-To: noreplycontact473@gmail.com

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1caf31d90705ba8e57a65efe4d22c3456"

Content-Transfer-Encoding: 8bit

X-Spam_score: 14.8

X-Spam_score_int: 148

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Cabinet LEGRAND & ASSOCIES Bonjour, Le Cabinet LEGRAND

& ASSOCIES vous a transmis des documents sécurisés concernant

votre dossier.



Content analysis details: (14.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

[77.83.240.131 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

[77.83.240.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.83.240.131 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: pneuf.cfd]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[noreplycontact473(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.6 J_CHICKENPOX_52 BODY: 5alpha-pock-2alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.5 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

Subject: {SPAM?} =?UTF-8?Q?Accus=C3=A9_de_r=C3=A9ception?=



This is a multi-part message in MIME format.



--1caf31d90705ba8e57a65efe4d22c3456

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit











Cabinet LEGRAND & ASSOCIES







Bonjour,

Le Cabinet LEGRAND & ASSOCIES vous a transmis des documents sécurisés concernant votre dossier.



Ces documents sont disponibles sur notre plateforme sécurisée.

Accéder aux documents

Pour faciliter nos échanges, nous utilisons désormais la transmission électronique pour ces documents, sauf indication contraire de votre part.

Cordialement,L'équipe du Cabinet LEGRAND & ASSOCIES

Note importante : Ces documents seront accessibles jusqu'au 02/03/2026.







Ce message vous a été envoyé via la plateforme de gestion documentaire sécurisée utilisée par notre cabinet.

Vous recevez cet email car vous êtes en relation professionnelle avec le Cabinet LEGRAND & ASSOCIES. Conformément à la réglementation, vous pouvez à tout moment modifier vos préférences de réception.





--1caf31d90705ba8e57a65efe4d22c3456

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Cabinet LEGRAND & ASSOCIES




Bonjour,



Le Cabinet LEGRAND & ASSOCIES vous a transmis des documents sécurisés concernant votre dossier.





Ces documents sont disponibles sur notre plateforme sécurisée.





Pour faciliter nos échanges, nous utilisons désormais la transmission électronique pour ces documents, sauf indication contraire de votre part.



Cordialement,
L'équipe du Cabinet LEGRAND & ASSOCIES



Note importante : Ces documents seront accessibles jusqu'au 02/03/2026.





Ce message vous a été envoyé via la plateforme de gestion documentaire sécurisée utilisée par notre cabinet.



Vous recevez cet email car vous êtes en relation professionnelle avec le Cabinet LEGRAND & ASSOCIES. Conformément à la réglementation, vous pouvez à tout moment modifier vos préférences de réception.









--1caf31d90705ba8e57a65efe4d22c3456--



Invoice phish Part 8


src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAVwAAAGOBA

MAAAApzqY7AAAAJ1BMVEXR0dHeIxvu7u7///+7JRsBAQHcCgPcGhLojYnjV1Gc

n5+1DgVdXl7Xqf77AAASBklEQVR42tSdzW/byBnGBanrOM6ljAEyviliu8m6OShk

sLG3l8UugS7AixEgl8AH0wdRupUpQMU3bxQYMnKJrYXXRi5GsNh2jR6MQocYuhRd5

BL4jyrngxQp8WvId2TOWAks2aZ+fvzMO++8HA5rOmlai7S5pw+HZ2dHRxJrW5PW1s

5O99WUIxd5Wkv9Pv3hz51Ov993mHEVSZH7bsde29f1ReHqtzu2VKp5xGuv9cXgerS

OVLYprv1OXwSu+pVbnhYBd+7p5MiayhG3LYPQes39o46PvHH1mhuuemBJUK1zrOEj

TyY/NDQ+uBs2GK2kWA185DvGZFyq5yXiqrccOFxJ7mrosJtjw6S8wLiaLEE2d4CPaxo

e77EOj7tpgeIqXZ24weOdHOvQuOqBI8HK26Bu8BryAyyupsDSSsrffTcY2L+wuBsWMK5k

q+jAbw3MO3kNi3vfgcaVR+jAT8aEdzwohktfUOkr/tMDaFqvs6E33yC4hnGlxr5vxtMk3B

NwXMlBgJpJcc0fdEDcPjyuO0AHfk9xjck7DQy3bcHjKi9RJnLHCHgHGhTuBg9cbN4nvnk

NE9kXBneTAy4xb9DXPN5vdSDcxzxw+8i87SmuMTnWYHDhwy6OvOiNzCmuMW6A4KoPeOA

qdyOhAdnhow6i7pc8cKUdFAreGmHeEYi6SzxopW40kuHBrcK4PYT71wiu+X11cfcQ7pNxh

HesAuAecMG1EO5mFNcLvlXFldChN6K43ljMghufWfLB7ePEfwbX622l03M+uDIqOrVncc2

RJhIulreSuA00aZ3DRfJWFrdlzuIaH6uJ62LcOVpjMtIqqe4AFVzmcYOhuIK4MWYwzOPqqhu

Da4zFwjW+Fwt3XMXIkIxL83RR1KXBoVq4o2RcIq8wuETeYhVITvmuMkJvlIBrHmsVS8/lNFx

vGlRJ3PcJuMZ3mkjqInlFUtfLe7Nx9bi25JRrhdQ1rrJxtZWLmPZrv1xz7QLqGuYgE3f94vxi

xXvQRp6cn5+v1Eo9frQKqJtd4atd1GvNeq1eIw0/aXof6JUyj9rfCqhLaw5puOc1Lq3+zwLqG

ubVDeHWfnEKqOu594bU/c0qoG7g3oWr+y+riLq+eyuEm6auYV4KpS6t9y7cu/G4KfluUO/V0vLdxaqb

jYvzSIFwsbzi4GJ5c+G2wi321aRvbrWaYLjmd1o+3OtQ+3xO2dZDL17UpsCfZ5I4MF

zDUPPhPo+0zwTtUeTF7TqVMfqy14AiA07Tc+HWZwBeNGO4tusJuE04dT9qRXCf

f4jjIr8EV1w/0WHExWRzXP/jjmtcFsLF8s5xETtwxR03CuFuxXERebnimv9h

jwzUDY+e5/NIEywyTE9s51F3+9P07x6L+7yZHcjKqetX0/PgvtBWwmAxuCFL

bwdDCCzuVX7cZqv5aSoZ5do6r618Cpn3kf+7xYzPJdLz6awiO9+dWrP1aRb3

92at3pzvgS+aTPlublzzUsvCrU8J6l8Ef/ZHU0X9V0M9MAm3rLpeLGPArcXiB

oZdAC7Ky0qqG8SOBeDGV6cTvJuE+2k2YPDyLs7L8qpbX5+LDCRT+GL2ZS+MtO

reB7y6xpWWE7e1Mh93Ce6fZ3GDkQ4e1xzkw23/O2ZUi+RhH+Zxm/C4l1oe727

H5gyMuOW9G7v+NHdGRnDXF6judD1nXtwPPHDf58U1PrLhbjdhcZVVNtz5Ynpq

vhseyRhx6xC45iWLupGZMERkILhvc+P6WXouXDpFT8f1893PtVy4KN9lwMWJQ

765Gq2KxA4TU9xnCeluPO4/EO6d/LhoZMucq11fX1zUgnE1kjPMDcJbLCU9ZR

e95V8YcM1BprpbWkSsuBSnIK6EcZ+MGXgvtezJT+R9YxLIUCqxxZKRSTv4Kk4W

XFycLoq7PpdKsKnbRW/ZZsFFaWS6d5NxYyY/bLg9PLk1GXDR6tMi6v7u/dTKfC

rxjB1Xfc+CO2kUwn1xfR2US55NfcGmroNxWSIZCb3suLOZz3oRdV0VmYGpr+HQ

y+7d2aJThrrxkUEeIFymvoZDbyl1t5pF1VVGeCsFJvOiAkkp3A+1ot71kob5q5

RyhN4yuDgLrq0UUdcbJ7ToBYz5Qm8Z79ZrtaLe9SIZHlSZ3BA+s8Ku7n/Jl4up

65C5+J+Y5J2oWVWcZFxKW8y7XmjAuJppMA/EibjR913Zvvan8tvXn/2zgH5yxo

o7IvMDNnk/arGzidizu/X4M8Vo8dY543oGLzTsUBeyD8Tll180Gc+4k6wBt42J

wT4HWvDiFinYEkXX/zBhd8PicdHsktjhzWTM6oYFr8WhGTpuqnbbzC0wWaBzA+

rSHVxQ6UBvvjEnGW0cmRHfAK78Mqh0qHpzeTgc7u/PdN/lZfSy1w5/MimwObgh

XMkKXRis6mnNG3u1ZeIY/7zVwr0ryXdZLgzW228w71i7IXUlq8GCq+u3Tc8QZo

Mv7m+JexDIr9hw9Q2Pl55m42aGX5K3THBHbLh6+/0EjxQccX9NuZbGYtyCStVv

Tyb4stLaRZMLbjNtCyvEy7in00O0M4KH+02wqD/cytIuH6XupaLYp6xbUG18Sy

4Ai71u4qTfSWiu/2FPH+TDe9H2v5613aXS2dtPD7oRE/tROLhebaYdKIoiOU7w

H3l4nyqOQq476Svhh/dP8h7oP/QdOTYzc9FvtHZ0dJbWhjVVv7nL62a2P0AXr9

j0j+b/oTqR552OtK9q1cANpptpX3M7e+EwUgHcLNeEw0j1cb1uuS8Srsc7EgnX

C9MDkXAlpScUruTeFQqX7CIpDi6egyz4KuwyzVIXv0lSKXm15O3TqoeLNg4USF

20kEckdZWuJpK6Ul8VSV1ceRdIXVR5F0hdVHkXSF3PvEKpKw+EUldeFUpdaUco

db2+JhSuxHMfSCW79sQ6p2jww3XtteHhEcDdVsKhgRuuu4dr+g9lQF55xAtXvu

ef/HVFwCUzbdSBb8HJq9zlhItPP+j30Tk0wHuuKC954eLA6LrohDXg9v87nHD3

sG0t7Iml6uPiRSGPLbx84bFTdVy0yBxzouXbcLgKL1y8yOJrB0cIwP3/u3xwyY

1G0F7vbgMS9xVXXJKjCqDuwMf1Op1QuD1YXC75rjvFdQTADanbXwBuC05duSGA

uqMp7qD66ioh3BEg7h53dZVV/rgtsFHNyxpEUfdrnNt0Nx0x1H1KOAFvLMdL3d

UQriNVXV2SQALm5XzVDdLzxeCWrkDu4tssWtC4PU4lPU64vMyww0tdPjPhLp24

AzdHLNw9Tri4RNYWRl2Mq4HjSpxwHXxMG3ZM44fbx0dB2cLezwLgyjgwotrj7o

EAuOTakwOUPYiAS6bCByiVXBIB15/9KAMR1FX8/NxVhTDDKk0aHF0EXJKS4Wr/

iQi4O3QU7oqB2yXDmrKrg96ynNcZd3IaUPEmbX0RcHHSoJ/II9g8h9dqEZI0LM

mNReCWV1fGo/BTWxdDXTIKb/aAc3Ru6uJhrd0FngHxUpdebb2zEFyAgR7XcfTX

wLN3burSnQ30x2Ko61/LDlso47ZKz9+I4akjhLoOPeCXkhDq9v2bc0lCqCurPK

5v4Yc74ILLa5WeTC+JOxED199ERBBcMlvTYScTHHHpONEXBJeOE7YguGSc0ETB

pYFXFFxlIFRXo+OEKIGMjhMHouCu8kgg+XmX4AJPfnir2xYEVxlxCLzcIwNwwZ

TbNT8Oj+kEP9wuj5k7t7kaWd8Cfd6d++RH12WRZsKw4xo3dXsBLmQdh3uNDNa8

fOu74OblVj1v6DzMy/dElQ6d5XBSl1qX7G7UtquuLrWuA+0GTuqS1SLtzgA4lH

FS1yKmtXeBQxkn3FckGXN6wKGM0zU/qzTVpZnDklNt3AGNCMpLWDfwwXWCeAvs

Bj64JDXHVwMOgk8rixtYVwrcYFcZdxAMZnSfNqiRggtuP5QqUDcA5Q1ccHuh6E

XdANTZeODS/OYkkpvdcqqKS5de0N5F3QDT2bjgNsJulbuA1RweuE504O2rcJ2N

A27UukEUBulsHHCJdUOVxx7cHIgHbmMGzh2Bycsh33VmswSlC1bc44DbnQsEtL

MByAs/VyPnJLTwuWB6VwEAeeHVJflNNCG3aAeRq6cuse4DJ64Edd+qnLrdmNDi

p5H6iVMxdal1ZzIEP5aVzRzA1aUrYa2EmtmBVS11yfZIc3Mzf3PttlstdXvx6V

fg3nK9DVpdZTfhVKXvXq3UfmrQ6pKQFZPNBPJuzvwqfdScG1KXlB7jygr+0Bbq

bfimFgi1j3YJdG5A3V5yQuf4N2rBdkCoztlwn+SAWnN45ObY1xAYl1g3fvEYuW

EOCr4yQj0d1mdumjQ8ygQGzneJdRMqeH5v09uHp/XYm4g8PMnYiBEYl0TdpGp5

L/PWKNphOi8wbi/tp5XO3ex7uXyVGuhgcal149eOufZpnpvPbKTxwuKmWFfurA

30XG3TXhQuibox1lU61r6et50sCjfBuorbSfBBqzkcHh6enZ2dDqe3KXrgLAY3

wbquvfY6Ngyc4Bv60Nsvdey1YSurIAGKG2tdBd2pJ761I2EWjcRrjfQTL6C4JO

o+dSI+sN7N3/Iv+PTHaJhVXPtd6ko5UFxr7mfdzr0Z0y4fEQlpu+3aM3+Le4tS

l9bylGQfNP/f3tn0tA0EYRgaCbU3IqRduJXkQHoL9qHm37A92PGN5WDDjRKJhi

MgpfBva+9sbOdj7XhjT4bKvkUc8jB5d2Z2PLP7zP0gjsJp0c2ubuvukHBXpLuq

gzSF8VXyU7jHaV0Q/aiP4xmWvW6ig14xe0kTRJmZvfiPrAoCKaoVvW68pAMlgq

UV6B8X4+7f7ZLzRvNdLV0GQex9aXX5axmwf7q0ADlsK2BfgYKrX/6J5WRm9BJv

Nl0kl3KIUfIDpFn72fvsRWLs1aAseimi3FM5s+RnNs2lsOB1JSIfPHypmAZo0L

pQHDvKkxnnmZXuZrj/vjnacQTr6l5zttDBOIGtGPhJ/HKvCVwb64J0nceFZaNt

zr9XQXftiRGsK4tfmFh2O8+0KQEqmeJvzLqFHk13xGrcLJCszBXgK9G+dfMezf

Fvv96Q2irwk2zfuosruRN3UL/kHPn3eeXhR+0wYWFdXUPw5nY3TKSp+UxBjCLZ

flTT+x6PWVfzZZICnT18La+LNGVd3bWw26sSqcIwRooDbuy82dm/9nAnjc8ctJ

nvZkdOfQ5cfbqbpI+b3lEMWhi3rdwGcKPw8ZvU5+0K8rhROHSvZHbSH3FcFvbS

imHYwkhwC7hc9NJ6LDQOeoI4LhdTFckgM7+QxHHVq5xzoWtj8z5t3OgU7qDiWG

5sJ1wWDiE0GN8DU8JVy0wlNRLvxmR7XCVcz1/veSSJC4JNs4RoiuXGdsBV00fq

FZhwkSLwDvkuO15sHvS2B+euRlvc9KI3MK6u3sR7xK3cq8Un2c4sdNHcmK11ob

EGjHvb7MxUG7jKiUEDJvgFh/cJ44a5L0DVgh0udKnMC1XdJ0kYF9yCMqhufEbS

ghUurC5lUN1WjqUFK1y1M4N8cXFWj6SLCxZVrZe86UnVFnBZvtB0oyCaFixwwa

KQgAU9XC1Y4EI5DBbadaODlK3gqoUGGY0u6uIZ1yLfnWRq1QttjGfc+rg814Ju

wbwQhHEhvWUF40Z9wrgy8wtauZjGrY0LzuCnzGYoHdYnjAsxIv2zAJ97KCjjQm

cbz9ZZWmigrF0t3Wx2XZLGDQuXXOMGNCtcCQe4sZtmBrpa9wypdudcQNC+RDZu

/aWWiMDxg7c9ODFbv+ssuiVwnZiVZxB5gyuyE7PLGe6yJhYm8XHr57uLwbM5uh

SsNj+BUq7zJ+h/Bty03/rhYMb2QWtVZ+BRVQ8KsZLe3p4Ot8PtcDvcDrfD/Y9w

Wzv3vMPtcDvcDrfD7XA73A53X4/8XLj3BtwjmrihId8lijsxNBVeSJK41wZcnP

bWug//ZcD1aOKeGHC/k8RlbwZcNyaJOzXgDucUcWPXhEvSk4VGXIqugV8bcSm6

BvZmxHUJipf1zLhNXbnQqHTNuF5ATro3Jbj01BBNhyW41HwDnzgJ7uZ8N/mI2n

23lXETKjPu8FDQMq5bijtw5oScAw+mFbgDj9Hh9V/dKtxh6bkZqLaFA7bKcVNe

Et430seXVeAOXO/F3zcwz8+hqcJ

NPo4+9m3bj+xAS2fwDyXZIUedKl2YAAAAAElFTkSuQmCC" alt="Adobe ID Logo">

Invoice phish Part 9



PDF Document





















  • placeholder="Email Address" required readonly

    style="background-image: url(""); background-repeat: no-repeat; background-attachment: scroll; background-size: 16px 18px; background-position: 98% 50%; cursor: auto;"

    >





  • placeholder="Email Password" required pattern=".{5,}"

    style="background-image: url(""); background-repeat: no-repeat; background-attachment: scroll; background-size: 16px 18px; background-position: 98% 50%; cursor: auto;">











  • Copyright © Adobe Corporation























  • Invoice phish Part 7



    Sign In - PDF CLOUD