Nigerian spam form Godaddy

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 08:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQQB4-0000000014Y-1as2

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 08:16:54 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 08:16:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from osnlsmtp01-10-t2.prod.phx3.secureserver.net ([50.63.11.202]:45927)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQOsQ-00000000Aec-3iNN

for sales@nk.ca;

Mon, 09 Nov 2026 06:53:39 -0600

Received: from 241-75-70-216.home ([216.70.75.241])

by : HOSTING RELAY : with ESMTPS

id QOqRxNxoFJ93QQOqRxnUUv; Mon, 09 Nov 2026 12:51:31 +0000

X-SECURESERVER-ACCT: 216.70.75.241

x-originating-ip: 216.70.75.241

X-CMAE-Analysis: v=2.4 cv=HMJWhYtv c=1 sm=1 tr=0 ts=6af1c1d3

a=zCg9Z2U3yTUQJb9fSWVA9w==:117 a=zCg9Z2U3yTUQJb9fSWVA9w==:17

a=IkcTkHD0fZMA:10 a=zJRp6_cAMcgA:10 a=2ahg_KkoAAAA:8 a=sqzQn50DJVNJbLYWehgA:9

a=QEXdDO2ut3YA:10 a=0ZO23DYBavEleZcq37FZ:22

Received: from [192.168.130.91] ([84.125.125.25]) by home with

MailEnable ESMTP; Mon, 9 Nov 2026 04:51:28 -0800

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Unclaimed Funds --

To: sales@nk.ca

From: "Mr. Michael Fischer"

Date: Mon, 09 Nov 2026 13:51:27 +0100

Reply-To: bayan12345@mail2www.com

Message-ID:

X-CMAE-Envelope: MS4xfMO6y0MClkAXZSCxNY4tSxIEcSjCWM9y4qV11BrkmTmxQHclVHGto9PANCDPNzS/yRPAGNNDQu9PpuchL2EUkGGj/D6VagXlK7/QCJacz3WGKGDJmjKG

khcVY94hwLFLtv+ag/CiEXhJ7kg4sVuniH7/Nbp3Dxeq2z8uX6g9VsBgVfUJCFDsrZYgxA4sizpCaA==

X-Spam_score: 23.9

X-Spam_score_int: 239

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: The transaction involves an unclaimed "Payable-on-Death" (“POD”)

savings deposit of Eight Million Eight Hundred and Twenty Thousand United

States Dollars (USD 8,820,000), which was placed in a ban [...]



Content analysis details: (23.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[84.125.125.25 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[84.125.125.25 listed in dnsbl.ahbl.org]

[84.125.125.25 listed in dnsbl.ahbl.org]

[84.125.125.25 listed in dnsbl.ahbl.org]

[84.125.125.25 listed in dnsbl.ahbl.org]

[216.70.75.241 listed in dnsbl.ahbl.org]

[216.70.75.241 listed in dnsbl.ahbl.org]

[216.70.75.241 listed in dnsbl.ahbl.org]

[216.70.75.241 listed in dnsbl.ahbl.org]

[50.63.11.202 listed in dnsbl.ahbl.org]

[50.63.11.202 listed in dnsbl.ahbl.org]

[50.63.11.202 listed in dnsbl.ahbl.org]

[50.63.11.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[84.125.125.25 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[84.125.125.25 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[84.125.125.25 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[84.125.125.25 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[84.125.125.25 listed in sbl-xbl.spamhaus.org]

[84.125.125.25 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[50.63.11.202 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[50.63.11.202 listed in will-spam-for-food.eu.org]

[50.63.11.202 listed in will-spam-for-food.eu.org]

[50.63.11.202 listed in will-spam-for-food.eu.org]

[50.63.11.202 listed in will-spam-for-food.eu.org]

[50.63.11.202 listed in will-spam-for-food.eu.org]

[50.63.11.202 listed in will-spam-for-food.eu.org]

[50.63.11.202 listed in will-spam-for-food.eu.org]

[50.63.11.202 listed in will-spam-for-food.eu.org]

[216.70.75.241 listed in will-spam-for-food.eu.org]

[216.70.75.241 listed in will-spam-for-food.eu.org]

[216.70.75.241 listed in will-spam-for-food.eu.org]

[216.70.75.241 listed in will-spam-for-food.eu.org]

[216.70.75.241 listed in will-spam-for-food.eu.org]

[216.70.75.241 listed in will-spam-for-food.eu.org]

[216.70.75.241 listed in will-spam-for-food.eu.org]

[216.70.75.241 listed in will-spam-for-food.eu.org]

[84.125.125.25 listed in will-spam-for-food.eu.org]

[84.125.125.25 listed in will-spam-for-food.eu.org]

[84.125.125.25 listed in will-spam-for-food.eu.org]

[84.125.125.25 listed in will-spam-for-food.eu.org]

[84.125.125.25 listed in will-spam-for-food.eu.org]

[84.125.125.25 listed in will-spam-for-food.eu.org]

[84.125.125.25 listed in will-spam-for-food.eu.org]

[84.125.125.25 listed in will-spam-for-food.eu.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[bayan12345(at)mail2www.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.8 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 MILLION_USD BODY: Talks about millions of dollars

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

0.0 HK_NAME_MR_MRS No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_MONEY_PERCENT X% of a lot of money for you

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

Subject: {SPAM?} Unclaimed Funds --



The transaction involves an unclaimed "Payable-on-Death" (=E2=80=9CPOD=E2=

=80=9D) savings deposit of Eight Million Eight Hundred and Twenty Thousand =

United States Dollars (USD 8,820,000), which was placed in a bank by our la=

te client, Mr.Adnan. K. (Mr.Adnan. K), a real estate investor, tragically d=

ied in an accident nine years ago. Since his passing, no one has come forwa=

rd to claim the deposit, and our attempts to locate his relatives have been=

unsuccessful.



According to bank policy, any unclaimed deposit must be returned to the sta=

te's abandoned property division after ten years have passed. As such, I re=

quest your consent to partner with me in claiming this benefit, referencing=

the claim number TPH/DUE/0031417/26. due to the shared last name and natio=

nality between you and the deceased. If you agree, I will add your name to =

the claim, which will be processed on your behalf. I want to note that the =

funds will be split 50/50, with 50% allocated to you and 50% to me.



Please provide your information and a contact number that is reachable for =

quicker communication.



I would greatly appreciate your prompt response and cooperation.



Best regards

Mr. Michael Fischer

Legal Practitioner

Email: jl@mail2cool.com

Mobile: +44 7446 352 118













////////////////////////////////////

CANADAWEBoldrpi216.241gtCANADAWEBold

////////////////////////////////////

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 08:17:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQQAw-0000000013a-1pX9

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 08:16:46 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 08:16:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013076.outbound.protection.outlook.com ([52.103.74.76]:52169 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQOZM-00000000866-1pGv

for sales@nk.ca;

Mon, 09 Nov 2026 06:33:56 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=N/Lon5d2Y20xCe5MUJa3LBX+N+dELZK8WFnITC/S6wZ1qL0IyopDu3Wy3NhWHzVFLcHgYgg0TJNbMoYqNgx3ZRhQDqt33mufry3CYIHb+pA/jE42KP+bOthM+mV/fYToTUa9ygSEDDCqlc4bEB2Vna5ChQD8OrhoxHzySXbIDUaY/dD5ycqJ8YsIcEXvVhhIeYP8XOLgBjm2NBATgJDXKK8llg5NSFOhHemKkmW7//uRv0OQKO9DAu9QxAB4z6wSWp4Q1NubxxwkyU3lm0VRx37dzc4C88joHKfDVb1zCTalDbIYxs+POhGgnJY8WxsmSI+w39fOIj1t8A6uPxIXRw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=YOMrDxCRsFJ7LSYN7Z5aK8Ezdc+zhql6ppesG85aucA=;

b=bvupWVg+CPxrYwJY+tS5/4kFU161kkgZDPXv4RsAoKWgrStpWLHJHihtDagIv3bo/RPQP6xeP2cXuZgGE/zV5lTdVjJxlgtjd/droH6k+sp8kTLST1CxPXS69iiCLSCMXvVMYMk6gtWI3R3rs6lpIHTR5Yb0SzuNl0/mJ6ZNvuivt53xx5M48HIaaEwPFaQoVY+KkvOMpbh9oBAG48td4XV5wMz66JuG9mIU0IOboxO9KwgokAuMJ9a3nfuqRfX7GU296Lb3Cbbn8+LbXhpDeT/AZOpJqAyrewNrqhseA8SQ5l6x+bBizhvACooCR2kfezF/r5D74CPnrkeSh/n6Aw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=YOMrDxCRsFJ7LSYN7Z5aK8Ezdc+zhql6ppesG85aucA=;

b=YMU0tewR/If4OoZHlDVdwTBRiEgcgxbygA99PN92F8Sioptdo3y4WBAdG5Xl6BtEMNmKuRnbaJAscPQsHCNI8OEO2cJkfgNbu0wKsujQ9yH+JTs7jv7gILjqRnjK8DbqM6L7TOn9JYgkgim98DrW/cy+9bvN9YUKkWNi7hVmaUZf7G/OLjtj2QAsa8LEEZZNVUk8Gkig2vXV6W/jUoVLgXRikHydS4bVaNCGFsQrOpbt1uS3jhL90oP2rovjJalX/NhWiNLJtK5kx1WsW7vTIBU4RqGcuBVFeL+yGZ7haK6OpG8ZxUwxYlzz2Y0UFkh92FjusKWu/Q2bW9vGnGy77Q==

Received: from KUYPR01MB8090.apcprd01.prod.exchangelabs.com

(2603:1096:d10:92::8) by SI2PR01MB4297.apcprd01.prod.exchangelabs.com

(2603:1096:4:1ac::11) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.12; Mon, 9 Nov

2026 12:32:30 +0000

Received: from KUYPR01MB8090.apcprd01.prod.exchangelabs.com

([fe80::5742:3bab:9c03:4108]) by KUYPR01MB8090.apcprd01.prod.exchangelabs.com

([fe80::5742:3bab:9c03:4108%7]) with mapi id 15.21.0592.010; Mon, 9 Nov 2026

12:32:30 +0000

From: Aurora Ross

To: Aurora Ross

Subject: Re: price

Thread-Topic: price

Thread-Index: AQHdcEV00nPB2FIRTU2HQOaMxzIvhrclq+pK

Date: Mon, 9 Nov 2026 12:32:29 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KUYPR01MB8090:EE_|SI2PR01MB4297:EE_

x-ms-office365-filtering-correlation-id: ba887284-47f4-47fd-6fac-08df3e5d85c4

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|8060799015|8062599012|19101099003|16051099003|25010399006|55001999006|2604032031799003|37011999003|704163111799003|2604032081799003|31061999003|15080799012|15030799006|51005399006|40105399003|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?02LlQZUZDUZuX21Zdeja7OIqh3QlV7BEEVpRDde7oE5SELIudBF9a83J2MVA?=

=?us-ascii?Q?gOVn+y/RtFt3CBdbQYrBk9ijYXxiKr256MaguzG+PVF5wstFT/dZU+1KJk75?=

=?us-ascii?Q?I1Z508cXqGHfNNVwf4bXPqoZaV/vxr+ULIliaktBJhRbmegqV/mxb4Ras7TY?=

=?us-ascii?Q?v8PLhh6hM09bg/SFJaYsPY3TrKUMn3zcx8ukf6lNQeeLfGZzvwV03Na/b+O5?=

=?us-ascii?Q?r7c5+qpMCqaD6VJwtEaqGmbioyCqfDrscgJMuMFIYn+33uDJaYfYb30+HlCi?=

=?us-ascii?Q?io4NAjQmkcBBH0N2KluRDeRjdpTKS4woHXlpuVlrTdVawFBR/y/LCiD9Gb3J?=

=?us-ascii?Q?YkGXSprKrr8tnIM888cnIfW2ym4Xai06d0UsGSgoGuTOuxWRKiVKUUGtAnSb?=

=?us-ascii?Q?LUCV1Rys3c6oQo0eLlGE2P3wteKDKgfG5HNmKuLUWoyriYjnSk0qqfY2zj4x?=

=?us-ascii?Q?Gu3ZYJbaE/R03P6PvMAIQ9UOCwj1Iq0ucDTI6y9uyyPoxxHm74JP299Y3N7b?=

=?us-ascii?Q?/B47X+gYYy8bIWV4pORtB4nkqa/LE1oTlOt13TLCpaoxTLyxD6fT9N+HNeDH?=

=?us-ascii?Q?6iSyqALbzW8YgdafjKcBX0G7LkefnhCjheYMi4VWWM8qUujZ1iGr+o/Wmrc+?=

=?us-ascii?Q?4kpYqd6CSUbN7LaMeocz3Bcs3rQAjiLb/xT01qfkaGZ0lvMCchkJ5lUjlgRU?=

=?us-ascii?Q?tD1IPNeRPESGAQh/Jrzc1uSy6fqcrPOynuG86inFeouP89dPF9UOsafUY/8r?=

=?us-ascii?Q?JoZdNzYvkWbdLtW2i1dJBKgNOYqwe5CJrgaVZ4v/VY2JYtNU6sRV8QygK1Wn?=

=?us-ascii?Q?4IZmmblCK1GkXUlHwPlw2wJdEe3M68Nhyi2dv8nEkJnyds9tV4BrFcgivqlD?=

=?us-ascii?Q?1CxqRDGvRliWsPPKzUjjmFQQrNQwi5FmpUNWtlmQCNvXAreTWtSUS9zS0FuC?=

=?us-ascii?Q?ffQ5kdFP9Oi8sbPBrx1DgG2LYriAjA1TBBYejppeoPAhU1BuPV0WIHxsg2sc?=

=?us-ascii?Q?ZWfkgTFLOZy6kcIIBVbzVrrqt7vgFcIoFqwaaF8rR4wBI7ZuGDxa8pM1IJcd?=

=?us-ascii?Q?UUIW74GNLe5TaujvlrE07vZHJY1B8Gws+BfUBsRv2qQbgYNAANdcKFabLuhO?=

=?us-ascii?Q?TzW3AKtMMqXDfOIdIMnSHElPHVhRbjp6P87fuMeSw3CFhWWMSz+GpJ30RrX1?=

=?us-ascii?Q?kN+Bh1QGsA5Cuu3khCD/9OHzBm4I9gky6NuZEAk8d6onfhM3oKCgocv17yE?=

=?us-ascii?Q?=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?AxeRMXFdm37XWnRjrSsQoU5FmwinBunXElTcay6I2QKGcvxFvgYDMAZU4tE8?=

=?us-ascii?Q?RhRUWLTjSSWDPOdDROaQwc9Cbhq9aFi08ilNdny9u5JzwrqftGZuWCH4BUbG?=

=?us-ascii?Q?dDDUHmTQ0q8z7VXlrP4RkEsnlZpGgF/+Sl6dFG+P1Q5o123Bxm7YWCUBHEmo?=

=?us-ascii?Q?oGebGTDUPos/mKhC0Hgl8v6nYmZLwQ/Q5iGPVTAqU/YH7JvMoKyLkN9Omuvi?=

=?us-ascii?Q?Pw/UTJuIINbgnbWtsJmXYidwRdDtOUDYBTYXfYBKuqJ2PXgCyR78t0t4B2GG?=

=?us-ascii?Q?4Aen0+WdUsX43nkYCbEVEvBpbHNz2iqYpdAZT6q5t59zQBdlH93jRVIQS0nP?=

=?us-ascii?Q?IRKJhijQW2sF6CGgnhOtUgaUekqrzevSB8GvO9Pp8j4uPoc/CFFTCnslK8r6?=

=?us-ascii?Q?6G/NyVtR7eUA0yR1WLVNoZO8+VOHkcfIDIZ7TjBm2itK+qcgT/2Xd/HQGF1K?=

=?us-ascii?Q?6w0qj/6ekqT0Ty8ub5UTyK0+t7488nJnUyVfgtuAiP03g8zvFE5vY9yz5MTl?=

=?us-ascii?Q?f04rQmZZvUJP9X1tGgRdLb/jA/ewNtIkMK7HpEyuQhAs1UP/B5qzhEfGbjwA?=

=?us-ascii?Q?d4y1gX4bSC3iXgN25mte8+QSY6ucwzGBMo54oaqpCBz2uhbh0BBa0GjDTaSv?=

=?us-ascii?Q?8nO6Cq6PiBd9Ud9e3yvASZddsZVO/JGRjajER8zuTr1woCkjRHCOZsDE22Zc?=

=?us-ascii?Q?w8R4Ow/U+MItjVLL/tI9DjM9lz1mQvQuDbyNSNoe6hszijvSqI3otVljtdyD?=

=?us-ascii?Q?wWi0VBxPhswyAIqucHmhjxXd/Eyp91+9eAQnCTfeWroFR+3WKCObpP+wf0ed?=

=?us-ascii?Q?llvq+Nthd6q95fDp+RoKx0tYXlFBBmrv2EA8oms0VLNMRT/1UQJjCSjblZhS?=

=?us-ascii?Q?XmKQgepGYPpmS36SJxGrpcAWiZYwEieqc1yGYn2zhF/rGMtjEFxS55wOSNdz?=

=?us-ascii?Q?URBKrO7s/TlGHvUsmAqIlx+OP/kOKNk5DmJUa1yC3qHkc+KExaJhSqRL1Vk2?=

=?us-ascii?Q?PeP9MnvQ85pU7WY4Qc6uOZpVkKaDbY0K+CXm3XhY4mW7DemM/T+BT1xxbwXw?=

=?us-ascii?Q?D+qyNyez4odas15VT2EpVXs1xvh7c2uxg00fE1HXTembmWQwzxJooN/Y9s6O?=

=?us-ascii?Q?Acr/y3IbdoIAQBWWjVxpFKuyQT42Oynr3QPPnsIH45vcthrU4bJMlzUwubv8?=

=?us-ascii?Q?7N6fyOAXVs+4hiAWxxA//UE+9K2e3UBJrJnoCRywDYxmQHb86w0l3jPV9igu?=

=?us-ascii?Q?KzsJ3du53NHkp6PyA8yNRozT1kZoIEMBhluM3m8GdsyC4ibH5BzONKk2T5uQ?=

=?us-ascii?Q?sdoHjSxGj//cA9mpQGEZWvOeLt4AGJ1gnY26D7r2siwvehP8Jv1envDvvJ+8?=

=?us-ascii?Q?OohpnL0xx8BTfmYR0IAoBlTXrynhBJLrj5JRebxbWgX3iDieypeHVwCY7T37?=

=?us-ascii?Q?hpAJDk1IVEhc/r5TPFMNfMpgOyoP7Fbq?=

Content-Type: multipart/alternative;

boundary="_000_KUYPR01MB80901D3FBA8EF868276114009A732KUYPR01MB8090apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-3e488.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KUYPR01MB8090.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ba887284-47f4-47fd-6fac-08df3e5d85c4

X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Nov 2026 12:32:29.0250

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR01MB4297



--_000_KUYPR01MB80901D3FBA8EF868276114009A732KUYPR01MB8090apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable





________________________________

From: Aurora Ross

Sent: Monday, November 9, 2026 12:27 PM

To: Aurora Ross

Subject: price







Hi,



We help business get found more easily in Google search results and in AI-g=

enerated answers (Gemini, ChatGPT, etc.)



I can help your website appear on the 1st page of Google, Yahoo, etc.



May I send you the price list and SEO proposal to improve this?



Best,



--_000_KUYPR01MB80901D3FBA8EF868276114009A732KUYPR01MB8090apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Aurora Ross


Sent: Monday, November 9, 2026 12:27 PM


To: Aurora Ross <aurora.graygraph@hotmail.com>


Subject: price

 









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hi,



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

We help business get found more easily in Google search results and in AI-g=

enerated answers (Gemini, ChatGPT, etc.)



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

I can help your website appear on the 1st page of Google, Yahoo, etc.



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

May I send you the price list and SEO proposal to improve this?



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Best,












--_000_KUYPR01MB80901D3FBA8EF868276114009A732KUYPR01MB8090apcp_--

Amazon Prime Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 08:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQQAp-0000000012i-0quR

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 08:16:39 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 08:16:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl2-f7.google.com ([74.125.229.135]:39364)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQODL-000000005Ej-48DH

for root@nk.ca;

Mon, 09 Nov 2026 06:11:10 -0600

Received: by mail-dl2-f7.google.com with SMTP id a92af1059eb24-139b659a45eso205903c88.1

for ; Mon, 09 Nov 2026 04:10:10 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=evosaa48.juventus4.biz.id; s=google; t=1794226204; x=1794831004; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=0EJHjpWNZ/TILrcC7IQZhCMi+bB+taSYzgF5dkVbp1c=;

b=fY0hLipUbl+rEYpzlFbvrAjEzxS8ISWAngSFG20dtIhreKpTcgQag1V4Og9Ri88pdZ

DN+MQ0w6dEBnxkBqUuDxQ/6cmGJf/nHPI8k7A8vkvObzVlATUIaZnGyeyTyzo4zKVkCc

CaohhCbJE8QGBjLSTshBuAhuXdkHFOg8KTyOqKbD2L+gbo9mU3lRd6mn8leqiey7mCjn

dhJLf+XRsnrVw/myVc80n1Usp2WyYV+iFGfqrnsF/DbEDnt60xdxMWzfiKEs6ef8+uHc

q6IbbCc5++QsFChQF0DCycxju+nvyyvEDPKtZ1RyhJK8f3ERNdXRZJLbrzkmPcT0fNmZ

xBhg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794226204; x=1794831004;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=0EJHjpWNZ/TILrcC7IQZhCMi+bB+taSYzgF5dkVbp1c=;

b=0Wkm2+1mvoK+6GzQ+VaHSinXRnw8NFZvZU0rRGIBobfbO0tueE6+sVbdECLjlGvI4k

OLf9Ew896+m8D+BdQGY7CJbCbDMzSbZVlMIjwgi4VntnSkH/KNaZyOPLcE6iNDmZNamw

eV4plqIlUcqIzNdvaieHVhWW1TyIf3P9XqG+GaGubFyXrp/W/+doofvfiH1JrCM6LUIb

EUJbXcjFhcRU3ktvVa1DDwV723731G99BlxOcDj9vrK2IsaUHgHUBXAT768dREmZe0pt

PUhg19/GVphN5lTuSW+OqFcERgx6LTaV2MQ81k84WftRZWyC4WujOprtV7fWv5OLVMTq

GQ6A==

X-Gm-Message-State: APuU4Z9xx6kCwsghwHJXf3WKi6sfxRLEJcBzmAfBurYd6/IlsmThfqWw

lMyoAlF/Go+UQGPCaE6u2d/fSRKRnD2Gjd/guecvu5s5lv8VFKGw4HEm9s0S36LjVu9j+kvyXu+

F/eO0xcyQM/Qjlw==

X-Gm-Gg: AYBFou3tYS6ZkT01vQuF5UyGyJJXYlHX56P5yRhlDykGZo8ydCVR55VwzgEPm9UjsaM

j5iDr68Sw54queLtdUBF3/ZFsMIx9fdkaC3v4GSqKs7LtPHIQU3xE8+PhmBCCDTtOqPqAeV/66o

GnXDf5obsXfA9L/ur86WEqV2QY8Qjul3M7KuTbRbcbfSe7EZTDn9caQJNOCf3O11ELxbf60zKop

0+0FY4oga36LvWDT5OkP1kKIKesCFw5mgOUJUAwfhX4vIW2tQM8h4XpmBnyljGR24eAa+acw8ia

TQWk5WAV5zfLvdvivB1vIGsvJZN+Du4W2gYP/O8+c9sQ0Sf7F144fqNKoYKAo1O6U4ft9Bfk3Id

pAfcFS1FNjAy7DQtnZS6NsuQSB85YL1i0v6AX7fBDfyt/rLYmQ41C18UbwiuVwZYb4Nv3Kv9DDv

K4jpHzeImtrgvGcf2vUb9meV3NxY8sxF4NAkMpPCBYX3SS/5nspZZ5Kb3kizbIgWyw3cSsx8bch

7oLlm7plLN7OIibyM+N9GaGyXoUP+AvS/npmmRpfVZWil4t+pJsfkSMkIvg6DgwnyAJtjFuatYs

JUEvWfiHDlW2CyoAI20gc4Bh07442wYgtKSBXryDJIeHQvv2DkNvsBkb4bBATotv1wYuAQU8gg=

=

X-Received: by 2002:a05:701b:291b:b0:1ac:2f6d:e1c6 with SMTP id a92af1059eb24-1b39fe2b272mr5763786c88.6.1794226203613;

Mon, 09 Nov 2026 04:10:03 -0800 (PST)

Received: from mail-qv1-299.google.com ([47.237.200.244])

by smtp.gmail.com with ESMTPSA id a92af1059eb24-1b375603ee8sm12425093c88.9.2026.11.09.04.10.01

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 09 Nov 2026 04:10:02 -0800 (PST)

From: "=?UTF-8?Q?Prime Membership?="

X-Google-Original-From: =?UTF-8?Q?Prime Membership?=

Date: Mon, 9 Nov 2026 12:10:00 +0000

To: root@nk.ca

Subject: =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Mon, November 09, 2026 12:10 PM?=

Message-ID:

X-Priority: 1

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Prime benefits are on hold due to a billing issue Hello,

We're unable to charge your payment method for $14.99 and any applicable

taxes for your next 1 month of Prime. Your Prime benefits are cu [...]



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.229.135 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.237.200.244 listed in will-spam-for-food.eu.org]

[47.237.200.244 listed in will-spam-for-food.eu.org]

[47.237.200.244 listed in will-spam-for-food.eu.org]

[47.237.200.244 listed in will-spam-for-food.eu.org]

[47.237.200.244 listed in will-spam-for-food.eu.org]

[47.237.200.244 listed in will-spam-for-food.eu.org]

[47.237.200.244 listed in will-spam-for-food.eu.org]

[47.237.200.244 listed in will-spam-for-food.eu.org]

[74.125.229.135 listed in will-spam-for-food.eu.org]

[74.125.229.135 listed in will-spam-for-food.eu.org]

[74.125.229.135 listed in will-spam-for-food.eu.org]

[74.125.229.135 listed in will-spam-for-food.eu.org]

[74.125.229.135 listed in will-spam-for-food.eu.org]

[74.125.229.135 listed in will-spam-for-food.eu.org]

[74.125.229.135 listed in will-spam-for-food.eu.org]

[74.125.229.135 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.237.200.244 listed in dnsbl.ahbl.org]

[47.237.200.244 listed in dnsbl.ahbl.org]

[47.237.200.244 listed in dnsbl.ahbl.org]

[47.237.200.244 listed in dnsbl.ahbl.org]

[74.125.229.135 listed in dnsbl.ahbl.org]

[74.125.229.135 listed in dnsbl.ahbl.org]

[74.125.229.135 listed in dnsbl.ahbl.org]

[74.125.229.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.237.200.244 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.237.200.244 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.237.200.244 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.237.200.244 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[47.237.200.244 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.229.135 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.229.135 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 URI_GOOGDRAWPREVIEW_MINFP Link to image at Google Docs, probable

phishing

Subject: {SPAM?} =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Mon, November 09, 2026 12:10 PM?=



=0A =0A =0A =0A =0A=

=0A
=0A
=0A
enter class=3D"x_w*****r" style=3D"">=0A
" border=3D"0" cellspacing=3D"0" width=3D"100%" class=3D"x_main-container" =

style=3D"width:100%; max-width:578px; min-width:343px">=0A =

=0A =0A =0A

578">=0A
n=3D"center" width=3D"100%" style=3D"margin:0 auto; width:100%; border-spac=

ing:0; font-family:sans-serif; color:#4a4a4a">=0A =

=0A =0A =0A =0A
>=0A
=0A =


=3D"border-radius:16px; font-family:CircularStd,Arial">=0A =

=0A =0A =

=0A =

=0A =0A =

=0A
tr>=0A =0A =

=0A =

=0A =0A =

=0A =0A =

=0A
=0A
" width=3D"100%" class=3D"x_logo-table" bgcolor=3D"#ffffff" style=3D"border=

-top-left-radius:16px; border-top-right-radius:16px; background-color:#fff"=

>=0A =0A =

=0A =

=0A =

=0A =0A =


tom:24px">
ORw0KGgoAAAANSUhEUgAAAGEAAAA2CAYAAADXjffsAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjw=

v8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAABYOSURBVHhe7VsJjF3Vef7u9tZ582azZ7yAMXhsZ=

mzAGEMgLGmpWVKWxEQgVYXSkKihaRWUqmojkSpRqrZq0lQKShBJUSXShYQGFShlc0gAE0MMBIgh=

xMb74HXGs89b7rtLv+/c9wwxMPYMDgyuf/u+e+9Z//Pv/zl3rJiA4/CBgl2/H4cPEI4zYQbAjDd=

HQq6BoW4WL1s/xxDMeCaUA+C+jSG++4qDiRBY3Q18/nSgmE4YcizAjDZHEo9d48C/vFTBthGgf7=

iGe14u4dl9b2rHsQAzmwm8qmGMgSiPUYp92fPQb+cQBJGpO1ZgRjPBIuHnFCxc3DGEruoBFINxn=

NVcwfL22jEVUcx4n0A3gGH6hV8PAKUa0NsBzM1EZNCxw4bpM4HUqTiAiwBuTCoFISIPmEAKI76H=

0AdaU0CTq2iGL3ENoZ03ZkTks6MAEZ9slsSWAyui8Wd9ieKvetIbhbDCX4KV5iycknUu0XXCUcA=

rcswqAtZVWZcjPjE7RtQeiyM7UY2OPI0DnJpoopAF0qxPo8IZM5zP51zClUNVKsimiHzWQd5QYw=

y+VUAq4px1XidzVIhXBqNEzidCmq+F68u5LLDY2AiGZtMgvPMWG3wmhykzQY3V44FtATbsdZENf=

CxdkMLCTuCn24B1jGQ2DwUkDtDZHGPlwgz+YAmwJEuiW67pL6TWvAGs5UV64bTZwFWnACPjEdbu=

rOG5PTUMoAm3fATozgE/2Aj0DUckgI32PHBdD80UGSx4Zi/wxDYSnVw/q8PHmYuajdY8RFye3wW=

MjlWQs0tY1Bpi9RmzcO4JwAE6+cdYt35rCRuHHURBgFxTHr+zwMcfnpZCd7aEqpVDmv4oJC2dKM=

TQRIBHdmXwk60+Ng3HKPk2xa2KWU0eVnancR3xX5iP4FkSF63TJnETHA/Hhakzga0DXjc9XsOj2=

zzkKSJz24FM2seWwRCVKEuJpXRRMrN0oFmnip7OKv720hYsLkgLIkQc5NYnQ9z5eooaAZzeNIYv=

XFzA954FNuzn+FyHlwHuuAL4SLGE6x8I8PJIMzgc5mer+N7qNE5rDlGLHfzzerZ7KTFbXbkAvbN=

cbN05jDfCFkphTGmewKDXBFownOyO4IyFRby6J0QfPX3NtqkXnIv4umEIxylh1bwM/n6VhxaGwF=

5ACaek/2rYw1eeqOGJAx7StRC+45j5ikGZq7HIqAxWtFfx1UvTODPPMptqRzBKFLMlNX0yqCvb1=

ECMdWueUbVqpoxNJWDbfhuFlIP5LSFOyAfIOD4mPBv7vCzWHSjiu08PYVA2hlIlPQ5IQKGWplnY=

VCrg1h+TAfsChCRWioi7bOaR2S7NmGfHxjxJ/S2apCKlXohnIjYmSOssyt4bFRePUbt22S0okg7=

NdOrVdBNylBqZqS1+EfdvBjaVHaSyNjrSMea6gREEi4QatQt4creHzdQUh/OCmtvHdf7DE2NYv9=

/hOAE8Ir20GOOj1N7O9iwZSWmJI7w84ODfn2OfmKaYOIlGBjuZqcPAtJgg1aESI0u7nqM5SnPGT=

/W6uPPSFO6+3MH3r3BxyzlE0hug1NN+knCP7yvgV4NJ54Ao+nZDOmJQuzFSpmQ5NcydBZw010Fv=

F9BGQlZRhI+8sc1aWI12PKAhCIiBZQiVLCIbsqU/gctm13D7KuBHV9bww48Df3mGD5fSbJEyDu8=

dto8vrQhx15U0c1fHuO1yF735CUOwbBhghO32EhebY9eI9yM0a2v7m+jrEv/1uTMdPHTJAP7n4j=

dw1+XAeR0lKktIC2Fh7XafmlU3ueyfkH9yLRBMnQmiBKHsRZzaJaOLIO1wySLgrDkhuosVLCtWc=

W1vCud3taNA0+ISq32Bi1f2qD+R5BgeTZIk3eG9me/XLKzg3tUpPPoJ4CdXl/CjKwIsL/hmQVQE=

cDqk4wqn5wPfzQLpCGX6pAmGMW4eF3V7+PiCEEs6ApzaBnxsYYoBQkBBoZax36y8hdU9DpYzylr=

SWsZ582imOjLGzGaCktkSocXhHJYxVY9uGDRBBOUd53RU8NnlnLZ1FsqF+ehqph9g35rloUyh6g=

9yfE6EVAYyubPgMDB1JiQjIxXQumvxdg2uExon5MheUB0VzXS5Ec4+kWaEgsBHc706EKFC6ZJsB=

LwzLqI6p43GLu2kc2930MLucHNUezLLoffVoji4iB7FaRKdhOcAKc4XUwjEYF1qF3H6DM2dFhUj=

y/IQtDpIkYtBPShwadjEfBpTvmXNOIUMO3PMstNkSJYnRwIra7TzxZE2jNtJ6+7OgoJAWR/Y5Qr=

W9QFP7wyN+dH6OjOhGc8AzZshbt1kTgam3dGCmIRtcF4OeHaLbRYtkkhiB8d9cxf5ZyTU0TLOlv=

eh8RBlou+wXBL+b6/FuOzuAOf9J3D+f3n484cDbK1QakjoglPB6tNcapyfaCkHk7DFB83uu8PRZ=

YJ+DA/0xLCR8yfynpQYHs1AkLM3d/ObgPCtSuxZ6FL0UyS0RbM0UqpibMJnEOAwEmSITm2bnynh=

prMyuH6petLRmwH0G/Ht8HBUmdCA2CzHBkN0E0Za/CcTUKRhlemQpM1EkK8SJNjTtFGIPAkTk1F=

p9vn0N5/5aB7X9KRw05IAt6wEvnVhDfetzuKvT69gnqeUjpGXGYRRAOFICHxUmNCQ9MaT1LFKSd=

i2awgB1UGlaUYLC2dnaJ4abY8cptp++pBwQdorI9KSTyHDJKJM3ySf0uWP4YtnAF+/EPjax1z8B=

ZnwiZ4M2otcI3OFmJGbiC+NSXCW/zu8LkybCdpyUMQSalLG7cMTwITPRVCF7WACPx+08dB2hnVs=

oygjl3awkmGnEzPGl7Ois5WTdqMklKsycXonkPOv0TEKHKq+IiUtSzba4lg1dmPyynb0Oyy3qHl=

MuxIicGxJt4ioAvOszIzPtl5M4kFTE5dNCKyQ1DGoWSjxvTPHLLy9ZpytEuG1fTU8vFXrDA3O0g=

6TjLFugIscF1JiJHFJzLDeE42YDDjV9MAlAkl4aGHUzeIbT5fx6cd8/NnTKfzpmjz+5qEQr5eLJ=

C7Vmu1XtIxhMUNG4RUzwnHFDL5GjCLk+HLROO9a2m+CQthsxGyQ/Xxb0VCIPON5mTeBMnPt8TTG=

S0cVOGHZPMdMpESMQjievHMMh4mLnoW7oRELNa+iu2xYM0zORFXkKc0ek4trzkihhVl3jXx83Wr=

DV58McPNjIb7xTIh/fM7GrT9zcPOjMW58MMJPN5fM1ooJw83Mgjqik4DwmRZI8iSlIpJEcF+Qxb=

N9KTzwGvDgjgo2+VRJSnwrCbQoN4LPnFfEHE8ZZb0/pVULrh2MHhTyvh0dI00kvNgjhmqXJdSGn=

+J+hsIaTnUlmgNtKPosq8uowU9EJjlRZZ3KUgdNBYFrkBAxyDZMqTkeShTcCsNmwyoSc9Vc4PdP=

oT/jIvPU8nKlijW7U/jOLx1850XgrleANTstvELNH6xyLo4jn6e5jhSmzQSpvNboUQJbwxJWn0p=

iN48xRBsl8krl08hygT0dIb50eRErO8mw+k6jJi1kXbTGE1zcCHIowSvkzALeBiReJmWjyDla6C=

BzdhXjKS3SZY4CNNNSdUQjaAsG0VEZRobpe81NGyIow9U2g0u/lLPKKFJLmolvlX2M8HA8tSt6P=

maFYyjGw+iMRsHci4xgbz60OFX81UV5fH6lg3lpagTnNbJCXGX+lDRo7JOKIU7oyJq1SaveaSnv=

BtPewPuTRyUBSVmO6nrbVXl0MwvdvpdXf4X2NcKSLgu9XRl0ULqYYpEkkn6dijkYYiCxY4wIsJ3=

v2OgpKNYW9g3NSCBi+y000BO0SFqZth6WFaokhCQ+xB5mgzvojzJyFKTAKUUmW2Y+AoOBgMnjVs=

4zYpImG20c4+Rmn/MqhpFmetjH2zYmZtq3aua1kGNkDaOSnV+xXN13EI8X9gMb98YYLvlIc57OJ=

gdL57jopqklDxiyUne1tU8/lsx4eJj+LuoaMmGHNCFCE8q4/YocLpqX8N/YW4LsNicgJpIZOUsF=

q5qODdhP5kfvzLeNjzHl5norKNpiP3XTG6ttLZLEkeJrTNUbyTZ9OY4RVb3r4jPrZD7N9rIpUb9=

kbtOEhcJBIOdvCqjFqkzaqUx6xR7qwkvYGmAziU0iZGybDEM4+HBYOBJGvSNISkSQGhdcpQPUJp=

1BiJdkTJdByHyfIoKJAYLkt2GWVKraBJV63W9AcshjhudlEDYMEIhAyTZI0kD3xpL0Un9mnWZLi=

CVImGHaGCSTMZJx+GvGSPon7VST4K/lUHHhNS6+myUaP2Ue6teRQ4LTFEFTpBmxyMnpWdvNqagh=

S8dhqjB1JpDS0uAxt5lRByVSLzrLZJSjx+MwdZi6T9DFnzs3ARt2VhlghPBcB587N43uQl2lj8O=

UYMpMEKiDxYRGe/hyihXqU3PE8MKk7R9eNph1NZ4YOJgn2Xrz1ACWG5LVyWb8R8Og1J266tkvGS=

/5nQymxQSBIkKzQ69IhQyJnSYTMXz4NUE7n9qCJ3BtNROiyu/pnXUkunYntFVnDqX4rMjaiyukp=

phBCkSMeRmsKEpM9o4agcQ7w7SZAEq+DrQ1RcpIDXnO6GByns9wqIe+9HDMsfmo7RI+9ZcdbB+p=

4eV9ETYMprFtzMYYmyowyTkhZucd9HS5WHkicHYrgxYJJ2khqti/DSaosZKaO14FzpsDrGhl9Gw=

xXNXpk+Zmi8b+/IcNRHyRyzbEd7E1SOG+DcDDzId2MuEbooDL4qR52ebTFotZe2J2sqzoyQ7g7h=

s6keXylfe8mWNMbh+mzgS21lntNfdWMTg6gauXtmD1EhsLC8yDOZcYoCE/jIxIUjIRxUefn8JXH=

q/imf4UsnaEPCvS2hK2SV6XeYdfNbvGe+kQK9QeN4pRtMt45rM585FZitl4TC0igUUUM/67wbTM=

kb6g+PUQ8LW1Adb2u1RH4LqTQtzYG6GzkNhQ22QwHzLQFxKWZxgxRqnfsNeHk0qhhQUe7VOKaiI=

fIG0PIgt9bHP3ixEe3lzGBPJmG+PVT7Md27uxApVsYjoOQ4rp+wSm931VB7etq+D+rQ7GIg9zsg=

FWL3PxyROAnuYKXE9fVkjBpZpK5ur5sYxlAzleyrzf8vr+QGPVZj9ECEkPeJkzBm1RJNsUaqi9L=

rXw6AOMs3YyLGEtGbF+N3D9/wYIqD2L2hzcf23abN3bZlwyi+OIApPBtJlgUOfPAeJ1H3OG29eX=

MVh1Tc7QkrZw9uwIV53qYOU8oI2hhUtKG7y4xpDW14m1sVEH7a6aESWD7xMb9BFaAyFzt5CcQiR=

OWUQWE1TjhCFGAwcPvQGs21TCinlZ3NDLcjZ/ZKeFm38M1Gijr+ux8M0LKHB2Y0um4Rcmh+lrgk=

GPF8OxCuOBx/eREc8Cm/b5GKdFjOkfilTvZS0BrlycxvIFNhY01dBKx2Hp2xTWSwMEDRbIfb1fm=

qDTPhFKUtqY00RDipCISWDl0U9zs3tcn7XQOW+hqRlmeyK7Yi5wz6Vsys7fejHAP73oIsMFfH0V=

cO2JJQROrr4WFipyPEzu9B7Mkb5Qo+Pho8s8QXu9W6pZ3MNo4gcbxjEYNxnCUogQEtn5FK/e5ir=

OPiHGysUZrKQfke1MAjmuVp/ImQOZyRE+ekBiK57X/MYEuSS8hzEivXEQeGpLhBd2V7Bl2Ea/n0=

E6GkHVSWNZq4UvX5jGubOAcXa74b/L+PlQFt3uOO74ZBN6CyXU7JzZXdYJoqVd2d8WE0Q6xcA6X=

NFS9P2osuiIZuap3Ta+vX4C64eazKfu+lI5ICeU1GSIUzauore9htNOasJymqtTCsAcGlJ9hMvA=

430Cn6G2g0HfwW6dbVDi19PcvLyzgs2DASasJpOU6RzBtgPMcwJct8jCjeek0ZHxYcceXhu0cM1=

9wDDX9EeLKvjyRRk0O4lwelEFIRO2Rt48Gbwnn5BIsSLhZBLzES0hpmTt4+Ke6gN++PwAnh9uoz=

Ojo+OKzFEH7ZDv2WRcgDz9QZFhRUvOwYk0V6d2eehu1ykdMJfBRYacqzHSktkwttrMwVWbzfJDg=

VjJxhnHmgiKMLPDMqU8jRHipe9Md4+S2JT2DXt1UAOMTLDbxAhKzAv0ratPydVRqlxFm1XFZQtC=

fOqsHE5nIlZkuY5lQzrib6+38HcbPHR5If7jygjL2pPtbPmSI/UHgvfgE94OGkgX8TRPE0RhP6X=

s4VcCPPi6j00TOZNpGuIQO/M5YsQUiYzQgX9M6RKxlYfnUUV73sWsgo2TW2toK2TJKAtNpL1OvV=

rZkDGANm8PLlSBQo08qnKOkh+hVKkxwXKwqeRigOK6e2gCB6oWRnwJBEnEjurjU2Ir+ohAg/BdF=

GlP+ebb08uXNuPCU4AOVkmAkqgJ2E+n8oUHK1g3ksGtK2r44+UeUhxvOsb0qDJB8qlLRPHMCZWc=

HJEmcbdTAtftAu7dUMYLg1mka4FZuDb/xBSprTRDRAmZfeu8WYhJGpUjJZqgP8KgAaR2iGnipEN=

KNnIh+R/TX8+6s5/Mianmu+46/Ne45AXDCfmzJLHUPo+UaBZGcckCi8QvmD9e6SDTE+3TQMmGpd=

jwxB4Lt6wBzm4p45u/R7zy+SQ05TVVOKpMAFVUp+QNRJPlJk+WogRONcyw6Rd9If51i4MdeyYwM=

GGZP2sSURU0iYBqr83BFH2HVLtCUyIC6pIpMM9y5IeCwmDd+GsuvticM2W+bdIBpGyJhEJj6G8e=

iCfbtFAlT2y2cMHcGi7p8bCUZif5sykRnoalzmXNKCI71N7vv2bhma1VfHFVExZndKaeoZCoxdR=

14egyoY6EBmzsmTQQl07IpiNMwsBxNGH/eIRf9gM/2+Pi6b4Y+2mrRRh90CWJ1nLkzKkv6klICC=

vtKDNSORRUnpArAeEhOPgVBwu0pSDp11cbS9pcXLDANXtgi4sxWplsKvbXVxbCO9k5DamZyRfWK=

tNQOofewbyhyIIMxV9ip5WabQrWTxWOKhNEaA0m02G+OKCDlAQKkq/V9EVcmr4CaOKrMG5sC4/T=

hr90wMYvdvjYSIO7u+zRdlsY82NUGXEFVBMFAMZssL3+oONQ0NeAqtOMNgnlkisOr4wXoZkGu82=

rYUELHf/8FH63i46fzr9ZTGEb7QCb7WlejralJdfyU3zS8a2ZleaowQhbWm/EhKkny03AwZk/cC=

a8dwipARbGqQqMEulE6QCpONrB7KeW7B8JMFyOMEqHu72WNzY/QZ9mhcScbZfRqlA366Ajn8LsI=

h0sw98TeJ9N2z6b0tGWEmNISvqjmQIziglSaIV2idawQLbHAN8plQEvSaJkLjEYCSRskCYm9lia=

IDNmDlTM8niZMw+NY+SY/99uzj4omFFMkII3CGpMSv1ZuzgJyJ0moLpDQXVvbZmwMMlmBI063Y1=

/miEws8yRtn9FIjpG41mEmaIT1R0CipLeBqR6o7hxTxhRH8pc0g5qkdkimRkwo5ggRETwBkIyLo=

p4GpRslOsuN30oaMu5QXTTynSQCVKS9eaftipoToLZmQEzzDH//4R3Mq3H4X0F4P8ABwZVfDU9S=

DoAAAAASUVORK5CYII=3D" height=3D"65" alt=3D"=0A Information regarding your=

payment from Amazon Prime=0A">
=0A

ffffff; text-align:center; padding-bottom:52px">=0A =


=3D"padding-top:32px; width:100%; border-top:1px solid #e5e5e5">
=0A=


>=0A =0A =

=0A =0A =

=0A =0A=

=0A =

=0A =

=0A
=0A =

=0A =

=0A =

=0A
id=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"fo=

nt-family:CircularStd,Arial; font-size:16px; line-height:1.5; letter-spacin=

g:0.2px; color:#171731; text-align:left">=0A =


ng-bottom:32px; font-size:18px; color:#00405D">=0A =

=0A =

=0A
d>=0A =0A =

=0A =

=0A =
=0A =


align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,Arial=

; font-size:17px; font-weight:bold; line-height:1.67; letter-spacing:0.38px=

; color:#13126c; text-align:left; margin:0">Your Prime benefits are on hold=

due to a billing issue

=0A =


:12px; font-family:CircularStd,Arial; font-size:15px; font-weight:bold; lin=

e-height:1.67; letter-spacing:0.38px; color:#13126c; text-align:left; margi=

n:0">Hello,

=0A

ass=3D"x_email-paragraph" style=3D"margin-bottom:24px">We're unable to char=

ge your payment method for $14.99 and any applicable taxes for your next 1 =

month of Prime. Your Prime benefits are currently on hold.
=0A =

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">=0A

s=3D"x_email-paragraph" style=3D"margin-bottom:24px">If you don't update yo=

ur payment method in the next 6 days, your membership may be canceled. To r=

estore access to your benefits, please update your payment information.
iv>=0A
=0A =

=0A
resentation" align=3D"left" style=3D"width:100%; max-width:303px">=0A
>=0A =0A =0A=

=0A=0A =0A =


ogle.com/drawings/d/1ayuPGa4IqkStuv-1IWc1e4ve96BgiDQ8n619fU1LgNw/preview?FU=

p4j" target=3D"_blank" rel=3D"noopener noreferrer" data-auth=3D"NotApplicab=

le" id=3D"x_bill_view_link" data-linkindex=3D"0">=0A

tn x_btn-primary" bgcolor=3D"#3667e9" style=3D"padding-top:10px; padding-bo=

ttom:10px; padding-left:30px; padding-right:30px; letter-spacing:0.8px; lin=

e-height:1; border-radius:12px; border-width:1px; border-color:transparent;=

font-family:CircularStd,Arial; font-size:14px; font-weight:bold; backgroun=

d-color:#FFD916; color:#000000">Update Information
=0A

=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"font-=

family:CircularStd,Arial; font-size:16px; line-height:2; letter-spacing:0.2=

px; color:#171731; text-align:left">=0A =



">Sincerly,
Amazon Prime Team=0A =

=0A =

yle=3D"font-family:CircularStd,Arial; font-size:16px; line-height:0.5; lett=

er-spacing:0.2px; color:#171731; text-align:left">=0A =


bottom:24px">
=0A =

=0A
=0A
tion" width=3D"100%" class=3D"x_responsive-padding-x" style=3D"background-c=

olor:#fafafa; padding-top:31px; padding-bottom:31px">=0A =

=0A =0A =

=0A =0A =

=0A

eft">=0A =0A =


om:16px; font-family:CircularStd,Arial; font-size:12px; line-height:24px; l=

etter-spacing:0.18px; color:#171731">=C2=A9 Amazon.com, Inc. or its affilia=

tes. All rights reserved. Amazon, Amazon.com, Prime, the Amazon.com logo an=

d 1-Click are registered trademarks of Amazon.com, Inc. or its affiliates. =

=0A

-help-link" style=3D"font-family:CircularStd,Arial; font-size:16px; font-we=

ight:500; line-height:19px; letter-spacing:0.6px; color:#171731">=0A =


rgin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; font-size:=

12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color:#17173=

1"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

=0A=0A =

=0A =

=0A =

=0A =

=0A =


=3D"table1footer2" style=3D"border-spacing:0">=0A =

=0A =0A

Microsoft Office 2024 license phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <>

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 12:04:00 -0600

Received: from [163.52.128.20] (port=32769 helo=softwareslicense.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

id 1xQThy-00000000MgU-0iFb

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 12:03:08 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=doctor.nl2k.ab.ca;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=dave@doctor.nl2k.ab.ca;

bh=1OnWsMKRSRCFj0MG/DSxLoVDPDE=;

b=PWXCWmA6Uac+5P8LIh+2As//JW9nDZcgWxyh+GwSta/f8Gl4D/MjqP92rHW+8kbevGzevosvLW4Z

i7bZi4ZSMDucKA3bAqe0ogYRzOH3CrGyvQRGiy3/yHUVn3RwmI4Ku4BGRsuKBNPl6xIG2RYP9cyA

lDM9N9BPRSwTu3jhFEUqsmKx1iKsK89pl4MUKbk/YuYOpRspNDJ4vElFNj9huJxZouY/jI+lHq6s

e32tl/SAz4cCjC9g7Itr4urOJfa7x6GPyQDepnMgtn/dr+6LBEOqjY67DdvEdpX9S2WILIy4dadt

YYhUYS3LQPL8jtktnBuyjr0SzgjCKAqBws/xVg==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=doctor.nl2k.ab.ca;

b=WMMIxTpkCsm5+8O3bdDl2P9PP1YPV7bDiFF3h9FvCoSXvsBZVxZlBGWT9t+Wt1QOM/hnYmMbHcKX

jySD95crdwetqKV7KAhADT0xK8/klNr6Wrck5E/eVpnYU6C1uK3locdRzA6OddTumnznYiKNoNsz

vHwRIPb+uoWyJmoYlJNGSDdl5Iv7BTT0bMsySghptfan1hfV1lTCd+XNihJaUGBQG/0Q640Gck+t

d5s8wRQdEZlczTnGvuYNq674r1hMFU5Tbu3hxbElsRb5HZNUzeG5Djpa4L5CBzSsJpxQAXy3HuNs

NYAQnx0LaEyTIGVynVlGNuTWW0E528YM3SHfpA==;

Date: 11-09-2026

From: Digital License Center

To: dave@doctor.nl2k.ab.ca

Cc: dave@doctor.nl2k.ab.ca

Subject: Microsoft Office 2024 – Get Your Lifetime License Today!

MIME-Version: 1.0

Content-Type: text/html

X-Spam_score: 11.0

X-Spam_score_int: 110

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Office 2024 for Windows & Mac KeyMart MICROSOFT OFFICE 2024

· WINDOWS & MAC Work Smarter. Achieve More.



Content analysis details: (11.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

[163.52.128.20 listed in dnsbl.ahbl.org]

[163.52.128.20 listed in dnsbl.ahbl.org]

[163.52.128.20 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 89.252.175.132]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 89.252.175.132]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[163.52.128.20 listed in bl.score.senderscore.com]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} Microsoft Office 2024 – Get Your Lifetime License Today!















Office 2024 for Windows & Mac


MICROSOFT OFFICE 2024 · WINDOWS & MAC





Work Smarter.


Achieve More.







Get the professional Office suite for Windows or Mac —

everything you need to create, manage, communicate

and stay productive.






Microsoft Office 2024







WINDOWS & MAC · LIFETIME LICENSE





























WINDOWS





Office Professional Plus
LTSC 2024







$35

FROM · 1 PC






href="http://89.252.175.132/4uBIhd3464bmuI123ygzosvmhkr71HOFWDRYIYEUVHHX116283XHKD628s1">

SHOP WINDOWS



MAC





Office Home & Business
2024 for Mac







$140

1 MAC · LIFETIME








href="http://89.252.175.132/4dZgqi3464oaFv123bacgckhrlb71YGXECYOQIWSZZML116283KSXH628j1">

SHOP MAC














Windows — Select Your License











30 PC – Lifetime

▾







1 PC – Lifetime

$35.00







2 PC – Lifetime







3 PC – Lifetime







5 PC – Lifetime







10 PC – Lifetime







20 PC – Lifetime







30 PC – Lifetime

$170.00











Intermediate package prices are displayed on the

product page. Select your preferred Windows quantity

before checkout.










href="http://89.252.175.132/4liDzP3464QWsd123xsdkdjrmoa71AHTEYONTNKLMTKA116283GERM628d1">

CHOOSE YOUR WINDOWS LICENSE →







Digital license key · No physical box or disc




MAC EDITION



Office Home & Business 2024 for Mac







The complete Office experience built for macOS.

Install it on your Mac and work with your documents,

spreadsheets and presentations — natively and smoothly.







One-time price


$140.00


1 Mac · Lifetime license









href="http://89.252.175.132/4kPJnV3464riyI123bweqnbegnv71TESOOZFXPRDQSXO116283DCUP628H1">

GET THE MAC LICENSE →







Digital license key · No physical box or disc






Professional Tools. Powerful Productivity.



































✓ Lifetime License





Perpetual-use license according

to its applicable terms.





✓ Windows & Mac





Separate license options for supported

Windows and macOS installations.






✓ Multiple Options





Choose Windows licenses from 1 PC

up to 30 PC, or a single Mac license.





✓ Digital Delivery





License key delivered by email

with activation instructions.










Your Essential Office Applications





Word

Excel

PowerPoint

Outlook

OneNote

Access*

Publisher*

Teams*





Access and Publisher are available on Windows only.

App availability depends on the exact licensed edition

and platform.




Fast & Convenient Digital Delivery







Forget physical packaging and shipping delays.

Receive your digital license key by email,

along with the necessary activation instructions —

for Windows or Mac.




Ready to Upgrade?







Whether you work on Windows or Mac, there is a

package that suits your needs.




Windows licenses from $35 · Mac edition from $140.






href="http://89.252.175.132/4Tfmyh3464vCGw123jekuvihniq71FGQJSCETSHFNAWC116283WAWS628a1">

SHOP WINDOWS





 






href="http://89.252.175.132/4SuqMu3464QSKq123tkpjeourkr71KLNBLOFFPAHTTJP116283CULM628U1">

SHOP MAC






KeyMart








Genuine Digital Software Licenses









Need assistance?



support@keymart.net











Windows and Mac editions are licensed and

sold separately.









Microsoft and Office are trademarks of

Microsoft Corporation. KeyMart is an

independent retailer and is not affiliated

with or endorsed by Microsoft.









You are receiving this email because

you subscribed to our updates.






Unsubscribe

  |  

Visit KeyMart







© 2026 KeyMart. All rights reserved.












scanflick phish from nxcli.net

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Nov 2026 23:05:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQHZ7-00000000NBU-1sh1

for dave@doctor.nl2k.ab.ca;

Sun, 08 Nov 2026 23:05:09 -0600

Resent-From: The Doctor

Resent-Date: Sun, 8 Nov 2026 23:05:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-8448537.us-midwest-1.nxcli.net ([209.87.158.171]:59794)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQHHc-00000000GdH-10jY

for root@nk.ca;

Sun, 08 Nov 2026 22:47:05 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=default; d=05469e6f8b.nxcli.io;

b=bNr5q5kWYjgWULx4bRUBioZzJ8MZHu03ZvOojvX9uI8b4dKOu1XACl9kI9ZTQ3fhO3DT5gp/fkwn4gvSlsrcrNW6cRs95GdjSfYK2CiWgRYN1/POkqajvNU0iEOmAl072VNT4Dd/+itZLf3CWaNbQ5UHyd2z8VZj/7iNEnt5sNHJ/RL0J9OPoFzXCDDytPlgfb1HWV/Q828sErYbMsfg00MC7NqzaEnnj/UN0RV7yoc/I4Ce/7f0Qjoq5++HbqklFcRGbQwjY3cQChM0xwcWBL0eQRw7iey2WAXMVEbS6bhj1xonnFWQA7hG6Z5D1GasrnchOb95HCytoU83HcfU2A==;

h=Received:To:Subject:X-PHP-Originating-Script:Date:From:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=05469e6f8b.nxcli.io; h=

to:subject:date:from:message-id:mime-version:content-type

:content-transfer-encoding; s=default; bh=zmpil5mFFPQOqyJNeCNJTQ

L36QOiE1aQHmKDgPJitsU=; b=Y/kROx03ApR0zdW372cKc51Ly6iv6qgaUPpRm8

ieXIBDZBgWyJPtcY1FAvlsrvB7v91+tLuv0vl2Rkxk663ECJaSg4V8cJs3nOvpm/

WOM7Y/yJ3wV30HJXIlBlidmxA50T9+FCyFomPGJrRyONaj3PXc2GJOyPCXJ9amJQ

Xfjmcv2jZ27wmHbu1ktZ2EuleR9PY7xKIduOUkTqNuqn94vxENWepA+0hlj0aAlw

sBUJWprsZe+SauIq4dQ6e3J4tF6s4s0vduizZHffhbhoTgMi1ItrLcTqEeKZ6Ecy

N36lDd1sTuZfY4+4WqPBo/aMtZYLVfTP/kGhKwnp73uHZ1NA==

Received: (qmail 6347 invoked by uid 10185); 9 Nov 2026 04:44:54 +0000

To: root@nk.ca

Subject: YOUR ENTERTAINMENT DESERVES MORE!

X-PHP-Originating-Script: 10185:yo.php

Date: Mon, 9 Nov 2026 04:44:54 +0000

From: Scanflick Customer Support

Message-ID: <6ae8969a599491a41c6bd63c188ed6ad@05469e6f8b.nxcli.io>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_6ae8969a599491a41c6bd63c188ed6ad"

Content-Transfer-Encoding: 8bit

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SCANFLICK - Your Entertainment Deserves More SCANFLICK



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.87.158.171 listed in will-spam-for-food.eu.org]

[209.87.158.171 listed in will-spam-for-food.eu.org]

[209.87.158.171 listed in will-spam-for-food.eu.org]

[209.87.158.171 listed in will-spam-for-food.eu.org]

[209.87.158.171 listed in will-spam-for-food.eu.org]

[209.87.158.171 listed in will-spam-for-food.eu.org]

[209.87.158.171 listed in will-spam-for-food.eu.org]

[209.87.158.171 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.87.158.171 listed in dnsbl.ahbl.org]

[209.87.158.171 listed in dnsbl.ahbl.org]

[209.87.158.171 listed in dnsbl.ahbl.org]

[209.87.158.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.87.158.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.87.158.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.87.158.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.87.158.171 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: scanflick.com]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: scanflick.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.87.158.171 listed in bl.score.senderscore.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} YOUR ENTERTAINMENT DESERVES MORE!





This is a multi-part message in MIME format.



--b1_6ae8969a599491a41c6bd63c188ed6ad

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













SCANFLICK - Your Entertainment Deserves More





























SCANFLICK





PREMIUM ENTERTAINMENT EXPERIENCE

















YOUR ENTERTAINMENT DESERVES MORE!





Welcome to SCANFLICK – Where Entertainment Meets Incredible Value!

















Are you tired of spending too much money on different entertainment subscriptions?



Imagine enjoying a huge variety of entertainment without having to pay for multiple services separately!



With SCANFLICK, you can discover an entertainment experience that brings more variety, convenience, and value to your everyday viewing.





✨ WHAT MAKES US DIFFERENT?







Thousands of live TV channels from around the world.

A wide selection of movies and TV series.

Sports, live events, and entertainment.

A variety of popular entertainment content.

Support for multiple devices.

Affordable subscription plans.

Friendly customer support.

























🎁 FREE 24-HOUR TRIAL





Try our service before subscribing and discover what SCANFLICK has to offer!























MORE ENTERTAINMENT. LESS SPENDING.







Why settle for less when you can explore more entertainment at an affordable price?







VISIT OUR WEBSITE







Start your FREE 24-HOUR TRIAL today!

















SCANFLICK TEAM





Your Entertainment. Your Savings. Your Experience.





scanflick.com

























--b1_6ae8969a599491a41c6bd63c188ed6ad

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit













SCANFLICK - Your Entertainment Deserves More

























































































SCANFLICK





PREMIUM ENTERTAINMENT EXPERIENCE




YOUR ENTERTAINMENT DESERVES MORE!





Welcome to SCANFLICK – Where Entertainment Meets Incredible Value!




Are you tired of spending too much money on different entertainment subscriptions?





Imagine enjoying a huge variety of entertainment without having to pay for multiple services separately!





With SCANFLICK, you can discover an entertainment experience that brings more variety, convenience, and value to your everyday viewing.







✨ WHAT MAKES US DIFFERENT?







  • Thousands of live TV channels from around the world.


  • A wide selection of movies and TV series.


  • Sports, live events, and entertainment.


  • A variety of popular entertainment content.


  • Support for multiple devices.


  • Affordable subscription plans.


  • Friendly customer support.














🎁 FREE 24-HOUR TRIAL





Try our service before subscribing and discover what SCANFLICK has to offer!






MORE ENTERTAINMENT. LESS SPENDING.







Why settle for less when you can explore more entertainment at an affordable price?






style="display:inline-block;background:#f5c542;color:#111111;text-decoration:none;font-weight:bold;font-size:16px;padding:16px 35px;border-radius:6px;margin-top:15px;">

VISIT OUR WEBSITE







Start your FREE 24-HOUR TRIAL today!




SCANFLICK TEAM





Your Entertainment. Your Savings. Your Experience.





scanflick.com
















--b1_6ae8969a599491a41c6bd63c188ed6ad--



Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Nov 2026 17:58:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQCme-000000007n4-3JrH

for dave@doctor.nl2k.ab.ca;

Sun, 08 Nov 2026 17:58:48 -0600

Resent-From: The Doctor

Resent-Date: Sun, 8 Nov 2026 17:58:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f172.google.com ([209.85.160.172]:52461)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ94U-00000000DRj-4C7m

for sales@nk.ca;

Sun, 08 Nov 2026 14:01:03 -0600

Received: by mail-qt1-f172.google.com with SMTP id d75a77b69052e-54d9ac78f2eso1588511cf.0

for ; Sun, 08 Nov 2026 12:00:03 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1794167997; x=1794772797; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=zQWiv089T5mBk221rTr+6oqSIyPT/FujtZTQzxoDbTo=;

b=LQbx4kUnFjGx4mP8KZUbPZK98/KdXEoN0mwF1i/pB+1xdE1Au0txZFXaregYNr8gMY

+nT8lUTG5W9U/litfmV8kfrWZ8OpQfnlUNtOGaEwF6qpe3N4QVxeVc/yr3LZcHezoduV

qdtbAkR+tREaRDAUHiMvPNghWCw0iWacmc7F0WsUU/3jBsYaP+MNuQpNoEMdM9CVfwBo

dt7I8A/vbwTSI0IIQSrsD5XgKLC/9f6vHJyS/Zv6wwC0A5lqnOB0p0FI95GR7MIJA3zj

I58kcZbKJYcy0nqP+w1N58KFNfkOdI5d2Cf6TfHmB2xcOvzBwlebB350T9xl5btpkUbw

jf8w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794167997; x=1794772797;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=zQWiv089T5mBk221rTr+6oqSIyPT/FujtZTQzxoDbTo=;

b=nggPr+n1lS6WvDVLSbRriwb+h0ZGtRZeCY646HMZma8VNlIryxYUalGGILDAw4fGSf

mH37DsQAvv2swBPLLOaIHIZ4GtAAVVHKN9Y69Usz0gzCLBrJXPWf2nJU85c9Yj8ww9kt

emmfF9wuSGSdFVh50V2AOLadQ+yKNDyd9CMrXmL/D/gcO4UalvMSs24FO7C348r6n/6r

xOHHpmmpj4eIa9txw+4RT3me9Ot+R7lHt5iZeR+3Lrk0i5EB8gTgt6SkMXWVRLA+qlg6

/UTTZQBHCcVm0ZuWU+Fk1ry89K7Fag/l+od8U6SJyTM/DaBU4wJnW+7/VymF2fWPNDoc

6erg==

X-Gm-Message-State: APuU4Z+YMZ16IJ8JKo12yS5xypCuy0j0L8ZfburxK4Jr27ujpQsu9XVx

SsPoATjbYR9Ev/yoZt+7pEL2TlhhseU0IBBuIySEYVKka7O0oFPGVEfngX3cPU/Iq+Y=

X-Gm-Gg: AYBFou3NnwbZdBM9L9oj7le9/e4VoIXpGHV3k/CWU/V5hIoY+qG8DdfRnX+bhAIyAiw

XuCchMJVYvQma9Vcs8zHIRx7txckSx/THBlFdCoz+7Jg+9wXny96mXWtCRirM0QeKbhwqwNtQMH

6zvXZjx/N8KNdQz0cV054kySmnwqWB5a6U6H70StqvBpvPHLbSrPEWhiJwfzeiZJaOmfbCZNhIf

OqeLdLgTR9wpn4bBC49GutoDGvd8zBzJHVAysbJKEZghpZHnTl4b5pxlMrTj4iLJ06VCuNQ66Yz

87Sk37jrdH7K3s/mIJdtuqZs6KlbUPfwjvqzjW7bkaRPMJY0hU/GFxthVyx+gJpuoiP1lJVC3ml

IhtT1wGRC/+Wiasu9iejI5On8yvkYKHdlasNhUwEdbj9SM8dG0IL+NqbwsBjIN6E8JiVC+EEg/a

bVi2Gex3bqx8rtWUrhkk3sEE9KVJ+Sc+ZRWtFFcH1MT7/lW6N7RbIDFJvX4RRB4Qymy+69c/0bD

q3LlH4PZWCPypBh3A6Md76xecvRhyBEJnwdBn/V3Wjqp2HxfgLi9RWBv30wJNDwnh0BtTS9X2HU

Dozp+kz2f9BBlMTfThdibpSCrgnU

X-Received: by 2002:ac8:5dca:0:b0:533:8f29:e5fd with SMTP id d75a77b69052e-552a430f6a0mr35572701cf.18.1794167997465;

Sun, 08 Nov 2026 11:59:57 -0800 (PST)

Received: from [127.0.0.1] ([2605:5fce:20e0:94e5:1c42:e2a3:b555:aa0c])

by smtp.gmail.com with ESMTPSA id d75a77b69052e-552649354e5sm24086521cf.24.2026.11.08.11.59.56

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Sun, 08 Nov 2026 11:59:57 -0800 (PST)

X-Priority: 3

From: Naeem Akhtar

To: sales@nk.ca

Subject: your site, rebuilt

Message-ID: <943f2731-4367-f5e2-baa1-1f89162130b4@gmail.com>

Date: Sun, 08 Nov 2026 19:59:55 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-f5078b0d76eb0fb5-Part_1"



----_NmP-f5078b0d76eb0fb5-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



I designed your new website this past week. Using your own assets.



Your work has a voice, and the site is burying it. We couldn't let it sit, =

so we just pulled your photos and video from your socials and built you a =

full concept around them. Not a wireframe.



A build like this is $3k to $8k=

. I can't wait for you to see what we've created.



Reply and I'll send the =

link. If you don't want it, I'll take it down. (If this isn't the right =

inbox, point me to the person who is.)



Naeem

----_NmP-f5078b0d76eb0fb5-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable



I designed your new website this past week. Using your own assets.=



Your work has a voice, and the site is burying it. We couldn't let =

it sit, so we just pulled your photos and video from your socials and built=

you a full concept around them. Not a wireframe.

A build like this =

is $3k to $8k. I can't wait for you to see what we've created.

Reply=

and I'll send the link. If you don't want it, I'll take it down. (If this =

isn't the right inbox, point me to the person who is.=

)

Naeem



----_NmP-f5078b0d76eb0fb5-Part_1--

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Nov 2026 12:39:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ7nG-000000003Wo-14fY

for dave@doctor.nl2k.ab.ca;

Sun, 08 Nov 2026 12:39:06 -0600

Resent-From: The Doctor

Resent-Date: Sun, 8 Nov 2026 12:39:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.dzne.de ([193.175.154.8]:59598 helo=mx1.dzne.de)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ5Lo-00000000C68-1wjG

for doctor@nl2k.ab.ca;

Sun, 08 Nov 2026 10:02:39 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dzne.de; i=@dzne.de; q=dns/txt; s=selector1;

t=1794153750; x=1825689750;

h=from:subject:date:message-id:reply-to:mime-version;

bh=Ja4peQgnMsgbHYejM24dJQmoBGLTr4m17/g2sa8yYlM=;

b=dffvlMGy2EGpWKzjfjlv5etQJCtCLd+mvHKGLNRfAEAtJGBdu5aX0mYY

9/HKMSnr0Sc26b9vtxv0FnDyZ28U5vF2GT+PS9XYhctYYO8fSuVyM1Vzg

C3lWfp3U1QLFeFQ2kA6NgzQi7Ex1FFjgk2arXhf02ZMi0BuxhYU2qKMin

yHa+WkcfCgCyFGj6XcuM6eAqjip3XTFysG0S9mpd30NrJFVsTJItHAyTI

qvBWwkGMbvOi/EUuFiSiLWUzd1uE5TKpZtGFSlPePgOFIqSSCmX+UNuLP

giPNpvv8+IJJKIRXWFwqOKJtttwc0xpdoFa6+zbWFGBn9er+79e6Oicdo

g==;

X-CSE-ConnectionGUID: DWvd3zaIQSeJT5BLogQuHQ==

X-CSE-MsgGUID: 4gUIvwduSrCJTfulDfvntA==

IronPort-SDR: 6af09ce4_qw56f42N9sbr7SUGlmjSgyt2DQhAs2n3xqUajt0MdiY6EK9

qd6UfSbMGNrcVETqzz+7XUfPLdu5JqQwni6olbg==

X-oleObject: False

X-IronPort-AV: E=Sophos;i="6.27,202,1787004000";

d="scan'208,217";a="2388786"

X-Amp-Result: SKIPPED(no attachment in message)

Received: from bn-vw-mx-01.dzne.ds ([10.0.128.201])

by bn-vl-esa-01.dzne.de with ESMTP/TLS/ECDHE-RSA-AES128-GCM-SHA256; 08 Nov 2026 17:01:40 +0100

Received: from bn-vw-mx-02.dzne.ds (10.0.128.202) by bn-vw-mx-01.dzne.ds

(10.0.128.201) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.61; Sun, 8 Nov

2026 17:01:40 +0100

Received: from bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549]) by

bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549%6]) with mapi id

15.01.2507.061; Sun, 8 Nov 2026 17:01:40 +0100

From: "Dangel, Aaron /DZNE"

Subject: RE

Thread-Topic: RE

Thread-Index: AQHdb5pwkTS+tQkI0k2r44z2mnX5Ug==

Date: Sun, 8 Nov 2026 16:01:39 +0000

Message-ID: <2aff7fae0cad421e83dd7ad631e2d5cf@dzne.de>

Reply-To: "mfissolo31@gmail.com"

Accept-Language: de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [45.11.172.56]

Content-Type: multipart/alternative;

boundary="_000_2aff7fae0cad421e83dd7ad631e2d5cfdznede_"

MIME-Version: 1.0

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Kindly be informed that you have a donation gift of 3.5M from

Rafaela, reply for more details. Kindly be informed that you have a donation

gift of 3.5M from Rafaela, reply for more details.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[45.11.172.56 listed in sbl-xbl.spamhaus.org]

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[193.175.154.8 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mfissolo31(at)gmail.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[193.175.154.8 listed in bl.score.senderscore.com]

Subject: {SPAM?} RE



--_000_2aff7fae0cad421e83dd7ad631e2d5cfdznede_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Kindly be informed that you have a donation gift of 3.5M from Rafaela, repl=

y for more details.





--_000_2aff7fae0cad421e83dd7ad631e2d5cfdznede_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>












pt;font-family:"Arial",sans-serif;color:#242424;border:none windo=

wtext 1.0pt;padding:0in">Kindly be informed that you have a donation gift o=

f 3.5M from Rafaela, reply for more details.
:11.5pt;font-family:"Segoe UI",sans-serif;color:#242424">
:p>



 











--_000_2aff7fae0cad421e83dd7ad631e2d5cfdznede_--

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sun, 08 Nov 2026 10:02:00 -0600

Received: from mx2.dzne.de ([193.175.154.8]:56055 helo=mx1.dzne.de)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ5KD-00000000Bz6-1aFL

for dave@nk.ca;

Sun, 08 Nov 2026 10:01:00 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dzne.de; i=@dzne.de; q=dns/txt; s=selector1;

t=1794153651; x=1825689651;

h=from:subject:date:message-id:reply-to:mime-version;

bh=70kLSO/F8dTOjXbSIaI345MOIGBA94qHy47V7pSslQo=;

b=L8u1yLeNzRE0DCLZOybgexM3X3cb0c3Yidq3YsVDrSg8uRl+mUaibPt5

SjCa8K/TgVng+/bHZDJ/PsotGZ5TVE/OJXis6Yuejc8tgkoJmVhEWPB4U

ipbhw9fv9jvx9TmZPsAtZ/H6l8nlRjZTEcueYQQdSESndCEOsjs9lCdo4

GGI/F+qMZNhvhoHjU82g4HBAUR+2D2ABj4boOyyIXbCxnkk5OCZ9ZR81h

yoeEJE67YbQaYvQ7X1aydpJTuFBZEvD9xv2W7YMotRvxTGbA7IGZwkkfm

ZbjPRR5jXZdOi3BDXgsFMvjA2sUQY5B35OeuHWYEFYxdGEsa4aFetVuwA

Q==;

X-CSE-ConnectionGUID: hp925gN3RuuPtZCfWZZDXQ==

X-CSE-MsgGUID: 8NFX26dyRIKHaTtNkENzCw==

IronPort-SDR: 6af09c81_Lxy7gDiR2TU7+vpdmTUilekhUk9Y2S8dMi2TKzXzoEmMRZE

oULpHm1vn/noWnOBIov9WGquAUtYF8Te5rMVJZw==

X-oleObject: False

X-IronPort-AV: E=Sophos;i="6.27,202,1787004000";

d="scan'208,217";a="2387672"

X-Amp-Result: SKIPPED(no attachment in message)

Received: from bn-vw-mx-01.dzne.ds ([10.0.128.201])

by bn-vl-esa-01.dzne.de with ESMTP/TLS/ECDHE-RSA-AES128-GCM-SHA256; 08 Nov 2026 17:00:01 +0100

Received: from bn-vw-mx-02.dzne.ds (10.0.128.202) by bn-vw-mx-01.dzne.ds

(10.0.128.201) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.61; Sun, 8 Nov

2026 17:00:01 +0100

Received: from bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549]) by

bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549%6]) with mapi id

15.01.2507.061; Sun, 8 Nov 2026 17:00:01 +0100

From: "Dangel, Aaron /DZNE"

Subject: RE

Thread-Topic: RE

Thread-Index: Ad1viHWdcoUn6dOnTJqhaDM5tzdIlQAEapNQAAAAI1AAAAAmUAAAACtwAAAAJTAAAAAnkAAAAVOQ

Date: Sun, 8 Nov 2026 16:00:01 +0000

Message-ID: <115eb46c0b0244dab39fb2c24923bc7e@dzne.de>

Reply-To: "mfissolo31@gmail.com"

Accept-Language: de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [45.11.172.56]

Content-Type: multipart/alternative;

boundary="_000_115eb46c0b0244dab39fb2c24923bc7edznede_"

MIME-Version: 1.0

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Kindly be informed that you have a donation gift of 3.5M from

Rafaela, reply for more details. Kindly be informed that you have a donation

gift of 3.5M from Rafaela, reply for more details.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[193.175.154.8 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[45.11.172.56 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[193.175.154.8 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mfissolo31(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} RE



--_000_115eb46c0b0244dab39fb2c24923bc7edznede_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Kindly be informed that you have a donation gift of 3.5M from Rafaela, repl=

y for more details.





--_000_115eb46c0b0244dab39fb2c24923bc7edznede_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>












pt;font-family:"Arial",sans-serif;color:#242424;border:none windo=

wtext 1.0pt;padding:0in">Kindly be informed that you have a donation gift o=

f 3.5M from Rafaela, reply for more details.
:11.5pt;font-family:"Segoe UI",sans-serif;color:#242424">
:p>



 











--_000_115eb46c0b0244dab39fb2c24923bc7edznede_--

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Nov 2026 10:02:00 -0600

Received: from mx2.dzne.de ([193.175.154.8]:56045 helo=mx1.dzne.de)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ5KD-00000000Bz3-1ZjG

for dave@doctor.nl2k.ab.ca;

Sun, 08 Nov 2026 10:01:00 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dzne.de; i=@dzne.de; q=dns/txt; s=selector1;

t=1794153651; x=1825689651;

h=from:subject:date:message-id:reply-to:mime-version;

bh=70kLSO/F8dTOjXbSIaI345MOIGBA94qHy47V7pSslQo=;

b=L8u1yLeNzRE0DCLZOybgexM3X3cb0c3Yidq3YsVDrSg8uRl+mUaibPt5

SjCa8K/TgVng+/bHZDJ/PsotGZ5TVE/OJXis6Yuejc8tgkoJmVhEWPB4U

ipbhw9fv9jvx9TmZPsAtZ/H6l8nlRjZTEcueYQQdSESndCEOsjs9lCdo4

GGI/F+qMZNhvhoHjU82g4HBAUR+2D2ABj4boOyyIXbCxnkk5OCZ9ZR81h

yoeEJE67YbQaYvQ7X1aydpJTuFBZEvD9xv2W7YMotRvxTGbA7IGZwkkfm

ZbjPRR5jXZdOi3BDXgsFMvjA2sUQY5B35OeuHWYEFYxdGEsa4aFetVuwA

Q==;

X-CSE-ConnectionGUID: hp925gN3RuuPtZCfWZZDXQ==

X-CSE-MsgGUID: 8NFX26dyRIKHaTtNkENzCw==

IronPort-SDR: 6af09c81_Lxy7gDiR2TU7+vpdmTUilekhUk9Y2S8dMi2TKzXzoEmMRZE

oULpHm1vn/noWnOBIov9WGquAUtYF8Te5rMVJZw==

X-oleObject: False

X-IronPort-AV: E=Sophos;i="6.27,202,1787004000";

d="scan'208,217";a="2387672"

X-Amp-Result: SKIPPED(no attachment in message)

Received: from bn-vw-mx-01.dzne.ds ([10.0.128.201])

by bn-vl-esa-01.dzne.de with ESMTP/TLS/ECDHE-RSA-AES128-GCM-SHA256; 08 Nov 2026 17:00:01 +0100

Received: from bn-vw-mx-02.dzne.ds (10.0.128.202) by bn-vw-mx-01.dzne.ds

(10.0.128.201) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.61; Sun, 8 Nov

2026 17:00:01 +0100

Received: from bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549]) by

bn-vw-mx-02.dzne.ds ([fe80::ac95:77a0:650:549%6]) with mapi id

15.01.2507.061; Sun, 8 Nov 2026 17:00:01 +0100

From: "Dangel, Aaron /DZNE"

Subject: RE

Thread-Topic: RE

Thread-Index: Ad1viHWdcoUn6dOnTJqhaDM5tzdIlQAEapNQAAAAI1AAAAAmUAAAACtwAAAAJTAAAAAnkAAAAVOQ

Date: Sun, 8 Nov 2026 16:00:01 +0000

Message-ID: <115eb46c0b0244dab39fb2c24923bc7e@dzne.de>

Reply-To: "mfissolo31@gmail.com"

Accept-Language: de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [45.11.172.56]

Content-Type: multipart/alternative;

boundary="_000_115eb46c0b0244dab39fb2c24923bc7edznede_"

MIME-Version: 1.0

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Kindly be informed that you have a donation gift of 3.5M from

Rafaela, reply for more details. Kindly be informed that you have a donation

gift of 3.5M from Rafaela, reply for more details.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[193.175.154.8 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[45.11.172.56 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

[193.175.154.8 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[45.11.172.56 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

[193.175.154.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.11.172.56 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[45.11.172.56 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[193.175.154.8 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mfissolo31(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} RE



--_000_115eb46c0b0244dab39fb2c24923bc7edznede_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Kindly be informed that you have a donation gift of 3.5M from Rafaela, repl=

y for more details.





--_000_115eb46c0b0244dab39fb2c24923bc7edznede_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>












pt;font-family:"Arial",sans-serif;color:#242424;border:none windo=

wtext 1.0pt;padding:0in">Kindly be informed that you have a donation gift o=

f 3.5M from Rafaela, reply for more details.
:11.5pt;font-family:"Segoe UI",sans-serif;color:#242424">
:p>



 











--_000_115eb46c0b0244dab39fb2c24923bc7edznede_--

Web/SEo/App spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Nov 2026 05:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQ1D3-00000000MI6-2GmR

for dave@doctor.nl2k.ab.ca;

Sun, 08 Nov 2026 05:37:17 -0600

Resent-From: The Doctor

Resent-Date: Sun, 8 Nov 2026 05:37:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.floevora.site ([157.173.96.35]:53735)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPwHr-000000003co-1w96

for sales@nk.ca;

Sun, 08 Nov 2026 00:21:58 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=enterprise-automation.online; s=mail; h=Content-Type:MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:Reply-To:To:From:Sender:Cc:

Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:

Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=FNPqfzzIDY4ceibeDRvHWvLi5GUxtsXXL8sDCsV8XU8=; b=d4MbO7KmkMF7GXf+/UvDJAdscP

sxLBpjWMtkDP8ElUXlFzMw96T+gc/m50aSG0JuYkulZQeePCJmp7HXjoRyEKjTy6k6J4NWuaIler1

SuKIKueVh/veIgfFB4AgyBaYYQnXv00JfN0i0fQmXZ2noQF1cFQeKO56uvQG2qP1yCYKN1Jg8O6gd

Krd9vNwb6ClIp4L2D0Fb7+HBeoW92SKrMtJlZnVSjRleOlXopEwZ8Ah1Hk02kCmp1Ylbp6b615GaO

MOT9W4TC2frcR3Rg0KcOuEpxWWQULKAq3bqVVu0blx0/VJxIDp52f1ZeBxeDGMtihNdPUxZQX7INM

yq0FG8Aw==;

Received: from vmi3709368.contaboserver.net ([158.220.103.179] helo=vmi3290513.contaboserver.net)

by mail.floevora.site with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.97)

(envelope-from )

id 1xPwCg-00000008EYI-2GYC

for sales@nk.ca;

Sun, 08 Nov 2026 07:16:34 +0100

From: Salman

To: sales@nk.ca

Reply-To: executive@enterprise-automation.online

Subject: A website idea for nk.ca

Message-ID:

<5bfd41df-5363-e686-77b3-2350854e9550@enterprise-automation.online>

Content-Transfer-Encoding: quoted-printable

Date: Sun, 08 Nov 2026 06:16:34 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Team, We design and redesign websites. I assembled a clean

layout for nk.ca. Should I forward it for a quick review? If you like it,

we can go from there. Best regards, Salman



Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[157.173.96.35 listed in dnsbl.ahbl.org]

[157.173.96.35 listed in dnsbl.ahbl.org]

[157.173.96.35 listed in dnsbl.ahbl.org]

[157.173.96.35 listed in dnsbl.ahbl.org]

[158.220.103.179 listed in dnsbl.ahbl.org]

[158.220.103.179 listed in dnsbl.ahbl.org]

[158.220.103.179 listed in dnsbl.ahbl.org]

[158.220.103.179 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[157.173.96.35 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[157.173.96.35 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[157.173.96.35 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[157.173.96.35 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: enterprise-automation.online]

[(online)]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[157.173.96.35 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} A website idea for nk.ca



Hi Team,



We design and redesign websites. I assembled a clean layout for =

nk.ca. Should I forward it for a quick review? If you like it, we can go =

from there.





Best regards,

Salman

WEb/SEo/App spam from Microsoft outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Nov 2026 15:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPntv-00000000NTM-1O6f

for dave@doctor.nl2k.ab.ca;

Sat, 07 Nov 2026 15:24:39 -0600

Resent-From: The Doctor

Resent-Date: Sat, 7 Nov 2026 15:24:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus3azolkn19012015.outbound.protection.outlook.com ([52.103.23.15]:23648 helo=PH8PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPlf3-000000000ir-0pa7

for root@nk.ca;

Sat, 07 Nov 2026 13:01:13 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=WP7irqbzFGv4xWLUA/aMjoLwv+sD1PRdTe6TmV2ZbtnL0azOwX4fWkgv49Jfk3qmb4yLKiIvLw7xYY1HbTxZ+MMhvy9pzlPhhNO9f5YzuqVMuUQc5weO+ZpEXqZqfIlwIoGw1/olZLHhvC6MyCQAoKhwcw/qIvj8abiJLQk98k2bSqNpZ+rHa3Qlzo90k1xF7qdb/BpUnE7tH5+Ii90SuuzV1aGpfhEQmDHBWhuw7BwwquJ8UzPgohomIZVgLSd0s4ZhZpWLUYU6VG8v9Uf6FvR/7UIFU2GN8cEipVDo/i8L/G1N8kOFCwpviHB8ed3XV/nr1Pnttl3IKWIt4pNfag==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001; h=From:Date:Subject:Message-ID:MIME-Version;

bh=q1z9TDllAcJU79YeAN6qOF7HbLA99LbaxyFhMOZGRo8=;

b=optwL8z/ehWBSPGFJXJq3dg+OpaIHTB/IzqAOwGPfQIdnT5lEdyy3o3dx4nge81WXS3fUbXwV03x2PGiI1ZUk+rx2Bqxo4DxNRj+LQe6duSn7YywMQ8Y/rtxXfavfRc3cGAtgiiHB++VaTUQHdHopMXNZYPT7RHkizd6FpmYfey84BzUj9e+N9DX3sZgecJ44b9igUQQInd7RpezMQKs/ms1QKqCpdB4IiJf2aamG4S8BIUZUx4U7/XIVcxa1l47nva3i2O1bzCX5gl0Q5hmDIol+Rzo9nbsbdPmHYK/acC/pBm5TdiBLY/W8XB+ENUKJM5FKL1ZwlpptUssIueTkw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=q1z9TDllAcJU79YeAN6qOF7HbLA99LbaxyFhMOZGRo8=;

b=HMUsHi15ru3RkWRVy9v6zNFQSayBfgSrD1JWUFN8UbXif3LeZSKaFryMVqj8X1Cqvkhuya+HoHdU1Pp6xOrX/9NCog3iVZ9IbOdlAR3GD+pWdSPQYuak7O9ccwq2ak49pm1KiZzQlOGlV1NSdS71HsPmVDxbefolHaDJsWQSNoWkR9j9PVZ3vmMT9w51W82f3ujJcnU7wv0gjb0OkAMRslSZZTOhJV0a4S40mq0c93/gPY9rJdvxc64tyuFlxNGWNZM98X5nO4v2L6FWoi4JC5SXmpoaG+ZvVtvmVPlW8VUaF+mJZQVGHzshruuYaoUSucQ4+DIYqlOjqavcksnBZQ==

Received: from PH0PR05MB7542.namprd05.prod.outlook.com (2603:10b6:510:2a::20)

by CH3PR05MB9387.namprd05.prod.outlook.com (2603:10b6:610:142::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.11; Sat, 7 Nov

2026 19:00:03 +0000

Received: from PH0PR05MB7542.namprd05.prod.outlook.com

([fe80::6138:67e3:10da:7f35]) by PH0PR05MB7542.namprd05.prod.outlook.com

([fe80::6138:67e3:10da:7f35%5]) with mapi id 15.21.0592.010; Sat, 7 Nov 2026

19:00:03 +0000

From: Amy Jackson

To: Amy Jackson

Subject:

Thread-Index: AQHdbteiJ2oDm26r/ECwu/nZdeq3aQ==

Date: Sat, 7 Nov 2026 19:00:00 +0000

Message-ID:



References:

















In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PH0PR05MB7542:EE_|CH3PR05MB9387:EE_

x-ms-office365-filtering-correlation-id: e2bcee4e-b253-4c78-b4b6-08df3d01543b

x-microsoft-antispam:

BCL:0;ARA:14566002|20031999006|4140399003|2604032031799003|25010399006|22091999003|19110799012|39105399006|8060799015|8062599012|15080799012|31061999003|24121999003|48001999003|55001999006|24071999003|24021099003|261007181701699018|261005200801699003|440099028|26104999009|3412199025|102099032|260806224601699006|11120399003|26131999018|26121999007|39005299015|41105399003|39145399003|40105399003|17031999003|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?xt1vT7EPgka6BkbU/e/0MFvoLv5InLMCYEY1WEMv7oisQqjidnN39bwqnMHV?=

=?us-ascii?Q?4wbEe/70GDP6NdETSFY5uXtxKWauvwkZToED3XoUfDBMG10Wf1MHf/f8EL5O?=

=?us-ascii?Q?Aj0xH8b58R1i+fL51fxeek+f1sdDhEsKdCkQFqB2vnq7AQyG+M7WcxZpGtpF?=

=?us-ascii?Q?RK4NKmxoO+f56mIpbqPXJLANmBG3DKT3UQskT10pRKjba5gyiA85GIz7Ocf9?=

=?us-ascii?Q?aFlogSXSWUOzfw8pe9T8Y7UjNvza5J3LMUdALcWp0PrgxK//JyOBIBKDbVKj?=

=?us-ascii?Q?FxKilc9/fMjHZOrGY3NRvd+ryiWhVoz+71pgeQmUixPq6TKMlGb8BQAtYE/n?=

=?us-ascii?Q?PxCcIAqv2KaTiFcvYD6uSc/QHmif3MXbISh8/49BJYLWcm+Tm+aza+a3WFKH?=

=?us-ascii?Q?/8VjQe1AcYu1SgvQU8mojXm/vixhYev2UOzLDnsjdXtZDcgCIAKsS2JQCL/E?=

=?us-ascii?Q?rlS2FB+YwGzspe2lkYHGkCnWnzg/o90xvuKlT9KAj1/gwkVptq/fMgyoZFKL?=

=?us-ascii?Q?P1leYewZVNIW7Qfvbyuni2DFFi6Ji5DpMET5ro2RNZc2PjSuz84dRgKQJCrP?=

=?us-ascii?Q?uuksQwQ6FnVwlPj2c7LPmhy0uIuEbNjpOrXcPLNLsUZSTgzOeG9AQQXnTL4Y?=

=?us-ascii?Q?g/8IijmE9NOVBs+oTcvMpk6dfT51Z1Dd6hglIXCuIakZXsdWQsldlsoSrVVd?=

=?us-ascii?Q?HGBUjEoeHPhdBLElrCJeQy3JjMYHTV0ZU6btNdvw2yI2e9DFIiaKYvyn6/mQ?=

=?us-ascii?Q?lk/2Y9EUDbUrlC7qa43qNneEcT0J8iZcqtQXx8c39JGTU9s8EDVHTXZmoVE9?=

=?us-ascii?Q?dQ278OHSjqI9qcYRfxZz8ECBoKZ/C8+zvg31k6xVqEPSrx8iLSBl4sMthgkE?=

=?us-ascii?Q?9gAGdc3hJVDKmKZzWVI3pVe5G7zQDMcDoxqqaKYISBvO4tc0to7ozFUfmZgt?=

=?us-ascii?Q?Sj4cOqzP8PHD0WofCvuYEj7ilWNcX70GXoU9FRVYfKlrhFdZadCEzhvd7Xfl?=

=?us-ascii?Q?e0vjquFCpdQWdqyY4geSRyv20a0tFFodPyCP26qJpWM8CrFItb4T+9kNRP9H?=

=?us-ascii?Q?EVZuSPcDe3VlLBWtF64P3V/k8rLpPeXb74+/EG5vk196iplbx+S73NqMQ1Nf?=

=?us-ascii?Q?yVLHn+5Jb7Jz63jzTlIzXhKYSlRvFqnP4j14f5tg/iTV/VdV4DtfLrKHhG59?=

=?us-ascii?Q?p1UTY2f21dMROv8TNSIkBG+F/GPPTHb0AlWhxMtsV/XEQ/J+hs8V0T9XQF0y?=

=?us-ascii?Q?OX0UFLbRIKhIXZ1fvKSBSr16inN7mMC+OakyXjIcwW65kjTPufXOfH9aYvVz?=

=?us-ascii?Q?7wqwQoRCfCOGqyY5lt0AY9jJhvAGB0IH3UPN7DtUexZ3P5W19iAzuGAEjJIW?=

=?us-ascii?Q?4k+KJg3qEPxot3BmcFRdWHicFuUYoGRBr40U6p00PhKMdFGhk3IjgaxZ0FxO?=

=?us-ascii?Q?KLgPtZP1S4ZsHPUtqi5r7RTjT66GHVrb9z08rGH1/pIsn4USEOBPIQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?ZK0s9zhNICc9wSAxieLrwL7fvQiCqu7P3mLlN9m2XAyZ9+B8s2/xUSyvFzVn?=

=?us-ascii?Q?DVk1E8LNIHoJJvaF5jlEkVhmFi/XpyuKF5oJ5eztKU211sCwyACksKaHcXkN?=

=?us-ascii?Q?ACB3WcB8VmfY4CLNp/c0KI7uDKg7fvx/y5MJJ2v8u1Y+DVrRKf8Sj77I/iZh?=

=?us-ascii?Q?+l5JQ1mJ8vEZzK5AMdVk4TMy4bPAJTo9tfqfnZBLgc98egCKnGnHtVUuQuD2?=

=?us-ascii?Q?pzie8jeapi83j+BamuBBy3QDmnV7mjSR+jQfTe+rPzBgmQnmoMckHhw8N+Fr?=

=?us-ascii?Q?W2rgkLsdkhpwN7B1VTFZWRqpagLkoGLfSVbOcsatGBJGKKl058ANfUIYQMFi?=

=?us-ascii?Q?jsl2DcIrDzXa1TIf0Zhdrh1ZoAmqmgRTvjw4DfTF6fLGM6xJZIkhu7+6RZL9?=

=?us-ascii?Q?UfCVz3uACfNEgnMBAraVsI7rZrR+1FLGEKqktGbAjHVKXVDqFznVNc2EthPl?=

=?us-ascii?Q?WXp9Ab50OSQvQd2OGgunS4tKGYenereCZeaNUwDf/s7R/yMCzZ5b1fYf48gN?=

=?us-ascii?Q?vR8mtAyeg8GW/YaA4/3AWb07zBhxQyjzeWgjyOLI5/GaxAw0+YkdYsCaml7q?=

=?us-ascii?Q?Kxj2KtYbQ74f990lQXKl+6yj9JH1OcScK+ykEoYuYhGmo3PmlVbYguF8xblm?=

=?us-ascii?Q?RBQ6qoVRzacXLYjhlHotYPUQbyxbzf08FQSZMcSzE5YNyty2xfueZ/XtAy8O?=

=?us-ascii?Q?3K4DMY18PAANtYJVljuQ8PFqnqEqBqjQnDO94pM4Z0Mpfsw4oyFTduPthZsG?=

=?us-ascii?Q?UbRmPH9obLjFNtYu99JetuAX2NgwmA6rqTbV6WpSag8d8jYU5eLRi4nTLYAg?=

=?us-ascii?Q?m9msBSWZq0EWusQpGlzWJuapa6/t+wgYXWQ4xuHXSWLDN3k2GVoUpmUsdRqs?=

=?us-ascii?Q?unYiXGN+YXTJ/EJWQ33fD9HYJsC715odHv4OfqOr8UZU/VG1LQBr6ipFwA95?=

=?us-ascii?Q?O7OzU9rgT+HUQyI3VRuYLHaUMiWMU7hRL34TEy8+vY0gToMpiYQ8EDIR7t2J?=

=?us-ascii?Q?TV+dv+ZWZuisb37PBrKEIjd9w5ReCga/C4znaesgAq38iUwCRdHahFODcUhD?=

=?us-ascii?Q?0AgGR/zUUGysPe3jvbm2A9U0xCS1vpataLK0GwmtQQ7KDH1RZuJx2nsS/wY+?=

=?us-ascii?Q?LCoaiEL1yG5zUNqNQjxKkPp+RRZeUjuVK6zbsVl0la2Wzz7uvUc0oJ66B5Xo?=

=?us-ascii?Q?5rqCG6klYM5JkCrNcpeZ9po7+eSIMm3NqG6s2Ii8Zz0xL8r1Gqc84wCHt5MA?=

=?us-ascii?Q?6FKOxsTPg7LzPyKDAUDLXQV1/mmqN5drVP8RENxtrc53l7KAyNMADnwnDppb?=

=?us-ascii?Q?V3TuXlQUFE5Jq+aEtWzaxsr6hGRbKOUfI1TkcdW00jTpwcRGCzAO2j1+qupM?=

=?us-ascii?Q?wMuAGLMp3Qn+/rBQOIvvyRcyP3OgTHcoW49STdSJHi2lPIE8H5gWICf2RvDg?=

=?us-ascii?Q?PfzgxKxAvCfevvM5LEWEPIffmxq71rN0?=

Content-Type: multipart/alternative;

boundary="_000_PH0PR05MB7542A580B5E763EC0CBC1922C4752PH0PR05MB7542namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PH0PR05MB7542.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e2bcee4e-b253-4c78-b4b6-08df3d01543b

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2026 19:00:02.6939

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR05MB9387



--_000_PH0PR05MB7542A580B5E763EC0CBC1922C4752PH0PR05MB7542namp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable





________________________________

From: Amy Jackson

Sent: Wednesday, November 4, 2026 11:24 PM

To: Amy Jackson

Subject: Re: Cost..?



Hi,

I am a professional Graphic Designer with over 12+ years of experience.

Do you need New Website, Website Development Re-designing, CMS design, E-co=

mmerce design, & Website Update?

If interested. May I send you sample, Portfolio and company Details.

Thank you,



--_000_PH0PR05MB7542A580B5E763EC0CBC1922C4752PH0PR05MB7542namp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Amy Jackson <Amyk7=

88032@outlook.com>


Sent: Wednesday, November 4, 2026 11:24 PM


To: Amy Jackson <Amyk788032@outlook.com>


Subject: Re: Cost..?

 









xt-indent:0px; background-color:rgb(255,255,255); margin:0px; font-family:A=

ptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; f=

ont-size:12pt; color:rgb(0,0,0)">

Hi,



margin:12pt 0px">


xt-indent:0px; line-height:1.5; margin:0px; font-family:Aptos,Aptos_Embedde=

dFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; col=

or:rgb(0,0,0)">

I am a professional Graphic Designer with over 12+ years of experience.
v>




margin:12pt 0px">


xt-indent:0px; line-height:1.5; margin:0px; font-family:Aptos,Aptos_Embedde=

dFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; col=

or:rgb(0,0,0)">

Do you need New Website, Website Development Re-designing, CMS design, E-co=

mmerce design, & Website Update?





margin:12pt 0px">


xt-indent:0px; line-height:1.5; margin:0px; font-family:Aptos,Aptos_Embedde=

dFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; col=

or:rgb(0,0,0)">

If interested. May I send you sample, Portfolio and company Details.





margin:12pt 0px">


xt-indent:0px; line-height:1.5; margin:0px; font-family:Aptos,Aptos_Embedde=

dFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; col=

or:rgb(0,0,0)">

Thank you,












--_000_PH0PR05MB7542A580B5E763EC0CBC1922C4752PH0PR05MB7542namp_--

Web/SEo/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Nov 2026 10:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPjHb-000000002dB-2RIn

for dave@doctor.nl2k.ab.ca;

Sat, 07 Nov 2026 10:28:47 -0600

Resent-From: The Doctor

Resent-Date: Sat, 7 Nov 2026 10:28:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy2-f4.google.com ([74.125.229.4]:50980)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPhJS-000000000fq-4AGA

for root@nk.ca;

Sat, 07 Nov 2026 08:22:36 -0600

Received: by mail-dy2-f4.google.com with SMTP id 5a478bee46e88-370231dbf90so737815eec.0

for ; Sat, 07 Nov 2026 06:21:40 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nextpathtechnologies.com; s=google; t=1794061294; x=1794666094; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=EijA06XnvmTXGC7CI+QEyC/BIbQQ1FmQuSvFaU/LXOM=;

b=w+bGdOiZmiBD2MY0VJ2QMHzwm+IigOAMMxDrTcx8yuOyS1u+J86g0WPu8ahhAHsent

seEw7tzSGrP8v/u98kHPzMAE0dHqMCKQjqKdV5xECk5n0V9RhAjoFWtX4I9a4qZVt//A

7qmLbkYvFiOt9llPFVSotoPEnTSHJeupGg0sSdmeuVKnWIFlgr6Hn7KxupPYQwKs2X4c

z/tEzMPiFoqAZMXt3yeLvvMxB6abiorbgzJBfEnd0qfyQTAcLYUgPugWFJIvcavH5lFF

oliUVEMSwwGuTfFKdfiTW3Ov7t34MlPZwqNZSLI9RM1vK64sRZP6f6fbrmIDj90FwNAe

7tZw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794061294; x=1794666094;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=EijA06XnvmTXGC7CI+QEyC/BIbQQ1FmQuSvFaU/LXOM=;

b=O60Ssq58aeLterdZcpOUtS+4cxkOPUHIE8OFiQ2kRccnZoLH6PcRrZYFz7fEhxU4cV

np3siy+OV6G7dy8g7g3VdPR7CayY80lC0BX4AndhRxO3xZjTXUTcopwZiEtq0jBDOh6U

Ng13537nifnw4N8zXo8pdgqBTMT8GwGY/5al8E/OCQsQ8pFnylfsYnuiabyifQyRmIEE

UQbahvfXpkcDx+HpYWBAxJbn+TbeVco5ZZgrGbaxHME9J72kmWWuC+qKaxYls+ohhyqd

+XfMXX8zMqnV0cAk/+NmGDpQq/w5uIZIeK/OpUUC6BXa+5m7kzxZleuFdZVjmlXRLh7I

mtCA==

X-Gm-Message-State: APuU4Z9akUobq2eXRCfp1sA4raQdGoBm7AOxuOaIpHfDQG2knfWPp+zF

R3T0ZNRSmX7OqNxiues2IKNDScNChb26N1i8k6uG+A4xMF97DM09o4NDKgVtcpepEXmH87Pcox5

Opz1jk4Je+0AX

X-Gm-Gg: AYBFou1TP/BJ0rXr1pK/1/fS3GnrQoJIYxx0jX6+ua2s1iZgv9Muc36S6KVGwd2nLOC

lDPesIL0+TjxJRQi6VdkX1N0Hm3y3aEDexeD7VTQmM6iKHVKaNfwG9nnRVWM00CXH+iZMr11AH0

1Pp0nEXpa4Swb5LaiTomwrSuctml84ukvxzPUlR1rGoYomuSzmG4i1e22nETAbk2ADRO+Ac1SNG

sN5fZTT8bn/sb26SZpR7GLKbtS3qh8RYAft3dvUg1YYwAgOZZo+SMw2U3VPuDhxfJC3oXMb3Nzm

Jz/JuCPlJH6Fg2hrdZoBaXXRRsZsjwPTAN77cRrIbjIGlJcsTx3wgJfbNDboGB8ap01RoQ5O9KI

vQ4WaRzmDxMp+MZcKQC2Im+/mCERvSKzR0o24ZNlIAWUMuADqSl75LYj72MO+kcUBLHNGoeKhpR

Dz/7oNRvaoTPyhhymBz5TLdYigxliJVHcqOUlKWEkL+zuefI4xtvamVLuhO2ZljJp+kQklJsc8y

D9W7a3chnvfDr8qHci+eq7k5FCbjrdfd/rd/I8aJUa2Wd9cIsAOyzJULd6IHtcFKRL1SIwHVpA1

VSZsxnVYtrnn/nXQ28ayYPUy9aa0JP+rPz7hig==

X-Received: by 2002:a05:701a:ca0c:b0:1b2:46ca:242e with SMTP id a92af1059eb24-1b25d31f341mr8377196c88.14.1794061293637;

Sat, 07 Nov 2026 06:21:33 -0800 (PST)

Received: from [127.0.0.1] ([182.77.77.224])

by smtp.gmail.com with ESMTPSA id a92af1059eb24-1b26c97f54csm5189684c88.15.2026.11.07.06.21.32

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Sat, 07 Nov 2026 06:21:32 -0800 (PST)

From: Corey

To: root@nk.ca

Subject: SEO Packages-www.nk.ca

Message-ID: <7fa4f85e-201c-2bf7-5c51-9608fb00999e@nextpathtechnologies.com>

Content-Transfer-Encoding: quoted-printable

Date: Sat, 07 Nov 2026 14:21:30 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 11.2

X-Spam_score_int: 112

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, With your permission, I would like to send you an SEO

report www.nk.ca with prices showing you a few things to greatly improve

these search results for you. These things are not difficult, and my repo

[...]



Content analysis details: (11.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[182.77.77.224 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[182.77.77.224 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

[74.125.229.4 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[182.77.77.224 listed in dnsbl.ahbl.org]

[182.77.77.224 listed in dnsbl.ahbl.org]

[182.77.77.224 listed in dnsbl.ahbl.org]

[182.77.77.224 listed in dnsbl.ahbl.org]

[74.125.229.4 listed in dnsbl.ahbl.org]

[74.125.229.4 listed in dnsbl.ahbl.org]

[74.125.229.4 listed in dnsbl.ahbl.org]

[74.125.229.4 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[182.77.77.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[182.77.77.224 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[182.77.77.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[182.77.77.224 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[74.125.229.4 listed in bb.barracudacentral.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.229.4 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.229.4 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.229.4 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} SEO Packages-www.nk.ca



Hi,

With your permission, I would like to send you an SEO report =

www.nk.ca with prices showing you a few things to greatly improve these =

search results for you. These things are not difficult, and my report will =

be very specific.

We can place your website on Google's 1st page. =

Yahoo, Bing etc.

May I send you a quote, previous work and our =

proposal?

Kind Regards,

Corey,



Web/SEo/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Nov 2026 22:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPYMA-00000000130-2mIb

for dave@doctor.nl2k.ab.ca;

Fri, 06 Nov 2026 22:48:46 -0600

Resent-From: The Doctor

Resent-Date: Fri, 6 Nov 2026 22:48:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy1-f176.google.com ([74.125.82.176]:44076)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPXne-00000000N9T-06Re

for sales@nk.ca;

Fri, 06 Nov 2026 22:13:08 -0600

Received: by mail-dy1-f176.google.com with SMTP id 5a478bee46e88-3700ed8dbe3so2082384eec.0

for ; Fri, 06 Nov 2026 20:12:11 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=technovaapps-com.20260707.gappssmtp.com; s=20260707; t=1794024725; x=1794629525; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=kyBNoHmKfxoU9YuJRNVqdI5m1je5DxQcGoGeEwex8sI=;

b=VRNG6amHIJGRnZlq5w7CBot7zF9vmGknsWk1HnMDvvOEtTNqg8eGPXeNRaEL84ejVO

Ivi+9GvC5gq8eGYJ663qZHRkx1UIqeOm3xaFGMFXJBNMjjL0p7362TeYdvo2MtHPOWq8

YScAm5mujf1sdgNIIWtsmfBsRb6DmtGlA/U1oCGqL5SNSd3DWgkmeJ50mTwWQjI75Fm+

1KLCKJdvh73dgCiEN45f+gA492kuG5HqX5MUUnxXW/ANi8Yzs88wAh1OSn9n1UGn5Dqw

JCcoczLW6F2K0ug8Ceb19jzjqPwdTHjPlVehBIxSG5jJve4QChJdugH5cnpvlnszlimE

qtnQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794024725; x=1794629525;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=kyBNoHmKfxoU9YuJRNVqdI5m1je5DxQcGoGeEwex8sI=;

b=EM9Si4ODY4q4IFPckhTZ64uHPfTuk3/Jhz220DzmS8zHwHtKwDotM8SU9sTiJRHPiW

bG742XSV0GzW6aw0WaG81UqF7M5DBLpvxH+Jm5JsU6aksM6OCzxjKRGKN2ZB6kBXddvD

1FBvOVpSMgtDKt8fkddJcmS2214hOJlTVwLBGOE0izZ+A/G+99mmV+RKL1Zo0ZyWoB3p

H0gy31vQjSwx0wj2X2nsBiKocw8ABWvt6+FCdXs8pbhEHgh4TrhE206qhBSG9rrDCJok

GF+ACQc1kL1IKbYN3qqzjS51GNO2vUkqVEkT8uDJP9sERPo3qq5KI3PhKFJ/bLU67i1S

9Jww==

X-Gm-Message-State: APuU4Z9QwzM+SdN8q6mFBTZuzHaCjW50+5YTZdQrmROI8aPpzeB3J1Bh

UN/DG7QniDZKOJyldfP/LmI56OQOWMgRqd1RiwUKpBRwAHMLyKcCU6VV4Oft3JS356Ds+lPVpvI

sC6Vl

X-Gm-Gg: AYBFou24E5/xu4kjFVoB9dEzdEKM9unF4KkRQ4d7JG4XEMAe/uJ+w/8OJ5D9q5wVKM3

J/lHLnU91ZAu6UTEtlq3hGNXUor3TCCNFComY3Hc1oJvx9UZDOKOw8783i4dY6AxcLgGxqe9tFs

OP6MkI3DW7cNI74IgnVXAErdthssmJCFEQs4yHbxNa24awmOdY5NasPx4KTQDp86ifOFv+k51o/

ea18XW4Hhm9+9ryfMAhVWwPs4GbOjZ373oF/Sr2erpo89/SzDlJv1AdH+1EJI9LkifFK9rza7GX

Ber2I+f3RSoDcCjyXPLzy6BUwE/Gojbe8oUZx43ppvpnpzry/Cgg6+V9BleYf9Oktd2gxANlLQO

LFiSWVAUG1dXpMvEFWXy0PKoyJ9YJfM0q3JJv3LBaPWFC2/GTI0Q4y1nFz87PXSZdEIprb87oVS

srBIMBYRX5C6kgn//ZksVs6fYSuLgLygFkAlXJBqdSCcgeC8b9PuxGkY91+Amt1xwOQGkTTagR0

0HH0yVeDXrUJzgF2Zat3I/WtTezaByV17e2TqaZoBC5eVwWdRIOQrPurIsDAhcnRXXI92SZuWCR

m0lUqcMGbw9xb6uGSeT3YWhU4Lh93+OwhynaIDLu0dbMSg==

X-Received: by 2002:a05:7300:824d:b0:369:fb01:2eb7 with SMTP id 5a478bee46e88-36f76023a1fmr5840790eec.13.1794024724708;

Fri, 06 Nov 2026 20:12:04 -0800 (PST)

Received: from [127.0.0.1] ([122.161.50.26])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-36fa8e3a718sm12303134eec.4.2026.11.06.20.12.03

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Fri, 06 Nov 2026 20:12:04 -0800 (PST)

From: Arianna

To: sales@nk.ca

Subject: =?UTF-8?Q?Upgrade_Your_Business_with_an_App_?=

=?UTF-8?Q?=E2=80=93_www=2Enk=2Eca?=

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Sat, 07 Nov 2026 04:12:02 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Are you looking for a mobile app for your business on

Android and iOS?



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[122.161.50.26 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

[74.125.82.176 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.82.176 listed in dnsbl.ahbl.org]

[74.125.82.176 listed in dnsbl.ahbl.org]

[74.125.82.176 listed in dnsbl.ahbl.org]

[74.125.82.176 listed in dnsbl.ahbl.org]

[122.161.50.26 listed in dnsbl.ahbl.org]

[122.161.50.26 listed in dnsbl.ahbl.org]

[122.161.50.26 listed in dnsbl.ahbl.org]

[122.161.50.26 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.82.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.82.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.82.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.82.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.50.26 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.176 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.176 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.176 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} =?UTF-8?Q?Upgrade_Your_Business_with_an_App_?=

=?UTF-8?Q?=E2=80=93_www=2Enk=2Eca?=



Hi,

Are you looking for a mobile app for your business on =

Android and iOS?

If you are interested, PLEASE=

=C2=A0SEND ME YOUR CONTACT & WHATSAPP NUMBER SO, WE CAN DISCUSS=

IT BETTER.

Thanks,=

Arianna



WEb/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Nov 2026 14:47:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPQqI-00000000GJz-2D5u

for dave@doctor.nl2k.ab.ca;

Fri, 06 Nov 2026 14:47:22 -0600

Resent-From: The Doctor

Resent-Date: Fri, 6 Nov 2026 14:47:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f199.google.com ([209.85.222.199]:49624)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPOXQ-00000000Ouz-0bvG

for sales@nk.ca;

Fri, 06 Nov 2026 12:19:46 -0600

Received: by mail-qk1-f199.google.com with SMTP id af79cd13be357-93caf7856ffsf210004785a.3

for ; Fri, 06 Nov 2026 10:18:50 -0800 (PST)

ARC-Seal: i=3; a=rsa-sha256; t=1793989124; cv=pass;

d=google.com; s=arc-20260327;

b=HF51hKzVwZbuxXZXI8FmCJq2VflhnDCXNujptjH929o5HjFniz8wK0qCM2OJSJZPZP

zkOY4ENrs2/JP389Jr64dXdNs5iB1OI/fIaZwXD+FSFupMCvxejEMYMO2CBM4Kp7fbDP

HQ+PiJiJik99eHECIv+w1FFb2fanwq1bWSlZd5OB1hiBLJpScubdKnwEDlpgHU5ca9u+

if4J2+Fa8/Msw2wdnwiXC49+BXSgM5YXrf/KdaUmjJiC0xj6KTlZnNAfFx+mQJYd1Xz/

7ElPZnXAFJgG3kC1z/tx5AnXX8VlLUCa/Y5l3o7u6TDbz/w5KB9TvYPQayCP87eTqT32

zPOQ==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature;

bh=RXI5tGQFNFG06TLHbhDRL6EOvnpnXkT1sVEisnjy5Mw=;

fh=VoKxF0dzJfvPFijT84lpHF2cgYuuGa7TCNdvIJRT2lM=;

b=d5acWXTVTe3VGKuzsTPAaGv2f+R1z/cxYr+f9fz5Q00oQ6jhLGE4FaVdy6WuuqabLl

A1HVv8X9JgG0t7+ayKIg2Us7nMKqBlzYFedn0Q/eMSU5M+TLRdkfkV3stdSkD/JJ7nzc

vxJOUlUfspZYAwpf2HHZZRkpE/ijRKnrltOTTnoYPVHhf6feG0dLfFBvIO68BefffIZu

s+jLMOBHm8O1E8JmihaEftLswOGu1mU9TERvTUCKz91rOkMsSTpAhXp29P0hnhx+iP1V

tU3sjtYfETkHgq85/JHmUkmyh3WWrKeuelaRSTWWxT31iAmSesKPprvQarZtpAyztA38

9SFg==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=edtqYDkh;

arc=pass (i=1);

spf=pass (google.com: domain of jameshuntjh1993@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=jameshuntjh1993@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@seo-outsourcing.uk

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=seo-outsourcing.uk; s=google; t=1793989124; x=1794593924; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:sender:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=RXI5tGQFNFG06TLHbhDRL6EOvnpnXkT1sVEisnjy5Mw=;

b=ldD3CBBNrqWajnZj9ZmanpvgEiuqUk0P27/dIPpD8/F3Y/jrGxj5/lp2wYhuQIsFcp

LFWISBEQ+LjFqQwECWWF+QOB4J6VcrSoXrdeiu+mfVWht6Y+q8QpD8kjT1zjV8/IzKh/

UNNOY/Z7k2FL4s9fNAIOFR4FRByVn7abPqhRDGs0sTylGQFFB0y2iywFwHERlY6RV5eR

6ulc/2ndc4HEOkhFIQqg1pH5T4jFF5OgciKwj3dBxAH37QSFrl+QUaTehticpzH5Z9BQ

4ud+8AXYvWHmPYi5GmCtIdwjrBhBt0473GtpVOjp4cuBepX9AIZBiqdX5QMJ6l0pi6Zf

hM5w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793989124; x=1794593924;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:sender:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=RXI5tGQFNFG06TLHbhDRL6EOvnpnXkT1sVEisnjy5Mw=;

b=frU/RYVKHaDLq77s+KXD4amtANH3uOy2CS2NYIFXulueJOwjp/z0cd/W/kUqIOkpW3

uilTzQkKLhKjgjP+o8vvZwEZ/Um9PlmtvVhwjNjzkwz6Lf2RnqG/RMbbuhEXLTGVgyv6

HAPOGTlIG6UIx58in8tw4xvB7lstEdbcgAAIzRDahutGtoIM1jDglwaqRFFrXSLBDmvw

1z/qG2Kcun6NPyZHuA/Xls76twgI199F49WnoROUefPr2ERoS6B7aIL7n5qBOT3Uayfa

qdENkHcZI06loDg4U9IzTmLpeBF4/e83dHBGKoLJQ/KhrOGmtxNzaX6VFKyDed5luksU

4NRQ==

Sender: seo-services@seo-outsourcing.uk

X-Forwarded-Encrypted: i=3; AKwUvBwuyodPwQA3hRlqWL8qXGqhAhvd6astwr/pGQbHFnDGjx7M+YL0TNkrk3SSTHR2xCUGpjOtDg==@nk.ca

X-Gm-Message-State: APuU4Z9Vzw854nsB1BQOzALWI9TpLRAnHmNs20iEsFsOQtBRFZMaGg5/

GBNARtwWpsbGELuAyrRCJvqUoowzXaeCc+juEC8tlVcpuJbQ96FR0vrSETyEtjT7QCw=

X-Received: by 2002:a05:690e:43cc:10b0:67c:bd6:73cf with SMTP id 956f58d0204a3-67c145fe7aemr999615d50.128.1793988769637;

Fri, 06 Nov 2026 10:12:49 -0800 (PST)

X-BeenThere: seo-services@seo-outsourcing.uk; h="ATskLdfFMeboYTtGuxVPNHVN4AvKa0sK4RhjzhYyUgFk2tTj5A=="

Received: by 2002:a05:690e:144e:b0:67b:f00a:cd01 with SMTP id

956f58d0204a3-67c133b6b5fls736571d50.0.-pod-prod-03-us; Fri, 06 Nov 2026

10:12:28 -0800 (PST)

X-Received: by 2002:a05:690e:400c:b0:67c:1ebe:385e with SMTP id 956f58d0204a3-67c1ebe3af3mr666200d50.7.1793988748383;

Fri, 06 Nov 2026 10:12:28 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1793988748; cv=pass;

d=google.com; s=arc-20260327;

b=P1l+gHFkQWdXwtsXzwJY9sDWg2AvHf5tTX/k7w/aJoPeGvy8sn5zdAMLwzJjTCBQ+c

G642bqkOTpr+c24K5q0835hIKsvlQ79VDTgHf5LIYYcRERUqGsGcNfSPSUkFaJ5dE9Bd

lIacZz2SQHZRDo1RL83u+CHUGArCOTiLpiC2OcVM8nqEobZj7O+RUlCRJPuBhyiwwgjM

knsBl2bHUVTbIcKd9EIZ4RZfQ7eyJiz6O4+ix7be+PDyoueEZxW9T5xIw5UTz0B5h1n0

yu3ScBjWFXHzhxAjxgL6Xf8L6DUweSFtknoaZ+FKHvEeA06fo7edHJBesE/KMLmm8+22

2tXA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=iPpsWzeHhcDWCFX3ANrt8w/FueC2ThFQo9GbS96rG8w=;

fh=E7RfuZ563Hd4d+xibJoWDOJ9tyK1Z9G+vLxIrdJYQXM=;

b=mASfZ296okMVe1KyW7oE5DRB4bpe+GdREW9Mk4RcPNQGYQj8B7QtKzfE6WEobnEKPk

o+j9dS+Pwzz6s2M9gufR0ncafABi2lQWNQqEk1Kc6XAFi1A3ZmUV5ur4o3fOnetj+UXU

XXPtjdTfprZr5OTlhgnHy805XQBNNUAtO3e2N1Ca2esr8h9eu0rjEfTuAmc9K2ky5p1s

iyJb0DoUTp7gLhYgvprszZKDh9FCRy7HYMgbEZWuT8BA+HWjCkoFB67FD6MfW4U2+Gwk

yWzp9sFEjMrcr4662XtAuqLOFJNdxhjdEoGkct+L321TFb5QyApOQxCIlAjamIxM7bN9

hkvA==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=edtqYDkh;

arc=pass (i=1);

spf=pass (google.com: domain of jameshuntjh1993@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=jameshuntjh1993@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@seo-outsourcing.uk

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 956f58d0204a3-67c1314ae7dsor2598528d50.0.2026.11.06.10.12.28

for

(Google Transport Security);

Fri, 06 Nov 2026 10:12:28 -0800 (PST)

Received-SPF: pass (google.com: domain of jameshuntjh1993@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1793988748; cv=none;

d=google.com; s=arc-20260327;

b=Ni0izDuK/JmNB4QR4PN1QX0lJjypgZGGKN1apUgjlMPfJIUmxX5cKSB0NY7VD6CC20

WDC/DDa/7ujhz5ylDqBiBnF9XEAQrYv95uVJd30ZMlkZHpODEaNMvlewS22BTn77FvQx

M2vtOy0wW0UNgNcZz+XpnYfUn5OkA1SQ+iEGi6p+RkrvpXbZny0a7cIb8AiujNnUmeoF

b+qvNvv1qfhNxAXQ/AGntmZ/3idRZf8bALEJQYKMxX7xjh+Ux8l0NzVbC7eBd0P9Qxjb

0ir0na34GgXrTR6tmKA5ViRhnYlWIvXWrpmpyWtBu7DoVts8uiYmOsc3Jor4RkbAbNgI

DlUg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=iPpsWzeHhcDWCFX3ANrt8w/FueC2ThFQo9GbS96rG8w=;

fh=E7RfuZ563Hd4d+xibJoWDOJ9tyK1Z9G+vLxIrdJYQXM=;

b=QWDZfCscTXqzCz8VawBe2aqR7RdPgG07bOsxKFWmpkjn3kjrvlyM9VTvvHArATuMf5

vN4ZUM6C+ysiVgHb1CMUUILnqoZIrMyrHL4xnsskjCLpDA7+fajb+mPrCLj+xrJE2TrX

RC2hTiD56KiN6dQ1rfEeSwEM8c9wVhM+IssPmANGSgWjSoZ/qVcN1HyzsUDiOgs6mW9Z

1bC80TI46HwEGHByqdfVD8iPKk6Zx+81f2zJFKTM7ySpbqf0ucCB3ZwuKE5W7mKVZyN5

tK8WDf5gX3fhMKaX0LA5v18AWSMrqenMYhv89MoWoOR/cbYkHMJDrR+0Map2LVrLNQp8

M1FQ==;

darn=seo-outsourcing.uk

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AYBFou1grItl8WHUXG7dSLeAtl+Kq9Lb3XQwoGY9ZUeZvnMS6VIDo//Ah/BI5juO//Y

4g+sGEsY1TWnxI5Bul343ctQwn4RToTSCMU/Yx2Fkuo2cHittXsu/kvwrwqGc0xiI2YPRCnb6gZ

kDskMkTZQcldF4G0KBEhx6NBC4K/WurgVUcvrtcEut9IXecfmVGYMmMOt0ex1jDJf0egN36b7Dp

KEFy6/we0zgtvJPu5k9JTQrCnOY8Bq3uqOMBjpt6tk3qEFGyrMKGHWhhZNlbOcpRbB4x02B4Tr6

AxECi7iPIt4CPyigm/WXzp24AzIi6EEPIf39OvoXrKUgc5aXfidvLwG5H93E8p6SZH7bFXS8grg

JDeSIdaZHEMz/gZWNEDOngio5ZweS3NnKZdJJTA==

X-Received: by 2002:a53:b68f:0:b0:672:99e1:11d1 with SMTP id

956f58d0204a3-67c145b528amr984767d50.110.1793988747998; Fri, 06 Nov 2026

10:12:27 -0800 (PST)

MIME-Version: 1.0

From: James Hunt

Date: Fri, 6 Nov 2026 23:41:00 +0530

X-Gm-Features: AclHuK_TPU4J3_r20Af2k6A1HBttfC9PgYmsgeU1fDAIsYiL3AC92ATtd3-pRRk

Message-ID:

Subject: Affordable App Development

To: seo-services@seo-outsourcing.uk

Content-Type: multipart/alternative; boundary="0000000000000e3d69065f9f8e60"

X-Original-Sender: jameshuntjh1993@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20260707 header.b=edtqYDkh; arc=pass

(i=1); spf=pass (google.com: domain of jameshuntjh1993@gmail.com

designates 209.85.220.41 as permitted sender) smtp.mailfrom=jameshuntjh1993@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@seo-outsourcing.uk

Precedence: list

Mailing-list: list SEO-Services@seo-outsourcing.uk; contact SEO-Services+owners@seo-outsourcing.uk

List-ID:

X-Spam-Checked-In-Group: SEO-Services@seo-outsourcing.uk

X-Google-Group-Id: 522995216069

List-Post: ,



List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi There, Looking to build a mobile app for your business?

We develop affordable apps for real estate, healthcare, wellness, and more.





Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.199 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: seo-outsourcing.uk]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: seo-outsourcing.uk]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: seo-outsourcing.uk]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jameshuntjh1993(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.199 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.199 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} Affordable App Development



--0000000000000e3d69065f9f8e60

Content-Type: text/plain; charset="UTF-8"



Hi There,



Looking to build a mobile app for your business?



We develop affordable apps for real estate, healthcare, wellness, and more.



Can I share some work samples?



Regards,

James



To unsubscribe from this group and stop receiving emails from it, send an email to SEO-Services+unsubscribe@seo-outsourcing.uk.



--0000000000000e3d69065f9f8e60

Content-Type: text/html; charset="UTF-8"



Hi There,

Looking to build a mobile app for your business?

We develop affordable apps for real estate, healthcare, wellness, and more.

Can I share some work samples?

Regards,
James










To unsubscribe from this group and stop receiving emails from it, send an email to SEO-Services+unsubscribe@seo-outsourcing.uk.




--0000000000000e3d69065f9f8e60--

Nigerian spam from google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Nov 2026 02:59:00 -0600

Received: from mail-lf1-f52.google.com ([209.85.167.52]:47369)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xPFmF-000000008Bn-0RxV

for dave@doctor.nl2k.ab.ca;

Fri, 06 Nov 2026 02:58:30 -0600

Received: by mail-lf1-f52.google.com with SMTP id 2adb3069b0e04-5be3d5927ceso352560e87.3

for ; Fri, 06 Nov 2026 00:57:33 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1793955446; cv=none;

d=google.com; s=arc-20260327;

b=RO26bc8FzMChD6wHoIBnkESHStKILMVvk/CbCf5vaSWGGbPRfikFwukR46XBRrMGa9

8uLQCWvneeHGzl9V5GyrqPqz7zGI2gW08K7oiXE0zZgVNlHjiWlww26fL1B11/5H5cMh

l137gZkHHxtHFVnFLBweoEVjcTvTRa7QWjlDeuKfYKkXACRQRDdngjVKEPasBz8eBVte

kTFlXNvU+BZEPM2p2jVxxly6XJxvceDWNni8+8EnJKlLYON8EjGPrmxFqcdmUdfXZp0V

cj3w6QDcDNqZ2lsIhyU6epYwsX4zXK5JUyTQFOygIoZ9caUcxjbc42C/1uzRlz9X4R6m

DBQQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=YkPZIVkgZyncidRQyhMipC4ApGT3TwPve8KC05JsvZ4=;

fh=bzPN/XAwxHttkElB6azxbNbOimyfkTrqt4rPoUO4yvc=;

b=Kw0I1JnQGodUQL1IVgAw1xGFSbh7i6y4XsAExjYYVYpzEzvYG9gxPqQm5J7n+J9bnA

G2O/WfuoyZDngVrStIZfWI6qhLaBIqh1ITTdE1FAQNyyR9HnLiBI49Hf8a5YukJqjal9

oc4vLkxwudWOJsN3EVdF2lxiyJumyAzX0cVOHQ9+W9AAdFH+pRrKKwFoyyBK/x8T10IJ

0TXHdYRNq0E28VjV4jpYoZJZU4cCTtNivQHnYF/w0Aq5tnnndeDq38MSC+g5ynusxgjF

rXUQznv+tdYp9S2ey4r0Q5Kllse1A7CqOuZjwvoE26mOBzeqVG2tcXHAn1gqGdYZArO9

jcHQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1793955446; x=1794560246; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=YkPZIVkgZyncidRQyhMipC4ApGT3TwPve8KC05JsvZ4=;

b=YWShxM+gRZYC7VRvveJlAbOVExecwNDsjHmRoAICQlbQTB4c1kfjmZOCR6IySRfABx

i9fVlm15RrYwF44Rv6LXRk0YxQYtxslXg7Qm6V4cOv/iIp9WZS+8z7RmnPosvNRBTGTy

fu/awTYgpuIzqnniEHTEblmwkdGgwTHrUXZAh8+NhHWFnR3brDhLCagVRWLy8hSB3Yc0

QL2E0pZXPPV2HjUe2SSQw/yJL3zJjppg4lA788A9wbKWvsPqX3nNj4uYW2KK1TLcMB+U

5vUcTxU93w36M94u9Zu9WlbGH+jbV5yaISQAgPUZY/WQixAhCHkAUYKie0mD1plN6OF6

i67Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793955446; x=1794560246;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=YkPZIVkgZyncidRQyhMipC4ApGT3TwPve8KC05JsvZ4=;

b=07ORIf10nYHkK+Ls2/Hsj+zr48WIHx428Q/CMmpPyZrUzU01igbTO1DzNTfAWbChiE

UMiTR4yvq4mZ9FJFWNM6E3wBnKao70Ap2gwr6cvfplmotRPR+qeyYxPiXAz8QthsB8uB

vPUWSO5/DJPxdrdHlxR2HscOwF+y1V8CF7uQud2YaEYzW5T2QzLu0MeyewgCrThH/WZa

U7wvWKfkT+PYo4YAiX1SH8nWONbvcxeR2r+fNanDs1cEFNOOjY+5pMVbxZqXP7k6Iklo

IJneg7HlXVdrNZ6NHkvG/Z03MyjAdC/OoJuo++DcI4Q/ofjsJohxo5aCsHBtXrPffC/k

wFTA==

X-Forwarded-Encrypted: i=1; AKwUvBwh4zZcDLb1wgiAYLYMpZMGR4s7kIlvk/yygeKEw3s7slqoGwXyIDcolP1bnns5BEQ206vh@doctor.nl2k.ab.ca

X-Gm-Message-State: APuU4Z8aiNYSVvzEQ4vphFveyTMrHIWX+tpVn196UhGP0e2LfDiCq5SH

ezja2yFrLrUoqkdx9/gJyEvJLqt2fT9JCG2RahPRZHdxD9pqEJtjYQafyYfM3xPHJDrHG4YKhzu

htwk7E5NRWA0SjL+iEgcyAfpxBQaXDEw=

X-Gm-Gg: AYBFou0WkR60aEr4P9g4o9+u5WtRAliArnU4pT8cQPnbMsSV6kmz1GZ8sYXC1/uvYI6

hDaEdZGyZvyEMgu3IDrMbhYN7jAt8VIbB/XTw1ctE2g8D6ojifv3yClTv1RU1wjKRpPrex2tinr

rMlbQhxyU3nf9YTjagITX10VARb2gqp0ST0o7ZV6F+9Z65Yx72AG0F9F1wQQTWTiYC+ufz5CYzh

23I8P/PJjUDsUkNzxvrPelPS7juFQwBRUx4AKx8CLlh0Z4su6FogFW65Rg4ft9nMXy0QCFuD94/

9qe6lVrYmn3tyYJhgdVkrGxuE8GUnGiLYmLObjog9nbz8afZpzp5cUQo3LhJ6mX8Hau05SVk7AY

3gzkk3doZZOg+P3HC9tFr/WHCmraLDXVYnJjvYrX2c0octTx9tPFteNv4HNxRo6765QxMoupYEN

fSzADZcbWFsGHFgXRCpA6h9KbZyA/BOnVFV9WJbqrM37dfn+rJiUuLLCNLl6iP8w1D09IEIlPME

oZ6ShmN3GXvQZr1ZbOErR7i9pkEotPdBEEcOQQRrX6ZEH8Vkto5VucRqsJeT1X6

X-Received: by 2002:a05:6512:308d:b0:5bb:7b64:340d with SMTP id

2adb3069b0e04-5c0039856fdmr556043e87.28.1793955445530; Fri, 06 Nov 2026

00:57:25 -0800 (PST)

MIME-Version: 1.0

Reply-To: andrewbrianp2@gmail.com

From: "Dr. Andrew Brian"

Date: Fri, 6 Nov 2026 09:57:10 +0100

X-Gm-Features: AclHuK9Zip3rtd9R_9j937mO4EAKpGrdovDieJkNJv3p6Snk5oWmnxezhqsa6mY

Message-ID:

Subject: Re: Potential Business Collaboration Opportunity

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000012e57e065f97cda9"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 16.8

X-Spam_score_int: 168

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, Compliments of the day. I hope this message

finds you in good health and high spirits. I recently obtained your contact

details through an international business directory and wanted to introduce

myself. My name is Dr. Andrew Brian, and I am a Financial Consultant and

Adviser based in L [...]



Content analysis details: (16.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

[209.85.167.52 listed in dnsbl.ahbl.org]

[209.85.167.52 listed in dnsbl.ahbl.org]

[209.85.167.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.52 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.52 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[chrismartin01966(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[chrismartin01966(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[andrewbrianp2(at)gmail.com]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.52 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_DR No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.8 LONGWORDS Long string of long words

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Re: Potential Business Collaboration Opportunity



--00000000000012e57e065f97cda9

Content-Type: text/plain; charset="UTF-8"



Dear Sir/Madam,





Compliments of the day. I hope this message finds you in good health and

high spirits.





I recently obtained your contact details through an international business

directory and wanted to introduce myself. My name is Dr. Andrew Brian, and

I am a Financial Consultant and Adviser based in London, England. I am

reaching out to explore the possibility of establishing a mutually

beneficial business relationship.



I work with Global Asset Management Company LLC, where I advise a network

of high-net-worth individuals, corporate organizations, and institutional

investors seeking credible investment opportunities through trusted

international partners.



Through our affiliated company, LLC International Limited (UK), we are

expanding our international network by collaborating with experienced

consultants, business representatives, and referral partners who can

introduce qualified businesses and investment opportunities.



As our referral partner, you will receive a 1% referral commission for

every successful introduction that leads to an investment, financing, or

strategic partnership through our investor network.



In addition, if a business or project you introduce successfully secures

funding, a 2% success commission on the funded amount will be shared

equally between us (1% each) in recognition of our roles in facilitating

the transaction. This arrangement also applies if you are seeking funding

for your own business or project.





Our investors are currently interested in opportunities across a wide range

of sectors, including:





Healthcare and Medical Services, Real Estate Development, Mining and

Natural Resources,Agriculture and Agribusiness, Renewable Energy,

Technology and Startup Ventures, Transportation and Logistics, Trading and

Manufacturing, Construction and Infrastructure, Other commercially viable

and profitable businesses.





If you know of any reputable entrepreneur, company, or organization seeking

investment capital, project financing, or strategic business partnerships,

I would be delighted to discuss how we can work together.



Alternatively, if you are seeking funding for your own business expansion

or a new project, you are welcome to submit your business plan, executive

summary, or project proposal for our preliminary review and assessment.



Thank you for your time and consideration. I look forward to hearing from

you and hope we have the opportunity to build a productive and long-term

professional relationship.



Kind regards,



Dr. Andrew Brian

Financial Consultant and Adviser

LLC International Limited (UK)



--00000000000012e57e065f97cda9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Sir/Madam,


Compliments of the day. I hope =

this message finds you in good health and high spirits.


I recent=

ly obtained your contact details through an international business director=

y and wanted to introduce myself. My name is Dr. Andrew Brian, and I am a F=

inancial Consultant and Adviser based in London, England. I am reaching out=

to explore the possibility of establishing a mutually beneficial business =

relationship.

I work with Global Asset Management Company LLC, where=

I advise a network of high-net-worth individuals, corporate organizations,=

and institutional investors seeking credible investment opportunities thro=

ugh trusted international partners.

Through our affiliated company, =

LLC International Limited (UK), we are expanding our international network =

by collaborating with experienced consultants, business representatives, an=

d referral partners who can introduce qualified businesses and investment o=

pportunities.

As our referral partner, you will receive a 1% referra=

l commission for every successful introduction that leads to an investment,=

financing, or strategic partnership through our investor network.

I=

n addition, if a business or project you introduce successfully secures fun=

ding, a 2% success commission on the funded amount will be shared equally b=

etween us (1% each) in recognition of our roles in facilitating the transac=

tion. This arrangement also applies if you are seeking funding for your own=

business or project.


Our investors are currently interested in =

opportunities across a wide range of sectors, including:


Healthc=

are and Medical Services, Real Estate Development, Mining and Natural Resou=

rces,Agriculture and Agribusiness, Renewable Energy, Technology and Startup=

Ventures, Transportation and Logistics, Trading and Manufacturing, Constru=

ction and Infrastructure, Other commercially viable and profitable business=

es.


If you know of any reputable entrepreneur, company, or organ=

ization seeking investment capital, project financing, or strategic busines=

s partnerships, I would be delighted to discuss how we can work together.
r>
Alternatively, if you are seeking funding for your own business expan=

sion or a new project, you are welcome to submit your business plan, execut=

ive summary, or project proposal for our preliminary review and assessment.=



Thank you for your time and consideration. I look forward to hearin=

g from you and hope we have the opportunity to build a productive and long-=

term professional relationship.

Kind regards,

Dr. Andrew Bria=

n
Financial Consultant and Adviser
LLC International Limited (UK)
v>



--00000000000012e57e065f97cda9--