Cloud credential phishing from Google Gmail Part 4

Posted by Dave Yadallee on

YOUR CLOUD IS DISABLED



=20



=F0=9F=9A=A8 IMMEDIATE ACTION REQUIRED


We can't sync your photos =E2=80=A2
g>documents =E2=80=A2 files


Storage 100% FULL =E2=80=A2 Subscription <=

strong>INACTIVE









STORAGE STATUS



CRITICAL











=E2=9A=A0=EF=B8=8F Used: 50.0 GB / 50.0 GB

=F0=9F=93=A6 Total: 50.0 GB











=F0=9F=94=93 REACTIVATE NOW - 50% OFF =F0=9F=94=93



=20





=E2=8F=B3 LIMITED TIME OFFER

23:59:59









=F0=9F=8E=81 FIRST 100 USERS ONLY

SAVE 50%











=E2=9C=A8

Instant Access





=F0=9F=9B=A1=EF=B8=8F
n>

30-Day Guarantee





=E2=9A=A1

24/7 Priority Support















=F0=9F=93=9E Customer Support<=

/a>

=E2=9A=99=EF=B8=8F Account Set=

tings

=E2=9C=89=EF=B8=8F Unsubscribe=







=C2=A9 2024 Cloud Services Inc. =E2=80=A2 San Francisco, CA













--000000000000f47ab1064cc607f9--

Cloud credential phishing from Google Gmail Part 3

Posted by Dave Yadallee on
.stats span:first-child {

color: #FF6B6B;

display: flex;

align-items: center;

gap: 8px;

}



.stats span:last-child {

color: #4A5568;

}



/ Attractive button with creative design /

.btn-primary {

background: linear-gradient(135deg, #FF6B6B 0%, #FF8E53 100%);

color: #ffffff;

text-decoration: none;

padding: 24px 52px;

border-radius: 80px;

font-weight: 900;

font-size: 24px;

display: inline-block;

box-shadow:=20

0 20px 35px -8px #FF6B6B,

0 0 0 3px #ffffff,

0 0 0 6px #FF6B6B;

border: none;

letter-spacing: 1px;

margin: 24px 0 20px;

text-transform: uppercase;

width: 100%;

max-width: 450px;

}



/ Timer with creative background /

.offer-timer {

background: linear-gradient(135deg, #1A202C 0%, #2D3748 100%);

padding: 20px 32px;

border-radius: 60px;

display: inline-flex;

align-items: center;

gap: 15px;

margin: 20px 0 16px;

border: 3px solid #FF6B6B;

}



.offer-timer span {

color: #ffffff;

font-weight: 400;

font-size: 18px;

}



.timer-numbers {

background: #FF6B6B;

color: #ffffff;

font-weight: 900;

font-size: 28px;

font-family: monospace;

padding: 8px 20px;

border-radius: 40px;

letter-spacing: 3px;

}



/ Special offer creative design /

.special-offer {

background: #ffffff;

padding: 20px 32px;

border-radius: 60px;

font-size: 20px;

font-weight: 800;

margin: 20px 0 25px;

border: 4px solid #FF6B6B;

display: inline-block;

box-shadow: 0 15px 25px -8px rgba(255, 107, 107, 0.3);

}



.special-offer strong {

background: #FF6B6B;

color: #ffffff;

padding: 8px 20px;

border-radius: 60px;

margin-left: 15px;

font-size: 22px;

}



/ Feature grid creative /

.feature-grid {

display: grid;

grid-template-columns: repeat(3, 1fr);

gap: 20px;

margin: 32px 0 0;

padding: 20px 0;

border-top: 3px solid #FF6B6B;

border-bottom: 3px solid #FF6B6B;

}



.feature-item {

text-align: center;

}



.feature-icon {

font-size: 32px;

margin-bottom: 8px;

display: block;

}



.feature-item span:last-child {

font-size: 15px;

font-weight: 700;

color: #1A202C;

background: #FFE9E4;

padding: 6px 12px;

border-radius: 40px;

display: inline-block;

}



/ Footer /

.footer-note {

text-align: center;

margin-top: 30px;

max-width: 580px;

margin-left: auto;

margin-right: auto;

padding: 20px;

background: #ffffff;

border-radius: 60px;

box-shadow: 0 10px 25px -8px rgba(0, 0, 0, 0.1);

}



.footer-links {

display: flex;

justify-content: center;

gap: 25px;

margin-bottom: 12px;

}



.footer-links a {

color: #4A5568;

text-decoration: none;

font-weight: 600;

font-size: 15px;

transition: color 0.2s ease;

display: flex;

align-items: center;

gap: 6px;

}



.footer-links a:hover {

color: #FF6B6B;

}



.copyright {

color: #A0AEC0;

font-size: 13px;

}



/ Creative background patterns - static /

.bg-pattern {

position: fixed;

top: 0;

left: 0;

right: 0;

bottom: 0;

pointer-events: none;

z-index: 1;

background-image:=20

radial-gradient(circle at 10% 20%, rgba(255, 107, 107, 0.03=

) 0%, transparent 20%),

radial-gradient(circle at 90% 70%, rgba(255, 142, 83, 0.03)=

0%, transparent 25%),

radial-gradient(circle at 30% 80%, rgba(45, 55, 72, 0.02) 0=

%, transparent 30%);

}











=20











=E2=9A=A0=EF=B8=8F




CRITICAL SYSTEM ALERT

URGENT





=20





=E2=9A=A1 SERVICE INTERRUPTED =E2=9A=A1



=20




24.png" class=3D"logo-large" alt=3D"Cloud Storage Alert">

Cloud credential phishing from Google Gmail Part 2

Posted by Dave Yadallee on
/ Header with bold gradient /

.header {

padding: 28px 36px;

background: linear-gradient(115deg, #2D3748 0%, #1A202C 100%);

display: flex;

align-items: center;

gap: 18px;

position: relative;

z-index: 2;

border-bottom: 4px solid #FF6B6B;

}



/ Creative icon design /

.icon-stop {

width: 52px;

height: 52px;

background: #FF6B6B;

color: #ffffff;

border-radius: 18px;

display: flex;

align-items: center;

justify-content: center;

font-weight: 900;

font-size: 28px;

box-shadow: 0 10px 20px -5px rgba(255, 107, 107, 0.4);

transform: rotate(-2deg);

}



.head-title {

color: #ffffff;

font-weight: 800;

font-size: 20px;

letter-spacing: -0.3px;

text-transform: uppercase;

line-height: 1.3;

}



.head-title span {

color: #FF6B6B;

background: rgba(255, 107, 107, 0.15);

padding: 4px 12px;

border-radius: 40px;

font-size: 14px;

margin-left: 10px;

display: inline-block;

}



.main-body {

padding: 48px 40px;

text-align: center;

background: #ffffff;

position: relative;

z-index: 2;

}



/ Creative badge design /

.urgent-badge {

display: inline-flex;

align-items: center;

background: #FF6B6B;

color: #ffffff;

padding: 10px 24px;

border-radius: 100px;

font-size: 15px;

font-weight: 800;

letter-spacing: 1px;

margin-bottom: 28px;

text-transform: uppercase;

box-shadow: 0 15px 25px -8px rgba(255, 107, 107, 0.4);

border: 2px solid #ffffff;

outline: 2px solid #FF6B6B;

}



/ Image with creative frame /

.image-container {

position: relative;

display: inline-block;

margin-bottom: 32px;

}



.logo-large {

display: block;

max-width: 200px;

border-radius: 30px;

box-shadow:=20

0 25px 40px -15px rgba(0, 0, 0, 0.3),

0 0 0 4px #ffffff,

0 0 0 6px #FF6B6B;

position: relative;

z-index: 2;

}



/ Creative background for text /

.h2 {

font-size: 42px;

font-weight: 900;

margin: 0 0 20px;

line-height: 1.1;

display: inline-block;

background: linear-gradient(135deg, #1A202C 0%, #2D3748 100%);

-webkit-background-clip: text;

-webkit-text-fill-color: transparent;

background-clip: text;

position: relative;

padding: 0 10px;

}



.h2::before,

.h2::after {

content: '=E2=9A=A1';

color: #FF6B6B;

font-size: 32px;

margin: 0 10px;

opacity: 0.7;

}



/ Description with creative background /

.desc {

background: linear-gradient(135deg, #FEE2E2 0%, #FFF3F0 100%);

padding: 28px 32px;

border-radius: 40px;

font-size: 18px;

color: #1A202C;

line-height: 1.6;

margin-bottom: 36px;

border: 2px dashed #FF6B6B;

position: relative;

box-shadow: 0 15px 30px -10px rgba(255, 107, 107, 0.2);

}



.desc strong {

color: #FF6B6B;

font-size: 20px;

font-weight: 800;

display: inline-block;

background: #ffffff;

padding: 2px 12px;

border-radius: 40px;

margin: 0 4px;

}



/ Creative status container /

.status-container {

background: #ffffff;

padding: 32px;

border-radius: 36px;

margin-bottom: 36px;

box-shadow:=20

0 20px 35px -10px rgba(0, 0, 0, 0.1),

inset 0 -3px 0 #FF6B6B;

border: 1px solid #EDF2F7;

}



.status-header {

display: flex;

align-items: center;

justify-content: space-between;

margin-bottom: 20px;

}



.status-header h3 {

font-size: 20px;

font-weight: 800;

color: #1A202C;

background: #FF6B6B;

color: #ffffff;

padding: 6px 20px;

border-radius: 40px;

}



.status-header span {

font-size: 18px;

font-weight: 700;

color: #FF6B6B;

}



.status-bar {

background: #EDF2F7;

height: 32px;

border-radius: 40px;

overflow: hidden;

margin-bottom: 16px;

border: 2px solid #ffffff;

box-shadow: inset 0 2px 6px rgba(0, 0, 0, 0.05);

}



.fill {

width: 100%;

height: 100%;

background: linear-gradient(90deg, #FF6B6B 0%, #FF8E53 100%);

border-radius: 40px;

position: relative;

}



/ Creative stats design /

.stats {

display: flex;

justify-content: space-between;

font-size: 18px;

font-weight: 700;

background: #F7FAFC;

padding: 18px 24px;

border-radius: 30px;

border: 2px solid #FF6B6B;

}

Cloud credential phishing from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Mar 2026 15:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0RS5-00000000IEd-0UGE

for dave@doctor.nl2k.ab.ca;

Wed, 11 Mar 2026 15:50:49 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Mar 2026 15:50:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f72.google.com ([209.85.160.72]:56405)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0QnW-00000000EH0-0ncc

for sales@nk.ca;

Wed, 11 Mar 2026 15:09:02 -0600

Received: by mail-oa1-f72.google.com with SMTP id 586e51a60fabf-40eee5d10c5so2981559fac.0

for ; Wed, 11 Mar 2026 14:08:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1773263281; x=1773868081; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=qtpCzzzf1lDQkeycj3pqK0FzqOPZHrrOqbCWhAHGbSI=;

b=Dybhuqia3QOuNwtkR9Fl2adg3kFUVH1wpYpmoK3ksGi3VVOtMbQXmzNtpFpbaTRVOV

QLpG0WI+SWnHLApS83/3o9sOXQCU3rwroM61GAZAXFDQ9YXrZnCtuep+SlqmvG7DPsZi

jMpcKrMOYXVFaBCFgGCNYw2+lTknDQDafzGk3UQDWwm406AHmIw3XVepHk+eFarQf7GP

Zb23ZOVxcb1JAHcvfv/opwx5eCRRCWIANNeg+/y7keVW6Iefito4srr908PzvOlqrVFd

8iL9XM+5ld27FWBV7y8tqp8y9ahjvgGY6nWlmVRVR2PoXdo/I2OhY0E/L9a+X3XyOr8E

kW9w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773263281; x=1773868081;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=qtpCzzzf1lDQkeycj3pqK0FzqOPZHrrOqbCWhAHGbSI=;

b=jMH6kyob4hkXUjgpg2nMUn7rT8sHqao1Pg1i9CbgvS3DGQHp5GVmgjitJE0i/fI2rl

JNUkrbiLWK7XKOmWCdBN1yeKzQCh/INxnUVlGqN3xMJsYEjU6iiC7tDvARqgG4DNH4fW

D03A2ZlgHeyywSV4xnpoidizAcL9bouiyaEL5/XPJ9ceoao8T96Wqe0GY4I8g/BR/KGT

+MhXmUNry+bKEJDYE2eM9dycoK7kjehI9WqcZctbm4HndfdvnWGYddWpLkJuV1tdqF9A

bOAaDNmg6ZhXxtvsRO/et+frpQNkM6U+U+5Kb6iG++VkKNfUs/IralNR5I8JVwzunlOY

auzw==

X-Gm-Message-State: AOJu0YzEbuqQRUSrnBHvDeqPOZNwCjtXr72KMCsz18LmMZJgRbWmYf36

SCSQ3T4S70RJF9OUyb/nJMlProkuc+Qf9bl84Ldodq8Tn4mN+lSFUzQRAWy9AZQjfGlr+52un7W

HPvjba2Pybw==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:168e:b0:67b:b182:19e with SMTP id

006d021491bc7-67bc889874emr2796450eaf.11.1773263280961; Wed, 11 Mar 2026

14:08:00 -0700 (PDT)

Message-ID: <000000000000f47abf064cc607fc@google.com>

Date: Wed, 11 Mar 2026 21:08:00 +0000

Subject: FINAL WARNING regarding your account

From: Cloud Security

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000f47ab1064cc607f9"

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ⚠️ CRITICAL SYSTEM ALERT URGENT ⚡ SERVICE INTERRUPTED

âš¡



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.72 listed in will-spam-for-food.eu.org]

[209.85.160.72 listed in will-spam-for-food.eu.org]

[209.85.160.72 listed in will-spam-for-food.eu.org]

[209.85.160.72 listed in will-spam-for-food.eu.org]

[209.85.160.72 listed in will-spam-for-food.eu.org]

[209.85.160.72 listed in will-spam-for-food.eu.org]

[209.85.160.72 listed in will-spam-for-food.eu.org]

[209.85.160.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.72 listed in dnsbl.ahbl.org]

[209.85.160.72 listed in dnsbl.ahbl.org]

[209.85.160.72 listed in dnsbl.ahbl.org]

[209.85.160.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.72 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.72 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 SAVE_PERCENT BODY: Save some percentage

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.72 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} FINAL WARNING regarding your account



--000000000000f47ab1064cc607f9

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



4pqg77iPDQoNCkNSSVRJQ0FMIFNZU1RFTSBBTEVSVCBVUkdFTlQNCg0KDQrimqEgU0VSVklDRSBJ

TlRFUlJVUFRFRCDimqENCg0KQ2xvdWQgU3RvcmFnZSBBbGVydA0KDQpZT1VSIENMT1VEIElTIERJ

U0FCTEVEDQoNCvCfmqggSU1NRURJQVRFIEFDVElPTiBSRVFVSVJFRA0KV2UgY2FuJ3Qgc3luYyB5

b3VyIHBob3RvcyDigKIgZG9jdW1lbnRzIOKAoiBmaWxlcw0KU3RvcmFnZSAxMDAlIEZVTEwg4oCi

IFN1YnNjcmlwdGlvbiBJTkFDVElWRQ0KDQoNClNUT1JBR0UgU1RBVFVTDQpDUklUSUNBTA0KDQoN

CuKaoO+4jyBVc2VkOiA1MC4wIEdCIC8gNTAuMCBHQiDwn5OmIFRvdGFsOiA1MC4wIEdCDQoNCvCf

lJMgUkVBQ1RJVkFURSBOT1cgLSA1MCUgT0ZGIPCflJMNCuKPsyBMSU1JVEVEIFRJTUUgT0ZGRVIg

MjM6NTk6NTkNCg0K8J+OgSBGSVJTVCAxMDAgVVNFUlMgT05MWSBTQVZFIDUwJQ0KDQoNCuKcqCBJ

bnN0YW50IEFjY2Vzcw0KDQrwn5uh77iPIDMwLURheSBHdWFyYW50ZWUNCg0K4pqhIDI0LzcgUHJp

b3JpdHkgU3VwcG9ydA0KDQoNCvCfk54gQ3VzdG9tZXIgU3VwcG9ydCDimpnvuI8gQWNjb3VudCBT

ZXR0aW5ncyDinInvuI8gVW5zdWJzY3JpYmUNCg0KwqkgMjAyNCBDbG91ZCBTZXJ2aWNlcyBJbmMu

IOKAoiBTYW4gRnJhbmNpc2NvLCBDQQ0KDQo=

--000000000000f47ab1064cc607f9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable














=3D1">

Cloud Disabled - Action Required








ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

Hey There!



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

We trust you are doing well.



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

How hard do you think it is to have your website rank on search engines?
iv>


ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

Well, if you are thinking it is some rocket science that needs a long proce=

ss of study, let us help you clear out such assumptions.



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

Our SEO experts have all the layouts planned for you, all you have to do is=

to connect the dots that will help your website to have higher engagement =

rates and lead generations.



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

If you are willing to opt for SEO services, then you are just a connection =

away.



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

Connect with us today for your every requirement regarding SEO.



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

Thanks.



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

Irfan








--_000_SI2PR04MB613167A872A87E081C6F7528C047ASI2PR04MB6131apcp_--

Docusign phish Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Mar 2026 15:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0RR4-00000000I6v-3fvQ

for dave@doctor.nl2k.ab.ca;

Wed, 11 Mar 2026 15:49:46 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Mar 2026 15:49:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [138.226.246.136] (port=40428 helo=lammlles.duckdns.org)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0PQB-000000009zq-0UZq

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Mar 2026 13:41:07 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=lammlles.duckdns.org;

s=default; t=1773257934;

bh=Zufih0Vkdx9prLJszT3jMbLQid11pVNFJbj3QDuNb+Y=;

h=From:Subject:To:Reply-To:Date:From;

b=TjWcqagmzZKPaH+BJLcbHXMyLIBjn0Txn5w1fYxDR4ZNzR+eK0Xa3TfofYIzzZ2zG

uP5mXfYzTAyvVx9IT+IPi1nd+GSd0khgeovbIfQzjSOTLx0WI4IPMND9w7l50FGgw4

zDy/bCYqXFumFPt4atLogKYbPIXU3dpobNaWSY64rTEFjENQKF62zDCACegeS5itIf

nSu8Orf3ix9B3xnkDdbEubnJDnthkPK4CAE7Ju/q80K9xAIZbormuOWXISOkz3lQq/

VFbdGQfIscCzLnnoNSdLxYfVPe9qeQwL3hJc1/KvXl2D6B97Grm9k3Ghi2GHJLorFZ

SJLYb2g4xf6bg==

Received: from PACKERP-IT887VA (unknown [5.149.252.164])

(Authenticated sender: support@lammlles.duckdns.org)

by lammlles.duckdns.org (Postfix) with ESMTPSA id 574AF1838AD

for ; Wed, 11 Mar 2026 19:38:54 +0000 (UTC)

From: "Peel Region via Docusign"

Subject: Reminder: Please review & sign EFA-3325 Contract

To:

Content-Type: multipart/alternative; boundary="h7NCrhb9ypHrSqsKE1lxojrjGRqSL8=_ie"

MIME-Version: 1.0

Reply-To:

Date: Wed, 11 Mar 2026 19:38:54 +0000

Priority: urgent

X-Priority: 1

Importance: high

Message-Id: <202611031938541BBECD72E3$01268A0CAC@lammlles.duckdns.org>

X-Spam_score: 23.4

X-Spam_score_int: 234

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attention ! ! : If you find this message in your junk/spam

folder, Kindly move to inbox to review & sign the document. Hi doctor, Peel

Region sent you a document to review and sign. REVIEW DOCUMENT https://bafkreielfoja7v2ruue4qakymuyspgoz4hriojqprv5mzejt25qn3sebbi.ipfs.dweb.link/#doctor@doctor.nl2k.ab.ca





Content analysis details: (23.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[138.226.246.136 listed in dnsbl.ahbl.org]

[138.226.246.136 listed in dnsbl.ahbl.org]

[138.226.246.136 listed in dnsbl.ahbl.org]

[138.226.246.136 listed in dnsbl.ahbl.org]

[5.149.252.164 listed in dnsbl.ahbl.org]

[5.149.252.164 listed in dnsbl.ahbl.org]

[5.149.252.164 listed in dnsbl.ahbl.org]

[5.149.252.164 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[138.226.246.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[138.226.246.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[138.226.246.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[138.226.246.136 listed in dnsbl.ahbl.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: dweb.link]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

1.0 GOOG_REDIR_DOCUSIGN URI: Indirect docusign link, probable phishing

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 IMPRO_URI_2 No description available.

3.1 URI_DWEBIPFS References Interplanetary File System PtP content via

dweb.link, likely phishing

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

1.0 IMPRO_URI_3 No description available.

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.5 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

2.0 MIXED_HREF_CASE Has href in mixed case

2.2 URI_IPFS References Interplanetary File System PtP content, probable

phishing

1.0 RDNS_IMPRO No description available.

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Reminder: Please review & sign EFA-3325 Contract



This is a multi-part message in MIME format



--h7NCrhb9ypHrSqsKE1lxojrjGRqSL8=_ie

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Attention ! ! : If you find this message in your junk/spam folder, Kin=

dly move to inbox to review & sign the document.



Hi doctor,

Peel Region sent you a document to review and sign.



REVIEW DOCUMENT https://bafkreielfoja7v2ruue4qakymuyspgoz4hriojqprv5mz=

ejt25qn3sebbi.ipfs.dweb.link/#doctor@doctor.nl2k.ab.ca



Peel Region nance



donotreply@digitalsign.



peelregion.ca



Hi doctor,

doctor@doctor.nl2k.ab.ca

I am sending you this request for your electronic signature of your In=

vestment Premium Finanace. Please review and electronically sign by cl=

icking the button in this email.



Powered by=20



Do Not Share This Email

This email contains a secure link to Docusign. Please do not share thi=

s email, link, or access code with others.



Alternate Signing Method

Visit Docusign.com, click 'Access Documents', and enter the security c=

ode:

0979E948CCA545DA96EFFA84ABF8A8

WEb/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:4:1fb:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:1fb:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:1fb:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:1fb:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:1fb:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:1fb:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:1fb:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:1fb:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[52.103.43.49 listed in will-spam-for-food.eu.org]

[52.103.43.49 listed in will-spam-for-food.eu.org]

[52.103.43.49 listed in will-spam-for-food.eu.org]

[52.103.43.49 listed in will-spam-for-food.eu.org]

[52.103.43.49 listed in will-spam-for-food.eu.org]

[52.103.43.49 listed in will-spam-for-food.eu.org]

[52.103.43.49 listed in will-spam-for-food.eu.org]

[52.103.43.49 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.49 listed in dnsbl.ahbl.org]

[52.103.43.49 listed in dnsbl.ahbl.org]

[52.103.43.49 listed in dnsbl.ahbl.org]

[52.103.43.49 listed in dnsbl.ahbl.org]

[2603:1096:4:1fb:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:1fb:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:1fb:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:1fb:0:0:0:13 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.49 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.43.49 listed in list.dnswl.org]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.49 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.49 listed in sa-accredit.habeas.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sourcewebtechdgh(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.49 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.43.49 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.49 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Boost Visibility of your Website...



--_000_SI2PR04MB613167A872A87E081C6F7528C047ASI2PR04MB6131apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hey There!



We trust you are doing well.



How hard do you think it is to have your website rank on search engines?



Well, if you are thinking it is some rocket science that needs a long proce=

ss of study, let us help you clear out such assumptions.



Our SEO experts have all the layouts planned for you, all you have to do is=

to connect the dots that will help your website to have higher engagement =

rates and lead generations.



If you are willing to opt for SEO services, then you are just a connection =

away.



Connect with us today for your every requirement regarding SEO.



Thanks.

Irfan

WEb/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Mar 2026 15:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0RQ2-00000000HyG-1Tik

for dave@doctor.nl2k.ab.ca;

Wed, 11 Mar 2026 15:48:42 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Mar 2026 15:48:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012049.outbound.protection.outlook.com ([52.103.43.49]:23381 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0Myp-00000000BvZ-3bYr

for root@nk.ca;

Wed, 11 Mar 2026 11:04:30 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=WR/zzgyaHl6KLtKJ0VyTTmfFct2Cl61LdoPPq4GlXH5sS6g9PEShWcFRBTBdffBbMvlQTenSnzCTGHy/I7X+vHQg01hwg713Gn0+bz9sIqId59tnhhsmHPE105/Iz3/+5tkwZHGBp2ktSAfQrQh9/mS1Hruyyjdwkz6DeIN6d7rVpN3P1mjCxjvtvl93ZGjLiYjILb2xYsh7p8AVo2yuf81/DEIr4k1N8eNAEJfoli+XUm7URLZxblaSQD3ZV4CQ9juHqKxMhl1huHjYtKCbSrgrkY8Xwne3Wc+IpuWe5t2QgU5rUWaRRR0EuikswIpWq2xfQfwgKbX+fpAfEc1r6Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=bw+Z0s4luDb5dYuN4Pbt3HQPNWHeAFyH9yRNJDtPg4Q=;

b=G+TaUS3/MKpx9k6jKxrk4DecjUyxt8ypdHfeDuL5FgYsToN3QZ3ucoKCR1vmiElFOAoCI1UT5P6l6IFg2bFn/0t7w+yNFcEFRMaI9wK5FSTmnYBhGIf+69ffLaP1xz4k0SfJtlH9z2pKGlm4QZ01mwAZ+We4EGnsNWYqGnR80h62gAAKgIp6Ao/IIWbzyfzsF1UqYXNTgcMXmJQficAqtbgYQnJsZKqX6WQxaaRPY1MPp8wCm7SEZb+IImtfRYXjSvObA3KeuY2rTRu17dCSzxTWi0HlL8GdARq1LSDi1azNqW+YXoOuCg3Er1ohAsOGzvrWilT6exPSIWcmdWAo4g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=bw+Z0s4luDb5dYuN4Pbt3HQPNWHeAFyH9yRNJDtPg4Q=;

b=X5+LCD5cxRPzu3YaIApnmSGO+Pz9deiEKo/IPz4VO7ubNAKlYhk1jA3miOcgKtuL/VGhUh/3nf06gv0bJptp3o7FLJIZ272PJKunl57K74xHhwMXm/R90TpuaLJxY8ocT9RytzJh3bboaGI2IsUrmWsVIzg+ADhdOHZUwwlMXNy1KFcIm5oLydq4sK1UNbE8RI279gIlO09UUG5/bCPZFROPj8PjERM2A1lW7hIhy9sAeG7Pi5YIkSv86R5pgZDQUaP2IqeT+Mz8FK8QR+nEJJITsi09xs/XwsviS7KSze8+44IN705/mCbDfM1icORHrzVTT9d3yIRQhZpeQV3xqQ==

Received: from SI2PR04MB6131.apcprd04.prod.outlook.com (2603:1096:4:1fb::13)

by JH0PR04MB8296.apcprd04.prod.outlook.com (2603:1096:990:7e::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9700.12; Wed, 11 Mar

2026 17:02:36 +0000

Received: from SI2PR04MB6131.apcprd04.prod.outlook.com

([fe80::59e0:b712:7f86:ec59]) by SI2PR04MB6131.apcprd04.prod.outlook.com

([fe80::59e0:b712:7f86:ec59%6]) with mapi id 15.20.9700.013; Wed, 11 Mar 2026

17:02:35 +0000

From: Irfan khan

Subject: Boost Visibility of your Website...

Thread-Topic: Boost Visibility of your Website...

Thread-Index: AQHcsXjSG/bvBoG8GUKV1VLDpq3ERw==

Date: Wed, 11 Mar 2026 17:02:34 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR04MB6131:EE_|JH0PR04MB8296:EE_

x-ms-office365-filtering-correlation-id: 839a620b-0a3c-46fe-bd7f-08de7f8ffddb

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|15080799012|31061999003|461199028|24071999003|7071999006|39105399006|20031999003|37011999003|24121999003|22091999003|8060799015|8062599012|19110799012|440099028|3412199025|102099032|39145399003|40105399003|41105399003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?wJqpE3KInsV2ZVMKky9Epp3c+RVGw9PhqDJoJxdTIsw0/j9/alz+pbnayl?=

=?iso-8859-1?Q?i8u3v7lezLEke/KINiAXAGA90K8wJCwUriP8nxCmBC/1pwTDapIAcepqJ3?=

=?iso-8859-1?Q?SLEp0q7SxwGkS40XmTuIXy1a/rtnpG9RmxN2p5ktxh7bEXvYqdtUFW6pET?=

=?iso-8859-1?Q?lSm5b2ErzE0wpm7R3hqWz+TW8h/xNY1hLT+6hvSy0C0msfx0WeWJQJSQFl?=

=?iso-8859-1?Q?ucOv1SVPm+Vb1JEGoaUN+PdzOlrWHy7mvljqFsGMY603YwRfwtOuJeJ62P?=

=?iso-8859-1?Q?GQz/ideyC9lm6FRkNDzwULuhJCXfgQ/smBd9af2SmdujRObXdFHB+adTMx?=

=?iso-8859-1?Q?ZfA1NPZD0nWwI6SM5yfiHWYK/uQXGs7T936PgalilqL/PMiyXnz3cq1JIn?=

=?iso-8859-1?Q?fmREkbOGLr0luxwy4F795HRvuVdwuO1M+kZ2vPc81t4cSMhMFH1gvMKrT+?=

=?iso-8859-1?Q?/HcoUd//6Mw8l3Fxz60SLCk68EjVGOfzQpwJvH59S9c5Zxg4Emt7N8k5Aw?=

=?iso-8859-1?Q?Y+V+3hhb0gtaLMO47iOhxjVBCySnTBsmLzPDl2n7+VHKb+DjDs0lcw9D+d?=

=?iso-8859-1?Q?kff+i9WBQjVascACoP0akbvgJND3SUcXUMLwzu+Aj7LKZBE0J7JQbG7bUe?=

=?iso-8859-1?Q?m/vkLM5Ytd3wsjEN3/t3omQFl1ihIksT8dFUzCo9quWyS3+rGBReBlMEs+?=

=?iso-8859-1?Q?UkPIWGRrplfOGw8hINTHJdVMABAYJQ0jq3E4kk8Tqg7YHZ/D6YRMi6k44n?=

=?iso-8859-1?Q?lIimAfDUrEcWNWLySHBprHwF1pfNXSqUt9fd5+HJpVXRgdExNCbv8tOYZ3?=

=?iso-8859-1?Q?zp47ekzXVhn5PUypIFAqrc/NC2OBMq181Qc7jrh71X+QohKzAun8va03qV?=

=?iso-8859-1?Q?GpIPyLu+nK4eq7CU20tXrZQd/3fWUWsrE1Y1+XhAlgUseUnaZ/r01MnmF7?=

=?iso-8859-1?Q?2GmqQJRy1gemSB09gnG5nLSwiJZ6wO+7OJ1QFWEWpGzpOEhXJmVDeq6cNG?=

=?iso-8859-1?Q?t990bzncOUhg9LrQ7npPhzKWNiLHFKDLK40Vti+SNehs7QqOE6TMFhXNVH?=

=?iso-8859-1?Q?oknQJXmtxVms4uQEzFERiVBB1HyjW0+uRG/zUNbeHHeDHOru4za0bOr7y4?=

=?iso-8859-1?Q?rRJdUuTzJO7P5iv2oxJCEs776NHk9CfA1jJ5JMUYb/eVDDpIqSJUHRZWW8?=

=?iso-8859-1?Q?Fk61apKl9z0yNJFbT2WBs6PITozNHs9bQcL93j6BO1hcuhWyShYtR2hN?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?b9yXCAKg1AhMVnrpBJZM30CtXkdH4CYOwyCekKmCVRg/ecEw9f1KH1aPQC?=

=?iso-8859-1?Q?GDpJEu3X/iqeEqZm1LY6se3s6rJf29z88zImWR0PTBRw5KEJsHFvchJVub?=

=?iso-8859-1?Q?pQfc60KqwDmrm85smtb4ZrG/TcsuBmEVWRt9uKCEilF5mpOaDdzGNg7i38?=

=?iso-8859-1?Q?2rgmg3GQfuDH6T83dGflrejVBgu9p4GdmIJ0PcriqEF81trq4E/SKsXz5J?=

=?iso-8859-1?Q?9cKxtHagwvqkt998K84UyfqyGeVIJT2Mtgn2njd7Tb0VaQQJpq5L7RCe1q?=

=?iso-8859-1?Q?Btw2gBVTcpSkoKwXIjsBq8RT69AuXdnSlpepGE7+MFCwbp34wq3YeZ1QGj?=

=?iso-8859-1?Q?K+CYJGiADYSgddPC/kMdiVxho+R3et70z3XoajfIbwIBk0tviRPgpQJm3C?=

=?iso-8859-1?Q?JQV18RVlIp9XhcgmOEv/xohlxsVc6m6uJpkIOnv43nWk04zafp7GeQEN9o?=

=?iso-8859-1?Q?zUze0O5c8cEhTuK5M4pQWb7bIk+9fa/LUqvZYC4WKyk/3Sq2MuX8E9CgG+?=

=?iso-8859-1?Q?wd7AlG40ufjn/Xjh8lZN/M1/j12ByyMrgok+saJIEbR9epkkmyzQ1DjUAY?=

=?iso-8859-1?Q?nsfDRt5mQ2GyKLB9foITsGbZpnVjG42l28fBuuPk6w7HntId/2+65Y/us6?=

=?iso-8859-1?Q?hJX1/mSe7Bf7Fvn8qDajqfdHxPzGhRxy32fjBCliREcxYXWTqTGA+6D4I8?=

=?iso-8859-1?Q?6wpW5k6unHobxjpNtMyLe+Z0hx6vmvzpVZqCa2pVVETo5xoscIb0aCFNHO?=

=?iso-8859-1?Q?9fpdS8sS6zSLNrmHmIcwXH+CmoXseb4KwbzAUfO7qGzwMvYV3wTd+6OQfD?=

=?iso-8859-1?Q?7junbBTJD87Yv1gwr6UQAFSfv4hdBfrVNBrM3AeY0PDtGLDUJU/odrmTRO?=

=?iso-8859-1?Q?eccep4ZBCP88X4aVUbkZV0p0tIp4Il7rTMf1ANh7HFXl/ExUDG3iTxLGfv?=

=?iso-8859-1?Q?ruanTB4BCEC6iZn8ovia0h4eOlDMOQ9MwHUPJno9dmSPkMnGPbfnWxS6Gw?=

=?iso-8859-1?Q?Zogbj3sETLwqbZF16fvYj5PpQhCNqW9FAXJYedYVeFek0DsziHGr2YlJYw?=

=?iso-8859-1?Q?wCVrLG9qrbz+wLE0pDn7Ce/qX5f282XDDz/UHddcM2NypWNynW/KgiqBU+?=

=?iso-8859-1?Q?oePxgxHNjdqr95cMgrt7SvY5OsRoB9yewFtJHgJVJEHX7ZRlAktOgUKB/U?=

=?iso-8859-1?Q?s7Ypz+Sc/6Bl0LeeZAM4USdA9fngKFH/rqxRSzHUem/UwvCtnAwJbfuhtK?=

=?iso-8859-1?Q?o03vrfByWX9oJM8WqWcadaAz/rzyI3nkEM1O7BWCW9qg1tErhbao11/FLg?=

=?iso-8859-1?Q?qdESj3OcoJKEqNg32wuZ0IKG+M2ZvYyjgaa+ah0NebGt8dWfMAKk/R3+Gf?=

=?iso-8859-1?Q?wFHZwyAbtaGdfS0cPpzBN99GyQEYs/E2J4CIaqglnBtYjfpwvuUwuJdjRv?=

=?iso-8859-1?Q?h35WT7peypUArWUytKDy0KihWQRn9G3kBiRzosqzw4i7S6YxmnoeuKJvII?=

=?iso-8859-1?Q?vISMV+T9Xh0NlQVCJcl8rW?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR04MB613167A872A87E081C6F7528C047ASI2PR04MB6131apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR04MB6131.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 839a620b-0a3c-46fe-bd7f-08de7f8ffddb

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Mar 2026 17:02:34.9172

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: JH0PR04MB8296

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey There! We trust you are doing well. How hard do you think

it is to have your website rank on search engines?

Internet leads spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Mar 2026 15:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0RQh-00000000I3p-42WL

for dave@doctor.nl2k.ab.ca;

Wed, 11 Mar 2026 15:49:23 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Mar 2026 15:49:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f54.google.com ([209.85.219.54]:49633)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0PAr-000000009Hp-3cCn

for root@nk.ca;

Wed, 11 Mar 2026 13:25:02 -0600

Received: by mail-qv1-f54.google.com with SMTP id 6a1803df08f44-89a15b9a556so2641376d6.3

for ; Wed, 11 Mar 2026 12:24:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gopersist.org; s=google; t=1773257036; x=1773861836; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=pziuEz0y9cFEH+DqvwS0cVR7HBWAraWF0Xi3e/vjzXM=;

b=jlUjS24NwFdE5yh1hbLwGBCjDfcsfu7VbdVeXJqb0wAh6viyK4Fn9O0wQ6W9R0v0nL

VzHrDP/4OI3OAq+FQQOzeSJZ9e3zX0MuEIiNITLBLTZ++HXZLdyWZLCBvW6fQ9LE9RhO

Yr6/jTcFw87Xx0WhRhIngznvewPsRwBI3GhW1AkBbDq9+E6kFvwSfDLAzcOmjA/MP1l+

5fk9rVizKoPm5nrCh7HuyusXiihNgpkncmEuYlo1QKHcXCZoYHEvYrSHl1zezgSnH+KC

MH6ZyzrKhzjt/pLmA/HTRe3BhGdSYf8FPocCgTa3x7DP/MLLBNWBzXjUmF0Ve1zdRk1Z

vG5w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773257036; x=1773861836;

h=mime-version:date:content-transfer-encoding:subject:to:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=pziuEz0y9cFEH+DqvwS0cVR7HBWAraWF0Xi3e/vjzXM=;

b=k4G5gdgXeIKj9shdGhA9oYInnbTeHqoKa4RDEDl1PK65BpgqD56bNh5H7RNiaBEanK

J+NSKXWQQPtVUr2Uh9cthwz6YSJcXKvmCMA66WQZxr+MAYCu2CMbR0+OVKPgHNKBfzvb

U0JBddHi2b2h7IsCz5b9vwtYyV962sD3uLXD6mwlRGGOAFoDpvh7YjWsx9k+tV16/b2/

EZL71PQsDSpHC/RoY/um096hzVttNgDPSF2IwKBtOwoLWISMS3fpaKi7EVeFboPJC25E

51gbmX3HU5zmeh9vJHXcYTgLQ4XN2TgCtEbYpwyr+HCsZAcKq69c7Fdx13x41eFVcvJa

l2EQ==

X-Gm-Message-State: AOJu0Yw5lSzk0Cp3dSRdG/nrNR+82FMCy0XCQ1U6sGI3+T+Y1067Bzst

efcVjL0DU5pGSD0wVZhRIqt65otX2c9GrLNee7uJ9FK9cn+dLiGo81dKY+MUSOQBeSK1gvM01hZ

MN9AH

X-Gm-Gg: ATEYQzxwoYEB6FIIcTUgbhFQbnZanmHpvGqQ16BUVJ++rZKEhnx9GjrfDDLtofQ5+bN

UEkHaIWGFEK+H0CQl+FQx+B5UcPowB1JiVuDnTedUp/sfFhOD5CP22ksRUzzab9MlR+Ti06/Ng5

j/ypFSp1gAXBy4ll+tiTJzF1Bwzone2DzvD4pXuPGyq6vQdkt64KoDMWi8NCVsMZs5PK7V4KNHE

Ri6BP4vC0S7FPVgj7upF9A5QDtNw+Kv+LijUUKrzuYfpJxmkxK5Hg/69/pcPwUO6UlfADuYXG8L

H+IR3T9PVa3KRdWwf9WrFLgoGuHoqMitoCWy9i4LHZEqs2/SP+4+5GmcFGrQYsQuOU5ssQNVKTV

IpFTtEtJLYDVYpeS2zxSHCz6DQnG7Ev5TcwF14z6JMjgdvk4+i3j3jgO2w3r/TGCMTnjmTxKICu

BXBqz1j1W2+26FRInQ8JYfZqKSM9A321Iix6/Tfmnx/quKRRpqM0rnWLbajdgvyKabmoVq/sWRw

0j/kobqBZvAxy6ZZwVVHF2g9LpzypGhwQoww1eUPjpe6m7sGxRE

X-Received: by 2002:a05:6214:2aa3:b0:89a:12ba:5f56 with SMTP id 6a1803df08f44-89a669bb75bmr48969956d6.4.1773257036278;

Wed, 11 Mar 2026 12:23:56 -0700 (PDT)

Received: from 019cde5b-0c90-769d-a838-e1de5d9e18e3.local (ec2-3-145-84-110.us-east-2.compute.amazonaws.com. [3.145.84.110])

by smtp.gmail.com with ESMTPSA id 6a1803df08f44-89a65cd7f49sm20113366d6.34.2026.03.11.12.23.55

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 11 Mar 2026 12:23:55 -0700 (PDT)

Message-ID: <019cde5b-0c90-769d-a838-e1de5d9e18e3@gopersist.org>

From: Jesse Pines

To: root@nk.ca

Subject: NK new clients

Content-Transfer-Encoding: quoted-printable

Date: Wed, 11 Mar 2026 19:23:55 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi I came across NK online and wanted to reach out because

we're working with other internet service providers that are offering internet

services.‍ I’m currently working with a few internet service providers

on campaigns that are getting their sales teams meetings with warm leads

every month. We’re targeting people who need internet services [...]



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[3.145.84.110 listed in will-spam-for-food.eu.org]

[3.145.84.110 listed in will-spam-for-food.eu.org]

[3.145.84.110 listed in will-spam-for-food.eu.org]

[3.145.84.110 listed in will-spam-for-food.eu.org]

[3.145.84.110 listed in will-spam-for-food.eu.org]

[3.145.84.110 listed in will-spam-for-food.eu.org]

[3.145.84.110 listed in will-spam-for-food.eu.org]

[3.145.84.110 listed in will-spam-for-food.eu.org]

[209.85.219.54 listed in will-spam-for-food.eu.org]

[209.85.219.54 listed in will-spam-for-food.eu.org]

[209.85.219.54 listed in will-spam-for-food.eu.org]

[209.85.219.54 listed in will-spam-for-food.eu.org]

[209.85.219.54 listed in will-spam-for-food.eu.org]

[209.85.219.54 listed in will-spam-for-food.eu.org]

[209.85.219.54 listed in will-spam-for-food.eu.org]

[209.85.219.54 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.54 listed in dnsbl.ahbl.org]

[209.85.219.54 listed in dnsbl.ahbl.org]

[209.85.219.54 listed in dnsbl.ahbl.org]

[209.85.219.54 listed in dnsbl.ahbl.org]

[3.145.84.110 listed in dnsbl.ahbl.org]

[3.145.84.110 listed in dnsbl.ahbl.org]

[3.145.84.110 listed in dnsbl.ahbl.org]

[3.145.84.110 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.54 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.54 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.54 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.54 listed in sa-trusted.bondedsender.org]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.54 listed in sa-accredit.habeas.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.54 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.54 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.54 listed in wl.mailspike.net]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} NK new clients



Hi =C2=A0



I came across NK online and wanted to reach out because we're =

working with other internet service providers that are offering internet =

services.=E2=80=8D



I=E2=80=99m currently working with a few internet =

service providers on campaigns that are getting their sales teams meetings =

with warm leads every month. We=E2=80=99re targeting people who need =

internet services using personalized email sequences.=C2=A0



If I could help you connect with potential clients like this, would that be=

helpful to you?=E2=80=8D



Thanks

Jesse

422 Richards St, Suite 170, =

Vancouver, BC V6B 2Z4

P.S. If you don't want to hear from me again, please =

let me know.

Chinese Products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Mar 2026 10:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0MjP-000000002e1-45Hy

for dave@doctor.nl2k.ab.ca;

Wed, 11 Mar 2026 10:48:23 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Mar 2026 10:48:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out196-37.us.a.dm.aliyun.com ([47.90.196.37]:51885)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0Mfn-000000002Db-39ok

for root@nk.ca;

Wed, 11 Mar 2026 10:44:47 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:jenny@mail.internationaltrading.asia:alibabak_ApiBatch:274723

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1773247383; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=1W7wZHb1kTKQWYm2wmuFZkOMOFGVH1Q5MqQZh8F3dCw=;

b=qmTDBsZ18UJTji5SiW8hoicF1sYpnI4lH0mnM4rjvPxkpvGgINkKMvPUSuU477iXpYo13vOJCtaiPThdb0b7o2TPv49ezPsK/WNlDzkhlP6XGGrx1dcqFyWb/5uM4YqLlzIj/NcKF/mP6pHTTOi7/Mg70w5ENpDu1tBn9k0we/g=

Received: from chitu-hsf(mailfrom:jenny@mail.internationaltrading.asia fp:ma_600000281478322932 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Thu, 12 Mar 2026 00:42:59 +0800

Date: Thu, 12 Mar 2026 00:42:59 +0800

From:

To:

Reply-To:

Message-ID: <5198ce68-e325-42d1-b8dd-108e90333a35@alibaba.com>

Subject: =?UTF-8?B?Q3VzdG9tIE1pY3JvZmliZXIgU29sdXRpb25zIGZvciBZb3VyIE5ldHdvcmtpbmcgQnVzaW5l?=

=?UTF-8?B?c3MgIA==?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000281478322933

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Dave, I hope this message finds you well. My name is

Jenny, from China Wujiang Nuode Textile Co., Ltd. I truly admire your expertise

in computer networking and strategic planning—your background in econom

[...]



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

[47.90.196.37 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

[47.90.196.37 listed in dnsbl.ahbl.org]

[47.90.196.37 listed in dnsbl.ahbl.org]

[47.90.196.37 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.90.196.37 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[47.90.196.37 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[wangjenny632(at)gmail.com]

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} =?UTF-8?B?Q3VzdG9tIE1pY3JvZmliZXIgU29sdXRpb25zIGZvciBZb3VyIE5ldHdvcmtpbmcgQnVzaW5l?=

=?UTF-8?B?c3MgIA==?=



=0ADear Dave, =0A=0AI hope this message finds you well. My name is Jenny, fro=

m China Wujiang Nuode Textile Co., Ltd. I truly admire your expertise in compu=

ter networking and strategic planning=E2=80=94your background in economics and=

mathematics reflects a sharp analytical mind, perfectly suited for innovative=

collaborations. =0A=0ANuode Textile specializes in microfiber towels with 15=

years of experience. Given your entrepreneurial focus, our customizable micro=

fiber products=E2=80=94ideal for tech events or corporate branding=E2=80=94cou=

ld align with your needs. With an independent R&D team, we tailor solutions (s=

ize, color, logo) to elevate your brand=E2=80=99s professionalism and practica=

lity. =0A=0AIf you=E2=80=99re interested, I=E2=80=99d be pleased to share our=

latest catalog and discuss how we can support your business goals. Looking fo=

rward to your kind reply. =0A=0ABest regards, =0AJenny =0AWujiang Nuode Tex=

tile Co., Ltd. =0AEmail: wangjenny632@gmail.com =0AMobile: +86 182 0621 7550=

=0AWebsite: www.nuodetex.com

Accounting services spam from Google Gmail Part 2

Posted by Dave Yadallee on
--000000000000813af9064cc15f2a

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,





Following up on my email about dedicated remote accounting services. We=E2=

=80=99d

love to explore how our expertise can support your business. Let=E2=80=99s =

schedule

a call to discuss potential collaboration opportunities.





Best,



Templeton



On Thu, Mar 5, 2026 at 9:49=E2=80=AFAM wrote=

:



> Hello,

>

> Hope you and your family are doing well.

>

> Please, could you let me know whether you are interested to hire a Dedic=

ated

> Remote Accountants or Bookkeepers on full time or on hourly rates at a

> reasonable cost?

>

> Our range of services include:

>

> - Bookkeeping Accounting & Year-end finalization

> - Financial Reporting including Income & Expenditure Statement,

> Balance Sheet, & Cash Flow Statement, Bank Reconciliation.

> - Payroll Processing etc.

> - Tax Service

>

> Let=E2=80=99s set up a time to chat or call for further steps if this is

> something you are looking for!

>

>

> Regards,

>

> Templeton

>



--000000000000813af9064cc15f2a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




tyle=3D"margin:0cm 0cm 8pt;border:none;padding:0cm;line-height:15.6933px;fo=

nt-size:11pt;font-family:Calibri,sans-serif">
_m_4052547269113985615_m_1441479675061563112_m_8188882263428477754_m_208689=

5860448256409__Hlk207247343">Hi,


s=3D"MsoNormal" style=3D"margin:0cm 0cm 8pt;border:none;padding:0cm;line-he=

ight:15.6933px;font-size:11pt;font-family:Calibri,sans-serif">


ass=3D"MsoNormal" style=3D"margin:0cm 0cm 8pt;border:none;padding:0cm;line-=

height:15.6933px;font-size:11pt;font-family:Calibri,sans-serif">
=3D"EN-GB">Following up on my email about dedicated remote accounting servi=

ces. We=E2=80=99d love to explore how our expertise can support your busine=

ss. Let=E2=80=99s schedule a call to discuss potential collaboration opport=

unities.


r:none;padding:0cm;line-height:15.6933px;font-size:11pt;font-family:Calibri=

,sans-serif">


der:none;padding:0cm;line-height:15.6933px;font-size:11pt;font-family:Calib=

ri,sans-serif">Best,


style=3D"margin:0cm 0cm 8pt;border:none;padding:0cm;line-height:15.6933px;f=

ont-size:11pt;font-family:Calibri,sans-serif">Templeto=

n



gmail_attr">On Thu, Mar 5, 2026 at 9:49=E2=80=AFAM <
mpletonsuzuki136@gmail.com" target=3D"_blank">templetonsuzuki136@gmail.com<=

/a>> wrote:

px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><=

div dir=3D"ltr">


yle=3D"margin:0cm 0cm 8pt;line-height:107%;font-size:11pt;font-family:Calib=

ri,sans-serif">Hello,






ze:11pt;font-family:Calibri,sans-serif">
20093427068845645_m_6505453049666801945_m_-4743618314169655664_m_2361703908=

326606860_m_-200037392668270">Hope you

and your family are doing well.






ze:11pt;font-family:Calibri,sans-serif">Please, could you let me know wheth=

er you are interested to

hire a Dedicated Remote Accountants or Bookkeepers on full time or on ho=

urly

rates at a reasonable cost?






ze:11pt;font-family:Calibri,sans-serif">Our range of services include=

:








  • size:11pt;font-family:Calibri,sans-serif">Bookkeeping

    Accounting & Year-end finalization



  • size:11pt;font-family:Calibri,sans-serif">Financial

    Reporting including Income & Expenditure Statement, Balance Sheet,

    & Cash Flow Statement, Bank Reconciliation.



  • size:11pt;font-family:Calibri,sans-serif">Payroll

    Processing etc.



  • size:11pt;font-family:Calibri,sans-serif">Tax

    Service





ze:11pt;font-family:Calibri,sans-serif">Let=E2=80=99s set up a time to c=

hat or call for further steps if

this is something you are looking for!






ze:11pt;font-family:Calibri,sans-serif">






ze:11pt;font-family:Calibri,sans-serif">Regards,


style=3D"margin:0cm 0cm 8pt;line-height:107%;font-size:11pt;font-family:Cal=

ibri,sans-serif">Templeton













--000000000000813af9064cc15f2a--