Nigerian spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content analysis details: (11.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.102.167.20 listed in dnsbl.ahbl.org]

[52.102.167.20 listed in dnsbl.ahbl.org]

[52.102.167.20 listed in dnsbl.ahbl.org]

[52.102.167.20 listed in dnsbl.ahbl.org]

[2603:10a6:150:b0:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:b0:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:b0:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:b0:0:0:0:11 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.102.167.20 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.102.167.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.102.167.20 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.102.167.20 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:150:b0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[52.102.167.20 listed in will-spam-for-food.eu.org]

[52.102.167.20 listed in will-spam-for-food.eu.org]

[52.102.167.20 listed in will-spam-for-food.eu.org]

[52.102.167.20 listed in will-spam-for-food.eu.org]

[52.102.167.20 listed in will-spam-for-food.eu.org]

[52.102.167.20 listed in will-spam-for-food.eu.org]

[52.102.167.20 listed in will-spam-for-food.eu.org]

[52.102.167.20 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.102.167.20 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.102.167.20 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Re: Please, I Hope You Ok, Are You Available Now ?



GOLD AND DIAMONDS WORTH $185 MILLION USD



Hello And Good Morning.



My Name Is Ms Amal, Please I will like you to help me claim And Invest 30 kg of diamonds and 600 kg and cash money which runs into hundreds of millions of U.S.D that is in your country. Please It will not cost you any money or your time and it is 100% legal, I am just looking for someone I can trust and can represent me in your country because of my inability to travel now. Please write me back directly at my private email at ( ev2jfo@inf.elte.hu )for more details. Thank you



Ms Amal S.N

ev2jfo@inf.elte.hu



NOTE : Please Write Me Back Directly At at my private email ( ev2jfo@inf.elte.hu ) so that I can give your more information

Nigerian spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Apr 2026 06:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wEndN-000000004Xo-1w5J

for dave@doctor.nl2k.ab.ca;

Mon, 20 Apr 2026 06:21:49 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 Apr 2026 06:21:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-francesouthazhn15011020.outbound.protection.outlook.com ([52.102.167.20]:15212 helo=MRWPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from <2752501@student.edu.az>)

id 1wEkrc-0000000097S-1oR3

for doctor@nl2k.ab.ca;

Mon, 20 Apr 2026 03:24:31 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Rx7pY0WrHQLrG+DIbLytfIHVZJe2QDWPob7Mlmr6Dr6IQZRqR+gEA04zMIzU/PIKMZtUS1u+r9LlbEj3jmEuwrsbPLpOc+fi9XRl2Cy6L8/g7jbNcCq+Z5vzJzx9IORCk1U256yCHrY8aOd6tgYh7B+ER2jUdiTbmc6iLXIsHr3qTFnDJEeDhX85+x5y8LzlPLfI+/GgAIinn2QAmI+wKAjoYeobmDWicj1eIoixxKrViqbcsUhKUOD+kDbkUOkecaxDItgxmZ17JzLzanvaUPZUD5WFfz/VXjlNJxVZddQTG5s6hFapueE/LnKsN2xbmCvv+Eb1UR3U0Y6KmUOZiA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=OqZezfNNAzsIynT8Pb8HSaxo7zEFLTUZjbjKFFGx658=;

b=thVhSUd1KBk/Hfkmd4nteoV0MIoOZ1H1THc1em+bY1tH1o/51oMjeCwy6ZEPzn2jsjmii2GKQnDIfFik+DsvnslJ03wHdFPtAEgwiGXKL467JoYlmQFjx58iNLql2E3C8duL+ANbQh1o70T+0lQ74qEcMvWXTWERyJq2Sms13d6Nvn8JvnjzbsBZ/xDXwGoaWizPChXGi539uaPwtzEaPq05v8Yj4yjmm06dboZ0JVmHXybNEmUndMwp/hyD6wz/i3Ph5CXNZl6zTbxtRko53Tnqn+fD4YpHAXqQE5940FcIz1acy043J5TzHRMCIDOljmpAFhQIV+2ZDvMUpltFdQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=student.edu.az; dmarc=pass action=none

header.from=student.edu.az; dkim=pass header.d=student.edu.az; arc=none

Received: from GV2PR08MB10383.eurprd08.prod.outlook.com (2603:10a6:150:b0::11)

by AS8PR08MB9411.eurprd08.prod.outlook.com (2603:10a6:20b:5aa::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9818.31; Mon, 20 Apr

2026 09:23:18 +0000

Received: from GV2PR08MB10383.eurprd08.prod.outlook.com

([fe80::b6b3:4a29:5917:2a20]) by GV2PR08MB10383.eurprd08.prod.outlook.com

([fe80::b6b3:4a29:5917:2a20%3]) with mapi id 15.20.9818.032; Mon, 20 Apr 2026

09:23:18 +0000

From: =?utf-8?B?S8mZbmFuIEJhYmF5ZXY=?= <2752501@student.edu.az>

To: "aamalsydunazir@finmail.com"

Subject: Re: Please, I Hope You Ok, Are You Available Now ?

Thread-Topic: Please, I Hope You Ok, Are You Available Now ?

Thread-Index: AQHc0KdSESH4H7TZnESl53obUw3UQw==

Date: Mon, 20 Apr 2026 09:23:17 +0000

Message-ID:



Accept-Language: zh-CN, en-US

Content-Language: zh-CN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=student.edu.az;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: GV2PR08MB10383:EE_|AS8PR08MB9411:EE_

x-ms-office365-filtering-correlation-id: bf9d89db-2978-42f3-7604-08de9ebe7517

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|5970700213|7416014|376014|1800799024|41320700013|366016|786006|38070700021|56012099003|18002099003|8096899003|17680700008|482034009;

x-microsoft-antispam-message-info:

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

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:zh-cn;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:GV2PR08MB10383.eurprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(5970700213)(7416014)(376014)(1800799024)(41320700013)(366016)(786006)(38070700021)(56012099003)(18002099003)(8096899003)(17680700008)(482034009);DIR:OUT;SFP:1501;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?dElMU20xYWUrMGJLWnpTTlk1Vk0rVFN3ZmRidWhoNWhqU1JOR0FyUHpUb2Jp?=

=?utf-8?B?VDR5STJQd05oc1Z3d0piSFdkN21ZdGF2QXFpbXdsa1AxSFphZ25oZzhMRndx?=

=?utf-8?B?OTc3UXlaS0VKUGt1NDVZOEZSK0lHbHdxUDJUSkcrMS9FYlZ4NEx4UC9KUU12?=

=?utf-8?B?dEJnVi9UTnBhUStoeW1YS2wzcW1rcjNmODBieWswRWV5WmVHS3o1T2xTeSs4?=

=?utf-8?B?Z09GOGN1blk5WGc3Vlpvd2I3Sm9Qc3ZDWFdydkhzSzlHOFB2ZDFCUCtDZElW?=

=?utf-8?B?VjhUUW50R0l1T2g5aFBpeDRTYjZVMTRJbWVmRTJkbW1rdmJvY1pXVDBCa09Y?=

=?utf-8?B?cGtvWkV0MFRPZ0p2U05OM2d3SUxqd2hrUTgwZFV2MFVyY29COXR1K01JUWNs?=

=?utf-8?B?NlVrdHNDOXRRb0VtQnJ6eUJFdjdqVzZQTWR4cHJudmprd04rejV3bE0veXVB?=

=?utf-8?B?U0dlVTl1WGRBOVM4Z0RQSnZSYVJzUjVvN21BOVN4dHJvMUFtNVR5R1l3dGRk?=

=?utf-8?B?eUNFZ3lyTWZlYkx6OEppZVd1L1lUWFhqbWZwUTloamowcmxxZDJ5OEtCYzhL?=

=?utf-8?B?cTZERlltVm1NdjdrUytZckwxU1NQd2x2M1dqVWJnejJqclB3aWY0eFBvaHFY?=

=?utf-8?B?VkFPYUNzaHhFSHZha0c4UWMrUEJrMStTWUpVL2E0T2hoUE82RDNGSC9BQmdI?=

=?utf-8?B?Tmpod05nV2pFQVJFdWh6REMwbGNjL2FpTE0vNDNyMU1aay81V3ZSMnRHZGk5?=

=?utf-8?B?SmF3UU9wOUFGMmFtekg0QXZJeGw4QnFVY0NGVWJ3dlFUWS8xRW9WRmFnNk1S?=

=?utf-8?B?eUorekE2SEM2S0Y1QWpkWVJiQ2lkVHRrZ3NNblpIU0g1MStSY29uWkZja1cw?=

=?utf-8?B?TmZHa1lCVlh0MEJua2hrR2hwNy9KOTZRdEl0OEthK2UvOTZvcTBrb0huWm5x?=

=?utf-8?B?ek42bm01bTAyaUN4QjZsdmVlY3hwcEQzTmFxaWR2RDVVTFFzNkU0YnpKNzlZ?=

=?utf-8?B?Wi9HUU5mRHd2cnJwZ1lGWkt0U1YwWmJETzczakZpYjF3MlNPcW03YmdvcUNY?=

=?utf-8?B?UnFQYktjWWZSNVhKckcxSnFwbkNMRTM4bHhCT3JGeDFybFJhakpCblVoMGUz?=

=?utf-8?B?ZHp2TjZTOXZaWU1KMkg2Rk5uUzUvQ05CYTE3aVAxcGY4bnNvWFFzdlp4RE9u?=

=?utf-8?B?YmdqUEhMOWRlRDMyWTN0V0E0cUFick5LMm80V3dMTWpFbEJVM0E1SDBOZHBJ?=

=?utf-8?B?SnVlNkxFYk0wdzFRbWptMzZ3aGN2WUpoMDl2NTdkTCtNaUw2U0xaSFFiSlAr?=

=?utf-8?B?R0ZlenZRRUpYbU1ZUVhZeGNHNmpKckE2NzMxTkJuT3RpT2xhZnUwSlZNWDE3?=

=?utf-8?B?THNWU1lHelo4RnVWd3BNNHNjV1ZWMDhNVlRXSjY4QnFzaG1FZ3lTMUF4R2ZW?=

=?utf-8?B?WXZQdkxJQXlLZldET2VGcGxscW5GQlpubTlvcmpnbDN4dHZGeW0zMXNKMlhX?=

=?utf-8?B?dzRCWWpRWXdGZzcvRnFoTkpJTVJJSVRNcWZOVGJnN3loZEg1elRQSExjUURU?=

=?utf-8?B?ZzBLa0xSRHFwdGJlNWtRdm5aQXlDclczTnpaZWVrWXdkM3ZGazB4SDA3enoz?=

=?utf-8?B?dzhwUG03QkxWSXlvbDkwOVd5alNvZzB6czlRRW1QUjJJeGl2L2NicEd4blk2?=

=?utf-8?B?K0tIYmlZRmtCYXBVVTIwcDRHZDNBQnJwdzNyTUVWeFNJNUZmY08xZDZzRFRB?=

=?utf-8?B?SHBJbUZOSEFzRkFPSU91dTJ2VjdxWENZcERURlRwelVVMkNvd0Q5NVhRcmJp?=

=?utf-8?B?aUFVVnRDTHhna01JNUJPaWVNRnpjWWdVcm5BTTF0eThUQWlJdGlKWU5lNXdp?=

=?utf-8?B?UGFOd3hqeXhDbG1YTE9Pc0FYVkZSeUlTODRGaUlwTU1CQWZ2ZkdYL1h3RUNV?=

=?utf-8?B?cjRacTQ2M3h2L3MvSE5WU3UrdEUvMTZ1ejlTOHYxeldaQjg4Z3hpUmdTZXB2?=

=?utf-8?B?WWVTOXR0SGhFREprcVFwdU44My9mQTRrdGkvRFZxTVFWQmhiWksxL0lMaG1Y?=

=?utf-8?B?SGZUS0tkcFJSNzk2MStMWlcybXZrb0g2Uk5mdGZqYXBadnA2amhFVG5LZjRi?=

=?utf-8?B?Ui8ySUJrQUdqQ3ZTUnB3WnZUU1hCbWE0SkxCbHhubUwxVkhoUy8zcTVPbVpT?=

=?utf-8?B?QXc3TlJ4ZFk0Z0RSME9kZ0J6R1duSi9sd2Z4Sk5ISkRhc2tZSnc1OFNNRTdj?=

=?utf-8?B?QjV4UDdFVFJmaVVJaWVMQSt5MFY1TGYwcnNzVFFuazhoTms1UDhIU0F4UW96?=

=?utf-8?Q?xiBIje3msmy+tzQVHB?=

Content-Type: multipart/alternative;

boundary="_000_GV2PR08MB103834B9F0B05015B696216AACA2F2GV2PR08MB10383eu_"

MIME-Version: 1.0

X-OriginatorOrg: student.edu.az

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: GV2PR08MB10383.eurprd08.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: bf9d89db-2978-42f3-7604-08de9ebe7517

X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Apr 2026 09:23:17.8547

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 14fc0a60-1070-4142-9f31-1b94187a961f

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: 9gWEljTUg3FrBb/mxnQM6gHsSixoRMvD2Rq+lVz/NyMGZvJpXBCgaZZO6aJPJrRjFRun4ttqE08SSQXiciZfZQ==

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR08MB9411

X-Spam_score: 11.1

X-Spam_score_int: 111

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: GOLD AND DIAMONDS WORTH $185 MILLION USD Hello And Good Morning.

My Name Is Ms Amal, Please I will like you to help me claim And Invest 30

kg of diamonds and 600 kg and cash money which runs into hundreds of millions

of U.S.D that is in your country. Please It will [...]

Grant phishing from Google Gmail Part 3

Posted by Dave Yadallee on
--===============2076648452362824176==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



Hi Gurkirat, 

W=

e noticed your Cash Advance application is still incomplete.
=


You=E2=80=99re just a few steps away from secur=

ing up to $800,000 in funding within 48 hours.


>
To move forward, please complete your application here:

strong>

id=3Dlead_bqyNtSfmgPr9HEY1bFvoKaWRLZZxf887Qp2LC28qfuP&legalBusiness=3DN=

K MAINTENANCE&fullName[first]=3DGurkirat&fullName[last]=3DWirring"=

rel=3D"noopener noreferrer nofollow">Click to Start your Applicati=

on here

and upload your last =

3 months of bank statements. This will allow us to finalize your review and=

match you with the best available funding options.

=

If you have any questions or would prefer to speak direc=

tly, feel free to call me at +1-866-216-5475 or 715-641-4654
=


Best regards,
Stephanie Cabiao
Kesef Marketing
ng>


=3D"font-size: 11px; color: gray">To stop receiving these emails, click
href=3D"https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil=

9kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6--tg9gajA9HdvShNSyH_DgbhmTyc=

8=3D/" target=3D"_blank" rel=3D"noopener noreferrer nofollow">here
>



On Apr 17, =

2026, at 11:03 AM, Stephanie Kesef Marketing <stephanie@kesefmarketing.c=

om> wrote:
Hi Gurkirat,
g>

This is Stephanie Cabiao from Kesef Mar=

keting.

Welcome,I wanted to perso=

nally reach out and thank you for your interest in business funding. We wor=

k with lenders across Canada to provide reliable funding solutions that sup=

port growth, manage cash flow, and cover upcoming expenses=E2=80=94while he=

lping you access competitive interest rates.

<=

div>If you=E2=80=99re open to exploring your options, you can get s=

tarted here:

2?lead_id=3Dlead_bqyNtSfmgPr9HEY1bFvoKaWRLZZxf887Qp2LC28qfuP&legalBusin=

ess=3DN K MAINTENANCE&fullName[first]=3DGurkirat&fullName[last]=3DW=

irring" rel=3D"noopener noreferrer nofollow">Click here to start yo=

ur application

Once submitted=

, our team will review your information and present the best available fund=

ing options tailored to your needs.


ng>If you have any questions or would prefer to speak directly, feel free t=

o call me at +1-866-216-5475 or 715-641-4654

<=

div>Looking forward to connecting.


v>Best regards,
Stephanie Cabiao
Kesef Mark=

eting

<=

div style=3D"font-size: 11px; color: gray">To stop receiving these emails, =

click
ty6GVDnil9kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6--tg9gajA9HdvShNSyH=

_DgbhmTyc8=3D/" target=3D"_blank" rel=3D"noopener noreferrer nofollow">here=


/t/IdgvuY1D0r27T7jUj4usBjtRsMuAYbAna9WUKMagNlu/YVFsbTnwSw.png" alt=3D"" wid=

th=3D"1" height=3D"1" />

--===============2076648452362824176==--



--===============8714162643405574583==--

Grant phishing from Google Gmail Part 2

Posted by Dave Yadallee on
--===============8714162643405574583==

Content-Type: multipart/alternative; boundary="===============2076648452362824176=="

MIME-Version: 1.0



--===============2076648452362824176==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



**Hi Gurkirat, **



=20



**We noticed your Cash Advance application is still incomplete.**



=20



**You=E2=80=99re just a few steps away from securing up to $800,000 in fund=

ing within

48 hours.**



=20



**To move forward, please complete your application here: =20

**



[**Click to Start your Application

here**](https://form.jotform.com/260672364104452?lead_id=3Dlead_bqyNtSfmgPr=

9HEY1bFvoKaWRLZZxf887Qp2LC28qfuP&legalBusiness=3DN

K MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring)



=20



**and upload your last 3 months of bank statements. This will allow us to

finalize your review and match you with the best available funding options.=

**



=20



**If you have any questions or would prefer to speak directly, feel free to

call me at +1-866-216-5475 or 715-641-4654**



=20

**Best regards, =20

Stephanie Cabiao =20

Kesef Marketing**



To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/)



=20

=20

On Apr 17, 2026, at 11:03 AM, Stephanie Kesef Marketing

wrote: =20



> **Hi Gurkirat,**

>

> =20

>

>

> **This is Stephanie Cabiao from Kesef Marketing.**

>

> =20

>

>

> **Welcome,I wanted to personally reach out and thank you for your interest

> in business funding. We work with lenders across Canada to provide reliab=

le

> funding solutions that support growth, manage cash flow, and cover upcomi=

ng

> expenses=E2=80=94while helping you access competitive interest rates.**

>

> =20

>

>

> **If you=E2=80=99re open to exploring your options, you can get started h=

ere: =20

> **[**Click here to start your

> application**](https://form.jotform.com/260672364104452?lead_id=3Dlead_bq=

yNtSfmgPr9HEY1bFvoKaWRLZZxf887Qp2LC28qfuP&legalBusiness=3DN

> K MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring)

>

> =20

>

>

> **Once submitted, our team will review your information and present the b=

est

> available funding options tailored to your needs.**

>

> =20

>

>

> **If you have any questions or would prefer to speak directly, feel free =

to

> call me at +1-866-216-5475 or 715-641-4654**

>

> =20

>

>

> **Looking forward to connecting.**

>

> =20

>

>

> **Best regards, =20

> Stephanie Cabiao ** =20

> **Kesef Marketing**

>

> To stop receiving these emails, click

> [here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDni=

l9kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

> --tg9gajA9HdvShNSyH_DgbhmTyc8=3D/)

Grant phishing from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 19 Apr 2026 22:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wEggQ-00000000MI5-0Odi

for dave@doctor.nl2k.ab.ca;

Sun, 19 Apr 2026 22:56:30 -0600

Resent-From: The Doctor

Resent-Date: Sun, 19 Apr 2026 22:56:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f46.google.com ([209.85.216.46]:49487)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wEgK7-00000000LNJ-0Il3

for sales@nk.ca;

Sun, 19 Apr 2026 22:33:35 -0600

Received: by mail-pj1-f46.google.com with SMTP id 98e67ed59e1d1-35d99bae2ebso2447203a91.3

for ; Sun, 19 Apr 2026 21:32:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kesefmarketing.com; s=google; t=1776659521; x=1777264321; darn=nk.ca;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=TW1HG1xpmSsmoZNR0DepWraspuLQK8GThvWc7DzGZKw=;

b=T/ZhtOKT8oMuOZgKFYe4bPFJeH3TPbQKUFe6fIl1OKXxl3PKe68QHJ6lxbCx8nOV2y

K5n+XwuVJL1xq6LfNuxis0NoTHEB/VNVIVEcjf/wSaEPwCx3UupzwDd/Raig7Etmgl7R

CKmvmufCHT5JjC3m99H5cIZ49iFn9f3EdSzkGFE7+fyKyXukcDHC0CiyzxUxX6Bt7OLL

T8BhCFJu4WsbsJOUZtvviLntc7Cp0KSQsSZCqhiAdt5Yw4ntlhGkUnuwhc6gJWxozxlp

NC+z1a+Ir8OUPlioKJ6ohk2Tv7p9Ta2M+drbQJ1fYn7CgizWZOUiSmJVGL/uW/G+i6Qw

nLFg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776659521; x=1777264321;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=TW1HG1xpmSsmoZNR0DepWraspuLQK8GThvWc7DzGZKw=;

b=RKUhrJb34Vg771+qNaVBFRx08r7aooH+LlnNVYbrf/OcmQubCURhoT2B629ydgY9rN

dLUNTP/l7RuWUGiktdMZN1DKdxyloqfVcEdoZVPP/UGbpWemWYRs9ZLso5eluVKGJdDu

SWo2A7hJdVeM94fIymB+1jCvk4hIGTNfR45MQox2Im+hFogJNHmVxGdx7HrZ0e3hi5IP

v1BswWdjEB5qSLHBy+4qZ1gaYALj5WS3OQDLh0uKzf9jqDV8QgQoJXKRYR8Hj/hZwmuq

aHrFsyeTgYN5rKvQuRChS5BEEjpxG8qPzUqXmDLDU0YeOuI4taTqdQAvloaGEB+XIURu

Xehw==

X-Gm-Message-State: AOJu0YxXelkf7DsY58xvCwmz4fk/WQ7B5DPUqJarnK9yV6vlhkjk70Lp

btar/4NnyRGpNNGh9zDkRA9YeTOFbh+qZpKH/GnkmqyMmbLzXJPluhUd2tTuVTnlmm8IcAwrYMC

mbDnF

X-Gm-Gg: AeBDietZXOXuelKGN9JRSOOceNjSQD9OpycIa6KYnfECjGKU9q5vPEZyuqpP0s8CQyz

/woX8ju6tuEo+8eNJGY+dJBhMpl8D6SleJzdNjExmk4omdDjIXq9ozOmvrumpnUiVat1Ge5WVZ8

XqUtlmLgOyLICijqm6QIeGC7n8H/37uurzglazBZCBJkf9V6Maglvl0F0WJvqz061brWepegEFl

lcmn/ks7apzjAHw9sN1dk9S3D/o+SWOqsOH8altHfsoNxcveERNZm4Q2ORHxOXnPAofNkscr1ej

P6O6NpAhISthpvXB2XQDYzvYQsxjuWcnrn+TYAYtxbW4Fw9rTIJJhFh/iA+QdOzRHe3XVZteXnC

pqLK3yxzD8WKcy/VQzEZYJzusBdEnGnaFUmVEYX+XmIjuO0GSofy/Xb4g+v2tMGUbIgceq1ukcf

sfgCwafCOCkDo5T56S9/gfj+I34r5njb/W0RST2dAofTlbjToOkD5FNEV8f5DmLh0kevNq6rLEk

IEYEdwvSw==

X-Received: by 2002:a17:90b:390d:b0:35c:30a8:319 with SMTP id 98e67ed59e1d1-36140222bbbmr12818301a91.0.1776659521045;

Sun, 19 Apr 2026 21:32:01 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-c0.close.com. [54.200.191.154])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3613fa91d31sm4629385a91.2.2026.04.19.21.32.00

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Sun, 19 Apr 2026 21:32:00 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============8714162643405574583=="

MIME-Version: 1.0

Subject: Re: Kesef Marketing | Smarter Access to Business Loans

From: =?utf-8?q?Stephanie_Kesef_Marketing?=

To: =?utf-8?q?Gurkirat_Wirring?=

Date: Mon, 20 Apr 2026 04:32:00 +0000

Message-ID: <177665952029.7.4037035181715252544@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_IdgvuY1D0r27T7jUj4usBjtRsMuAYbAna9WUKMagNlu

References: <177644538269.7.3986001924003818893@smtpgw.close.com> <177644538269.7.7253266245741056513@smtpgw.close.com>

In-Reply-To: <177644538269.7.3986001924003818893@smtpgw.close.com>

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: **Hi Gurkirat, ** **We noticed your Cash Advance application

is still incomplete.** **You’re just a few steps away from securing up

to $800,000 in funding within 48 hours.**



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.46 listed in dnsbl.ahbl.org]

[209.85.216.46 listed in dnsbl.ahbl.org]

[209.85.216.46 listed in dnsbl.ahbl.org]

[209.85.216.46 listed in dnsbl.ahbl.org]

[54.200.191.154 listed in dnsbl.ahbl.org]

[54.200.191.154 listed in dnsbl.ahbl.org]

[54.200.191.154 listed in dnsbl.ahbl.org]

[54.200.191.154 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.46 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.46 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.46 listed in list.dnswl.org]

0.3 LONGWORD BODY: Uses overlong words

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.46 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 MR_DIFF_MID No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Re: Kesef Marketing | Smarter Access to Business Loans

nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Apr 2026 19:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wEGya-000000007oa-3rBX

for dave@doctor.nl2k.ab.ca;

Sat, 18 Apr 2026 19:29:32 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Apr 2026 19:29:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.fweforum.org ([45.33.11.75]:39802)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wEFcD-000000002as-1iaC

for root@nk.ca;

Sat, 18 Apr 2026 18:02:30 -0600

Received: by mail.fweforum.org (Postfix, from userid 568)

id 7085CA48C2; Sat, 18 Apr 2026 23:49:50 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=dev.reptiletrends.com;

s=my-selector-name; t=1776556196;

bh=gR9KaG6VR3v07cSNG0WDPiyFOj/g2aQfGYJXG3Hs5+0=;

h=To:Subject:Date:From:Reply-To:Message-ID:MIME-Version:

Content-Type;

b=W9gg0dulE6aTCDlMTxyekYNQLu51HyxZki3bZAlAsIvwS1BAw86WFWn6Ekvvu8aVE

zpNr4eG45vv3A4X1gK42UEgkUvkWUEhD0NpxxYLo9uVLbdwu3HBXg9/dCdeR4JPsvE

BgqhdOeen3VuRd6dUj6RW0Vlhfkxjb+sSSIyqMw5087mfO8FSjJcU5ghYy5HpXAUcy

qB6n5hvaDAbIDcnya37VyzBRunDNU+JlCN+Dmx/27voKYC76YzYkhMZCUsRZW81kAH

c6FnyLl5xqp2wk3pC30Cegmimb8NQOVkcxhwApLNmBzz5aaEawLwOHFvz0dvrGEyx7

NBXBrEMUEkfBQ==

To: root@nk.ca

Subject: From Du Preez

X-PHP-Originating-Script: 568:libc.so.6

Date: Sat, 18 Apr 2026 23:49:50 +0000

From: Yuri Du Preez

Reply-To: yuridupreez75@gmail.com

Message-ID:

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: URGENT CHANGE OF ACCOUNT I am Yuri Du Preez, the newly appointed

Director, IMF Legal Affairs, Security and Investigation, NY USA. The United

States president and US Foreign Secretary, has directed me to investigate

Funds and [...]



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.33.11.75 listed in dnsbl.ahbl.org]

[45.33.11.75 listed in dnsbl.ahbl.org]

[45.33.11.75 listed in dnsbl.ahbl.org]

[45.33.11.75 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.33.11.75 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.33.11.75 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.33.11.75 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.33.11.75 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.33.11.75 listed in will-spam-for-food.eu.org]

[45.33.11.75 listed in will-spam-for-food.eu.org]

[45.33.11.75 listed in will-spam-for-food.eu.org]

[45.33.11.75 listed in will-spam-for-food.eu.org]

[45.33.11.75 listed in will-spam-for-food.eu.org]

[45.33.11.75 listed in will-spam-for-food.eu.org]

[45.33.11.75 listed in will-spam-for-food.eu.org]

[45.33.11.75 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.33.11.75 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.33.11.75 listed in sa-accredit.habeas.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[yuridupreez75(at)gmail.com]

0.9 URG_BIZ BODY: Contains urgent matter

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.33.11.75 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.33.11.75 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} From Du Preez



URGENT CHANGE OF ACCOUNT



I am Yuri Du Preez, the newly appointed Director, IMF Legal Affairs, Security and Investigation, NY USA. The United States president and US Foreign Secretary, has directed me to investigate Funds and payment outstanding owed to US citizens /foreign beneficiaries and victims of scam/s around the world.



This initiative was taken based on abnormalities and inability of BANKS around the world to transfer/ release funds into their accurate beneficiary bank accounts. It has been uncovered that some Directors in different organizations are diverting pending beneficiary payments to other accounts of their choice. During our investigation I found out that an account was submitted to divert your funds to a bank account in CYPRUS. Below is the account submitted and I want you to confirm if you are aware of this new development because we are about to wire payment to the account stated below.



NAME OF BENEFICIARY: GEORGE NIKOLAOU

BANK NAME: NATIONAL BANK OF GREECE (CYPRUS)

ADDRESS: 86 MAKARIOS AVENUE BRANCH 541. 3506 LIMASSOL, CYPRUS

SWIFT CODE: ETHNCY2N541

IBAN NUMBER: CY81006005410000005413367487



A payment instruction has been issued by the Department of Treasury for an immediate release of your payment to the bank account above without further prejudice. We cannot approve or schedule payment to the given bank account without your confirmation. May we proceed with the transfer to the Beneficiary: GEORGE NIKOLAOU BANK ACCOUNT IN CYPRUS??





I await your urgent response



Yuri Du Preez

Consultant, Legal Affairs Security and Investigation.

IMF



Instagram followers spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Apr 2026 15:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wECpC-00000000GEL-1Pn8

for dave@doctor.nl2k.ab.ca;

Sat, 18 Apr 2026 15:03:34 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Apr 2026 15:03:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f69.google.com ([209.85.216.69]:47289)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wEAMe-000000005oc-3wcI

for sales@nk.ca;

Sat, 18 Apr 2026 12:26:05 -0600

Received: by mail-pj1-f69.google.com with SMTP id 98e67ed59e1d1-35fb6cd0879so1480843a91.2

for ; Sat, 18 Apr 2026 11:25:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1776536703; x=1777141503; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=npSzxG715XdnVldxX0mQDvjr8HLzOxeIh5WBu9gEgOY=;

b=QkYkTKVRJHE4d4A357gP6PBJitezlsSWOVQGXbd8uRy7bEdSLAT1FDMioliETzWwfh

3ZvuSnJWK6cNUlcwhJPQXSuPkss1CfNdfmdz7qQvY3LmpMIsz9eV4cZ2GSwggW1AK2g2

7Dl7EVMM4+IgLRMek6sN0fxU6f4jf779702CDIIWKUcK8AdFJLzTlIHBBX07Z4rjw6tN

6RS5UlUY1ZVobSHfnZtKCZkq2nGkSVk4HoGPeelHrlr/sKVc7HkUSU7TmkCWfHBWgLmM

eToFQ9zsFR85KGHYkWNMEXHJUXDqAhtjP5g7dPasovLFE66j1SDeBgitwhmaZEFLFG41

k/8w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776536703; x=1777141503;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=npSzxG715XdnVldxX0mQDvjr8HLzOxeIh5WBu9gEgOY=;

b=WaxDK88dfrnLt01OVFdfeQtOkqdAITurtxhvJm0jKzUkK2RGI5zZGChokn7ZXWneH/

Cv/2S4o7VJYPQ27RWdu676xr8TNzgEKsETrBxOqXW+mG0KjNFfYtuEECyeNH2Sz2ySoG

FvdKMzsuag6yOCFwZAPiXjr3GSKI9f7QDxdTXL+aioR3r1mpLZ8WwXAMrL4CUxYGN3Lp

ndWfmGARuRVVbzT9T6kcDEfKkpeogWq4g+bXUYTNm8Ig0yzUJ1SWovrpKEXqQOW7sTdc

F5ByrHrlsBfnM2xHdMSvQII26MmWLBm6uSU43WByu7tqxY3mPsfJ0Eg4vkMW7aY1yZuk

wfhQ==

X-Gm-Message-State: AOJu0YwVeTTwK3K0bR7FjtlddE1H9zh1TAqntBD9obQrr02804H68ocN

FyDxiHYfbtg+BE7lsmY2rvsFu4v2QeI2i2kqKP6Jiuz9jwBfhzrwHh8F6giDi3u8aYbI1qfl8El

LvFDdHw==

MIME-Version: 1.0

X-Received: by 2002:a17:90b:4b87:b0:35b:9894:f6f9 with SMTP id

98e67ed59e1d1-3614046fadamr8048461a91.18.1776536703579; Sat, 18 Apr 2026

11:25:03 -0700 (PDT)

Message-ID:

Date: Sat, 18 Apr 2026 18:25:03 +0000

Subject: daveyadallee, Get More 10,000 Instagram Followers

From: adinda.kinanti03s@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, daveyadallee, Get More 10,000 Instagram Followers Sorry

to interrupt your time. We offer social media services, If you're interested,

please visit our Website. If you're not interested, please skip this step.





Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[adinda.kinanti03s(at)gmail.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.69 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.69 listed in wl.mailspike.net]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} daveyadallee, Get More 10,000 Instagram Followers



Hi, daveyadallee, Get More 10,000 Instagram Followers

Sorry to interrupt your time.



We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.



We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )



Are you interested in a free trial ?

Special For You Bonus Extra $2 - $5 FREE BALANCE TODAY SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :



[ https://instatool.site/services/?daveyadallee ]





Take free trial service today only...!!

10 -101K Instagram Followers



- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest



Thank you,

Regards,



Copyright © 2014 - 2026 instatool.site

Renewable Steel Company spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Apr 2026 12:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wEA9I-00000000OAw-206Y

for dave@doctor.nl2k.ab.ca;

Sat, 18 Apr 2026 12:12:08 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Apr 2026 12:12:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from hwsrv-1323016.hostwindsdns.com ([23.254.231.82]:40563 helo=sad-kare.23-254-231-82.plesk.page)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wE8ro-00000000GlU-3dFe

for sales@nk.ca;

Sat, 18 Apr 2026 10:50:11 -0600

Received: from [154.127.53.220] (unknown [154.127.53.220])

by sad-kare.23-254-231-82.plesk.page (Postfix) with ESMTPSA id AC2F2AA7B5

for ; Sat, 18 Apr 2026 16:49:10 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=libraship.cam;

s=default; t=1776530951;

bh=029lsn//DYG7mBVWYqskoL8tgyraOhH8NA/LLokAl0I=; h=From:To:Subject;

b=ARKqQ+Fto/te1GOSW6KsV/hqmNOewuoBGj0LhMNQ7y2CoxEFoFLHzGpJBg3Ce+rdD

qZouMAweSTl4JQiI7LuDQyywRRFiwsM7fztLSVLss5pVMcFyMruxSoOgEGu1HiYLmY

iV84oHh916CzPvPgYKtmU8jyC2+ivuXkg/Uvjsse8IyQZpkQsKMePJryr1WDpD4NTx

cjju5M4HtuLFAPL8lgsUXcFq9zD+BFMyxtRislP/oK6BzuNRAPamxoN9zwhzdCX9gR

HM+DRmZZEwOEOea353nM3Gfmomv/qMCFb4WwD3yUlSbaKXJ3gh6bikdBhvNYxJc03+

H7Ui5fafrnTpQ==

Authentication-Results: sad-kare.23-254-231-82.plesk.page;

spf=pass (sender IP is 154.127.53.220) smtp.mailfrom=vvc@libraship.cam smtp.helo=[154.127.53.220]

Received-SPF: pass (sad-kare.23-254-231-82.plesk.page: connection is authenticated)

Reply-To: elena@symtowarcrane.com

From: Elena

To: sales@nk.ca

Subject: Catalogue needed

Date: 18 Apr 2026 09:49:09 -0700

Message-ID: <20260418090903.81F07795996936C3@libraship.cam>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, My name is E Dominguez, and I am writing on behalf

of Renewable Steel Company, an importer of copper, Crane, power components

and a trading company based in Poland. We are currently sourcing these pro

[...]



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.127.53.220 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.127.53.220 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.127.53.220 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.127.53.220 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

Subject: {SPAM?} Catalogue needed













Good day,

My name is E Domingu=

ez, and I am writing on behalf of Renewable Steel Company, an importer of c=

opper, Crane, power components and a trading company based in Poland. We ar=

e currently sourcing these products for a valued clients and are interested=

in placing an order with your company.

Kindly forward your product c=

atalog to assist us in selecting the specific items required.



Please also confirm whether you are able to ship directly to Poland. If thi=

s is not possible, we can arrange a freight forwarder to handle the logisti=

cs.

Thank you for your prompt attention. We look forward to your resp=

onse.

Best regards,
E Dominguez
Renewable Steel Company
what=

sapp +905540117145
Email:elena@symtowarcrane.com



Renewable Steel Company Spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Apr 2026 06:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wE5AM-00000000DJ9-3Go8

for dave@doctor.nl2k.ab.ca;

Sat, 18 Apr 2026 06:52:54 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Apr 2026 06:52:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from hwsrv-1323016.hostwindsdns.com ([23.254.231.82]:36421 helo=sad-kare.23-254-231-82.plesk.page)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wE188-000000008yG-1czg

for sales@nk.ca;

Sat, 18 Apr 2026 02:34:31 -0600

Received: from [154.127.53.220] (unknown [154.127.53.220])

by sad-kare.23-254-231-82.plesk.page (Postfix) with ESMTPSA id A0D83AA784

for ; Sat, 18 Apr 2026 08:33:30 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=libraship.cam;

s=default; t=1776501211;

bh=029lsn//DYG7mBVWYqskoL8tgyraOhH8NA/LLokAl0I=; h=From:To:Subject;

b=ft1i5F55wZ9fEP+SSf+ZSwmFQyqAh5aG7XfxvoxvEJ5r3vf1gzRK6VXnkXTqxy7HR

VKyvBVks7K4SVsZ5XNkUKgIuECo/YpkDqo2lNVK6XexV02CKsiib6GFFCu9udstkcz

fs5JIzR+DbhWr4FKO/1ae8gg/lhD3XdDqF0QqVglbHxS7gzVntnODCpP0jSVeie6Cn

ErXMPb5E1pqgTeV519sTai4hvTWlqEH48hllwo3qCt46+S0VjXjP7+TGPjWXbO6+SA

+P825LxpJ3H+Mmmi0/nmhTfot9SngiAlSNWfcWUxWhtuF3zlJu9rpQ/qDt2eWvvuZL

JLh1oy46mIYjg==

Authentication-Results: sad-kare.23-254-231-82.plesk.page;

spf=pass (sender IP is 154.127.53.220) smtp.mailfrom=vvc@libraship.cam smtp.helo=[154.127.53.220]

Received-SPF: pass (sad-kare.23-254-231-82.plesk.page: connection is authenticated)

Reply-To: elena@symtowarcrane.com

From: Elena

To: sales@nk.ca

Subject: Catalogue needed

Date: 18 Apr 2026 01:33:29 -0700

Message-ID: <20260418013322.6DE6058A8950376F@libraship.cam>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, My name is E Dominguez, and I am writing on behalf

of Renewable Steel Company, an importer of copper, Crane, power components

and a trading company based in Poland. We are currently sourcing these pro

[...]



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.254.231.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.254.231.82 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.254.231.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.254.231.82 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

Subject: {SPAM?} Catalogue needed













Good day,

My name is E Domingu=

ez, and I am writing on behalf of Renewable Steel Company, an importer of c=

opper, Crane, power components and a trading company based in Poland. We ar=

e currently sourcing these products for a valued clients and are interested=

in placing an order with your company.

Kindly forward your product c=

atalog to assist us in selecting the specific items required.



Please also confirm whether you are able to ship directly to Poland. If thi=

s is not possible, we can arrange a freight forwarder to handle the logisti=

cs.

Thank you for your prompt attention. We look forward to your resp=

onse.

Best regards,
E Dominguez
Renewable Steel Company
what=

sapp +905540117145
Email:elena@symtowarcrane.com



Selfridges spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Apr 2026 22:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDxWE-00000000Oqy-1otz

for dave@doctor.nl2k.ab.ca;

Fri, 17 Apr 2026 22:42:58 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Apr 2026 22:42:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.mergentrade.com ([136.243.21.223]:40134)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDvdh-00000000K1E-3XFO

for sales@nk.ca;

Fri, 17 Apr 2026 20:42:41 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.mergentrade.com (Postfix) with ESMTP id D6B0268C6B9;

Sat, 18 Apr 2026 05:33:02 +0300 (+03)

Received: from mail.mergentrade.com ([127.0.0.1])

by localhost (mail.mergentrade.com [127.0.0.1]) (amavis, port 10032)

with ESMTP id vmbnxSBWbHQu; Sat, 18 Apr 2026 05:33:02 +0300 (+03)

Received: from localhost (localhost [127.0.0.1])

by mail.mergentrade.com (Postfix) with ESMTP id 9F2CC68C6A1;

Sat, 18 Apr 2026 05:33:02 +0300 (+03)

X-Virus-Scanned: amavis at mergentrade.com

Received: from mail.mergentrade.com ([127.0.0.1])

by localhost (mail.mergentrade.com [127.0.0.1]) (amavis, port 10026)

with ESMTP id gxLnnTWfSI4A; Sat, 18 Apr 2026 05:33:02 +0300 (+03)

Received: from [192.168.43.25] (unknown [192.168.12.1])

by mail.mergentrade.com (Postfix) with ESMTP id 19A9B68C67B;

Sat, 18 Apr 2026 05:33:01 +0300 (+03)

Content-Type: multipart/alternative; boundary="===============1458601272=="

MIME-Version: 1.0

Subject: Head of Purchase and Marketing Department.

To: Recipients

From: SELFRIDGES

Date: Sat, 18 Apr 2026 03:32:58 +0100

Reply-To: margaretsmithselfridges@email.com

Message-Id: <20260418023301.19A9B68C67B@mail.mergentrade.com>

X-Spam_score: 10.5

X-Spam_score_int: 105

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, We are interested in your products and partnering

with your company. We are a large wholesale and retail distributor with several

stores around the world, our shops are well patronized [...]



Content analysis details: (10.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[136.243.21.223 listed in dnsbl.ahbl.org]

[136.243.21.223 listed in dnsbl.ahbl.org]

[136.243.21.223 listed in dnsbl.ahbl.org]

[136.243.21.223 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[136.243.21.223 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[136.243.21.223 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[136.243.21.223 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[136.243.21.223 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[136.243.21.223 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[136.243.21.223 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[136.243.21.223 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[136.243.21.223 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 FROM_MISSP_SPF_FAIL No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 MIXED_HREF_CASE Has href in mixed case

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.5 TEQF_USR_POLITE To and from user nearly same + polite greeting

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

Subject: {SPAM?} Head of Purchase and Marketing Department.



You will not see this in a MIME-aware mail reader.

--===============1458601272==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Dear Sir/Madam, =

=



We are interested in your products and partnering with your company. We are=

a large wholesale and retail distributor with several stores around the wo=

rld, our shops are well patronized.

Kindly send us your Catalog to learn more about your products and price lis=

t along with stock availability. We hope that your products are of good qua=

lity as we look forward to a long-term partnership..

Kindly contact Mrs. Margaret Smith with the below email address for more di=

scussion.

Email: margaretsmithselfridges@email.com

Mrs. Margaret Smith our Representative.

www.selfridges.com

Regards Mr Frank Jonathan



--===============1458601272==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>

Dear Sir/Madam,    &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p; 
We are interested in your products and partnering with your com=

pany. We are a large wholesale and retail distributor with several stores a=

round the world, our shops are well patronized.
Kindly send us your Cata=

log to learn more about your products and price list along with stock avail=

ability. We hope that your products are of good quality as we look forward =

to a long-term partnership..
Kindly contact Mrs. Margaret Smith with the=

below email address for more discussion.
Email: 
margaretsmithselfridges@email.com">margaretsmithselfridges@email.com
>Mrs. Margaret Smith our Representative.

s.com/">www.selfridges.com
Regards  Mr Frank Jonathan=



--===============1458601272==--

Loan phish from Google Gmail Part 2

Posted by Dave Yadallee on
0.3 LONGWORD BODY: Uses overlong words

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.53 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.53 listed in wl.mailspike.net]

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Kesef Marketing | Smarter Access to Business Loans



--===============0752570965773209863==

Content-Type: multipart/alternative; boundary="===============5319203018662024849=="

MIME-Version: 1.0



--===============5319203018662024849==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



**Hi Gurkirat,**



=20



**This is Stephanie Cabiao from Kesef Marketing.**



=20



**Welcome,I wanted to personally reach out and thank you for your interest =

in

business funding. We work with lenders across Canada to provide reliable

funding solutions that support growth, manage cash flow, and cover upcoming

expenses=E2=80=94while helping you access competitive interest rates.**



=20



**If you=E2=80=99re open to exploring your options, you can get started her=

e: =20

**[**Click here to start your

application**](https://form.jotform.com/260672364104452?lead_id=3Dlead_bqyN=

tSfmgPr9HEY1bFvoKaWRLZZxf887Qp2LC28qfuP&legalBusiness=3DN

K MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring)



=20



**Once submitted, our team will review your information and present the best

available funding options tailored to your needs.**



=20



**If you have any questions or would prefer to speak directly, feel free to

call me at +1-866-216-5475 or 715-641-4654**



=20



**Looking forward to connecting.**



=20



**Best regards, =20

Stephanie Cabiao ** =20

**Kesef Marketing**



To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/)

--===============5319203018662024849==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



Hi Gurkirat,

This is=

Stephanie Cabiao from Kesef Marketing.

<=

strong>Welcome,I wanted to personally reach out and thank you for your inte=

rest in business funding. We work with lenders across Canada to provide rel=

iable funding solutions that support growth, manage cash flow, and cover up=

coming expenses=E2=80=94while helping you access competitive interest rates=

.

If you=E2=80=99re open to explo=

ring your options, you can get started here:

/form.jotform.com/260672364104452?lead_id=3Dlead_bqyNtSfmgPr9HEY1bFvoKaWRLZ=

Zxf887Qp2LC28qfuP&legalBusiness=3DN K MAINTENANCE&fullName[first]=

=3DGurkirat&fullName[last]=3DWirring" rel=3D"noopener noreferrer nofoll=

ow">Click here to start your application

>
Once submitted, our team will review your information a=

nd present the best available funding options tailored to your needs.
ng>

If you have any questions or would pre=

fer to speak directly, feel free to call me at +1-866-216-5475 or 715-641-4=

654

Looking forward to connecting=

.

Best regards,
Stephanie Cabi=

ao
Kesef Marketing

erated=3D"unsubscribe-footer">


ml.closeml.com/t/l8qiM7kO8nq36bKxGhEb1XPhoT61cDSK1lDTB1MTLQ3/YVFsbTnwSw.png=

" alt=3D"" width=3D"1" height=3D"1" />

--===============5319203018662024849==--



--===============0752570965773209863==--

Loan phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Apr 2026 12:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDnv2-00000000C31-0HOR

for dave@doctor.nl2k.ab.ca;

Fri, 17 Apr 2026 12:27:56 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Apr 2026 12:27:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f53.google.com ([209.85.216.53]:59550)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDmcj-000000008OG-2X1l

for sales@nk.ca;

Fri, 17 Apr 2026 11:05:05 -0600

Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-35fb16e56efso640313a91.2

for ; Fri, 17 Apr 2026 10:03:12 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kesefmarketing.com; s=google; t=1776445386; x=1777050186; darn=nk.ca;

h=references:list-unsubscribe-post:list-unsubscribe:message-id:date

:to:from:subject:mime-version:from:to:cc:subject:date:message-id

:reply-to;

bh=40qcRNZPmV3IeTEW2ymORfcCyYSuh720CR1tpRRFpwE=;

b=mDKgfEUSxMZ93nEsrzAY+jSGlDY/yTpb5F/A0zckrHbXbi25IksivUbLoPCtKANzxs

2R85BRSk3sFp0hNeoGmlU0OJemsgX9Q0UZKp2J8Z1gva6B3RhrkNO44uag/rPhgBhEe0

bf20YOg9Wptr+uySp88MxD4+qOzXFGdV09ty1VWLXDj0QxHWMbUI3Wj6eOCZTz+4yKId

kuqGKrywusS0Lr/P7odMv00KR+9qCoxS4zbX3OzXViKxFWwnjQ4WtK5CtVOT+jFGp2so

/tKx6h6Y90213M4hzcRy4+LWf4FVgl3Id1u4Jtw2m4DXsjaDmYRxzmvQMQu3omRBD+pQ

E1kA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776445386; x=1777050186;

h=references:list-unsubscribe-post:list-unsubscribe:message-id:date

:to:from:subject:mime-version:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=40qcRNZPmV3IeTEW2ymORfcCyYSuh720CR1tpRRFpwE=;

b=XEMjfjs/YWCGle7jV5oCy0nvcBFElnPA2KvygG/sfz6enayKb5oLS2PZSUqR7FtecH

urgGjtU9sWMY7d0vl+Z/oOrKfnFduKAKifE8AV3BDP9XVi7R29pxP11rySL0qYSk/kKA

gXL2gLughQyPzXBmWUvg297irtNwWcVmA7n70CGZL75xJvdGn4iI/4dtFIXhHik6JJBB

h7WUz2bltWB2Kb5/UFkZVGhMlVQOGsod80mrDuLqCofzvt6fwVOgbf4o3UfOi0OI8hUV

onnXuPwxhzf1jrCfU89OG9UUEqjQ9vFsH30b14EkhKWe7AAKlQ8GY39g6pMMRgVlvOOj

1c8g==

X-Gm-Message-State: AOJu0YxaOwFuuG0CaGPLXkCU4DFSBH7TtMebO8q67GD7ek64y1bixITN

v0cMNzrevJQ2+PP/6Owcz4q9BsTMgA0D3vaennjCQ7n9V5Dnx5OlKbxIvTFJO+fsTHTswhOVMJS

zw8BrhUs=

X-Gm-Gg: AeBDievvExwN6uzhY2flWEdjhkEyTSoZ3HiMHSfbnAVlEgqjKsGkNTDg1bQTB+PUvWH

oIW1nLAl6aEK4/k1AExpnMbOhtc7IYwUJiN1I+5Iaig+oooxHoIyeT1qCFJaZA37CG43Xg8PunE

J1PdmLTzcxQX4R/ENYXB7plnE9OUDI0OUssB+z/P69sUJVGuib2pjnRVwSGRCDK+hW00MmdSI8P

Vb9fnEq6PXvUHXEK/w7GLdETyM9GgidvgHrCV+yUOiq+ubAAUneGF8Z3OG9I2+fZQ9TOlR5MJ0Z

ALDlknXrhSdICSoSQvfkR9hXOW5+k0SJtE6UckkAbQX8yAPRgQs1H6spetkFC5MYEYKIDsvQSqA

8L9KUrx2S9NDHupR0eWkzow12FnSyciy3Hni53g/aJ0dbP3NdiVrlcDmNv6XGLZXM0eccZOS41+

iSFe6Ly27YTXX52HAHcOGLXljWHsJRrH6msssKUOnVOlVNzCk2tzx0Xx5iWsL24IJkB5BwBAyXn

Bmqn7AjtyadTJih3iw=

X-Received: by 2002:a17:90b:3f84:b0:359:1130:1047 with SMTP id 98e67ed59e1d1-36140468c28mr4013219a91.17.1776445385838;

Fri, 17 Apr 2026 10:03:05 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-a0.close.com. [52.11.177.187])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-36141990bb6sm2704425a91.17.2026.04.17.10.03.03

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 17 Apr 2026 10:03:04 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============0752570965773209863=="

MIME-Version: 1.0

Subject: Kesef Marketing | Smarter Access to Business Loans

From: =?utf-8?q?Stephanie_Kesef_Marketing?=

To: =?utf-8?q?Gurkirat_Wirring?=

Date: Fri, 17 Apr 2026 17:03:03 +0000

Message-ID: <177644538269.7.7253266245741056513@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_l8qiM7kO8nq36bKxGhEb1XPhoT61cDSK1lDTB1MTLQ3

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

References: <177644538269.7.3986001924003818893@smtpgw.close.com>

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: **Hi Gurkirat,** **This is Stephanie Cabiao from Kesef Marketing.**

**Welcome,I wanted to personally reach out and thank you for your interest

in business funding. We work with lenders across Canada to provide reliable

funding solutions that support growth, manage cas [...]



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

[209.85.216.53 listed in dnsbl.ahbl.org]

[209.85.216.53 listed in dnsbl.ahbl.org]

[209.85.216.53 listed in dnsbl.ahbl.org]

[52.11.177.187 listed in dnsbl.ahbl.org]

[52.11.177.187 listed in dnsbl.ahbl.org]

[52.11.177.187 listed in dnsbl.ahbl.org]

[52.11.177.187 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

Web/SEo/App spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Apr 2026 10:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDmS3-000000007wP-0oC6

for dave@doctor.nl2k.ab.ca;

Fri, 17 Apr 2026 10:53:55 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Apr 2026 10:53:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from f5mail-147-121.rediffmail.com ([119.252.147.121]:45683)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDl6X-0000000043m-0e5t

for sales@nk.ca;

Fri, 17 Apr 2026 09:27:45 -0600

Received: from f5mail-224-106.rediffmail.com (unknown [10.50.252.5])

by f5mail-147-121.rediffmail.com (Postfix) with ESMTP id 570CF241E48

for ; Fri, 17 Apr 2026 20:37:43 +0530 (IST)

X-REDIFF-Delivered-Remotely-To: sales@nk.ca

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rediffmail.com;

s=mail; t=1776438730;

bh=QLdR+c3iTlyCWf44z+/KD/xv3AzZDmX2LxVOsmD/iwI=;

h=MIME-Version:From:Date:Message-ID:Subject:To;

b=FC7jcL6mu4iDEuO40k2bhBHBkmedVt8/DQ8HXg7+pdfP4c8F4JQObam+NdgVQ+Se9

XYmOE6NBJqvzruLo1L0cqdjwwjw4oAYWVQ8yKbU7ZgSsCCohT9EAOAQceZTU2K262r

to4MFSN5IjQITKR8wuC0L59yNjpAJlObbB3JEnNA=

Received: (qmail 3578 invoked by uid 510); 17 Apr 2026 15:12:10 -0000

x-m-msg: 5b78c3f67c9fe5a627a324586b999f93; a6da7d6asas6dasd77; 5dad65ad5sd;

X-OUT-VDRT-SpamState: 0\LEGIT

X-OUT-VDRT-SpamScore: 50

X-OUT-VDRT-SpamCause: "gggruggvucftvghtrhhoucdtuddrgeefuddrtddtucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecutffgfffkhffhnecuuegrihhlohhuthemuceftddtnecuogeurggujfhtmhhlqddqufhushhpvggtthdqfghntghlohhsvgguvfgrghdqsfculdehtddmnecujfgurhepffggvffkshfuhfgtsegrtderredttdejnecuhfhrohhmpedfofgrrhihfdcuoehsmhhithhhmhgrrhihtghsshesrhgvughifhhfmhgrihhlrdgtohhmqeenucggtffrrghtthgvrhhnpeeuuddttdefjeeggeefhfelkeduveegfeeljeffveeitdffgedtkeefgeejgfekueenucfkphepudehvddrheekrddufedvrddugeefnecuvehluhhsthgvrhfuihiivgepieenucfrrghrrghmpehmrghilhhfrhhomhepshhmihhthhhmrghrhigtshhssehrvgguihhffhhmrghilhdrtghomhdpnhgspghrtghpthhtohephedpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtoheprggshhhishhhvghkrdhkuhhmrghrrdgsihhgshhtohhnvghsvghosehgmhgrihhlrdgtohhmpdhrtghpthhtoheplffqjgeslffqjgffkfetpfetvffttegggffnrdevqffopdhrtghpthhtoheprghlihhsshhonhdrlhgvmhgrihhrvgesphgrthhiohgurhhumhhmohhnugdrtghomhdprhgtphhtthhopehinhhfohesthhhrhgvvghkihhnghhsshhpihhrihhtshdrtggrpdhrtghpthhtohepohhffhhitggvrggumhhinhesghhrrghnuggvrgh

irhhsohhluhhtihhonhhsrdgtohhm"

X-Dedup-Identifier: 1776438730_3577_3576_f5-224-106

Date: 17 Apr 2026 15:12:10 -0000

MIME-Version: 1.0

To: "abhishekkumarbigston seo "

Received: from unknown 152.58.132.143 by rediffmail.com via HTTP; 17 Apr 2026

15:12:10 -0000

Message-ID: <20260417204210.1776438730.3543@f5-224-106>

Sender: smithmarycss@rediffmail.com

Sensitivity:

Subject: =?utf-8?B?R29vZ2xlIGlzc3Vlcw==?=

From: "Mary"

Content-Type: multipart/alternative;

boundary="=_5c8857592c3d0fb6dff23e26940ec4d8"

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi I noticed a couple of issues on your website. Would it

help if I sent screenshots?



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[119.252.147.121 listed in dnsbl.ahbl.org]

[119.252.147.121 listed in dnsbl.ahbl.org]

[119.252.147.121 listed in dnsbl.ahbl.org]

[119.252.147.121 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[119.252.147.121 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[119.252.147.121 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[119.252.147.121 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[119.252.147.121 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[smithmarycss(at)rediffmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?B?R29vZ2xlIGlzc3Vlcw==?=



--=_5c8857592c3d0fb6dff23e26940ec4d8

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=UTF-8



Hi



I noticed a couple of issues on your website.



Would it help if I sent screenshots?



Thanks,



Mary



 





--=_5c8857592c3d0fb6dff23e26940ec4d8

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8




=3D"background:white">
t-family:Calibri,sans-serif">
=3D"font-family:"Calibri Light",sans-serif">
#222222">Hi






=3D"background:white">
t-family:Calibri,sans-serif">
=3D"font-family:"Calibri Light",sans-serif">
#222222">I noticed a couple of issues on your website.=






=3D"background:white">
t-family:Calibri,sans-serif">
=3D"font-family:"Calibri Light",sans-serif">
#222222">Would it help if I sent screenshots?
span>






=3D"background:white">
t-family:Calibri,sans-serif">
=3D"font-family:"Calibri Light",sans-serif">
#222222">Thanks,


Mary





 







--=_5c8857592c3d0fb6dff23e26940ec4d8--

Oriental language spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Apr 2026 10:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDmRv-000000007wG-2cqc

for dave@doctor.nl2k.ab.ca;

Fri, 17 Apr 2026 10:53:47 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Apr 2026 10:53:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazon11023101.outbound.protection.outlook.com ([40.107.44.101]:4059 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

id 1wDkkp-0000000039n-0waG

for root@nk.ca;

Fri, 17 Apr 2026 09:05:22 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=LOJSQrWgJaB6BuLxBTfT5rWKkB1I+xA4bZViE1oN9OxPPDZUxbMAb2D4UyPQRrpO7ausm0Njj1BQQsHgtdK5Xvjvvc62vkNN44WPlQcRY/S9+b+LKo0ZdcBK+Y/VwRvwfnsqo6bWe70T7EK0W8q3/Bj50pz75OmciCRqEoiPqH0P9wS3KAjM8Nf8sBMboogbMOGbteDHGuJMMIP9PR2mL646YhtZpA6BGjIj02NXUgTV24dw+oZ5D+JO1oX/cxL6fnuiA2n16BV4NKRt4RE2ymkW5ztU1jNeF4HVbmVGMTDQzi9V/dWzAtv22FzAs88VZjGhinrX+b7XNMbhjrOdVw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=7nmtEV+FMb+ri+GNaZNQ3ulnU4sw292O9S5fSJS9HAQ=;

b=pMqeU2ZsE5JCV/XzeXyTscK65c18Ekzq7AVd4LHWKPoIqAjD1gEbx3mpnWKo7tZqiygEUi1lylsoeSWlXGlBlIXo/EiqZRXZDBedRUCmOP8gTJHV+7dI+pzE+8hSmRMxlBNOt1ZEs0UwQNinQJb1a8pMnexZ0BiJ4gG7VnYwwGS9tXN+Qw8NU7Bx0MTn78HiXG/YczOkBYRBSgFxVwi86C2TkwNq4nuKFwAQ0c3b99sidvedjS+sC6ec11tsd/9xRrbNe+wOlR85jsxpVlUADpVSizYATQwbdZbeQ0/JBkfwofk5hLeTx7lgp5QBjRkB3IDkg78q9NicEBbuDpdkIw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=pass

action=none header.from=i2n.online; dkim=pass header.d=i2n.online; arc=none

Received: from SmtpServer.Submit by TYZPR03MB7845 with Microsoft SMTP Server

id 15.20.9818.25; Fri, 17 Apr 2026 15:03:15 +0000

MIME-Version: 1.0

To:

Sender: Microsoft Outlook

From: Microsoft Outlook

Message-ID:

Date: Fri, 17 Apr 2026 15:03:15 +0000

Subject: Notification: You're invited to share this calendar

X-MS-Exchange-Transport-Rules-Notification: 1

X-MS-Exchange-Transport-Rules-Loop: 1

Content-Type: multipart/alternative;

boundary="_d524eaef-3c55-4c17-939d-3662ba8a8e55_"

X-MS-Exchange-Parent-Message-Id:



Auto-Submitted: auto-generated

X-MS-Exchange-Generated-Message-Source: Transport Rule Agent

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: TYZPR03MB7845:EE_

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|786006|366016|61400799027|376014|8096899003|56012099003|16102099003|18002099003;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:zh-cn;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:;PTR:;CAT:NONE;SFS:(13230040)(786006)(366016)(61400799027)(376014)(8096899003)(56012099003)(16102099003)(18002099003);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

yLXl0cah2dLnVCrX2S40HLNTouPMj829zLd4Kgtzzvg5ZfPbHJDdnRVGEc0HRuzmLtduDLKjXHYgWeoYQ3w4szmT/Uzu1YttB9tW/02Npmc+GMEKqOJ2XtWLgL+db/4eWCw9ekaxXTkhJmjDRm8Mrx4jgAan/70WGEgvTkeb7LpfuoHdO5W0O1AkHh++WSp8AItFsexqy8QzPmrJNXJGuj4g32YW4/4AXBXT0FnosY4BO7M3ppiHNxvpcqkj/8QZX8yZ2tR4yQuB5cTSi+142k5diZPdbFKO47fSvwKbMvLaTYLQJ0zATwg+r815wy2tfOIcNGsBJ+GSHZe4ss5c3w==

X-OriginatorOrg: i2n.online

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Apr 2026 15:03:15.8108 (UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id:

1b0d7cef-6df4-4be4-fd8c-08de9c9273f9

X-MS-Exchange-CrossTenant-AuthSource: TYZPR03MB7845.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR03MB7845

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 全国收单RMB兑USD/HKD 咨询微信：USD254625 全国收单RMB兑USD/HKD

咨询微信：USD254625



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.107.44.101 listed in dnsbl.ahbl.org]

[40.107.44.101 listed in dnsbl.ahbl.org]

[40.107.44.101 listed in dnsbl.ahbl.org]

[40.107.44.101 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.107.44.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.107.44.101 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.107.44.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.107.44.101 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.44.101 listed in list.dnswl.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 FORGED_SPF_HELO No description available.

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.44.101 listed in wl.mailspike.net]

Subject: {SPAM?} Notification: You're invited to share this calendar



--_d524eaef-3c55-4c17-939d-3662ba8a8e55_

Content-Type: text/plain; charset="gb2312"

Content-Transfer-Encoding: quoted-printable



=C8=AB=B9=FA=CA=D5=B5=A5RMB=B6=D2USD/HKD =D7=C9=D1=AF=CE=A2=D0=C5=A3=BAUSD2=

54625



--_d524eaef-3c55-4c17-939d-3662ba8a8e55_

Content-Type: text/html; charset="gb2312"

Content-Transfer-Encoding: quoted-printable







=C8=AB=B9=FA=CA=D5=B5=A5RMB=B6=D2USD/HKD =D7=C9=D1=AF=CE=A2=D0=C5=A3=BAUSD2=

54625







--_d524eaef-3c55-4c17-939d-3662ba8a8e55_--

Climate action spam from Google Gmail Part 2

Posted by Dave Yadallee on


--0000000000004d16ea064fa8668a

Content-Type: text/plain; charset="UTF-8"



Hi ,



We are pleased to inform you that you are eligible to serve as a Climate

Ambassador and to access grant opportunities under the Climate Action

Programme, administered by the UN Climate Action Group, Your Participation

would significantly contribute to advancing global sustainability efforts.



I look forward to your positive response to provide you with further

details.





Regards.

Climate Grant Coordinator

climaterealityproject.org



--0000000000004d16ea064fa8668a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






border-style:none;border-color:currentcolor;font-style:inherit;font-weight:=

inherit;font-stretch:inherit;font-size:12pt;line-height:inherit;font-family=

:Aptos,Calibri,Helvetica,sans-serif;font-size-adjust:inherit;margin:0px;pad=

ding:0px;color:rgb(0,0,0);direction:ltr">Hi ,

der-width:0px;border-style:none;border-color:currentcolor;font-style:inheri=

t;font-weight:inherit;font-stretch:inherit;font-size:12pt;line-height:inher=

it;font-family:Aptos,Calibri,Helvetica,sans-serif;font-size-adjust:inherit;=

margin:0px;padding:0px;color:rgb(0,0,0);direction:ltr">

v style=3D"border-width:0px;border-style:none;border-color:currentcolor;fon=

t-style:inherit;font-weight:inherit;font-stretch:inherit;font-size:12pt;lin=

e-height:inherit;font-family:Aptos,Calibri,Helvetica,sans-serif;font-size-a=

djust:inherit;margin:0px;padding:0px;color:rgb(0,0,0);direction:ltr">We

are pleased to inform you that you are eligible to serve as a Climate=20

Ambassador and to access grant opportunities under the Climate Action=20

Programme, administered by the UN Climate Action Group, Your=20

Participation would significantly contribute to advancing global=20

sustainability efforts.=C2=A0

r-style:none;border-color:currentcolor;font-style:inherit;font-weight:inher=

it;font-stretch:inherit;font-size:12pt;line-height:inherit;font-family:Apto=

s,Calibri,Helvetica,sans-serif;font-size-adjust:inherit;margin:0px;padding:=

0px;color:rgb(0,0,0);direction:ltr">

idth:0px;border-style:none;border-color:currentcolor;font-style:inherit;fon=

t-weight:inherit;font-stretch:inherit;font-size:12pt;line-height:inherit;fo=

nt-family:Aptos,Calibri,Helvetica,sans-serif;font-size-adjust:inherit;margi=

n:0px;padding:0px;color:rgb(0,0,0);direction:ltr">I look forward to your=

positive response to provide you with further details.=C2=A0 =C2=A0
iv>

or;font-style:inherit;font-weight:inherit;font-stretch:inherit;font-size:12=

pt;line-height:inherit;font-family:Aptos,Calibri,Helvetica,sans-serif;font-=

size-adjust:inherit;margin:0px;padding:0px;color:rgb(0,0,0);direction:ltr">=



lor:currentcolor;font-style:inherit;font-weight:inherit;font-stretch:inheri=

t;font-size:12pt;line-height:inherit;font-family:Aptos,Calibri,Helvetica,sa=

ns-serif;font-size-adjust:inherit;margin:0px;padding:0px;color:rgb(0,0,0);d=

irection:ltr">

none;border-color:currentcolor;font-style:inherit;font-weight:inherit;font-=

stretch:inherit;font-size:12pt;line-height:inherit;font-family:Aptos,Calibr=

i,Helvetica,sans-serif;font-size-adjust:inherit;margin:0px;padding:0px;colo=

r:rgb(0,0,0);direction:ltr">Regards.

:0px;border-style:none;border-color:currentcolor;font-style:inherit;font-we=

ight:inherit;font-stretch:inherit;font-size:12pt;line-height:inherit;font-f=

amily:Aptos,Calibri,Helvetica,sans-serif;font-size-adjust:inherit;margin:0p=

x;padding:0px;color:rgb(0,0,0);direction:ltr">Climate Grant Coordinator<=

/b>

entcolor;font-style:inherit;font-weight:inherit;font-stretch:inherit;font-s=

ize:12pt;line-height:inherit;font-family:Aptos,Calibri,Helvetica,sans-serif=

;font-size-adjust:inherit;margin:0px;padding:0px;color:rgb(0,0,0);direction=

:ltr">
OWA32ceed42-b232-5fd1-4c35-cba9e56ef880" class=3D"gmail-ydp5ccc8785x_ydpdb2=

6ea5fx_ydpc2cf344dyiv9119822325ydpa0dc503yiv6263057360ydpd031332eyiv2372102=

841ydp7a7edbb8yiv2463149482 gmail-ydp5ccc8785x_ydpdb26ea5fx_ydpc2cf344dyiv9=

119822325OWAAutoLink" title=3D"http://climaterealityproject.org/" style=3D"=

border-width:0px;border-style:none;border-color:currentcolor;font-style:inh=

erit;font-weight:inherit;font-stretch:inherit;font-size:inherit;line-height=

:inherit;font-family:inherit;font-size-adjust:inherit;margin:0px;padding:0p=

x" rel=3D"nofollow" target=3D"_blank">climaterealityproject.org<=

/div>

olor;font-style:inherit;font-weight:inherit;font-stretch:inherit;font-size:=

12pt;line-height:inherit;font-family:Aptos,Calibri,Helvetica,sans-serif;fon=

t-size-adjust:inherit;margin:0px;padding:0px;color:rgb(0,0,0);direction:ltr=

" dir=3D"ltr">

tica,sans-serif;font-size:16px;font-style:normal;font-weight:400;letter-spa=

cing:normal;text-indent:0px;text-transform:none;word-spacing:0px;background=

-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color=

:initial">

gmail-ydp42d0ab8cTHa4i gmail-ydp42d0ab8cpinIo" style=3D"border-width:0px;bo=

rder-style:none;border-color:currentcolor;font-style:inherit;font-weight:in=

herit;font-stretch:inherit;font-size:inherit;line-height:inherit;font-famil=

y:inherit;font-size-adjust:inherit;margin:8px 3px 8px 2px;padding:0px;color=

:inherit;background-color:rgb(255,255,255);border-radius:4px;min-height:44p=

x">

0ab8callowTextSelection" style=3D"border-width:0px;border-style:none;border=

-color:currentcolor;font-style:inherit;font-weight:600;font-stretch:inherit=

;font-size:16px;line-height:inherit;font-family:inherit;font-size-adjust:in=

herit;margin:0px;padding:0px;color:rgb(36,36,36);display:inline;width:906.7=

47px">

"border-width:0px;border-style:none;border-color:currentcolor;font-style:in=

herit;font-weight:inherit;font-stretch:inherit;font-size:inherit;line-heigh=

t:inherit;font-family:inherit;font-size-adjust:inherit;margin:0px;padding:6=

px 12px 6px 10px;color:inherit;border-radius:4px;display:inline-block;width=

:906.747px;min-height:44px;background-color:rgb(255,255,255)">

"gmail-ydp42d0ab8cUUCdJ gmail-ydp42d0ab8cPKstT" style=3D"border-width:0px;b=

order-style:none;border-color:currentcolor;font-style:inherit;font-weight:i=

nherit;font-stretch:inherit;font-size:inherit;line-height:inherit;font-fami=

ly:inherit;font-size-adjust:inherit;margin:0px;padding:0px;color:inherit;mi=

n-height:32px">

0px;border-style:none;border-color:currentcolor;font-style:inherit;font-wei=

ght:inherit;font-stretch:inherit;font-size:inherit;line-height:inherit;font=

-family:inherit;font-size-adjust:inherit;margin:5px 0px;padding:0px;color:i=

nherit">









--0000000000004d16ea064fa8668a--