CAm inspector spam from OVH PArt 2









CamInspector - Field Inspections and Quotations Made Easy!




font-family:Arial, sans-serif;">


cellspacing=3D"0">








20px;">


border-radius:8px; overflow:hidden;">






























color:#003366; text-align:center; padding:20px;">


style=3D"margin:0;">CamInspector




style=3D"font-size:18px; margin:0;">The ultimate tool for field technicians=

and installers.




30px; color: #003366;">

Hi!



Tired of spending extra hours on quotations and inspection=

reports?



CamInspector helps you =

capture job details on-site and deliver a

=

professional PDF with photos, notes, quotation, and =

signatures =E2=80=94 right from your phone.







  • =F0=9F=93=B8 Photos and notes per =

    project stage


  • =F0=9F=93=84 =

    Quotations with units, margins, and taxes =E2=80=94 and =

    soon you will be able to geo-locate your suppliers


  • =F0=9F=96=8B=EF=B8=8F Signatures for =

    client and provider (optional)


  • =F0=9F=93=8C =

    Custom cover with client information


  • =F0=9F=93=A4 Export and share the PDF =

    from your device


  • =F0=9F=93=8A CRM =

    capabilities:
    classify projects (Editable / Sent / Won / Lost) and=

    soon you will be able to track performance








=

=F0=9F=9A=80Are you a materials supplier? Book a demo or =

reply to this email and we=E2=80=99ll show you how Cam Inspector can help

boost your sales and all the integration =

options we have.






30px 0;">Download the app today and create up to 10 projects for =

free!






margin-top:30px;">










id=3Dcom.australnetworks.caminspector" target=3D"_blank">


ges/generic/en_badge_web_generic.png"

=

style=3D"width:140px; margin-right:10px; vertical-align: middle;" =

alt=3D"Get it on Google Play" />




46515194?l=3Den-GB" target=3D"_blank">


src=3D"https://developer.apple.com/assets/elements/badges/download-on-the-a=

pp-store.svg"

style=3D"width:140px; vertical-align: =

middle;" alt=3D"Download on the App Store" />










cellspacing=3D"0" style=3D"margin-top:25px;">










role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" style=3D"margin:0=

auto;">




















align=3D"center" style=3D"padding:6px 0;">


href=3D"https://australnetworks.com/caminspector" target=3D"_blank"

style=3D"background-color:#003366; =

color:#ffffff; text-decoration:none; padding:12px 20px; border-radius:6px; =

display:inline-block; font-weight:bold;">

=

=F0=9F=8C=90 Website




style=3D"padding:6px 0;">


href=3D"https://australnetworks.com/caminspector/docs/index.html" =

target=3D"_blank"

style=3D"background-color:#0=

0b0ff; color:#ffffff; text-decoration:none; padding:12px 20px; =

border-radius:6px; display:inline-block; font-weight:bold;">

=F0=9F=93=9A Documentation






com/caminspector/#contacto" target=3D"_blank"

=

style=3D"background-color:#28a745; color:#ffffff; text-decoration:none; =

padding:12px 20px; border-radius:6px; display:inline-block; =

font-weight:bold;">

=F0=9F=93=85 Book a Demo












Professionalize your deliverables=

and close faster with Cam Inspector.






font-size:12px; color:#666;">

If you don=E2=80=99t want to =

receive more emails, you can


australnetworks.com/track/unsub?email=3Dsales%40nk.ca&lang=3Den"

target=3D"_blank" style=3D"color:#666; =

text-decoration:underline;">

unsubscribe

.




style=3D"background-color:#f0f0f0; padding:20px; text-align:center; =

font-size:12px; color:#666;">

=C2=A9 2026 Austral Networks =

SpA. All rights reserved.










email=3Dsales%40nk.ca&lang=3Den"

alt=3D"" width=3D"1" height=3D"1" =

style=3D"display:none;" />





CAm inspector spam from OVH PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7Enn-00000000Aam-0zS1

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:45:19 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 09:45:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-9ce2769b.vps.ovh.ca ([51.222.110.77]:56340 helo=mail.australnetworks.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7D95-00000000BhM-05eV

for sales@nk.ca;

Mon, 30 Mar 2026 07:59:14 -0600

Received: from mail.australnetworks.com (mail.australnetworks.com [127.0.0.1])

by mail.australnetworks.com (Postfix) with ESMTP id 4fktBJ6vQPz69Hs

for ; Mon, 30 Mar 2026 13:58:16 +0000 (UTC)

Authentication-Results: mail.australnetworks.com (amavisd-new);

dkim=pass (1024-bit key) reason="pass (just generated, assumed good)"

header.d=australnetworks.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=

australnetworks.com; h=content-type:mime-version:date

:content-transfer-encoding:message-id:subject:to:from; s=dkim;

t=1774879096; x=1777471097; bh=NPuxarvEwynG+C18FxFWNgtw79j7HCL0

KEx5HJHjwqw=; b=bymau3jXHh1I1ZkpDfo2R0V3onKXwjRtmXBUgnx+GVE2zg67

9F84A0O6pIbIWM97h4dx+tSwlqeX7leVcCIKJei9ON50iF05fY6BhnzQLGVSgb5e

ilDw++MhWxfkeUSbQSPmPTiuwmonSRfLRrRWE7yvLKhOwxZGR5ZxR7D8zXo=

X-Virus-Scanned: Debian amavisd-new at mail.australnetworks.com

Received: from mail.australnetworks.com ([127.0.0.1])

by mail.australnetworks.com (mail.australnetworks.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id k6XiSVq7ejmo for ;

Mon, 30 Mar 2026 13:58:16 +0000 (UTC)

Received: from [127.0.0.1] (vps-291fd459.vps.ovh.ca [51.161.34.69])

by mail.australnetworks.com (Postfix) with ESMTPSA id 4fktBJ59zTz69HG

for ; Mon, 30 Mar 2026 13:58:16 +0000 (UTC)

From: sales@australnetworks.com

To: sales@nk.ca

Subject: =?UTF-8?Q?Cam_Inspector_=E2=80=94_Field_inspection?=

=?UTF-8?Q?s=2C_quotations_=26_professional_PDF_del?= =?UTF-8?Q?ivery?=

Message-ID: <1912c7fb-991e-6cab-0917-c71e0ec4d9c9@australnetworks.com>

Content-Transfer-Encoding: quoted-printable

Date: Mon, 30 Mar 2026 13:58:16 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CamInspector - Field Inspections and Quotations Made Easy!

CamInspector



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?Q?Cam_Inspector_=E2=80=94_Field_inspection?=

=?UTF-8?Q?s=2C_quotations_=26_professional_PDF_del?= =?UTF-8?Q?ivery?=

Web/SEO/App spam from Microsoft Outlook Part 2

In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYSPR03MB7620:EE_|TYSPR03MB7619:EE_

x-ms-office365-filtering-correlation-id: 057cd4e5-2b17-470b-90d2-08de8e5f29da

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|10112599003|31061999003|39105399006|37011999003|461199028|15030799006|15080799012|19110799012|8060799015|8062599012|40105399003|51015399003|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

=?utf-8?B?YXJTM294NERzeGZZOVl1VlZsVHJIN0cwWHE4NG1qY3ZScUN1aUxLWTBGUXFH?=

=?utf-8?B?d083MFFybGFsODhzaDdXY2QvTFdPT2NBUHhKdHRFRzhDNkRGQ1V1Y3VpRUNT?=

=?utf-8?B?V1huUmJpSER4UXFndEF6czN3OENsakhqLytyd24rQzRXVVlSbjBod2luWnJX?=

=?utf-8?B?bU5tLzlXQURLSzRhdEpzbWJCeS9IQW5TM21mM2dHUFZaSEFXRTBXdzV0aklo?=

=?utf-8?B?RVMxcEhjckNpcmhkbUxEd2dtZmxRUUxlZjdDU3J5NGt1TnpJdElLUzhPd1Ro?=

=?utf-8?B?Q00xVWg3Y1J2aWRqd2U0WEZlVU5qTFZRc1ZlUFhuSU9ad0FhNEdWUDFRMFFm?=

=?utf-8?B?WVpKcmJjVnE2cnRXZkV1SE9sT3pid2FldmhVSTZmOFE4dWJIQXc3T0Z2Rzg0?=

=?utf-8?B?U3RPZmdmcy95RXJwKzRkUGZWUHd6d0F5dEMvNFhFcGZ6SkJud3NUY1ljMFBz?=

=?utf-8?B?emhtZWtPU0YwLzlncGV4RUJCK1hkV3RqNUtqYTdNL3ZNUjdBeDJ4dkZNenhP?=

=?utf-8?B?Tk5EWUJJZldNRWtCVnBNV21BVExVNDdlZnp2MVBEcWgvdzc5MzhFblRFNjZF?=

=?utf-8?B?c2VNZGdST1dpcFNpK2h6dHhDQWhMbXBoY085eW43VXlQRGRLb3FHVUtpKzF4?=

=?utf-8?B?SkhLMGJ5RE93ZmFDTlJFNzBMVWdNWWhZUEcycFFlWUtrWnMvZDdMTStlWTYv?=

=?utf-8?B?WkloNFVFUzBwNFk3MWs1RHBPTWNKT0hWQ2QzdU9EV3B3MTZmSDRwM0ZJbXRM?=

=?utf-8?B?OGc4S0VMcEVpVDQzNUU3cmt6UVJOd001NzlQYWRDTHM1T2R4VmlJUTNCQ0c0?=

=?utf-8?B?VHNmekJFM0lnQWt4Mk1RWGkyTkFZcjRydGRQQWZLQmFGcnZkcmNiYmJiaWow?=

=?utf-8?B?R3FmLzZQNXJLaVg1dDdBaFdaSlZvdm5ERkFORG1HL1pxa2d3LzdrNlp3RDIv?=

=?utf-8?B?dzRObm1JK2F3b1YvdkFIWGRrOFpsMVNTVDh3ZklodjgwNHhjNmZHRzBCQmMv?=

=?utf-8?B?TFpXdGsvMUJHUk9Fd0ZIci9zdElXODRVZGhtamhnVEp2ejVmTHdmbGtIcWUv?=

=?utf-8?B?bUdkS3l5MXpPRVNxb1d0akNrYTVVem9ISW45NEQ0ZFNQekZPWFVCVlFTd0Rk?=

=?utf-8?B?VHpLZDU3MlQxMHBOTzJZTjdFVXpJN0s0U25meWoxWEVzTlZyQ1lHN053clFy?=

=?utf-8?B?NTNacFczbGlaQzliTlNiZ0VQZzVtWVZDYnhPWkFWZ2Z2VGg1YjVJTVV1dW5S?=

=?utf-8?B?Vnh1YlNSR1AvcEsvSURPRStOcE9sSktqZUUrZXJRaWpxRFVpa09OMjVROXdn?=

=?utf-8?B?WHVPRHlVdVpreWphNWpPUXBKYVNzajFFSHozNWhUQ2dIVWhoaHdnM0RPY0Vq?=

=?utf-8?B?cGJOMGNtMERDSkc0Q3RKRG9uOHRWdDgrcFo3aUpTeWhmQnAxb2Joa2s5MS84?=

=?utf-8?Q?OMSLFM2g?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?TSs0aDBLR0JUME5qM0RXWjJLWkFDVVZjZHQrbmdmblZFaHl5RlNaMGlzQmls?=

=?utf-8?B?MnFKUTZtdTdNT2w0Uk0wRkxZcit1UUhMRXVXb3VmcFNUcFhDeXl3ZkFzL0ty?=

=?utf-8?B?L1IwQXpISlVkSFJSdVhLbWcrcGdTYzJZdDNZSnBqbnhMc1VMUU5tcGhtTjhk?=

=?utf-8?B?RmNKT0dyUzYrbCs3ekZkc1RYM2NkSFFwaDg4YnNMMHVzMk5LRkdMYUxBS3M5?=

=?utf-8?B?TnZIa1U3eHNqQjNiNlF2VWZqNEFmNzBaZXUxTEYvSTkrV01tYUNTRjJvUWlm?=

=?utf-8?B?VXA1ZEFEMDlNYTZhbEU1QWU2NkRodE9lTzFrUTNwK0JTMHJJRXJnQitteUdH?=

=?utf-8?B?RTkvZ2FqV0lBTnkxTFlnVnRyaThaYXNpZHEyYVE4Z3ZEb1JQMTN6enlYZ0o3?=

=?utf-8?B?QjBydXZndDlwb2VmZlRkeG1hajR2cHhkRFR5SU5ESW1nbTlLVEZTQ2ZLcGp6?=

=?utf-8?B?L0trOFQ1OWh0RVo4K3QrdGZVQUl1YzErakt4dXpLQ1lpRXg5dUJaSE5jQ0dX?=

=?utf-8?B?V1FodzF5VmM1QUJsZm5YbTRwMTl0OXI2ZXcrYTJsRUN6YW4zYWlEenN0U2NI?=

=?utf-8?B?aXNwWEp5Y3JzYXdJZmt2Q2hRUU1EWmZLcFQ4U3F3V2JoVmFDelUrMWhlbFNU?=

=?utf-8?B?M1JwWWc1aWFRQlJTTGZlcVF1K2ZuQlNMaWFzL2JTNmc1WVhvSzNmNVF2MFZt?=

=?utf-8?B?eFEvS3RHemIzTmY2ejR2eEVOUjdIOWx2THczS1J4ZkRJTTg1QkYzSkVyRUZG?=

=?utf-8?B?VGdTaTI0T2tOK2ZoVDlkYWJ6V29IREpRVEx3RHlpM2o1M3haN0tOYVp5UGdn?=

=?utf-8?B?N2JRMS9IdUZEdFp3SXFKT0FkMGRKTm5HOTJWSXRFTGp3QTVGNzM1VGFWZGlP?=

=?utf-8?B?TERyNjlsV0ZwbkJVaysrSTRlaDMxaktWVmZNamFobGN2WnBycWY0cmNBd09L?=

=?utf-8?B?QmRFcDU4eEVjWGc1MkxvUXlON210VjFZMS83VzVRZDV3YzhpNzJQeEd0bVNt?=

=?utf-8?B?eFI0NzVDOUlRWE5rY284Z1lTTmtPUEVmalpBTVVHRzBsdkxlNThPSW9IeHdI?=

=?utf-8?B?Z3V0WHVxWmZScFdEem1PTzVpMlJFaHRxT0ljTEk4K3BZa2M2cURxT293ZjNn?=

=?utf-8?B?cnVUUFFTNmg0cEFRWWVtY0w3cE5hVXovMEo2UUQwUFo3Nkl0R3hwNk5tNFBQ?=

=?utf-8?B?YzNFbFJqZ1BPa1dURm5vdU81VFdvTTZIaWh3VWxCbE5FS1BUTGJhdVNEL2ow?=

=?utf-8?B?bU5BTXJ3ODY5Q0NOV2M3eVN3NlIxRXNqS2RsNmFENnRpdVFLam5heU9aTklo?=

=?utf-8?B?TWp0c1lmOTdZSkNkL0RuODU0YzBvRS90Vld4cVdtMHl5MVVVbTlsSnllbHlh?=

=?utf-8?B?anI2bUhBUXB3Z1A1OU1Dem9oSC9ZWGR6RGgzYStCeHpKUHJIcS84bzJNR2lk?=

=?utf-8?B?eEVPTWs2dHFFd08zSWlzeUtJeVgyWjRuT0ZaYmlBV2hjci9laTVZQVMwa2NO?=

=?utf-8?B?WGx3NmhSeDE5TkRLdi9UNEFkeW9odUIwL0ZCM3k3MTExd0NBUmNhblQ2UG5G?=

=?utf-8?B?WGR6M1lsbjhGUmVYaWI4N0pMeTVUUXRKYkdGSTRHVC9HWDRueDlRV01nd25o?=

=?utf-8?B?dkEzQmxSenRJRFg2aU9WTVQzK3NDRDdBdVplVS8xY1FiZkhWcmw5QXltbnM1?=

=?utf-8?B?V0tDS053TEhERmhueFFUQU1mK2ZDVE0rRFZSbXZHQjJQVEdmbUI0djE2SnEx?=

=?utf-8?B?Q1BHV2QralA3bjVrNjVyeTFERHZQL21DL3V4K2tEQ20reDU3aElQMGZ4dnpL?=

=?utf-8?B?a1Ywd1kzTFhNNVY4Um1rM0g1MU4yRjZjc0tDMW5yaVNJRFhwQyt4Vy90ZFNa?=

=?utf-8?B?Nk5IMVZHTjRTQmhBSkIyWFpBNkdQK3RpT1NMOGVzdFRnVnBrTkl6N2tmTnhk?=

=?utf-8?Q?VFSrz9qCHd2Ow3qozoAAbvNbbAMhTs5u?=

Content-Type: multipart/alternative;

boundary="_000_TYSPR03MB76200E29CC673E4FDEDB35E69252ATYSPR03MB7620apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYSPR03MB7620.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 057cd4e5-2b17-470b-90d2-08de8e5f29da

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Mar 2026 13:20:50.7830

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYSPR03MB7619



--_000_TYSPR03MB76200E29CC673E4FDEDB35E69252ATYSPR03MB7620apcp_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



SGVsbG8sDQoNCkkgY2hlY2tlZCB5b3VyIHdlYnNpdGUgeW91IGhhdmUgYW4gaW1wcmVzc2l2ZSBz

aXRlIGJ1dCByYW5raW5nIGlzIG5vdCBnb29kIG9uIEdvb2dsZSwgWWFob28gYW5kIEJpbmcuDQoN

CldvdWxkIHlvdSBsaWtlIHRvIG9wdGltaXplIHlvdXIgc2l0ZT8gSSB3aWxsIGJlIGhhcHB5IHRv

IHNoYXJlIHdpdGggeW91IG91ciBwcmljaW5nIGFuZCBwcm9wb3NhbHMuDQoNCkxldCBtZSBrbm93

IElmIHlvdSBhcmUgaW50ZXJlc3RlZCwgSSB3aWxsIHNlbmQgeW91IG91ciBTRU8gUGFja2FnZXMg

YW5kIHByaWNlIGxpc3QuDQoNClRoYW5rcyzigILigILigILigIINCg==



--_000_TYSPR03MB76200E29CC673E4FDEDB35E69252ATYSPR03MB7620apcp_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



Hello,



I checked your website you have an impressive site but ranking is not good on Google, Yahoo and Bing.



Would you like to optimize your site? I will be happy to share with you our pricing and proposals.



Let me know If you are interested, I will send you our SEO Packages and price list.



Thanks,   

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7Ena-00000000AaU-16b3

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:45:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 09:45:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013083.outbound.protection.outlook.com ([52.103.74.83]:55162 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7CZ8-000000008zO-49eD

for sales@nk.ca;

Mon, 30 Mar 2026 07:22:14 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=AI01f4+cjDCuH4Rza5TzMNOxt0HCf9tffEKakL8fXSfedCOsxFE+8cBMRTCsHqtKOMg6aLisSuc6Pjkiwn1/K9CSPU4L1gdxcmaRQpDrdikbSVU/eqR840R3gnYW+sCKzzr8PLpn3Whtf8eEXChOcMsa0nx60jp8xTAjsbO3l2TM8UY5u+ppLBdQAOaSmKRwK/mVQLGthJ/KfAV8F0FMyBW/6OQRM3KXaOIxU3ImmSZm7vvXNFmXCuz9sWyuXGjA2K7y9wAXlj9DRPK7FEF9exSMFeLp/cEw8RIPSwzY33o2ye7WmaSCGvJC5XSQmwcRUFSzyTownnFVq+mOyA7ulg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=9Z7wokOPS61XvEr2hEksSb8wWvJ+fbzQV9KD4tI78kg=;

b=W0ZkH0U43qKIlrenymGg3ZQOteTmlfXyJBQLDQgUN5Q/aatFBuX/11tmxKRqGgDmG/jN0qHvDfRRHmcKrHSgDNoyP+3F4O1UaVjI0SwjA0SgqKsrz9Q84LpMwu6aGrHlaJJlnkUsMZ5E+qWeOELGaOSmr+Rh7xGRDzw8DFOTvJKuD2MqpZZ+RJgu69yRu+NtgzKFpE9+jEssDYKgxWSx3/lGMry9nl6J7a0wW2GW3I4kkzYw+aHONKrfGA0eDHOdT3grrmke3zv2iiSf5Q8dtfYAlVa8HUQ8t0d9VfdKyacT8LgwzaTIUPo2kYE7y0o6mwDLQyc97aFLi0P+HMepAw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=9Z7wokOPS61XvEr2hEksSb8wWvJ+fbzQV9KD4tI78kg=;

b=oyb9uEYji/fi5NcHtmeOYUSI6RMU57iZm6C0dwIsebQoXbJ2fH1ZMf3j8UMIjMUSSfdu76atAGiYuCMHbEOVtKhaVDbxS2phTLS6ol2XjSGn9TIJ0/z2d/mluurtmhxSzAHEdA8kg41CV3veeOYemaL2Dym5vDwvrHG7aYThtRNyaZyJUVVwf1haEJPuNJ17QPpp7QUVZw70gYxqXa7WR6SU+e//WVx0If2KC7rWrVnJilh4YGSmfaoEwvG4lthbJAOkkDNSGg3xPGJsVoiwc+9I/A0EmTD6mrtTSWoLvHMVQNS6F/O5uRTzXmZ6qoGhLfFx9I1i+JVTdyYKJ/StWQ==

Received: from TYSPR03MB7620.apcprd03.prod.outlook.com (2603:1096:400:431::13)

by TYSPR03MB7619.apcprd03.prod.outlook.com (2603:1096:400:412::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.28; Mon, 30 Mar

2026 13:20:50 +0000

Received: from TYSPR03MB7620.apcprd03.prod.outlook.com

([fe80::446b:6474:15d0:64d6]) by TYSPR03MB7620.apcprd03.prod.outlook.com

([fe80::446b:6474:15d0:64d6%4]) with mapi id 15.20.9745.027; Mon, 30 Mar 2026

13:20:50 +0000

From: Mariya Joseph

To: Mariya Joseph

Subject: Re:

Thread-Index: AQHctvPXigXIqI9EkkqZj5kaSDzNurW1h0ZcgAAB7B6AAACUZIARl1ZygAABA7k=

Date: Mon, 30 Mar 2026 13:20:50 +0000

Message-ID:



References:



































































































































Web/SEO/App spam from Microsoft Outlook Part 2

Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[2603:1096:308:0:0:0:0:273 listed in]

[dnsbl.ahbl.org]

[2603:1096:308:0:0:0:0:273 listed in]

[dnsbl.ahbl.org]

[2603:1096:308:0:0:0:0:273 listed in]

[dnsbl.ahbl.org]

[2603:1096:308:0:0:0:0:273 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[2603:1096:308:0:0:0:0:273 listed in]

[will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[roshankumar6784(at)hotmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[roshankumar6784(at)hotmail.com]

1.2 MISSING_HEADERS Missing To: header

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.66.61 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Simple fixes to improve your website + SEO



--_000_PS1PPFFE521F52BD2B54773C0CEB5F70F44AB52APS1PPFFE521F52B_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

Would you be interested in building or rebuilding your website?

Provide Services:-

Redesigning =96 Brand New Design as per the latest market trends.

SEO (Search Engine Optimization) =96 Improve your website ranking on Google=

, increase organic traffic, and boost online visibility for better business=

growth.

Functionality =96 CMS, Newsletter Subscription, Ecommerce, Shopping Cart, P=

ayment Gateway, etc.

Landing Pages =96 Highly optimized landing pages for better conversion.

Responsive Designing =96 100% compatible with all devices like mobile, tabl=

et, laptop, desktop, and all web browsers.

If this sounds good, please share your requirements.

We offer competitive and flexible pricing.

Thanks & Regards,

Roshan





--_000_PS1PPFFE521F52BD2B54773C0CEB5F70F44AB52APS1PPFFE521F52B_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Hi,



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Would you be interested in building or rebuilding your website?
>


Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Provide Services:-



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Redesigning =96 Brand New Design as per the latest market trend=

s.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

SEO (Search Engine Optimization) =96 Improve your website ranki=

ng on Google, increase organic traffic, and boost online visibility for bet=

ter business growth.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Functionality =96 CMS, Newsletter Subscription, Ecommerce, Shop=

ping Cart, Payment Gateway, etc.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Landing Pages =96 Highly optimized landing pages for better con=

version.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Responsive Designing =96 100% compatible with all devices like =

mobile, tablet, laptop, desktop, and all web browsers.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

If this sounds good, please share your requirements.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

We offer competitive and flexible pricing.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thanks & Regards,


Roshan



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_PS1PPFFE521F52BD2B54773C0CEB5F70F44AB52APS1PPFFE521F52B_--

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 06:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7C2j-00000000Cip-2rz6

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 06:48:33 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 06:48:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012061.outbound.protection.outlook.com ([52.103.66.61]:37117 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7BUT-000000000VI-2H3g

for sales@nk.ca;

Mon, 30 Mar 2026 06:13:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=DUXT6uZW0XAlVGoVUsF0pmM3yBPgXuJU+2fTATSwbahdWN2RMhYX419IeuOvOLCSK1F0FTObUbopD3quHVxJLqYQAskg3kuSBZ+1E/L78tZXetNgpeVG2E/P4v7Lp3bLaykuW6vhpIuyRzGaIXGFLxNPNS6Hpa1RvJOnhava7pvQjZzux9H41wfykV4tzefdEjEOA1/ak01ZOxL7IzYHLunkcc/9Lw8g5mdEYuIMQp9hxDTKLuddm+aAQJtSKKskECMOQsgO4WE+FkUrJg+TyTZ2aKa5nmiEmR4w69gGGtb2EVjIqX3e63KhYyHHjv7MxlBRbEA3FfLxc6xedeRZgg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=LYJYZFV25MeaEJbG2LZ3nCLlO3x7LQHXFqGhPYNawL8=;

b=XcmoZgCx3d2DRya+EWKUKDbSVt7/9LxRS+GBQ9qbyKgZs6UhAlcrnSVUm5X3FK6lksIgWu0MjKA0dJmiRfARcFuVvcYAg7lPS+i2wPkBmTAQdDZYjWs+VbIAEaEnumHjRnEzDEU8400EGgu6Y7V0KJH97HPuvWvO1YqO7+DN1NfIjaYqA4JgqnT7IZBW1Gx8EIUooWLAzvWT9PrHObBA4Y2ioOOCSM2okucJ0LdPOLXEBMXLEBtxO3RaDiAgVVQp3Nxa1k1FP2jfdd8iMd2emh9Ia6elNYbdThwMAi/yjDfrfZd/oAQ7bjU79loYQFVjC9ebNH8/bl0+syR9j0zmYQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=LYJYZFV25MeaEJbG2LZ3nCLlO3x7LQHXFqGhPYNawL8=;

b=F7b1GB9fiQ02L5slpjjQhHPqE2oUlmoLhbJDpih78UEjs5B3ESXDoitYnafMfdOkVgH/lNRE8WtEuAHLNL2sbITU94uiezWsCZNOZghWZwm4cza9DLIfv2kfHU0MWxkwbtYV/Uy3mSTpxlYUkk6J6CikI8egxn362HlW5TwZ6bBohGp+ar8G7dmRpbHoAxK3RayHQsA09QPhvNHx4ZBNmz7HtuwnRx0Xj97TNynsOEFBy9Yq4NPQm/M3UZ1eDUjSRzjTmWxiYPppQEkrn3PjuN63lcdMOrbPZ+kSj8LsSszPgP+HkqkS73kze1yzi3vtMPPgUDVEjuJdgthwr/SgVQ==

Received: from PS1PPFFE521F52B.apcprd06.prod.outlook.com (2603:1096:308::273)

by SI2PR06MB5140.apcprd06.prod.outlook.com (2603:1096:4:1af::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.28; Mon, 30 Mar

2026 12:11:52 +0000

Received: from PS1PPFFE521F52B.apcprd06.prod.outlook.com

([fe80::bcc9:39d8:da93:ee62]) by PS1PPFFE521F52B.apcprd06.prod.outlook.com

([fe80::bcc9:39d8:da93:ee62%6]) with mapi id 15.20.9723.019; Mon, 30 Mar 2026

12:11:52 +0000

From: Roshan Kumar

Subject: Simple fixes to improve your website + SEO

Thread-Topic: Simple fixes to improve your website + SEO

Thread-Index: AQHcwD4ozW/ezUqM8U6MpSSuVkpVFA==

Date: Mon, 30 Mar 2026 12:11:51 +0000

Message-ID:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PS1PPFFE521F52B:EE_|SI2PR06MB5140:EE_

x-ms-office365-filtering-correlation-id: 624810e9-037a-4250-ca6d-08de8e5586e5

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|24121999003|15030799006|15080799012|8060799015|8062599012|22091999003|24071999003|31061999003|37011999003|461199028|20031999003|39105399006|12121999013|19110799012|440099028|3412199025|30101999003|12091999003|102099032|56001999003|56899033|40105399003|51015399003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?bGNHsVzkquCqVjoSmRqCgXGrjRpryGNV9TGe2B37Yx7xwn8Dtd+Rj9+U?=

=?Windows-1252?Q?L9r1dCzFuw1VyjEuil9FoTkxXM+MlAWoPyUBPdliGWBpD1XUPbrsu5Ls?=

=?Windows-1252?Q?UJWtpIwr1SNfnRQxzCA6wbYeTlkIyD4fQbDzbIt8OxRPAz3FPEse7s8N?=

=?Windows-1252?Q?BmrFjljQZEH2sczZJViGXd59FVIs/C5lLTSPRepikq3euOGl35Nkald7?=

=?Windows-1252?Q?GYqxI9Zn1JkVV90/se4KL40invFvB9It8oHGNNZ0OT58WNAe5P9WCvig?=

=?Windows-1252?Q?RbzdaxFwJFJU4EPPg502hb0qtVS964i1sSZeL/PBu6rdyLMm2AJcVIeU?=

=?Windows-1252?Q?fU9K9XRpAuCIULdOzVscZUkw3rDfYW8kN4amtXu6Rmk5detkFEsB4CqW?=

=?Windows-1252?Q?QDo38TaW07QlfTw6HRS/BZpVtx1CCyg/+QdAsLz5leU1A31ee7OOkHqf?=

=?Windows-1252?Q?FtNybWkwLstV2zzjp83RNsv8XoHUjezBLqBNNwctUoLa29LpMs5swu9B?=

=?Windows-1252?Q?rYqV736PyRE6TcqVmPY1iWekdZZ6FX04KkAE2b4E1/tO2D9VosBuR4MZ?=

=?Windows-1252?Q?hQXpzko4CtHOxmf+h2vJjWAwTEEPlOeimui7cZSiSx4t2YWsqPfaHt6b?=

=?Windows-1252?Q?/SZRZiZtYU8vjHqv7VBbKgaUVOwytqIDSSIZYQmuHlIqvgv0L2Ry0HUC?=

=?Windows-1252?Q?4ipnpPdVx6Qcxl/Ec/FyGq/BXd26rwmKQl0le0vILxwNIzge0b/Hen1V?=

=?Windows-1252?Q?Ta+rwnLf3gl8ORapgDfJ1smGvMUAlyhirTHSVaA9BpOxTWQKHW6UssY6?=

=?Windows-1252?Q?KvJCNp9KrpqG9gIiCZKKLbOQ187CCg0+wHoU5pRVT/Z++vIAZY+zXJom?=

=?Windows-1252?Q?LAPCHak+ZIT/pmvW7i3/ujGqRQudJCqbfxyrgUe3zJPXx2zsOuyHPJzw?=

=?Windows-1252?Q?WOjAbAKi1/evofqUHCmaLeSR6u0GGfb+8gvWWeJhZGjsUgjZq8bs88aE?=

=?Windows-1252?Q?TFJpkgfbGCvIqDwvz2ZFmoxOwr70cRktVyPq+8fvYBz+BNiedtZkhwYr?=

=?Windows-1252?Q?pjkNKiIBETDAdOdVr5gXi96tNys+60MVQHccsEFWL8jAFCjxhCDtkqMX?=

=?Windows-1252?Q?mz+kBLWTPOFxgZadZNrVY97kbRcIqNkVYR7WYj1xpf4sgmWGq3ivTcVd?=

=?Windows-1252?Q?5Xm7KfR0hOdLg6b8mLpwzWBMGZBycYlaehNB9ehQthOj3PoNdsa0xl0f?=

=?Windows-1252?Q?DlucQy8nDR0/tB1csr5PgvXYBWd8T7hjKeqpag3LYmJsNPL/abaHVphq?=

=?Windows-1252?Q?gboO7QTCcdmvrOv0LXINxsaIyfwibV8ncqemtJYUhrlNBETF?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?HU4lLuglOjRpOXOBA0jGufGxxGTtpmH1ruyPK0h/xL/G8UaywQEijApB?=

=?Windows-1252?Q?tzzFQhMYlGMhKfWfii6cx8XIYaI1/kQ+3L27hzyRgSvV6lxB7JZmduL1?=

=?Windows-1252?Q?iS22JX6qp+Js1wIhXCG21I+FkSZDtr7yx48tedtghmYYEl1hipPrtzSF?=

=?Windows-1252?Q?/u1PvGa4ccJEUac9bqzYGl3qoqUByenO/NQBrtx+o2nVRi6eJV6y5tny?=

=?Windows-1252?Q?VfDuWNDW2hdCf7t3iqND4VpLCPneqfE6NWp8RmnI3JCrp+2khb4vt+7e?=

=?Windows-1252?Q?aI08+BGHOGvRiqXgLetn+b2iQfnp7njgxRpFA1QUr2Z00wAB0h85exmQ?=

=?Windows-1252?Q?oghn3WDUUxQMlgilcZT/svWrVufP2TZpUPO4v6Hl4r8h9SLF28YMvIsc?=

=?Windows-1252?Q?lxr3+CbHLgM54tuhLjYMejH4bYDE/WbzDkRHnU3I6JLDHJhQ45Y8oUqz?=

=?Windows-1252?Q?jjSJ1hSYidQlSFGF4SIybD4fprotgw+bdFhKGijceNgIQirXjvzo+lth?=

=?Windows-1252?Q?d/CI45jDVeDrBLN0ki3/oHPebY3PVBooE0XhFHilDoCLhjlOEh+4+gaS?=

=?Windows-1252?Q?zNzk2jpo8C0OHJgDUdvwrIwpbs3PUtaa9apn/VOPWd+shDFcts3BsACl?=

=?Windows-1252?Q?SY/p5k38kBu8DZXeSryWUBczt4VLci1sb8O6eJLwacGPUH4OqKB8HvpQ?=

=?Windows-1252?Q?j1tKn6s8lkw7sthVeXb2a+szA+3YijZiPLCdx0A8NPNJfYBZSHoSW52K?=

=?Windows-1252?Q?X4xzjiRqDjyCj+d6mP/HlOD5Ix1fb4fbEboBQmbfifJ6UI3kC4euavDx?=

=?Windows-1252?Q?YGmgDCtrrlMdsURLRBzWaadUSuXpGU+eALzbnHZoc1PUCd1slNXCz4sw?=

=?Windows-1252?Q?8Dx4lzDmqj+CxUJswZvFLwKNH+zijz9xKqL590/4Fh26clcqi6/C+k8p?=

=?Windows-1252?Q?z9imx18J25pnC7BzT934vUU239gWDd9qN3380REhCmGLM/KUfPqc6SkB?=

=?Windows-1252?Q?PlpCgnCn0wUVHqjjV5rDMvf25Zt1sN/88W8nDpqNfbAiZ6nypfcr94dU?=

=?Windows-1252?Q?F8GWa1Y5Bb8SKlakl7CXYEB3HZlVS58piGou42VgB3MHzKoy3ImiOk+G?=

=?Windows-1252?Q?1vUrRsBHqwaQ1ZJaw2s5g05LowasWy/l9ateIQf8S5n5DiNWCVJ8nksB?=

=?Windows-1252?Q?lkjCphGjsA+Sx0mrpRleIKfWZJ/CyOTWDYd/wkdfVrfLozc961HPhfcG?=

=?Windows-1252?Q?t7yyrs39Qddt4xJt8q1FkiIdYvrSHi/AMi2LOfUuoCiK6Sf+wmClbxGG?=

=?Windows-1252?Q?UyFAysB3nJsn6t78iqKcQZPO1/EfRJqT9ug736pNviSUjjC0JUgBTJHX?=

=?Windows-1252?Q?c3aY7Syx2Th3YL06VAE/4VRWV3qESUZw2PEzwYA5ZS2Qvmgi83XqapHd?=

=?Windows-1252?Q?DVd5TCyLmf8q38gDq0O2yqKxq5SBxiZsuv1bjYqLv5SSt0G3n76Z5dUs?=

=?Windows-1252?Q?I91m47vRJ5X4fuK2TaF+LWiAmRHYFZ+GickKqudgDHfUhi5nTDYfK29B?=

=?Windows-1252?Q?iv9VV8cnTwpX+XUd?=

Content-Type: multipart/alternative;

boundary="_000_PS1PPFFE521F52BD2B54773C0CEB5F70F44AB52APS1PPFFE521F52B_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-25b72.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PS1PPFFE521F52B.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 624810e9-037a-4250-ca6d-08de8e5586e5

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Mar 2026 12:11:51.9699

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR06MB5140

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Would you be interested in building or rebuilding your

website? Provide Services:- Redesigning – Brand New Design as per the latest

market trends. SEO (Search Engine Optimization) – Improve yo [...]

business Valuation spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 06:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7C2c-00000000Bv8-0hcl

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 06:48:26 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 06:48:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f44.google.com ([209.85.219.44]:50572)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7BQg-000000000NI-02N3

for sales@nk.ca;

Mon, 30 Mar 2026 06:09:22 -0600

Received: by mail-qv1-f44.google.com with SMTP id 6a1803df08f44-8a23f802e0cso4003866d6.1

for ; Mon, 30 Mar 2026 05:08:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=teaminvesttheadvisory.com; s=google; t=1774872500; x=1775477300; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=On4yRDDkKxSH1BtxbEtoEGk0UEPefZD6FSaNIRJfSqI=;

b=ILqGEfDije9JMX1c0O/MDM4oYK8cJNkoPlJqcDK6Gd6y+gakB5G2rbASZrrjn863u7

yQRdqacjbyFXPWoGf1P4i/74a//Z6dsl5kqotNPGTqEMsL54VSTnLjv8CwPAxf+KIMRA

LXpsBxSZNPbYQSSkypfJiA0A0WgHta7Qq7K6GBeIVWI55fPTe2qfFKLB8M4421i/vUBT

UemxYafmdpK5yC8MKq8SGyCrg5KAfMHUm7wOFMF6RY1Cx7tiVE/7v6PFzBZqEftNJdCJ

6zT2RlW553XDXaDREh2QoIwUu0VglrfVmqDVugoMjJDnsnm4rLWghmW66Ogroc3c4iL/

C5Aw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774872500; x=1775477300;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state:from

:to:cc:subject:date:message-id:reply-to;

bh=On4yRDDkKxSH1BtxbEtoEGk0UEPefZD6FSaNIRJfSqI=;

b=mwzyAuPv2slirp1ySLIb8D5zV9uFwpel9phJ+ZkjynW10oBR41z+tkl92UMph7ahPw

x4tSWYR5gfTyVbN5HPJs0hmRJDQkCq1J4b4ElPaE8EBpuW9o+0TLKmNO6M+jb2DDRFEQ

jKK/QZZC1KVqwazDZ5Xc2q02OmzZSijL7CouiQk+MOecmND8Fq1Nz+fDrzPiV1npH6Za

S2rQlrSyWIYj7WR3Vm/pPxKovAiPVd2Hg83/o1H1xQrVRHXSGGEzt3Uugh642RRvOiKI

w+M7bohQx1CIkyIS+LmXgCOXJfqYaB4p2t9+UMjeTPalFKZ356ztEQ0kMyvc9OOW7KRq

i3+Q==

X-Gm-Message-State: AOJu0YwZuh0plIbwrTFAXeJIkOTY+9idZMHbg8GaLeWDVaS1RprTI5t9

vuL5ntLe8PrTGRnMxsu365yQKmytnerka3GCSbqP2/tbjzGwxGkJtqKz5RPd5vBzjGvgglhw6Rl

hL77mEg==

X-Gm-Gg: ATEYQzw8oIPe7/ho1RmF/VfH6yGExTw2i34brFRqYlXNDGZ/WWaPK9DTQnipOtgFZz9

IaOH5evAMWMd3FIFT7Vix85kw2EiLpfZoEXwUcGHldm+LQgQ1WsD8a2/sgbSrkDwmDOvKlVatOM

EeRclGI/0zY407fpuBx6ccSLsnrUGRzf8sIH9Dv+bSdkhyg3I7/oBEGdMifWC4fJCIgfpz+tcOx

b9er3j5necSbH6f6w4trt5XdoJQeHNHPSraZ+ZJLOQr5vTCVrdxUsBKy8Es7RHZ53AApVt3Z2Kv

A3qdq3CWdiZ588P0n0TnMCxGE2pXLMCJ6ZbJ+fjau6VJO/XHACTzgZMQeRpR9HEaDS85rNXW3r0

YAMJWHc/fkhEv1BtL/lQuNCmpqtcbXsUr5hFqcbBIHAUrRV2KpvrHiv484JLv1Ye0OCB2wiKmQ4

77koJDWR8u/Y7WSq77HxGLQbpCNnLTJtoBZIam5OGhpt4OXrH/u8AAnikErNFERNBoZ51iRhi7q

2keBom7XYcYs4h+qtk1BX+LZamEE4ECQVNW1SvAzo65oy6z+uNG/XXyZtj2ZCRYsXvh5au46Y/Q

G6WyUQRNKui8hXI=

X-Received: by 2002:ad4:596b:0:b0:89a:14ef:8eab with SMTP id 6a1803df08f44-89ce8dc03bamr164033846d6.41.1774872499357;

Mon, 30 Mar 2026 05:08:19 -0700 (PDT)

Received: from 019d3ea5-11b1-70eb-a522-1577e231f612.local (ec2-3-12-146-113.us-east-2.compute.amazonaws.com. [3.12.146.113])

by smtp.gmail.com with ESMTPSA id 6a1803df08f44-89ecc1908f0sm66249196d6.20.2026.03.30.05.08.18

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 30 Mar 2026 05:08:19 -0700 (PDT)

Message-ID:

<019d3ea5-11b1-70eb-a522-1577e231f612@teaminvesttheadvisory.com>

In-Reply-To:

<019d1fe8-7f25-7687-a9e3-e9250ff65909@teaminvesttheadvisory.com>

References:

<019d1fe8-7f25-7687-a9e3-e9250ff65909@teaminvesttheadvisory.com>

From: Oliver Bogner

To: sales@nk.ca

Subject: Re: Selling Netknow Internet Knowledge

Content-Transfer-Encoding: quoted-printable

Date: Mon, 30 Mar 2026 12:08:18 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Just checking in Best, Oliver Bogner Managing Partner | The

Advisory Investment Bank Top 3 Lower Middle Market Investment Bank on Axial

- 2025 List 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO A: 269 S Beverly

Dr. Beverl [...]



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

[209.85.219.44 listed in dnsbl.ahbl.org]

[209.85.219.44 listed in dnsbl.ahbl.org]

[209.85.219.44 listed in dnsbl.ahbl.org]

[3.12.146.113 listed in dnsbl.ahbl.org]

[3.12.146.113 listed in dnsbl.ahbl.org]

[3.12.146.113 listed in dnsbl.ahbl.org]

[3.12.146.113 listed in dnsbl.ahbl.org]

business Valuation spam from Google Gmail Part 2

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.44 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[3.12.146.113 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

[209.85.219.44 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.44 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.44 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.44 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.44 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.44 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.44 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 LOTS_OF_MONEY Huge... sums of money

2.3 MONEY_NOHTML Lots of money in plain text

Subject: {SPAM?} Re: Selling Netknow Internet Knowledge



Just checking in



Best,



Oliver Bogner

Managing Partner | The Advisory =

Investment Bank

Top 3 Lower Middle Market Investment Bank on Axial - 2025 =

List

2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

A: 269 S Beverly Dr. Beverly Hills, CA 9021



On Tue, March 24, 2026 12:53 =

PM, Oliver Bogner

[development@teaminvesttheadvisory.com]> wrote:



> Greetings,

>=20

> We potentially have an interested buyer for Netknow Internet Knowledge.

>=20

> I'm Oliver Bogner, Managing Partner at The Advisory Investment Bank =

(Top 5 Lower Middle Market, 2025). I've been in your shoes as an operator =

and sold my past companies; now I head up the Advisory, where we help other=

founders like us exit. I've been featured on Forbes 30 under 30 2 times, =

INC 5,000 CEO, and many more.

>=20

> Valuations in your space are very high=

right now - companies doing $1M in profit get valuations up to 12 x.

>=20

> Do you have some time next week to connect?

>=20

>=20

> Best,

>=20

> Oliver Bogner

> Managing Partner | The Advisory Investment Bank

> Top 3 Lower Middle Market Investment Bank on Axial - 2025 List

> 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> A: 269 S Beverly Dr. =

Beverly Hills, CA 9021

>=20

>

Telnet communications phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 Mar 2026 22:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7463-00000000MNI-3hiB

for dave@doctor.nl2k.ab.ca;

Sun, 29 Mar 2026 22:19:27 -0600

Resent-From: The Doctor

Resent-Date: Sun, 29 Mar 2026 22:19:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [193.206.153.114] (port=52994 helo=mx1.le.infn.it)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w72wY-00000000JS5-3WQU

for sales@nk.ca;

Sun, 29 Mar 2026 21:05:45 -0600

Received: from mx1.le.infn.it (localhost.localdomain [127.0.0.1])

by mx1.le.infn.it (Proxmox) with ESMTP id 9FE491214EA;

Mon, 30 Mar 2026 05:04:36 +0200 (CEST)

Received: from mailssl.le.infn.it (mailssl.le.infn.it [192.84.152.71])

by mx1.le.infn.it (Proxmox) with ESMTP id 8633B1214E9;

Mon, 30 Mar 2026 05:04:36 +0200 (CEST)

Received: from webmail.le.infn.it (webmail1.le.infn.it [193.206.153.152])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256)

(Client did not present a certificate)

(Authenticated sender: depaolis)

by mailssl.le.infn.it (Postfix) with ESMTPSA id 7CCA43000368;

Mon, 30 Mar 2026 05:04:36 +0200 (CEST)

MIME-Version: 1.0

Date: Sun, 29 Mar 2026 22:04:36 -0500

From: TELNET COMMUNICATIONS

To: undisclosed-recipients:;

Subject: ' Re-validate Your Telnet Email Account Now '

Message-ID:

X-Sender: email@telnetcommunications.com

Content-Type: multipart/alternative;

boundary="=_73bca9b86a90000b1938281798bd42b9"



--=_73bca9b86a90000b1938281798bd42b9

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset=US-ASCII;

format=flowed



Your Telnet Email Address is due for re-validation, only if you wish to

continue using the Telnet email / webmail services.

You'll no longer be able to send & receive emails if you don't

re-validate your Telnet email account immediately. Re-validate Your

Telnet Email Account Here [1]



-------------------------



(c)2026 Telnet Communications Ltd.







Links:

------

[1] https://telnetcommunications-email-revalidate.netlify.app/

--=_73bca9b86a90000b1938281798bd42b9

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8




=3DUTF-8" />
eva,sans-serif'>



























t-size: 10pt; font-family: verdana,geneva,sans-serif;">Your Telnet Email Ad=

dress is due for re-validation, only if you wish to continue using the Teln=

et email / webmail services.



t-size: 10pt; font-family: verdana,geneva,sans-serif;">You'll no longer be =

able to send & receive emails if you don't re-validate your Telnet emai=

l account immediately.



: 0px;">

tyle=3D"background-color: #0052cc; color: #ffffff; border-radius: 3.01px; f=

ont-size: 14px; text-decoration-color: currentcolor; text-decoration-line: =

none; text-decoration-style: solid; font-weight: 600; margin: 0px; vertical=

-align: baseline; padding: 4px 10px; line-height: 1.42861; display: inline-=

block; min-height: 1.42861em; border: 1px solid transparent;" title=3D"Re-v=

alidate Your Telnet Email Account Here" href=3D"https://telnetcommunication=

s-email-revalidate.netlify.app/" rel=3D"noopener">Re-validate Your
yle=3D"font-size: 10pt; font-family: verdana,geneva,sans-serif;">Telnet
pan>Email Account Here

-height: 2.1429; min-height: 0px;">


=3D"color: #999999; background-color: #999999; min-height: 1px; border: med=

ium;" />



rdana, geneva, sans-serif; color: #34495e;">©2026 Telnet Communication=

s Ltd.











--=_73bca9b86a90000b1938281798bd42b9--



Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 Mar 2026 22:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w745u-00000000MKE-459I

for dave@doctor.nl2k.ab.ca;

Sun, 29 Mar 2026 22:19:18 -0600

Resent-From: The Doctor

Resent-Date: Sun, 29 Mar 2026 22:19:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out203-205-221-240.mail.qq.com ([203.205.221.240]:36487)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w72JO-00000000HoT-2lxY

for root@nk.ca;

Sun, 29 Mar 2026 20:25:18 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=foxmail.com;

s=s201512; t=1774837448;

bh=UXHx9ucifMGd3O7Nz+eXX38iiuVY1SiqwkH/qLbb1tc=;

h=From:Subject:Date:To;

b=DjR+LbZNPGMBCSRb19GnQc3eYcLKD/r6tNVzaNEfbBe+aZwjkaZqrRxZnFcBuLND9

OuJ19wEl9RSCaMs3xvZL+wIMq1iyTdp6sih9x/OXXp8U1XStm4UoUQJEqI1QnzEjYU

LRT6WdCdMKuNOMD5mmGDpuuZTs8ZQPaHKVdLSG88=

X-QQ-XMRINFO: MPJ6Tf5t3I/ylTmHUqvI8+Wpn+Gzalws3A==

X-QQ-XMAILINFO: OemBQX/oPQM7LjPPt3tlSWKLw6ZiQ7+lQEGslLh3d6Gi4ZhP5uMEdbmaKEfe8p

2X1BVRTcIAbEvSWRKrxhoHNonpJMBqOxPTNoeGO9PLSK4/OFYu2s4oS1NV2DxG4ENYBwQw+sLgGD3

Plkpqp0I2lYOjYWS0Lbe+SfDRnWYmjpYMa5rcpn7GOGZ7HAOjx5yakEPaB4EImkkFMoQRrl6rxmmi

1dT9l7nFeMXiDwx0r1ZZwl78D9vedB+2sNzxRLGN44aFR/z8mc+BmXSMads5elxhdbitlNKAUIpGH

mGF9HzObQL++qcVgVYkQijUBwm4fRuGufTBrJ6mplbdkZ3xafXgqedBEr/kwIk+gIhzPc9Lpn63hX

o1SxUtknZr7JADJsZTHtc6lgr++llrcThWhaNCaYG3sMi5cXNoNl9tSBNj0eiJ7uJ6kB2iYRbGdN+

sFYxVCqbe/zg0iqEexyY3CPHsnZRSh9oYuJHQlBPBZGDaivlKqEZyVbKPo5If9Rdx7tpHAW7M6rga

3PQzWYRZDuI9UCRuqUoj6AC8sm02C6BYTJm3P5Hkq1OvKLtrMcVKg0Cd6zg8Wehq3IJ8z4u93udxO

0CW2hZWqhTEI7x5HdanNgzKrnbP40Am7X5MX0rH5ZVlPEHVc7QM51KKD5rVd73+Fyxx4E1fDDrN7w

5sqW96kIcYa/jOeulhFTbZW3ccW0u7riZz7p0OKNoOZOFJ/RVvtCOSQ5fk2c3WT3HOFmPlF8sR9QH

2T0+zdd8xQ8FftSoF3XT30lvpm+rhs4Pbkd8qLAvSMaEOYzX/VpTs9EehZ6nFgGzj9F1LMmrtZ1Vd

+AiftHqEkW637R5Xo2LgJzoL+WafrOtnwCa2p8DpswdLXdj8zA7pehePxoFVHxvk+qnX6Qn2cL3TZ

MYc/4P0mgCqWZ5DaKfR97tCgHviXE/mMfKcVGKNMqij19kZc8E5yI/4bqVgt/Dpku25o2I+VLiOZS

/R3HUjSLy2DK/ZcjtO7RxAdJ1NdJIi1PThW/VgdqcYtT7GOglTDB5vAHXfUwewjn8vc8xEaQAmf+2

HudZUiIpYsQ9u1hiaxNuHygg77RgeJoxdJFgjBaaZPKmCkI6ypvTevMzpruFZn27+75k8znp0uO2P

B+IbhMd2fsUjOCLPjXzWU5wbMTIIeh12T4Cs2ZJoyfd6kZ2tAIfodP5aOi03znspqNSZcJzpFUWD+

uMEAkc0XxOVQA8526GVTF9NszLXizAfjTckdWVWDCFeARPpIUuNVFP8ihIx7g8RNHZpWDm4szsPB2

NxHqwewgICErHWNy67huLnUv7/jMS6UhpviiHMeScbpPY57ExKwLxNvrEKzZeiGcBr9KppV7OTcj6

4aUp+XIhZwr73INEpzMYi1MuoK2rieRvHf9vcOQ==

From: "=?utf-8?B?bG9ybmEuZ2xvYmFsd2l0cy5z?="

Subject: =?utf-8?B?V2hvIElzIENvbXBldGluZyB3aXRoIE5LIFBBUlRT?=

=?utf-8?B?IElORFVTVFJJRVMgPyDigJQgQ3VzdG9tcyBEYXRh?=

=?utf-8?B?IEhhcyB0aGUgQW5zd2Vy?=

Mime-Version: 1.0

Content-Type: multipart/related;

type="multipart/alternative";

boundary="----=_NextPart_69C9DEB7_56DAB440_5B55F075"

Content-Transfer-Encoding: 8Bit

Date: Mon, 30 Mar 2026 10:23:51 +0800

X-Priority: 3

Disposition-Notification-To: "=?utf-8?B?bG9ybmEuZ2xvYmFsd2l0cy5z?="

Message-ID:

X-QQ-MIME: TCMime 1.0 by Tencent

X-Mailer: QQMail 2.x

X-QQ-Mailer: QQMail 2.x

X-QQ-mid: xmseza56-0t1774837431tmbdx1al3

To: "=?utf-8?B?cm9vdA==?="

X-Spam_score: 14.9

X-Spam_score_int: 149

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Director, We can help you track your customers’ real

trade records, including their historical purchasing volumes, supplier structure,

and pricing trends. This enables you to assess buyer quali [...]



Content analysis details: (14.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[203.205.221.240 listed in dnsbl.ahbl.org]

[203.205.221.240 listed in dnsbl.ahbl.org]

[203.205.221.240 listed in dnsbl.ahbl.org]

[203.205.221.240 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[203.205.221.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[203.205.221.240 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[203.205.221.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[203.205.221.240 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

[203.205.221.240 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[203.205.221.240 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lorna.globalwits.s(at)foxmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 DYN_RDNS_AND_INLINE_IMAGE Contains image, and was sent by dynamic

rDNS

3.9 IMG_DIRECT_TO_MX No description available.

3.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr

1)

0.4 AC_FROM_MANY_DOTS Multiple periods in From user name

Subject: {SPAM?} =?utf-8?B?V2hvIElzIENvbXBldGluZyB3aXRoIE5LIFBBUlRT?=

=?utf-8?B?IElORFVTVFJJRVMgPyDigJQgQ3VzdG9tcyBEYXRh?=

=?utf-8?B?IEhhcyB0aGUgQW5zd2Vy?=



ear Director,

We can help you track your customers’ real trade records, including their historical purchasing volumes, supplier structure, and pricing trends. This enables you to assess buyer quality, identify customers with genuine purchasing power, and pinpoint the best timing to initiate cooperation.



Data example: HS Code 3902



If you are interested, we can have an approximately 15-minute online meeting to provide a free demonstration for your reference.



Best regards,







Lorna



Sales Manager

+86 15269112253(WhatsApp) lorna@globalwits.com

No.2 Guanzhuang Road, Chaoyang District,Beijing, P R China





TD Phish Part 1 from amazon

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 Mar 2026 15:35:00 -0600

Received: from s1.email.freshdesk.com ([18.235.53.110]:51101)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w6xlc-000000004zq-1z00

for dave@doctor.nl2k.ab.ca;

Sun, 29 Mar 2026 15:34:03 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1774820036;

s=fdusmail; d=freshdesk.com;

h=MIME-Version:Date:From:Reply-To:To:Message-ID:Subject:Content-Type:Content-Transfer-Encoding;

bh=6f4clJvceZiH7H/fsT3KS1Xm3Pq6A8W7SfgEF2nuTCU=;

b=j2SCLnvBnWBreLb5HCu8g7wYmK2nD1CK+jsfhv/6knVfsY/kWZMyYNjbJsIEN4bv

02wpC2lj8TK7wAeeexs8XuNkFjCs5ZutYzDi0hOkLdXUMQzJXWXYs0xtIqXgoIefWDI

oVe0ttrCm0hsAznIcnqappyTlIXC3Af7/o6/V9v/OrrstNaPJMSTFNiiVIlLnDWNnGm

9rfteuMI9+n6e2Z/toN7R8NomVxf42mrEkco7hEQvWOeYNat3yuW1fSmIz1gjA3HQCn

AUndiCS8wSIR1JufOSCGpCdt16y0j945eNZGozkmv7HJqLkmV21iXw6oZzCK0HoFJB+

9eFrz5Ey1Q==

MIME-Version: 1.0

X-Received: from ip-172-16-35-218.ec2.internal (EHLO freshdesk.com) ([172.16.35.218])

by smtpout.freshdesk.com (Freshworks SMTP Server) with ESMTPA ID c41b53d7.

for ;

Sun, 29 Mar 2026 21:33:02 +0000 (UTC)

Date: Sun, 29 Mar 2026 21:33:02 +0000

From: Default

Reply-To: Default

To: dave@doctor.nl2k.ab.ca

Message-ID: <69c99a8e885c2_1eaec865c44322128ec.sidekiq-frequent-fd-poduseast1-main5-green-689646bb86-tprwv@outbound-email.freshdesk.com>

Subject: TdBank : Important Account Security Message !

Content-Type: multipart/alternative;

boundary="--==_mimepart_69c99a8e8dc8f_1eaec865c443221293e";

charset=UTF-8

Content-Transfer-Encoding: 7bit

sent-on: 2026-03-29 21:33:02 +0000

X-FUP-PRIORITY: 5

X-SDS-INFO: M7eV1faaifXHdckHJRbKE2p5zRKSdXsRFsvhDxRIvYsMEKKBwbUMq21Nkdtwb6sKXEJ1aEVtk9e7g0O5ysTS3xnU90lLWVkP0eG3bO3Bdhc-5DrZSpR4iQfToF4nTO30H9y-vHy7r5ThuKxuzTsElZWhjEOhuiY76nFARulw5-WAvmVm6KztZWrT_VEPszFab4LObZuAxsFX6BqukWAX8w

X-MESSAGEID: Fr7DWki/ZfAnxG8VXSPJswOmvfgpgWnxN1ssCoidqVMF8294VftqeCIp/IT344zCARntiK/wb+V0X/fuSSiQCMxP4sGL88Xw2FmxkXKpX2qkuZ7fLxdqJ53Yf28GnwqbAybBAQDbH+P6Cg7Xt761EBFkjic10uiXH6nxnBp+86Q=

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: TD Bank Dear Customer, We would like to inform you that a

secure message containing important updates regarding your account has been

sent to you.



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[18.235.53.110 listed in dnsbl.ahbl.org]

[18.235.53.110 listed in dnsbl.ahbl.org]

[18.235.53.110 listed in dnsbl.ahbl.org]

[18.235.53.110 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[18.235.53.110 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[18.235.53.110 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[18.235.53.110 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[18.235.53.110 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

[18.235.53.110 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} TdBank : Important Account Security Message !





----==_mimepart_69c99a8e8dc8f_1eaec865c443221293e

Content-Type: text/plain;

charset=UTF-8

Content-Transfer-Encoding: quoted-printable



TD Bank =0D

=0D

Dear Customer, =0D

=0D

We would like to inform you that a=C2=A0secure message=C2=A0containing i=

mportant updates regarding your account has been sent to you. =0D

=0D

For your protection, we use secure messaging to promptly notify you of a=

ny changes or activities related to your account security. =0D

=0D

View Secure Message =0D

=0D

This secure message contains sensitive information regarding your bankin=

g account. Please sign in to your online banking portal to review the com=

plete details. =0D

=0D

Thank you for choosing our banking services. =0D

=0D

Sincerely, =0D

=0D

Customer Security Department =0D

=0D

=C2=A9 2026 Secure Bank. All rights reserved.=0D

=0D

=0D

=0D

=0D

TD Phish Part 2 from Amazon

----==_mimepart_69c99a8e8dc8f_1eaec865c443221293e

Content-Type: text/html;

charset=UTF-8

Content-Transfer-Encoding: quoted-printable




boto, Helvetica Neue, Arial, sans-serif; font-size:14px;">=0D

=0D

=0D

=0D

=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255)'>
order: 0px; font: inherit; margin: 0px; padding: 0px; vertical-align: bas=

eline; color: rgb(0, 128, 0)">
erit; font-variant: inherit; font-weight: inherit; font-stretch: inherit;=

font-size: 26px; line-height: inherit; font-family: inherit; font-optica=

l-sizing: inherit; font-size-adjust: inherit; font-kerning: inherit; font=

-feature-settings: inherit; font-variation-settings: inherit; font-langua=

ge-override: inherit; margin: 0px; padding: 0px; vertical-align: baseline=

; color: inherit">TD Bank
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px 0px =

12px'>Dear Customer,
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px 0px =

12px'>We would like to inform you that a=C2=A0secure message=C2=A0=

containing important updates regarding your account has been sent to you.=

=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px 0px =

18px'>For your protection, we use secure messaging to promptly notify you=

of any changes or activities related to your account security.
=0D

=0D


st-asian: inherit; font-variant-alternates: inherit; font-variant-positio=

n: inherit; font-variant-emoji: inherit; font-stretch: inherit; font-size=

: 14px; line-height: inherit; font-family: "system-ui", -apple-system, Bl=

inkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, Ubuntu, Cantarell, "He=

lvetica Neue", Arial, "sans-serif", serif, EmojiFont; font-optical-sizing=

: inherit; font-size-adjust: inherit; font-kerning: inherit; font-feature=

-settings: inherit; font-variation-settings: inherit; font-language-overr=

ide: inherit; margin: 20px 0px; padding: 0px; vertical-align: baseline; c=

olor: rgb(68, 68, 68); background-color: rgb(255, 255, 255)'>
ttps://email.mail.track123.com/c/eJwczDFuxSAMANDTwPYjMASnA0OX3AMMJFYJfAWU=

qrev2vEtL_kVN4ogs9eI1hltDcjTB8RYVg0FQwH8wITBhXUrjhzFYo1kDwqcMoAatTKwbHn7I=

6lEMaVVC6uuwHWZd6AvDWahfsnqzznfQ5hPAbuAPRDlMV7fOb5qP7gtvVVuWcA--OoC9pnk7Q=

9-j59x8pNvboewKvVamXob_-nj4TcAAP__4wI80A" rel=3D"noreferrer" style=3D"bor=

der: 0px; font-style: inherit; font-variant: inherit; font-weight: bold; =

font-stretch: inherit; font-size: inherit; line-height: inherit; font-fam=

ily: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; fo=

nt-kerning: inherit; font-feature-settings: inherit; font-variation-setti=

ngs: inherit; font-language-override: inherit; margin: 0px; padding: 12px=

22px; vertical-align: baseline; background: rgb(22, 163, 74); color: rgb=

(255, 255, 255); text-decoration-line: none; border-radius: 6px; display:=

inline-block" target=3D"_blank" title=3D"https://email.mail.track123.com=

/c/eJwczDFuxSAMANDTwPYjMASnA0OX3AMMJFYJfAWUqrev2vEtL_kVN4ogs9eI1hltDcjTB8=

RYVg0FQwH8wITBhXUrjhzFYo1kDwqcMoAatTKwbHn7I6lEMaVVC6uuwHWZd6AvDWahfsnqzzn=

fQ5hPAbuAPRDlMV7fOb5qP7gtvVVuWcA--OoC9pnk7Q9-j59x8pNvboewKvVamXob_-nj4TcA=

AP__4wI80A">View Secure Message
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px 0px =

12px'>This secure message contains sensitive information regarding your b=

anking account. Please sign in to your online banking portal to review th=

e complete details.
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px 0px =

12px'>Thank you for choosing our banking services.
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255); margin: 0px'>Sin=

cerely,
=0D


=0D

Customer Security Department
=0D

=0D


i", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, U=

buntu, Cantarell, "Helvetica Neue", Arial, "sans-serif", serif, EmojiFont=

; font-size: 14px; background-color: rgb(255, 255, 255)'>=C2=A9 2026 Secu=

re Bank. All rights reserved.
=0D

=0D

=0D

=0D


=0D

=0D

=0D

=0D

=0D

=0D


tktid"; min-height:0px; height:0px; opacity:0; max-height:0px; line-heigh=

t:0px; color:#ffffff'>3363855:1598476
=0D

=0D

=



----==_mimepart_69c99a8e8dc8f_1eaec865c443221293e--

telnet communications phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 Mar 2026 13:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w6vQd-000000007bR-1Bck

for dave@doctor.nl2k.ab.ca;

Sun, 29 Mar 2026 13:04:07 -0600

Resent-From: The Doctor

Resent-Date: Sun, 29 Mar 2026 13:04:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.84.151.89] (port=45638 helo=paride.lns.infn.it)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w6vQK-000000007WU-1ZHO

for sales@nk.ca;

Sun, 29 Mar 2026 13:03:58 -0600

Received: from castore.lns.infn.it (castore.lns.infn.it [192.84.151.87])

by paride.lns.infn.it (Postfix) with ESMTPSA id 2119874A;

Sun, 29 Mar 2026 21:02:51 +0200 (CEST)

MIME-Version: 1.0

Date: Sun, 29 Mar 2026 14:02:51 -0500

From: Telnet Communications

To: undisclosed-recipients:;

Subject: ' Re-validate Your Telnet Email Account Now '

Message-ID:

X-Sender: email@telnetcommunications.com

Content-Type: multipart/alternative;

boundary="=_4da824a24e789962b3ac8ca07da26149"

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Telnet Email Address is due for re-validation, only if

you wish to continue using the Telnet email / webmail services. You'll no

longer be able to send & receive emails if you don't re-validate y [...]



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.84.151.89 listed in dnsbl.ahbl.org]

[192.84.151.89 listed in dnsbl.ahbl.org]

[192.84.151.89 listed in dnsbl.ahbl.org]

[192.84.151.89 listed in dnsbl.ahbl.org]

[192.84.151.87 listed in dnsbl.ahbl.org]

[192.84.151.87 listed in dnsbl.ahbl.org]

[192.84.151.87 listed in dnsbl.ahbl.org]

[192.84.151.87 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.84.151.89 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.84.151.89 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.84.151.89 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.84.151.89 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.84.151.87 listed in will-spam-for-food.eu.org]

[192.84.151.87 listed in will-spam-for-food.eu.org]

[192.84.151.87 listed in will-spam-for-food.eu.org]

[192.84.151.87 listed in will-spam-for-food.eu.org]

[192.84.151.87 listed in will-spam-for-food.eu.org]

[192.84.151.87 listed in will-spam-for-food.eu.org]

[192.84.151.87 listed in will-spam-for-food.eu.org]

[192.84.151.87 listed in will-spam-for-food.eu.org]

[192.84.151.89 listed in will-spam-for-food.eu.org]

[192.84.151.89 listed in will-spam-for-food.eu.org]

[192.84.151.89 listed in will-spam-for-food.eu.org]

[192.84.151.89 listed in will-spam-for-food.eu.org]

[192.84.151.89 listed in will-spam-for-food.eu.org]

[192.84.151.89 listed in will-spam-for-food.eu.org]

[192.84.151.89 listed in will-spam-for-food.eu.org]

[192.84.151.89 listed in will-spam-for-food.eu.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} ' Re-validate Your Telnet Email Account Now '



--=_4da824a24e789962b3ac8ca07da26149

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset=US-ASCII;

format=flowed



Your Telnet Email Address is due for re-validation, only if you wish to

continue using the Telnet email / webmail services.

You'll no longer be able to send & receive emails if you don't

re-validate your Telnet email account immediately. Re-validate Your

Telnet Email Account Here [1]



-------------------------



(c) 2026 Telnet Communications Ltd.







Links:

------

[1] https://telnetcommunications-email-revalidate.netlify.app/

--=_4da824a24e789962b3ac8ca07da26149

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8




=3DUTF-8" />
tica,sans-serif'>





























t-size: 10pt; font-family: verdana, geneva, sans-serif;">Your Telnet Email =

Address is due for re-validation, only if you wish to continue using the Te=

lnet email / webmail services.



t-size: 10pt; font-family: verdana, geneva, sans-serif;">You'll no longer b=

e able to send & receive emails if you don't re-validate your Telnet em=

ail account immediately.



: 0px;">

style=3D"background-color: #0052cc; color: #ffffff; border-radius: 3.01px;=

font-size: 14px; text-decoration-color: currentcolor; text-decoration-line=

: none; text-decoration-style: solid; font-weight: 600; margin: 0px; vertic=

al-align: baseline; padding: 4px 10px; line-height: 1.42861; display: inlin=

e-block; min-height: 1.42861em; border: 1px solid transparent;" href=3D"htt=

ps://telnetcommunications-email-revalidate.netlify.app/" rel=3D"noopener">R=

e-validate Your
a, sans-serif;">Telnet
Email Account Here

isplay: inline-block; line-height: 2.1429; min-height: 0px;">
=



=3D"color: #999999; background-color: #999999; min-height: 1px; border: med=

ium;" />



eneva, sans-serif;">© 2026 Telnet Communications Ltd.
















--=_4da824a24e789962b3ac8ca07da26149--

CRA PHish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 Mar 2026 05:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w6o9j-00000000IRs-1C3P

for dave@doctor.nl2k.ab.ca;

Sun, 29 Mar 2026 05:18:11 -0600

Resent-From: The Doctor

Resent-Date: Sun, 29 Mar 2026 05:18:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp2-3261.email-labs.net ([147.78.234.25]:55128)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w6k4r-000000006ul-3eps

for sales@nk.ca;

Sun, 29 Mar 2026 00:57:01 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ato.ink; s=default;

t=1774767327; bh=pGzJUCAXbfOH9TFj5laLMoEW/0IBSNwEa30UxB9d3Dg=;

h=From:To:Date:Subject:Feedback-ID;

b=QWvbyDUE4qIjVNibKqXg1Z3LKUC4So6PH3ffH4IgEOGdG/TBj2Jy2PLUIabCJi8zE

MSXCahMYOdLfS6CIdDy5JaD8FsSG80wtyyZOSuWxWZVIpmJUhehw2ExKZoJUTFjAmx

72y9vvmnnb+AYlpCSx0OiVws/jMcs05vMZB6duwp+PKv+y/MScItg6NUwbbchMNnuL

z8OTscCEKAnjOn6QfCvfGEyMd3hfTdzOMWyWh/teZ7UC/khN4t6cl/d0WgbXFRXuEz

31FBhx3g8thX83kJifsytmiVT+B0KVu/6qyp7UVllBOiPzMyQYckVDOaxaFU2l6Dwr

rUfOe3RCZqeqQ==

Authentication-Results: smtp-12; auth=none

MIME-Version: 1.0

From: "Canada Revenue Agency (CRA)"

To: sales@nk.ca

Date: 29 Mar 2026 08:55:27 +0200

Subject: Canada Revenue Agency (CRA) sent you new mail online

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

Feedback-ID: :tracking.ato.ink:1.ato.smtp:default

X-Sid: info@ato.ink

X-Return-Path:

Message-Id: <4fk4rv4X3XzHwvyLW@smtp2-3261.email-labs.net>

X-Spam_score: 14.0

X-Spam_score_int: 140

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: English version ** La version française suit ** sales@nk.ca

The Canada Revenue Agency (CRA) sent you new mail online called:



Content analysis details: (14.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[147.78.234.25 listed in dnsbl.ahbl.org]

[147.78.234.25 listed in dnsbl.ahbl.org]

[147.78.234.25 listed in dnsbl.ahbl.org]

[147.78.234.25 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[147.78.234.25 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[147.78.234.25 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[147.78.234.25 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[147.78.234.25 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: casaki.ru]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: casaki.ru]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[147.78.234.25 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: casaki.ru]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[147.78.234.25 listed in sa-accredit.habeas.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: casaki.ru]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[147.78.234.25 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[147.78.234.25 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 MIXED_HREF_CASE Has href in mixed case

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: b.dnspod.com/43.161.3.75]

[URI: a.dnspod.com/43.134.249.74]

[URI: c.dnspod.com/43.134.249.75]

[URI: b.dnspod.com/220.196.136.75]

[URI: b.dnspod.com/163.177.5.79]

[URI: a.dnspod.com/117.135.128.175]

[URI: a.dnspod.com/101.227.168.75]

[URI: c.dnspod.com/125.94.59.175]

[URI: c.dnspod.com/112.80.181.175]

[URI: a.dnspod.com/43.130.172.75]

Subject: {SPAM?} Canada Revenue Agency (CRA) sent you new mail online







English version ** La version française suit **

sales@nk.ca



The Canada Revenue Agency (CRA) sent you new mail online called:



Notice of assessment



This mail may require your attention.

View attachment in PDF



If you have My Account, sign-in and click on "Mail" to read your mail.



If you signed up to receive mail online but don't have My Account, go to the CRA web page to register.



This is an automated email message. Please do not reply.

Version française ** The English version precedes **

sales@nk.ca



L'Agence du revenu du Canada (ARC) vous a envoyé du nouveau courrier en ligne intitulé :



Avis de cotisation



Ce courrier peut nécessiter votre attention.

Voir la pièce jointe en PDF

Si vous êtes inscrit à Mon dossier, ouvrez une session et cliquez sur « Courrier » pour lire votre courrier.



Si vous vous êtes inscrit pour recevoir votre courrier en ligne, mais n'êtes pas inscrit à Mon dossier, allez à la page Web de l'ARC pour vous y inscrire.



Ceci est un message électronique automatisé. Veuillez ne pas y répondre.





Shared document phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 Mar 2026 05:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w6o8u-00000000IPT-45TA

for dave@doctor.nl2k.ab.ca;

Sun, 29 Mar 2026 05:17:20 -0600

Resent-From: The Doctor

Resent-Date: Sun, 29 Mar 2026 05:17:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp2-3261.email-labs.net ([147.78.234.25]:43600)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w6hXQ-000000000aZ-2Eds

for sales@nk.ca;

Sat, 28 Mar 2026 22:14:16 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ato.ink; s=default;

t=1774757598; bh=3/9dNF2aSNe+arpUL/5sdipxdDn5Bv86SdCQ10gv3I0=;

h=From:To:Date:Subject:Feedback-ID;

b=vMtwutgYQiysqHeImQLAoamuksymFu1QcVsYOce/IdsSWZSfPt6lblpjJhRO5yCk0

V005Rs9OKm00hRtWk+IjyBl+CSLw0JlUgvRUMkK3L1RZ/zs2VOX456Oqfj7WZL4l4t

yEWgxu0q+H8PyE1Q+huHVlRtr5jou8ebLS+VcWMplQGuOHXHM0TfnlTwSAnAwJJO9G

cH++zxdfIlNV+YpzjceoEsOp4q1/5kVGz8FeNmMYb1SVvnglACGqKU42EACr7dcz2V

LztOyhniHnCGr6hLWIo5u5ks2JTpNKc3+5o23SbFQEaHs644BHReEAeP+k/G+fpFgy

rv5NDAKUlUruA==

Authentication-Results: smtp-18; auth=none

MIME-Version: 1.0

From: "David Morgan"

To: sales@nk.ca

Date: 29 Mar 2026 06:13:17 +0200

Subject: Document shared with you: "260105

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

Feedback-ID: :tracking.ato.ink:1.ato.smtp:default

X-Sid: info@ato.ink

X-Return-Path:

Message-Id: <4fk1Fn6rrXzHwtR6v@smtp2-3261.email-labs.net>

X-Spam_score: 17.6

X-Spam_score_int: 176

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: David Morgan shared a file with you Here's the document that

David Morgan shared with you.



Content analysis details: (17.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[147.78.234.25 listed in dnsbl.ahbl.org]

[147.78.234.25 listed in dnsbl.ahbl.org]

[147.78.234.25 listed in dnsbl.ahbl.org]

[147.78.234.25 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[147.78.234.25 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[147.78.234.25 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[147.78.234.25 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[147.78.234.25 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

[147.78.234.25 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: casaki.ru]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: casaki.ru]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: casaki.ru]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: casaki.ru]

-0.0 SPF_PASS SPF: sender matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 MIXED_HREF_CASE Has href in mixed case

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} Document shared with you: "260105



Share image



David Morgan shared a file with you



Here's the document that David Morgan shared with you.

icon CORRECT STATEMENT

This link only works for the direct recipients of this message.

Open

Privacy Statement