WEb/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 07:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuVD5-00000000PHi-4AVa

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 07:11:03 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 07:11:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012056.outbound.protection.outlook.com ([52.103.66.56]:4666 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuTqG-00000000GOy-41TE

for sales@nk.ca;

Thu, 13 Aug 2026 05:43:36 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=s1kSlRxuDmLYDdT2KHKfzfVuIos5slwiA28SuyDObQn7do5qZz5k3fwjwIFk6bCCTAb/mBdz2XQA6SNc+w7ysNsSAUtVlkA9uCpW+LFGEtlC34sEk3W7c3hjQpOhsn6lq+SARojJl7olDgQW1ETWdC6eShD8Zh9y3LtmpKW7yHZIsPErZf/bg4WsTePJGeXwv1VoJEw8Xu6fPDzw5KGKxoymO1I2iv5TeeXk9kj9CVJvB4lCli8kmIUlvY5wU62TJhltjGnW44JO/JJFersc/sG6wLfjBoGEyinJLEGwAayKIQ9/SKvMQp4Qx4Umgj+y9JLnTOi5rrqfVF4BoU5BOA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kdaL7LeNZww+C0w8fLxle1rC+HFJppXdyKKdhiAi0F8=;

b=d2AkCyschlrW1p2ymvMV5v5icPD0doab9w0nKFPzcADYJ3Yn5hTrA0IFgX/aYHKT57lMf/b+GYlutBjAzbZMF6XYBj9h6vId7JR0g/X94KmA2gqyZDsrgtBmlF+nxUEYnqJcrcAPWhcn+MV+H6iZAYifMNCxnQChT6rcVub7qEDEp7j5zTe/CDAtKiLi5s6/d55haOZUTGbHcpFk81rJlVmShysmLt841eQqXa+w9KN8v1Zcar/HIKnv/IrJa+T3jWKvrleVwM7dcgjw5x2PND9z1o5vJUERpRwxGiV6ldsn+XPKyQIxmBRTZtejeO4Hn5yS2D2Qg+PwKkalwYKNrA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=kdaL7LeNZww+C0w8fLxle1rC+HFJppXdyKKdhiAi0F8=;

b=OofLFxqxmab9vF4AfEoUiORw3sKbsJh3tF4slzqB983E5rRAs3Y1VUI9jzw/0xiI1+aGxw6FsN/iRhN7Fa5wgv6zY+AxFyo7JQYBHou7O/lGgw+yaQNMw3Rh8opw5LaNgc2ZuVZceqbBeGXtrHHsr+uurlkR2gMtAaZ770oqJSn1joz3qEol8ZxgnussTRUYQf2/gCZHmpj/lwNd9nkKELuzTRSkrN9Ec3WX906VJ0VKTFY8zr0VARYxGf+0n6u43OgwC5wnOXMEJmrgOCSuOUQrTUFGAZASRc+od4gaGlHMoMVbbQwoEp58enlG1cby2P31imfi5J40/uINHPdimQ==

Received: from SEL0PF653278538.apcprd01.prod.exchangelabs.com

(2603:1096:108:1::5a5) by TYZPR01MB4401.apcprd01.prod.exchangelabs.com

(2603:1096:400:1d3::8) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.12; Thu, 13 Aug

2026 11:42:04 +0000

Received: from SEL0PF653278538.apcprd01.prod.exchangelabs.com

([fe80::8621:a509:c18d:ff54]) by

SEL0PF653278538.apcprd01.prod.exchangelabs.com

([fe80::8621:a509:c18d:ff54%5]) with mapi id 15.21.0315.014; Thu, 13 Aug 2026

11:42:03 +0000

From: Tanisha Sharma

To: Tanisha Sharma

Subject: Re: Re:

Thread-Topic: Re:

Thread-Index:

AQHdJ2eGDwO7mQxqKk+4MTwfdo/I+baUgKNXgAK02q2AABDWEIAAAWFIgAGJuTyAAAKRoYABb4bPgAAAaoSAAABqQYAAAKBPgAGcWAeAAACi8oAAALut

Date: Thu, 13 Aug 2026 11:42:03 +0000

Message-ID:



References:

























In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEL0PF653278538:EE_|TYZPR01MB4401:EE_

x-ms-office365-filtering-correlation-id: 8b4bb4f9-43ac-4e4d-0fca-08def92fe4fa

x-microsoft-antispam:

BCL:0;ARA:14566002|36102599003|19110799012|25010399006|15080799012|4140399003|24121999003|15030799006|22091999003|8062599012|2604032031799003|16051099003|55001999006|8060799015|2604031031799003|31061999003|39105399006|704163111799003|3412199025|440099028|102099032|40105399003|51015399003|260806224601699006|2607281247196008|11120399003|18071099003|26121999007|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?/oLMrEzSN+JfKU+01YeOIVjEzcPF0BUwW13Lqx2EUmqFWCdSOsU1Pf0vtf?=

=?iso-8859-1?Q?PARAC8bYdl5kaCsJdC3l2R9DMVvn9OOLiesPpjLHf868zur741lY3mGiur?=

=?iso-8859-1?Q?lOU05WwDocxXyElf+UU4h6NbPZAumhVtsqZ2KxPONhDRstspMh8mEQqBXW?=

=?iso-8859-1?Q?NQkO0b2nqhW6+0FaOLrmk1sRy9RUa76W0M6BJx0nrDBGwBKNNWNAY/NK0k?=

=?iso-8859-1?Q?UG5S2JaAdJCZ9lDWoK37gB5nEl+gI5CbT9aDThKsSoRlUJ1vRqIjKMCxYv?=

=?iso-8859-1?Q?NjSdfwMMY2MKSbxuJgnz4KzttL3Lqc7K2Q8GdXPiZKAjJwOMv4oId/tMh3?=

=?iso-8859-1?Q?mN5JRmoOu+OAsXupOurrNTNecYgXKL/ryVIHIORZWT7Xb+7FAjQoqRg+Ra?=

=?iso-8859-1?Q?me7LAj5gedhIFE+P5XDMfQX4oVf/Tc7F4PJiTSVhMoWmoS/yXJYsBerZ6b?=

=?iso-8859-1?Q?LPJndxQvw88yR13E/q7ySMfcUFZjzUn1N7Sa/wSev6kWxtVCeVvONbFrdi?=

=?iso-8859-1?Q?/ZaBqGFqgMXvN/jC0uYm5VZ70Mw/NoeeJt/i5E/NLfTcRNToPCbI/2EESY?=

=?iso-8859-1?Q?oxsyWNSg6YHDWur/jZ+U/2ohCdQKAoOXKNnqhKTTTaXAVQMK0ErUconRto?=

=?iso-8859-1?Q?/2JgLiwcFuOmVFTjT/ZaxN6PbjnvJt7esYc8xff3ilNeQZKP9OSwvZlKGB?=

=?iso-8859-1?Q?Fhox7bBZVg4hfWTewvM1ajoZl5Ro7rXp1q0OlXj1Ys5SoDJFt4UAI6syON?=

=?iso-8859-1?Q?JiCBxkr9M1y+SnJCI7+2TiizLXPY1cRXaGxBuxdrwmFuOqhv3/ZIWJREuO?=

=?iso-8859-1?Q?tO0Lpuh0vzghyF2e7ileAfb/m3O3ER64y29RGColWY+8qT3RR34BgW/PjW?=

=?iso-8859-1?Q?Uag+Q5Q9g8xZWOJzrLAg7xHSq9QjrjVCc4JJBc9WwMD/SevtF9zUiJocuo?=

=?iso-8859-1?Q?e1TfdjDOL/vroaEEQWXEWFGfn7CgBq4cD7Pm3vIOeR8oxjYiBWWnjawz6H?=

=?iso-8859-1?Q?cra1fKY/yhcT1qpsq/c1nTMpsgN3Gm3GvGXwoFRQxfDROlmbxmVQUGcuMr?=

=?iso-8859-1?Q?FjbHJDmeF67xPWGOdAIhNkDrlSkG7Q0TXY4JZdCHU3Pz+lvkk8qO35ZSnc?=

=?iso-8859-1?Q?r1monE9kd3oZCs06mRRVu8EGzbm6bDZ5Ix5rKUWCeRPOlqjCQGI+g8URQX?=

=?iso-8859-1?Q?dnDLWeDxpLzeFmnvHwiwRv0ww16YSzxuR9rbRsUO4nagUYvgizVAwTQ/p6?=

=?iso-8859-1?Q?hC2hWs43jLgE61FFZRaMWNm4SItOtzV6fKL4L9tsBOieZvGVCLMamGuysg?=

=?iso-8859-1?Q?SKv27DOIfh7WuN5n3OKk1txL1eLNfLijeZsh2MdRlz041a7oy3hkEqiB5b?=

=?iso-8859-1?Q?/gH4ndyPF0OY7WSNvoFmm98uhpLO+cscYzlj3EO0ABe8HHHGl3sANFCj1e?=

=?iso-8859-1?Q?X+K9JnerAgr+xevo3IYbeBIBz3mdzeASEHH46g=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?gDQ8I4/zKKxE/TmtZj7bf8trUAyOyqGZ0qgsSDSw1KIX197l59epgtPmiJ?=

=?iso-8859-1?Q?F6JkzzmUCoVYmqKkJMsGN4zV9YgVGoOkKDwiATb0AT8GeKrRMuJGJbf3es?=

=?iso-8859-1?Q?q3iE65Lw02z+XuPeUpyhd4jjPaMgai2ip7ib4uiH2/fOPSXeZX94lhWNPy?=

=?iso-8859-1?Q?Z3yBqGErAOXGC/PEw5EJaJM00/0gMCV0g/5W3ca5a0FAdX+ub0FYLwohQG?=

=?iso-8859-1?Q?Wtq05RTMyivLv4qAQEjyed555yE/pLV2VMtZVLpgIOXkRo3ZYaLswZQM1d?=

=?iso-8859-1?Q?VqkKRP5SFZ0vBr2HQ3ZWFDvxnJvZ91slYK4DRcoo5K1im3jnrzfevr7/wb?=

=?iso-8859-1?Q?K23pDfY8iTicvc2gHdht8qjRF925bK271Yc9jFC5Ig2OMTEZB/TObISAhc?=

=?iso-8859-1?Q?MhGHGn5Q3my2jTSIuDt/iBcWpU389mO4K6eH7d2lYuLR10G//Em3qbau3n?=

=?iso-8859-1?Q?SpvqteBVqLwc+nZw8bWivJVWCx2y3MJhSbIo0enPS4r/veYIUkrqK00xq9?=

=?iso-8859-1?Q?MUcqQgbrATEiiFp4Sj0s2RTG34Vq7yOEd9qlExsUywcvkR93OF7gH9sR0W?=

=?iso-8859-1?Q?h3cACbw9PP/arn3a1NekaKZ33JR41fafXs8bPGWSj11Yyt2iEgJtuLUe2I?=

=?iso-8859-1?Q?wU7x/uF8uaoEIStZWEvQZ5UopX2lIZjxEKNTlfOwXVlanpyh5FOWBwA1I6?=

=?iso-8859-1?Q?u5X+yJmPcNdOQLTrPXmfYWlAGLsV25QPqL/WIb61VQGos0SCWW1j6bxJnG?=

=?iso-8859-1?Q?q3Ljtqu9weWvzxtqpgnz+Va7AvUOgtJ0+zGmcPVDB+4YeRERX4erWYeEia?=

=?iso-8859-1?Q?zXzef262SVkMcjhlOF8+kTfTKvhNuEaHycd243QjpdLjnZ6cs2/edI7yZw?=

=?iso-8859-1?Q?cYHngjmN8l9nle1x2HZ6GWDE19aENBFfgtKx+/AbDjs6wbt2g41tGUWdZD?=

=?iso-8859-1?Q?yemtx3mV/ax/NOTOzOpqDHfZ1GNhU+fP0/nvxnxGTfq3+7gG8R2WRbzy0N?=

=?iso-8859-1?Q?JZPqG37Y94yIK3xZs+NdSmrGinXCCgbb2o1EpZNtL1i+QgY4K60nlAn/g6?=

=?iso-8859-1?Q?IYt4wl3OaHiA/k54/35EucS5OTpi502KNc2XfcqWFoqUYLtqPR5Qi2vG63?=

=?iso-8859-1?Q?odIUBrk5NWnT68Pt6MxzJB26quAElsbFdCX7+49djIIvhsafWPTElcMTP1?=

=?iso-8859-1?Q?cZmHN+0+OHF3RcG4og1WGOTPtWg6+gN2NAGb547KB+TV8GddsC8ErXFjo4?=

=?iso-8859-1?Q?wo/LD78gw+fADAqjlH01ub68SRv70Vms+EAmxtoWLMFfUPFOgSn9F4Lgjj?=

=?iso-8859-1?Q?9xNdilK9qCMDk54UWvlXilZfX1q60wT2XpsFAfNsQRTCm9yJwvKWwhH+jV?=

=?iso-8859-1?Q?r7H1I4r5LtEdg1Qa33ZzenOo32Fdp439wqGLMQJR2hdAuNt5KBKUQWEH9v?=

=?iso-8859-1?Q?G4FJbYqwsB8MNgtmzuX7Z07jhz3Bi4jz7Jg+HXzb7TERxVIQn+OuR6d8fy?=

=?iso-8859-1?Q?3KieQbGs0aw3bvGOxLuobf?=

Content-Type: multipart/alternative;

boundary="_000_SEL0PF653278538EB6AB8A66C98EC497FBFEBDB2SEL0PF653278538_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEL0PF653278538.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 8b4bb4f9-43ac-4e4d-0fca-08def92fe4fa

X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Aug 2026 11:42:03.3394

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR01MB4401



--_000_SEL0PF653278538EB6AB8A66C98EC497FBFEBDB2SEL0PF653278538_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



Just a gentle follow-up.



Can I send the website overview and quotation.



Thanks, regards.



________________________________

From: Tanisha Sharma

Sent: Wednesday, August 12, 2026 4:31 PM

Subject: Re: Re:



Hi,



I checked your website and found a few areas that may be stopping it from r=

anking higher on Google.



We can help improve your SEO, rankings, organic traffic and more customers.



Would you like me to send you SEO Price list and Quote for review?



Thankyou



--_000_SEL0PF653278538EB6AB8A66C98EC497FBFEBDB2SEL0PF653278538_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Just a gentle follow-up.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Can I send the website overview and quotation.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks, regards.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">











11pt; color: rgb(0, 0, 0);">

From: Tanisha Sharma <tanisha.niv@outlook.com>


Sent: Wednesday, August 12, 2026 4:31 PM


Subject: Re: Re:


 





_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I checked your website and found a few areas that may be stopping it from r=

anking higher on Google.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

We can help improve your SEO, rankings, organic traffic and more customers.=




_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Would you like me to send you SEO Price list and Quote for review?



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thankyou








--_000_SEL0PF653278538EB6AB8A66C98EC497FBFEBDB2SEL0PF653278538_--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 04:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuSw2-00000000D2E-0SHr

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 04:45:18 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 04:45:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012048.outbound.protection.outlook.com ([52.103.43.48]:47291 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuRuM-00000000Gyz-3mML

for sales@nk.ca;

Thu, 13 Aug 2026 03:39:41 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=WFgWLfqFAK/k6TAnKMZ2BsE7yfL2nJnz2nRHoJPKb39O7QF3GrAxo7gxWqnqebIJrq6A+cVhe7LSvhGWzKqm5izghzTAuN6I1aBYAaXVC976XVHHdtn31XnFK1Obe35WZMb3J0A8FsYCnLMAj7uBJDbIruRJ1PkYzTEwU4/Hvsi830vFexCTvDpAcvn029WzmS+6pT329jkEk2oPDvnS/0XHzQAGm88cMh/2/44NSBHzlFZ/mc4koSCAseaQdTMChRihRuLhRDUTEK72wHDGv/gG5oIsRCYOaiz97pyaAGrQHkU2uiDYPjCscVWIgjlVwFmLLDfoj1kECxmmurM9Iw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=xQpBpwXnO63398Eyj4nsKfitPDhfwm05oV4XVIvXPNQ=;

b=eSKXt0xha+aWT/GAF8ApszhfmvBUAycJiMbBhjteFyxjVHI5sg25djAaWJj8nU7/HhPlZ3VC+cP17Jx3CT9BCMpfCgyW61ugI4qoVlAEYsCiPW9/c5s3cE0x/02HWjxArEJpJS683r5ys48FOzXPxMkiPUGPhFnsp1ta/zywzqD7E+91F4+hc+D1nQwWYC6EzchGpfiqznnsM+H7xpzcL2i6spBERIL5Agwe3ehHXdoq6fGTZ+Qij7zSNSOTSygqNcWJeQBfbvzWDRkdSrP53zRty8JGwcYndDJnv10vXGTiA2/9GwTpDrurbviIEO1wHi+BK5BhbnkZm3S/dzf8DQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=xQpBpwXnO63398Eyj4nsKfitPDhfwm05oV4XVIvXPNQ=;

b=frsJWZmikYTXN0IGDGuiczmAwjTsTTbFn4KYjsXNmkhzRRchu9ITY8jVZRWEEoNZ+AYnBuzioRpXQ7B1KMZoByeGHNAbYhtU75HN1Ah4XPCAZ9pdA7bF6X3m5nsSykv+fgs7UlLXQVaZleUUoV14jOyZqme3ZVrQmZnd0xHn5Om04YobUMjuOBN3zQf2DtFrd8URMvXGb4X1hG8+IPr+R0dV/X41X9tMMBUCaYkHX4rIxjCWUIHoT9koBfEkNfcvT9nx6eQxHqMrjKh/F7DjsLO7Mo5kXE9LxRebEQSU74LoRpVwXa+BpRkDdb/Jo8TnGCbI3hhxn5xWDP7nsiDRnQ==

Received: from KL1PR0601MB4697.apcprd06.prod.outlook.com

(2603:1096:820:85::12) by SI2PR06MB5137.apcprd06.prod.outlook.com

(2603:1096:4:1ac::5) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.14; Thu, 13 Aug

2026 09:37:34 +0000

Received: from KL1PR0601MB4697.apcprd06.prod.outlook.com

([fe80::f0fe:9f43:b3e0:4a1d]) by KL1PR0601MB4697.apcprd06.prod.outlook.com

([fe80::f0fe:9f43:b3e0:4a1d%3]) with mapi id 15.21.0315.014; Thu, 13 Aug 2026

09:37:34 +0000

From: Nandu Jaiswal

Subject: 1st Page Of Google

Thread-Topic: 1st Page Of Google

Thread-Index: AQHdKwde64EoA6z2kUWrhIX0h2YCNg==

Date: Thu, 13 Aug 2026 09:37:34 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KL1PR0601MB4697:EE_|SI2PR06MB5137:EE_

x-ms-office365-filtering-correlation-id: 28506e7f-5aad-41dd-3623-08def91e813f

x-microsoft-antispam:

BCL:0;ARA:14566002|55001999006|24021099003|37011999003|22091999003|24121999003|4140399003|25010399006|31061999003|8062599012|19110799012|15080799012|15030799006|39105399006|24071999003|8060799015|20031999006|56899033|12091999003|3412199025|440099028|102099032|40105399003|43065399003|31055399003|260806224601699006|2607281247196008;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?7nY3u06qVXK4ZvSd8uMHc1BDUaDxeporo68xZkJr/fTdmresp41eKr3M9H?=

=?iso-8859-1?Q?fhStVnyKZXuycWWgFxoK2xDEAem5JJt4fd/N7gPVW//E1fl574A/Z/ZXMJ?=

=?iso-8859-1?Q?i8S3MRhXqR1N9xfU4OkgGZVLSrxnEwQ1fFABNtk5z76O3KQPMwJua1zcZ5?=

=?iso-8859-1?Q?3Pg4uJy/ibTGe7e1ffCuvJJwynCLXICPHXloIVjaTvXfR+b5LOGUGKB0aE?=

=?iso-8859-1?Q?qYyPEHsjYf5KlqMpTlnwG8b2YHNQYpRSgA3EzTTleCtcTsiZ27VRTL3t+M?=

=?iso-8859-1?Q?K6UBjBQRtod1NtkpdQxauntL7JhJXXLxfWQtjfDSu1eMzypiFlt1Mf3yx7?=

=?iso-8859-1?Q?Gtlpj7ThG00x+606GKSuiwqn1uWLRyv0pneJzrjqZObCfSLCrQSBrUeOPl?=

=?iso-8859-1?Q?b/paBUaj2PturdRL1gAuAQZZNjpM+MnuXg05mXCOtS3lmbWIQcNQ+kFDR/?=

=?iso-8859-1?Q?eVjZlACqNx0gbt0yUjmF6Ddmpe/jV6y1K0amPjXbJVBhspVxcV0aOzSEt8?=

=?iso-8859-1?Q?MPprlAzGFfF0sTJ0ieGiTP0bRahFJrvdFfrFGgdf1nGmzeiPlGmZkJyuRa?=

=?iso-8859-1?Q?swX2B7ZIGjSFJH2jvRwMNNIhMy7fmtx2r2vUsGecG091kII0R1pyUxZaow?=

=?iso-8859-1?Q?Eh/8Wv2oMEyBo9br7+IWn/TjdgBZkJD5HO6Gw4GNs3LvUe7Kg7+zryzaIO?=

=?iso-8859-1?Q?e+l3xAhERYQShh6KiNdwCAOn4FVKWH4hXCjFFGPz3tDCpAlt1Ba6q64x7j?=

=?iso-8859-1?Q?xMMU0/fLybJYkBEvfFCIB8trUtaVOYPhoEO9GVrJDQOFJl+uKM2uaxjPoL?=

=?iso-8859-1?Q?a4Og5zbxPhmedtbN1CiKccLtJP8gjHV3vzwhYTxFpJ0ry5WfBF+Q1sC4Mi?=

=?iso-8859-1?Q?H5W0zVsie9YAUe5vWp/NFhjjexQxjW2Zzbo8uf+U7RqQFhLimCYIVBrQEP?=

=?iso-8859-1?Q?H48cjM/zJcNmRjxjqS6TRPn4/GytEVMnM80cIMraK42JXLBUEmFbPIQ5cH?=

=?iso-8859-1?Q?BBI01W7h+0lEjaoDRpoKDOLF66Azv2SrMM6SJbddb3lH3clUOdmOja/ojf?=

=?iso-8859-1?Q?4l1zoq+IoCofihVR6wBzgS61ZsEvHW2VLt209DbuPHH3kC/BuA+0fwhtUC?=

=?iso-8859-1?Q?Yeiiyz92+VSzp5aFj7U4YHNZ0cYWQ7oI1Y3vbe/RSGLUPawbUMYNR9AizK?=

=?iso-8859-1?Q?3P3Z9d1C5G+ARtO9wATWcxEpWbaLggRjlJ94Z4mKvJbC5AqyB41opVDZCO?=

=?iso-8859-1?Q?/GIB8sRn6tbr6bHcyLDeyCrIdsQRMHALZzjppJQ5fchMlZxiSOZxj4WIF6?=

=?iso-8859-1?Q?wucHp1jhZ19TrX5BLWK4m/OsVbo3LFbwsAe5Bl+SMzy1s04=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?8JnRHGTbUwZVEOk4aUh5Dx41oQcOhrUTGq6DAN50V+n+Pi8pa/EnUqdR9l?=

=?iso-8859-1?Q?CLvZ4/dbZc9u3B0BnAEuUGHEp60PDno8Ju6AauGyJb/4Gapgj3nDU42fx3?=

=?iso-8859-1?Q?Q1cSEBGynMhhzfXVyUX+Q499snqiptj5ck0GMQEFI1QirLVjosCD3909q6?=

=?iso-8859-1?Q?+mijXJEn69enDRJk0Bkw0Fi6aibNIb0K03vtlyEwYOcyay0YR5iuRKnWbk?=

=?iso-8859-1?Q?hTrw5khD96Wb5ct3N+51TsRsnHI9XbCBYYtimXAsX96pTny/vSnJ7QHzX9?=

=?iso-8859-1?Q?wv1Wtx05UOqDW6fSKc8G2Swm79YCi7hYe/nx6z14r3EWX+7FGBWnMX9giH?=

=?iso-8859-1?Q?IF2KkRv3M6WAbbUvBKDaWOHyLCOZaWxIAQ98BGGCGWdflT08KMvPgJHfcR?=

=?iso-8859-1?Q?oZVxz3VSGVZ9/W5YY64VsPXhKxtc7H50jzq/XUPyFZTFPIcqOaXRGxfI2t?=

=?iso-8859-1?Q?LPKfhkcCp1gaueC8neHta8/gXN7ZyAWBiZ3lzb8C+F+l9f1fcedzbQmGDq?=

=?iso-8859-1?Q?6CR3cghwEe94o7uQBlhD8H+XL1bLUbfiiCMKj9EmTu9S4jXSTaXcvdBQO9?=

=?iso-8859-1?Q?iMxy3WWXSR1Wf3pVTMPyLNBlCReOSH8g1Vbkra/nl31ZG82GDYqVPuiN++?=

=?iso-8859-1?Q?wVJ8UbXKZcax2qcdnddEPQjOZKfbPLJubX1ahM2hy/jaWEcoNCekU0xtrG?=

=?iso-8859-1?Q?pt1PwElLI+Moar3cahrLo01isz7BuMxPAZfRlsgQ2DIic+/69QaP2vQKIP?=

=?iso-8859-1?Q?Xif6KucLreLFjX8lHTZZi2dJWrivQWyIyZPzkeB+v8tOB80TDK6v35e6JH?=

=?iso-8859-1?Q?nkpMYvMyGZQd3F3C4a+66z1e3whpG0IRzX12o69rxHSU6tkVTc+ccITWKs?=

=?iso-8859-1?Q?fe+E8vUtXcOcFADnu6iDVUdWPy35qXFi0Kpm2bjNYhpTFNysXwxHvzbwT4?=

=?iso-8859-1?Q?qXu9hdeR/1pnHd0XATYlv/gl3oG7fAey4fY9IfLVSap1henwcZ5ByNMi84?=

=?iso-8859-1?Q?Lmhezw2EOhnHodsk1BUl9VV1siWNPy/TyNVxIFHuQM69gbefHuS1XziqtA?=

=?iso-8859-1?Q?Y6lFFMGP0QXGtbMpdYr25ISmQfjdqg2fCWhrZLX5wPM6S1EgoFp9E5tFsb?=

=?iso-8859-1?Q?upSfp0EQ78Vgrxs4/mgYB0y4AZvErFE/DUH3S2WWoRkkjNqf7dOH8uH0ku?=

=?iso-8859-1?Q?msvaAchJKN398s+lSzn5EuRoIJhUU+fCTlENy+87iOW+lPQnbP5eK2MzpL?=

=?iso-8859-1?Q?TUfGT4gM+ssu7sjS7NnS1SomPvE0+eZSO/x9j02ziIeuPNlNBsBusDI7GU?=

=?iso-8859-1?Q?0XRqz15qJO+Tq3V/Cqsy81d2UBRnfUQNUHWNpU0eNIfNUtG1w5G6RcOKSV?=

=?iso-8859-1?Q?N7aShADiIkH2RXnV3X/0ZvJuBdNtpRCCOnreqrTOB3sqR8EQUZ/Ugt7dM7?=

=?iso-8859-1?Q?t86+QIhueLPq7WGrFLZtgMIgcz3f/Zs122WjoPWZfv7ZwZiMronbVSMuZj?=

=?iso-8859-1?Q?M7U3V/3d+U+paBH824uxoE?=

Content-Type: multipart/alternative;

boundary="_000_KL1PR0601MB4697EB8CC1A868127ADFF10CA3DB2KL1PR0601MB4697_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-25b72.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KL1PR0601MB4697.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 28506e7f-5aad-41dd-3623-08def91e813f

X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Aug 2026 09:37:34.5352

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR06MB5137



--_000_KL1PR0601MB4697EB8CC1A868127ADFF10CA3DB2KL1PR0601MB4697_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello,



I looked at your website and found that it has a good design and looks grea=

t, but it doesn't rank on Google and other major search engines.



We can place your website on the first page of Google. Yahoo, Bing, Faceboo=

k, YouTube, Instagram, etc.).



May I send you a price (offer)?,



Best regards,

Nandu Jaiswal





--_000_KL1PR0601MB4697EB8CC1A868127ADFF10CA3DB2KL1PR0601MB4697_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

Hello,



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

 



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

I looked at your website and found that it has a good design and looks grea=

t, but it doesn't rank on Google and other major search engines.



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">







background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

We can place your website on the first page of Google. Yahoo, Bing, Faceboo=

k, YouTube, Instagram, etc.).



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">







background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

May I send you a price (offer)?,



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

 



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

Best regards,



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

Nandu Jaiswal



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_KL1PR0601MB4697EB8CC1A868127ADFF10CA3DB2KL1PR0601MB4697_--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 04:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuSpM-000000007cD-2F22

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 04:38:24 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 04:38:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013086.outbound.protection.outlook.com ([52.103.43.86]:44776 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuOui-00000000CIF-0anK

for root@nk.ca;

Thu, 13 Aug 2026 00:27:50 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=OWUIVSYbLPXe8e6ObNKMi7855S9fALEBr5HAoX+NWLM5f3/OYKXxIizUxOuMLr47VtW1yOChDXZPfOXrRNUeFl2Y0oZ8tp0MJMJ/uJpzAGrJRVbgo0rNlBqwDumWUEsHnIQmUoxdJOwIpXE/qcgCliUDscc+aF3xpbiOxHXw9bqjYBXdeC54XgReP4sKBIoKntgw/8e/wlLgKCujFwAriOvHtXVon+MPn2+TjyiUS+qV//421V0LWGM8VgISn9UXQwg/rTHyBgroMjVWnKVL5uGjytFiQLCUMNuN99vaMFWR4Z2UzIfsNr63CD4N8djMIXxTF4A10wqNXWywLrJakg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=sO8iPZk8Bt98HxiHT6IsczLkdu1tSnzuDC9MZDxpxWM=;

b=I9FkvCUljzI+Ijkl+v5rqHToIZIKSiRUbOloEwnp4oE9Ojz2nC438RGpBtFUu7JI9/kdln7f5b6vMpLLTdS63ZnSMrp3HP6q1jvKPFOrDvN5R0XHoBYFgWxeBfOCwfpQPEu2+KFbolhf3ihQu8OMr6QW5nWQe2wuwpDAu8ddsMPdugfpWZ6x2xx8Vfdbk4/jJv/dwecMfL9jqkYISdFeUBI8UK/i+ko1g3Z553xiM/b009GCrvjp8JIaTE6yH18sASy7b2s+CCa6h68eIvs3wJEcF4QhGmUFC2+00/q0wBdg51MX/LmaeAZtl0VwtZMI2xSxFcYV65hqMSpr0AQD/g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=sO8iPZk8Bt98HxiHT6IsczLkdu1tSnzuDC9MZDxpxWM=;

b=Kk3wtSNo3qCiDN8cGyo69KbC63oaivl+ctpY3acz3UnhMp7IekEQUPW/nGgNhJVeqnNhdUSf4wHPykUKlmt+0Mm2Hvv4pVLXvzoZiD4PlBNKQvkHkzE5zIBeBKk+mqiLJVQAkshGJoHsrIQMr21bctP0O+wP3a6/Sk0E4gsJ+VCvMT5BE5HhP/O1Q6B7FwAxD/4mdZih1ImD8HUZaJNd50n9eJPWicL3aR0BS+89azqlmfeOZYH5mmIniVz/xYwYGPk4KEcMoJgS8mDnGQm0ehv4uJSyAMzvsc9w7jktxfca7J7viZvmPTJZF4VNbUTX+CgqlYplFSu8JGsNOTYKNQ==

Received: from SEZPR06MB5296.apcprd06.prod.outlook.com (2603:1096:101:7c::9)

by PUZPR06MB5953.apcprd06.prod.outlook.com (2603:1096:301:110::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.14; Thu, 13 Aug

2026 06:24:37 +0000

Received: from SEZPR06MB5296.apcprd06.prod.outlook.com

([fe80::94b:f61a:b81d:c2e7]) by SEZPR06MB5296.apcprd06.prod.outlook.com

([fe80::94b:f61a:b81d:c2e7%4]) with mapi id 15.21.0315.008; Thu, 13 Aug 2026

06:24:37 +0000

From: Alan Smith

Subject: custom websites designed

Thread-Topic: custom websites designed

Thread-Index: AQHdKuwRC0IItmAPb0Kf57lii/dw8A==

Date: Thu, 13 Aug 2026 06:24:37 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR06MB5296:EE_|PUZPR06MB5953:EE_

x-ms-office365-filtering-correlation-id: 4e71f3fd-a019-4b51-949e-08def9038c9c

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|31061999003|20031999006|4140399003|15030799006|24071999003|25010399006|24121999003|22091999003|19110799012|8060799015|8062599012|25031999004|39105399006|24021099003|55001999006|3412199025|440099028|102099032|31055399003|43065399003|40105399003|2607281247196008|26121999007|25131999003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?DXrL2eV3gDcGB8gsioAEKbF+MzLsjWflSsL1gGkm1Gw7NWR6ELxCxvdt?=

=?Windows-1252?Q?mP2cKHxugALQobTkY3Q30eyJn2fI+4nUHlpE68/yNofLsqqDSeOG4AcN?=

=?Windows-1252?Q?rTTzmz/MTHee7+Ox2RKn5qn70PSXF7FKW7zqSSZjHLRgAmL2ft33PK91?=

=?Windows-1252?Q?YKXK+/YJ4kJ12CBEAmbDplmcYNDaQvb1oopKRLJRPfbALzOimbULDbfn?=

=?Windows-1252?Q?QQOok/TLN/B/TSoiqg2WRn20l4ft3Bb34XFL++cCPh44kH75dumstONA?=

=?Windows-1252?Q?PQdnlSme0Gd+VIAo1s09NqLAnHaeR6IM5BZW66ze9/6dCXoXMBgsfbiZ?=

=?Windows-1252?Q?QHku/5t9MBnhy0EtCyEnoTHFqKipOhEgMeoeCtk8QTiSujs7m7qyo93i?=

=?Windows-1252?Q?fxa/Rydq+x3cv+KFRvadRsnhvwzbFNxBCiQ9Tv4CjUEHTIJeGxcMlTFe?=

=?Windows-1252?Q?3pVKZhoX7TGkzNsouE4/YgBYqCUhVqv8UBBiOIrnM01lSQVtoZwJQ/js?=

=?Windows-1252?Q?7E5PZcgCiEkU0dniV50l4os4PGewGCsSQDVpYzDRIg9WXUq8PY99g32V?=

=?Windows-1252?Q?QRN1AoFl1ZBSe4uumA+dcluzPRht+Um4be1/7WjykNhPSa6KEibw8Yy7?=

=?Windows-1252?Q?QAP1vd339s4xeRcDlJjjkXWpPJl6Dxy4FGLx/ZdrF8bu8UEMPXVtdVgV?=

=?Windows-1252?Q?hFundo08liwYVX66Mj5FJphY04qf2U63cNZV+4q2QFB3Jv7TuqYZ7qw1?=

=?Windows-1252?Q?4qfNn2LpJIoWjS21hSeoqX2fH0cv2qvWW3nLW7Fdpm90A1VrhpxNJNre?=

=?Windows-1252?Q?TyRmTVy4zQuC9rKnO1XC7nIPidHXE76+sJW58MYV+6uu9/nIOb3n+L8W?=

=?Windows-1252?Q?sRr/8JQfSOGQagv+mAd1pQ6wq4Ar3pk4hqDeAVmMNLFvvVetUBuMBDwp?=

=?Windows-1252?Q?dH0Q9ohMHNONVe8vKuQwODydDccj8L7TjfbFiCtj1qX/mDXueCQjNB3i?=

=?Windows-1252?Q?I8ArpP8JvmDSc12v2Ia1nVROCPzeqaiXLF8q9GbDPgMfyzb/r7djNOlN?=

=?Windows-1252?Q?qryXibumjjKj5mYP/nfu6+PI4lMeIeYviiQ5t057HC2+zEmdfhRM9812?=

=?Windows-1252?Q?mgDEskAk1hRSrGhLorhgzafw+TClmky88yM9kEp4+4ghAggBjGn/Sh90?=

=?Windows-1252?Q?sk6JCFEKNIuBV40jZ/Dv4iRu/jOpI3ICVDIWcW8xxPM4ustHusGzBLkh?=

=?Windows-1252?Q?ufI2FcHo5D1VHroOFYxE56TW8BLf11ZZ38EpbvNcxjyUNY1FKz1jAqeF?=

=?Windows-1252?Q?Kzf7HZn5qLkqQF55GnyRtODBjHICCtKJijKSEXJ7ARTbghi7Y7pIHPrU?=

=?Windows-1252?Q?JmxG1eSVmbA4CQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?iC3TiWtbo+eer+tDNFyRqqLgSGMwny2Nufv84ZLBvNePqbZu2t6tub1R?=

=?Windows-1252?Q?gJpyK+N1SG/dbS+bBCQqVMcQEm1qbt1ovoxyafzn8GR4gw0iGXzWqfmI?=

=?Windows-1252?Q?zJWja1KMznO3SxLT/NieKmFryoDmg6TC22wZ5apwHj7FKwyRTm+gdKon?=

=?Windows-1252?Q?KCwEyFPGDcSQcG31FrYAP24KNQdQyLOwjXUaAYOA9wi516Nzg+hikROF?=

=?Windows-1252?Q?lF6Yj7dhQ1ooAl49NOQHqRUOZ5GNbCdoRNT6C7pGHS8elu3+gB50yuq5?=

=?Windows-1252?Q?4OSzvSkf+rBNYN3TVpkzmu3bETFhioIXxqxTqz20WbMbD+amDUORrPUd?=

=?Windows-1252?Q?fi/Gn04Fid17990ZL57mlu/QQt61Y6yrApkMOC71zI4VUbR2/A7iCflJ?=

=?Windows-1252?Q?SEzmUdYsK4GDKjhp4A7++9apcs3NMlQ006awBHdvldtKg3mWcHzJNy8T?=

=?Windows-1252?Q?MKteLmn2MtTRTkmrXT9CDhH6V9cDDB2SVgLCm28rL0BnP+YDj9tsu+GW?=

=?Windows-1252?Q?F2Tu1YjLev3MjCyPjzL7IN7NttFPQFuJD+fFlGPS915AuJNmVcfrhBTZ?=

=?Windows-1252?Q?ev3YxII0SMH89rbKKCU/IEXYmhKcwIHlZx3y6zNtdl2cZt7crpKj8d3j?=

=?Windows-1252?Q?2IOZeUiNf8fCSKTvo6vDpzrZWbEOeaQ9NywBlec3Qh+t5cWWtXs9gAez?=

=?Windows-1252?Q?BmLSLRCAp2YwMfgq9nMnxtolXOuwtDSIXCuoJOA9dBgrjQKU4pjH469i?=

=?Windows-1252?Q?+x1e/QeR3cflspOPwgUneUfCUJPzymIYrxf5r82Bi1vjM6L3nso0mtra?=

=?Windows-1252?Q?WUxzirt5W3adf0w82CM7NWhGikOc0o6WSn72HudYu61IYUZjBJ66FNKX?=

=?Windows-1252?Q?h7X6meaH0RQbn5evzZTATXVkkix9Qmngyv9yr41qEJUopEZvqQjemjG/?=

=?Windows-1252?Q?IOO/ie6qlMERwH70Wf5ZSxPUjv6g00RQNPLuEDtqBWf7cAfSvbFKS/p4?=

=?Windows-1252?Q?abCLWOFWXxfO1NMOMyEu5cbw/ruYAXRbvxfK6Z1G4+3ycpIHw014+T82?=

=?Windows-1252?Q?Rzj2PR2gx3LV+VyujPiEro2GfFgwcjlwqByw2NmsVx8ZDxDgCVHcKcjb?=

=?Windows-1252?Q?3d3iajDavuYeM9ja6pdJp1gc5VFfrSO4UzRjOjcAyTI3JdTHJtqRg1Bs?=

=?Windows-1252?Q?aNNiwuIpY/sI0r5y6a8T1cqPrejwrAvQm3iJ4DwYUkSIBqYGvsvrarhf?=

=?Windows-1252?Q?h3yyIlGFoILDAasn2xsPvKZIfuoOskApftf0clSArVvRLM/UJxz53RTW?=

=?Windows-1252?Q?Xf05UR/UJuTtTUApORXkpTggzPPZ6avAaZF2aDclIuAoACuCGZ0uuwKI?=

=?Windows-1252?Q?GlHTJQH28JM9Ag3PvEBktK5Dv97Nx+nPMEdrdg4shyrgim5rDU8RXv9Q?=

=?Windows-1252?Q?sfTSO6B9BaVazPqy/w8as97VAW+5Q4G6av2BOWjuWL47Z1UY6+Prb/7H?=

=?Windows-1252?Q?Jh493JiCnc6W+WAez7NwYrH8dxi3oeHM/aiz6XEdcy5y3vbdySZY9Knm?=

=?Windows-1252?Q?dqYnyrrFn6PWQgfBAJDtkz5QHoFiciIgIdbbFQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR06MB52968CC7D95EA410D4583A0AC3DB2SEZPR06MB5296apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR06MB5296.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 4e71f3fd-a019-4b51-949e-08def9038c9c

X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Aug 2026 06:24:37.1767

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR06MB5953

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Looking to Build a new website or refresh your existing

one? I create custom websites designed for speed, mobile usability, and long-term

performance.



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:7c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

[52.103.43.86 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.86 listed in dnsbl.ahbl.org]

[52.103.43.86 listed in dnsbl.ahbl.org]

[52.103.43.86 listed in dnsbl.ahbl.org]

[52.103.43.86 listed in dnsbl.ahbl.org]

[2603:1096:101:7c:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:7c:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:7c:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:7c:0:0:0:9 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.86 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.86 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.86 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[seowebdesignllcusa(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.43.86 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.86 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.43.86 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} custom websites designed



--_000_SEZPR06MB52968CC7D95EA410D4583A0AC3DB2SEZPR06MB5296apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Looking to Build a new website or refresh your existing one?



I create custom websites designed for speed, mobile usability, and long-ter=

m performance.



What I can help with:

 Tailored design and development to match your brand

CMS platforms: (WordPress, Joomla, Drupal, Shopify, and Magento, etc.

 Mobile-friendly and fast-loading pages

Search-ready structure and layouts

 Ongoing updates and support if needed



If you=92d like, I can share some recent examples, prices and outline ideas=

for your site.



Best Regards,

Alan Smith

Web designer & developer

Teddington, London, UK



--_000_SEZPR06MB52968CC7D95EA410D4583A0AC3DB2SEZPR06MB5296apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Looking to Build a new website or refresh your existing one?



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

I create custom websites designed for speed, mobile usability, and long-ter=

m performance.



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

  What I can help with:



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

  Tailored design and development to match your brand



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

  CMS platforms: (WordPress, Joomla, Drupal, Shopify, and Magento, et=

c.



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

  Mobile-friendly and fast-loading pages



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

  Search-ready structure and layouts



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

  Ongoing updates and support if needed



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

If you=92d like, I can share some recent examples, prices and outline ideas=

for your site.



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Best Regards,



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Alan Smith



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Web designer & developer



ddedFont", "Aptos_MSFontService", Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Teddington, London, UK








--_000_SEZPR06MB52968CC7D95EA410D4583A0AC3DB2SEZPR06MB5296apcp_--

Followup spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 04:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuSpD-000000007Rr-2E2M

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 04:38:15 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 04:38:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.alterair.ua ([23.88.116.234]:60845)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuNNi-00000000JbN-0zLk

for doctor@doctor.nl2k.ab.ca;

Wed, 12 Aug 2026 22:49:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=alterair.ua

; s=mail; h=Content-Transfer-Encoding:Content-Type:Message-ID:Reply-To:

Subject:To:From:Date:MIME-Version:Sender:Cc:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=gbBda4qO2SUiJMMGNiDLmRcN4x21TaVoXWN2O8XmAhQ=; b=X9xKJp2pU3KhxitkDLaRV/wObx

fJVSs23ShE4Ix2kGm7g2xPzb9oF+4zZRW1V2l2W2Wb2oLqbG3XjmfMDK5NUrqQm6Bmnr45VAPa73q

UASIxm4ajMKgZymnlTqWXGD5ewnU3XFCeOzhCZJmtycOXpTqrUlrNrCGGGUFLmWwbwGZ1lfa9iwAj

atY4v5WmN5W8uXPaK7Az2YkwrxMKMl8s4F4UVqriJ8W3CagH2UgwzLVnn8IwUBhfFJuFUIRIgpUdk

wSzVXEre2966SwNgmQGVB4S7osEODie3nab4mD4uZJfFfaw1Kl/dJfbEnQefB5PhmcvdJGpKDlzRd

4mvX+bvA==;

Received: from [127.0.0.1] (helo=webmail.alterair.ua)

by mail.alterair.ua with esmtpa (Exim 4.97)

(envelope-from )

id 1wuNKo-00000007u1b-24lV;

Thu, 13 Aug 2026 07:46:30 +0300

MIME-Version: 1.0

Date: Thu, 13 Aug 2026 00:46:30 -0400

From: Gong Zhengyang

To: undisclosed-recipients:;

Subject: Re:

Reply-To: gzhengyang008@gmail.com

Mail-Reply-To: gzhengyang008@gmail.com

Message-ID: <764039c184612bb6b44763db6fca7255@alterair.ua>

X-Sender: buh@alterair.ua

X-Priority: 1 (Highest)

Content-Type: text/plain; charset=US-ASCII;

format=flowed

Content-Transfer-Encoding: 7bit

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I hope this message finds you well. Following up on

my Monday email regarding new developments AND it benefits to us. I'd appreciate

your response.



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.88.116.234 listed in will-spam-for-food.eu.org]

[23.88.116.234 listed in will-spam-for-food.eu.org]

[23.88.116.234 listed in will-spam-for-food.eu.org]

[23.88.116.234 listed in will-spam-for-food.eu.org]

[23.88.116.234 listed in will-spam-for-food.eu.org]

[23.88.116.234 listed in will-spam-for-food.eu.org]

[23.88.116.234 listed in will-spam-for-food.eu.org]

[23.88.116.234 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.88.116.234 listed in dnsbl.ahbl.org]

[23.88.116.234 listed in dnsbl.ahbl.org]

[23.88.116.234 listed in dnsbl.ahbl.org]

[23.88.116.234 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.88.116.234 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.88.116.234 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.88.116.234 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.88.116.234 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[gzhengyang008(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 ODD_FREEM_REPTO Has unusual reply-to header

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[23.88.116.234 listed in bl.score.senderscore.com]

Subject: {SPAM?} Re:



Hello,



I hope this message finds you well.



Following up on my Monday email regarding new developments AND it

benefits to us. I'd appreciate your response.



Kind regards,



Gong Zhengyang



Business partnership spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 04:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuSnS-000000005I0-0NF0

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 04:36:26 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 04:36:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f8.google.com ([74.125.227.136]:48044)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from <09847@fangwit.ac.th>)

id 1wuM29-000000004DB-3ZNp

for doctor@nl2k.ab.ca;

Wed, 12 Aug 2026 21:23:19 -0600

Received: by mail-pj2-f8.google.com with SMTP id d9443c01a7336-2d313798bf8so2105915ad.0

for ; Wed, 12 Aug 2026 20:22:23 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1786591337; cv=none;

d=google.com; s=arc-20260327;

b=dDC+62v8zNKNO816o4rC7Psu+h4AeIk9+eOrMmoWrq2V+vyvL0rzwr4HiUodaZWyOy

bmHaNRDSqm5KsNXk0JDm8nSwBje1Lu4wQE4qr56P7AtMlU25VBMk4X4boQAm1Zd5hwPQ

HVq8i8Dwx7JVkE+DKBpy5O7iQMurQPuEZUV4jDUk8vFswi4rPNXBnLojkZYrQuPqMl6N

kESJ0Ng+77bRvV+lrlt0FtPjL4TP8j66sgwxITud3a878MUc8iEopEiWKb+tjuCkzExu

sbVSHqZmaPe3i4IsQQEdaryfUpc64bSEaU45fWvaiP815nANsoXFEywDpjjgS6bvRl8q

EC1Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=4ydknHW2P8pjMeI4eFN3sPnhGEUQ1abgHhXUhIuZNGw=;

fh=fWNYHWtrc3T3iQI3l3sz6ErjIMHVnpXv6a2Uyndq/ZE=;

b=lbl1QoZ5W/LUQ/rRfpooptxzdOekpgxDmcA9ZP/S4yZH5v6IUjUzG2bbw+bv8gsiwt

lgcO2LceHd4vfJuBQuye/cSTQChnH22pu7ib5FMIISNnTK5gEjfkL/MRFPYlaQGcQ426

VYHmILWCNVCywRiMGxSZvJ9IAe6FXiSrax2XZKf+brcpPNrkFssvbSBPfMLLrmtbiXXH

b/aGDhoykt4g4ifIYfQC7jtoIxBrpjkjiDNYBzONR98eUVziNasgSmJGe6w6eqoPYPeS

x7qnbKNi/uzzLROpmsa7yddGK+BNZhUktghn0bjSFyCK3eypXZRrGaYIH5d111bdP31t

kAZA==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=fangwit.ac.th; s=google; t=1786591337; x=1787196137; darn=nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=4ydknHW2P8pjMeI4eFN3sPnhGEUQ1abgHhXUhIuZNGw=;

b=lKadZEsfEKLkTikfN+f+yx+8Ct5mGOoEyBQX3eRv33j9yvjaPeENujdddJNbaqYgB3

kC76cFJfRNRVHLg4GwZcp/Ah4RLgsQvzoaGOwsiTdikEBCDOGBy92/9MhjHF6NfmGvnP

zst2JRp6IqJn6ySHmBvJJE3RG5vA83naABXCNAcJsSfkVMCYQ4FUB/oL+tmn+vqzW1iy

M4ZB2ZPLnVGNRsIsukMZIHqzX08rRcbISWSIvyQvB3nPWjKJBEl/SrVAhmc9EmhIo8Wp

h2Y4O/34MfvBIzjcc1qmebGVKAo/2UYm72g4+stCdocDEFlr4GeASoBa3jt9qvTHd/8r

Qa3Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1786591337; x=1787196137;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=4ydknHW2P8pjMeI4eFN3sPnhGEUQ1abgHhXUhIuZNGw=;

b=owfPeOH4OgxxJwu7mmOkdrld+VYaBMB5bYwyJw1rLzHe7dxH8noc0/0KI5okuvPxlA

IrAtr8MWVsQivsmjPy6mTIOSFaegdMyQlBuPtQRA0ppXUico5rff7cb/CHAL7wbbqInf

gxXiI57TxLrYACqliICIwJqJ1mSPdKYpYPZh+H8mU9juT9WvYqywH7KDVOSAZwYi2PpA

6lgM+pU3va0Avo/f3yxTbbYDOi8KpbxUIVxTs7pjH7HSUVhrQeFpZUzuwuPjth9DOB2i

MPKdyuSW3F7HKr93+w8qfT57HnZs3eQTajzPxPbr4bis/zRyEDp9NnIEakFLlu2A1BTh

1irQ==

X-Forwarded-Encrypted: i=1; AHgh+RoEEXxVeHchVRzLgKCNDVI3TF0z7UZ/NRc7gqY85aORMUbt9Y0PRk5SvJrBf9LpK1BfIMOIt2U=@nl2k.ab.ca

X-Gm-Message-State: AOJu0Yx5a5W1Wfk4zToOx+r4mrwLAtpyd1SX44zZrO8mmcqraJXYB5oA

H33HTfj1Z6Ti/CqnT1JR40IRGYzcQEt0sRE3hQrKtUrTfVDU1ALZ1VONkheEOSYoD9w/FwWaQ6F

D4eURwjIo1GD0EdQ0kPp8fhWmNDAvcmUbcJU5qjsYFQ==

X-Gm-Gg: AR+sD11kfVTc1trvoL8YN2+jrvGcUrCI6FMJ/z1x+gg/NTfARTOL0Q2Si6mZHqdeSFk

IbhU/dja0h938tyBcTVheGxXexmgiZkMb1mxAv92IhOIu7q4/d7JdEzu0qyfKPv/1AshQEB8YU5

KA/9VmNEfhw4Et0/QMhJduv8Aiqr3kkH+ltXHs78VHPsvm1ZVjNKIWI3OiAZnoWUL+0hWnlFShO

3PVEApb3qDCOoQ/5x03jLmoJO01qwekDRvxETGNabq+DfWFfhtixrHXzQlpCSVUUATbRg8Fbhu1

iVmKLv+GsobeaIQCiOCtHq1FS1RdyI/8KhXfW3BXDyBmicIkmw5oX/DfXiOiy1Ro9F3DzKFqQeE

Cqu6TOAFEpNV4hiCakf7M+hkGzGJZRVILGFKrHQrs/MpqPO8r3geODZQUPGA=

X-Received: by 2002:a05:6a21:6b02:b0:3ab:2fa:756c with SMTP id

adf61e73a8af0-3cc54f9616emr4198498637.1.1786591336774; Wed, 12 Aug 2026

20:22:16 -0700 (PDT)

MIME-Version: 1.0

Reply-To: norah111555@proton.me

From: =?UTF-8?B?4LiZ4Liy4Lii4LiX4Lix4Lio4LiZ4Lix4LiiIOC4leC4uOC4oeC5gOC4geC4qeC4l+C4tQ==?= <09847@fangwit.ac.th>

Date: Wed, 12 Aug 2026 20:22:04 -0700

X-Gm-Features: AUfX_mxxJp3ez1F1t3GUsOo2X2AV-RXO3mtIqkPuX05ji1Y8WweKWONbuCrG6Uc

Message-ID:

Subject: My Dear Partner ,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000fcce740658e53526"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: My Dear Partner , Due to my tight schedules I could not contact

you earlier. now.I'm happy to inform you about my success in getting those

funds transferred under the cooperation of a new partner. Now [...]



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.136 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.136 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.136 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.5 HK_SCAM_N8 BODY: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 MONEY_ATM_CARD Lots of money on an ATM card

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

2.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} My Dear Partner ,



--000000000000fcce740658e53526

Content-Type: text/plain; charset="UTF-8"



My Dear Partner ,

Due to my tight schedules I could not contact you earlier. now.I'm happy to

inform you about my success in getting those funds transferred under the

cooperation of a new partner.

Now contact my secretary Name is: Mr.Ben Mark Email address:(

janenorah64@gmail.com) Tell him to send you the ATM card, a total sum of US

US$10.5 million which I kept for your compensation for all your past

efforts and attempts to assist me in this transaction, which was applied in

your name. I appreciate your efforts at that time so much.

Best Regards



--000000000000fcce740658e53526

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



My Dear Partner ,
Due to my tight schedules I could not=

contact you earlier. now.I'm happy to inform you about my success in g=

etting those funds transferred under the cooperation of a new partner.
N=

ow contact my secretary Name is: Mr.Ben Mark Email address:(
lto:janenorah64@gmail.com">janenorah64@gmail.com) Tell him to send you =

the ATM card, a total sum of US US$10.5 million which I kept for your compe=

nsation for all your past efforts and attempts to assist me in this transac=

tion, which was applied in your name. I appreciate your efforts at that tim=

e so much.
Best Regards




--000000000000fcce740658e53526--

Nigerian Spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 04:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuSnN-000000005GI-46cL

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 04:36:21 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 04:36:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f8.google.com ([74.125.227.136]:48753)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from <09847@fangwit.ac.th>)

id 1wuM29-000000004DC-3ZKR

for doctor@mail.nl2k.ab.ca;

Wed, 12 Aug 2026 21:23:19 -0600

Received: by mail-pj2-f8.google.com with SMTP id d9443c01a7336-2d313798bf8so2106025ad.0

for ; Wed, 12 Aug 2026 20:22:23 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1786591337; cv=none;

d=google.com; s=arc-20260327;

b=hA9+GHnnVfgS2MxtJraFObJyHlsYq3U2hMXaWe8mx4+EBRTyLV9ymeX4SpkFXbO0KE

WtU9ut4EFGLEHjIvuxA718EWXfyBmGM+4U7+WqZxuqdgCLxD97kuR5PTCNxmby+eQrXa

01vdj+mG44nJRpFM7l1CvrwMMXuH7OPSrMOkBesxqBdUdeTdbdxFfs4gkn4f9WPOB0ab

VsDXF7rK01ENNmFGT2Bbx8FECpb1voXiPwSZBHYxhvqRptGR7aAcHnWv5AbswU/lkU02

tk5Uy546k3UTgkr0q9DpQSusVE1Pjzre+VehuDJH/dkrDl5zlC8FyOhkNiKUEGNj5Wmr

35YQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=4ydknHW2P8pjMeI4eFN3sPnhGEUQ1abgHhXUhIuZNGw=;

fh=HgIkBaNQuy42WG1XFGkOnz/8M6eWJrMMNbfDKG5Rnxs=;

b=ClH8CZuTCzXhbqXmyjhS2P86fiMHYrT1jsm/h0UslXaJyohYqFXj4TYuj+YVefCw/i

9B0fpoFNQFVXhMOAlPBXGw58ftM9A/uRResimHXeLCqcOfDUOzooDQvZWVb9DIAS7N8T

aTzLcfJZWqHXonAgQSxb/RxI5E6FpcC7kn4R5Fl+93eyyZXr3PdTn+ZZCCXhSO+1CqmE

kL8pV0VHDoOq41eNAi6uCGi2HVeCTXBOe1AJXlzR269PRoMMLUGISAbotpNFL9/VDBLH

CmUMSuE4LHHO9FULdJNa/5H58WvClM33uTenZKM4zwhvk4MsHWJOLpZQIaggiLMYX+hG

a74A==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=fangwit.ac.th; s=google; t=1786591337; x=1787196137; darn=mail.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=4ydknHW2P8pjMeI4eFN3sPnhGEUQ1abgHhXUhIuZNGw=;

b=iUaw3cylwS2fCtAJT4Hk15F83xLQV7lGVL1boZzNHYv+t8nl7gD3KciWB1vh5MyyU/

0Yg/7yLUSolEZ3oDKKKFWJ8ybjNkeZBOyG7FI/Uonyz1Xts4Hda9OEfGBM3NcAQMTV6X

ErHDba83kl4/TkeGn7eYciEH6vGhMeq/clZOa2TPt3nNE8fRwZLnIrEkxxPx3/3zVAnK

A25LGgP1WK2MQv+BqUzXylpGBDgJpqU2CSjVmFKg98bA5TbRN0/DvE1ushUNqhO8EF7M

K3j5iED02vTR9yx7xiSKO0K/ICbOq1WOtFF3HrrPiM9ZIBBjPMAs7r2rkeKGBfawuVZF

eIjw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1786591337; x=1787196137;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=4ydknHW2P8pjMeI4eFN3sPnhGEUQ1abgHhXUhIuZNGw=;

b=o5XDH8ZAONsIukBTVfJ8fS9Tr0aSnggw/2/ZFXE3xnkdIZEoKG1iVT+8AIkVC8kw1z

CidaMsoXkezT5JQvSdpYsC1IPxNa2Eh932AURKptXOu4BA0IUSckXmOStlCCVbVR+8kw

54LoluofL5eQFIGRq90kTz5eEFE0W9WV/M6vzP0Z0IqGDDbIsVAOARfsAbM7q6kRulP8

NZfsJINBGwGNiAjTgnUBVGIPQdSv/J+bZK45vutH1NOaWl64/wH6b5sa1ok7KmXDf62h

neJXQ0lPvPTRitmAakuPd1ikgB2/Urht35lSBOd1mYw2ZMzTaSa9j/MetG9vwPYZjLtF

whzg==

X-Forwarded-Encrypted: i=1; AHgh+RoDzRUboHGPLitHB3VFvNMkqGwTUsCy/o3L3pBZrVcwNAPwoJDCX/tgyKivUh4/6lDGLtRcF5I=@mail.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwF3Tt5/qC3wxH528pW9oN+AkYvWtt96q94BS3oMqmWdJUaAGzb

atrZGHbnWevGkmaYNswzBacK4Wy0jJAxYQpXX44KGD3YBtSUBy9hgDqD6plqtGFMVIRhNf9LN5R

/QgxYyHoBXiQkUImA9Lm9I6nf0YdTVK7FIOf/D6qKqg==

X-Gm-Gg: AR+sD112TuRefrX8ViPzz2GAXjcVpJzI7N3A9uGGTNR3fioE/eRhktZ6a2hbMCjYCQI

LtS2gLYWUrgWl+0raOR1qLKwvp4mfT3k3wIdQIJ3ZD6JvTqZqEUyo6wrJ7cJBteBEsGPRvMBXRb

2R9ZY+EM6RivXikWUR70ui/e6sTSO6KPHZyexXWRdjrfh29oC4huFffWRhKhhmz6I9l8+cRzSaU

6ev7PNSucf5sDqsr7U+tmspEsoJjtYDhDqZrnsIkYW/dhFH5u9aBDDEix0HRKiZSZfG58ENRblz

aRQJWLydBb+t+UVPxt5yvcBTixV0HJEvFzlhV0XK24tkLTrpb4+Oz95+tHp9a+9wqSunV5QoDui

qt/Ji7yyo8kbyBAtUQjTBYAX4/emNal+eK7xM4Yf7l2NP9xaC2XrUZTS5E2Q=

X-Received: by 2002:a05:6a21:6b02:b0:3ab:2fa:756c with SMTP id

adf61e73a8af0-3cc54f9616emr4198498637.1.1786591336774; Wed, 12 Aug 2026

20:22:16 -0700 (PDT)

MIME-Version: 1.0

Reply-To: norah111555@proton.me

From: =?UTF-8?B?4LiZ4Liy4Lii4LiX4Lix4Lio4LiZ4Lix4LiiIOC4leC4uOC4oeC5gOC4geC4qeC4l+C4tQ==?= <09847@fangwit.ac.th>

Date: Wed, 12 Aug 2026 20:22:04 -0700

X-Gm-Features: AUfX_mxxJp3ez1F1t3GUsOo2X2AV-RXO3mtIqkPuX05ji1Y8WweKWONbuCrG6Uc

Message-ID:

Subject: My Dear Partner ,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000fcce740658e53526"

Bcc: doctor@mail.nl2k.ab.ca

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: My Dear Partner , Due to my tight schedules I could not contact

you earlier. now.I'm happy to inform you about my success in getting those

funds transferred under the cooperation of a new partner. Now [...]



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.136 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.136 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.136 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.5 HK_SCAM_N8 BODY: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.5 MONEY_ATM_CARD Lots of money on an ATM card

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

2.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} My Dear Partner ,



--000000000000fcce740658e53526

Content-Type: text/plain; charset="UTF-8"



My Dear Partner ,

Due to my tight schedules I could not contact you earlier. now.I'm happy to

inform you about my success in getting those funds transferred under the

cooperation of a new partner.

Now contact my secretary Name is: Mr.Ben Mark Email address:(

janenorah64@gmail.com) Tell him to send you the ATM card, a total sum of US

US$10.5 million which I kept for your compensation for all your past

efforts and attempts to assist me in this transaction, which was applied in

your name. I appreciate your efforts at that time so much.

Best Regards



--000000000000fcce740658e53526

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



My Dear Partner ,
Due to my tight schedules I could not=

contact you earlier. now.I'm happy to inform you about my success in g=

etting those funds transferred under the cooperation of a new partner.
N=

ow contact my secretary Name is: Mr.Ben Mark Email address:(
lto:janenorah64@gmail.com">janenorah64@gmail.com) Tell him to send you =

the ATM card, a total sum of US US$10.5 million which I kept for your compe=

nsation for all your past efforts and attempts to assist me in this transac=

tion, which was applied in your name. I appreciate your efforts at that tim=

e so much.
Best Regards




--000000000000fcce740658e53526--

Microsoft Temas phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 07:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuVCU-00000000P9p-0qvR

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 07:10:26 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 07:10:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp.telepacific.net ([208.57.4.233]:39623)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuTlM-00000000FUL-21pG

for sales@nk.ca;

Thu, 13 Aug 2026 05:38:29 -0600

Received: from CNABAL-PC10.king.local (unknown [64.60.196.69])

by smtp.telepacific.net (Postfix) with ESMTP id 6167E12524D;

Wed, 12 Aug 2026 19:33:52 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============1462528628=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "Microsoft Teams"

Date: Wed, 12 Aug 2026 19:32:52 -0700

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Microsoft Teams Secure collaboration Work chat Hi, 1 unread

mention Your teammates are trying to reach you in Microsoft Teams Someone

sent a message in a high-priority chat Reply, Go to conversation Microsoft

Teams



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[208.57.4.233 listed in list.dnswl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[64.60.196.69 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[64.60.196.69 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.57.4.233 listed in bl.score.senderscore.com]

Subject: {SPAM?} New Message on Microsoft Teams Meeting



You will not see this in a MIME-aware mail reader.

--===============1462528628==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams

=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============1462528628==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/SfwfxfBZXv">Reply, Go to conversation<=

/A> =



Microsoft Teams


AIN>





Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============1462528628==--

Microsoft Teams phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 07:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuVCb-00000000PBN-1603

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 07:10:33 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 07:10:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtpout.telepacific.net ([208.57.4.233]:36331 helo=smtp.telepacific.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuU5L-00000000KAh-2G9L

for doctor@nl2k.ab.ca;

Thu, 13 Aug 2026 05:59:09 -0600

Received: from CNABAL-PC10.king.local (unknown [64.60.196.69])

by smtp.telepacific.net (Postfix) with ESMTP id 69CD1125365;

Wed, 12 Aug 2026 19:34:01 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============1666873558=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "Microsoft Teams"

Date: Wed, 12 Aug 2026 19:33:01 -0700

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Microsoft Teams Secure collaboration Work chat Hi, 1 unread

mention Your teammates are trying to reach you in Microsoft Teams Someone

sent a message in a high-priority chat Reply, Go to conversation Microsoft

Teams



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[208.57.4.233 listed in list.dnswl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[64.60.196.69 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[64.60.196.69 listed in sbl-xbl.spamhaus.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.57.4.233 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} New Message on Microsoft Teams Meeting



You will not see this in a MIME-aware mail reader.

--===============1666873558==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams

=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============1666873558==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/SfwfxfBZXv">Reply, Go to conversation<=

/A> =



Microsoft Teams


AIN>





Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============1666873558==--

Microsoft Teams phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 07:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuVCQ-00000000P8b-0k9a

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 07:10:22 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 07:10:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtpout.telepacific.net ([208.57.4.233]:33877 helo=smtp.telepacific.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuTKC-00000000AS9-2ggY

for doctor@netknow.ca;

Thu, 13 Aug 2026 05:10:26 -0600

Received: from CNABAL-PC10.king.local (unknown [64.60.196.69])

by smtp.telepacific.net (Postfix) with ESMTP id BA9801250CA;

Wed, 12 Aug 2026 19:33:39 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============0546516147=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "Microsoft Teams"

Date: Wed, 12 Aug 2026 19:32:39 -0700

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Microsoft Teams Secure collaboration Work chat Hi, 1 unread

mention Your teammates are trying to reach you in Microsoft Teams Someone

sent a message in a high-priority chat Reply, Go to conversation Microsoft

Teams



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[208.57.4.233 listed in list.dnswl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[64.60.196.69 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[64.60.196.69 listed in sbl-xbl.spamhaus.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.57.4.233 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} New Message on Microsoft Teams Meeting



You will not see this in a MIME-aware mail reader.

--===============0546516147==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams

=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============0546516147==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/SfwfxfBZXv">Reply, Go to conversation<=

/A> =



Microsoft Teams


AIN>





Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============0546516147==--

Microsoft Teams phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 04:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuSmz-0000000056o-21iW

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 04:35:57 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 04:35:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp.telepacific.net ([208.57.4.233]:45663)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuPqH-00000000Mdb-0tXw

for doctor@edmontonab.ca;

Thu, 13 Aug 2026 01:27:21 -0600

Received: from CNABAL-PC10.king.local (unknown [64.60.196.69])

by smtp.telepacific.net (Postfix) with ESMTP id 4BC1E124435;

Wed, 12 Aug 2026 19:31:43 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============1502743536=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "Microsoft Teams"

Date: Wed, 12 Aug 2026 19:30:43 -0700

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Microsoft Teams Secure collaboration Work chat Hi, 1 unread

mention Your teammates are trying to reach you in Microsoft Teams Someone

sent a message in a high-priority chat Reply, Go to conversation Microsoft

Teams



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[208.57.4.233 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[64.60.196.69 listed in zen.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.57.4.233 listed in bl.score.senderscore.com]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[64.60.196.69 listed in sbl-xbl.spamhaus.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} New Message on Microsoft Teams Meeting



You will not see this in a MIME-aware mail reader.

--===============1502743536==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams

=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============1502743536==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/SfwfxfBZXv">Reply, Go to conversation<=

/A> =



Microsoft Teams


AIN>





Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============1502743536==--

Microsoft Teams phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 04:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuSn4-00000000591-2ltz

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 04:36:02 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 04:36:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp-out.telepacific.net ([208.57.4.233]:42699 helo=smtp.telepacific.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuPqH-00000000Mdj-0tSr

for doctor@netknow.ca;

Thu, 13 Aug 2026 01:27:21 -0600

Received: from CNABAL-PC10.king.local (unknown [64.60.196.69])

by smtp.telepacific.net (Postfix) with ESMTP id 4BC1E124435;

Wed, 12 Aug 2026 19:31:43 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============1502743536=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "Microsoft Teams"

Date: Wed, 12 Aug 2026 19:30:43 -0700

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Microsoft Teams Secure collaboration Work chat Hi, 1 unread

mention Your teammates are trying to reach you in Microsoft Teams Someone

sent a message in a high-priority chat Reply, Go to conversation Microsoft

Teams



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[208.57.4.233 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[64.60.196.69 listed in zen.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.57.4.233 listed in bl.score.senderscore.com]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[64.60.196.69 listed in sbl-xbl.spamhaus.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} New Message on Microsoft Teams Meeting



You will not see this in a MIME-aware mail reader.

--===============1502743536==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams

=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============1502743536==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/SfwfxfBZXv">Reply, Go to conversation<=

/A> =



Microsoft Teams


AIN>





Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============1502743536==--

Microsoft teams phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 04:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuSnB-000000005BR-0rnG

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 04:36:09 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 04:36:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp.telepacific.net ([208.57.4.233]:39681)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuPqH-00000000Mdh-0tVZ

for doctor@nk.ca;

Thu, 13 Aug 2026 01:27:19 -0600

Received: from CNABAL-PC10.king.local (unknown [64.60.196.69])

by smtp.telepacific.net (Postfix) with ESMTP id 4BC1E124435;

Wed, 12 Aug 2026 19:31:43 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============1502743536=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "Microsoft Teams"

Date: Wed, 12 Aug 2026 19:30:43 -0700

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Microsoft Teams Secure collaboration Work chat Hi, 1 unread

mention Your teammates are trying to reach you in Microsoft Teams Someone

sent a message in a high-priority chat Reply, Go to conversation Microsoft

Teams



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[208.57.4.233 listed in list.dnswl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[64.60.196.69 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[64.60.196.69 listed in sbl-xbl.spamhaus.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.57.4.233 listed in bl.score.senderscore.com]

Subject: {SPAM?} New Message on Microsoft Teams Meeting



You will not see this in a MIME-aware mail reader.

--===============1502743536==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams

=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============1502743536==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/SfwfxfBZXv">Reply, Go to conversation<=

/A> =



Microsoft Teams


AIN>





Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============1502743536==--

Microsoft Teams phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 04:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuSnF-000000005DX-2caq

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 04:36:13 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 04:36:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp.telepacific.net ([208.57.4.233]:56479)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuPqH-00000000Mdm-0tQi

for doctor@nl2k.ab.ca;

Thu, 13 Aug 2026 01:27:19 -0600

Received: from CNABAL-PC10.king.local (unknown [64.60.196.69])

by smtp.telepacific.net (Postfix) with ESMTP id 4BC1E124435;

Wed, 12 Aug 2026 19:31:43 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============1502743536=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "Microsoft Teams"

Date: Wed, 12 Aug 2026 19:30:43 -0700

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Microsoft Teams Secure collaboration Work chat Hi, 1 unread

mention Your teammates are trying to reach you in Microsoft Teams Someone

sent a message in a high-priority chat Reply, Go to conversation Microsoft

Teams



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[208.57.4.233 listed in list.dnswl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[64.60.196.69 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[64.60.196.69 listed in sbl-xbl.spamhaus.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.57.4.233 listed in bl.score.senderscore.com]

Subject: {SPAM?} New Message on Microsoft Teams Meeting



You will not see this in a MIME-aware mail reader.

--===============1502743536==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams

=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============1502743536==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/SfwfxfBZXv">Reply, Go to conversation<=

/A> =



Microsoft Teams


AIN>





Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============1502743536==--

Microsoft Teams phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 13 Aug 2026 04:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuSms-0000000053M-0mx1

for dave@doctor.nl2k.ab.ca;

Thu, 13 Aug 2026 04:35:50 -0600

Resent-From: The Doctor

Resent-Date: Thu, 13 Aug 2026 04:35:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp-out.telepacific.net ([208.57.4.233]:49911 helo=smtp.telepacific.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuMCt-000000006Am-0OkK

for doctor@edmontonab.ca;

Wed, 12 Aug 2026 21:34:24 -0600

Received: from CNABAL-PC10.king.local (unknown [64.60.196.69])

by smtp.telepacific.net (Postfix) with ESMTP id 1A242123296;

Wed, 12 Aug 2026 19:28:55 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============0532043777=="

MIME-Version: 1.0

Subject: New Message on Microsoft Teams Meeting

To: Recipients

From: "Microsoft Teams"

Date: Wed, 12 Aug 2026 19:27:55 -0700

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Microsoft Teams Secure collaboration Work chat Hi, 1 unread

mention Your teammates are trying to reach you in Microsoft Teams Someone

sent a message in a high-priority chat Reply, Go to conversation Microsoft

Teams



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[208.57.4.233 listed in list.dnswl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[64.60.196.69 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

[208.57.4.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[64.60.196.69 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[64.60.196.69 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[64.60.196.69 listed in sbl-xbl.spamhaus.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.57.4.233 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[208.57.4.233 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

[64.60.196.69 listed in will-spam-for-food.eu.org]

Subject: {SPAM?} New Message on Microsoft Teams Meeting



You will not see this in a MIME-aware mail reader.

--===============0532043777==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Microsoft Teams

Secure collaboration Work chat

=



Hi, =



1 unread mention

=



Your teammates are trying to reach you in Microsoft Teams

Someone sent a message in a high-priority chat

Reply, Go to conversation Microsoft Teams

=



Regards,

Microsoft Teams

Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, W=

A 98052

You're receiving this because someone mentioned you in a chat on Microsoft=

Teams.



--===============0532043777==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Microsoft Teams















Microsoft Teams



Secure collaboration Work chat







Hi,



1 unread mention



Your teammates are trying to reach you in Microsoft Te=

ams



Someone sent a message in a high-priority chat


ss=3Dcta-button href=3D"https://t.co/SfwfxfBZXv">Reply, Go to conversation<=

/A> =



Microsoft Teams


AIN>





Regards,



Microsoft Teams





Microsoft Teams 2026 Microsoft Corporation, One Microsoft Way, Redmond, =

WA 98052



You're receiving this because someone mentioned you in a chat on Microso=

ft Teams.



--===============0532043777==--

Loan phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 12 Aug 2026 14:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuG1H-000000006oP-28e8

for dave@doctor.nl2k.ab.ca;

Wed, 12 Aug 2026 14:57:51 -0600

Resent-From: The Doctor

Resent-Date: Wed, 12 Aug 2026 14:57:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f181.google.com ([209.85.210.181]:42046)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuFkv-000000003HO-1Cjn

for sales@nk.ca;

Wed, 12 Aug 2026 14:41:05 -0600

Received: by mail-pf1-f181.google.com with SMTP id d2e1a72fcca58-84847482584so266266b3a.0

for ; Wed, 12 Aug 2026 13:40:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kesefmarketing.com; s=google; t=1786567204; x=1787172004; darn=nk.ca;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=tbZIXyF/GNVVf8IjUiKQ+oV/jqy4i5laBakVQZhtqkY=;

b=EYBGAeo33Zcg2OG0YC0bcK2kJBeffD0WtKoDiiHN4WUuehJ24U4VeiNlHX2v/AjK7b

NCrmIa+OFdE34Owonou3Ga51SnyJ7GW+uJDvKhE7ZPtbe6FZeAMNTcRqS+cdDZsoElnj

1kQ4TpSRbhMOZ3KQ52QaAY1szfqnHAHxnN5nOB6vCd5WBbZy+M/wL8fSQ1TKqyqQF6gD

0eesvF3tzU3Oi0D1ZwzCAnxLQt5ytGMTW7ojbwrtUn3IYCcSk6eHvaeBKpsf/fbAWwZP

uNlSj5xCYR0SuUSFFp0dU+barUCAQQhVxaBd8DCOZiIIwfOhMRTjeOA+fPqhvZgcnrV4

FJ/A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1786567204; x=1787172004;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=tbZIXyF/GNVVf8IjUiKQ+oV/jqy4i5laBakVQZhtqkY=;

b=kvjrmShxRPm7Inmjf59poq+05M1BuSt5vuZP29mSns2/u05YNrQsVAqkJfiWxuzRH/

3MBmBDWqVm9R0W8IX1PjNmreE7xK4n2gx4HHE8OC8fAcSy2cV9A3duLQZXw6183iGlaY

DaCT3UCYznoPVBULureC7Z6JZGltL81/9NkfQ4i2LTdNGKuTGqHRui8UwvdSsRG11KWo

ECVHff/2gWiaoxkirYafg72xZUCFpaomZuZuluJuxEab6JCCUcb38ndewITEgAKaGkTk

BSry/7Ftjee1ma8ZeZYU20z4BMXDssDSzzf75UvxEjDRs6T1xB2fjkZJVWr3rMC12QS1

QGCQ==

X-Gm-Message-State: AOJu0Yw1AOcTHfbfQ/jJrMBQA1dQwMR3cpRKOyO3mIZaI8STo5kE4NZf

yf2wb3h6BDvpl36KwniUtjIkrwCS/h9XjRd6x4HF2ySu9l6pV9IzVdpf/kMC54biaFE3CB2Qmty

xR5Qx

X-Gm-Gg: AR+sD11t3seTxUqVbrNXpvLfZicFGyHG6GS5mYzW9qZrtNqO9k/dr2NAsJhSRYouF24

YW9GL8CdAfvYI10gVLyG+ocmEwWS7Vs6BoSn/YGMMNTcfCRIJYrgcrvTZlmtkQ2oYICNGkHA2Bg

zCVLn/OZ03KmScpyJWiafS7nLt+U+mhgjRwwcJehZiVey+oBlTcXeDesupLe+oJdyUCo92dbIlJ

V/bWQjrIs6B6LOxeYr3iuGVrwi62wA/nkHtG1IYYG+/H39VGnzKjNfq92uxw6gCKl97cmiMsK/R

DueJszsJyvNOYkzDrZcmdvo2clcDW+IProQ1gHiXFkVX8rHF6eIIodA8gkt0g3c2Tq2RfbjPTrt

oVca6U+le+hOb6kqHNlHnhS2nIqgjZtmLSbNJo6nfk+oCzDgQ3nelxzc0uyNZsGc1Q6bdllnqCT

Dy0s5BPfD+hjMhpAuFqeAJgOfdqzStv9XM0Ewg1TEpSmK9p8CXuD/uB7RkwXNGNE8QdA3goRok4

/YXulMX9c3Mb78D3xHhGEWfMimz8beqH4iCznTJmoM=

X-Received: by 2002:a05:6a00:14d5:b0:847:70f4:613f with SMTP id d2e1a72fcca58-84fc7c1ec38mr395443b3a.12.1786567203427;

Wed, 12 Aug 2026 13:40:03 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-c0.close.com. [54.200.191.154])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-84fc5a68c60sm114648b3a.48.2026.08.12.13.40.02

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 12 Aug 2026 13:40:02 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============7946878310728263274=="

MIME-Version: 1.0

Subject: Re: Kesef Marketing | Smarter Access to Business Loans

From: =?utf-8?q?Lilian_Llanillo?=

To: =?utf-8?q?Gurkirat_Wirring?=

Date: Wed, 12 Aug 2026 20:40:02 +0000

Message-ID: <178656720216.7.1487486787664217380@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_nk8LpFsOBhJSXuOowoxSS5NguctysG6eZdZgsfW6yYW

References: <178646337461.7.1240611996543057914@smtpgw.close.com> <178646337461.7.8575171778634196756@smtpgw.close.com>

In-Reply-To: <178646337461.7.1240611996543057914@smtpgw.close.com>

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click



--===============7946878310728263274==

Content-Type: multipart/alternative; boundary="===============6079678544044073755=="

MIME-Version: 1.0



--===============6079678544044073755==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



**Hi Gurkirat, **



=20



**We noticed your Cash Advance application is still incomplete.**



=20



**You=E2=80=99re just a few steps away from securing up to $800,000 in fund=

ing within

48 hours.**



=20



**To move forward, please complete your application here: =20

**



[**Click to Start your Application

here**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1MVGGnNXqVx=

8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

K

MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadTyp=

e=3DAutomation)



=20



**and upload your last 3 months of bank statements. This will allow us to

finalize your review and match you with the best available funding options.=

**



=20



**If you have any questions or would prefer to speak directly, feel free to

call me at +1-866-216-5475 or 873-771-7630**



=20

**Best regards, =20

**



=20



**Lilian Llanillo**



**FUNDING ADVISOR**



=20



![email \(16px\).png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877403=

9066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lilia=

n@kesefmarketing.com)



![phone-call \(16px\).png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877413=

7354-phone-

call+%2816px%29.png)**+1 (873) 771-7630**



**____________________________**



![IMG_5340.jpg](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877416=

5068-IMG_5340.jpg)



=20



To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).



=20

=20

On Aug 11, 2026, at 09:49 AM, Lilian Llanillo

wrote: =20



> **Hi Gurkirat,**

>

> =20

>

>

> **This is Lilian Llanillo from Kesef Marketing.**

>

> =20

>

>

> **Welcome! I wanted to personally reach out and thank you for your intere=

st

> in business funding. We work with lenders across Canada to provide reliab=

le

> funding solutions that support growth, manage cash flow, and cover upcomi=

ng

> expenses=E2=80=94while helping you access competitive interest rates.**

>

> =20

>

>

> **If you=E2=80=99re open to exploring your options, you can get started h=

ere: =20

> **[**Click Here To Start Your

> Application**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1M=

VGGnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

> K

> MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadT=

ype=3DAutomation)

>

> **Once submitted, our team will review your information and present the b=

est

> available funding options tailored to your needs.**

>

> =20

>

>

> **If you have any questions or would prefer to speak directly, feel free =

to

> call me at +1-866-216-5475 or 873-771-7630**

>

> =20

>

>

> **Looking forward to connecting.**

>

> =20

>

>

> **Best regards, =20

> **

>

> =20

>

>

> **Lilian Llanillo**

>

> **FUNDING ADVISOR**

>

> =20

>

>

> ![email \(16px\).png](https://closeio-

> filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774=

039066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lil=

ian@kesefmarketing.com)

>

> ![phone-call \(16px\).png](https://closeio-

> filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774=

137354-phone-

> call+%2816px%29.png)**+1 (873) 771-7630**

>

> **____________________________**

>

> ![IMG_5340.jpg](https://closeio-

> filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774=

165068-IMG_5340.jpg)

>

> =20

>

>

> To stop receiving these emails, click

> [here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDni=

l9kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

> --tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

--===============6079678544044073755==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



Hi Gurkirat, 

W=

e noticed your Cash Advance application is still incomplete.
=


You=E2=80=99re just a few steps away from secur=

ing up to $800,000 in funding within 48 hours.


>
To move forward, please complete your application here:

strong>


rong>and upload your last 3 months of bank statements. This will allow us t=

o finalize your review and match you with the best available funding option=

s.

If you have any questions or w=

ould prefer to speak directly, feel free to call me at +1-866-216-5475 or 8=

73-771-7630

Best regards,
=



ont-weight: 700;">Lilian Llanillo

tyle=3D"font-weight: 700; color: rgb(57, 208, 150);">FUNDING ADVISOR=



3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774039066-email+%=

2816px%29.png" alt=3D"email (16px).png">
700;">
et=3D"_blank" rel=3D"noopener noreferrer nofollow">
ont-weight: 700;">lilian@kesefmarketing.com
<=

img src=3D"https://closeio-filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOg=

mo8WoImXFkS0Dtk%2F1778774137354-phone-call+%2816px%29.png" alt=3D"phone-cal=

l (16px).png"> +1 (873) 771-7630<=

/span>
_______=

_____________________

-filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F17787741=

65068-IMG_5340.jpg" alt=3D"IMG_5340.jpg" style=3D"width: 159px; height: 64.=

1129px;">


ribe-footer">


ed-text">

On Aug 11, 2026, at 09:49 AM, Lilian Llanillo <lilian@k=

esefmarketing.com> wrote:
Hi G=

urkirat,

This is Lilian Llanillo =

from Kesef Marketing.

Welcome! I =

wanted to personally reach out and thank you for your interest in business =

funding. We work with lenders across Canada to provide reliable funding sol=

utions that support growth, manage cash flow, and cover upcoming expenses=

=E2=80=94while helping you access competitive interest rates.
>

If you=E2=80=99re open to exploring your optio=

ns, you can get started here:

om/260672364104452?lead_id=3Dlead_1MVGGnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxa=

D3&legalBusiness=3DN K MAINTENANCE&fullName[first]=3DGurkirat&f=

ullName[last]=3DWirring&leadType=3DAutomation" rel=3D"noopener noreferr=

er nofollow">Click Here To Start Your Application
>
Once submitted, our team will review your information and pre=

sent the best available funding options tailored to your needs.
iv>

If you have any questions or would prefer to=

speak directly, feel free to call me at +1-866-216-5475 or 873-771-7630
trong>

Looking forward to connecting.
ong>

Best regards,

data-system-generated=3D"signature">

eight: 700;">Lilian Llanillo

=3D"font-weight: 700; color: rgb(57, 208, 150);">FUNDING ADVISOR
rong>


azonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774039066-email+%2816=

px%29.png" alt=3D"email (16px).png">
;">
=3D"_blank" rel=3D"noopener noreferrer nofollow">
t-weight: 700;">lilian@kesefmarketing.com

g src=3D"https://closeio-filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo=

8WoImXFkS0Dtk%2F1778774137354-phone-call+%2816px%29.png" alt=3D"phone-call =

(16px).png"> +1 (873) 771-7630
pan>
_________=

___________________

ilepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774165=

068-IMG_5340.jpg" alt=3D"IMG_5340.jpg" style=3D"width: 159px; height: 64.11=

29px;">


be-footer">


://ml.closeml.com/t/nk8LpFsOBhJSXuOowoxSS5NguctysG6eZdZgsfW6yYW/YVFsbTnwSw.=

png" alt=3D"" width=3D"1" height=3D"1" />

--===============6079678544044073755==--



--===============7946878310728263274==--