NetKnow Corporate Blog

Chinese language spam from Microsoft Outlook part 2

Posted by Dave Yadallee on Sunday, February 8. 2026

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 9f800f75-6856-4868-9cb6-08de66fdc1a8

X-MS-Exchange-CrossTenant-AuthSource: SJ0PR19MB6813.namprd19.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Feb 2026 10:35:20.5820

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR19MB6942

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ç¤¾å†…é€£çµ¡ ãƒ¡ãƒ¼ãƒ«å—é ˜å¾Œã€ç›´ã¡ã«æœ€æ–°ã®ç¤¾å†…é€£çµ¡ç¶²ã‚’æ›´æ–°ã—ã¦ãã ã•ã„ã€‚

æ°åã€éƒ¨ç½²ã€å½¹è·ã€å€‹äººé€£çµ¡å…ˆé›»è©±ç•ªå·ã‚’å¿…ãšã”è¨˜å…¥ãã ã•ã„ã€‚

å®Œäº†å¾Œã€ãƒ [...]

Content analysis details: (6.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:a03:448:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:448:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:448:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:448:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:448:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:448:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:448:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:448:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[52.103.23.11 listed in will-spam-for-food.eu.org]

[52.103.23.11 listed in will-spam-for-food.eu.org]

[52.103.23.11 listed in will-spam-for-food.eu.org]

[52.103.23.11 listed in will-spam-for-food.eu.org]

[52.103.23.11 listed in will-spam-for-food.eu.org]

[52.103.23.11 listed in will-spam-for-food.eu.org]

[52.103.23.11 listed in will-spam-for-food.eu.org]

[52.103.23.11 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.23.11 listed in dnsbl.ahbl.org]

[52.103.23.11 listed in dnsbl.ahbl.org]

[52.103.23.11 listed in dnsbl.ahbl.org]

[52.103.23.11 listed in dnsbl.ahbl.org]

[2603:10b6:a03:448:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:448:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:448:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:448:0:0:0:8 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.23.11 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.23.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.23.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.23.11 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.23.11 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.23.11 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[elijah1985ilona270ky(at)outlook.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[ritabelerom55(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

Subject: {SPAM?} =?utf-8?B?56S+6ZW344GL44KJ44Gu5omL57SZ?=

社内連絡

メール受領後、直ちに最新の社内連絡網を更新してください。

氏名、部署、役職、個人連絡先電話番号を必ずご記入ください。

完了後、メールにて私宛にご返信ください。

ご迷惑をおかけしますが、何卒ご了承ください。

新田恭一郎

Chinese language spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on Sunday, February 8. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: DAVE@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Feb 2026 05:29:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vp3uC-0000000068Z-3RwC

for DAVE@doctor.nl2k.ab.ca;

Sun, 08 Feb 2026 05:28:48 -0700

Resent-From: The Doctor

Resent-Date: Sun, 8 Feb 2026 05:28:48 -0700

Resent-Message-ID:

Resent-To: DAVE@doctor.nl2k.ab.ca

Received: from mail-westus3azolkn19012011.outbound.protection.outlook.com ([52.103.23.11]:15227 helo=PH8PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vp29G-00000000OmU-3CMb

for sales@nk.ca;

Sun, 08 Feb 2026 03:36:25 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=GhBSD0RTs6JtUt0ZgjrLuhq7Aj4kpYWrInbK+f5Z4T0CF8b97uTFxs2mJSRGtafb6IxOlQ+jlWjyde/28NdEVKyIoD0Sksnp80RSQFA2QJcQ+Vl+3L5p8D/A5uRiYca1mrHkPkFzGv7Y2CSXRxbgbHZfbzIoia8p6cOI0wVIxu94Vs7Vw4d27u0ojR1pDofqTZ9RECaa5MR2THC6lGH7+QEjRY68eAzWliEZTNSU7bzVlhwM6VPVSyiYQq6+5grVwtx2x1krpHanxpTBDsnhFYi/pCXioJApOghUpIsp4UBlpm66sa5td5WWwWGiMh9eGoVSPwZ3HOPh+UHVAWJ0ag==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=6mKP8/hm6vM0MFGGtJKeFLAvwmurImsqUdGz2YTfCOs=;

b=C2u5kNzJy4YiODXBzmAy+KGPhVs1/n9xbmyqskR6IcIUO/YkCn3+rjauiVBvPiXTVZ1+KqxFN/4aT4L/5KA53LfBTUkBqVjxH7JjkQ5ZBvjdnuWhJwsloFirlxiZxKJ0JBUT2HgZvFT+/2q3yeOrw1St01bdOi70Q4nJPVuqqxO3WFiatzi3gLz9kpKZb9z/LzLzPQWkObL/TI07vP6axc6vRkDFztEPO0lt3E5CdgEQbqX7irLGJYCJ+tO8u5SGZF3KTgLbZVoMvMMHoJliIEI7RoDDEpa6nvlWnjaPS1qTbdUyUkT7Xyo/uGfR6LGsLsf1eDlnhpaX+1yP5aVZUA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=6mKP8/hm6vM0MFGGtJKeFLAvwmurImsqUdGz2YTfCOs=;

b=l9VJ4MazXxl5U9DT32a2o93wcvtWGrWgibZw/tVKxV8fTRWAwmPpmqTPXKRmt5RSd+i6CfCcGt5crHh/FGqZO9rXU6Ql2nw7N0gCtNnDCtYssTp3j2KPB2BtD/bzifNorBeK35fv0LcDSTAJYeK+4F+2oH3rlm/NzJIXg6qpQ85d0mwfMzqzQN2TN573x5rG3tbZTEjwengr7sX9kNHKz3ETrHfjEnJA4lfKLj1TqFtdNu0blxldM6Gqlr5W7RdHt4fBLjbYr8wQzzVDApCajtTrj8+wWfhVx5UnDi2/bKt1WP4NfBzj+58vrE02gO6iC/Fm3e6vDEgQ5pb5DDUKWw==

Received: from SJ0PR19MB6813.namprd19.prod.outlook.com (2603:10b6:a03:448::8)

by SA1PR19MB6942.namprd19.prod.outlook.com (2603:10b6:806:2b0::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.18; Sun, 8 Feb

2026 10:35:21 +0000

Received: from SJ0PR19MB6813.namprd19.prod.outlook.com

([fe80::fcf0:66ac:a6aa:abda]) by SJ0PR19MB6813.namprd19.prod.outlook.com

([fe80::fcf0:66ac:a6aa:abda%4]) with mapi id 15.20.9587.016; Sun, 8 Feb 2026

10:35:20 +0000

Reply-To: ritabelerom55@gmail.com

Message-ID:

From: =?utf-8?B?IOaWsOeUsCDmga3kuIDpg44=?=

To: sales

Subject: =?utf-8?B?56S+6ZW344GL44KJ44Gu5omL57SZ?=

Date: Sun, 8 Feb 2026 18:35:12 +0800

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: base64

X-Mailer: Supmailer 46.0.3

X-ClientProxiedBy: SI2PR01CA0036.apcprd01.prod.exchangelabs.com

(2603:1096:4:192::22) To SJ0PR19MB6813.namprd19.prod.outlook.com

(2603:10b6:a03:448::8)

X-Microsoft-Original-Message-ID: <851F3D26F53D35D58E8B47BF4A78B28D@ixli>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SJ0PR19MB6813:EE_|SA1PR19MB6942:EE_

X-MS-Office365-Filtering-Correlation-Id: 9f800f75-6856-4868-9cb6-08de66fdc1a8

X-Microsoft-Antispam:

BCL:0;ARA:14566002|39105399006|20031999003|461199028|5072599009|10112599003|6090799003|23021999003|19110799012|15080799012|8060799015|40105399003|440099028|3412199025|26104999006;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?SGxZbit6MEtML0k4RFdvVFUyc2dkTWgxdlVkQ1ZzWkFtSGdRa1lKZDVLQnFj?=

=?utf-8?B?SjNNa2xTaEtQb1EycUpDUzNzQ29MaDNtc3l4OUplQW1zVEhUaFRpUTJDekto?=

=?utf-8?B?ajk4WkFDTTBtM1hNNzFlMFk3eWpFK1ZybWphYlk5OEplRXo4b2s5WDF4bW1N?=

=?utf-8?B?QjVuZ2dvVWttQStnYk8xS3ZpOWlyVk1odlJZZHNjdWIzVXFVUmlSVnRmRkkv?=

=?utf-8?B?b1o2Nm5aYWtIQVdhaUlpWU5ydTlyeHlZbVN5bUhUOWhGbmdiQ1JiMG5JaWZG?=

=?utf-8?B?alhXSWFIVjIwY2ptTEhQcHNpZ3J6ZzdzOFZ1QlowVzRMM0UvSGtLelRyYkd0?=

=?utf-8?B?eWM4bWhubVBVRHhXVGpYL1JGOUNxTmpHRDZ3cFJ1WVFnR3FYTlIyaTlCMGZC?=

=?utf-8?B?RWkyLy9pN21rYXNqLzNkZFF2bFZKV3FsRi82VTh0UWM4QUhBdDdvejA3Mklt?=

=?utf-8?B?VVNPcmt6T3lUZisxejF0UTB5WGp3cmdFV3FTa1dHK1B3WTVHanFJZDdJODBn?=

=?utf-8?B?YXlKSTVzczNHTVJkaFpKY3FvRTJVM0JnMUFuRFphdG04OFFMYjA2Z3h6bFFZ?=

=?utf-8?B?a2N1MHZRZWsyWWo3SXpTK3d6L2R0dytPREZiWHphaVVIZ3FEK3RIUWdrL2t6?=

=?utf-8?B?ckhzbWhkZ2Nka05kbGpySWF4SEF4dDZidTJUSC83M1dUVGNnNnR0dEVzZStt?=

=?utf-8?B?aUpOTFcrTzJxd1VraUk0L0Q3aWUxSmdvQmtsUUpnM2cvcENORlVuTzRGb3NN?=

=?utf-8?B?M0hWd09DbUJ4cm1PRzg5SGx1ZFhmb0EzNDdaUmI4a01wYlZ0Tkdqa1FJZHB2?=

=?utf-8?B?U09WYURoZzRmV2IzQ3BMZWhNRHIrdmhPdjVBUENDTFV3a2ZxU3FpQXhUcitM?=

=?utf-8?B?eVdaTVdxck5WeDNZMkg0OFVXUC91TysyZXB4eHFFTzJoMVlrSGJmSjhJMlRx?=

=?utf-8?B?bHQxc0lCWU5KMDFRUHRmUGlQMmFOMXFLN05pRTNJWXV4UVRFcm1iV1lyL0Z4?=

=?utf-8?B?VUlBRm1hMjI5TXBNZ25GYXhBVUVmK2ozaXFUTWFheDhEZ1BTelVranRTWUJM?=

=?utf-8?B?eWpyajlzZ24vay9WZUF3b2REMHZwamVLV0kwK1ExRkJRK1JINmMxTEFqMXMx?=

=?utf-8?B?d0RUeDRJWGZ0QnhocGVpNkJQanRSOFdWQlppRFQ2bHQ0MUZDY2E0R3hLUHlv?=

=?utf-8?B?SjA5Mk0ycXRQampWblNxcmJYZkVKSExlNkxxUzcvb1FuNHFuVXBVQkdoY21F?=

=?utf-8?B?WXRKYXVCdUxKQXVPREVNRlJrY0ZBL0dOYVMycTJYRDVFSGQ1QUZuWWpzTGwx?=

=?utf-8?B?TkcwdXoya053ejhMb1p0ZnpxU1ZUeFAwSlB1UmVZcnU3WEtwTUNlUUJ5dytZ?=

=?utf-8?B?UFEvaEFQdjN2ZDhoMlNBNG9Qa2tlbFdGVEhON0VBRUYyRDA2MDlid3U2cEYz?=

=?utf-8?B?QkVRQTUzMWdLV2dlcnd2QkpEVVhlKzhLTHpJK2liOHlodEFpZjhCMDZZVVNk?=

=?utf-8?B?eVBlRHFzcFVUU0JhNDlXdTM2WU5Cdy8vTFYwY0tMcDFOWkVhTVFxdVUxQkZw?=

=?utf-8?B?eFpKYWFwaitRNjV2UEpNemNEVXZKaWFIYnB0Q01lTjd1TDgxWVRodnBqWU00?=

=?utf-8?B?NThZVm91N3hIM2NTRGRrVEpwalFhdEMzQWg2bk1UZWxWZUc3bHhLeXhVVURl?=

=?utf-8?B?SlE4cktxajYreS9teEUyM0tMUVhHWXdUR1hxR28wWU1naVBBWldSK2NmSzdn?=

=?utf-8?Q?CImNLmr1fY0M7JsvATjFd5P2/jiFS8yPouZHd/R?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?VFZtVldBa0JZbTBqN0E0QXBIaGxONnlrSFB4anpaaVZkYUlvcVFnMzlhYllC?=

=?utf-8?B?ZHJwaU5saEFVK2h6SDFJOGtSWGIySlhxd290WmVVUllQRVgxRzUvaUlodnBB?=

=?utf-8?B?ZnliVDBHL09RdGpDK21LRDBRMEhsdzk4aXBvOGp2aEdtY0ZzNU9velZDaytT?=

=?utf-8?B?WVUrWmlVc05tbEd5TEkzSlg5SjFsNjdYS1E4em8yRHdQVm92SmJWOEJvSkhj?=

=?utf-8?B?RGJyR3pqbmlUdWFNYWNwRlNIek5qQjk2cUhMNHpOZXN3aEhRSUFwREIxKzMz?=

=?utf-8?B?NDlxRGhrWWNBMXpVN2JXdjBCVU1QTVR1TjJWM3BzSHdzUGhzaGl1Y3plODFy?=

=?utf-8?B?NVRxYThJR29MVElXaGZvU2RYNElGY2Y1VUVlSi9KbDZFR1NaSFkzQ3paZEhw?=

=?utf-8?B?TlpIY0ZLTk1HRk1qbHA3NWw4M24wc2NXR21BcnNUOGpodHQzNzRRbTRHN0lF?=

=?utf-8?B?SkliMFF6eTF6Y1pFeGdFVEF4M3podGJyblVjaCtMeEE1SHJYWTNEVkxKYy9L?=

=?utf-8?B?YWl2L095MFNRZmpVVUxGWGtlTGtSZlBXYkI5Qjk1Rkl0RjgxTUVoaGpya3pG?=

=?utf-8?B?V0NOdjlubzVLM2puSEd5SllYTjZ1YW5UamxKTGllTE14YU5qVVVDOVBGM3Ev?=

=?utf-8?B?czBJMHJSZWYvYVJwUFl0RVB5OFRRUlhtNWRMNHRreGVZb054TTl1YUpLNmVC?=

=?utf-8?B?MHZUcjBaaFJ0RmJlOEhjS1VMTVNucUEwWjNEVVlQRWtkNm1ndmtNUGpVbWZC?=

=?utf-8?B?R05BR1R6NkRxYXNRWWI4OGplcGRiZzEwSzBJdTZvdEo2Ukg4Y2tQWHlGWTJj?=

=?utf-8?B?ZVN0NUFUbFhYNFRlT0FWQjVhNEs0VUdTa2ZuaTErQndDVlZYaWhsRTZhYkwx?=

=?utf-8?B?ZmR4YUdhSGJFeHpiRWFHMmwxcDMyUWE5YkZzRWw2VVgydjlJOUliemdlNERD?=

=?utf-8?B?azNKbHpFNHBIT3RrempxWm5zYmhXSzcwZ3Aza2xQVUFQM25XWENvRllESGFy?=

=?utf-8?B?VXhyYzF4TWMzWDlNbHdwcWNJNG96NkF3WDhlSmJQQ09zYlRlWGZFK2JBZlJy?=

=?utf-8?B?b01ycWFESldZUHBneWR3OFlyb00vZkhJUVlnLythNlpTWTlMejA3dlAvRkVE?=

=?utf-8?B?TWtvOC9LV244RHErZzRvUE9sQmJ1aGhJZnEwMWpFVUZLWjZrS1hjU00wQ0kr?=

=?utf-8?B?Mk5kNWszQi9aRzhyZ1hyZTRhdFFxcXJ3VGNtYno2ZmZoY0VyengrWFdmVzAx?=

=?utf-8?B?UmFuc0l3bGZzdlhMbGllQ2tWMGp2Y2hZODk1R1dITGhVenJ0LzNwRDZzeEpn?=

=?utf-8?B?cFg2SWVzamQ0RTlXcGZXU0xwekRNV3I3UCtLc2NRTWVWMUpOeGhZdk1Hc0or?=

=?utf-8?B?SmdXVmxNTWJIS2tseFBsR1REeVYveTNpRjhNSjdJSGZOSkM1Q00reG9acWVs?=

=?utf-8?B?ZzEyMVZ5WDVSVWhvZWViZTJFbXJIUC9aeHBQd0tqaG45MXFHalZobEJ3Z0Jz?=

=?utf-8?B?c0VxRVdZaVhlZHAwbnZOSmo2aDB6TzNYbk9SaHZvN3AwcHRKZ0lLaU9aTXFG?=

=?utf-8?B?aUxiOHFUZzhUSzNXVlFmaVQxYTlNYlFqaURsY2FCS0tJbldOeHNjOGUybTJw?=

=?utf-8?B?L3IwdEdiZzcrMEtpSDRqZXVsZERhNWZ6aW9OUUxBaEN4RU1ScWlsZm9XdmRn?=

=?utf-8?B?cWVDNnJBOWl3b2VFR2FVekh5WVgvOUVPNTZCQjdTdmxOdWxTQU4zWDVaOE5y?=

=?utf-8?B?Ympka3l2S1IwSElRMDgzTXI3NjNHSEZycU1wSWFGTjBhY2xlcVE5QUttQTht?=

=?utf-8?B?bTZkR3FXTVloSW1uWGpmRlRESEl2ZkViYlhucmV5WFhVNXhOWkd0cnlSQzFj?=

=?utf-8?B?cXlCNnhuUS82QzVpNWxyVUoyK21qMWJCZDc4eDVIc3BGWlE9PQ==?=

Silomix spam from Google Gmail

Posted by Dave Yadallee on Sunday, February 8. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sun, 08 Feb 2026 01:50:00 -0700

Received: from mail-yw1-f194.google.com ([209.85.128.194]:50307)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vp0Tv-00000000EJp-33EW

for dave@nk.ca;

Sun, 08 Feb 2026 01:49:36 -0700

Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-7927261a3acso22182137b3.0

for ; Sun, 08 Feb 2026 00:48:39 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1770540514; cv=none;

d=google.com; s=arc-20240605;

b=DE/aU1APs1nqdjzMae4PE4jeHv8++xijGjDC2MUozEXrfh8dug65xd2g8A7quEQb4X

3p197QUSTtDVKkwlsRJo1DD43FB2h+r313lN1RxD9G00AxzZx263p2+ctMB0Hwd9Srf1

6tg+oGSPIqnBKOrlzbq4UM4LVCo2svkazPLFYVBQHKZVBwsuaQTCtqn3VsSNHSE36yuH

rqHtsUM1WQSFtxeiSMJX/J2U+mzQk515Zm4BKKSinWUXhRjKe2c0jlLnNTKz1Rkv2aK0

6roDY2w72jGMa1C2jsvk2BDSv1mzcirwfXleWElPQJGzt4FTaFmr/A7rhrWL+pnYGtan

DkYQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=LavRMLK/ONbHFJtotfrskhBg53Lkxi/cvK74WlHQOU4=;

fh=7eRcX74XgtbDnJzrXCnQpsNsDoGO4vW7UkPvaxsuRjY=;

b=LfX0Sex6dExl+hnOu1tTGVHdk8RpVTMd23n+X+xtgYpheD6KNjKyx0lwXQNeM4F+zr

V1SkOnsk8b7OWYSr3hXF1FMcquVC7hjbrRUmAdmOWH2I8Q9UUDH6XTgxLsSnuUrJIAGa

5yDt41dEIlb3fbplf1V0u+VXwt8nC7bLLbdpRA9barzXMq9v2DiTKulZivhLUkjFhPw6

n451a+p+J6tmGyf7CX0VmFPM0ofTCnj/+2m+rez8w1tJRkVylSYoxTVoSTAradD7OSNB

J5g8/3TADSjuJWEmh0J4f8eK8n+g2v1ngt5DycH31SOPMMg0vHeW69pgZhOBGB3sBW+c

sr/Q==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1770540514; x=1771145314; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=LavRMLK/ONbHFJtotfrskhBg53Lkxi/cvK74WlHQOU4=;

b=MB6mObKHA+3VTeZ9n28Qi1UJK7ptDvAD0Ta0yv9fEYQ1kyWVf5U77AddqXxTfI84ZR

iXd+fO3MMqQk4FChpRFa4YYaHhELQLTYFB9sMpFf3CHjgkbZoo474INIOu7Iq48xy1NE

X8J4uctl3R3j41X/WeDcc7rzPHBZodWMFkYcSpda4n/GbHQh5bqwu4SsoENsVJc4sV5d

5kpf4cldmIwzZ3R/+X1nMNSw8T0FrwtlLOi64KwUeJHrRYFbtcVDz13WwQQpPv7MiRGp

7AvFm/Iq8QrZv2+DnwrBISc0DPXx5WFMifDHEQHQb28uisTSF4cT691JkwD7p7oLyKwy

KW5Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770540514; x=1771145314;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=LavRMLK/ONbHFJtotfrskhBg53Lkxi/cvK74WlHQOU4=;

b=isxoSZMePnlhczmfIEArSwV7lB2NjLXjDMIeY1bMohp/qwOv/eAGlbTq/cmV4AKCa2

sxEXQZkhGTc0a4JeFJkW+j8ViCn38DK6niNiHreLpBwM5mlQ/AzkqqXxewe2YwcQmtRW

Rdg3LRyQ8jIFWRuuPhQeqSbVWDMt7a2s21aG9KNX4fNcSPmzzBGsrpOI0WsULA8oBPKS

LHsw1G6U7Pn0msjSG4o60T3XDTqsS4voIY+86EnuCZTF47hrv81oSaxK++9+BWtvE86U

MxWU/xC46B2ZK3DAUnbP+FkM42HKgD0TDGGusdAfZ6JO1QY3wmL/3UpJu1vQL/KoHxPX

+OYw==

X-Forwarded-Encrypted: i=1; AJvYcCVL3NNDBbFUWTkeHR9zJiizbrCY3rIIJSejazXGRE+9Mm+7W6/7QAvP0/hNfMuQjOCslDKg@nk.ca

X-Gm-Message-State: AOJu0Yy79t3eUx8OFQFV/noiNaINhJnjZlRDxDhYWPIKzWkY/o6Z29Jp

ciVoGrdKiQBf3EaMxoNEv1zJSETb+rAWU4/0ZetRXfSAYSFZw93c3xAZfoG/gYO6XR25zP9cCLM

99eZad/VOEm/na5oruTXZrPtorH36xRc=

X-Gm-Gg: AZuq6aIblyFCqgCArioFenxLUYmEFL4Gqv19Jjy/F5JYTGIatETvEV+BMYV2kEXT/Iy

Q5vjlVBhx+WdwS9w8/qH76cjryiCXUyd8z0qQ5RCydJktiOfm2r2MFfVp+dHwfzXfMMEr/uvnZI

GPgCMV5enVWtDEMRcKi3WfRVvVPN8Y4bksnINhxKDIxEh1/a17CXVQ9M0g0Dtysk3UmshgK6u7a

s3Q36q+Kc30qzCY3YmFAZkaQHNKk1jVWrVbyw899OddYPwzScDVC5VfldJjxUurZXtPYnEuup+9

eXeB66c=

X-Received: by 2002:a05:690c:7341:b0:795:254a:b431 with SMTP id

00721157ae682-7952ab3b846mr74799777b3.40.1770540513663; Sun, 08 Feb 2026

00:48:33 -0800 (PST)

MIME-Version: 1.0

From: Annette Callow

Date: Sun, 8 Feb 2026 11:48:20 +0300

X-Gm-Features: AZwV_Qi8eglWhRqxEVFXiYjV8w0kH4BDoAtfp6kNbPT_eSX-z4GhogXUGFZyIio

Message-ID:

Subject: Your Trusted Partner in Storage & Logistics

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000609f17064a4c16f1"

Bcc: dave@nk.ca

--000000000000609f17064a4c16f1

Content-Type: text/plain; charset="UTF-8"

Dear Sir/Madam,

I am writing on behalf of SILOMIX B.V, a storage and shipping company. We

currently have available storage space for lease in both Rotterdam and

Houston.

To move forward, please send us a Letter of Intent detailing the product

name, quantity, and preferred port. This will enable us to draft a Tank

Storage Agreement (TSA) for your clients.

For any inquiries, you can reach us at:

Email: info@silomixterminals.com or storage@silomixterminals.com

Website: www.silomixterminals.com

We are eager to assist you in finding the perfect storage solution to meet

your needs. Our facilities are accessible 24/7, allowing for convenient

retrieval of your items.

Thank you for considering our services. We look forward to supporting your

storage requirements.

Best regards,

Stefan Dony

Silomix B.V. Representative

--000000000000609f17064a4c16f1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Dear Sir/Madam,

I am writing on behalf of SILOMIX B=

.V, a storage and shipping company. We currently have available storage spa=

ce for lease in both Rotterdam and Houston.

To move forward, please =

send us a Letter of Intent detailing the product name, quantity, and prefer=

red port. This will enable us to draft a Tank Storage Agreement (TSA) for y=

our clients.

For any inquiries, you can reach us at:

Email:=

=C2=A0info@s=

ilomixterminals.com=C2=A0or=C2=A0
nals.com" target=3D"_blank">storage@silomixterminals.com

Website=

:=C2=A0www.s=

ilomixterminals.com

We are eager to assist you in finding the pe=

rfect storage solution to meet your needs. Our facilities are accessible 24=

/7, allowing for convenient retrieval of your items.

Thank you for c=

onsidering our services. We look forward to supporting your storage require=

ments.

Best regards,
Stefan Dony
Silomix B.V. Representative
div>

--000000000000609f17064a4c16f1--

Silomix spam from Google Gmail

Posted by Dave Yadallee on Sunday, February 8. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sun, 08 Feb 2026 01:50:00 -0700

Received: from mail-yw1-f194.google.com ([209.85.128.194]:50307)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vp0Tv-00000000EJp-33EW

for dave@nk.ca;

Sun, 08 Feb 2026 01:49:36 -0700

Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-7927261a3acso22182137b3.0

for ; Sun, 08 Feb 2026 00:48:39 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1770540514; cv=none;

d=google.com; s=arc-20240605;

b=DE/aU1APs1nqdjzMae4PE4jeHv8++xijGjDC2MUozEXrfh8dug65xd2g8A7quEQb4X

3p197QUSTtDVKkwlsRJo1DD43FB2h+r313lN1RxD9G00AxzZx263p2+ctMB0Hwd9Srf1

6tg+oGSPIqnBKOrlzbq4UM4LVCo2svkazPLFYVBQHKZVBwsuaQTCtqn3VsSNHSE36yuH

rqHtsUM1WQSFtxeiSMJX/J2U+mzQk515Zm4BKKSinWUXhRjKe2c0jlLnNTKz1Rkv2aK0

6roDY2w72jGMa1C2jsvk2BDSv1mzcirwfXleWElPQJGzt4FTaFmr/A7rhrWL+pnYGtan

DkYQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=LavRMLK/ONbHFJtotfrskhBg53Lkxi/cvK74WlHQOU4=;

fh=7eRcX74XgtbDnJzrXCnQpsNsDoGO4vW7UkPvaxsuRjY=;

b=LfX0Sex6dExl+hnOu1tTGVHdk8RpVTMd23n+X+xtgYpheD6KNjKyx0lwXQNeM4F+zr

V1SkOnsk8b7OWYSr3hXF1FMcquVC7hjbrRUmAdmOWH2I8Q9UUDH6XTgxLsSnuUrJIAGa

5yDt41dEIlb3fbplf1V0u+VXwt8nC7bLLbdpRA9barzXMq9v2DiTKulZivhLUkjFhPw6

n451a+p+J6tmGyf7CX0VmFPM0ofTCnj/+2m+rez8w1tJRkVylSYoxTVoSTAradD7OSNB

J5g8/3TADSjuJWEmh0J4f8eK8n+g2v1ngt5DycH31SOPMMg0vHeW69pgZhOBGB3sBW+c

sr/Q==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1770540514; x=1771145314; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=LavRMLK/ONbHFJtotfrskhBg53Lkxi/cvK74WlHQOU4=;

b=MB6mObKHA+3VTeZ9n28Qi1UJK7ptDvAD0Ta0yv9fEYQ1kyWVf5U77AddqXxTfI84ZR

iXd+fO3MMqQk4FChpRFa4YYaHhELQLTYFB9sMpFf3CHjgkbZoo474INIOu7Iq48xy1NE

X8J4uctl3R3j41X/WeDcc7rzPHBZodWMFkYcSpda4n/GbHQh5bqwu4SsoENsVJc4sV5d

5kpf4cldmIwzZ3R/+X1nMNSw8T0FrwtlLOi64KwUeJHrRYFbtcVDz13WwQQpPv7MiRGp

7AvFm/Iq8QrZv2+DnwrBISc0DPXx5WFMifDHEQHQb28uisTSF4cT691JkwD7p7oLyKwy

KW5Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770540514; x=1771145314;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=LavRMLK/ONbHFJtotfrskhBg53Lkxi/cvK74WlHQOU4=;

b=isxoSZMePnlhczmfIEArSwV7lB2NjLXjDMIeY1bMohp/qwOv/eAGlbTq/cmV4AKCa2

sxEXQZkhGTc0a4JeFJkW+j8ViCn38DK6niNiHreLpBwM5mlQ/AzkqqXxewe2YwcQmtRW

Rdg3LRyQ8jIFWRuuPhQeqSbVWDMt7a2s21aG9KNX4fNcSPmzzBGsrpOI0WsULA8oBPKS

LHsw1G6U7Pn0msjSG4o60T3XDTqsS4voIY+86EnuCZTF47hrv81oSaxK++9+BWtvE86U

MxWU/xC46B2ZK3DAUnbP+FkM42HKgD0TDGGusdAfZ6JO1QY3wmL/3UpJu1vQL/KoHxPX

+OYw==

X-Forwarded-Encrypted: i=1; AJvYcCVL3NNDBbFUWTkeHR9zJiizbrCY3rIIJSejazXGRE+9Mm+7W6/7QAvP0/hNfMuQjOCslDKg@nk.ca

X-Gm-Message-State: AOJu0Yy79t3eUx8OFQFV/noiNaINhJnjZlRDxDhYWPIKzWkY/o6Z29Jp

ciVoGrdKiQBf3EaMxoNEv1zJSETb+rAWU4/0ZetRXfSAYSFZw93c3xAZfoG/gYO6XR25zP9cCLM

99eZad/VOEm/na5oruTXZrPtorH36xRc=

X-Gm-Gg: AZuq6aIblyFCqgCArioFenxLUYmEFL4Gqv19Jjy/F5JYTGIatETvEV+BMYV2kEXT/Iy

Q5vjlVBhx+WdwS9w8/qH76cjryiCXUyd8z0qQ5RCydJktiOfm2r2MFfVp+dHwfzXfMMEr/uvnZI

GPgCMV5enVWtDEMRcKi3WfRVvVPN8Y4bksnINhxKDIxEh1/a17CXVQ9M0g0Dtysk3UmshgK6u7a

s3Q36q+Kc30qzCY3YmFAZkaQHNKk1jVWrVbyw899OddYPwzScDVC5VfldJjxUurZXtPYnEuup+9

eXeB66c=

X-Received: by 2002:a05:690c:7341:b0:795:254a:b431 with SMTP id

00721157ae682-7952ab3b846mr74799777b3.40.1770540513663; Sun, 08 Feb 2026

00:48:33 -0800 (PST)

MIME-Version: 1.0

From: Annette Callow

Date: Sun, 8 Feb 2026 11:48:20 +0300

X-Gm-Features: AZwV_Qi8eglWhRqxEVFXiYjV8w0kH4BDoAtfp6kNbPT_eSX-z4GhogXUGFZyIio

Message-ID:

Subject: Your Trusted Partner in Storage & Logistics

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000609f17064a4c16f1"

Bcc: dave@nk.ca

--000000000000609f17064a4c16f1

Content-Type: text/plain; charset="UTF-8"

Dear Sir/Madam,

I am writing on behalf of SILOMIX B.V, a storage and shipping company. We

currently have available storage space for lease in both Rotterdam and

Houston.

To move forward, please send us a Letter of Intent detailing the product

name, quantity, and preferred port. This will enable us to draft a Tank

Storage Agreement (TSA) for your clients.

For any inquiries, you can reach us at:

Email: info@silomixterminals.com or storage@silomixterminals.com

Website: www.silomixterminals.com

We are eager to assist you in finding the perfect storage solution to meet

your needs. Our facilities are accessible 24/7, allowing for convenient

retrieval of your items.

Thank you for considering our services. We look forward to supporting your

storage requirements.

Best regards,

Stefan Dony

Silomix B.V. Representative

--000000000000609f17064a4c16f1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Dear Sir/Madam,

I am writing on behalf of SILOMIX B=

.V, a storage and shipping company. We currently have available storage spa=

ce for lease in both Rotterdam and Houston.

To move forward, please =

send us a Letter of Intent detailing the product name, quantity, and prefer=

red port. This will enable us to draft a Tank Storage Agreement (TSA) for y=

our clients.

For any inquiries, you can reach us at:

Email:=

=C2=A0info@s=

ilomixterminals.com=C2=A0or=C2=A0
nals.com" target=3D"_blank">storage@silomixterminals.com

Website=

:=C2=A0www.s=

ilomixterminals.com

We are eager to assist you in finding the pe=

rfect storage solution to meet your needs. Our facilities are accessible 24=

/7, allowing for convenient retrieval of your items.

Thank you for c=

onsidering our services. We look forward to supporting your storage require=

ments.

Best regards,
Stefan Dony
Silomix B.V. Representative
div>

--000000000000609f17064a4c16f1--

Nigerian spam from Vietnam

Posted by Dave Yadallee on Sunday, February 8. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Feb 2026 19:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vouOp-000000008x8-3nZu

for dave@doctor.nl2k.ab.ca;

Sat, 07 Feb 2026 19:19:47 -0700

Resent-From: The Doctor

Resent-Date: Sat, 7 Feb 2026 19:19:47 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp.toaan.gov.vn ([222.255.0.41]:54866 helo=mailgw.toaan.gov.vn)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vorsF-000000008Vc-1nlQ

for sales@nk.ca;

Sat, 07 Feb 2026 16:38:08 -0700

DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=toaan.gov.vn; s=dkim;

t=1770508077; bh=wIJsnyHtYCAj41D44jGwNzVpYCA=; l=484;

h=Reply-To:From:Subject;

b=ERnch2Nm/XhuyIsC5vpiJjn1bNK1PujEqLOuvQkD0oQk8pw+qLPZM7C6u7pQtkf7G

Q0+3tdGa+zbWwOnNE3ed7X8/lYBgqKJGBLd3/eyQ5NFOSXhZkadHlMHSGujQZU6Oxd

cqdQ4YlrjC7UlZfxltgEPhS+s8C7q8EJxlGbkmXs=

Received: from toaan.gov.vn (unknown [131.108.162.24])

(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(No client certificate requested)

by Forcepoint Email with ESMTPSA id 2D346E55CE451DE848CB;

Sun, 8 Feb 2026 06:46:42 +0700 (+07)

Reply-To: info@agrobest.org

From: info

Subject: business inquiry

Date: 8 Feb 2026 05:06:41 +0530

Message-ID: <20260208050626.EDAEE8C503549A0A@timexco.com.vn>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 18.8

X-Spam_score_int: 188

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, My name is Ken Bruce from the UK. Our company is seeking

a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you wou [...]

Content analysis details: (18.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[222.255.0.41 listed in bb.barracudacentral.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[131.108.162.24 listed in dnsbl.ahbl.org]

[131.108.162.24 listed in dnsbl.ahbl.org]

[131.108.162.24 listed in dnsbl.ahbl.org]

[131.108.162.24 listed in dnsbl.ahbl.org]

[222.255.0.41 listed in dnsbl.ahbl.org]

[222.255.0.41 listed in dnsbl.ahbl.org]

[222.255.0.41 listed in dnsbl.ahbl.org]

[222.255.0.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[131.108.162.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[131.108.162.24 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[131.108.162.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[131.108.162.24 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[131.108.162.24 listed in sbl-xbl.spamhaus.org]

[131.108.162.24 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[131.108.162.24 listed in zen.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[222.255.0.41 listed in sa-trusted.bondedsender.org]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[222.255.0.41 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.6 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)

[222.255.0.41 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[222.255.0.41 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[222.255.0.41 listed in bl.score.senderscore.com]

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

Subject: {SPAM?} business inquiry

Hello,

My name is Ken Bruce from th=

e UK. Our company is seeking a reliable supplier for a specific raw materia=

l for our production line.
If this is a contract you can undertake, plea=

se let me know if you would be open to discussing this opportunity further.=

Best regards,
Ken Bruce.

Nigerian spam from Vietnam

Posted by Dave Yadallee on Sunday, February 8. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Feb 2026 19:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vouOk-000000008wZ-3J6A

for dave@doctor.nl2k.ab.ca;

Sat, 07 Feb 2026 19:19:42 -0700

Resent-From: The Doctor

Resent-Date: Sat, 7 Feb 2026 19:19:42 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp.toaan.gov.vn ([222.255.0.41]:48874 helo=mailgw.toaan.gov.vn)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vorq9-000000008No-2HTv

for root@nk.ca;

Sat, 07 Feb 2026 16:35:58 -0700

DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=toaan.gov.vn; s=dkim;

t=1770507947; bh=wIJsnyHtYCAj41D44jGwNzVpYCA=; l=484;

h=Reply-To:From:Subject;

b=kqucl2Y6MwYAUijMQX4Jt5sT0hhCy69OS/jdBTXtoM8OB9tUA82me7J4n+lSv19LN

sWT55C38PGCoC2OlIENZXKOsfcPL736Wkx7r9D8x1kpT0s3OXRYmGpOgjbdEW6nF3B

ukK1l/tXhdM6sHenNs38E7AlE9KdLGgbgs3hMsMw=

Received: from toaan.gov.vn (unknown [131.108.162.24])

(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(No client certificate requested)

by Forcepoint Email with ESMTPSA id EBA9E7ECC5AB02BE7050;

Sun, 8 Feb 2026 06:44:29 +0700 (+07)

Reply-To: info@agrobest.org

From: info

Subject: business inquiry

Date: 8 Feb 2026 05:04:30 +0530

Message-ID: <20260208050425.1D8BE897201F97C7@timexco.com.vn>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 22.5

X-Spam_score_int: 225

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, My name is Ken Bruce from the UK. Our company is seeking

a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you wou [...]

Content analysis details: (22.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[131.108.162.24 listed in dnsbl.ahbl.org]

[131.108.162.24 listed in dnsbl.ahbl.org]

[131.108.162.24 listed in dnsbl.ahbl.org]

[131.108.162.24 listed in dnsbl.ahbl.org]

[222.255.0.41 listed in dnsbl.ahbl.org]

[222.255.0.41 listed in dnsbl.ahbl.org]

[222.255.0.41 listed in dnsbl.ahbl.org]

[222.255.0.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[131.108.162.24 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[131.108.162.24 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[131.108.162.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[131.108.162.24 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[131.108.162.24 listed in sbl-xbl.spamhaus.org]

[131.108.162.24 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[131.108.162.24 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[222.255.0.41 listed in bb.barracudacentral.org]

2.6 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)

[222.255.0.41 listed in bl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[222.255.0.41 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

[131.108.162.24 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

Subject: {SPAM?} business inquiry

Hello,

My name is Ken Bruce from th=

e UK. Our company is seeking a reliable supplier for a specific raw materia=

l for our production line.
If this is a contract you can undertake, plea=

se let me know if you would be open to discussing this opportunity further.=

Best regards,
Ken Bruce.

Web/SEO/App Spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on Sunday, February 8. 2026

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?lXoKdUve3wwS7aREEcJMpv5LyEfls1ekAdRhLFyEci9/iyW9GDtTBB17?=

=?Windows-1252?Q?apFQ/wIxlRQR9r2FaL/X7J3HiSMQalAdIfa+rohAWTVoOwRpPp9HL4n/?=

=?Windows-1252?Q?9JaNPlXaE9LZjUGz0T02v2y+NQRXCtBAkkLXQsDIfTlQRtVAT7CHx4BP?=

=?Windows-1252?Q?gwJmj62FHKtwck45tGVw3YuF9kUBo/DOtXipGlxca45kEUtKS8gKXxgm?=

=?Windows-1252?Q?NwaRKAxdE9rHcZOxbbOfDyVolZPtz1QduRYT0Ilxsb9eXaKX6ovmN8IQ?=

=?Windows-1252?Q?tVFJTH2F5/5nO3plJHYmAridNsP/X5cm7MQ9Wulq5Qe9RUNviHfCw6im?=

=?Windows-1252?Q?C1sp8PJTB9/3IsanH4VIvi4cUzE0d+put2bORTEno/BODe1T2Ou5tBGr?=

=?Windows-1252?Q?ck3+WJhPutjwlM7iAPVIydohOur9qDD0w+aURpbBNfYo9+wwPonKqGyD?=

=?Windows-1252?Q?sYHkhvQHgjTQEsIPrB1VD9goOxrqzXC0mWu7CYUKk4RC2dfJtDt3Fump?=

=?Windows-1252?Q?a9sr0HLUQ5IMg+pvE8fH14h8Rzc/We4166U3o6HTcDgXo66osGcvYlJf?=

=?Windows-1252?Q?HoU7U5SNljvxiiK8yuDRKbxSQn8cT4Hs1BfVuPXrsDQqpaJkf8MX9Y5j?=

=?Windows-1252?Q?bjUVXMpOpgkSuxdWnA8ascDkhCua6jsCX+hexC/iziPwQ96tj5b+io/X?=

=?Windows-1252?Q?Sx4FoLYIdR24Ht50vbY2VIGiRMI8PBQj6CpMX95NhO0JMFZ3tvC+rsqK?=

=?Windows-1252?Q?DvxF408y9EvuSMtSns7EIMYjUiab/uSdWMt7q3y+VOYtj5jYz3OF7Dmj?=

=?Windows-1252?Q?FWnqd+v/xSRYLLOdty0tzw5buU9V9KIijU9dCgvQ8UUJoG2h9Y2VvnJ/?=

=?Windows-1252?Q?iW4PykawdtYf4TJggKzuvWC1v760D00XyEKHVl31cEVKEwQIjX9EkXgg?=

=?Windows-1252?Q?4QMW+UAsSEtt57J+XkDdrhqwHMXnJPqj55F/YkizR/lXvJEzordnKA0B?=

=?Windows-1252?Q?f9f50lQdllVbuEg1qlrhZuHDnWpGutM1YR6uv7yrx+YmK7G1YHusvtpj?=

=?Windows-1252?Q?6ibfEzaom7IxGF6rnY4tgSaKyKhYmeMpZzWGJPNRwbszXUBH2ZyLXbDT?=

=?Windows-1252?Q?ldEZKqZR0Y7BWm7o2b8RzucaTqbpYrtEwqO4zY2hLQO5DMc5PsnXk0NE?=

=?Windows-1252?Q?EvOsFD014Vtcn6dkM6nLNVqWd5SyC6BZDWFg3Ro13tnOcQAppPfl1gJ5?=

=?Windows-1252?Q?uHXRH96bea0SinCwY9ergzNiiq+HQ90c0ADkhdk8zziFvNvJYdYzbRnn?=

=?Windows-1252?Q?6IzeTW7SUe82DeVvpAZ1qdOST5TQuSl0hyCYLmhYoYjBbcK2/Ia9zxhV?=

=?Windows-1252?Q?MaZUD+onAW4ZNDs0KLSrHO490gms1/uXHpRcrbDr48q/kouHNqNLDy4Y?=

=?Windows-1252?Q?CLXOJIgm1nkPsGR4W8F+1ZpPQvg5KwrPnZiHqjoY8KKzbMR524PH//SW?=

=?Windows-1252?Q?TyRXnGII3LpgQ9CGkIN1zCgzCi3LB2LjwpTnCd1+P6ZSZPmjqFQ=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR01MB4179C6177B9A16FE6441F057D167ASI2PR01MB4179apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR01MB4179.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 94f69667-3d70-4e79-3c45-08de666f561b

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Feb 2026 17:35:50.4714

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR01MB5066

--_000_SI2PR01MB4179C6177B9A16FE6441F057D167ASI2PR01MB4179apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hi,

Just a quick follow-up =97 may I send you the SEO price list if you're inte=

rested?

Thanks.

________________________________

From: Somy Max

Sent: January 27, 2026, 10:00 AM

Subject: Re:

Hi,

I hope you=92re doing well.

I found your details on Google and I have looked at your website.

I can help bring your website to the first page of Google.

If you were on page #1, you'd get so many new more customers.

May I send you an audit report & SEO price list, Quote?

Thank You!

--_000_SI2PR01MB4179C6177B9A16FE6441F057D167ASI2PR01MB4179apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hi,