NetKnow Corporate Blog

Chinese products spam Part 2

Posted by Dave Yadallee on Thursday, March 26. 2026

Dear Sir or Madam,
ong>

Good day.
>

I am Susan Liu fro=

m IKING Group (China)
n>. Founded in 19=

95, we specialize in fiber=

glass and rock wool acoustic panels
:Calibri;font-size:16px"> with nearly 30 years of manufacturing experienc=

e, supplying customers in =

150+ countries
px">.

Are you=

looking for a reliable acoustic solution for your data center? Our
rong>fiberglass acoustic panels
trong>:

order=3D"1" cellspacing=3D"0" style=3D"border: none"><=

td width=3D"426" valign=3D"top" style=3D"width: 284px;padding: 0 7px;border-le=

ft-width: 1px;border-left-color: windowtext;border-right-width: 1px;border-rig=

ht-color: windowtext;border-top: none;border-bottom-width: 1px;border-bottom-c=

olor: windowtext">

nt-size: 16pxfont-family:Calibri">A1 (EN13501-1)
ng>

>
body>

26" valign=3D"top" style=3D"width: 284px;padding: 0 7px;border-width: 1px;bord= er-color: windowtext"> 16px">NRC 0.8=E2=80=930.9	"426" valign=3D"top" style=3D"width: 284px;padding: 0 7px;border-width: 1px;bo= rder-color: windowtext"> ze: 16px">Reduce high-frequency noise from servers and HVAC rong>
h: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: windowtext;b= order-right-width: 1px;border-right-color: windowtext;border-top: none;border-= bottom-width: 1px;border-bottom-color: windowtext"> ont-family:=E5=AE=8B=E4=BD=93;font-size:16pxfont-family:Calibri">N ong>on-fiber sheddi= ng surface :16px">	n=3D"top" style=3D"width: 284px;padding: 0 7px;border-left-width: 1px;border-l= eft-color: windowtext;border-right-width: 1px;border-right-color: windowtext;b= order-top: none;border-bottom-width: 1px;border-bottom-color: windowtext"> <= strong> ly:Calibri">Excellent
dth=3D"426" valign=3D"top" style=3D"width: 284px;padding: 0 7px;border-left-wi= dth: 1px;border-left-color: windowtext;border-right-width: 1px;border-right-co= lor: windowtext;border-top: none;border-bottom-width: 1px;border-bottom-color:= windowtext"> e:16pxfont-family:Calibri">F :Calibri;font-size:16px">ire rating
dding: 0 7px;border-left-width: 1px;border-left-color: windowtext;border-right= -width: 1px;border-right-color: windowtext;border-top: none;border-bottom-widt= h: 1px;border-bottom-color: windowtext"> Calibri;font-size:16px">Stay stable over time=	;border-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;= border-right-color: windowtext;border-top: none;border-bottom-width: 1px;borde= r-bottom-color: windowtext"> t-size: 16px">ideal for libri;font-size: 16px">suspended ceilings or above cold aisles= rong>
=3D"width: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: wind= owtext;border-right-width: 1px;border-right-color: windowtext;border-top: none= ;border-bottom-width: 1px;border-bottom-color: windowtext"> yle=3D"font-family:Calibri;font-size:16px">Sizes: style=3D"font-family:Calibri;font-size:16px"> strong>	: 0 7px;border-left-width: 1px;border-left-color: windowtext;border-right-widt= h: 1px;border-right-color: windowtext;border-top: none;border-bottom-width: 1p= x;border-bottom-color: windowtext"> bri;font-size: 16px">600=C3=97600 mm / 600=C3=971200 mm >
84px;padding: 0 7px;border-left-width: 1px;border-left-color: windowtext;borde= r-right-width: 1px;border-right-color: windowtext;border-top: none;border-bott= om-width: 1px;border-bottom-color: windowtext"> family:Calibri;font-size:16px">Thickness: "font-family:Calibri;font-size:16px"> p>	order-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;bo= rder-right-color: windowtext;border-top: none;border-bottom-width: 1px;border-= bottom-color: windowtext"> size: 16px">15=E2=80=9325 mm
0 7px;border-left-width: 1px;border-left-color: windowtext;border-right-width= : 1px;border-right-color: windowtext;border-top: none;border-bottom-width: 1px= ;border-bottom-color: windowtext"> size: 16px">Our panels match or ex= ceed Ecophon= & Rockfon performance : 16px">, providing a safe, quiet,= and durable solution x"> for critical infrastructure.

Request a free sa=

mple or datasheet today
t-size:16px"> and see how we can improve your data center environment.
pan>

Kind regards,
span>
<=

span style=3D";font-family:Calibri">Susan Liu
ont-family:Calibri;font-size:16px">

mily:Calibri">IKING Group

cc/WzgrV0Wz/fiberglass-acoustic-panel.jpg" _src=3D"https://i.postimg.cc/WzgrV0=

Wz/fiberglass-acoustic-panel.jpg" referrerpolicy=3D"no-referrer"/>

=3D"https://dm-cn.aliyuncs.com/trace/v1/report?bid=3D2462933&env=3D60000028685=

6265238&mac=3D410350&mf=3Dvip%40vip.iking-insulations.ltd&msgid=3D568e19a5-198=

3-49fe-84f9-f87e624aa516%40alibaba.com&sac=3D0&tag=3DFiberglass-Ceiling-Tiles&=

tid=3D2462933&to=3Droot%40nk.ca&tpl=3D&ts=3D1774525433&type=3D1&url=3D&v=3D1.0=

&sign=3D2ff49d0bb7aa3e8d285429bf0787bf0c&urlts=3D1774525533" alt=3D"" style=3D=

"display: none; width: 1px; height: 1px;" />

Categories: Chinese Phish Spam

0 Comments

Chinese products spam Part 1
Posted by Dave Yadallee on Thursday, March 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Mar 2026 06:16:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5jWJ-000000002wS-2Dl3

for dave@doctor.nl2k.ab.ca;

Thu, 26 Mar 2026 06:09:03 -0600

Resent-From: The Doctor

Resent-Date: Thu, 26 Mar 2026 06:09:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out21-136.dm.aliyun.com ([115.124.21.136]:49089)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5jAQ-0000000008n-383b

for root@nk.ca;

Thu, 26 Mar 2026 05:46:39 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.iking-insulations.ltd:alibabak_WebBatch:410350

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.iking-insulations.ltd; s=aliyun-cn-hangzhou;

t=1774525533; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=oMxfc34lbbn1z+JEKDiYCZccpoPptbRRym4PWR9tUuo=;

b=YDMlO/PDZ7vRQWiWhXlFJ3b7FBO7pU0zPqbsS/+e5TIJAlwLrYnuG3MbIIpaa4DXuO7KlMrXzL7VEnBBRKRUG9nYfeSA1sNPSWzmDvQ62EndiP2g/IcvwszmQJL8FCSCNSkEcEz502xRhGaZ+ZOPHfD5/vM1Gr1J4zOQJVgR2/0=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1774525533; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=oMxfc34lbbn1z+JEKDiYCZccpoPptbRRym4PWR9tUuo=;

b=QuqmJnM5GCRFJERu68UnHSLfzI1qKDrkb5SmfinoWkMs0h+6C/oEWwJIttezgqgExeS1S2ofylHvoqOCnPueozypvMNYnFR2w/MrWfpgiT5k7fEiJxs3ciivyFAhTvvxQvDvs7PDeaFFfTv2Dnz31k4ErZ7EBKB+4nJDf3De8C4=

Received: from chitu-hsf(mailfrom:vip@vip.iking-insulations.ltd fp:ma_600000286856265237 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Thu, 26 Mar 2026 19:43:53 +0800

Date: Thu, 26 Mar 2026 19:43:53 +0800

From: "Susan Liu"

To:

Reply-To:

Message-ID: <568e19a5-1983-49fe-84f9-f87e624aa516@alibaba.com>

Subject: =?UTF-8?B?RGF0YSBDZW50ZXIgTm9pc2U/IFRyeSBGaXJlcHJvb2YgJiBEdXN0LUZyZWUgUGFuZWxzLS0z?=

=?UTF-8?B?MCBZZWFycyBDaGluYSBGYWN0b3J5IFNvbHV0aW9u?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000286856265238

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Sir or Madam, Good day.

Content analysis details: (8.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[115.124.21.136 listed in will-spam-for-food.eu.org]

[115.124.21.136 listed in will-spam-for-food.eu.org]

[115.124.21.136 listed in will-spam-for-food.eu.org]

[115.124.21.136 listed in will-spam-for-food.eu.org]

[115.124.21.136 listed in will-spam-for-food.eu.org]

[115.124.21.136 listed in will-spam-for-food.eu.org]

[115.124.21.136 listed in will-spam-for-food.eu.org]

[115.124.21.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.124.21.136 listed in dnsbl.ahbl.org]

[115.124.21.136 listed in dnsbl.ahbl.org]

[115.124.21.136 listed in dnsbl.ahbl.org]

[115.124.21.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.124.21.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.124.21.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.124.21.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.124.21.136 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.124.21.136 listed in list.dnswl.org]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[115.124.21.136 listed in sa-accredit.habeas.com]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[115.124.21.136 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[115.124.21.136 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[115.124.21.136 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[115.124.21.136 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} =?UTF-8?B?RGF0YSBDZW50ZXIgTm9pc2U/IFRyeSBGaXJlcHJvb2YgJiBEdXN0LUZyZWUgUGFuZWxzLS0z?=

=?UTF-8?B?MCBZZWFycyBDaGluYSBGYWN0b3J5IFNvbHV0aW9u?=

Categories: Chinese Phish Spam

0 Comments

Web/SEo/App Spam from Microsoft OutLook Part 1
Posted by Dave Yadallee on Thursday, March 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Mar 2026 06:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5jW8-000000002r6-3fiO

for dave@doctor.nl2k.ab.ca;

Thu, 26 Mar 2026 06:08:52 -0600

Resent-From: The Doctor

Resent-Date: Thu, 26 Mar 2026 06:08:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-centralindiaazolkn19010005.outbound.protection.outlook.com ([52.103.68.5]:5859 helo=PNYPR01CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5ivP-00000000Oij-198T

for sales@nk.ca;

Thu, 26 Mar 2026 05:31:04 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=dzAmuOxuJBYKSzl7aalCsSpaeMCac3aKpx2eUieyTtZIoYZwGgz8DdYVR8dS9Z0D4F+ekGxWTSbsMQx4qcbfBpqzgYXdADTzM+JdeFJ16Juc2pIvijWHDUZIIlkETvjk79PkWFlkDxE2yw+eI/PE9yxC0/vx1usCPWKCRfNRZSeLpprFVa/3aWMVgFO8iIcPCMtJtsK9D/4r5a37fgMvhTkGi0IdfyRiicaq25zybHwQ+QMwIseS+P6zaVgPsKUZ1RBjgHXgqA0rECDuzMWyO6+5HgX8u/ehjwPG9hSfnduyDoLtBKfbuOB/7o5DOFFjBqz+WjKV5iGl9usD2+2KVw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=1FIJQtPbyGtLolFRKgbN/gpE2M8yyRAry1uTJYM0hLE=;

b=JXNtDQ4CgLOcNccxh5fJGiRXFcOJYQY8aRYCGNCjCaUfK19cX+TKS1O5BITvTykXsGdNidIy1DBpCe/izAZq2DRpIj2doT6r8vGX2W+GMzX9ACrx4fc1Cu41xvuqrEs9UrCvVoseo/DkrRT6gUzr9jG/xZI1HrcfSi01VmXZIZJ95UTL6Ku3XaazXQBNrpHV9zZvPulWb5Ltfy1y5l0wJNYOnajF5KqGPNoc52tdHMDf+Jwm5l48JoTP0nfqub2LA2SE73i7ErkdylBxZ6wNBKvjcI7obKO+EhQSHzyQnsKooY/7epD3wyrIqzNZusQhn0Du2PwJbjmd2OleTw8VeA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=OUTLOOK.IN;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=1FIJQtPbyGtLolFRKgbN/gpE2M8yyRAry1uTJYM0hLE=;

b=GGeFiUXmXR5h5vIzruCuQ0/2eqqR78MRNf6Dy4X/LQ4b23x/leEvUD3xFL+NlA2LeveXnb4QgDOF4wJzBIrZbUQhJy/Qawik+pALO490zulwnkuaWdqvusRSJ5+D4Qq0ok1cSOU5PsvNno1Vxc89JwQtLAKHKMTO3MDIHRnrjf6PHPKXRBfKeJwnHdj74DyvvVbjLQplq6+nXqjvjFXR6OvAf/kqUWesj2FxXoWmaeEJuagIpvWrwliJqQwjj1SsBs/KpKJK3jCZCl8RsgQugVKWTsyGl3iWLRgVmvsQOb2Px5I0pue4RBMhqbaxORWLO99b2TikfTaXDE7C19NuuQ==

Received: from MA0P287MB2665.INDP287.PROD.OUTLOOK.COM (2603:1096:a01:13a::13)

by MAXP287MB4342.INDP287.PROD.OUTLOOK.COM (2603:1096:a01:15f::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.22; Thu, 26 Mar

2026 11:29:55 +0000

Received: from MA0P287MB2665.INDP287.PROD.OUTLOOK.COM

([fe80::cd12:4e2f:e8e7:b5b0]) by MA0P287MB2665.INDP287.PROD.OUTLOOK.COM

([fe80::cd12:4e2f:e8e7:b5b0%6]) with mapi id 15.20.9745.022; Thu, 26 Mar 2026

11:29:55 +0000

From: "Natasha .."

To: "sales@nk.ca"

Subject: Designer

Thread-Topic: Designer

Thread-Index: AQHcvRNIbstGetOxrUGd32XNDbB2yQ==

Date: Thu, 26 Mar 2026 11:28:11 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

suggested_attachment_session_id: d998a180-16cb-8566-84cd-532c0397fc7c

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: MA0P287MB2665:EE_|MAXP287MB4342:EE_

x-ms-office365-filtering-correlation-id: 0c2a6c22-0e29-4ddb-19e1-08de8b2b014c

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|20031999003|461199028|8060799015|8062599012|39105399006|19110799012|15080799012|22091999003|24121999003|15030799006|31061999003|24071999003|40105399003|440099028|3412199025|26131999015|102099032|44111999012|56001999003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?h8fr6zMySjcwoqb15ys+ZwHCwQxje5u4KhFxp+E+2HggP5bdJJpzp0V6m7?=

=?iso-8859-1?Q?eFuyRGlU8HgGaMJv1tA7isDPJcHBxQ3cDYNPlKYOteUuLPyKWxzOUN9c7I?=

=?iso-8859-1?Q?mAY4BJQwv0+rWJKeGQpmZLFpjiNzTKeXyormJEfMCW3s5T1VLyv41h84UG?=

=?iso-8859-1?Q?Vvt8aXoxm6nd3KIbMEEe7K44jknifLTw06HT5/dpzeEtPKUxc4JxWhJdXT?=

=?iso-8859-1?Q?epnpCiOGJP3yxI4QEc8GTk+OE5kFLit+k99BU/3xW5cqQ0oDrbgTM/jVQb?=

=?iso-8859-1?Q?aCveaQ1B6IbDjzezVRluVNOxOMnRlQyUz8PRoo8j8qHCzHm3TziOXJqNnX?=

=?iso-8859-1?Q?//NKVP5spRS/ZWwaaHbXdMPFKuBdOfBPBy2hBjL5lEF6e9CIVa45dtqOyc?=

=?iso-8859-1?Q?Zu5QvDqth8j6u3goSc6oNRu72TGWIk2mojGcNOyihYyDWOYisIoPXLu2FJ?=

=?iso-8859-1?Q?gGzHb0qrJqeHbsxbfcJGRJ/moUjf1k19gZF99xXyGjIkgPPw1fcFtSff3x?=

=?iso-8859-1?Q?qCk9BRPPcEQhUWwu3aprvQtGhHrHY+IwPaMHs5whv0mp3RGV8ZiIKYGCOD?=

=?iso-8859-1?Q?9nwzXFE48kUOcio1zOZvgR0XhbczTv6E8eiL9VJoJ0Jr46YMusSOX9DKqS?=

=?iso-8859-1?Q?2H1hMw0sevuZpwjGbK2ZI5epM4Tts198jQt79evw9/k4BXcao/vGqm+fjB?=

=?iso-8859-1?Q?orl1QnPwX8Txaxs2JxGUSq+S8ubna2/+awMMic7vbQdw3SmK4mhNHDqdxJ?=

=?iso-8859-1?Q?XID0tng1RBox+yZrLpo3Tn4DxujQsT5+VUtbjjrqieTJqcWR4KFQ9wvORO?=

=?iso-8859-1?Q?imbynB25zq88PunhFk2XDvm5p4HzKSJNUnjbeGRC8UjxO1ms6Bm3vK+Pur?=

=?iso-8859-1?Q?WHylj8W7NeFh8NO6wWo8YMuN64Z441/QPmbytUvN08UyQY4+sjlO4mB0JI?=

=?iso-8859-1?Q?ux17b/Ni+SZ7KpIrofpZXLVpB8kRySdsExHto2HTbZgPsOVEMgfNoglCYC?=

=?iso-8859-1?Q?J7I6QSAyYq9rSp3mEs5nQ6LOKTU8a8eYTujvq86sY8ysgXdvv8CiMle1P0?=

=?iso-8859-1?Q?aTcQkxlXmoNPx3YCzDWZa15oEBrWbPOsF6e0GMaBUxwIMBvWOZARPfr4H8?=

=?iso-8859-1?Q?8jALEucoKj0089c3DYapSRL7OCPOJ7cFdoPIl5a0+hvL1gDupLwJQMMQ5c?=

=?iso-8859-1?Q?A1yGFgb5TIqSEQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?Fg02Hin/xtwBGEqQRJMTuPy5QGrsvMTtvK032u/OWMsLxn3uzlfETgmFe/?=

=?iso-8859-1?Q?tf9qUUZZuqra63o1Z5yK20+dDdC8AHDi++fEvF4W4FcMrt2EBDHVzn+mSj?=

=?iso-8859-1?Q?c40w4+Iv5rgPh46HJbxow5Zt5xyLghFOBYlfJjhJyFo9q1bSQ9ukuiJyat?=

=?iso-8859-1?Q?9ODwC2hFDe29ahK4NaChB0/hkCgFNTRLKBiu7VNwIF/Lv/wkTjAq/IQDcc?=

=?iso-8859-1?Q?VO1Xm/MgnIEDnmFs1omxuClWUvSe7xG19C4GJPxoOdg8EjTesoa3Y+Y/IY?=

=?iso-8859-1?Q?hNtcxREsTjIGgGq/QiZnGyDtz/QrPUiH1dCjlEDnyN6K51BRJBLsNeC1T3?=

=?iso-8859-1?Q?/aZE3+C1vfh2+ITjWxexrio4435d1vr7mRlLXSaoBL+aD6Eg2SeePnxRGi?=

=?iso-8859-1?Q?M5ykC48skpkAIMir77214eAjLa3UcPsGX3gDmKvBb4u1JeWmLiV5mqGQJl?=

=?iso-8859-1?Q?p/vgCMWjqXjtNx/2W3cyVNaHUmbqMxPlI7D/N/9KdVVxnTWw6CvlcFOaDi?=

=?iso-8859-1?Q?pczr9pxfv6NHOUFugaYhnpNg4fY3soapVA0ySbTkoId4hn2zcsxoVbVyok?=

=?iso-8859-1?Q?zTNmrhO5q4CgsXgInW6T5C1Kt/rAGO8gRa2IPu9AJw0XiWSS91yamtR5+P?=

=?iso-8859-1?Q?WESHSaUuwq6uQRkRb+/UNeLv1pUvyTe+RdJr84vvh1vXurTrmy4WgRr/sW?=

=?iso-8859-1?Q?iIs0awdh2AQ+PKFexygK4EARFT86eLTu7N3bMjRgg6ZQwxnRAjOxvAH1h7?=

=?iso-8859-1?Q?719yL21s5bapn8PvRoMPRt8RWvxUxbNT7g7VUeK9PWLKXJCMQBZi9aT5cg?=

=?iso-8859-1?Q?PJrd2EuFqeuTUQkeX5sPWb78pL+eWauNHbxKsHzSsIaQsSZGDb/ydoZvA7?=

=?iso-8859-1?Q?qi/9kB3TjGs48/QSggPwXE2HhAMcYS5Aj6tf5k50ymLs39DAoTXZcBwHmU?=

=?iso-8859-1?Q?9S9XnL2qxHRtBC5uADIuuxyxrsUeTOnfh01fm48aSOLrU9CdeqLG/inRBg?=

=?iso-8859-1?Q?RwKg1JxNAPVPHe45j6b6R8Ie4bn4pQt1PbiMewE2cBEEb2xfx3Xcuj9/GK?=

=?iso-8859-1?Q?NjBvt6uBqG00a/PjMggaM9U+RZyC/MyGxKlqWcugFB+3HxxawZbX4G2Sum?=

=?iso-8859-1?Q?C9CxLbdTPi3mN2GeEn+fYM5Ysd4qvki/+2hSEC+feHWzKUO4dI7QsWCVq5?=

=?iso-8859-1?Q?aHR8+qN/osCJ8rcx9Tajg5pnDUBJiaL2AH2gSj6MgLAnbYETjYebyQMfPe?=

=?iso-8859-1?Q?dkRXjOLsTCOLId6KPSOnBArhHxZMK55y3bmOlkUh1Q78tA62m5cel7NmEM?=

=?iso-8859-1?Q?lLGXnczHHJk33pkeJYrJ3nQiqo9hhJbsFURUPEc2+ghXQ6cw5d+FS13eND?=

=?iso-8859-1?Q?DJD7g5+je5nOq/miWOtuhsMwLNkB5LLjXDwoMzWE3Qafaz1Cukh9uIbyJl?=

=?iso-8859-1?Q?C9A30ITCOBXbn9QtPohGA6il8Q9n6Cpw4Q9Bs0ZJsuPiNYSUhZiv8eK5dI?=

=?iso-8859-1?Q?w9F1+7ISQamBHPzSOIc3oJ?=

Content-Type: multipart/alternative;

boundary="_000_MA0P287MB2665AFDDDF4606B2182E23D79C56AMA0P287MB2665INDP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-7a589.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MA0P287MB2665.INDP287.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0c2a6c22-0e29-4ddb-19e1-08de8b2b014c

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Mar 2026 11:28:11.1296

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MAXP287MB4342

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, My name is Natasha from India. I have over 14 years of

experience building websites and managing them. Do you need help designing/redesigning

your website? I can create a responsive website within 1 to 2 weeks based

on requirements.

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Web/SEo/App Spam from Microsoft OutLook Part 2
Posted by Dave Yadallee on Thursday, March 26. 2026

Content analysis details: (5.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:a01:13a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:13a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:13a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:13a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:13a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:13a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:13a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:13a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[52.103.68.5 listed in will-spam-for-food.eu.org]

[52.103.68.5 listed in will-spam-for-food.eu.org]

[52.103.68.5 listed in will-spam-for-food.eu.org]

[52.103.68.5 listed in will-spam-for-food.eu.org]

[52.103.68.5 listed in will-spam-for-food.eu.org]

[52.103.68.5 listed in will-spam-for-food.eu.org]

[52.103.68.5 listed in will-spam-for-food.eu.org]

[52.103.68.5 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.68.5 listed in dnsbl.ahbl.org]

[52.103.68.5 listed in dnsbl.ahbl.org]

[52.103.68.5 listed in dnsbl.ahbl.org]

[52.103.68.5 listed in dnsbl.ahbl.org]

[2603:1096:a01:13a:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:a01:13a:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:a01:13a:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:a01:13a:0:0:0:13 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.68.5 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.68.5 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.68.5 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.68.5 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.68.5 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[designstudios_08(at)outlook.in]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[designstudios_08(at)outlook.in]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Designer

--_000_MA0P287MB2665AFDDDF4606B2182E23D79C56AMA0P287MB2665INDP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi,

My name is Natasha from India. I have over 14 years of experience building =

websites and managing them.

Do you need help designing/redesigning your website? I can create a respons=

ive website within 1 to 2 weeks based on requirements.

Please reply to my email or share your direct phone or WhatsApp number to d=

iscuss.

Thanks,

Natasha

--_000_MA0P287MB2665AFDDDF4606B2182E23D79C56AMA0P287MB2665INDP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Hi,

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

My name is Natasha from India. I have over 14 years of experience building =

websites and managing them.

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Do you need help designing/redesigning your website? I can create a respons=

ive website within 1 to 2 weeks based on requirements.

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Please reply to my email or share your direct phone or WhatsApp number to d=

iscuss.

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Thanks,

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Natasha

--_000_MA0P287MB2665AFDDDF4606B2182E23D79C56AMA0P287MB2665INDP_--

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Web/SEo/App Spam from Microsoft OutLook Part 2
Posted by Dave Yadallee on Thursday, March 26. 2026

Content analysis details: (6.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:a01:140:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:140:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:140:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:140:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:140:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:140:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:140:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:1096:a01:140:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[52.103.67.15 listed in will-spam-for-food.eu.org]

[52.103.67.15 listed in will-spam-for-food.eu.org]

[52.103.67.15 listed in will-spam-for-food.eu.org]

[52.103.67.15 listed in will-spam-for-food.eu.org]

[52.103.67.15 listed in will-spam-for-food.eu.org]

[52.103.67.15 listed in will-spam-for-food.eu.org]

[52.103.67.15 listed in will-spam-for-food.eu.org]

[52.103.67.15 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.67.15 listed in dnsbl.ahbl.org]

[52.103.67.15 listed in dnsbl.ahbl.org]

[52.103.67.15 listed in dnsbl.ahbl.org]

[52.103.67.15 listed in dnsbl.ahbl.org]

[2603:1096:a01:140:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:1096:a01:140:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:1096:a01:140:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:1096:a01:140:0:0:0:18 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.67.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.67.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.67.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.67.15 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.3 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FORGED_SPF_HELO No description available.

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Designer

--_000_MA0P287MB2665AFDDDF4606B2182E23D79C56AMA0P287MB2665INDP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi,

My name is Natasha from India. I have over 14 years of experience building =

websites and managing them.

Do you need help designing/redesigning your website? I can create a respons=

ive website within 1 to 2 weeks based on requirements.

Please reply to my email or share your direct phone or WhatsApp number to d=

iscuss.

Thanks,

Natasha

--_000_MA0P287MB2665AFDDDF4606B2182E23D79C56AMA0P287MB2665INDP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Hi,

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

My name is Natasha from India. I have over 14 years of experience building =

websites and managing them.

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Do you need help designing/redesigning your website? I can create a respons=

ive website within 1 to 2 weeks based on requirements.

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Please reply to my email or share your direct phone or WhatsApp number to d=

iscuss.

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Thanks,

Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Natasha

--_000_MA0P287MB2665AFDDDF4606B2182E23D79C56AMA0P287MB2665INDP_--

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Online Adverisement spam from Google Gmail Part 3
Posted by Dave Yadallee on Thursday, March 26. 2026

t-size:11pt;font-family:Arial,sans-serif;color:rgb(0,0,0);background-color:=

transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font=

-variant-alternates:normal;vertical-align:baseline">seems like the ideal ma=

tch for a number of key client campaigns I'm working on. We specialise =

in producing high-quality content targeted to your audience =E2=80=93 and i=

n compliance with your house style =E2=80=93 created by our native, in-hous=

e writers to make sure it's a great fit for you too!

=3D"ltr" style=3D"line-height:1.38;margin-top:12pt;margin-bottom:12pt">
n style=3D"font-size:11pt;font-family:Arial,sans-serif;color:rgb(0,0,0);bac=

kground-color:transparent;font-variant-numeric:normal;font-variant-east-asi=

an:normal;font-variant-alternates:normal;vertical-align:baseline">Here are =

two examples of recent publications from our team:

argin-top:0px;margin-bottom:0px">

isc;font-size:11pt;font-family:Arial,sans-serif;color:rgb(0,0,0);background=

-color:transparent;font-variant-numeric:normal;font-variant-east-asian:norm=

al;font-variant-alternates:normal;vertical-align:baseline;white-space:pre">=

role=3D"presentation">
parent;font-variant-numeric:normal;font-variant-east-asian:normal;font-vari=

ant-alternates:normal;vertical-align:baseline">
agency-dot-yamm-track.appspot.com/2nEyd-ruMn-chQQdfyZqTwQCIbQ0K6NX9-NGV87Lv=

bE-tRy8pnQEjc-sndvdHUUpoI27O2ezBanWjT7kFCTw9r-h5UA6EeOSUdm9BsCplOcHGgerptr7=

wgPEQGvCkNXejInhriCqSl_pLYhsn83kGoV2KWOsnvLHzvO7craiCIxdEpNc5fPVoerhdnw5sCT=

i52fUOAkUmpqrgwzp5UoFfyKxUt5jyuWzWqBOh2Lzfp2th7bXuaGX4Efo" rel=3D"nofollow"=

>https://psxextreme.com/feature/will-playstation-ever-embrace-the-online-ca=

sino-genre/

c;font-size:11pt;font-family:Arial,sans-serif;color:rgb(0,0,0);background-c=

olor:transparent;font-variant-numeric:normal;font-variant-east-asian:normal=

;font-variant-alternates:normal;vertical-align:baseline;white-space:pre">
dir=3D"ltr" style=3D"line-height:1.38;margin-top:0pt;margin-bottom:12pt" r=

ole=3D"presentation">
rent;font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;vertical-align:baseline">
ency-dot-yamm-track.appspot.com/2vxkX41RFfhAhdZPlIAwTTCOgS95V_kunBvotlfTNHN=

qwRy8pnQFt9mWxkzH0eOzZ2bbwLSl7XEgvjdZHoQSVXUpngWyidIGjH6Xi--nb7hRF67vY5qtDB=

8hB74OmrCEArmrfFqEdvqHr0WhI20M42a3PpyJ8NVkVBWSr680M0F5SP88InlWmilU-pXxl1Ddx=

J2yT_bJyrUWOKErrxl-zU-Wqr4dJi8fVwF0wuZkSGrKX5FzPoBL8yWAdn6p8" rel=3D"nofoll=

ow">https://www.co-optimus.com/blog/article-poster/2788/5-best-co-op-games-=

to-livestream.html

ght:1.38;margin-top:12pt;margin-bottom:12pt">
font-family:Arial,sans-serif;color:rgb(0,0,0);background-color:transparent;=

font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alt=

ernates:normal;vertical-align:baseline">I look forward to receiving your pr=

icing info, or just let me know if you prefer a quick call.

r=3D"ltr" style=3D"line-height:1.38;margin-top:12pt;margin-bottom:12pt">
an style=3D"font-size:11pt;font-family:Arial,sans-serif;color:rgb(0,0,0);ba=

ckground-color:transparent;font-variant-numeric:normal;font-variant-east-as=

ian:normal;font-variant-alternates:normal;vertical-align:baseline">Thanks,<=

/span>

<=

div dir=3D"ltr" class=3D"gmail_signature" data-smartmail=3D"gmail_signature=

">

ollapse">

"border-collapse:collapse;font-family:Arial;line-height:1.15;color:rgb(0,0,=

0)">

dding:0.01px 1px">
r-collapse:collapse">

0.01px;width:117px;text-align:center">
oudfront.net/u/WDJDAeGxqvN/1671547082345.png" height=3D"auto" width=3D"117"=

style=3D"width:117px;vertical-align:middle;border-radius:0px;height:auto">=

.01px 0.01px 14px;vertical-align:top">
=3D"0" style=3D"border-collapse:collapse"><=

td>

ht:1.2;padding:0.01px">
ld;color:rgb(163,206,68);letter-spacing:0px;line-height:1.2;font-size:18px"=

>Laura Spencer

bold;color:rgb(33,33,33);line-height:1.2;font-size:14px">Creative Director,=

=C2=A0
gb(33,33,33);line-height:1.2;font-size:14px">Audiencr

apse">

pace:nowrap;width:119px">

e=3D"font-size:12px;color:rgb(33,33,33)">
tamp.com/s/rfp3/A3CE44/26/trans.png" width=3D"13" style=3D"vertical-align:-=

2px;line-height:1.2;width:13px">
-track.appspot.com/2MVjbu6blR84jdaQTU57lMdyOYcOTR1DHbh8AnHJtcXG0Ry8pnQHtdWj=

R4Yg8IXBu81c8lk85DRCHO51SO94vzIx-QExowImOx4ABYDsUiho_k5X2U-Od-zlEdLNCyNDek-=

lC1oatARn6WIIoai-B47Px7LYtSqKYiw7LwBedxG8Up3TCdRpZQMi-NkpqHv8" rel=3D"nofol=

low" style=3D"text-decoration:unset" target=3D"_blank">
height:1.2;color:rgb(33,33,33)">=C2=A0+35892510762

d>

wrap;width:168px">

nt-size:12px;color:rgb(33,33,33)">
m/s/rfw1/A3CE44/26/trans.png" width=3D"13" style=3D"vertical-align:-2px;lin=

e-height:1.2;width:13px">
appspot.com/2UGq8TdZdWpEfco5iuXkHUEKNOS_V22sv0lisQR4FDhG2Ry8pnQEFVoQJ2ZoSgk=

1_Hh7RngxsHQGXeZlE_R5nPWUqcINgm3FfW36LyNb-6k3_rQt4w7g2c1HJWe1Zs0xo8UVmSvA9M=

kPc2GDHeOtyK3m6DRvlf7ONpjpNAlivQBD20uI96VIX5QCgex8hxpy00b4" rel=3D"nofollow=

" style=3D"text-decoration:unset" target=3D"_blank">
ght:1.2;color:rgb(33,33,33)">=C2=A0audiencr-agency.co
=

:nowrap;width:218px">

"font-size:12px;color:rgb(33,33,33)">
.com/s/rfem1/A3CE44/26/trans.png" width=3D"13" style=3D"vertical-align:-2px=

;line-height:1.2;width:13px">
,33)">=C2=A0l=

aura@audiencr-agency.co

>
<=

div style=3D"color:rgb(34,34,34);font-family:verdana,sans-serif">

color=3D"#6aa84f">Our offices :

761d">North Europe:=C2=A0Germany | Denmark | Finland | Ireland | Net=

herlands | Norway | Sweden | United Kingdom

"#6aa84f">South Europe:=C2=A0France | Italy | Portugal | Spain | Bel=

gium | Hungary=C2=A0
America:
b>=C2=A0USA
=3D"color:rgb(147,196,125)">=C2=A0|=C2=A0
7,196,125)">Brazil | Canada

,34)">

rdana,sans-serif">Asia:
=3D"color:rgb(182,215,168)">=C2=A0
68)">Australia | New Zealand | Japan

div>

QtOHPXUkqmE1IF00cmDqVT53bOvIRwTiWRy8pnQGETLPneKPwD2BOh6ll9wGVR-ESRGFqnySH2p=

U4DIavzcnaJyMIz77IzBhMF5_WNiXe0bSk8aw8udgNLxmlJYz6syTF_MMnvBHlksD_ysiFfCZqt=

r_QV10Pm5E" width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; =

display:none!important;">

--000000000000c695a5064de8e050--

Categories: Google Gmail Spam

0 Comments

Web/SEo/App Spam from Microsoft OutLook Part 1
Posted by Dave Yadallee on Thursday, March 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Mar 2026 06:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5jW4-000000002qv-3Waz

for dave@doctor.nl2k.ab.ca;

Thu, 26 Mar 2026 06:08:48 -0600

Resent-From: The Doctor

Resent-Date: Thu, 26 Mar 2026 06:08:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southindiaazolkn19010015.outbound.protection.outlook.com ([52.103.67.15]:53492 helo=MA0PR01CU009.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5ivP-00000000Olo-3TEo

for sales@nk.ca;

Thu, 26 Mar 2026 05:31:06 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=mRIpQtWQGu4qjr40lAsrz9nXTGthYSzo+2EFO4cJbB/TawIV/aKgR9SgYvZEc6/dTp1kbFmC7PBYzMPSz8JmCwv9Bopm9WQB+nDJhaPqztkC4FHSgzHNNKYjoTrUjMlf9nJ8JzCxaJzOM76/JEMEoxulN/qlmMMvAELSSzy6gRcp7T33ZOGCEbb1r1khoK10ey276DayLAAvQHm0c/8xQe5ZO6Cjq/+f/pLlpZx3AvqJ5dYRJMCZ7wwiaHQ9RA3wxYjbmKJC6UV6vd+S4yRB2U7bMbNmOmm1+O32zEcySdZCYWhwkypeVy+Ih3b9qka7ep/SqXLEg2PbVL8wFegrwg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=1FIJQtPbyGtLolFRKgbN/gpE2M8yyRAry1uTJYM0hLE=;

b=XFEb2UjGuGkZGoelLkKQ+rEWSkZoG5OvpmWBwxpR1p5zzWlHBIzBbtA8aB897Co9NtSQqtXATAHpwSq+l4C1iTpvQUNOBIUHrE5LBLMA6W2/1XEHacb3dKPPvubMzwJiyPVE+ts7RR0e1F7GyVlDmSisxCM+0D4cKbwIZE8l9baDV5j8VfIS60rUhxPl2bWWImYqWj4YS64TbeiO7Jyrz+yXzr4/wKLKWKiBco+/k3NbYZ4mYoPuGBu9bNXUAHWvmRsZ/UND7oQTtz9SsZajdn/0daAncuka+Ms8f0SXuy8XzwL3UsTv/G6fFmAIQNd+eVzCb/530kOMAIDDcJZTww==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

Received: from MA0P287MB3377.INDP287.PROD.OUTLOOK.COM (2603:1096:a01:140::18)

by PN4P287MB4807.INDP287.PROD.OUTLOOK.COM (2603:1096:c01:2c8::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.22; Thu, 26 Mar

2026 11:29:56 +0000

Received: from MA0P287MB2665.INDP287.PROD.OUTLOOK.COM

([fe80::5f19:f482:fed9:b293]) by MA0P287MB3377.INDP287.PROD.OUTLOOK.COM

([fe80::5f19:f482:fed9:b293%4]) with mapi id 15.20.9745.022; Thu, 26 Mar 2026

11:29:56 +0000

From: "Natasha .."

To: "sales@nk.ca"

Subject: Designer

Thread-Topic: Designer

Thread-Index: AQHcvRNIbstGetOxrUGd32XNDbB2yQ==

Date: Thu, 26 Mar 2026 11:28:11 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

suggested_attachment_session_id: d998a180-16cb-8566-84cd-532c0397fc7c

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: MA0P287MB3377:EE_|PN4P287MB4807:EE_

x-ms-office365-filtering-correlation-id: e248742c-3f94-44f6-4234-08de8b2b0151

x-microsoft-antispam:

BCL:0;ARA:14566002|39105399006|461199028|19110799012|8062599012|15080799012|31061999003|8060799015|15030799006|40105399003|440099028|3412199025|56001999003|44111999012|102099032|26104999006|26131999015;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?jgqoumgC7wE3lXoUQcrAFK0gj6Uk575UCmXLyiQhu7ibMbCEMGQFmMLdkb?=

=?iso-8859-1?Q?AtpfGnpLXlIGOcGfZCYuPIPTt9ZEULzvaLOzLjNuIDkgJFR2lbXaufUaw5?=

=?iso-8859-1?Q?NGKDUStOIg7ABb0y/DkN5Qai3/Ur+wZx0TeC6csRIAlkpfS2xDGx93/WGr?=

=?iso-8859-1?Q?fMrNbORF54g6XL+Jh5KZlqSj76KQFxjGIKTCpOs6RUcEmVDzRWM8X/3cjJ?=

=?iso-8859-1?Q?IQOI2My/9/kjzwL0UTHbXb7keSGGuYwJSLjaHsmTpy/2EC1LNWGF749OfS?=

=?iso-8859-1?Q?+UIYv/8z4GtTNn/mF6fAq+kk7i/EbxsqC7SDBC8uyNTzROb4EfPLTbq4lP?=

=?iso-8859-1?Q?ZE0ghowbc9x2oegjWhs72o/LIAfrucjml6eYCGe50iBB2KvMm2YhNoH84U?=

=?iso-8859-1?Q?DM20Lii3gQNRlt2lNEZim+hPCFeGmR2IpMa/DyMUND5CteNqXeFCR5l9/g?=

=?iso-8859-1?Q?SzGwfPbaO04ZDRlmRHiaWNFJkm1dqJlkYSc8PUfiFN88Tutk2B25ZJQpiD?=

=?iso-8859-1?Q?LzvG+Xc9YcXUwRWy03BHfeAQK/80iO3WZoNDJQXpH7kSit3ZslYpf2hcSp?=

=?iso-8859-1?Q?Fl+bnaYqbmAaLI9stPhltQ8TmfNg8ygOLhNqLbEEgp6TgI+0gLOrW5CBlG?=

=?iso-8859-1?Q?1/0OTC6IWZiLFsZaDlymNpSbxTh6djViEVrCb6NME1+J+bUgeENWBwe8Z2?=

=?iso-8859-1?Q?FUbZZh3hTZFg4NS5+lrkWqcjggqEQ1y2nBDxVMGeiQylrgolh+O+j0l476?=

=?iso-8859-1?Q?Up56kH47NW8P4TihX0tx3+enW4WoGCKrAYbWPJJTGQTTO8YLhkX+k4s4RF?=

=?iso-8859-1?Q?0EBETmtpiUtbrrixKxqDxFeCip/TxOWr95Fb9eSYWgmldpFawIIybkeb9G?=

=?iso-8859-1?Q?teEMmYREywiH3/0t/6XLfDQjP1O6MhwJLfwxqUlpsxnRqWE2+DEsZH68Pc?=

=?iso-8859-1?Q?tequk/dqdyT2aeBqmiI54UF3/u/XyjtUwyTLvA2qzr2WFE5f8vHOaml9Xo?=

=?iso-8859-1?Q?CTXmXu9q5jQlvQRfNLrw7ZZsojXBwlCLp9lCyH6LZpDFyoNpFXyJ8N40KS?=

=?iso-8859-1?Q?ioIXxyIEcFOSUdeYOiUTxil/9Y/oFYuX5Q486+bbTehA?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?8TvDtgEWYp31jxs9GBSbFzzSG+7wFe85MlpmPVnYksZdwp4MeSMw2yV+nk?=

=?iso-8859-1?Q?ky7SfaqS7M05YGICseXdIIVsgBdsqAynr6A6eynKqPBvtS/th72dNBv0M4?=

=?iso-8859-1?Q?bhLmD2hn7Sae1dMgx5KMrUcEIKaFQwucpYOwAHLNm8E3zjPpduYwLdA+qV?=

=?iso-8859-1?Q?DV+W8yRXOXH5h4nVKJersQTAjCsb/XYJSTSSp6awTI6fqAq9AskCrBeCAO?=

=?iso-8859-1?Q?pQ3PKCsXQN1Dg3aOHqekN2zayWxp/GN6iTANUzs30mkbFTH8tzqQPZ6Ygd?=

=?iso-8859-1?Q?xJt6fRITBEReeM53TcgOTrVsXA2HVYpgABlF3rGuLcSJsDSTT7HW6kMA7G?=

=?iso-8859-1?Q?PXOKp0nm66VK5HCSuyIewUEg7Ud2KKykHBp/Z17E7yavoT15ast3c6wFks?=

=?iso-8859-1?Q?zanY46YA3640IFgHnhq7IwZN46lFhjWh25voEopCwAau41KTLOC1NZDn0Z?=

=?iso-8859-1?Q?FGO2eAu7aDyOGjBzZ+qHQI/PRa/9eH208oQUITC2/CWOh3+jG8XFqk/5yk?=

=?iso-8859-1?Q?xytOhAZQoSZMe64r2Y5PkVhoIWU5K+XsumAEMm/juD9MUxvCULXx+BQuGE?=

=?iso-8859-1?Q?YomHlsQopPcUg13oxoUsa12wD23z+2+SOW50teDGpp44ECEcaAEoCH9IxT?=

=?iso-8859-1?Q?4FLlwvLcX5dAz04MgjDUtFr18NbzxHWG+6NBrOjmZi58OVKGtmdnGii7NT?=

=?iso-8859-1?Q?ml8ph2feg43LV5k5I3wPz3cm4U7nfqLUfWh4E1/a3at7/aIvkNk8SOojiv?=

=?iso-8859-1?Q?D4KsSX2O00Df2ql/KcmuAGBGHGcD+uv98vRgRrmLZY7NDYW/HwbVkMfSK5?=

=?iso-8859-1?Q?NpfX4OQUUuRoPedQ9v8PokSN8ySblXJQM88t437SCwIfeRDgUbJiG/Z6w2?=

=?iso-8859-1?Q?kvAvn0sglM6JwOrVqkGc2YKTIkcF+j0WKeb8cXBFCl92H7DPvytDRb3+UT?=

=?iso-8859-1?Q?6lt6u97XAllHaXl7xeeBTxisvPOyiy4SfZK5kNC8uE0EeLvpoT2WX8tFjX?=

=?iso-8859-1?Q?3dna0zypGOw+H0QuwnALn0kFNAAVzMji47Gz6Hl5QBAUZJ2DJhL3qosHY7?=

=?iso-8859-1?Q?XRXDqrM/5gn6fzOwjZ5HQ1VoszXVMFrmBZK2eXK//FLjwB4aZBSOR9dmT1?=

=?iso-8859-1?Q?fAgZ7xnwBlj4+7ZRME+jsVruU93Fw=3D?=

Content-Type: multipart/alternative;

boundary="_000_MA0P287MB2665AFDDDF4606B2182E23D79C56AMA0P287MB2665INDP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-7a589.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MA0P287MB3377.INDP287.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e248742c-3f94-44f6-4234-08de8b2b0151

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Mar 2026 11:28:11.1296

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PN4P287MB4807

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, My name is Natasha from India. I have over 14 years of

experience building websites and managing them. Do you need help designing/redesigning

your website? I can create a responsive website within 1 to 2 weeks based

on requirements.

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Online Adverisement spam from Google Gmail Part 2
Posted by Dave Yadallee on Thursday, March 26. 2026

--000000000000c695a5064de8e050

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,

I see you regularly accept link placements for nk.ca

jQwxbQczOfCBq306l8Xl-nRy8pnQGepN_TqPCtGR094C0YxcLAn3s8FLbjgCvAqczzNEQzl2qg2=

0iBnl5NFl1-7MT5zTeAZBstG55xPclKHuOD6jszyiiwGoWUkWnMq8dkJK2Swl833J5d35SJfQFn=

V86frW0>,

and I=E2=80=99m interested to know your pricing and guidelines.

We were founded in the UK in 2009, and the team has grown to include 100

people working across Europe, Asia, and the US working for an international

client base.

This nk.ca

wxG2Kjsh8vN8QR11y9y2OqRy8pnQGyTItK5IVI6hly_als1nYE6EK002XJVsy9z--syQDZ_d3AF=

EayB-WcXHGACPcQjw_iEMD3rKg61K2_O_3CstLJcxL7PZh2blLYVJm16lZmbjMWtk-3VIfBcEFk=

aQRW7hY>

seems

like the ideal match for a number of key client campaigns I'm working on.

We specialise in producing high-quality content targeted to your audience =

=E2=80=93

and in compliance with your house style =E2=80=93 created by our native, in=

-house

writers to make sure it's a great fit for you too!

Here are two examples of recent publications from our team:

-

https://psxextreme.com/feature/will-playstation-ever-embrace-the-online-=

casino-genre/

TwQCIbQ0K6NX9-NGV87LvbE-tRy8pnQEjc-sndvdHUUpoI27O2ezBanWjT7kFCTw9r-h5UA6EeO=

SUdm9BsCplOcHGgerptr7wgPEQGvCkNXejInhriCqSl_pLYhsn83kGoV2KWOsnvLHzvO7craiCI=

xdEpNc5fPVoerhdnw5sCTi52fUOAkUmpqrgwzp5UoFfyKxUt5jyuWzWqBOh2Lzfp2th7bXuaGX4=

Efo>

-

https://www.co-optimus.com/blog/article-poster/2788/5-best-co-op-games-t=

o-livestream.html

TTCOgS95V_kunBvotlfTNHNqwRy8pnQFt9mWxkzH0eOzZ2bbwLSl7XEgvjdZHoQSVXUpngWyidI=

GjH6Xi--nb7hRF67vY5qtDB8hB74OmrCEArmrfFqEdvqHr0WhI20M42a3PpyJ8NVkVBWSr680M0=

F5SP88InlWmilU-pXxl1DdxJ2yT_bJyrUWOKErrxl-zU-Wqr4dJi8fVwF0wuZkSGrKX5FzPoBL8=

yWAdn6p8>

I look forward to receiving your pricing info, or just let me know if you

prefer a quick call.

Thanks,

Laura Spencer

Creative Director, Audiencr

+35892510762

yOYcOTR1DHbh8AnHJtcXG0Ry8pnQHtdWjR4Yg8IXBu81c8lk85DRCHO51SO94vzIx-QExowImOx=

4ABYDsUiho_k5X2U-Od-zlEdLNCyNDek-lC1oatARn6WIIoai-B47Px7LYtSqKYiw7LwBedxG8U=

p3TCdRpZQMi-NkpqHv8>

audiencr-agency.co

KNOS_V22sv0lisQR4FDhG2Ry8pnQEFVoQJ2ZoSgk1_Hh7RngxsHQGXeZlE_R5nPWUqcINgm3FfW=

36LyNb-6k3_rQt4w7g2c1HJWe1Zs0xo8UVmSvA9MkPc2GDHeOtyK3m6DRvlf7ONpjpNAlivQBD2=

0uI96VIX5QCgex8hxpy00b4>

laura@audiencr-agency.co

Our offices :

North Europe: Germany | Denmark | Finland | Ireland | Netherlands |

Norway | Sweden | United Kingdom

South Europe: France | Italy | Portugal | Spain | Belgium | Hungary

America: USA | Brazil | Canada

Asia: Australia | New Zealand | Japan

[image: beacon]

--000000000000c695a5064de8e050

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

0e-9213-6facf8457cc1">

2pt;margin-bottom:12pt">
s-serif;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:=

normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertic=

al-align:baseline">Hello,

8;margin-top:12pt;margin-bottom:12pt">
mily:Arial,sans-serif;color:rgb(0,0,0);background-color:transparent;font-va=

riant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates=

:normal;vertical-align:baseline">I see you regularly accept link placements=

for
w0WUoqlba3YNcF3jQwxbQczOfCBq306l8Xl-nRy8pnQGepN_TqPCtGR094C0YxcLAn3s8FLbjgC=

vAqczzNEQzl2qg20iBnl5NFl1-7MT5zTeAZBstG55xPclKHuOD6jszyiiwGoWUkWnMq8dkJK2Sw=

l833J5d35SJfQFnV86frW0" rel=3D"nofollow">nk.ca, and I=E2=80=99m interes=

ted to know your pricing and guidelines.

line-height:1.38;margin-top:12pt;margin-bottom:12pt">
ze:11pt;font-family:Arial,sans-serif;color:rgb(0,0,0);background-color:tran=

sparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-var=

iant-alternates:normal;vertical-align:baseline">We were founded in the UK i=

n 2009, and the team has grown to include 100 people working across Europe,=

Asia, and the US working for an international client base.

r=3D"ltr" style=3D"line-height:1.38;margin-top:12pt;margin-bottom:12pt">
an style=3D"font-size:11pt;font-family:Arial,sans-serif;color:rgb(0,0,0);ba=

ckground-color:transparent;font-variant-numeric:normal;font-variant-east-as=

ian:normal;font-variant-alternates:normal;vertical-align:baseline">This
an>
148,216);background-color:transparent;font-variant-numeric:normal;font-vari=

ant-east-asian:normal;font-variant-alternates:normal;vertical-align:baselin=

e">
F7NF5vx_6xPfarwxG2Kjsh8vN8QR11y9y2OqRy8pnQGyTItK5IVI6hly_als1nYE6EK002XJVsy=

9z--syQDZ_d3AFEayB-WcXHGACPcQjw_iEMD3rKg61K2_O_3CstLJcxL7PZh2blLYVJm16lZmbj=

MWtk-3VIfBcEFkaQRW7hY" rel=3D"nofollow">nk.ca

Categories: Google Gmail Spam

0 Comments

Online Adverisement spam from Google Gmail Part 1
Posted by Dave Yadallee on Thursday, March 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Mar 2026 04:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5hp9-000000002ZV-3zft

for dave@doctor.nl2k.ab.ca;

Thu, 26 Mar 2026 04:20:23 -0600

Resent-From: The Doctor

Resent-Date: Thu, 26 Mar 2026 04:20:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f171.google.com ([209.85.215.171]:61850)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5flb-00000000BEh-1olO

for sales@nk.ca;

Thu, 26 Mar 2026 02:08:37 -0600

Received: by mail-pg1-f171.google.com with SMTP id 41be03b00d2f7-c70fb6aa323so306044a12.3

for ; Thu, 26 Mar 2026 01:07:45 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1774512459; cv=none;

d=google.com; s=arc-20240605;

b=D2nJowuJs0NrQ0seX0W/BygsFmcYseRUXFTOOWuX0awBSDzsMUVVvELS6mNGkzy+VR

k5hT4mdLEN5A4Njci+mlqhfp8lRd34npAMFI1YE1OigoiHHk8uHX06n51gYWTv6F7zZ0

qdm/nOsMBiYygF0Z5yDah6/7UB+wsVIfcIJm5SiqputwC8Z8+TDDjVS+1T/uaPqeYNvF

8tF+TDxkvOhCgO1I8MHvvsiSPIFH0Y+njFMVelHBIAsbqv0jLssr32B87bYC9R0Smcf/

hZOTu9Y7T01+m+h6PvPSosNuKXfmYfJqEFJxDWn+ks3XIoDREg48S3UNMBDYSq9YM8k6

rHsA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:sender:mime-version:dkim-signature;

bh=LycCG0NwZa1SPYvhAmj7j7qlEp7Mix3M3LvdMG1Vbdw=;

fh=K4YXDlBzh75jp+umpiVSGKtavKLbAmcgNobJ9O4QpWc=;

b=aFO+9uI12eKtyhlIpnYt2i7SWm3tpCq4r83J1c97h0zFlFcZse/WelS3qwD+O+TQMi

iBv0syZKezOKZIktHPPCN1dCGTt1KoaJJ/KbEqqcdw4ipxVtZ84JbUMY1iA/32hWDctp

YH/HAqOUpue/QSn+DHYKWe+eNTIgRaHQnSreOLcIUNJLJAlTzVdEA/4AenvO/futeqfh

ySRq4e3wtEYBAYRs41k61NU0ij9/L6H1RYFDNg3tFNhZQlZBLQaJ1KsUm4BI0h5SQJ3h

pw/gOsq4ZitC7v97YPirslCZS3AFhcuagkbm1yBBP1h1W3k//PYIVtRf7SjGED5wBaU4

lHzg==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=audiencr-agency.co; s=google; t=1774512459; x=1775117259; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=LycCG0NwZa1SPYvhAmj7j7qlEp7Mix3M3LvdMG1Vbdw=;

b=loMDnkBGHkaVgdA7tTX8Vr40+EzaVhD1h2NmgpiNar7R/4EmcoPBmvFzPiiJytw7an

IZGSvRHZRR2sdtk7goKClPKcMl0BwK4lMzXy9oMVbnpVhrlXNjefnmBv5Zo06GuxK2un

ObnM+y0+45FEZmAozxY0vyLCvhkgVPZO94vpM0u4JQ3+07tOqZBQjRRp7lS+zVNF9oAU

Is1BNhcx0uh+7d3C0g5jv3bVFZS6erzFzWghlYoA0bJPDz4clTeISzYeJaGdruXy16to

1wxiKrfVisby4rrliE/pUlUeWaMw5cVfpe16mrKIrAOdL+ZJQeSnfKtQ84kWqHBnrrVB

MYLg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774512459; x=1775117259;

h=to:subject:message-id:date:from:sender:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=LycCG0NwZa1SPYvhAmj7j7qlEp7Mix3M3LvdMG1Vbdw=;

b=GmHCUa1SPQRoZlPn/Gz6curNGgwf/E4ik30dQpCSD7olnbLLR1WvODWfnaqGKh17fq

xD5BtEQRk9ATySL4EVOXMY54BtrLNOrR3J0SdkdFLHn32Ts4iwmk1zgqHlL04wc+cOTz

QGql9wIm4MgM2Jkxon2qI9ZVqqALu0jauHrwG2KRw+t8YBQ8RVPvKl+iSacIFv7WY7Mg

jSfmF1w3s4iw819kgWcAKUUBqthjtWjj1ZAbJlRxOzUZ3B/vAySoyAFTUmzsSg7iofrl

swotIstQTBXHjHkD0hqvX60p1tJq3EO1WamJamJizub292bRzOcw/YnfAh7rGUHLBNDa

ltwQ==

X-Gm-Message-State: AOJu0YwEU6rVu7/YvBJtz1vLZQl4DCnh0rSzL8vLsCJYL+m19Qt6YGRA

I/jLcUuvbbEVsfdIP+UdpcIBTcdYgtq+b/g9oEpwUOsvVVnvtiwjI3KHmceyjk4VBeXDDWgNyne

xj4gQdm9OGnEj3gT9gZ2OyEAW/wsXcK+R+hmPYISVpezYevHQ5JZtlkttpA==

X-Gm-Gg: ATEYQzxe+TG3iI8w2RHi5BRy3P/VNMPbb5FwaFRFc0pi/Z+RYMBf6laC8mYrjgXuis5

P1L1P+fNd0eqnDDZCp6oXcxKHwTBQlq8hTmgRhc8ZPOB9ibCsVGxJz1nL7MZ5YJso6kLaz1eA/w

T4bErjfkKBc9furbhPCTVCcoLv1U5al2nJPPrWsVEi1+htpVliXULP06x3GElQ+jkWbU6ayWzJC

DP8DbbEID06kkb31SES0gvl2GVFaUdiZat8e+MPaK2wEOQzy470PEly9bXPONADy2lnc4LtEKXA

TxCJNtyBGEPk6/sYluJd0BvyiKYRHTLsvwYC

X-Received: by 2002:a17:903:1448:b0:2ae:4d23:3364 with SMTP id

d9443c01a7336-2b0b0b5b940mr73860145ad.52.1774512459121; Thu, 26 Mar 2026

01:07:39 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Thu, 26 Mar 2026 01:07:38 -0700

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Thu, 26 Mar 2026 01:07:37 -0700

MIME-Version: 1.0

Sender: Laura Spencer

From: Laura Spencer

Date: Thu, 26 Mar 2026 01:07:38 -0700

X-Google-Sender-Auth: sHeDQAMppVyIyqKxYyvtm9s3N7c

X-Gm-Features: AQROBzCQetQ6JRs-TSdHS9LRbrkQx3TFtX8q5Z34iyTBOtHG_pdOg9idDY8c4K4

Message-ID:

Subject: RE: Publishing Reintroduction

To: Sales

Content-Type: multipart/alternative; boundary="000000000000c695a5064de8e050"

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, I see you regularly accept link placements for nk.ca

[...]

Content analysis details: (8.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.215.171 listed in will-spam-for-food.eu.org]

[209.85.215.171 listed in will-spam-for-food.eu.org]

[209.85.215.171 listed in will-spam-for-food.eu.org]

[209.85.215.171 listed in will-spam-for-food.eu.org]

[209.85.215.171 listed in will-spam-for-food.eu.org]

[209.85.215.171 listed in will-spam-for-food.eu.org]

[209.85.215.171 listed in will-spam-for-food.eu.org]

[209.85.215.171 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.171 listed in dnsbl.ahbl.org]

[209.85.215.171 listed in dnsbl.ahbl.org]

[209.85.215.171 listed in dnsbl.ahbl.org]

[209.85.215.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.171 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_KP BODY: Odd Letter Triples with KP

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 IMPRO_URI_2 No description available.

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} RE: Publishing Reintroduction

Categories: Google Gmail Spam

0 Comments

Telnet Communications phish
Posted by Dave Yadallee on Thursday, March 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 25 Mar 2026 17:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5XyZ-00000000EDm-1uz5

for dave@doctor.nl2k.ab.ca;

Wed, 25 Mar 2026 17:49:27 -0600

Resent-From: The Doctor

Resent-Date: Wed, 25 Mar 2026 17:49:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx.ite.net ([202.88.64.59]:34608 helo=mail.ite.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5XpH-00000000D3K-1WUS

for sales@nk.ca;

Wed, 25 Mar 2026 17:40:00 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.ite.net;

s=smtp1dkim; t=1774481910;

bh=Gm6yAab/ibk1e2iLG4+e2woVs0L/C4/Sw+cf7EiF+w8=;

h=From:Subject:Date:From;

b=jiT7JoPSM8GafyN/xENo1Jg0BFNkvP+GlCIJLl3XMZQ1hptlra5iCRKoTYl9jUq2k

+862cBYUO9xaoGNmpcQU0Mzr6cp5lsvcwIeUBppRq9vtrg2Dc1avvJ9OlzHGPr7xLX

mjT2U6Ma555YCGgbv7732o4Mq+5kTHlQCjZp7du0=

Received: from User (unknown [173.255.170.170])

by mail.ite.net (Postfix) with ESMTPA id CD1A68CCB654;

Thu, 26 Mar 2026 09:37:57 +1000 (ChST)

From: "Telnet Communications"

Subject: NOTICE: Account status update from Telnet Communications

Date: Wed, 25 Mar 2026 18:38:29 -0500

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_000A_01C2A75B.3D29C984"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 5.50.4522.1200

X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200

X-Virus-Scanned: clamav-milter 1.4.3 at av01.ite.net

X-Virus-Status: Clean

X-Spam_score: 26.2

X-Spam_score_int: 262

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: The Telnet Webmail DNS is being updated and all inactive

Telnet email accounts will be permanently deleted. Do you wish to continue

using the Telnet email services? If YES, then Re-validate your email account

immediately.

Content analysis details: (26.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[173.255.170.170 listed in will-spam-for-food.eu.org]

[173.255.170.170 listed in will-spam-for-food.eu.org]

[173.255.170.170 listed in will-spam-for-food.eu.org]

[173.255.170.170 listed in will-spam-for-food.eu.org]

[173.255.170.170 listed in will-spam-for-food.eu.org]

[173.255.170.170 listed in will-spam-for-food.eu.org]

[173.255.170.170 listed in will-spam-for-food.eu.org]

[173.255.170.170 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[173.255.170.170 listed in dnsbl.ahbl.org]

[173.255.170.170 listed in dnsbl.ahbl.org]

[173.255.170.170 listed in dnsbl.ahbl.org]

[173.255.170.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 NSL_RCVD_FROM_USER Received from User

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.2 MISSING_HEADERS Missing To: header

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

1.2 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

0.0 FROM_MISSP_USER From misspaced, from "User"

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

2.0 MIXED_HREF_CASE Has href in mixed case

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool

0.7 STOCK_IMG_OUTLOOK Stock spam image part, with Outlook-like features

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

2.5 TVD_PH_SUBJ_META No description available.

0.0 FROM_MISSPACED From: missing whitespace

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

Subject: {SPAM?} NOTICE: Account status update from Telnet Communications

This is a multi-part message in MIME format.

------=_NextPart_000_000A_01C2A75B.3D29C984

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

The Telnet Webmail DNS is being updated and all inactive Telnet email accounts will be permanently deleted.

Do you wish to continue using the Telnet email services? If YES, then Re-validate your email account immediately.

- CLICK HERE TO REVALIDATE YOUR TELNET EMAIL ACCOUNT

Telnet Communications.

http://www.telnetcommunication

------=_NextPart_000_000A_01C2A75B.3D29C984

Content-Type: image/jpeg;

name="img1.jpg"

Content-Transfer-Encoding: base64

Content-ID: <00F0A71CF9AB$0426B897$0100007f@zncpcktlfpjsycz>

------=_NextPart_000_000A_01C2A75B.3D29C984--

Categories: Phish

0 Comments

Telnet communications phish
Posted by Dave Yadallee on Thursday, March 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 25 Mar 2026 17:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5XlA-00000000Cma-1A1J

for dave@doctor.nl2k.ab.ca;

Wed, 25 Mar 2026 17:35:36 -0600

Resent-From: The Doctor

Resent-Date: Wed, 25 Mar 2026 17:35:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.ite.net ([202.88.64.59]:60100 helo=mail.ite.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5V6t-00000000IEi-1Ore

for sales@nk.ca;

Wed, 25 Mar 2026 14:46:00 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.ite.net;

s=smtp1dkim; t=1774471493;

bh=vYVpOF546GSDt2FHJ0ur19u5evGX/drhX5uCOZoDhdc=;

h=From:Subject:Date:From;

b=SSNDJ0wfnTXlSyMBq4zzBZs2J+m9AeYOEFzpzA+TtLVmxffF3MM1YWcAQUfSCOgCG

D/JT5TeoqTqk6KYX7cVjX8xeoF6Yow+45J8Nwi/HcfVUvJTtacYDXtpYBmOUGZmDXa

73rvSgYjMwP/VB45KRP8dqPP42JmzzBZR7O5ZGfE=

Received: from User (unknown [173.255.170.165])

by mail.ite.net (Postfix) with ESMTPA id 1AD068CCB4E6;

Thu, 26 Mar 2026 06:44:19 +1000 (ChST)

From:

Subject: Account status update from Telnet Communications

Date: Wed, 25 Mar 2026 15:44:52 -0500

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_00B2_01C2AA85.3B74484C"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2800.1081

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081

X-Virus-Scanned: clamav-milter 1.4.3 at av01.ite.net

X-Virus-Status: Clean

X-Spam_score: 24.2

X-Spam_score_int: 242

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: The Telnet Webmail DNS is being updated and all inactive

Telnet email accounts will be permanently deleted. Do you wish to continue

using the Telnet email services? If YES, then Re-validate your email account

immediately.

Content analysis details: (24.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[173.255.170.165 listed in dnsbl.ahbl.org]

[173.255.170.165 listed in dnsbl.ahbl.org]

[173.255.170.165 listed in dnsbl.ahbl.org]

[173.255.170.165 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[173.255.170.165 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[173.255.170.165 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[173.255.170.165 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[173.255.170.165 listed in dnsbl.ahbl.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 NSL_RCVD_FROM_USER Received from User

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.2 MISSING_HEADERS Missing To: header

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 STOCK_IMG_OUTLOOK Stock spam image part, with Outlook-like features

1.2 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

1.2 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

2.0 MIXED_HREF_CASE Has href in mixed case

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

Subject: {SPAM?} Account status update from Telnet Communications

This is a multi-part message in MIME format.

------=_NextPart_000_00B2_01C2AA85.3B74484C

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

The Telnet Webmail DNS is being updated and all inactive Telnet email accounts will be permanently deleted.

Do you wish to continue using the Telnet email services? If YES, then Re-validate your email account immediately.

- CLICK HERE TO REVALIDATE YOUR TELNET EMAIL ACCOUNT

Telnet Communications.

http://www.telnetcommunication

------=_NextPart_000_00B2_01C2AA85.3B74484C

Content-Type: image/jpeg;

name="img1.jpg"

Content-Transfer-Encoding: base64

Content-ID: <00CBF0E10CBE$0240DB5C$0100007f@lniwxkczsdfgdyj>

------=_NextPart_000_00B2_01C2AA85.3B74484C--

Categories: Phish

0 Comments

Metamask Phish Part 3
Posted by Dave Yadallee on Thursday, March 26. 2026

background-color: #f4f4f4;

margin: 0;

padding: 0">

margin: 20px auto;

background-color: #ffffff;

padding: 20px;

border-radius: 5px;

box-shadow: 0 4px 12px rgba(0, 0, 0, 0.05)" class=3D"email-containe=

r">

border-bottom: 1px solid #e8e8e8;

padding-bottom: 10px;

margin-bottom: 20px" class=3D"email-header">

"border-color: rgb(0, 0, 0); width: 92px; height: 53px;" alt=3D"MetaMask Lo=

go" src=3D"https://resize.yandex.net/mailservice?url=3Dhttps%3A%2F%2Fnewsle=

tter.consensys.io%2Fhs-fs%2Fhubfs%2FMetaMax%2520-%2520white%2520-%2520box%2=

520-%2520logo.png%3Fwidth%3D200%26upscale%3Dtrue%26name%3DMetaMax%2520-%252=

0white%2520-%2520box%2520-%2520logo.png&proxy=3Dyes&key=3D9e601f4e4=

69da192e6cd487820a1007e">

color: #333;

font-size: 16px;

margin: 16px 0">Dear Customer,

color: #333;

font-size: 16px;

margin: 16px 0">A new version of MetaMask is ready — =

Version 13.12.1 brings important improvements and security refinem=

ents. We recommend updating to ensure the best experience and protection fo=

r your wallet.

=20=20=20=20=20=20=20=20=20=20=20=20

padding: 10px;

margin: 20px 0;

border: 1px solid #FF5300;

border-radius: 5px;

color: #d93a00" class=3D"alert-text">

⚡ Update Available — Version 13.12.1

=20=20=20=20=20=20=20=20=20=20=20=20

border-left: 4px solid #FF5300;

padding: 12px 16px;

border-radius: 6px;

margin: 20px 0;

font-size: 14px;

color: #1a2c3e" class=3D"update-badge">

background: #1a2c3e;

color: white;

font-weight: 600;

padding: 4px 12px;

border-radius: 30px;

font-size: 13px;

letter-spacing: 0.3px;

margin-bottom: 12px" class=3D"version-chip">What's new in 13.12.1
div>

margin: 12px 0 8px" class=3D"changelog-list">

line-height: 1.5;

color: #2c3e4f">🔧 Fix main build modifying desktop build st=

eps

line-height: 1.5;

color: #2c3e4f">🛡️ Improving the security system
>

line-height: 1.5;

color: #2c3e4f">📡 Fix incorrect network information

line-height: 1.5;

color: #2c3e4f">⚡ Improve performance on signature request
i>

=20=20=20=20=20=20=20=20=20=20=20=20

How to update?

Click the button below to start the update process.
>

Follow the on-screen instructions to apply the latest v=

ersion.

After updating, your wallet will be fully optimized wit=

h the newest security layer.

width: 100%;

max-width: 250px;

margin: 30px auto;

text-align: center;

padding: 10px 15px;

background-color: #FF5300;

color: #ffffff;

text-decoration: none;

border-radius: 5px;

font-weight: 600;

letter-spacing: 0.5px;

transition: background-color 0.3s" class=3D"recover-button" href=3D=

"https://share.google/4GUCcXm7k64YpxH3I">Update Available

color: #888;

text-align: center;

margin-top: 40px" class=3D"footer-text">

© 2026 MetaMask. All rights reserved.

Categories: Phish

0 Comments

Metamask Phish Part 2
Posted by Dave Yadallee on Thursday, March 26. 2026

0">

Update Available — Version 13.12.1

Categories: Phish

0 Comments

Metamask Phish Part 1
Posted by Dave Yadallee on Thursday, March 26. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 25 Mar 2026 17:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5Xkw-00000000CmB-1Ktq

for dave@doctor.nl2k.ab.ca;

Wed, 25 Mar 2026 17:35:22 -0600

Resent-From: The Doctor

Resent-Date: Wed, 25 Mar 2026 17:35:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [50.28.84.16] (port=60352 helo=server.naikbeen.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5U8S-00000000CR3-2dTD

for sales@nk.ca;

Wed, 25 Mar 2026 13:43:33 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=mashru-al-khair.org.af; s=default; h=Content-Transfer-Encoding:Content-Type

:MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=axwFDK1jGihE4hbPCPssryxd4YdEu1YLswV9UsEfzMU=; b=SrGt05OE6XvwHoG6Z7911EvcZ9

S/K0fmQbJ7HwW2sf4gJgds7MXuaXQfmO9O6327GFiXegapEx1YYz+ydSVtMUkzq6fxvvqJovaBOeN

iWC84NGipkhNQFMMAggf5wSdkidKTaZ4ot8jm/86iFcQq7eEjYi2Yk0zXhnp1/T5mD6Cp1i2bc7zP

QRwUHLzbnQCnDzgFAeWXOpjKuVibGsuV9TtmHRuPXjwXQwyoVcpag8XVLoAHAC3X/3Ww9AOZNiMlM

pqFJB+M6Ozh6QUFmCfS4Hw6Vts/JsDgxLX8Hvy7xOSivxUp1LyT6nvYJ0K/p+Dz1T/fRkjsd2KVlv

RBf1Bwwg==;

Received: from [41.216.188.201] (port=53916)

by server.naikbeen.net with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.1)

(envelope-from )

id 1w5U7U-000000030LX-20Li

for sales@nk.ca;

Wed, 25 Mar 2026 15:42:24 -0400

From: "=?UTF-8?B?TWV0YU1hc2s=?="

To: sales@nk.ca

Subject: =?UTF-8?B?VXBkYXRlIEF2YWlsYWJsZTogVmVyc2lvbiAxMy4xMi4x=?=

Date: 25 Mar 2026 12:42:24 -0700

Message-ID: <20260325124224.92A3C809C4416A22@mashru-al-khair.org.af>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.naikbeen.net

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - mashru-al-khair.org.af

X-Get-Message-Sender-Via: server.naikbeen.net: authenticated_id: info@mashru-al-khair.org.af

X-Authenticated-Sender: server.naikbeen.net: info@mashru-al-khair.org.af

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Update Available â€” Version 13.12.1 Dear Customer,

Content analysis details: (8.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.216.188.201 listed in will-spam-for-food.eu.org]

[41.216.188.201 listed in will-spam-for-food.eu.org]

[41.216.188.201 listed in will-spam-for-food.eu.org]

[41.216.188.201 listed in will-spam-for-food.eu.org]

[41.216.188.201 listed in will-spam-for-food.eu.org]

[41.216.188.201 listed in will-spam-for-food.eu.org]

[41.216.188.201 listed in will-spam-for-food.eu.org]

[41.216.188.201 listed in will-spam-for-food.eu.org]

[50.28.84.16 listed in will-spam-for-food.eu.org]

[50.28.84.16 listed in will-spam-for-food.eu.org]

[50.28.84.16 listed in will-spam-for-food.eu.org]

[50.28.84.16 listed in will-spam-for-food.eu.org]

[50.28.84.16 listed in will-spam-for-food.eu.org]

[50.28.84.16 listed in will-spam-for-food.eu.org]

[50.28.84.16 listed in will-spam-for-food.eu.org]

[50.28.84.16 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[50.28.84.16 listed in dnsbl.ahbl.org]

[50.28.84.16 listed in dnsbl.ahbl.org]

[50.28.84.16 listed in dnsbl.ahbl.org]

[50.28.84.16 listed in dnsbl.ahbl.org]

[41.216.188.201 listed in dnsbl.ahbl.org]

[41.216.188.201 listed in dnsbl.ahbl.org]

[41.216.188.201 listed in dnsbl.ahbl.org]

[41.216.188.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[50.28.84.16 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[50.28.84.16 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[50.28.84.16 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[50.28.84.16 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

Subject: {SPAM?} =?UTF-8?B?VXBkYXRlIEF2YWlsYWJsZTogVmVyc2lvbiAxMy4xMi4x=?=

Categories: Phish

0 Comments

Telnet Communications phish
Posted by Dave Yadallee on Wednesday, March 25. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 25 Mar 2026 13:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5U3j-0000000032T-0s72

for dave@doctor.nl2k.ab.ca;

Wed, 25 Mar 2026 13:38:31 -0600

Resent-From: The Doctor

Resent-Date: Wed, 25 Mar 2026 13:38:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx.ite.net ([202.88.64.59]:55286 helo=mail.ite.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w5Sfw-00000000Hnq-1UMY

for sales@nk.ca;

Wed, 25 Mar 2026 12:10:01 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.ite.net;

s=smtp1dkim; t=1774462135;

bh=6e+XtYHY/5JA0scGcYKU21kCZX4mWfr3Mhra8NuvUCk=;

h=From:Subject:Date:From;

b=LLGO13WUG5ClUocYj/4bHia9F33cPVf9yL3x8JOkBZlxoalliF0sIMzrpnnT+0EUB

sQMQMD1EpHERV7lmF0zRrZaAkaUT0FvDoSoQM3hCN1lFJkWvtS3DxPPRZoR73wvl2b

bYGcJhZF1XOfFsDoaZF280wyzNNOHPC0fuT7Gm+k=

Received: from User (unknown [173.255.170.165])

by mail.ite.net (Postfix) with ESMTPA id 8CCBF8CCB063;

Thu, 26 Mar 2026 04:08:21 +1000 (ChST)

From: "Telnet Communications"

Subject: Are you still a Telnet Customer?

Date: Wed, 25 Mar 2026 13:08:54 -0500

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_00DD_01C2A75B.6E7FE5F0"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 5.50.4522.1200

X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200

X-Virus-Scanned: clamav-milter 1.4.3 at av01.ite.net

X-Virus-Status: Clean

X-Spam_score: 22.4

X-Spam_score_int: 224

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: The Telnet Webmail DNS is being updated and all inactive

Telnet email accounts will be permanently deleted. Do you wish to continue

using the Telnet email services? If YES, then Re-validate your email account

immediately.

Content analysis details: (22.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[173.255.170.165 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[173.255.170.165 listed in dnsbl.ahbl.org]

[173.255.170.165 listed in dnsbl.ahbl.org]

[173.255.170.165 listed in dnsbl.ahbl.org]

[173.255.170.165 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 NSL_RCVD_FROM_USER Received from User

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.2 MISSING_HEADERS Missing To: header

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

0.7 STOCK_IMG_OUTLOOK Stock spam image part, with Outlook-like features

0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool

0.0 FROM_MISSP_USER From misspaced, from "User"

2.0 MIXED_HREF_CASE Has href in mixed case

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 FROM_MISSPACED From: missing whitespace

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Subject: {SPAM?} Are you still a Telnet Customer?

This is a multi-part message in MIME format.

------=_NextPart_000_00DD_01C2A75B.6E7FE5F0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

The Telnet Webmail DNS is being updated and all inactive Telnet email accounts will be permanently deleted.

Do you wish to continue using the Telnet email services? If YES, then Re-validate your email account immediately.

- CLICK HERE TO REVALIDATE YOUR TELNET EMAIL ACCOUNT

Telnet Communications.

http://www.telnetcommunication

------=_NextPart_000_00DD_01C2A75B.6E7FE5F0

Content-Type: image/jpeg;

name="img1.jpg"

Content-Transfer-Encoding: base64

Content-ID: <00B2C1E9B417$007492BA$0100007f@hcivklfxriyngkm>

------=_NextPart_000_00DD_01C2A75B.6E7FE5F0--

Categories: Phish

0 Comments

Page 1114 of 1114, totaling 16699 entries

previous page

No entries to print

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	March '26					Forward →
						1
2	3	4	5	6	7	8
9	10	11	12	13	14	15
16	17	18	19	20	21	22
23	24	25	26	27	28	29
30	31