Microsoft Office 2024 phish
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 09 Nov 2026 17:09:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from)
id 1xQYU4-0000000097w-0VLk
for dave@doctor.nl2k.ab.ca;
Mon, 09 Nov 2026 17:09:04 -0600
Resent-From: The Doctor
Resent-Date: Mon, 9 Nov 2026 17:09:04 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [163.52.128.20] (port=60131 helo=softwareslicense.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xQThy-00000000Mft-0iCf
for sales@netknow.ca;
Mon, 09 Nov 2026 12:03:08 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=netknow.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=sales@netknow.ca;
bh=Nh/ZhN4b4a5z6RGyd+mCP3aGPWA=;
b=C4bdKZE/K+2s3Uu1MLcFA+uT+bxJV5/OJigFfXe1Jck7qQ/vac9Qbl/hSjM6v+2kzrcOXyzYX24+
EfYZ1gM4U1U4q1NwWWEYdzB4gLL0ZuN/3+eYJuCzvDynY2HBN7/YEH3bFQc0CZrfScHtFR1tkxYg
7Uqie9OkB6qJHpMdOYXP73nwqYNzVW2XlOAPOR3QF5Fvfvid3cVp/U1mOXSh2y7wtwu67VoyyVuB
yy5VTT5WP8tCZfenCSGxqH4Hs/zvmfUPW+eJ6JnOoiMSXP2pdOAmgEbviA/qoyMJJzSH1Sh1yd3O
jDQGSFzV/SctCZn4u7kz1O92jy8ljDGMl/ca1A==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=netknow.ca;
b=TjHCCzf/9E0ow/BR+jzcajswIEw5sXJ2VAQ38q2ChRigvFN98CrErmoRC2NPH1pQdT9/VwlTLMA+
a7sHFQopgqk76rYASG53s9dchCLxjL9qnViz4uMnMzhyVOtfqUnlGnxGeN79K/M41nx5eJgoJzGC
DfFsqYWdm5xUnSJUx6r4wvibHSyWswipLqJwEERrNQBZkIDsOrAjy0T966ra9gRg1LoWBbIWLwDz
RfD5zZYFey5j/Slr3zMjg/jwtykTnCAFeLribU000Ne6c+D6STNSBr6Afr3qd0oV3zhal9HxOeAM
nHia5CzPwzvd1ax62u9VdFfX1oX3L/Dtg0xulQ==;
Date: 11-09-2026
From: Digital License Center
To: sales@netknow.ca
Cc: sales@netknow.ca
Subject: Microsoft Office 2024 – Get Your Lifetime License Today!
MIME-Version: 1.0
Content-Type: text/html
X-Spam_score: 11.7
X-Spam_score_int: 117
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Office 2024 for Windows & Mac KeyMart MICROSOFT OFFICE 2024
· WINDOWS & MAC Work Smarter. Achieve More.
Content analysis details: (11.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: 89.252.175.132]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: 89.252.175.132]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[163.52.128.20 listed in bl.score.senderscore.com]
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
Subject: {SPAM?} Microsoft Office 2024 – Get Your Lifetime License Today!
Office 2024 for Windows & Mac
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 09 Nov 2026 17:09:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xQYU4-0000000097w-0VLk
for dave@doctor.nl2k.ab.ca;
Mon, 09 Nov 2026 17:09:04 -0600
Resent-From: The Doctor
Resent-Date: Mon, 9 Nov 2026 17:09:04 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [163.52.128.20] (port=60131 helo=softwareslicense.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xQThy-00000000Mft-0iCf
for sales@netknow.ca;
Mon, 09 Nov 2026 12:03:08 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=netknow.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=sales@netknow.ca;
bh=Nh/ZhN4b4a5z6RGyd+mCP3aGPWA=;
b=C4bdKZE/K+2s3Uu1MLcFA+uT+bxJV5/OJigFfXe1Jck7qQ/vac9Qbl/hSjM6v+2kzrcOXyzYX24+
EfYZ1gM4U1U4q1NwWWEYdzB4gLL0ZuN/3+eYJuCzvDynY2HBN7/YEH3bFQc0CZrfScHtFR1tkxYg
7Uqie9OkB6qJHpMdOYXP73nwqYNzVW2XlOAPOR3QF5Fvfvid3cVp/U1mOXSh2y7wtwu67VoyyVuB
yy5VTT5WP8tCZfenCSGxqH4Hs/zvmfUPW+eJ6JnOoiMSXP2pdOAmgEbviA/qoyMJJzSH1Sh1yd3O
jDQGSFzV/SctCZn4u7kz1O92jy8ljDGMl/ca1A==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=netknow.ca;
b=TjHCCzf/9E0ow/BR+jzcajswIEw5sXJ2VAQ38q2ChRigvFN98CrErmoRC2NPH1pQdT9/VwlTLMA+
a7sHFQopgqk76rYASG53s9dchCLxjL9qnViz4uMnMzhyVOtfqUnlGnxGeN79K/M41nx5eJgoJzGC
DfFsqYWdm5xUnSJUx6r4wvibHSyWswipLqJwEERrNQBZkIDsOrAjy0T966ra9gRg1LoWBbIWLwDz
RfD5zZYFey5j/Slr3zMjg/jwtykTnCAFeLribU000Ne6c+D6STNSBr6Afr3qd0oV3zhal9HxOeAM
nHia5CzPwzvd1ax62u9VdFfX1oX3L/Dtg0xulQ==;
Date: 11-09-2026
From: Digital License Center
To: sales@netknow.ca
Cc: sales@netknow.ca
Subject: Microsoft Office 2024 – Get Your Lifetime License Today!
MIME-Version: 1.0
Content-Type: text/html
X-Spam_score: 11.7
X-Spam_score_int: 117
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Office 2024 for Windows & Mac KeyMart MICROSOFT OFFICE 2024
· WINDOWS & MAC Work Smarter. Achieve More.
Content analysis details: (11.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
[163.52.128.20 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
[163.52.128.20 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[163.52.128.20 listed in dnsbl.ahbl.org]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: 89.252.175.132]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: 89.252.175.132]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[163.52.128.20 listed in bl.score.senderscore.com]
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
Subject: {SPAM?} Microsoft Office 2024 – Get Your Lifetime License Today!
KeyMart | ||||
MICROSOFT OFFICE 2024 · WINDOWS & MAC
| ||||
Microsoft Office 2024 WINDOWS & MAC · LIFETIME LICENSE Windows — Select Your License 30 PC – Lifetime ▾ 1 PC – Lifetime $35.00 2 PC – Lifetime 3 PC – Lifetime 5 PC – Lifetime 10 PC – Lifetime 20 PC – Lifetime 30 PC – Lifetime $170.00 Intermediate package prices are displayed on the product page. Select your preferred Windows quantity before checkout. href="http://89.252.175.132/4EZPGl3464Fkce123zqxirtggiu71CFSMTBNPTWTROEZ123083ESFU628b1"> CHOOSE YOUR WINDOWS LICENSE →
| ||||
MAC EDITION Office Home & Business 2024 for Mac
One-time price $140.00 1 Mac · Lifetime license href="http://89.252.175.132/4gBTZb3464zJgd123dmfgssgqya71PTMYERYATBOFLSJ123083XNAC628K1"> GET THE MAC LICENSE →
| ||||
| ||||
Your Essential Office Applications Word Excel PowerPoint Outlook OneNote Access* Publisher* Teams*
| ||||
Fast & Convenient Digital Delivery
| ||||
Ready to Upgrade?
href="http://89.252.175.132/4odBLH3464Glen123blfmdogzuc71SDJFKMGVFTNQVTB123083RVUB628Z1"> SHOP WINDOWS href="http://89.252.175.132/4VgYJI3464TNed123rawdnixvbg71EJKZZDGXQMIOZUB123083UPKY628L1"> SHOP MAC | ||||
KeyMart Genuine Digital Software Licenses Need assistance? support@keymart.net Windows and Mac editions are licensed and sold separately. Microsoft and Office are trademarks of Microsoft Corporation. KeyMart is an independent retailer and is not affiliated with or endorsed by Microsoft. You are receiving this email because you subscribed to our updates. Unsubscribe | Visit KeyMart © 2026 KeyMart. All rights reserved. |