Phishing from Microsoft Outlook Part 4


align="center" border="0" cellpadding="0" cellspacing="0" class="" style="width:600px;" width="600"

>









































































Click here to see in your browser, or you can unsubscribe from all future emails.














































Â
























Phishing from Microsoft Outlook Part 3









Preview - Welcome to Offer






































Â






















































Phishing from Microsoft Outlook Part 2

Content preview: Welcome to [Coded Mails] Preview - Welcome to Offer



Content analysis details: (9.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.158.242.35 listed in dnsbl.ahbl.org]

[51.158.242.35 listed in dnsbl.ahbl.org]

[51.158.242.35 listed in dnsbl.ahbl.org]

[51.158.242.35 listed in dnsbl.ahbl.org]

[52.102.140.47 listed in dnsbl.ahbl.org]

[52.102.140.47 listed in dnsbl.ahbl.org]

[52.102.140.47 listed in dnsbl.ahbl.org]

[52.102.140.47 listed in dnsbl.ahbl.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:c0:cafe:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:c0:0:0:0:32 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.158.242.35 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.158.242.35 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.158.242.35 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.158.242.35 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.102.140.47 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 FROM_LOCAL_DIGITS From: localpart has long digit sequence

0.3 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.0 MR_DIFF_MID No description available.

1.0 FORGED_SPF_HELO No description available.

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Fwd: Limited-Time Offer: Warmth Delivered.





Welcome to [Coded Mails]



























Phishing from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Dec 2025 15:05:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vWM6g-00000000ECQ-32gl

for dave@doctor.nl2k.ab.ca;

Thu, 18 Dec 2025 15:04:22 -0700

Resent-From: The Doctor

Resent-Date: Thu, 18 Dec 2025 15:04:22 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southcentralusazhn15012047.outbound.protection.outlook.com ([52.102.140.47]:11008 helo=SN4PR2101CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from <5538840210650112751217064117757089609283@cfbjibs.temptingfragrances.com>)

id 1vWJ4d-000000001HC-339C

for root@nk.ca;

Thu, 18 Dec 2025 11:50:12 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=qXfWlGacSyRcdlP8R59k6qqUCuxpHpfGztZ8NIz4F1DtGIMJpuD9rItFEQrPrma2BCQFmAniXeHg4MBr8E3k2FUXc//P+h4dZn0juvSRjDfZ4SskgdZeP6VvaFnK8Om0tJFg/aZXGN781IVBhQcaFOBgu3s9tnKaKFygI2bwDWQK+6jpqLrgci/dwpeud9OvAyKJ8R6pYjOfjkegooGUo+pqb+3YgPsNRmYp+UREs3nNzlBboj9Dx/zbfqFoxr7pyPJQbJIl7XGRxUeTUH8tGX1ObHJYGCWfQtJE2aBSKVvj1t0Xdrd9muAXxCiLvueModSfmA1SK0kLuCF8IKqS+A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Dff99/7y8qDBBFG7QTC6S8F5tILs5PHguyZpdeUhx7g=;

b=Kh7Y6soZaJKSNpV+5vh8HP6zEfk+91DEvGtS+3UI1uyUons72QJ2VaL8N++oEU5YViPRD/1YVEYgA14hMw0zr/5tVjVtowImaW6EuPuuK8r6eSXQAdinqprCkkHS/xuAZzlNbSFTgmikadmHn1WpKuyjeNOEkPNCT3lj7TelZtdeRE91A00nxlplIQN+J25JMZRcSdYQ+3yVOvw/yJsvdrEqQwOhB7gxR9W7YjXyRBGBpk9LRES54PZcLS/WjkVyZvvvtNE+A+De3CwVh7inCCHh1DzLmz5PcLulIToDhsB9jJ6921+rPLgWjh3As2QsnqOV6mgSsr2EFF1m8Ae8/g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

51.158.242.35) smtp.rcpttodomain=nk.ca

smtp.mailfrom=cfbjibs.temptingfragrances.com; dmarc=none action=none

header.from=cfbjibs.temptingfragrances.com; dkim=none (message not signed);

arc=none (0)

Received: from MN2PR05CA0019.namprd05.prod.outlook.com (2603:10b6:208:c0::32)

by CYYPR16MB5491.namprd16.prod.outlook.com (2603:10b6:930:cb::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9434.6; Thu, 18 Dec

2025 18:49:10 +0000

Received: from BL02EPF0002992E.namprd02.prod.outlook.com

(2603:10b6:208:c0:cafe::6) by MN2PR05CA0019.outlook.office365.com

(2603:10b6:208:c0::32) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.9434.6 via Frontend Transport; Thu,

18 Dec 2025 18:49:09 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 51.158.242.35)

smtp.mailfrom=cfbjibs.temptingfragrances.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=cfbjibs.temptingfragrances.com;

Received-SPF: None (protection.outlook.com: cfbjibs.temptingfragrances.com

does not designate permitted sender hosts)

Received: from unical.it (51.158.242.35) by

BL02EPF0002992E.mail.protection.outlook.com (10.167.249.59) with Microsoft

SMTP Server id 15.20.9434.6 via Frontend Transport; Thu, 18 Dec 2025 18:49:08

+0000

From: WellaHeat Warmth <9799820275251402630666265@cfbjibs.temptingfragrances.com>

To: root@nk.ca

Subject: Fwd: Limited-Time Offer: Warmth Delivered.

Message-ID: <6977606574.xls2.1652090160603@qrivo.co>

MIME-Version: 1.0

Date: Thu, 18 Dec 2025 18:45:05 +0000

Content-Type: text/html; charset=utf-8

X-SES-Outgoing: Thu, 18 Dec 2025 18:45:05 +0000-51.158.242.35

In-Reply-To:

Errors-To: abuse@VpBff7cGAC.google.com

List-Unsubscribe:

References:

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL02EPF0002992E:EE_|CYYPR16MB5491:EE_

X-MS-Office365-Filtering-Correlation-Id: 9b6b1e35-3994-4051-c6cb-08de3e66206f

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|69100299015|82310400026|376014|41320700013|34020700016|36860700013|1032899013|4022899009|61400799027|13003099007|2066899003|4076899003|8096899003|16110700003;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?dFMyOERDR2pxVnVRMGVCU2NmMm9ZNnBxMGFmVHBlWUkwMTV0RUhhYlRGeVJw?=

=?utf-8?B?VW05SUdRMkNmN0w2Z3pGMkYwaEdiOS8yZzhHMmRueFc4M25BNUVvQzRsNGtZ?=

=?utf-8?B?K2pUeFRiemZDc0FMZ3JvQlFWMXEwK0F1VDN0Vi9HdEl5RUgxWmNlTzc0Q3dD?=

=?utf-8?B?LzE3N3A3cnY1R08yOEYvc3ZOUGtSOU9HRmExeHdMNGdRYjRHeTN5b0dpMzdt?=

=?utf-8?B?UG8rblRKTTVPVlBUUHVoQlJhUTZlU3I0L21CakNLakJRRDdZT2cwTnFWRmYw?=

=?utf-8?B?YTVyS3Q1clcwRGlraDF2WTRvdGdXbTJzdmtkWXFBam9nMDlLTTdQVm5DNTcy?=

=?utf-8?B?OGxzcFBiY2RRMERjUEwwcmRuUGIwV1NQUGdJQ1l4RTBpbFZ4YzdCc1hSM1ZM?=

=?utf-8?B?TTdwNU9ZaTJXSWFVNXNmQ0Y3UnduZzNJOU4yTHdydXNpVWx0L3QwUDlJR3lm?=

=?utf-8?B?NHpOeDc1VXEveE5zOFN1SFRQZUVWa0N6blhmdndrdGxFMnBVYmJGa3p0bXQy?=

=?utf-8?B?TGNCTGZiZW1mN0hXaDdzWFZKOTJRSnBrQUQ5QzVHV3hLd1NLNm10NkkzTmov?=

=?utf-8?B?ME1Mc2pzeTBIQXROdUpBTjBEQlM4YTJDdEJJbWVXQWVwMGRURTBSS2ROS3ln?=

=?utf-8?B?YzNPclNBRU11cDFicDNSK3FNMFR1ZU0rSTAvTVR6YW1lWnpwUmVBeDVXTEIr?=

=?utf-8?B?L0ttZjU4UkVuaVdkTW8xaTFPVDg2ZmhublFvZGZRUGNSNEs5N3lHZnZxNGFY?=

=?utf-8?B?ZlpuNkRQdUV2MlFIaE9FOTU5SWpWT29OMkZueE1YQXRlZUo0NGF4eUVaY1JO?=

=?utf-8?B?SjhTQnJvRDkxVFVId1lwYk9yRDc4OG9OeDM5bHhHM1Q0UUgwTzM1VW5hK2Zw?=

=?utf-8?B?QTJPY0JwUUpBZlhVNGZkYnNUeHQ0M2RXaDNqbXBhYXpYYnFwWDU5V2tYK3Zw?=

=?utf-8?B?ZlExTzZrWWpWVHl5RVB6blJVbmxKcWVRZkF0TEswdmFCaEdHcDJOUEg0S1Ns?=

=?utf-8?B?WDFpOERhQWhqdTVwU3A4SU4weXRTaENmNUNCN1RWWm5tbzlsQVlMWUVrRkFm?=

=?utf-8?B?L0sxYndiT2Ewb1NGYVk4TDgvdVRtYXpIeVhTNDBBK3pjVkJ5d016cDA5MDBM?=

=?utf-8?B?b0N4SFBxWkc0NGNjZFZORFNSY2pFeGtCVVRJeXlKZmxXKzNKcUx2bG1VOFdk?=

=?utf-8?B?T3oybkZ5NGVObHJOa1BTR2Rmd0ZmVGRyT0NWLzYzYUFGT3lveWJoS3Y2OTZG?=

=?utf-8?B?bXF4S2ErV0I0bzBwSmVWTE1ackNUbWdtSWp2d0Q3V2NNMXZQN2VNL3UrLzV0?=

=?utf-8?B?Y3l3aTF0K0ZrT1lzbmc4cndYVUFqdlZYNFJsZlNrVHZaMEJOOTQ0VSs1NVBZ?=

=?utf-8?B?bERXbUFML0ltOWFHbFV3V1lrRjJvcDhHQzcvbVRYM004MjdTa2FsSVZVK0pF?=

=?utf-8?B?Yzc5aUJlb3dkYndidHIyb3Z2YytNNlRjRFFiZzYxR0ZUK2R3bGZqczZ1blpL?=

=?utf-8?B?MjU2UXNUVENPRUZaaXpXMjVldklzR0dBWDFpVjE3dXZXakhNbTM2bnBaV1Ev?=

=?utf-8?B?VlZRQytUcHJ0N2tLUGZBUk9ONkdvQnJXSnVRaGtpTUppdDhSUzZseGdpaXd5?=

=?utf-8?B?QWpWQVZmWi9QUnZ2UGZ6VnlCNTFiNjlJcWFWM0pEaE4zVTJCQi9RQU5kWk9t?=

=?utf-8?B?RExlandDdjlqNnd5OXAwZldXTkx5bHpIQ1JNeXcyTi9zbk1sMXl5YzVXN05s?=

=?utf-8?B?enF0N29zL1lrV0tDZjRTNTJVS0dLV0hIM3dEeHltRGtXYjM2UDR2dDdKQnhv?=

=?utf-8?B?M1Y4bnZUdTRMSWkydFoyTDRwOVJqcUc2R2E2MEhEdWpwb3VrTitjUGQzSFJn?=

=?utf-8?B?RjA2VVluYXlWamVyeXJGUDUyRzJBbnRXNll2c2kxd2psN3k2U3dtNnhoZ1A4?=

=?utf-8?B?WnM3WUlOa0hna0xXeE1YQk5tdEgyejkyMm9tMHo4aWZEMjR5YnlOUU9jL0I1?=

=?utf-8?B?c3pRVEtiZFhwUEdBRFl1TXgyQlRLV0Z1RGRETUdSMTJabnE0ZlBaUEpEVENK?=

=?utf-8?B?Lzlab2lsN3hLVFVaeWx2WWl2QWhQaW9WeHExSGdvTTZINDVUbHl1QWM4UnJa?=

=?utf-8?B?RXM2SDh6OUpSU280RlR3NHpUQXgyTVBPOHZJRVBuaTlzeTJhWXlUWU5aS0h0?=

=?utf-8?B?djMydnZubFBVcThldGhyOFM2enE4YTMwdkVmUzVUR215V3BFRHVXOXd0V3Vl?=

=?utf-8?B?SDJ4REpPVnU3QUpJbGNzS1prYkI4NnRJNkVWNEIzbStNbmh6QzJCaVVQL1E3?=

=?utf-8?B?RmNjdEZSV0ZyYzRQWjRCOGEzbkNHTTRzRzRpekNsL1FvTFZJd2srNmhVeEdl?=

=?utf-8?B?bnpwTlllYkI2NlNkUWpMb1RFNThhcUM1bndmY2ZiQmlZYjlRRGMzUVAyam05?=

=?utf-8?B?a2dTam5LUkp0SVo0Yk9CTlFpUytxNmZiYnVHN1VnN2ZXaDN2ZmJWdDFXMDF1?=

=?utf-8?B?NkkrczdwL01NRk93VmlGMHdaV3VvSEMxc1kvQUZMMDlQTGxvSVZ6d214ZkFD?=

=?utf-8?B?cUZ1ekRacG1oVHluWGJ3UDNSb3pJUGtha1ZMaW41bW5DdnY2amVJcCtucWdw?=

=?utf-8?B?RkpWU2VnUHVsUk5TZVBJbmRzTmRkYWIwM0RLcFc1N0Z3MXRNR2p4QmM1U3Vk?=

=?utf-8?B?RVFaT1JhUXRXYzB0VmY2dnpvazRUZDQyN2c9PQ==?=

X-Forefront-Antispam-Report:

CIP:51.158.242.35;CTRY:NL;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:unical.it;PTR:35-242-158-51.instances.scw.cloud;CAT:OSPM;SFS:(13230040)(69100299015)(82310400026)(376014)(41320700013)(34020700016)(36860700013)(1032899013)(4022899009)(61400799027)(13003099007)(2066899003)(4076899003)(8096899003)(16110700003);DIR:OUT;SFP:1501;

X-OriginatorOrg: cfbjibs.temptingfragrances.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Dec 2025 18:49:08.2804

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 9b6b1e35-3994-4051-c6cb-08de3e66206f

X-MS-Exchange-CrossTenant-Id: a56ba61c-afa1-4cb0-a86d-f691f8c4bec4

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a56ba61c-afa1-4cb0-a86d-f691f8c4bec4;Ip=[51.158.242.35];Helo=[unical.it]

X-MS-Exchange-CrossTenant-AuthSource:

BL02EPF0002992E.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CYYPR16MB5491

X-Spam_score: 9.4

X-Spam_score_int: 94

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Phishing from Microsoft Outlook Part 4

















































































Click here to see in your browser, or you can unsubscribe from all future emails.














































Â






















Phishing from Microsoft Outlook Part 3























Preview - Welcome to Offer






































Â








































Phishing from Microsoft Outlook Part 2

Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[51.158.242.35 listed in will-spam-for-food.eu.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[52.102.136.12 listed in will-spam-for-food.eu.org]

[52.102.136.12 listed in will-spam-for-food.eu.org]

[52.102.136.12 listed in will-spam-for-food.eu.org]

[52.102.136.12 listed in will-spam-for-food.eu.org]

[52.102.136.12 listed in will-spam-for-food.eu.org]

[52.102.136.12 listed in will-spam-for-food.eu.org]

[52.102.136.12 listed in will-spam-for-food.eu.org]

[52.102.136.12 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.158.242.35 listed in dnsbl.ahbl.org]

[51.158.242.35 listed in dnsbl.ahbl.org]

[51.158.242.35 listed in dnsbl.ahbl.org]

[51.158.242.35 listed in dnsbl.ahbl.org]

[52.102.136.12 listed in dnsbl.ahbl.org]

[52.102.136.12 listed in dnsbl.ahbl.org]

[52.102.136.12 listed in dnsbl.ahbl.org]

[52.102.136.12 listed in dnsbl.ahbl.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:75:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:75:cafe:0:0:86 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.158.242.35 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.158.242.35 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.158.242.35 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.158.242.35 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.102.136.12 listed in list.dnswl.org]

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 FROM_LOCAL_DIGITS From: localpart has long digit sequence

0.3 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.102.136.12 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.0 MR_DIFF_MID No description available.

Subject: {SPAM?} Fwd: Exclusive: 50% Off WellaHeat Heated Socks!





Welcome to [Coded Mails]













Phishing from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Dec 2025 15:05:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vWM6c-00000000EBy-3rc2

for dave@doctor.nl2k.ab.ca;

Thu, 18 Dec 2025 15:04:18 -0700

Resent-From: The Doctor

Resent-Date: Thu, 18 Dec 2025 15:04:18 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus2azhn15012012.outbound.protection.outlook.com ([52.102.136.12]:33762 helo=MW6PR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from <4233235618067743407032345337710614901654@cfbjibs.temptingfragrances.com>)

id 1vWJ4F-000000001Ex-0xWm

for doctor@nl2k.ab.ca;

Thu, 18 Dec 2025 11:49:48 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Z95CVshmUZJsvNh99ma7HSNq3XIrFThBbVeRAiN3XS66W39LJm6hNyF4yQSo+kJiuIy2xXTi/slncktVKKP5kXfQZpNfRyehOObfYc9b4j/M9Gvnslx5y3DrnQbvdFX5ohnM42MqtzEaG7dcVfdRvp0TK66F0eIU0Yb6lAiqe8KVVKN9Fty9sHbPNMbZ4iXQKobzg2tvF6r6fnNgCX/Gsr/6m3XS8tPO61ve6l9SwpOkzffdnvO/NLG0qJWFP8kgciMaPpT+QVn2MKT8Gmi6T64p2D9nwNDpKTEWG0oom1f+Zwk2MKD9lWXLZAa79NE7zWHeoV0YL6LuVQ+iS8YMxQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=UenIN4E0cHe5CobynlcBxXW38Hr3xBXNx4s/xLk/s4I=;

b=h4TIm1dHQXaXi+yYcrG2ApQvEug7pFhrdlKHimpS7/UdpppRXunwhhV5HGz+WVSrLyIUDyjBOTC9eTvICCgOLit0Ye3vXFuMf9YWpAHCi5AJiG+E/zXeAa4qsp69wPQP7rlHXpNUZdfqLSv68UWgG41FDKjGlU5KxkM2Jwnlg4BS/iATsrd3cyVNFwwtQsm56Gr6yZAUdDW7Q3TOqpvpL27u7vv0EiIO3Tg0wMSMuS/+qbryvnSD0u6w3NmbH8DbFbxuLTz+cSlnIKQlUd/bJhB9EsiO/qmGFb4Ub/zgakWyAzPADbdpSNE9hkPgXcyKyrIF5P+8Ck5TeyqmeSZM/A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

51.158.242.35) smtp.rcpttodomain=nl2k.ab.ca

smtp.mailfrom=cfbjibs.temptingfragrances.com; dmarc=none action=none

header.from=cfbjibs.temptingfragrances.com; dkim=none (message not signed);

arc=none (0)

Received: from CH0PR04CA0101.namprd04.prod.outlook.com (2603:10b6:610:75::16)

by BLAPR16MB3635.namprd16.prod.outlook.com (2603:10b6:208:270::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9434.8; Thu, 18 Dec

2025 18:48:41 +0000

Received: from DS3PEPF0000C381.namprd04.prod.outlook.com

(2603:10b6:610:75:cafe::86) by CH0PR04CA0101.outlook.office365.com

(2603:10b6:610:75::16) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.9434.6 via Frontend Transport; Thu,

18 Dec 2025 18:48:40 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 51.158.242.35)

smtp.mailfrom=cfbjibs.temptingfragrances.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=cfbjibs.temptingfragrances.com;

Received-SPF: None (protection.outlook.com: cfbjibs.temptingfragrances.com

does not designate permitted sender hosts)

Received: from unical.it (51.158.242.35) by

DS3PEPF0000C381.mail.protection.outlook.com (10.167.23.11) with Microsoft

SMTP Server id 15.20.9434.6 via Frontend Transport; Thu, 18 Dec 2025 18:48:41

+0000

From: WellaHeat Innovations <03262825114191553694@cfbjibs.temptingfragrances.com>

To: doctor@nl2k.ab.ca

Subject: Fwd: Exclusive: 50% Off WellaHeat Heated Socks!

Message-ID: <6358288204.oflg.6800555209846@qrivo.co>

MIME-Version: 1.0

Date: Thu, 18 Dec 2025 18:45:04 +0000

Content-Type: text/html; charset=utf-8

X-SES-Outgoing: Thu, 18 Dec 2025 18:45:04 +0000-51.158.242.35

In-Reply-To:

Errors-To: abuse@UOoHxNZ2zW.google.com

List-Unsubscribe:

References:

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DS3PEPF0000C381:EE_|BLAPR16MB3635:EE_

X-MS-Office365-Filtering-Correlation-Id: d88bf242-fb8b-4135-11c7-08de3e66103b

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|376014|1032899013|41320700013|34020700016|36860700013|69100299015|61400799027|82310400026|4022899009|8135299006|13003099007|2066899003|8096899003|4076899003|16110700003;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?dmNSeGVod08vWWpkaUdzUytnandKdXlsUmI0K0JSRk1wZkg5eGlrMmR3SWNu?=

=?utf-8?B?a2draVo0Z2dpaXRvMCs5aVNsdERMRUlqZXIrbDF5QnBBVFgxVTY2WDNTVXpN?=

=?utf-8?B?WGpPQmQ0d0hHdW5iQ2xNWkcydDBFN1FOVmFsTkVSWjhUMDRiN1ZrUjVDS3ZX?=

=?utf-8?B?aGplc0lCWWNaUER4QnB4bFd2cFZaSm9wWm81TDlnS2MrVzY1ZCtQaVA4Q1pQ?=

=?utf-8?B?YjZkdjUzV1R0aTVXTVJiVEdhb3ZOcWhBMlBrNk1mdWF3QWhxU1JObnhJOUdY?=

=?utf-8?B?ckxXK1MvYTlrU0dVaVBHU0Rqd2NwWGJVRldNRDVPSkJuSjZGWWN1b0dmRFF6?=

=?utf-8?B?Nk9BdTJnbTVGQTlQM2EvVnBpSkc1cDRYTTZ5VkRHM3QzeHl6WlFnVGRIYjdX?=

=?utf-8?B?aUlpKzBjUVphWXBLZTdldEU4Wm41NTVNa3VyOEtKVkN6MnRuQVFqSEFHOFQx?=

=?utf-8?B?TVpjNEN6WkhPQnFBTmE4Wm44dHhUMERoSjdrMEtrWU5rYjNDR29zSEYyUlN4?=

=?utf-8?B?cEZKNlVRSUR2VlRoemg1ZFFkT1BiU2lnQVpFT3phMVlTNzdlZy9XaldXTnNX?=

=?utf-8?B?dStuWHc2aDhxaFNKVWRrMmIrNURON2hCT2V4N3l3Y211VXN2ajkrOXg4N2NI?=

=?utf-8?B?NFFra2plU1hmYVJYK3ZmeHh3aTZXeEdWRnBadlJrYjdWUEJkYXdkVjBOK256?=

=?utf-8?B?Y2hhazhXeFE2TlZDY215UFgzNDRGdXRPcmNMNmY1WUgwekZMOVlQMlQ0aTV2?=

=?utf-8?B?eHJsR0pSMEtLb3cwNUV4Nzc3TmJaQVdtUXVsTlRXMnpoaGNFdjVYVHBmRGlw?=

=?utf-8?B?eDRLcXdCaXRrc2hEYzBKSVphQ05ZUHFUUzdkUzJZeEhlM3MyU1F0akRXZGIw?=

=?utf-8?B?UmdzMDdKOTcrcFU2aVlVZkN5Zmg0YXJ2RlNZcHcybXFPVDdUaE05STRsbEZP?=

=?utf-8?B?RldpUVNId1RoVFpkLzB2OFVLYjFiWXRiTk1iZVR5K1NTa2xVd3NHTGtMTFRU?=

=?utf-8?B?M2tObUNRRG9tWVFPTnlWUUZHRW1tS3B3WTBZb2owTld0bm5BbjRLTi83RWlK?=

=?utf-8?B?OVVRRmQ5T1BpQm9pSHNiKzRBc283bzliL1dlcXhpcTJlWnpRWTRDeEhNZis5?=

=?utf-8?B?N1hQQXlIQ3pMWEJiTENjZkxDWm9FUDlLbGVoNTVKeDBEbFRoSVZqZFNsT3ZU?=

=?utf-8?B?aU5ub0dLckZRZmRpa1dydnRLam1rUDNYZTFYeEsxRGlkUVgveFRHZktzajhV?=

=?utf-8?B?eitkVVp6Tnhna1ZBVzVLeGF3RHVWYlozRzUzSnhRV21tVEFjM3Zud2pjYjRS?=

=?utf-8?B?bDJnLy9CVjdSbHk0NDBialNQSjMrUmNheEVzNnE4QzZNdkI2QTBsN1VNNVNO?=

=?utf-8?B?MEUrT0lMNUxBdFZiVFN0b3ZDY0c0TlJjQ21NQmF0TFAzYTFtLzZaZWlyajM1?=

=?utf-8?B?ai8rMXV1MFpCS2p0azZCL2EvaEs1SnRiU0tFZnNGcHY1Vk5zTnJJWEs4Um9F?=

=?utf-8?B?N3dKOVhmMitaMDVNaG9Da1V4cERsUjA1T0h2K2Yxd2ZNMVN1bW9OS2YvdXdZ?=

=?utf-8?B?NGJVeVJJNkorYktCd2t2VXI0OGFtdmlLWGpRMS9MeUJtM0VWS2RsbldxVTFI?=

=?utf-8?B?Ni9SOVZrMThZdGxxN3l0L3FEMUZIak5NWHNXZjM2MU9tQ0RoUEcyeVFYOTBh?=

=?utf-8?B?QW9vZWFpaWxHMnorR0c0YmhjOEwwTjlDNFFWYXV4cTJQNXJOaktBWHdXbVI4?=

=?utf-8?B?cnRPc3NlamxoU2FhNWZSdWNWckd6WSt4WWRRYmlTUTQxcjR6ejBOK3J5Smdx?=

=?utf-8?B?bnVxaElqSjlwN0xCalQ4QitqcE1BbU16TDVIWW9MVUJzYXRMWmFLKzZRNlBQ?=

=?utf-8?B?TXE1Ny9lZlU3TWJ1TmUzcHYwRHBiTzNiT0dYbTVFaGxCNDA5SWFqQ2FSa1lJ?=

=?utf-8?B?elVtc1dOQit0SFlMK1VlRzcrekJNU1Y4RXg4b0VUbzJYeXdjWkVqd2NkSTdB?=

=?utf-8?B?b2xwUG91VmozM25pZFYzdlJLQnZzd3JqYVh4Y1BqNkNtU1ZscDBzdE5Ia1lK?=

=?utf-8?B?WG4vUExPK21XbjJCU00rK0lnTHFNaDV6bDQvMmtvVE4xS05hcFh4QStqUmJI?=

=?utf-8?B?aWNmTDNUWE1yRUYzWkpkaEhxUHFGSFVqdTZvc3d3ODRzVE9Mb01seXQxeTNS?=

=?utf-8?B?SStjaW9JWTRoRmVaRG9kRmRNZU5lY3NjMDRjOHRPY3BkK25mOGs1NWFuRHVD?=

=?utf-8?B?cG1iamozOWZuR0l0TnBvb3NoeVlVWVlsdDdSdnByQzdiWjQvSGs4eWJpQjJv?=

=?utf-8?B?RW15SFNTU3B1M3Byb2tyYTkycFRBSTErMVprUzF0MkVhU0pJZGFXSEJUbE11?=

=?utf-8?B?YkVCQ21lb3ZoNFVaOHgyWG15M2RzZ25MNU1YM0hZYnNpVTYxQXg0VjZyaWp2?=

=?utf-8?B?WVFsaTBqMVJNT0MzdXpzR0FPeXRhTkFaQU9SbjVCUnJDbDVwNkhjWmtjUUxI?=

=?utf-8?B?TkVxbjl4THNlWWh2VXVOLzRVVGVuVWZsZld0Rmc4RzQveHRPODJFZVF6UEt2?=

=?utf-8?B?RWp2d1hLR250TklmUW5ZS0xGQjk1UFFwUFlBYWpKd0orbnBvVWRJVm1BLzdl?=

=?utf-8?B?WGM4eUNLSnJRZ3Z4YzdidFdSVTI2dXlkRkw1aTVTTFhjSlN6SlRRWUh6ODhv?=

=?utf-8?B?dmc2ekhvL1hoQU04cnBaMndxVUZ2TGsxaXYvYXNOOUM5SDFJRStyY01sOUh0?=

=?utf-8?Q?Hg=3D?=

X-Forefront-Antispam-Report:

CIP:51.158.242.35;CTRY:NL;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:unical.it;PTR:35-242-158-51.instances.scw.cloud;CAT:OSPM;SFS:(13230040)(376014)(1032899013)(41320700013)(34020700016)(36860700013)(69100299015)(61400799027)(82310400026)(4022899009)(8135299006)(13003099007)(2066899003)(8096899003)(4076899003)(16110700003);DIR:OUT;SFP:1501;

X-OriginatorOrg: cfbjibs.temptingfragrances.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Dec 2025 18:48:41.0349

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: d88bf242-fb8b-4135-11c7-08de3e66103b

X-MS-Exchange-CrossTenant-Id: a56ba61c-afa1-4cb0-a86d-f691f8c4bec4

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a56ba61c-afa1-4cb0-a86d-f691f8c4bec4;Ip=[51.158.242.35];Helo=[unical.it]

X-MS-Exchange-CrossTenant-AuthSource:

DS3PEPF0000C381.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLAPR16MB3635

X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Welcome to [Coded Mails] Preview - Welcome to Offer

Roger's Phish Part 2



=0D=0A
ang=3Den>Rogers Rewards =E2=80=93 Electronics Redemption</TITL=<br /><br /> E>=0D=0A<META charset=3DUTF-8>=0D=0A<META name=3Dviewport content=3D"width=<br /><br /> =3Ddevice-width, initial-scale=3D1.0">=0D=0A<STYLE>=0D=0A body {=0D=0A =<br /><br /> margin: 0;=0D=0A padding: 0;=0D=0A background-color: #f4f4f4;=0D=0A =<br /><br /> font-family: Arial, Helvetica, sans-serif;=0D=0A color: #333333;=0D=0A=<br /><br /> }=0D=0A .container {=0D=0A max-width: 420px;=0D=0A margin: 24px au=<br /><br /> to;=0D=0A background-color: #ffffff;=0D=0A border-radius: 10px;=0D=0A=<br /><br /> overflow: hidden;=0D=0A box-shadow: 0 6px 16px rgba(0,0,0,0.1);=0D=<br /><br /> =0A }=0D=0A .header {=0D=0A background-color: #d0021b; /<strong> Rogers Red </strong>=<br /><br /> /=0D=0A padding: 16px;=0D=0A display: flex;=0D=0A align-items: cen=<br /><br /> ter;=0D=0A justify-content: space-between;=0D=0A }=0D=0A .header img {=<br /><br /> =0D=0A height: 28px;=0D=0A }=0D=0A .header .icons {=0D=0A color: #f=<br /><br /> fffff;=0D=0A font-size: 18px;=0D=0A }=0D=0A .hero {=0D=0A backgroun=<br /><br /> d: linear-gradient(180deg, #000000, #1a1a1a);=0D=0A color: #ffffff;=0D=<br /><br /> =0A text-align: center;=0D=0A padding: 26px 20px;=0D=0A }=0D=0A .he=<br /><br /> ro h1 {=0D=0A margin: 0 0 8px;=0D=0A font-size: 20px;=0D=0A }=0D=0A =<br /><br /> .hero p {=0D=0A margin: 0;=0D=0A font-size: 14px;=0D=0A opacity: =<br /><br /> 0.9;=0D=0A }=0D=0A .content {=0D=0A padding: 22px;=0D=0A }=0D=0A .se=<br /><br /> ction-title {=0D=0A font-size: 18px;=0D=0A font-weight: bold;=0D=0A =<br /><br /> margin-bottom: 12px;=0D=0A }=0D=0A .features {=0D=0A list-style: non=<br /><br /> e;=0D=0A padding: 0;=0D=0A margin: 0 0 18px;=0D=0A font-size: 14px=<br /><br /> ;=0D=0A }=0D=0A .features li {=0D=0A margin-bottom: 8px;=0D=0A padd=<br /><br /> ing-left: 20px;=0D=0A position: relative;=0D=0A }=0D=0A .features li:b=<br /><br /> efore {=0D=0A content: '=E2=80=A2';=0D=0A position: absolute;=0D=0A =<br /><br /> left: 0;=0D=0A color: #d0021b;=0D=0A font-weight: bold;=0D=0A }=0D=<br /><br /> =0A .highlight {=0D=0A background-color: #fff3f3;=0D=0A border-left:=<br /><br /> 4px solid #d0021b;=0D=0A padding: 12px;=0D=0A font-size: 14px;=0D=0A=<br /><br /> margin-bottom: 18px;=0D=0A }=0D=0A .input-group {=0D=0A margin-bot=<br /><br /> tom: 14px;=0D=0A }=0D=0A .input-group input {=0D=0A width: 100%;=0D=0A=<br /><br /> padding: 12px;=0D=0A font-size: 14px;=0D=0A border: 1px solid #cc=<br /><br /> cccc;=0D=0A border-radius: 6px;=0D=0A }=0D=0A .btn {=0D=0A display:=<br /><br /> block;=0D=0A width: 100%;=0D=0A background-color: #d0021b;=0D=0A =<br /><br /> color: #ffffff;=0D=0A text-align: center;=0D=0A padding: 14px 0;=0D=<br /><br /> =0A font-size: 16px;=0D=0A font-weight: bold;=0D=0A text-decoratio=<br /><br /> n: none;=0D=0A border-radius: 6px;=0D=0A }=0D=0A .note {=0D=0A font=<br /><br /> -size: 12px;=0D=0A color: #666666;=0D=0A margin-top: 14px;=0D=0A t=<br /><br /> ext-align: center;=0D=0A }=0D=0A .footer {=0D=0A background-color: #f0=<br /><br /> f0f0;=0D=0A padding: 18px;=0D=0A font-size: 12px;=0D=0A color: #55=<br /><br /> 5555;=0D=0A text-align: center;=0D=0A }=0D=0A .footer a {=0D=0A col=<br /><br /> or: #555555;=0D=0A text-decoration: none;=0D=0A margin: 0 6px;=0D=0A =<br /><br /> }=0D=0A</STYLE>=0D=0A=0D=0A<META name=3DGENERATOR content=3D"MSHTML 11.00.=<br /><br /> 10570.1001"></HEAD>=0D=0A<BODY>=0D=0A<DIV class=3Dcontainer>=0D=0A<DIV clas=<br /><br /> s=3Dheader>=0D=0A<DIV =0D=0Astyle=3D"WIDTH: 100%; DISPLAY: flex; align-item=<br /><br /> s: center; justify-content: center"><A =0D=0Ahref=3D"https://jwotr.net/djus=<br /><br /> n/orogers.com/"><SPAN =0D=0Astyle=3D"FONT-SIZE: 16px; FONT-WEIGHT: bold; CO=<br /><br /> LOR: #ffffff; LETTER-SPACING: 2px">ROGERS</SPAN> =0D=0A</A></DIV></DIV></DI=<br /><br /> V>=0D=0A<DIV class=3Dhero>=0D=0A<H1><FONT color=3Dred>Rogers Rewards</FONT>=<br /><br /> </H1>=0D=0A<P><FONT color=3Dred>Redeem Your Points for the Latest =0D=0AEle=<br /><br /> ctronics</FONT></P></DIV>=0D=0A<DIV class=3Dcontent>=0D=0A<DIV class=3Dsect=<br /><br /> ion-title>Electronics Redemption Event</DIV>=0D=0A<UL class=3Dfeatures>=0D=<br /><br /> =0A <LI>Smartphones, tablets and wearable devices =0D=0A <LI>Headphones, =<br /><br /> speakers and accessories =0D=0A <LI>Selected items with reduced point requ=<br /><br /> irements =0D=0A <LI>Available exclusively for Rogers customers in Canada <=<br /><br /> /LI></UL>=0D=0A<DIV class=3Dhighlight>Limited-time offer: Redeem your Roger=<br /><br /> s points today and =0D=0Aenjoy exclusive savings on popular electronics. </=<br /><br /> DIV>=0D=0A<DIV class=3Dsection-title>Check Your Available Points</DIV>=0D=<br /><br /> =0A<DIV class=3Dinput-group> </DIV><A class=3Dbtn =0D=0Ahref=3D"https:=<br /><br /> //jwotr.net/djusn/orogers.com/">Query</A> =0D=0A<DIV class=3Dnote>Offers ar=<br /><br /> e subject to availability. Terms and conditions apply. =0D=0A</DIV></DIV>=<br /><br /> =0D=0A<DIV class=3Dfooter>=0D=0A<DIV><A href=3D"#">About Rogers</A> | <A hr=<br /><br /> ef=3D"#">Privacy</A> | <A href=3D"#">Terms =0D=0A& Conditions</A> </DIV=<br /><br /> >=0D=0A<DIV style=3D"MARGIN-TOP: 8px">=C2=A9 2025 Rogers Communications. Al=<br /><br /> l rights reserved. =0D=0A</DIV></DIV>=0D=0A<DIV></DIV></BODY></HTML>=0D=0A<br /><br /> <br /><br /> </div> <footer class="post-info"> <ul class="meta"> <li><span class="info-label">Categories: </span><a href="https://www.nk.ca/blog/index.php?/categories/25-Phish">Phish</a></li> <li><a href="/blog/index.php?/archives/14480-Rogers-Phish-Part-2.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:dc="http://purl.org/dc/elements/1.1/"> <rdf:Description rdf:about="https://www.nk.ca/blog/index.php?/feeds/ei_14480.rdf" trackback:ping="https://www.nk.ca/blog/comment.php?type=trackback&entry_id=14480" dc:title="Roger's Phish Part 2" dc:identifier="https://www.nk.ca/blog/index.php?/archives/14480-Rogers-Phish-Part-2.html" /> </rdf:RDF> --> </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/14479-Rogers-Phish-Part-1.html">Rogers Phish Part 1</a></h2> <span class="post-info">Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-12-19T03:52:00+00:00">Friday, December 19. 2025</time></span> </header> <div class="clearfix"> X-Mozilla-Status: 0001<br /><br /> X-Mozilla-Status2: 00000000<br /><br /> Return-path: <doctor@doctor.nl2k.ab.ca><br /><br /> Envelope-to: dave@doctor.nl2k.ab.ca<br /><br /> Delivery-date: Thu, 18 Dec 2025 15:03:00 -0700<br /><br /> Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))<br /><br /> (envelope-from <doctor@doctor.nl2k.ab.ca>)<br /><br /> id 1vWM4j-00000000E62-3r3H<br /><br /> for dave@doctor.nl2k.ab.ca;<br /><br /> Thu, 18 Dec 2025 15:02:21 -0700<br /><br /> Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca><br /><br /> Resent-Date: Thu, 18 Dec 2025 15:02:21 -0700<br /><br /> Resent-Message-ID: <aUR57ZLDr09ZKDyg@doctor.nl2k.ab.ca><br /><br /> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca><br /><br /> Received: from mail.ulu726h.net ([160.251.203.33]:55698)<br /><br /> by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384<br /><br /> (Exim 4.98.2 (FreeBSD))<br /><br /> (envelope-from <smbc_mail@ulu726h.net>)<br /><br /> id 1vWFjS-000000002m8-0Hgh<br /><br /> for doctor@nl2k.ab.ca;<br /><br /> Thu, 18 Dec 2025 08:16:06 -0700<br /><br /> Authentication-Results: mail.ulu726h.net;<br /><br /> auth=pass (login)<br /><br /> Message-ID: <3e3e3a106bd36f71866a586e05d09b67@ulu726h.net><br /><br /> From: Rogers <smbc_mail@ulu726h.net><br /><br /> To: "doctor@nl2k.ab.ca" <doctor@nl2k.ab.ca><br /><br /> Subject: =?utf-8?B?WW91ciBTaW5ndGVsIFBvaW50cyBBcmUgUmVhZHkg4oCTIFJl?=<br /><br /> =?utf-8?B?ZGVlbQ==?=<br /><br /> Date: Thu, 18 Dec 2025 23:15:02 +0800<br /><br /> X-Priority: 3<br /><br /> MIME-Version: 1.0<br /><br /> Content-Type: text/html; charset="UTF-8"<br /><br /> Content-Transfer-Encoding: quoted-printable<br /><br /> Received: from localhost (Unknown [127.0.0.1])<br /><br /> by mail.ulu726h.net (Haraka) with ESMTPSA id 130B581E-46B8-48D7-9F7C-24C5C2E7E0D8.1<br /><br /> envelope-from <smbc_mail@ulu726h.net><br /><br /> tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (authenticated bits=0);<br /><br /> Thu, 18 Dec 2025 23:15:07 +0800<br /><br /> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ulu726h.net;<br /><br /> h=Content-Transfer-Encoding: Content-Type: MIME-Version: Date: Subject:<br /><br /> To: From: Message-ID; q=dns/txt; s=s20251218798; t=1766070907;<br /><br /> bh=2Q3JFhUvsXykoz+rkTraBZ3AmxGQG97/MHCMKZSz9YM=;<br /><br /> b=BrKxBI78zv8S395HYXlIwDrcvDzSqnBIHCBmpN88a+qc7oWin3NvnHUyIC3KQd7amot3grrwW<br /><br /> Wy2YWlxvAq1jZqSJkNKAIvLuPTIOhUkU+FEO6TSzz8FZcTxaoKNiBojiRCJhQC8/Fm8iFtI9vSo<br /><br /> 4NJ3dRjS5UCcu9mbX/lqJqs=<br /><br /> X-Spam_score: 16.3<br /><br /> X-Spam_score_int: 163<br /><br /> X-Spam_bar: ++++++++++++++++<br /><br /> X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",<br /><br /> has identified this incoming email as possible spam. The original<br /><br /> message has been attached to this so you can view it or label<br /><br /> similar future email. If you have any questions, see<br /><br /> @@CONTACT_ADDRESS@@ for details.<br /><br /> <br /><br /> Content preview: Rogers Rewards – Electronics Redemption ROGERS <br /><br /> <br /><br /> Content analysis details: (16.3 points, 5.0 required)<br /><br /> <br /><br /> pts rule name description<br /><br /> ---- ---------------------- --------------------------------------------------<br /><br /> 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org<br /><br /> [160.251.203.33 listed in will-spam-for-food.eu.org]<br /><br /> [160.251.203.33 listed in will-spam-for-food.eu.org]<br /><br /> [160.251.203.33 listed in will-spam-for-food.eu.org]<br /><br /> [160.251.203.33 listed in will-spam-for-food.eu.org]<br /><br /> [160.251.203.33 listed in will-spam-for-food.eu.org]<br /><br /> [160.251.203.33 listed in will-spam-for-food.eu.org]<br /><br /> [160.251.203.33 listed in will-spam-for-food.eu.org]<br /><br /> [160.251.203.33 listed in will-spam-for-food.eu.org]<br /><br /> 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org<br /><br /> [160.251.203.33 listed in dnsbl.ahbl.org]<br /><br /> [160.251.203.33 listed in dnsbl.ahbl.org]<br /><br /> [160.251.203.33 listed in dnsbl.ahbl.org]<br /><br /> [160.251.203.33 listed in dnsbl.ahbl.org]<br /><br /> 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org<br /><br /> [160.251.203.33 listed in dnsbl.ahbl.org]<br /><br /> 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org<br /><br /> [160.251.203.33 listed in dnsbl.ahbl.org]<br /><br /> 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org<br /><br /> [160.251.203.33 listed in dnsbl.ahbl.org]<br /><br /> 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org<br /><br /> [160.251.203.33 listed in dnsbl.ahbl.org]<br /><br /> 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist<br /><br /> [URI: jwotr.net]<br /><br /> 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist<br /><br /> [URI: jwotr.net]<br /><br /> 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist<br /><br /> [URI: jwotr.net]<br /><br /> 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist<br /><br /> [URI: ulu726h.net]<br /><br /> [URI: jwotr.net]<br /><br /> -0.0 SPF_PASS SPF: sender matches SPF record<br /><br /> -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's<br /><br /> domain<br /><br /> 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid<br /><br /> -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature<br /><br /> -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from<br /><br /> envelope-from domain<br /><br /> -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay<br /><br /> domain<br /><br /> 0.3 OFFER_2 BODY: Offers you Something (2)<br /><br /> 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist<br /><br /> [URI: jwotr.net]<br /><br /> [URI: ulu726h.net]<br /><br /> 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge<br /><br /> 0.0 HTML_MESSAGE BODY: HTML included in message<br /><br /> 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts<br /><br /> 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to<br /><br /> background<br /><br /> 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay<br /><br /> 2.0 MIXED_HREF_CASE Has href in mixed case<br /><br /> Subject: {SPAM?} =?utf-8?B?WW91ciBTaW5ndGVsIFBvaW50cyBBcmUgUmVhZHkg4oCTIFJl?=<br /><br /> =?utf-8?B?ZGVlbQ==?=<br /><br /> </div> <footer class="post-info"> <ul class="meta"> <li><span class="info-label">Categories: </span><a href="https://www.nk.ca/blog/index.php?/categories/25-Phish">Phish</a></li> <li><a href="/blog/index.php?/archives/14479-Rogers-Phish-Part-1.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:dc="http://purl.org/dc/elements/1.1/"> <rdf:Description rdf:about="https://www.nk.ca/blog/index.php?/feeds/ei_14479.rdf" trackback:ping="https://www.nk.ca/blog/comment.php?type=trackback&entry_id=14479" dc:title="Rogers Phish Part 1" dc:identifier="https://www.nk.ca/blog/index.php?/archives/14479-Rogers-Phish-Part-1.html" /> </rdf:RDF> --> </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/14478-Chinese-products-spam-part-5.html">Chinese products spam part 5</a></h2> <span class="post-info">Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-12-19T03:44:00+00:00">Friday, December 19. 2025</time></span> </header> <div class="clearfix"> <p><span style=3D"font-family:Arial,Helvetica,sans-serif;"><span style=3D"f=<br /><br /> ont-size:12px;">We are committed to providing reliable service and clear co=<br /><br /> mmunication. I am ready to answer any questions or provide a spot quote for=<br /><br /> your specific cargo.</span></span><br /><br /><br /> <br /><br /><br /> <span style=3D"font-family:Arial,Helvetica,sans-serif;"><span style=3D"font=<br /><br /> -size:12px;"><span style=3D"color: rgb(51, 51, 51); letter-spacing: 0pt;">B=<br /><br /> est regards,</span><br /><br /><br /> <span style=3D"color: rgb(51, 51, 51); letter-spacing: 0pt;">Anne Chen</spa=<br /><br /> n></span></span></p><br /><br /> <br /><br /> <table style=3D"font-size: 15px; background-color: rgb(255, 255, 255); bord=<br /><br /> er-collapse: collapse; width: 562.25pt; margin-left: -4.15pt;" width=3D"937=<br /><br /> "><br /><br /> =09<tbody><br /><br /> =09=09<tr style=3D"height:8.6pt"><br /><br /> =09=09=09<td colspan=3D"3" style=3D"width: 527.45pt; border-width: initial;=<br /><br /> border-style: none; border-color: initial; padding: 0pt 5.4pt;" valign=3D"=<br /><br /> middle" width=3D"879"><span style=3D"font-family:Arial,Helvetica,sans-serif=<br /><br /> ;"><span style=3D"font-size:12px;"><span style=3D"break-before:auto"><span =<br /><br /> style=3D"break-after:auto"><span style=3D"word-break:normal">Tel/Whatsapp/W=<br /><br /> eChat: + 86-18577340972</span></span></span><br /><br /><br /> =09=09=09<span style=3D"break-before:auto"><span style=3D"break-after:auto"=<br /><br /> ><span style=3D"word-break:normal"><span style=3D"font-variant-numeric:norm=<br /><br /> al"><span style=3D"font-variant-east-asian:normal"><span style=3D"vertical-=<br /><br /> align:baseline">E-mail:=C2=A0</span></span></span><a href=3D"http://track.w=<br /><br /> whmnfc.com/index.php/campaigns/ap55974nb6fb3/track-url/kq636bdme4053/ffbdd5=<br /><br /> 1499cac01915c20b0d926141154d09d1e3" style=3D"font-family: Arial; text-decor=<br /><br /> ation-line: none !important;">anne.chen@cimcwetrans.com</a>=C2=A0</span></s=<br /><br /> pan></span></span></span></td><br /><br /> =09=09=09<td style=3D"width: 34.8pt; border-width: initial; border-style: n=<br /><br /> one; border-color: initial; padding: 0pt 5.4pt;" valign=3D"middle" width=3D=<br /><br /> "58"><span style=3D"font-family:Arial,Helvetica,sans-serif;"><span style=3D=<br /><br /> "font-size:12px;"><span style=3D"break-before:auto"><span style=3D"break-af=<br /><br /> ter:auto"><span style=3D"word-break:normal">=C2=A0</span></span></span></sp=<br /><br /> an></span></td><br /><br /> =09=09</tr><br /><br /> =09=09<tr style=3D"height:19.3pt"><br /><br /> =09=09=09<td colspan=3D"3" style=3D"width: 527.45pt; border-width: initial;=<br /><br /> border-style: none; border-color: initial; padding: 0pt 5.4pt;" valign=3D"=<br /><br /> middle" width=3D"879"><span style=3D"font-family:Arial,Helvetica,sans-serif=<br /><br /> ;"><span style=3D"font-size:12px;"><span style=3D"break-before:auto"><span =<br /><br /> style=3D"break-after:auto"><span style=3D"word-break:normal"><span style=3D=<br /><br /> "letter-spacing:0pt"><span style=3D"color:#333333">=E5=B9=BF=E4=B8=9C=<br /><br /> =E7=9C=81=E6=B7=B1=E5=9C=B3=E5=B8=82=E9=BE=99=E5=B2=97=E5=8C=BA=E5=9D=82=<br /><br /> =E9=9B=AA=E5=B2=97=E5=A4=A7=E9=81=933014=E5=8F=B7=E5=8D=8E=E5=8D=97=<br /><br /> =E7=A7=91=E6=8A=80=E5=9B=ADA=E6=A0=8B2=E6=A5=BC212=E5=AE=A4</span></span><b=<br /><br /> r /><br /><br /> =09=09=09<span style=3D"letter-spacing:0pt"><span style=3D"color:#333333">R=<br /><br /> oom 212, Floor 2, Block A, South China Science Park, No. 3014, Banxuegang A=<br /><br /> venue, Longgang District, Shenzhen,Guangdong</span></span></span></span></s=<br /><br /> pan><br /><br /><br /> =09=09=09<a data-unsubtag=3D"_UNSUBSCRIBE_URL_" href=3D"http://track.wwhmnf=<br /><br /> c.com/index.php/campaigns/ap55974nb6fb3/track-url/kq636bdme4053/fe357eddc3d=<br /><br /> c647722e08173cb31abb6e4dda3e3">Unsubscribe</a></span></span></td><br /><br /> =09=09</tr><br /><br /> =09</tbody><br /><br /> </table><br /><br /> <img width=3D"1" height=3D"1" src=3D"http://track.wwhmnfc.com/index.php/cam=<br /><br /> paigns/ap55974nb6fb3/track-opening/kq636bdme4053" alt=3D"" /><br /><br /> </body><br /><br /> </html><br /><br /> <br /><br /> --_=_swift_1766065054_2728034707cc593e4c7b37f9210377d1_=_--<br /><br /> <br /><br /> </div> <footer class="post-info"> <ul class="meta"> <li><span class="info-label">Categories: </span><a href="https://www.nk.ca/blog/index.php?/categories/57-Chinese-Phish-Spam">Chinese Phish Spam</a></li> <li><a href="/blog/index.php?/archives/14478-Chinese-products-spam-part-5.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:dc="http://purl.org/dc/elements/1.1/"> <rdf:Description rdf:about="https://www.nk.ca/blog/index.php?/feeds/ei_14478.rdf" trackback:ping="https://www.nk.ca/blog/comment.php?type=trackback&entry_id=14478" dc:title="Chinese products spam part 5" dc:identifier="https://www.nk.ca/blog/index.php?/archives/14478-Chinese-products-spam-part-5.html" /> </rdf:RDF> --> </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/14477-Chinese-products-spam-part-4.html">Chinese products spam part 4</a></h2> <span class="post-info">Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-12-19T03:42:00+00:00">Friday, December 19. 2025</time></span> </header> <div class="clearfix"> <br /><br /> =09=09<tr height=3D"20" style=3D"height:15.00pt"><br /><br /> =09=09=09<td class=3D"et8" style=3D"border:none; border-bottom:0.5pt solid =<br /><br /> #000000; width:91.50pt; border-top:0.5pt solid #000000; border-right:0.5pt =<br /><br /> solid #000000; border-left:none; text-align:center; white-space:normal; pad=<br /><br /> ding-top:1px; padding-left:1px; padding-right:1px; vertical-align:middle" w=<br /><br /> idth=3D"122" x:str=3D""><span style=3D"font-size:11pt"><span style=3D"color=<br /><br /> :#000000"><span style=3D"font-family:Calibri"><span style=3D"font-weight:40=<br /><br /> 0"><span style=3D"font-style:normal"><span style=3D"text-decoration:none">C=<br /><br /> algary, AB</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"2410"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">2410</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"3000"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">3000</span></span></span></span></span></span></td><br /><br /> =09=09</tr><br /><br /> =09=09<tr height=3D"20" style=3D"height:15.00pt"><br /><br /> =09=09=09<td class=3D"et8" style=3D"border:none; border-bottom:0.5pt solid =<br /><br /> #000000; width:91.50pt; border-top:0.5pt solid #000000; border-right:0.5pt =<br /><br /> solid #000000; border-left:none; text-align:center; white-space:normal; pad=<br /><br /> ding-top:1px; padding-left:1px; padding-right:1px; vertical-align:middle" w=<br /><br /> idth=3D"122" x:str=3D""><span style=3D"font-size:11pt"><span style=3D"color=<br /><br /> :#000000"><span style=3D"font-family:Calibri"><span style=3D"font-weight:40=<br /><br /> 0"><span style=3D"font-style:normal"><span style=3D"text-decoration:none">E=<br /><br /> dmonton, AB</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"2410"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">2410</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"3000"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">3000</span></span></span></span></span></span></td><br /><br /> =09=09</tr><br /><br /> =09=09<tr height=3D"20" style=3D"height:15.00pt"><br /><br /> =09=09=09<td class=3D"et8" style=3D"border:none; border-bottom:0.5pt solid =<br /><br /> #000000; width:91.50pt; border-top:0.5pt solid #000000; border-right:0.5pt =<br /><br /> solid #000000; border-left:none; text-align:center; white-space:normal; pad=<br /><br /> ding-top:1px; padding-left:1px; padding-right:1px; vertical-align:middle" w=<br /><br /> idth=3D"122" x:str=3D""><span style=3D"font-size:11pt"><span style=3D"color=<br /><br /> :#000000"><span style=3D"font-family:Calibri"><span style=3D"font-weight:40=<br /><br /> 0"><span style=3D"font-style:normal"><span style=3D"text-decoration:none">W=<br /><br /> innipeg, MB</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"3210"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">3210</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"4000"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">4000</span></span></span></span></span></span></td><br /><br /> =09=09</tr><br /><br /> =09=09<tr height=3D"20" style=3D"height:15.00pt"><br /><br /> =09=09=09<td class=3D"et8" style=3D"border:none; border-bottom:0.5pt solid =<br /><br /> #000000; width:91.50pt; border-top:0.5pt solid #000000; border-right:0.5pt =<br /><br /> solid #000000; border-left:none; text-align:center; white-space:normal; pad=<br /><br /> ding-top:1px; padding-left:1px; padding-right:1px; vertical-align:middle" w=<br /><br /> idth=3D"122" x:str=3D""><span style=3D"font-size:11pt"><span style=3D"color=<br /><br /> :#000000"><span style=3D"font-family:Calibri"><span style=3D"font-weight:40=<br /><br /> 0"><span style=3D"font-style:normal"><span style=3D"text-decoration:none">R=<br /><br /> EGINA, SK</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"2930"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">2930</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"3650"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">3650</span></span></span></span></span></span></td><br /><br /> =09=09</tr><br /><br /> =09=09<tr height=3D"20" style=3D"height:15.00pt"><br /><br /> =09=09=09<td class=3D"et8" style=3D"border:none; border-bottom:0.5pt solid =<br /><br /> #000000; width:91.50pt; border-top:0.5pt solid #000000; border-right:0.5pt =<br /><br /> solid #000000; border-left:none; text-align:center; white-space:normal; pad=<br /><br /> ding-top:1px; padding-left:1px; padding-right:1px; vertical-align:middle" w=<br /><br /> idth=3D"122" x:str=3D""><span style=3D"font-size:11pt"><span style=3D"color=<br /><br /> :#000000"><span style=3D"font-family:Calibri"><span style=3D"font-weight:40=<br /><br /> 0"><span style=3D"font-style:normal"><span style=3D"text-decoration:none">S=<br /><br /> ASKATOON, SK</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"2930"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">2930</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"3650"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">3650</span></span></span></span></span></span></td><br /><br /> =09=09</tr><br /><br /> =09</tbody><br /><br /> </table> </div> <footer class="post-info"> <ul class="meta"> <li><span class="info-label">Categories: </span><a href="https://www.nk.ca/blog/index.php?/categories/57-Chinese-Phish-Spam">Chinese Phish Spam</a></li> <li><a href="/blog/index.php?/archives/14477-Chinese-products-spam-part-4.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:dc="http://purl.org/dc/elements/1.1/"> <rdf:Description rdf:about="https://www.nk.ca/blog/index.php?/feeds/ei_14477.rdf" trackback:ping="https://www.nk.ca/blog/comment.php?type=trackback&entry_id=14477" dc:title="Chinese products spam part 4" dc:identifier="https://www.nk.ca/blog/index.php?/archives/14477-Chinese-products-spam-part-4.html" /> </rdf:RDF> --> </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/14476-Chinese-products-spam-part-3.html">Chinese products spam part 3</a></h2> <span class="post-info">Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-12-19T03:41:00+00:00">Friday, December 19. 2025</time></span> </header> <div class="clearfix"> <br /><br /> =09=09<tr height=3D"20" style=3D"height:15.00pt"><br /><br /> =09=09=09<td class=3D"et4" height=3D"180" rowspan=3D"9" style=3D"border:0.5=<br /><br /> pt solid #000000; height:135.00pt; text-align:center; padding-top:1px; padd=<br /><br /> ing-left:1px; padding-right:1px; vertical-align:middle; white-space:nowrap"=<br /><br /> x:str=3D""><span style=3D"font-size:11pt"><span style=3D"color:#000000"><s=<br /><br /> pan style=3D"font-family:Calibri"><span style=3D"font-weight:400"><span sty=<br /><br /> le=3D"font-style:normal"><span style=3D"text-decoration:none">Shenzhen</spa=<br /><br /> n></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et5" style=3D"border:none; border-bottom:0.5pt solid =<br /><br /> #000000; border-top:0.5pt solid #000000; border-right:0.5pt solid #000000; =<br /><br /> border-left:none; text-align:center; padding-top:1px; padding-left:1px; pad=<br /><br /> ding-right:1px; vertical-align:middle; white-space:nowrap" x:str=3D""><span=<br /><br /> style=3D"font-size:11pt"><span style=3D"color:#000000"><span style=3D"font=<br /><br /> -family:Calibri"><span style=3D"font-weight:400"><span style=3D"font-style:=<br /><br /> normal"><span style=3D"text-decoration:none">Vancouver, BC</span></span></s=<br /><br /> pan></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"1210"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">1210</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"1500"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">1500</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et7" rowspan=3D"9" style=3D"border:0.5pt solid #00000=<br /><br /> 0; width:96.95pt; text-align:center; white-space:normal; padding-top:1px; p=<br /><br /> adding-left:1px; padding-right:1px; vertical-align:middle" width=3D"129" x:=<br /><br /> str=3D""><span style=3D"font-size:11pt"><span style=3D"font-family:Calibri"=<br /><br /> ><span style=3D"color:#000000"><span style=3D"font-weight:400"><span style=<br /><br /> =3D"font-style:normal"><span style=3D"text-decoration:none">Rate valid from=<br /><br /> <br /><br /><br /> =09=09=09Dec. 15th-Dec. 21th</span></span></span></span></span></span></td><br /><br /> =09=09</tr><br /><br /> =09=09<tr height=3D"20" style=3D"height:15.00pt"><br /><br /> =09=09=09<td class=3D"et5" style=3D"border:none; border-bottom:0.5pt solid =<br /><br /> #000000; border-top:0.5pt solid #000000; border-right:0.5pt solid #000000; =<br /><br /> border-left:none; text-align:center; padding-top:1px; padding-left:1px; pad=<br /><br /> ding-right:1px; vertical-align:middle; white-space:nowrap" x:str=3D""><span=<br /><br /> style=3D"font-size:11pt"><span style=3D"color:#000000"><span style=3D"font=<br /><br /> -family:Calibri"><span style=3D"font-weight:400"><span style=3D"font-style:=<br /><br /> normal"><span style=3D"text-decoration:none">Prince Rupert, BC</span></span=<br /><br /> ></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"1210"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">1210</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"1500"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">1500</span></span></span></span></span></span></td><br /><br /> =09=09</tr><br /><br /> =09=09<tr height=3D"20" style=3D"height:15.00pt"><br /><br /> =09=09=09<td class=3D"et5" style=3D"border:none; border-bottom:0.5pt solid =<br /><br /> #000000; border-top:0.5pt solid #000000; border-right:0.5pt solid #000000; =<br /><br /> border-left:none; text-align:center; padding-top:1px; padding-left:1px; pad=<br /><br /> ding-right:1px; vertical-align:middle; white-space:nowrap" x:str=3D""><span=<br /><br /> style=3D"font-size:11pt"><span style=3D"color:#000000"><span style=3D"font=<br /><br /> -family:Calibri"><span style=3D"font-weight:400"><span style=3D"font-style:=<br /><br /> normal"><span style=3D"text-decoration:none">Montreal, QC</span></span></sp=<br /><br /> an></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"3130"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">3130</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"3900"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">3900</span></span></span></span></span></span></td><br /><br /> =09=09</tr><br /><br /> =09=09<tr height=3D"20" style=3D"height:15.00pt"><br /><br /> =09=09=09<td class=3D"et8" style=3D"border:none; border-bottom:0.5pt solid =<br /><br /> #000000; width:91.50pt; border-top:0.5pt solid #000000; border-right:0.5pt =<br /><br /> solid #000000; border-left:none; text-align:center; white-space:normal; pad=<br /><br /> ding-top:1px; padding-left:1px; padding-right:1px; vertical-align:middle" w=<br /><br /> idth=3D"122" x:str=3D""><span style=3D"font-size:11pt"><span style=3D"color=<br /><br /> :#000000"><span style=3D"font-family:Calibri"><span style=3D"font-weight:40=<br /><br /> 0"><span style=3D"font-style:normal"><span style=3D"text-decoration:none">T=<br /><br /> oronto, ON</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"3130"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">3130</span></span></span></span></span></span></td><br /><br /> =09=09=09<td class=3D"et6" style=3D"border:0.5pt solid #000000; text-align:=<br /><br /> center; padding-top:1px; padding-left:1px; padding-right:1px; vertical-alig=<br /><br /> n:middle; white-space:nowrap" x:num=3D"3900"><span style=3D"font-size:11pt"=<br /><br /> ><span style=3D"font-family:Calibri"><span style=3D"color:#000000"><span st=<br /><br /> yle=3D"font-weight:400"><span style=3D"font-style:normal"><span style=3D"te=<br /><br /> xt-decoration:none">3900</span></span></span></span></span></span></td><br /><br /> =09=09</tr> </div> <footer class="post-info"> <ul class="meta"> <li><span class="info-label">Categories: </span><a href="https://www.nk.ca/blog/index.php?/categories/57-Chinese-Phish-Spam">Chinese Phish Spam</a></li> <li><a href="/blog/index.php?/archives/14476-Chinese-products-spam-part-3.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:dc="http://purl.org/dc/elements/1.1/"> <rdf:Description rdf:about="https://www.nk.ca/blog/index.php?/feeds/ei_14476.rdf" trackback:ping="https://www.nk.ca/blog/comment.php?type=trackback&entry_id=14476" dc:title="Chinese products spam part 3" dc:identifier="https://www.nk.ca/blog/index.php?/archives/14476-Chinese-products-spam-part-3.html" /> </rdf:RDF> --> </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/14475-Chinese-products-spam-part-2.html">Chinese products spam part 2</a></h2> <span class="post-info">Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-12-19T03:39:00+00:00">Friday, December 19. 2025</time></span> </header> <div class="clearfix"> <br /><br /> Room 212, Floor 2, Blo=<br /><br /> ck A, South China Science Park, No. 3014,<br /><br /> Banxuegang Avenue, Longgang Dis=<br /><br /> trict, Shenzhen,Guangdong<br /><br /> Unsubscribe<br /><br /> [http://track.wwhmnfc.com/index.p=<br /><br /> hp/campaigns/ap55974nb6fb3/track-url/kq636bdme4053/fe357eddc3dc647722e08173=<br /><br /> cb31abb6e4dda3e3]<br /><br /> <br /><br /> --_=_swift_1766065054_2728034707cc593e4c7b37f9210377d1_=_<br /><br /> Content-Type: text/html; charset=utf-8<br /><br /> Content-Transfer-Encoding: quoted-printable<br /><br /> <br /><br /> <!DOCTYPE html><br /><br /> <html><br /><br /> <head><meta charset=3D"utf-8"/><br /><br /> =09<title>FCL Ocean Freight: Shenzhen to Canada






ont-size:12px;">
er:auto;">
0pt;">Hi Team,

span>





I hope this email finds y=

ou well.







-size:12px;">T=

his is=C2=A0Anne from TO C E-Commerce Logistics, part of CIMC Wetrans with =

22 years in sea freight.



As a trusted freight forwarder, we specialize in providing seamless and cos=

t-effective logistics solutions between Asia and Canada.


To help you streamline your planning, we're pleased to offer exclusive, all=

-in ocean freight rates from Shenzhen to Canada.





Promotional Rates at a Glance:






rder:0.5pt solid #000000" width=3D"467">

=09

=09=09

=09=09

=09=09

=09=09

=09

=09

=09=09

=09=09=09

=09=09=09

=09=09=09

=09=09=09

=09=09=09

=09=09

Chinese products spam part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Dec 2025 06:43:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vWEGY-00000000GZt-0cE2

for dave@doctor.nl2k.ab.ca;

Thu, 18 Dec 2025 06:42:02 -0700

Resent-From: The Doctor

Resent-Date: Thu, 18 Dec 2025 06:42:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [173.44.62.223] (port=58857 helo=hello.wwhmnfc.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vWED2-00000000DVe-41DN

for root@nk.ca;

Thu, 18 Dec 2025 06:38:35 -0700

Message-ID: <232a2486f94b9e845d43b767ba454b7bdf426b04@wwhmnfc.com>

Date: Thu, 18 Dec 2025 13:37:34 +0000

Subject: FCL Ocean Freight: Shenzhen to Canada

From: Anne

Reply-To: Anne

To: "root@nk.ca"

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="_=_swift_1766065054_2728034707cc593e4c7b37f9210377d1_=_"

X-Report-Abuse: http://track.wwhmnfc.com/index.php/campaigns/ap55974nb6fb3/report-abuse/gp442cg6yhfdf/kq636bdme4053

X-EBS: http://track.wwhmnfc.com/index.php/lists/block-address

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe: ,



List-Id: gp442cg6yhfdf =?utf-8?Q?=3C=E6=B5=B7=E5=85=B3=E6=95=B0?=

=?utf-8?Q?=E6=8D=AE2=E8=B4=AD=E4=B9=B0Canada=3E?=

Feedback-ID: ap55974nb6fb3:regular:gp442cg6yhfdf:th86622vgce95

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Team, I hope this email finds you well. This is Anne from

TO C E-Commerce Logistics, part of CIMC Wetrans with 22 years in sea freight.

As a trusted freight forwarder, we specialize in providing seamless and cost-effective

logistics solutio [...]



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[173.44.62.223 listed in will-spam-for-food.eu.org]

[173.44.62.223 listed in will-spam-for-food.eu.org]

[173.44.62.223 listed in will-spam-for-food.eu.org]

[173.44.62.223 listed in will-spam-for-food.eu.org]

[173.44.62.223 listed in will-spam-for-food.eu.org]

[173.44.62.223 listed in will-spam-for-food.eu.org]

[173.44.62.223 listed in will-spam-for-food.eu.org]

[173.44.62.223 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[173.44.62.223 listed in dnsbl.ahbl.org]

[173.44.62.223 listed in dnsbl.ahbl.org]

[173.44.62.223 listed in dnsbl.ahbl.org]

[173.44.62.223 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[173.44.62.223 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[173.44.62.223 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[173.44.62.223 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[173.44.62.223 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: m.imex.top (top)]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_NX BODY: Odd Letter Triples with NX

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} FCL Ocean Freight: Shenzhen to Canada





--_=_swift_1766065054_2728034707cc593e4c7b37f9210377d1_=_

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hi Team,



I hope this email finds you well.



This is=C2=A0Anne from=

TO C E-Commerce Logistics, part of CIMC Wetrans

with 22 years in sea fre=

ight.

As a trusted freight forwarder, we specialize in providing seamless=



and cost-effective logistics solutions between Asia and Canada.

To hel=

p you streamline your planning, we're pleased to offer

exclusive, all-in =

ocean freight rates from Shenzhen to Canada.



PROMOTIONAL RATES AT A GL=

ANCE:



=09=09POL

=09=09POD

=09=0920GP(USD)

=09=0940HQ(USD)

=

=09=09Validity



=09=09Shenzhen

=09=09Vancouver, BC

=09=091210=



=09=091500

=09=09Rate valid from

Dec. 15th-Dec. 21th



=09=09P=

rince Rupert, BC

=09=091210

=09=091500



=09=09Montreal, QC

=

=09=093130

=09=093900



=09=09Toronto, ON

=09=093130

=09=09390=

0



=09=09Calgary, AB

=09=092410

=09=093000



=09=09Edmonton,=

AB

=09=092410

=09=093000



=09=09Winnipeg, MB

=09=093210

=

=09=094000



=09=09REGINA, SK

=09=092930

=09=093650



=09=09S=

ASKATOON, SK

=09=092930

=09=093650



We are committed to providing=

reliable service and clear

communication. I am ready to answer any quest=

ions or provide a spot

quote for your specific cargo.



Best regards,=



Anne Chen



=09=09Tel/Whatsapp/WeChat: + 86-18577340972

E-mail:=

=C2=A0anne.chen@cimcwetrans.com

[http://track.wwhmnfc.com/index.php/campa=

igns/ap55974nb6fb3/track-url/kq636bdme4053/ffbdd51499cac01915c20b0d92614115=

4d09d1e3]=C2=A0

=09=09=C2=A0



=09=09=E5=B9=BF=E4=B8=9C=E7=9C=81=

=E6=B7=B1=E5=9C=B3=E5=B8=82=E9=BE=99=E5=B2=97=E5=8C=BA=E5=9D=82=E9=9B=AA=

=E5=B2=97=E5=A4=A7=E9=81=933014=E5=8F=B7=E5=8D=8E=E5=8D=97=E7=A7=91=

=E6=8A=80=E5=9B=ADA=E6=A0=8B2=E6=A5=BC212=E5=AE=A4

0; background:#f4b7be; height:15.00pt; width:54.00pt; text-align:center; pa=

dding-top:1px; padding-left:1px; padding-right:1px; vertical-align:middle; =

white-space:nowrap" width=3D"72" x:str=3D"">=


le=3D"font-weight:400">
t-decoration:none">POL

#f4b7be; width:91.50pt; text-align:center; padding-top:1px; padding-left:1p=

x; padding-right:1px; vertical-align:middle; white-space:nowrap" width=3D"1=

22" x:str=3D"">
>
style=3D"font-style:normal">POD=


#f4b7be; width:54.00pt; text-align:center; padding-top:1px; padding-left:1p=

x; padding-right:1px; vertical-align:middle; white-space:nowrap" width=3D"7=

2" x:str=3D"">=


tyle=3D"font-style:normal">20GP(USD)
span>

#f4b7be; width:54.00pt; text-align:center; padding-top:1px; padding-left:1p=

x; padding-right:1px; vertical-align:middle; white-space:nowrap" width=3D"7=

2" x:str=3D"">=


tyle=3D"font-style:normal">40HQ(USD)
span>

#f4b7be; width:96.95pt; text-align:center; padding-top:1px; padding-left:1p=

x; padding-right:1px; vertical-align:middle; white-space:nowrap" width=3D"1=

29" x:str=3D"">
libri">
style=3D"font-style:normal">Validity
span>
Mon Tue Wed Thu Fri Sat Sun
Back December '25 Forward
12
17 20 21
22 23 24 25 26 27 28
29 30 31        

Archives

Categories

Syndicate This Blog

  • XML

Blog Administration

Open login screen

Powered by

NetKnow Navigation

Home


VPNs


Dialup Service


Web Design


Web Hosting


E-Commerce


Server Colocation


Domain Registration


Web Mail


Support


Testimonials




Client List


FAQs


Interested in NetKnow Services?


Links


Disclaimer


Acceptable Use


Security





Technorati Profile







AddThis Feed Button

Remote RSS/OPML-Blogroll Feed

No RSS/OPML feed selected

Error

serendipity error: could not include serendipity_plugin_statistics:9cbc0e29a86fd9359ac6748399d6ba5b - exiting.

addthis





AddThis Social Bookmark Button










Blog Grade for www.nk.ca/blog

Empire Avenue





Syndicate This Blog

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:7aefbb7ca9b764849be35e938b6fc9b2 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:c7a92f670894afa9e3097574359fe38d - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:8b72cc4261ddc7ff15df253b17c29c23 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:a0bd1a65cd9ff1c3e289829cc26557c4 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:dcd26c048e45c234c054530ef1492953 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:6d4c66aeb83aeb9524a7cc609051cf0f - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:acc1042e790905e499445a6890081492 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:158fb50035b12269ec43107b29253af3 - exiting.

Error

serendipity error: could not include serendipity_plugin_topreferers:6b7e3336713d0a60294c7e310ca5cf1a - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:d3f047ee6f925c138fae56dcd7a99400 - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:5544ace5c8b19bb8592464810b48df10 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:5624ac0b69cdbe32d0cdc40814d7eb41 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:b8387d3a378247c1c9ede46fffb084e1 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:bacdc0652131449ebc68ebde2bcb9ce2 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:8c84ca587b64b627d986e9d5ce98ead1 - exiting.