Costco Survey phish from Microsoft Outlook Part 3































































































COSTCO MEMBER REWARDS




Limited-time exclusive opportunity









EXCLUSIVE GIVEAWAY







Win a YETI Beach Lounge Wagon







As a valued Costco member, you’ve been selected for a chance to receive a brand-new

YETI Beach Lounge Wagon.

Answer a quick question to confirm your entry and claim your reward.































Premium Quality


Durable and built for outdoor comfort



Easy Participation


Takes less than a minute



Exclusive Access


Limited to selected Costco members



No Purchase Needed


Completely free to enter










style="background:#E53935;color:#ffffff;padding:14px 40px;text-decoration:none;font-weight:bold;border-radius:6px;display:inline-block;">

GET IT NOW






Limited availability. One entry per household.







You are receiving this email as part of a promotional rewards program.



Unsubscribe





















--_4b7bda0d-a248-47d2-9e97-189b99cd3395_--

Costco Survey phish from Microsoft Outlook Part 2



Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.107.208.129 listed in dnsbl.ahbl.org]

[40.107.208.129 listed in dnsbl.ahbl.org]

[40.107.208.129 listed in dnsbl.ahbl.org]

[40.107.208.129 listed in dnsbl.ahbl.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[dnsbl.ahbl.org]

[104.238.213.166 listed in dnsbl.ahbl.org]

[104.238.213.166 listed in dnsbl.ahbl.org]

[104.238.213.166 listed in dnsbl.ahbl.org]

[104.238.213.166 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.107.208.129 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.107.208.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.107.208.129 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.107.208.129 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: hermizo.digital]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist

[URI: hermizo.digital]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.2 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: www.hermizo.digital]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[buvedpcqydkxqgqmgresf(at)councilonagingof65285.onmicrosoft.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.208.129 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.107.208.129 listed in bl.score.senderscore.com]

0.3 OFFER BODY: Offers you Something

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: hermizo.digital]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.208.129 listed in list.dnswl.org]

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Your Costco Survey Reward Is Ready



--_4b7bda0d-a248-47d2-9e97-189b99cd3395_

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 7bit





















Costco Exclusive Offer

Costco Survey phish from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 15:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMBR1-00000000NNO-2GLe

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 15:11:35 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 15:11:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus3azon11021129.outbound.protection.outlook.com ([40.107.208.129]:49140 helo=PH0PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM9yc-00000000Gcd-0cyr

for doctor@doctor.nl2k.ab.ca;

Sun, 10 May 2026 13:38:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Tv+sumIPDwYo1MHA58TVVf4Jz3zcVkdOIqVh1Xnr7+5B+oJH3gukndIQRQuIDlxQ4qYIJZfBspSjSXgsUfScnCnSk/+aU2T/ggnWdjG4Jlt0uHVMAVm2YNCWIluqojCvl/QLyZv80DWDcDyIsELqVAG0EGbVABtyTPgY8WVF6ZXY23ENbk/SKm8EGUn70OwG3yP50MRnBf7VVhtn4u2ZEfD6p+6oO+7dEoHD453SdHbjW5EdCZoylygMZr0fT9wRAN8ZFiI4kf2x+FzL8hgkLBMHBO8xVTsrlm1o7FdITV+0g+ysQAxeXcCdFUiHfhGk0oJBL50A4eE5jgY7CpAGWw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=mevWowwRL6fwxW19Brwcpbav0TIvRIPdSLuT09D8mcM=;

b=MC6CBvgaWlmNtYusuEQ2YK6k5g5n+am8Zy1afCxW8BGrtBFoIR7AT8OUkuGPYcr/8Wje+CVK5LpyYXP1jnxquyK5C1bH/OuKOuZQ73J4bn4XtQOANnbay27BySKqXphG7A7zlvbY+YUTViHZPHlR0kjWAozShsPfFQ3NFi27hx40+kLLQdidd5C7iag0w805ycEQW5A+IdgWd3ALWgCuuxpiy11yt0TCVUJmqlfo4Rny5oumsn+1rik5NYY67MtOMF+3xKd84vdIt2SmFViSLJTOrHPxeKRUvw9HqeA77yB2QcO+0p9NGkvr7ymz1LKFNUdQQD+7DrESW/swyklqrA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

104.238.213.166) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=councilonagingof65285.onmicrosoft.com; dmarc=none action=none

header.from=councilonagingof65285.onmicrosoft.com; dkim=none (message not

signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=councilonagingof65285.onmicrosoft.com;

s=selector1-councilonagingof65285-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=mevWowwRL6fwxW19Brwcpbav0TIvRIPdSLuT09D8mcM=;

b=ByvyVkMOY5ydqRfNfQVt+ngpxJnavqILNjKPzOCgoxkiMFIcSuAP8jM2YJ8pXN/oXU45NpJHMu2Mc2dVzVltEu85c3OmK11LroYHGG7KCk8RWeeSaLlxs20gMqYMA2OcNINXC3swqEwD+VorUKTU1pjpTmoFfaEhhhtd0237jjhHaeLeing8QdJFb8NniVc8Z4/FaHm92ZPIMO7n4aGtT81v31M6d/C18UU7lVtwmoZy4o+mCuxc4HMnxQx/CRp8p98fME4iRyFlxma4DPsWQsuugvl7kL5LJkj+rDiFF82xpXg+b0d6hT3/ERbO/cGwie1VU9fwKmvZsE/4BxdPBw==

Received: from CH5PR05CA0020.namprd05.prod.outlook.com (2603:10b6:610:1f0::13)

by CH0PR15MB6236.namprd15.prod.outlook.com (2603:10b6:610:192::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9891.15; Sun, 10 May

2026 19:37:15 +0000

Received: from CH1PEPF0000AD7E.namprd04.prod.outlook.com

(2603:10b6:610:1f0:cafe::c3) by CH5PR05CA0020.outlook.office365.com

(2603:10b6:610:1f0::13) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.25.14 via Frontend Transport; Sun, 10

May 2026 19:37:15 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 104.238.213.166)

smtp.mailfrom=councilonagingof65285.onmicrosoft.com; dkim=none (message not

signed) header.d=none;dmarc=none action=none

header.from=councilonagingof65285.onmicrosoft.com;

Received-SPF: Fail (protection.outlook.com: domain of

councilonagingof65285.onmicrosoft.com does not designate 104.238.213.166 as

permitted sender) receiver=protection.outlook.com; client-ip=104.238.213.166;

helo=councilonagingof65285.onmicrosoft.com;

Received: from councilonagingof65285.onmicrosoft.com (104.238.213.166) by

CH1PEPF0000AD7E.mail.protection.outlook.com (10.167.244.87) with Microsoft

SMTP Server id 15.21.25.13 via Frontend Transport; Sun, 10 May 2026 19:37:14

+0000

MIME-Version: 1.0

From: Costco Surveys

Subject: Your Costco Survey Reward Is Ready

Date: Sun, 10 May 2026 20:34:57 +0100

To: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative;

boundary="_4b7bda0d-a248-47d2-9e97-189b99cd3395_"

Message-ID:

<67b34c14-72a2-41a9-8e77-52176ab7f485@CH1PEPF0000AD7E.namprd04.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CH1PEPF0000AD7E:EE_|CH0PR15MB6236:EE_

X-MS-Office365-Filtering-Correlation-Id: ca2b3d76-1ee4-495c-4b0a-08deaecb89e3

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|376014|34020700016|82310400026|36860700016|61400799027|4022899009|8096899003|18002099003|16102099003|85622059|56012099003;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:104.238.213.166;CTRY:US;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:councilonagingof65285.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(376014)(34020700016)(82310400026)(36860700016)(61400799027)(4022899009)(8096899003)(18002099003)(16102099003)(85622059)(56012099003);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

UWhUFt/b1A1KeUHYi4SWwDE+16oKMztiIksUanII+XEJ7fwHXNM2oxtls8JYJOl6IEBUDvF8zSx0yZ0wGjZlYvL436WYfhpgPHllAI0jALnDvoTWS6Kbs4kAbiwh3UZ2LK/k3RvwwnSu9GpyvT6IGIwBSplTY2fGZSsOtph0MDhzUbE+SMhWGi/3x0LO5qs68jU/DkzF6yYVO94wRXySpWPRwQXA8BSMbmdjmgI9S7hWmcOHMy4GLnuNoGEFDigjba2zZzJse1q+5yJWt/s0gAwnpquhC7AzP8Q5FQGOCO06wmZsvhuC032ILtXL1/qp8zhhT5mT8sBRpoPuEleBBcljJ8GEC/h7y4iZ8PUdLC/Z4ARgpbuhmtnZrq3WwU+tNdE6YB/cOwnFLia+zQSQG+20py/5d/SDgTzn4AqMCxqAhsLXNHdXE9jPrEXnypbV

X-OriginatorOrg: councilonagingof65285.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 May 2026 19:37:14.6759

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: ca2b3d76-1ee4-495c-4b0a-08deaecb89e3

X-MS-Exchange-CrossTenant-Id: c06ed4ac-ac23-4161-a733-d5ba6c748b9c

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c06ed4ac-ac23-4161-a733-d5ba6c748b9c;Ip=[104.238.213.166];Helo=[councilonagingof65285.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

CH1PEPF0000AD7E.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH0PR15MB6236

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Costco Exclusive Offer COSTCO MEMBER REWARDS

Web/SEo/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 08:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM5R8-000000000ZV-31Ju

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 08:47:18 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 08:47:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f72.google.com ([209.85.217.72]:56545)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM55l-00000000Lf2-0f0d

for sales@nk.ca;

Sun, 10 May 2026 08:25:22 -0600

Received: by mail-vs1-f72.google.com with SMTP id ada2fe7eead31-6332db4182dso424148137.0

for ; Sun, 10 May 2026 07:24:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1778423059; x=1779027859; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=KM9Mk8P3Q4d7oOJbpCOskUdbUgp0M7b3siAd7eOaS9M=;

b=N/ONfbJFZO/22mf2qxjQhAY4iruoQQ0XVrZ01os3I/8kbo2+zz273+Oj35AdRoAobW

7QDdqnoEhAFIuSBjL8P9wDFBcOh25JlBi/DmHh7XugT5mYRFWhG0R/1/xjf5hXhf48KY

7LWXCW8tQDVSpt3PbMPR83bsGt8qx7RKa39vEv8PP/dWo4TlT5b/62RGDMhoeY/FW/Qm

e3Y9mDHtZwjJ7OnhuF+kLURzNwc0U1vdXVcXeq/mpJLuxe0+pLdGRxzjWyfbjfq3jaSr

Y9hQfw4Hvu9sTk2lCZDS/ty5lpChALzmC5RY+IuJzl0KabDM/L5c2qf8m41tKyRuuyV4

/bKQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778423059; x=1779027859;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=KM9Mk8P3Q4d7oOJbpCOskUdbUgp0M7b3siAd7eOaS9M=;

b=ZladjN+Rc4/oEyuDvv5ssgpr0GvwFs7ts5ZpfTWvNA3oFh1t6Kv3uQ6fuS3L/0556W

dRrQbb27nAG7aNFqgnCEAEyw7njPrsT2BnUimZ1VJzmH20szQvOiIqHxyYTRu/jrkrAK

mCFom/mjPMGbvcnHINJYTVqWrnLFkiO9E54tIiqdephDK3kCigduZ+5KrYWrySXNtRfq

pGwL2Vsot5LVE5T1nXpKtgJMVJ7HNCCRzpEm+LSOwn8rWbQwi/nRuRBFVoGcW+f3kQPi

YzXIRQZKmHUZc/yLHJOnNYY+JbFhLAocczgFGlNISy/0AoI30Za0+kLANPiFqzm6Zsj3

lGAw==

X-Gm-Message-State: AOJu0YxWeFNd0ebBL8LPsg31vAQJqhvNr4OkOmSupKgiMwKvcIKzwtMO

4JqVotDXdaM4broGhnkGqo0pML1AK5hYhhB5Nl9aFTQqAeNb3k80AZ6M2m113+kJDiHhAhrU6hA

HS/c=

MIME-Version: 1.0

X-Received: by 2002:a05:6102:2ac7:b0:633:c6c4:b32c with SMTP id

ada2fe7eead31-633c6c4b990mr516594137.15.1778423059142; Sun, 10 May 2026

07:24:19 -0700 (PDT)

Message-ID:

Date: Sun, 10 May 2026 14:24:19 +0000

Subject: Pricing 5/10/2026

From: jamesmateo385@gmail.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000b35b46065177628b"



--000000000000b35b46065177628b

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hello sir/mam

Have a good day,



I looked over your website and believe that both it and your company have a

lot of potential.



I would like to send you a Proposal of your business website!



You can get your website on the 1st page of GOOGLE.



Can I send a You Quotation and Price?



Thank you!

Mateo



--000000000000b35b46065177628b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello sir/mam
Have a good day,

I looked over your website and bel=

ieve that both it and your company have a lot of potential.

I would =

like to send you a Proposal of your business website!

You can get yo=

ur website on the 1st page of GOOGLE.

Can I send a You Quotation an=

d Price?

Thank you!
Mateo

--000000000000b35b46065177628b--

Fedex phish from Sendgrid Part 2




r=3D"0" style=3D"background:#ffffff; border-top:1px solid #e3e3e3;">










=3D"0" border=3D"0" style=3D"max-width:500px;">








0px;">


=3D"display:inline-block; background:#ffffff; border:2px solid #007ab7; col=

or:#007ab7; font-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:=

16px; font-weight:700; text-decoration:none; padding:12px 28px; border-radi=

us:40px; letter-spacing:0.5px;">Confirm and Resolve Charges











r=3D"0" style=3D"background:#ffffff; border-top:1px solid #e3e3e3;">








px;">


=3D"0" border=3D"0" style=3D"max-width:500px;">







=20









=20









=20



=20

=20









=20









=20










dEx Sans', Roboto, Arial, sans-serif; font-size:24px; font-weight:300; colo=

r:#333; padding-bottom:30px;">

Tracking details


3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Tracking ID


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#007ab7; vertical-align:top;">


45b4" style=3D"color:#007ab7; text-decoration:none; font-weight:600;"> 5514=

58785652125





3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Canada


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

{{DATE}} {{TIME}}




3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Number of pieces


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

1




3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Total shipment weight


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

2.40 LB




3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Service


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

FedEx International Connect=

Plus





Fedex phish from Sendgrid Part 3












r=3D"0" style=3D"background:#ffffff;">








px;">


nline-block; background:#ffffff; border:2px solid #007ab7; color:#007ab7; f=

ont-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:15px; font-we=

ight:700; text-decoration:none; padding:14px 32px; border-radius:40px; lett=

er-spacing:1px;">TRACK SHIPMENT









r=3D"0" style=3D"background:#ffffff; border-top:1px solid #e3e3e3;">








px;">


=3D"0" border=3D"0" style=3D"max-width:500px;">








to, Arial, sans-serif; font-size:14px; line-height:1.5; color:#555; text-al=

ign:left;">




t.com/mail?url=3Dhttps%3A%2F%2Fwww.fedex.com%2Fcontent%2Fdam%2Ffedex-com%2F=

ens%2Fenvelope_icon.jpg&t=3D1774298302&ymreqid=3Df0dd530e-86fe-79af-1c5e-d7=

0005018c00&sig=3DCbh.F0qv4V4ixe9MoM5ASA--~D" width=3D"15" height=3D"9" styl=

e=3D"display:inline-block; margin-right:6px;" alt=3D"icon">=20

Please do not respond to th=

is message.
This email was sent from an unattended mailbox. This r=

eport was generated at approximately Canada=20



All wei=

ghts are estimated.



To trac=

k the latest status of your shipment, click on the tracking number above.
p>

Standar=

d transit is the date and time the package is scheduled to be delivered by,=

based on the selected service, destination and ship date. Limitations and =

exceptions may apply. Please see the FedEx Service Guide for terms and cond=

itions of service, including the FedEx Money-Back Guarantee, or contact you=

r FedEx Customer Support representative.



=C2=A9 2=

026 Federal Express Corporation. The content of this message is protected b=

y copyright and trademark laws under U.S. and international law. Review our=


"color:#007ab7; text-decoration:underline;">Privacy Notice
. All rights =

reserved.



Thank y=

ou for your business.




e:12px; color:#888;">ID: 1026















Fedex phish from Sendgrid Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 08:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM50H-00000000DoS-3ATz

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 08:19:33 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 08:19:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a108.a57a0aae.use4.send.mailgun.net ([198.244.51.108]:41538)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM3kx-00000000OK5-1B9b

for sales@nk.ca;

Sun, 10 May 2026 06:59:46 -0600

DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=digitaldistributiongroup.com; q=dns/txt; s=mailo; t=1778417920; x=1778425120;

h=Content-Type: Content-Transfer-Encoding: Message-Id: List-Unsubscribe: Reply-To: To: To: From: From: Subject: Subject: Mime-Version: Date: Sender: Sender;

bh=Qb7ZwVcX9h8UXh71BQ2bafHpfeSeuJxC4hZfLbg6+lY=;

b=YDMbxtRs9LemJMKecmBX6eQ0d5N0LbTa3hTcmuhHF92HEALIJ1dO+OrOvrcYT9sGE7hETc9B+sxAsZinuVrb9z3Gqofk+84OjeSA5M2IChhq+pwfLdqBY1i5xYXspbLVMpLFqNIscYn1duAejmkdUckb0QhjlvhF1W1ffQ/Y4ZI=

X-Mailgun-Sid: WyIzMjAxMiIsInNhbGVzQG5rLmNhIiwiMTI2NTJmIl0=

Received: by 28a3df20a495a09ae53c3f149858759d23f8c80ca9950622431215e3ed6e199e with HTTP

id 6a008100b7a3917ac535fecc; Sun, 10 May 2026 12:58:40 GMT

X-Mailgun-Sending-Ip: 198.244.51.108

Sender: info@digitaldistributiongroup.com

Date: Sun, 10 May 2026 12:58:40 +0000

Mime-Version: 1.0

Subject: we've updated the estimated delivery date of your shipment

From: FedEx Tracking

To: sales@nk.ca

Reply-To: support@digitaldistributiongroup.com

List-Unsubscribe:

Precedence: bulk

Message-Id: <20260510125840.26d96e8e636c90b9@digitaldistributiongroup.com>

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset="utf-8"












=3D1.0">

FedEx Delivery Notification






elvetica Neue', Helvetica, Arial, sans-serif;">




order-radius:8px; overflow:hidden; box-shadow:0 1px 4px rgba(0,0,0,0.05);">






r=3D"0" style=3D"background:#4d148c; width:100%;">










ds/images/fedex-express-logo-9186.png" alt=3D"FedEx" width=3D"140" style=3D=

"display:block; width:140px; height:auto; border:0;" border=3D"0">








r=3D"0" style=3D"background:#fafafa; width:100%;">








px;">


=3D"0" border=3D"0" style=3D"max-width:500px; width:100%;">














FedEx Sans', Roboto, Arial, sans-serif; font-size:32px; font-weight:300; co=

lor:#333; line-height:1.2; padding-bottom:16px;">

We=E2=80=99ve updated the estimated del=

ivery of your shipment. =20


0px;">


cellspacing=3D"0" border=3D"0">














ont-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-we=

ight:600; color:#333; letter-spacing:0; padding-bottom:6px;">

Delivery Date


ont-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:26px; font-we=

ight:300; color:#333; line-height:1.3;">

{{DATE}}=20





Fedex phish from Sendgrid Part 3








3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Total shipment weight


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

2.40 LB







=20






3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Service


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

FedEx International Connect=

Plus




















r=3D"0" style=3D"background:#ffffff;">








px;">


isplay:inline-block; background:#ffffff; border:2px solid #007ab7; color:#0=

07ab7; font-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:15px;=

font-weight:700; text-decoration:none; padding:14px 32px; border-radius:40=

px; letter-spacing:1px;">TRACK SHIPMENT









r=3D"0" style=3D"background:#ffffff; border-top:1px solid #e3e3e3;">








px;">


=3D"0" border=3D"0" style=3D"max-width:500px;">








to, Arial, sans-serif; font-size:14px; line-height:1.5; color:#555; text-al=

ign:left;">




t.com/mail?url=3Dhttps%3A%2F%2Fwww.fedex.com%2Fcontent%2Fdam%2Ffedex-com%2F=

ens%2Fenvelope_icon.jpg&t=3D1774298302&ymreqid=3Df0dd530e-86fe-79af-1c5e-d7=

0005018c00&sig=3DCbh.F0qv4V4ixe9MoM5ASA--~D" width=3D"15" height=3D"9" styl=

e=3D"display:inline-block; margin-right:6px;" alt=3D"icon">=20

Please do not respond to th=

is message.
This email was sent from an unattended mailbox. This r=

eport was generated at approximately Canada=20



All wei=

ghts are estimated.



To trac=

k the latest status of your shipment, click on the tracking number above.
p>

Standar=

d transit is the date and time the package is scheduled to be delivered by,=

based on the selected service, destination and ship date. Limitations and =

exceptions may apply. Please see the FedEx Service Guide for terms and cond=

itions of service, including the FedEx Money-Back Guarantee, or contact you=

r FedEx Customer Support representative.



=C2=A9 2=

026 Federal Express Corporation. The content of this message is protected b=

y copyright and trademark laws under U.S. and international law. Review our=


"color:#007ab7; text-decoration:underline;">Privacy Notice
. All rights =

reserved.



Thank y=

ou for your business.




e:12px; color:#888;">ID: 1026















Fedex phish from Sendgrid Part 2








r=3D"0" style=3D"background:#fafafa; width:100%;">








px;">


=3D"0" border=3D"0" style=3D"max-width:500px; width:100%;">














FedEx Sans', Roboto, Arial, sans-serif; font-size:32px; font-weight:300; co=

lor:#333; line-height:1.2; padding-bottom:16px;">

We=E2=80=99ve updated the estimated del=

ivery of your shipment. =20


0px;">


cellspacing=3D"0" border=3D"0">














ont-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-we=

ight:600; color:#333; letter-spacing:0; padding-bottom:6px;">

Delivery Date


ont-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:26px; font-we=

ight:300; color:#333; line-height:1.3;">

{{DATE}}=20












r=3D"0" style=3D"background:#ffffff; border-top:1px solid #e3e3e3;">










=3D"0" border=3D"0" style=3D"max-width:500px;">








0px;">


" style=3D"display:inline-block; background:#ffffff; border:2px solid #007a=

b7; color:#007ab7; font-family:'FedEx Sans', Roboto, Arial, sans-serif; fon=

t-size:16px; font-weight:700; text-decoration:none; padding:12px 28px; bord=

er-radius:40px; letter-spacing:0.5px;">Confirm and Resolve Charges











r=3D"0" style=3D"background:#ffffff; border-top:1px solid #e3e3e3;">




px;">


=3D"0" border=3D"0" style=3D"max-width:500px;">







=20









=20









=20



=20

=20









=20

Fedex phish from Sendrig Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 08:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM50A-00000000DBZ-0tQE

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 08:19:26 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 08:19:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a108.a57a0aae.use4.send.mailgun.net ([198.244.51.108]:43878)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM3e1-00000000NYA-2S8f

for doctor@doctor.nl2k.ab.ca;

Sun, 10 May 2026 06:52:36 -0600

DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=digitaldistributiongroup.com; q=dns/txt; s=mailo; t=1778417490; x=1778424690;

h=Content-Type: Content-Transfer-Encoding: Message-Id: List-Unsubscribe: Reply-To: To: To: From: From: Subject: Subject: Mime-Version: Date: Sender: Sender;

bh=owJCeFTZRyo+4naimVBRUS33gYnwbWu1tWOgTU0Txnw=;

b=WRPdQDeqbGlw+tvcyFO15I8QYalo+yROpv46zquab8IqE64Hv5WN0SWK+6NH1jScdE+0H+kLOeMPYo62u72dg80sNfsywcaCCvI40gKjEpCWVTPRNlJNQvMA8R09bU4Os67lgeNV97LraNSQEc/CJF9dcsybyEt0mzBK7qJPWec=

X-Mailgun-Sid: WyIyNmIxOCIsImRvY3RvckBkb2N0b3Iubmwyay5hYi5jYSIsIjEyNjUyZiJd

Received: by 75182698c3b7be753b4ed9991578a6717724111b3e9012b76a67ce89fd7f5760 with HTTP

id 6a007f52248a36f3e64e94b5; Sun, 10 May 2026 12:51:30 GMT

X-Mailgun-Sending-Ip: 198.244.51.108

Sender: info@digitaldistributiongroup.com

Date: Sun, 10 May 2026 12:51:30 +0000

Mime-Version: 1.0

Subject: we've updated the estimated delivery date of your shipment

From: FedEx Tracking

To: doctor@doctor.nl2k.ab.ca

Reply-To: support@digitaldistributiongroup.com

List-Unsubscribe:

Precedence: bulk

Message-Id: <20260510125130.8a6b80349bce190f@digitaldistributiongroup.com>

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset="utf-8"

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FedEx Delivery Notification We’ve updated the estimated

delivery of your shipment. Delivery Date {{DATE}} Confirm and Resolve Charges

Tracking details Tracking ID 551458785652125 Canada {{DATE}} {{TIME}} Number

of pieces 1 To [...]



Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[198.244.51.108 listed in dnsbl.ahbl.org]

[198.244.51.108 listed in dnsbl.ahbl.org]

[198.244.51.108 listed in dnsbl.ahbl.org]

[198.244.51.108 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[198.244.51.108 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[198.244.51.108 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[198.244.51.108 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[198.244.51.108 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[198.244.51.108 listed in will-spam-for-food.eu.org]

[198.244.51.108 listed in will-spam-for-food.eu.org]

[198.244.51.108 listed in will-spam-for-food.eu.org]

[198.244.51.108 listed in will-spam-for-food.eu.org]

[198.244.51.108 listed in will-spam-for-food.eu.org]

[198.244.51.108 listed in will-spam-for-food.eu.org]

[198.244.51.108 listed in will-spam-for-food.eu.org]

[198.244.51.108 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} we've updated the estimated delivery date of your shipment












=3D1.0">

FedEx Delivery Notification






elvetica Neue', Helvetica, Arial, sans-serif;">




order-radius:8px; overflow:hidden; box-shadow:0 1px 4px rgba(0,0,0,0.05);">






dEx Sans', Roboto, Arial, sans-serif; font-size:24px; font-weight:300; colo=

r:#333; padding-bottom:30px;">

Tracking details


3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Tracking ID


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#007ab7; vertical-align:top;">


com/868h5xve" style=3D"color:#007ab7; text-decoration:none; font-weight:600=

;"> 551458785652125





3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Canada


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

{{DATE}} {{TIME}}




3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Number of pieces


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

1




r=3D"0" style=3D"background:#4d148c; width:100%;">










ds/images/fedex-express-logo-9186.png" alt=3D"FedEx" width=3D"140" style=3D=

"display:block; width:140px; height:auto; border:0;" border=3D"0">

WEb/SEo/App spam from Microsoft Outlook Part 2



--_000_OSNPR06MB81396F88030C2E224BBF0E52B93B2OSNPR06MB8139apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



May I send you quotes with portfolio?



Please Reply



Thanks



From: Thomas Rew

Sent: Sunday, February 22, 2026 11:01 PM

Subject: inquiry



Nice day,



If you were on page #1, you'd get so many new customers every day.



Should I send you quotes with Proposal?



Thanks,





--_000_OSNPR06MB81396F88030C2E224BBF0E52B93B2OSNPR06MB8139apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

May I send you quotes with portfolio?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Please Reply



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thanks



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

From: Thomas Rew



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Sent: Sunday, February 22, 2026 11:01 PM



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Subject: inquiry



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Nice day,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

If you were on page #1, you'd get so many new customers every day.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Should I send you quotes with Proposal?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thanks,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_OSNPR06MB81396F88030C2E224BBF0E52B93B2OSNPR06MB8139apcp_--

WEb/SEo/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dAVE@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 08:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM4zq-00000000BmT-1UCj

for dAVE@doctor.nl2k.ab.ca;

Sun, 10 May 2026 08:19:06 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 08:19:06 -0600

Resent-Message-ID:

Resent-To: dAVE@doctor.nl2k.ab.ca

Received: from mail-japaneastazolkn19013077.outbound.protection.outlook.com ([52.103.43.77]:43466 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM3Pz-00000000MaO-0hCi

for sales@nk.ca;

Sun, 10 May 2026 06:38:10 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Luy/YXLQuwTnsy2eLBqcNhdKuwgDzZV93Y1HUmJG6Hc2A+4CStFS4FuCx6t8B72+ZNw+duIrXGQCAOYGqArQWeXQpk7BeObehLadFL63TC6EoSLT33qNAo8bsqu2uPqbW3gJHTM69WtO0d2am1G+gVMUnDrgoYiCTPWh6BRS5v9VIZOiyht+Ryquy/61Q8uOOr/pi/wKNkbJyLwnDkzK3FlCgCQN5t117IuJ0ThXDD7orcW14/d20fq5Z7fZP67nsuevDC1/fpTs/dZWl7KZb7sZpJh1JzF8t/ftPelriZ34K0Jp+EUXqCMDGaZHtCsRlcBhNvZ3gwCy7kpH4WDo7g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=UwWxUgIqibOwIqTvDlPlyeH44gHFX3cgm7LXHEhyCJk=;

b=mrdmD07h0xr3h1GlnD3uevzU0mb+BY+gUFFSyP91AyoOtaid9RctvvPPuIYAT+ZWkq130yTNb1fQWrJWS75r11O7c9XrB1BDCLJ8tcNE/4Whi3Ix7U4/3T5//5I5bE5jfJdsLv/++dQ4BQUN77lQEqv7SVqe6Od7TQc6xl/utETcp6Pwu0MkIg+kUPBwzc3fj5hHWxWo24RejayoMYHc7eVK6w8NQ4kvadrx99FQQZwrRa47LPAoDS7Bj/McSscbMMvJPQ/dT38aaISF9ruQ4MPAoMecPBhn506UL0wbyrbS0Cy82JuciMtT7P6EN9KcmImrs5fCEdpB/GGg7BZ+Qw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=UwWxUgIqibOwIqTvDlPlyeH44gHFX3cgm7LXHEhyCJk=;

b=CfZ/otzfNBt8NK5N20eKFmmzoOYDMlE3C2qR+uy2Wnl6utAwRNWKM6sev8ioYCRtDFL4JcEM6jhj7i8+Gl9g6ZV/8ZwM0068UfWi6nYNspRU38LP8CrtXpYgefjPBqHz5fHUjPo33KohTxzVdObreygsCfO5ZJTdivhMK1D5bBBjdeZelvw+hTohDe/blZZFpg0FTNnX7yczhsuGhcMEhHTakQnmAdycd3Hw8GQ8YGwQF55FySqaVCBCcacjb8YGB4/t9hGzOM1Qs09zdOZaM6zhrVpwL5zVft2Q6Hs85wA78BeTRRETq/DhM3bo8mK45/fyIAcku17c9NNr7jE8XA==

Received: from OSNPR06MB8139.apcprd06.prod.outlook.com (2603:1096:604:45d::12)

by KL1PR0601MB5616.apcprd06.prod.outlook.com (2603:1096:820:9b::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9891.22; Sun, 10 May

2026 12:36:23 +0000

Received: from OSNPR06MB8139.apcprd06.prod.outlook.com

([fe80::c0c7:7e88:7f7f:b0e8]) by OSNPR06MB8139.apcprd06.prod.outlook.com

([fe80::c0c7:7e88:7f7f:b0e8%5]) with mapi id 15.20.9891.020; Sun, 10 May 2026

12:36:23 +0000

From: Thomas Rew

To: Thomas Rew

Subject: Yes................

Thread-Topic: Yes................

Thread-Index: AQHc4HmOZ67W/cmKLEO9s+GOhThsDA==

Date: Sun, 10 May 2026 12:36:22 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OSNPR06MB8139:EE_|KL1PR0601MB5616:EE_

x-ms-office365-filtering-correlation-id: 40a67ac8-f4f2-4416-03be-08deae90be8e

x-microsoft-antispam:

BCL:0;ARA:14566002|22091999003|55001999006|24121999003|39105399006|37011999003|2604031031799003|8060799015|15030799006|15080799012|31061999003|37102599003|8062599012|19110799012|48001999003|39145399003|41105399003|40105399003|3412199025|440099028|18071099003|26121999007|102099032|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?6fz6xArXWDSxgIgJu8DKwwZDWHzpkx5f7SWYh2AupUetVCFlU7pSujSNFw?=

=?iso-8859-1?Q?OL9dq6jmgIFrmkabsMiY0xQXAVlCf7AARGLGTrib5ukm2zvlt7t6MVYnZD?=

=?iso-8859-1?Q?Dal9TW9QQGcw6QPyuECtyQZVr/ipHT9Cle+n+9KcwSXs/VAWCHYBgjAEWF?=

=?iso-8859-1?Q?dAzW5PspUup+W3P+2u7VM3DH+dfuWr5HGL0PHWGWLHx+hCy/vaSuVQRTW6?=

=?iso-8859-1?Q?c6KTWc3X3QQsnjNaa+cpm8/NPOeroQGFXYqfk22DWTqMfZsoiGXjlejy0h?=

=?iso-8859-1?Q?YzhCbxjDXun9kzeORyb2IMLsCp2bAb3LqfUXFg9qiOVdfwbfyEK40bNBg+?=

=?iso-8859-1?Q?IS6s6z+C+zfu2sdjsSbG5vk/lPYq2ibUNqa//V0PuiJ3q3bApFQuLMax1p?=

=?iso-8859-1?Q?sGv8fyDpNZ1uMpKwlbILFJDHJupdam5QsQ7kMZHSNRYZC6cz0pEqOswCjt?=

=?iso-8859-1?Q?XZfW8QVGBOSb1C6H68nyhGqRx8dAX5rIVRThaok3nS11TM3h095BOEz/ND?=

=?iso-8859-1?Q?YwS42EkzJ2yZbai1p0YFqAVcn+Hzab1Up5urZkI1nSiPSLDhHOL+R5sMNt?=

=?iso-8859-1?Q?GfJDkV40vCFpyeu/iK5tJHjXv5DZmmwu/3LHEMd2SrpVf/Yru2cziQmegY?=

=?iso-8859-1?Q?SdFHXXpCLU+Ha8gz+tuFi9ZdTkww+ltBOyjBNYNjh9/P2uzPGoUePcSN7W?=

=?iso-8859-1?Q?V4GRipQu1icSioRDGnN4romLcu76cXVVrLsgTMyj7gW8TbUnO0JP889v2X?=

=?iso-8859-1?Q?s3qHJdaXNjA2k2zOj+5eLz7Emv7abq8v4zGxt8vrdKCNEAye7GOCsm7YoQ?=

=?iso-8859-1?Q?fgSgEE02nPJ8VOFuic8zuO+PAEswRWx/WvqNNmG5SfhgbYKBwIdEah2i83?=

=?iso-8859-1?Q?kmsgNDyp56LSAAyYMC+x+ioaeI/QTMXcnY/WPesM/1EIC8GwFDQt04hue2?=

=?iso-8859-1?Q?ChwPhlQoHgfd2IBLN53iBwn6Bqcxj0NiLJX8PyhX3vlPeJDv7le1xAfBpc?=

=?iso-8859-1?Q?gqV/cz6yuk0dNvUb9gRnCz5rts9M0jJwcWN7/g2C9zUWOpNpiIWSDVdS9a?=

=?iso-8859-1?Q?tJPRfHCWm7A4s++sXWialOjTZe9rothHN/aBLEwrjFzqYPn7eds+pdmq9m?=

=?iso-8859-1?Q?Aaf4mMDv5jWVpWIOf/k5FlPfQos5VwaGKWndIcP4RDWdPRqryxScsK6hGw?=

=?iso-8859-1?Q?hespWVNK2uU+Xz8yBsl49Jv/b+tNVHBuqPTimW8r0AmxhvWLsxIdULLCmr?=

=?iso-8859-1?Q?jNE0XZXxu4vLf5FYS+ss4P+oSATCiqcZpagB34kGayGX4Z8Xcgpp5svQjv?=

=?iso-8859-1?Q?erU55ZtCiCX1jkw+g8k3ss+48baHTY1gJnUZhpD9t4gm6m12wivuivl7kx?=

=?iso-8859-1?Q?yANIQi6oAL?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?u3/SrjTP/gq0Ayq+bEot5Sful43IPwjmJZA6SnCM8EOAxQDPP8Y/nUh9Yl?=

=?iso-8859-1?Q?NwN3SYOBYBlEblXSpAU6SLK4B57c3MzUCgFrj90ZOmb6hl54hzM6uOv+u1?=

=?iso-8859-1?Q?cs7Vfj6uT7XpbYRwZJxtIc98SCIC7wpcWhXgmsF/9GuWCPggfHZDzSDKes?=

=?iso-8859-1?Q?yQx5p+lVu6bxDNclyxazJMRF8FQAJP3uyNCROXnQ9fdVguzF2qbE9V32NE?=

=?iso-8859-1?Q?OY8o99DP9HNFyvbczbKBuuIFe/Hc1W53T/QWBv0gw3gA4Lq2TDL7B5G8Xt?=

=?iso-8859-1?Q?UCkz0Q5/mQyGSFMKHYs60w6NLwK+yMiW3gR5lhz7BQ4UoqgVtPghmNQE1/?=

=?iso-8859-1?Q?2A82X2+Gm0SuDDauYhorAEe7Qn7xVd9pws79YtfKf9P2aHQkabqr0iIHhM?=

=?iso-8859-1?Q?4DrvOTDq4st9HIJK75bmCFz4Btmhc0MPCgdAlOFM14b4vdDUPHJ6P0uk5f?=

=?iso-8859-1?Q?gQwx7iQsyQ747f7GRUFH5bTg4u0oU3C7dnA07DmwIKJ39ZDaK17shvtgzT?=

=?iso-8859-1?Q?ASZ1e/IkW3VWLO5GI5qlBBNScucipGe1z4bnhbXN6U5fIWE2NUwqfGRZmS?=

=?iso-8859-1?Q?TKgGgFSGZijnwRoByEXaHicmu+Zc6WwsM3hQF2YBnMUMo0ChzHlrflS6I6?=

=?iso-8859-1?Q?rsjzu/JcmVe9gKZWx4FkcQfjb3KTuUTJt88MQ5ufvetrN9vRqTlpG3U813?=

=?iso-8859-1?Q?cYJOd9bju4zunKBJ9ZbRMsodB5/R3hECZnxSJYZsZSCpoXAVfWaC7JdXGz?=

=?iso-8859-1?Q?HBC9IuUOqOiQ6V41rJQY+QEJ4rZGeKuHbecT80D31OLKKdB4LlHcbVSys6?=

=?iso-8859-1?Q?SjviJjuYd9PzBhjz3+UbRPS9OZiF+khPOI20EDIVvnl4t8FYMnWzdiOP9V?=

=?iso-8859-1?Q?oruMStZjt8F4USP7PiKJdO0sH2tJ1ruX/rMNEZBcbRzKeLmFu80EIlHO54?=

=?iso-8859-1?Q?kSVlemX36VpohfX5kqWeE3qhhLtSVg7KjEp3xnx3+G965SbU+4qk1bUF59?=

=?iso-8859-1?Q?bmm3hJhsPphYNW+jt+IWfoFqacqYPakjen888r6tffrH36ycunaqQDx6QH?=

=?iso-8859-1?Q?opfb/qNnmAYFYwIxS+6oiMYntjNToZQ20BREMVeZTGRxU31Ag+D5BjlAHz?=

=?iso-8859-1?Q?fslWsyabYW2ynfAevOdg1dqaX6VBpTulDA5ydH4On/1FCpc1oc6JycgJtV?=

=?iso-8859-1?Q?CcJyOEJrU5sIVbm4OwjU3HbWkFy2L0sGhfonFkGjoLwbg9a8thS9Y4l54M?=

=?iso-8859-1?Q?SrY+h+mmPIJNeihWUYVtdSGRdCQM+GlqWTLSNsd4IWObHwatoas29G37Za?=

=?iso-8859-1?Q?JlhsBQX3bs7Xwtbpn06IFWsusIufEnyutM1796RHQKJchJx+oY5z+uELB1?=

=?iso-8859-1?Q?mBZ3gfyWFjYy+ux5TSYmi1ZXLTov40qkngm6DqX7rAh7UTCq2ADVSBIEIY?=

=?iso-8859-1?Q?WNlz8r+Yjh7cehSCvk/9uC5XH89/ZIgEBSWKXj9GPxytm3IYhuayp9+qSl?=

=?iso-8859-1?Q?kvrRFAtVbGRaTMNrP7IDpS?=

Content-Type: multipart/alternative;

boundary="_000_OSNPR06MB81396F88030C2E224BBF0E52B93B2OSNPR06MB8139apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OSNPR06MB8139.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 40a67ac8-f4f2-4416-03be-08deae90be8e

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 May 2026 12:36:22.8187

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR0601MB5616

Inida based spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 06:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM3KI-00000000MAx-3D2W

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 06:32:06 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 06:32:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.solanova.com ([216.157.69.7]:36218)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM2Oj-00000000GOy-08Wj

for sales@nk.ca;

Sun, 10 May 2026 05:32:46 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=feaindia.org;

s=default; t=1778412707;

bh=e4ujnA1s8mZD5VsNtqNcbQbWKs2D7yWvO6sCJhcFNpQ=;

h=Received:Received:From:To:Subject;

b=r/h5EtG5LnDAVLTTB5W+6gVK9Z65MjbXqL3E/7Qe56zB5ziTr8Tpx4JftCSJim14b

Y0G2c7sDXGokhbJ9fy5S7lrRzf3wCKeN3SSs/VqM3sDhXH8rpOP4RiQ3DmteEJH4Al

Wj+0jLfzJBCY+RSeaMGleo/QrD9noCeWYCvo3whw=

Received: (qmail 58486 invoked from network); 10 May 2026 02:10:59 -0400

Authentication-Results: mail.solanova.com;

spf=pass (sender IP is 92.63.196.140) smtp.mailfrom=poonam.sharma@feaindia.org smtp.helo=hjztited

Received-SPF: pass (mail.solanova.com: connection is authenticated)

Received: from unknown (HELO hjztited) (92.63.196.140)

by mail.solanova.com with ESMTPSA (AES256-GCM-SHA384 encrypted,

authenticated); 10 May 2026 02:10:58 -0400

Message-ID:

Reply-To: Paul

From: Paul

To: Ole

Subject: casino leads , forex leads ,

pharma leads for sale and also complete casino databases

Date: Sun, 10 May 2026 08:10:27 +0200

MIME-Version: 1.0

Content-Type: text/plain;

format=flowed;

charset="utf-8";

reply-type=original

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Windows Live Mail 16.4.3528.331

X-MimeOLE: Produced By Microsoft MimeOLE V16.4.3528.331

X-PPP-Message-ID: <177839345964.58480.3212018520313139638@mail.solanova.com>

X-PPP-Vhost: feaindia.org

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello I sell casino leads, forex leads, pharma leads, and

also entire casino databases. The price depends on which countrys and how

many leads.



Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[216.157.69.7 listed in dnsbl.ahbl.org]

[216.157.69.7 listed in dnsbl.ahbl.org]

[216.157.69.7 listed in dnsbl.ahbl.org]

[216.157.69.7 listed in dnsbl.ahbl.org]

[92.63.196.140 listed in dnsbl.ahbl.org]

[92.63.196.140 listed in dnsbl.ahbl.org]

[92.63.196.140 listed in dnsbl.ahbl.org]

[92.63.196.140 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[216.157.69.7 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[216.157.69.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[216.157.69.7 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[216.157.69.7 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[92.63.196.140 listed in sbl-xbl.spamhaus.org]

[92.63.196.140 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[92.63.196.140 listed in zen.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 STOX_REPLY_TYPE No description available.

0.5 SARE_SUB_CASINO Subject contains spammer subject - gambling

0.3 LONGWORD BODY: Uses overlong words

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[216.157.69.7 listed in bl.score.senderscore.com]

1.9 STOX_REPLY_TYPE_WITHOUT_QUOTES No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} casino leads , forex leads ,

pharma leads for sale and also complete casino databases



Hello



I sell casino leads, forex leads, pharma leads, and also entire casino da=

tabases.



The price depends on which countrys and how many leads.



If you want to buy, contact me on Telegram @emaildba.



I accept only bitcoin or another cryptocurrency as payment method.



Do not reply to this email.











npkhuwvxrhlfqxqurvjqcqhkkpyulucvslhehxivmuojperpzuu

Chinese products spam Part 2





Dear Sir or Madame,







We are the supplier & exporter company for Chemical raw materials from CHINA.



And highly specialized in this field so many years.







(Chemical raw materials) :







- Caustic Soda Pearls, Caustic Soda Flakes, Zinc Oxide, Adipic Acid 99.8%,



STPP, SHMP, MEG, SLES 70%, LABSA 96%;







Our price:







Caustic soda pearls 99%, FOB XINGANG CHINA, USD380/MT







Caustic soda flakes 99%, FOB XINGANG CHINA, USD370/MT







-



Packing: 25KG per bags, 25MT in the 20ft container.



Delivery time: Within 7-15 days.







If you need then can contact us.



Pls consider buy from us.







Best regards



Mr. Aaron Wang // Sales Manager







Hebei Decun Chemicals Co., Ltd



Phone/WhatsApp: +86-17069180497









Chinese products spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 05:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM2M9-00000000B5x-0b0S

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 05:29:57 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 05:29:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp-my3-09p82.yunyou.top ([60.247.169.82]:49550)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLuXk-00000000NE4-3Vxi

for root@nk.ca;

Sat, 09 May 2026 21:09:35 -0600

X-WEST-DOMAIN: yes,d=supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

Received: from MS-YSIPVJWXFCJB (unknown [183.215.215.36])

by smtp-my-13.yunyou.top (WestCloudMail) with ESMTPA id 2FFE298B2B;

Sun, 10 May 2026 11:05:32 +0800 (CST)

Date: Sun, 10 May 2026 11:05:32 +0800

From: "- PAPER -"

To: admin

Subject: =?utf-8?B?UkU6IEhpZ2ggUXVhbGl0eSBGYWN0b3J5IEluIENoaW5hIDk5JSBIaWdoIFB1cml0eSBJcm9uIE94aWRl4oCCcGlnbWVudA==?=

X-Priority: 3

X-GUID: 9CAE6AD8-E117-4565-B39F-32A065D1B211

X-Has-Attach: no

X-Mailer: Foxmail 7.2.25.317[cn]

Mime-Version: 1.0

Message-ID: <2025091500463839521460@cnmastercopy.com>

Content-Type: multipart/alternative;

boundary="----=_001_NextPart340712105841_=----"

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir or Madame, We are the supplier & exporter company

for Chemical raw materials from CHINA. And highly specialized in this field

so many years. (Chemical raw materials) :



Content analysis details: (10.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[60.247.169.82 listed in dnsbl.ahbl.org]

[60.247.169.82 listed in dnsbl.ahbl.org]

[60.247.169.82 listed in dnsbl.ahbl.org]

[60.247.169.82 listed in dnsbl.ahbl.org]

[183.215.215.36 listed in dnsbl.ahbl.org]

[183.215.215.36 listed in dnsbl.ahbl.org]

[183.215.215.36 listed in dnsbl.ahbl.org]

[183.215.215.36 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[60.247.169.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[60.247.169.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[60.247.169.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[60.247.169.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[183.215.215.36 listed in sbl-xbl.spamhaus.org]

[183.215.215.36 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[183.215.215.36 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[60.247.169.82 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

Subject: {SPAM?} =?utf-8?B?UkU6IEhpZ2ggUXVhbGl0eSBGYWN0b3J5IEluIENoaW5hIDk5JSBIaWdoIFB1cml0eSBJcm9uIE94aWRl4oCCcGlnbWVudA==?=