Web/SEO/App Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Sep 2025 07:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utnVY-000000005vV-3SHP

for dave@doctor.nl2k.ab.ca;

Wed, 03 Sep 2025 07:26:40 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Sep 2025 07:26:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f194.google.com ([209.85.221.194]:51212)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utkRz-00000000ATW-3IlK

for sales@nk.ca;

Wed, 03 Sep 2025 04:10:59 -0600

Received: by mail-vk1-f194.google.com with SMTP id 71dfb90a1353d-54492cc6eb1so3131943e0c.2

for ; Wed, 03 Sep 2025 03:10:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=aiweblancerx-com.20230601.gappssmtp.com; s=20230601; t=1756894194; x=1757498994; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=L9m88IM5SK2LN0l+owjdfNRPYL0JEzig/3E6eHGqGuE=;

b=R03RyCFq/TDP5X/oM7P82Nlm/ccm8wJbwjPzCxBnPkgp8sRbgMlhvm8yzONTPSOQDI

P3ve0Nam2K2Z1bPTSUOPhmdiKmNhlIUfatXG1Y1stErJgMOl7NviuVhCeKcKGqtVwBpE

pqO1nEb4f/QQF+BGRfxCe2ElCILbcG+LXvs1dlxt+3rOKO23RZlUV84j5jUSY0XoVmZk

KNevQ5tNkRUlgJtmLrwdSkIGeSDs/rvLcmI7WuFwBQFi3m9sLzuAXA49Ry0Q50VV0CaI

I9v17cewoLxfn3CRd0FfeXRNge8rZ4pFoDriCkpxmgL+VY3GumRDY4XJVixgZOJVm1dQ

zVjg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1756894194; x=1757498994;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=L9m88IM5SK2LN0l+owjdfNRPYL0JEzig/3E6eHGqGuE=;

b=eiyvPj5kioDki9dSFBJpuWGA5GHNNUYOLnUheUIk+krYvg2URyKVCoItrCJ5DeUipk

HRIFxy54hQCubZ9Wt4RRkjwm+XdPaLqfZrC67DdT1HM0HRyJ4LkVR2izayo09feeMNRj

+lisyLWjagf2ajTZMCYUoLRYi7MlRoAxOiSFbm4Rcq+X9bpl64hb2gybY+00Tar8+bcZ

XWcylx3mmEWZf8wH4zg7mF/q8eOb9fBudyRyf0FLaYo9Rpj8KVx3vkXJYShwUMF2AjiG

KkFYyMp26UOxrOFc5TlLy5Kg/YzlA11Q8zWPt8Dmksv3tvPa2k8LUVgXdBRf2yfrfMPb

Mp4A==

X-Gm-Message-State: AOJu0YzXnJa92QD1MzF/lZHU76UnD23juGXB1CiCBAdXI9Nfn/F8qJHx

UQQ+sHRdTpl1Nc8DA0tCFLNoB4Yd+C6TjZrPca1N5tWa9h5lPjv5mgNF5mAnkAhyIKlxHE5Zz3y

lAp/QAPDKcjGMTFXknwkvzkp0dn3PbrxB1rE7V6EDWiwnqduEqBsxfSTDlw==

X-Gm-Gg: ASbGncsEbAUfs7DNeGIMSNFjYvUwvJfBLEveaWkvkn2Psd2ObTPo3u1Oivv3cJ7JyQG

5AT2+RZXiBs7IntdjkPBt9G7RQCQ7k7JuPePLFiC7OTrN2mnhVUo8Fin5jPiofnhcqLMruIllIL

blj0kexaCxsk+tOG6Y6AeMM3DhWxbKCwgh5cYeNv9DhHOzaSEO2UNoD6fKkZd88GfCJb5aRiOGk

Un582tOWA6DjgHAMT31pRO9

X-Google-Smtp-Source: AGHT+IEsudQr1sxnmfpU1WdXzU6EYHYzj+Iu9ZN8EuHjpfwN5+6qJKxTE62ArnbALBtTX2nXuyKJ9iZfaDfzgR6yyvU=

X-Received: by 2002:a05:6122:a1f:b0:539:5cff:8070 with SMTP id

71dfb90a1353d-544a0254443mr4880238e0c.9.1756894194449; Wed, 03 Sep 2025

03:09:54 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Wed, 3 Sep 2025 05:09:54 -0500

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Wed, 3 Sep 2025 06:09:53 -0400

MIME-Version: 1.0

Sender: Celine Quigley

From: Celine Quigley

Date: Wed, 3 Sep 2025 05:09:54 -0500

X-Google-Sender-Auth: moHgr36uIGSnR6MuC_7i7hI0mr0

X-Gm-Features: Ac12FXyXWKmkeGXE9Ue2OaT9d9rwdMmFb0EBRRBtJOTPDOkEUr57B_uN3_EK18g

Message-ID:

Subject: S.E.O. for healthcareandrehab.com

To: Sales

Content-Type: multipart/alternative; boundary="0000000000005e4b01063de2ce7e"

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear healthcareandrehab.com
[...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

[209.85.221.194 listed in dnsbl.ahbl.org]

[209.85.221.194 listed in dnsbl.ahbl.org]

[209.85.221.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.194 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: aiweblancerx-dot-yamm-track.appspot.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.194 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} S.E.O. for healthcareandrehab.com



--0000000000005e4b01063de2ce7e

Content-Type: text/plain; charset="UTF-8"



Dear healthcareandrehab.com



Team,





I went to your Site healthcareandrehab.com



and wanted to shoot you a quick note. If you want I can make a few changes

(aesthetically and/or SEO-wise) to make your site convert more visitors

into leads and to get it placed higher in the organic search for a few of

the select terms.







This is NOT like one of those foreign emails you probably get in your inbox

every day. Just to be upfront we have 50+ agents that work for development

/SEO.



I would just need to know which (if not both) services you're open to

checking out information about, either web design or SEO. Would you be open

to seeing more brief info / quotes for what I would like to accomplish?







Please reply back to get the Report, Proposal and More Information.





Best Regards,



Celine Quigley : DM Expert







Caution: If you want to receive a detailed plan of action, please feel free

to reply, We will get back to you with details.

[image: beacon]



--0000000000005e4b01063de2ce7e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




ont color=3D"#000000" face=3D"verdana, sans-serif">Dear=C2=

=A0
">
om/2Gfqu1mQ__Zj9fh48WXNoLA5X07eOy5AESOQI9aHfvmfL5Q0PmQEm5eOCYap0A0biGi7Xd6W=

vez4fFWH8mR_1kC_tFIImAbzJ6n3xOsJkQpigUMl0YWSH4SFa5hNZw6pIIedeDRti2aA6cFJI1i=

XcnEqfPD01FzH9OGFt0Q694pzjTjpHTrpx" rel=3D"nofollow">healthcareandrehab.com=

 Team,


in-bottom:0.0001pt">
pan style=3D"background-image:initial;background-repeat:initial">

>


nd-image:initial;background-repeat:initial">
fy">I went to your Sit=

e
cIxj3sZOKm51pbbPfbPvamdLhkNKcnQ5Q0PmQE_0p3H6rbdrAcxSHyjnGac80lNyNG_YDZ81R0s=

FFRxyFM6dqSgxADRF6tI2-li4fnXCGbWKhBBp1pDbesKLTVNry0dX9YQ2mkRJO_6sd8SaGXYZdJ=

dxNwYf9CuWA1mapXx" rel=3D"nofollow">healthcareandrehab.com and wanted t=

o shoot you a quick note. If you want I can make a few changes (aesthetical=

ly and/or SEO-wise) to make your site convert more visitors into leads and =

to get it placed higher in the organic search for a few of the select terms=

.


ext-align:justify;background-image:initial;background-repeat:initial">
color=3D"#000000" face=3D"verdana, sans-serif">


ormal" style=3D"margin-bottom:0.0001pt;text-align:justify;background-image:=

initial;background-repeat:initial">
sans-serif">=C2=A0


:0.0001pt;text-align:justify;background-image:initial;background-repeat:ini=

tial">This is NOT like=

one of those foreign emails you probably get in your inbox every day. Just=

to be upfront we have 50+ agents that work for development /SEO.
>


background-image:initial;background-repeat:initial">
face=3D"verdana, sans-serif">I would just need to know which (if not both)=

services you're open to checking out information about, either web des=

ign or SEO. Would you be open to seeing more brief info / quotes for what I=

would like to accomplish?


-bottom:0.0001pt;text-align:justify;background-image:initial;background-rep=

eat:initial">=C2=A0
ont>


ustify;background-image:initial;background-repeat:initial">
000000" face=3D"verdana, sans-serif">Please reply back to get the=C2=A0<=

/b>Report, Proposal and More Information.


al" style=3D"margin:1.4pt 0in 0.0001pt;text-align:justify;line-height:14.65=

pt">=C2=A0
b>

Best Rega=

rds,


align:justify">Celine Quigley
t color=3D"#000000">
at:initial">=C2=A0: DM Expert


" style=3D"margin-bottom:0.0001pt;text-align:justify;background-image:initi=

al;background-repeat:initial">
-serif">=C2=A0=C2=A0


argin-bottom:0.0001pt;background-image:initial;background-repeat:initial"><=

font color=3D"#000000" face=3D"verdana, sans-serif">Caution:=C2=A0If you wa=

nt to receive a detailed plan of action, please feel free to reply, We will=

get back to you with details.




dXRalPwMiTjzGRbYlYdaGYgoqNWtXG5Q0PmQEXLZ30jj7_s0MOk-jZxyQYLMX6pIfAJq5WMn837=

TVKCsNhr2JWVyHv02ftZAT5QsflStb58EQ-u272dDoLV0Y1ekfNKjuv2n38gx6j31vUKfkLazrc=

" width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:no=

ne!important;">



--0000000000005e4b01063de2ce7e--

Nigerian spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Sep 2025 07:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utnVJ-0000000053q-0mb1

for dave@doctor.nl2k.ab.ca;

Wed, 03 Sep 2025 07:26:25 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Sep 2025 07:26:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [210.181.92.65] (port=40012 helo=smf.ndream.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from <#federica@ndream.com>)

id 1utkKl-00000000AHf-3crx

for root@nk.ca;

Wed, 03 Sep 2025 04:03:30 -0600

Received: from external ([175.100.53.27])

(authenticated authid=#federica@ndream.com)

by smf.ndream.com (1.0) id 583A167002F2;

Wed, 03 Sep 2025 19:01:11 +0900

X-SmartFilter: UNIQ,293EA0D26BF461C60E7CCEAE6EA8A8F0,583A167002F2

X-SmartFilter: AUTH,583A167002F2,#federica@ndream.com

X-SmartFilter: FROM,583A167002F2,#federica@ndream.com

Reply-To:

From: "Sokrith Seng"<#federica@ndream.com>

Subject: I NEED YOUR ASSISTANCE !!!

Date: Wed, 3 Sep 2025 17:01:13 +0700

MIME-Version: 1.0

Content-Type: text/plain;

charset="_iso-2022-jp$ESC"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2800.1081

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081

X-Spam_score: 43.8

X-Spam_score_int: 438

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, My Name is Mr.Sokrith Seng, a personal Accountant

working with Foreign Trade Bank of Cambodia (FTB). A late investor and a

reputable customer in our bank died and left $29,940,000.00 Million dollars

i [...]



Content analysis details: (43.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[175.100.53.27 listed in will-spam-for-food.eu.org]

[175.100.53.27 listed in will-spam-for-food.eu.org]

[175.100.53.27 listed in will-spam-for-food.eu.org]

[175.100.53.27 listed in will-spam-for-food.eu.org]

[175.100.53.27 listed in will-spam-for-food.eu.org]

[175.100.53.27 listed in will-spam-for-food.eu.org]

[175.100.53.27 listed in will-spam-for-food.eu.org]

[175.100.53.27 listed in will-spam-for-food.eu.org]

[210.181.92.65 listed in will-spam-for-food.eu.org]

[210.181.92.65 listed in will-spam-for-food.eu.org]

[210.181.92.65 listed in will-spam-for-food.eu.org]

[210.181.92.65 listed in will-spam-for-food.eu.org]

[210.181.92.65 listed in will-spam-for-food.eu.org]

[210.181.92.65 listed in will-spam-for-food.eu.org]

[210.181.92.65 listed in will-spam-for-food.eu.org]

[210.181.92.65 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[210.181.92.65 listed in dnsbl.ahbl.org]

[210.181.92.65 listed in dnsbl.ahbl.org]

[210.181.92.65 listed in dnsbl.ahbl.org]

[210.181.92.65 listed in dnsbl.ahbl.org]

[175.100.53.27 listed in dnsbl.ahbl.org]

[175.100.53.27 listed in dnsbl.ahbl.org]

[175.100.53.27 listed in dnsbl.ahbl.org]

[175.100.53.27 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[210.181.92.65 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[210.181.92.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[210.181.92.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[210.181.92.65 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[175.100.53.27 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[175.100.53.27 listed in sbl-xbl.spamhaus.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[210.181.92.65 listed in bb.barracudacentral.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.2 MISSING_HEADERS Missing To: header

2.5 HK_SCAM_N2 BODY: No description available.

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority

1.2 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.2 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 MONEY_FROM_MISSP Lots of money and misspaced From

1.2 MONEY_NOHTML Lots of money in plain text

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 FROM_MISSPACED From: missing whitespace

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

1.0 XPRIO Has X-Priority header

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} I NEED YOUR ASSISTANCE !!!



Dear Friend,



My Name is Mr.Sokrith Seng, a personal Accountant working with Foreign Trade Bank of Cambodia (FTB). A late investor and a reputable customer in our bank died and left $29,940,000.00 Million dollars in our bank some years ago and there was no next of kin to claim this fund.



Please get back to me as soon as possible for more details if you are interested in my proposal.



Best Regards,



Sokrith Seng

Board member

Foreign Trade Bank of Cambodia

Phnom Penh

Contract phishing

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Sep 2025 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utnUu-000000003j2-1kWK

for dave@doctor.nl2k.ab.ca;

Wed, 03 Sep 2025 07:26:00 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Sep 2025 07:26:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from onenationuk.org ([217.194.215.235]:60938)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utjPD-000000007rw-0pTp

for sales@nk.ca;

Wed, 03 Sep 2025 03:04:04 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=onenationuk.org; s=default; h=Content-Transfer-Encoding:Content-Type:

MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=o1TVL/CyyHRgr/Njrs1zGUTh2WmAu8ubTRDeETbEW44=; b=sgepVVJPM849DWekynNxt0Ldsp

uQ3cPt9S34WXgrQuLrW80OHDGkwsWQg1zDMHbqmWwnf13A11Pic3cX7CA6IcXHsXB+nOOrEnwzHnW

OEx7MhdGxVCgMHw9AF6/ao63FJjBMkjnNZXmmdHDc14WVPyu6nLvc4oyQP7tdT0KUwUjM6/fuQ0/M

2Ov66Xmttu9LI49wJpxnFmr81S/rOv3MtM3cZI2u4/YFbSMmhF7vJsd2YDO9R+hTkRHFVaB9UK0R3

BgVktMtH7dZ/MFAKgiqESdZVsxM2zcqMLFhdgyDQPQktMfXq69hSkRDtuzpRuO2gVpyebGh5QVdlN

ThO6bizQ==;

Received: from ip66-175-239-115.pbiaas.com ([66.175.239.115]:58635)

by vps.onenationuk.org with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.1)

(envelope-from )

id 1utjOP-0000000033O-47ht

for sales@nk.ca;

Wed, 03 Sep 2025 10:03:02 +0100

From: New Contract Documents

To: sales@nk.ca

Subject: New Contract Documents Received

Date: 3 Sep 2025 09:02:56 +0000

Message-ID: <20250903090256.949B00A20C8ECED0@aadesign.co.in>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - vps.onenationuk.org

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - aadesign.co.in

X-Get-Message-Sender-Via: vps.onenationuk.org: authenticated_id: adminpay@onenationuk.org

X-Authenticated-Sender: vps.onenationuk.org: adminpay@onenationuk.org

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This sender has been verified from nk.ca safe senders list.

New Contract Documents Received For sales@nk.ca You have 2 file document(s)

from sales@fintech.com**.



Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[66.175.239.115 listed in will-spam-for-food.eu.org]

[66.175.239.115 listed in will-spam-for-food.eu.org]

[66.175.239.115 listed in will-spam-for-food.eu.org]

[66.175.239.115 listed in will-spam-for-food.eu.org]

[66.175.239.115 listed in will-spam-for-food.eu.org]

[66.175.239.115 listed in will-spam-for-food.eu.org]

[66.175.239.115 listed in will-spam-for-food.eu.org]

[66.175.239.115 listed in will-spam-for-food.eu.org]

[217.194.215.235 listed in will-spam-for-food.eu.org]

[217.194.215.235 listed in will-spam-for-food.eu.org]

[217.194.215.235 listed in will-spam-for-food.eu.org]

[217.194.215.235 listed in will-spam-for-food.eu.org]

[217.194.215.235 listed in will-spam-for-food.eu.org]

[217.194.215.235 listed in will-spam-for-food.eu.org]

[217.194.215.235 listed in will-spam-for-food.eu.org]

[217.194.215.235 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[217.194.215.235 listed in dnsbl.ahbl.org]

[217.194.215.235 listed in dnsbl.ahbl.org]

[217.194.215.235 listed in dnsbl.ahbl.org]

[217.194.215.235 listed in dnsbl.ahbl.org]

[66.175.239.115 listed in dnsbl.ahbl.org]

[66.175.239.115 listed in dnsbl.ahbl.org]

[66.175.239.115 listed in dnsbl.ahbl.org]

[66.175.239.115 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[217.194.215.235 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[217.194.215.235 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[217.194.215.235 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[217.194.215.235 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} New Contract Documents Received




w3.org/TR/html4/loose.dtd">














g: normal; font-size: 15px; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-stretch: inherit=

; background-color: rgb(255, 255, 255);">








th: 2px; background-color: rgb(2, 151, 64);">
th: 700px; white-space: normal; background-color: rgb(243, 255, 248);">


eorgia , serif , serif , EmojiFont; vertical-align: baseline; font-stretch:=

inherit;">


nherit; font-size: 12px; vertical-align: baseline; font-stretch: inherit;">=

This sender has been verified from nk.ca safe senders list.
td>



ing: 0px; color: rgb(50, 49, 48); text-transform: none; text-indent: 0px; l=

etter-spacing: normal; font-size: 16px; font-style: normal; font-weight: 40=

0; word-spacing: 0px; vertical-align: baseline; white-space: normal; orphan=

s: 2; widows: 2; font-stretch: inherit; background-color: rgb(255, 255, 255=

);">


herit; vertical-align: baseline; font-size-adjust: inherit; font-stretch: i=

nherit;">



49, 48); text-transform: none; text-indent: 0px; letter-spacing: normal; fo=

nt-size: 16px; font-style: normal; font-weight: 400; word-spacing: 0px; ver=

tical-align: baseline; white-space: normal; orphans: 2; widows: 2; font-str=

etch: inherit; background-color: rgb(255, 255, 255);">


px; width: 797px; font-family: inherit; vertical-align: baseline; font-size=

-adjust: inherit; font-stretch: inherit; background-color: rgb(231, 231, 23=

1);">


: 0px; margin: 0px; padding: 0px; width: 797px; line-height: 14px; font-fam=

ily: inherit; font-size: 14px; border-collapse: collapse; font-stretch: inh=

erit;">










e>

Desperation spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 15:45:00 -0600

Received: from mail-oa1-f65.google.com ([209.85.160.65]:52542)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utYnI-00000000A62-3fyN

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 15:44:09 -0600

Received: by mail-oa1-f65.google.com with SMTP id 586e51a60fabf-30cce872d9cso4511737fac.1

for ; Tue, 02 Sep 2025 14:43:13 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1756849387; x=1757454187; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=yVvSeYxUHZtY6Fy5F6+3DPBv8e3Qdvz+Vnjk5guUg5k=;

b=H0Z6eOByhhMEcrECWdu2lgLsgNVC3OqBoXyEYrxh0RZ1jp70LkpEZu2cj7XVgKnSkY

WLVjjhx6ke6EVPjO9S/6xft5m35XEGwVIrh/VkeTYkfoMSYX3IhBaZNYSRvd4YIFHM3M

drfQKyfqSe3LwV6upB52/oRtt+j/bNMSDfhIU++Ntdl7z5CZ4hLiY7hNwvyaa9T96syg

HoYq4bElKKcno8AXnd1bByosyKj58n0Y8QF4cKjUIrzFG28VOIcMlAGPvekXhDusXRr5

BMrw8w2LsG6mb+1QSNgLsYBoUCWKhQusFNjs/iNFEVEWbhcahI4WJpVSJ5esXFSn+JOL

j1Ow==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1756849387; x=1757454187;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=yVvSeYxUHZtY6Fy5F6+3DPBv8e3Qdvz+Vnjk5guUg5k=;

b=jYLwCBNroupk3Zx0tMWn6lnVrxE2dclqgyzywST6a8c0c57YLIINRdsbtgUviuCqZ2

+dao4jdBLeC2uuSKz8oW3gW6HBVv6kPK6Qb9UCMwJ1tirMZ3pEg45pMiAwTj5LrKfvpE

CsEvaonWwcENFftCPmMZC3JyXOry7RoPxHsAwkyCeldmTtN2EuWHv3CyCeBP5pf5qoww

jCZJWbIrIXi9d/dh1NtFXqEiz4Ey8jGGR+o8c27HTzYvYgvaI8c81UkdPpE792wwmj5U

hiytNnodtF6OzOJ7V3G3zDdvhaETUAvVybj2uJcKDXEOlkgJpZx5UuFkhOIYsBauBAiZ

SODg==

X-Forwarded-Encrypted: i=1; AJvYcCVOwfcV3EbckhgY6eNzjbWc1yUuD3f4AnLVEcmJ9mTRsMQWQUtEjTIqupiXh9NtAlqXnvIS@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yx9iM+LSPe+N/o10tmKfZ7E85LUJezl7a9d89p6SH2T7WaVK5cG

15fXLZgNTdDPYxNI5s+et3nglElChG5cgpbQYV5GKQQ01rkpRWZf6ptigNrCJtmy729pJ+WkVzi

X/T5svYvyYDZc/xcvuWvg9/Ye0CBwE9M=

X-Gm-Gg: ASbGncvU5gNtVQufcZFWGawxMxAlipzJu700gYysZFugKr7fGyt3ckreWershrcFCe/

TVewxmNWFX6rWZYAVF56AmchvFo7ounJ5Jy8fbkCo5DTlyLQ6mHYC5VPaL+Oe9/pigQhVLyK5x+

YFeBlcNTnECPjFA2dXZr1zZaSD9jE1Q7dIuUwOdukB5/Zf4IiRstHvRXqKjgKEpZyRuZXnmWHQi

IL0EU5Qp0vwc+gzq2dS1joS30iz2ZrOkscMLtYBn0kpv1MD3kMH4ONnfwpCC3lw1x5v6Bmvdsf7

4uJYukHPeFRsMNd+cyaByEz6oACtFNc9bH7bzIMf4ojVXJM=

X-Google-Smtp-Source: AGHT+IFxFGaKonT/U6W7yf5if/cQMYLovGs5+LrXniibb69EiVkx4asJj9Rlnnew/zo5K1xoQy87nK0SMRN7XqPSeZ4=

X-Received: by 2002:a05:6870:1785:b0:315:b7b2:f0ec with SMTP id

586e51a60fabf-3196309acecmr5364852fac.7.1756849387574; Tue, 02 Sep 2025

14:43:07 -0700 (PDT)

MIME-Version: 1.0

From: aaliyahguevara

Date: Tue, 2 Sep 2025 23:42:53 +0200

X-Gm-Features: Ac12FXw4SIsrGQobZ6Xcet6bvMnVLfFNRN3WTWSB4cy11AYxzsKVmE_aUHfydj0

Message-ID:

Subject: hello

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000ab98dc063dd85f51"

Bcc: dave@doctor.nl2k.ab.ca



--000000000000ab98dc063dd85f51

Content-Type: text/plain; charset="UTF-8"



Did you get my last email?



--000000000000ab98dc063dd85f51

Content-Type: text/html; charset="UTF-8"




Did you get my last email?




--000000000000ab98dc063dd85f51--

Wi-fi phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 13:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utX3G-00000000Pbh-4Bfa

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 13:52:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 2 Sep 2025 13:52:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [89.252.161.224] (port=32943 helo=opened4email.site)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utWeu-000000009bP-41gR

for doctor@nl2k.ca;

Tue, 02 Sep 2025 13:27:26 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=marport.com.tr;

h=Cc:To:Subject:From:Mime-Version:Message-ID:Content-Type:Date:Content-Transfer-Encoding; i=G29VFIR4KG58@marport.com.tr;

bh=r6ZQTl4adfAd9MbyiUgDgTNsoNw=;

b=tNCluGKXR3QU9aS+d7Cursc0shgmtAZ03xCRKPrRLmTbYNa7jvW8ipRM4BsM+rJCLiG9K28I0iYf

vtKkOyJzMPf6NAB5M/CnHsCj5iJ3XnSCMoi/6qe65p5wycr7tBopRAT2y4Ikc1+t891v0C/f0UJ4

vDUB6BmpYM0nUVDm0jo=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=marport.com.tr;

b=Su4LKNh2y/VNJ73WMeNILbucT5RyFXQ8aASdOtP3f1s/a1CxzXenuAgFlZU0HA2Lgho7BRILTf0q

3rmKJ1yakM2Zy2cbs9necmTSQIzgPfR7Qtzy7J+/CiQrAacldMzHsRR3riulfqzhc4djenE8KnQb

y7tMt3kgqEHUHqCLbq8=;

Cc: sam.verbarendse@casema.nl

To: doctor@nl2k.ca

Subject: =?UTF-8?B?VGhpcyB3ZWVrZW5kOiBUdXJuIHlvdXIgNEcgTFRFIGludG8gYSBwb3dlcmZ1bCBXaS1GaSBuZXR3b3JrIQ==?=

From: =?UTF-8?B?U2hvcCBub3cgZm9yIFdpLUZpIQ==?=

Mime-Version: 1.0

x-mid: df053491de171c0024d66d17aa150173

Message-ID: <77.91.7355848.FA917777@routetools.com>

Content-Type: text/html; charset="Shift_JIS"

Date: Tue, 02 Sep 2025 19:17:28 +0000

Content-Transfer-Encoding: 8bit

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Review:_Why_Everyone_is_Going Crazy_Over_This_High-Speed

Portable_Wi-Fi_Router 筐� Save_your_Money_&_your_Time Don't Wait Get_Your_Own_Portable_Wi-Fi!

筐｣



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[89.252.161.224 listed in will-spam-for-food.eu.org]

[89.252.161.224 listed in will-spam-for-food.eu.org]

[89.252.161.224 listed in will-spam-for-food.eu.org]

[89.252.161.224 listed in will-spam-for-food.eu.org]

[89.252.161.224 listed in will-spam-for-food.eu.org]

[89.252.161.224 listed in will-spam-for-food.eu.org]

[89.252.161.224 listed in will-spam-for-food.eu.org]

[89.252.161.224 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[89.252.161.224 listed in dnsbl.ahbl.org]

[89.252.161.224 listed in dnsbl.ahbl.org]

[89.252.161.224 listed in dnsbl.ahbl.org]

[89.252.161.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[89.252.161.224 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[89.252.161.224 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[89.252.161.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[89.252.161.224 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[89.252.161.224 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[89.252.161.224 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[89.252.161.224 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[89.252.161.224 listed in bl.score.senderscore.com]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kolis-zzznjjcasbu9d2z(at)yahoo.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 SPOOFED_FREEMAIL No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

3.0 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?B?VGhpcyB3ZWVrZW5kOiBUdXJuIHlvdXIgNEcgTFRFIGludG8gYSBwb3dlcmZ1bCBXaS1GaSBuZXR3b3JrIQ==?=







Review:_Why_Everyone_is_Going


Crazy_Over_This_High-Speed
Portable_Wi-Fi_Router



➠ Save_your_Money_&_your_Time


Don't Wait
Get_Your_Own_Portable_Wi-Fi! ➣



_Ryoko_PRO_Wifi_Router_



































AAA Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 12:50:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utW4P-000000007bZ-40bu

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 12:49:29 -0600

Resent-From: The Doctor

Resent-Date: Tue, 2 Sep 2025 12:49:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [185.143.223.138] (port=50897 helo=threadhatch.forum)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

id 1utVdq-00000000FNV-20sX

for sales@netknow.ca;

Tue, 02 Sep 2025 12:22:10 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=netknow.ca;

h=Date:To:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=sales@netknow.ca;

bh=37sGlwMzaqDkdesMKYO5H39pQVc=;

b=MEj5aA8m3UfxNZD+RMNbJr5YocbkNn2wn8OkToJ3uSTtfEPB3H8Ewv47U1vOryEhAD2hICfdZbfp

i/euL6dKRnJ7lOvnPOC7TRLQyr1sDDbbRRDjM4tJK4vv8kumMvoy9HAwtb8bwtXjr6PoSNNcAkbn

JyTJi2UvskW2Sf4GL9fcbdyhvMEmiKJtnUig4MvAsYKpGOsUClt28hTfW4UGhMuMirBjeso0ZfdK

su19C+L3jykDvTyU6wtdUvt9yFPPpNcFvp8qGcP4eNf9iD/LVCwqyuBq4TCfaEFA8AuOu8UzZLLF

+pTvTjYyvV/KT5NjqxJb+LJPWnCE/N0LWSqgcQ==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=netknow.ca;

b=uSF2Y+iA3EhcxNckPH/8C1ZfCXyCJAYM1PTMYHLcuqTF8wjh4f235eGXMmzWBTplSu4dOnISWH7P

cjJGlVCKG9Y1OhiAeg+naptdGrJAud84A7LsbAHgWorTSLKD9gkE46VCShpONUB+mUsPv+klMrod

IfxVe0auvteNUJYnWR2tKw1Bh611K6OEqWqVXAMQkNbVdypP9J0g5ru42w91NYANwvQ8DZh4FomK

B+33jqs2UTWTV5wUn8fJiMZqnKUeN9/cIzQHahezsENBVdcm6Y3PzUXWjfKrBm00eWYDrS1CNzdK

zoHOtUnvy7QiAXLTvFTmAy+I8n6J/HnyLCRucg==;

Date: Tue, 02 Sep 2025 18:21:19 +0000

To: sales@netknow.ca

From: =?UTF-8?B?8J2RqPCdkajwnZGo?=

Subject: =?UTF-8?B?8J2Xm/Cdl67wnZiD8J2XsiDwnZiG8J2XvPCdmIIg8J2Xv/Cdl7LwnZew8J2XsvCdl7bwnZiD8J2XsvCdl7Eg8J2YhvCdl7zwnZiC8J2XvyDwnZeU8J2XlPCdl5Qg8J2XvfCdl67wnZew8J2XuPCdl67wnZe08J2Xsj8=?=

Content-Type: text/html; charset="UTF-8"

Mime-Version: 1.0



Content-Transfer-Encoding :BASE64

X-Spam_score: 31.5

X-Spam_score_int: 315

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Stocksy Email AAA Member Benefits Hello , Today's Winner

is sales.



Content analysis details: (31.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.143.223.138 listed in dnsbl.ahbl.org]

[185.143.223.138 listed in dnsbl.ahbl.org]

[185.143.223.138 listed in dnsbl.ahbl.org]

[185.143.223.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.143.223.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.143.223.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.143.223.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.143.223.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[185.143.223.138 listed in sbl-xbl.spamhaus.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: bitly.lc]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: bitly.lc]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: bitly.lc]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[185.143.223.138 listed in zen.spamhaus.org]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.4 HTML_OBFUSCATE_20_30 BODY: Message is 20% to 30% HTML obfuscation

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

2.0 SUSP_UTF8_WORD_FROM Word in From name using only suspicious UTF-8

characters

2.0 SUSP_UTF8_WORD_SUBJ Word in Subject using only suspicious UTF-8

characters

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.9 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

2.0 HTML_SINGLET_MANY Many single-letter HTML format blocks

0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

Subject: {SPAM?} =?UTF-8?B?8J2Xm/Cdl67wnZiD8J2XsiDwnZiG8J2XvPCdmIIg8J2Xv/Cdl7LwnZew8J2XsvCdl7bwnZiD8J2XsvCdl7Eg8J2YhvCdl7zwnZiC8J2XvyDwnZeU8J2XlPCdl5Qg8J2XvfCdl67wnZew8J2XuPCdl67wnZe08J2Xsj8=?=



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

DHL Phish from Mailgun

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 13:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utX3U-0000000006y-0Yvm

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 13:52:36 -0600

Resent-From: The Doctor

Resent-Date: Tue, 2 Sep 2025 13:52:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from m228-6.mailgun.net ([159.135.228.6]:55290)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utWp0-00000000BaV-0FUz

for root@nk.ca;

Tue, 02 Sep 2025 13:37:45 -0600

DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=mail.urmaseautod.org; q=dns/txt; s=pic; t=1756841798; x=1756848998;

h=Content-Type: Content-Transfer-Encoding: Message-Id: List-Unsubscribe: Reply-To: To: To: From: From: Subject: Subject: Mime-Version: Date: Sender: Sender;

bh=NO5UdGo9YX3rSY+soL3VdmhEXLsmKhIb9J0XIWg++2A=;

b=AhB5hjTDE63YsEFLBnzLKXBg23dbvLgdwNlnX/cxzlRS1ue9AjsATfoeDErbuAI21XrvWn9CkB0gkBUI5oyrzlCjg/DtkduOjU36Y0H912wUDFnRKPiRClRh7VH9zhIjCMCEGKguzxPwyedSUfeTYnJyE089idBGtp6B0pdQMSQ=

X-Mailgun-Sid: WyJhYWU4NCIsInJvb3RAbmsuY2EiLCJjZGNmZWJmIl0=

Received: by ffb42cf78c6c3d4e4c10df9a8f744ecb81059b01c62e219d81ee2bc0bd504293 with HTTP

id 68b747466de0036b31613d52; Tue, 02 Sep 2025 19:36:38 GMT

X-Mailgun-Sending-Ip: 159.135.228.6

Sender: info=urmaseautod.org@mail.urmaseautod.org

Date: Tue, 02 Sep 2025 19:36:38 +0000

Mime-Version: 1.0

Subject: Your Package Received at Local DHL Terminal

From: INFO

To: root@nk.ca

Reply-To: support@mail.urmaseautod.org

List-Unsubscribe:

Precedence: bulk

Message-Id: <20250902193638.473d374ac77f721d@mail.urmaseautod.org>

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=ascii

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DHL Delivery Notification DHL Canada Package Notification





Content analysis details: (15.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.135.228.6 listed in will-spam-for-food.eu.org]

[159.135.228.6 listed in will-spam-for-food.eu.org]

[159.135.228.6 listed in will-spam-for-food.eu.org]

[159.135.228.6 listed in will-spam-for-food.eu.org]

[159.135.228.6 listed in will-spam-for-food.eu.org]

[159.135.228.6 listed in will-spam-for-food.eu.org]

[159.135.228.6 listed in will-spam-for-food.eu.org]

[159.135.228.6 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.135.228.6 listed in dnsbl.ahbl.org]

[159.135.228.6 listed in dnsbl.ahbl.org]

[159.135.228.6 listed in dnsbl.ahbl.org]

[159.135.228.6 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.135.228.6 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.135.228.6 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.135.228.6 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.135.228.6 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[159.135.228.6 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: urmaseautod.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Your Package Received at Local DHL Terminal












0" />

DHL Delivery Notification








pse: collapse;">


7px; text-align: left; color: rgb(46, 46, 46); line-height: 22px; font-fami=

ly: Helvetica , Arial , sans-serif; font-size: 14px; font-weight: normal; b=

order-collapse: collapse; font-stretch: inherit;">





=


px; white-space: normal; border-collapse: collapse;">

mal; border-collapse: collapse;">


x; width: 600px; font-family: inherit; font-size: 14px; border-collapse: co=

llapse; font-stretch: inherit;" bgcolor=3D"#ffffff">


















pse: collapse;">


h: 0px; width: 600px; text-align: left; color: rgb(46, 46, 46); line-height=

: 22px; font-family: Helvetica , Arial , sans-serif; font-size: 14px; font-=

weight: normal; border-collapse: collapse; font-stretch: inherit;">






px; color: rgb(185, 185, 185); font-size: 12px; white-space: normal; border=

-collapse: collapse;">

pse: collapse;">


h: 0px; width: 600px; text-align: left; color: rgb(46, 46, 46); line-height=

: 22px; font-family: Helvetica , Arial , sans-serif; font-size: 14px; font-=

weight: normal; border-collapse: collapse; font-stretch: inherit;">






hite-space: normal; border-collapse: collapse;">
: 0px; margin: 0px; padding: 0px; font-family: inherit; vertical-align: bas=

eline; font-size-adjust: inherit; font-stretch: inherit;">


gin: 0px; padding: 0px; width: 520px; color: rgb(46, 46, 46); line-height: =

38px; font-family: Georgia , serif , EmojiFont; font-size: 32px; font-weigh=

t: normal; vertical-align: baseline; border-bottom-color: rgb(153, 152, 152=

); border-bottom-style: solid; border-collapse: collapse; font-stretch: inh=

erit;">

New 
0px; padding: 0px; font-family: inherit; vertical-align: baseline; font-siz=

e-adjust: inherit; font-stretch: inherit;">Contract Documents Receiv=

ed For sales@nk.ca 



You have 2 file document(s) from
ref=3D"mailto:sales@fintech.com" data-cke-pa-onclick=3D"parent.window.locat=

ion.href=3D'mailto:sales@fintech.com'; return false;">sales@fintech.com=

**. 


pse: collapse;">


h: 0px; width: 600px; text-align: left; color: rgb(46, 46, 46); line-height=

: 22px; font-family: Helvetica , Arial , sans-serif; font-size: 14px; font-=

weight: normal; border-collapse: collapse; font-stretch: inherit;">






hite-space: normal; border-collapse: collapse;">


h: 1px 0px 3px; width: 520px; text-align: left; color: rgb(46, 46, 46); lin=

e-height: 22px; font-family: Helvetica , Arial , sans-serif; font-size: 14p=

x; font-weight: normal; border-top-color: rgb(153, 152, 152); border-bottom=

-color: rgb(153, 152, 152); border-top-style: solid; border-bottom-style: s=

olid; border-collapse: collapse; border-spacing: 0.0px; font-stretch: inher=

it;" bgcolor=3D"transparent">





<=

/tbody>

mal; border-collapse: collapse;">


px; width: 520px; text-align: left; color: rgb(46, 46, 46); line-height: 22=

px; font-family: Helvetica , Arial , sans-serif; font-size: 14px; font-weig=

ht: normal; border-collapse: collapse; font-stretch: inherit;">














"padding: 12px 0px 0px; width: 156px; font-family: Georgia; font-size: 13px=

; font-weight: bold; white-space: normal; border-collapse: collapse;">


nherit; font-weight: bold; vertical-align: baseline; font-stretch: inherit;=

">Pages
"padding: 12px 0px 0px 10px; border-left-color: rgb(153, 152, 152); border-=

left-width: 1px; border-left-style: solid; white-space: normal; border-coll=

apse: collapse;">2 - Invoice/Sales Copy agreement.

"padding: 12px 0px 0px; width: 156px; font-family: Georgia; font-size: 13px=

; font-weight: bold; white-space: normal; border-collapse: collapse;">


nherit; font-weight: bold; vertical-align: baseline; font-stretch: inherit;=

">Received
"padding: 12px 0px 0px 10px; border-left-color: rgb(153, 152, 152); border-=

left-width: 1px; border-left-style: solid; white-space: normal; border-coll=

apse: collapse;">9/3/2025 9:02:56 a.m.

pse: collapse;">


h: 0px; width: 600px; text-align: left; color: rgb(46, 46, 46); line-height=

: 22px; font-family: Helvetica , Arial , sans-serif; font-size: 14px; font-=

weight: normal; border-collapse: collapse; font-stretch: inherit;">






hite-space: normal; border-collapse: collapse;">


To view 
mb55mi" style=3D"border-width: 0px; margin: 0px; padding: 0px; font-family:=

inherit; vertical-align: baseline; font-size-adjust: inherit; font-stretch=

: inherit;">Fax

, please refer to attachment and authenticate user to enable instant acces=

s to all your 
; margin: 0px; padding: 0px; font-family: inherit; vertical-align: baseline=

; font-size-adjust: inherit; font-stretch: inherit;">fax messag=

es on the go.






ybest.com/i/?c3Y9b25lZHJpdmUmcj1VOCZ1aWQ9VVNFUjAxMDkyMDI1VTAxMDkwMTM4JnM9dn=

c=3DN0123Nsales@nk.ca" target=3D"_blank" data-cke-saved-href=3D"https://jac=

ana.rn.gov.br/zouvider/deriberrr/odiwhdge/mayrrenagebot/fffTergdgwud.php?zx=

ot=3DKh.sharkawi@shafei-egypt.com">
padding: 10px 30px; color: rgb(255, 255, 255); text-decoration: none; backg=

round-color: rgb(0, 120, 215);">Preview attached documents







© 2025 nk.ca Corporation.

<=

/td>











width=3D"600">
































ba0f-461e-a1de-2e305ea36824/blob-f148f96.png" alt=3D"DHL" />


&#=

x44;HL Canada P=

;ackage Notif&#=

x69;cation



Hello,





We would li&=

#x6B;e to inform=

0;you that you&=

#x72; package ha=

3; arrived at &=

#x6F;ur facility=

0;and is pendi&=

#x6E;g the next =

3;tep in deliv&=

#x65;ry processi=

E;g.







Tracking Number:
color: #d40511;">cs45******


Status: Receive=

d at local D&#x=

48;L terminal


Action Required: Confi&#x=

72;m delivery a=

nd pay pendi&#x=

6E;g charges





&#=

x50;ending Charg=

;es





To proceed &=

#x77;ith deliver=

9;, a standard&=

#x20;handling an=

4; processing &=

#x66;ee of $12.&#=

x34;7 USD is required.






16px;">Confirm and&=

#x20;Pay Now



Ne=

ed Assistance?







Tha&=

#x6E;k you for u=

3;ing DHL Cana&=

#x64;a.



Sincerely,
=

4;HL Canada





lor: #777; text-decoration: underline;">Privacy Policy |=20


r: #777; text-decoration: underline;">Terms & Conditions





This message was sent to because you previously interacted with ou=

r delivery services.



© 2025 =

4;HL Canada. A&=

#x6C;l rights re=

3;erved.






AAA Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 12:50:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utW4M-000000007bG-0ay2

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 12:49:26 -0600

Resent-From: The Doctor

Resent-Date: Tue, 2 Sep 2025 12:49:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [185.143.223.138] (port=41655 helo=threadhatch.forum)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

id 1utVdq-00000000FNJ-210h

for root@nk.ca;

Tue, 02 Sep 2025 12:22:10 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nk.ca;

h=Date:To:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=root@nk.ca;

bh=o6LyC0wUOJQIk04zyhK3rOIroxo=;

b=sVD9yzdGw2aeEfrJAtbpxM8Iv2nBerdIy32hSltGKH6buWwlKfZewLnP7cjFefLCcI6n0W79/sT6

gWyXLV/iVnD+c53wxG5PWE+EDPmVq7ijJ8ctg/tLkmFMDYUlFhLgg2JaA451+Dnv0DPrgLzRcPBm

jk3JxCxCPKB9qJL8SSHjE9PpIkLUb4RVL/u3rPCBNd8Z6WzmhLujfBCTPuDWxn2NA23BNtDJDi5e

i/euRtOlJt9zeMq4IVZR9Uc4Ghk1ME57eN+3S7QT4n/4KYa9F/DQv+h2NP+8dxQTsc6JwLAPtWnU

JfVMBVOx6+o4oLkorV3xb0Q2cPcJEwz9rvz0Bw==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nk.ca;

b=wvJBsxg0Ic7PB2y9CFtvdgGAkJ2bsv2fk7F3khSQiwMZJQNqfPOiONWbjpjDXSNk+0PQSHWWVeK2

cCo0BvzFBwaDEsz183+1yq+vF0jlby8I5uCFy9bzU2kXCYp+J6h4uoYtmZrdisrayQo7a7Kg8MEP

VRau8TLNwNuwbmkkdR8+l7W8H1ZOBDCJqnMc3oZowTMF4gzfL+VGQces9mKwV2D1SST0j3Y58wUe

Ch8sK5OukpeiaMW0ch1JclwIqm7Q2C+wOIVS/4uWXfzr0O9TBqBMwUEnEXPDV/O6cbUeasynQeL0

TfGg83OjMdYE24dlyDd6r7cwfieN1XEnshuCvw==;

Date: Tue, 02 Sep 2025 18:21:11 +0000

To: root@nk.ca

From: =?UTF-8?B?8J2RqPCdkajwnZGo?=

Subject: =?UTF-8?B?8J2Xm/Cdl67wnZiD8J2XsiDwnZiG8J2XvPCdmIIg8J2Xv/Cdl7LwnZew8J2XsvCdl7bwnZiD8J2XsvCdl7Eg8J2YhvCdl7zwnZiC8J2XvyDwnZeU8J2XlPCdl5Qg8J2XvfCdl67wnZew8J2XuPCdl67wnZe08J2Xsj8=?=

Content-Type: text/html; charset="UTF-8"

Mime-Version: 1.0



Content-Transfer-Encoding :BASE64

X-Spam_score: 27.8

X-Spam_score_int: 278

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Stocksy Email AAA Member Benefits Hello , Today's Winner

is root.



Content analysis details: (27.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[185.143.223.138 listed in zen.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

[185.143.223.138 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[185.143.223.138 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.143.223.138 listed in dnsbl.ahbl.org]

[185.143.223.138 listed in dnsbl.ahbl.org]

[185.143.223.138 listed in dnsbl.ahbl.org]

[185.143.223.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.143.223.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.143.223.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.143.223.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.143.223.138 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: bitly.lc]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: bitly.lc]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: bitly.lc]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.4 HTML_OBFUSCATE_20_30 BODY: Message is 20% to 30% HTML obfuscation

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 SUSP_UTF8_WORD_SUBJ Word in Subject using only suspicious UTF-8

characters

2.0 SUSP_UTF8_WORD_FROM Word in From name using only suspicious UTF-8

characters

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

2.0 HTML_SINGLET_MANY Many single-letter HTML format blocks

0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

Subject: {SPAM?} =?UTF-8?B?8J2Xm/Cdl67wnZiD8J2XsiDwnZiG8J2XvPCdmIIg8J2Xv/Cdl7LwnZew8J2XsvCdl7bwnZiD8J2XsvCdl7Eg8J2YhvCdl7zwnZiC8J2XvyDwnZeU8J2XlPCdl5Qg8J2XvfCdl67wnZew8J2XuPCdl67wnZe08J2Xsj8=?=



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

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 12:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utW3g-000000007ZZ-0Vee

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 12:48:44 -0600

Resent-From: The Doctor

Resent-Date: Tue, 2 Sep 2025 12:48:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19010004.outbound.protection.outlook.com ([52.103.43.4]:55364 helo=TY3P286CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utUVo-00000000Clc-2RyB

for root@nk.ca;

Tue, 02 Sep 2025 11:09:50 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=mD4jTwjW+a0F+YQ8qS2SwY2INbwMqoQOlHb2V2JajVXHcLrJFhTcwGQGG6Q+9TNCF0YiytSsqAk63SaF3QO+4dOaiDKJGjG97ejureDUWCBJjKZhQIhWXfdPasbxIwQYvcgo2zJm8jvoqJWaCPoNQ1w6rrL0nwBEkHhdm7fZNIXuLq3h+Im/Mp3eQJf2pqOEBtjEl1WevD5G5iMxp3qaHPNuzizmGuKRwObOzUWapOlu+KaJAgrjaarrcy/+rCdWw6gXV9tqu3HZmjKVTR55m8rHH6jGjrXShaQgpdbWD200OZO8YypjUEHLvM8Q/pW2C+hjGJHZ5ZQS2DTTUDkINQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kJ3MlVUsZ+nnWoOtFXcR5SusjRhCTTHgIJsps0kQ2Bk=;

b=ARYtakUl5f0/h4ruFOHTNftJXa4pLTmzpYhi5Jf5ivo/wwD1fy6shHVdEHjZeQJW760t6EH0HtP0vJUGuGfp3olmi88KGhseN1kArmWSmz8KEyp+a44DldSY/eq+WG9iFFCJJ27Myqaxjds6JBfWjXOcMsdA/IJfFenyDCWGcACEjwFzQKhILFEpf3pzfHya5Vh5ankY5pHYmmJULB+EGZClZpRdGjlIXloYXdcG9I5inVumoL7mh1gR5U7eUUfanwjSzbtvi9pidH2tQZvKFIQ4PdAga+pSlB4rICm49ahAjkL6w9vv7dPhWxFtftfkuctG+FASzmF0ObocTDG4Vg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=kJ3MlVUsZ+nnWoOtFXcR5SusjRhCTTHgIJsps0kQ2Bk=;

b=thbaRic7tAbwq5LkdgHbJkEMhYRS3taqyCbGuG8VkF2OkckJLb4K+T4wHcOloymJNcfDGDXGgjBLM3NWtJ2rv80wT73cm6Kv1KuvPiHt5abiiBwVxzI9yrd/kAY5DVec8CmRVcjcZkwBKmNW00Wtncq9GmzVE6nVS+ZgaLrB/zl6FkThRQngjyUN2+6N74w8Irh2WwDrhKmHbm4QHQ1+UbcMOK6fuvEkfyx2bmzk4BqMJ9OXTGEsVWvXNNpShZ/BSqLlyneqNDgfoLnnlprW1SYOHF0+XLNzrmGztLfBM5yivR2e3NjyQby0zCT4USRERaWDpMuKgqSABRB9zFuSMg==

Received: from TYCPR01MB11172.jpnprd01.prod.outlook.com (2603:1096:400:3c4::7)

by OS7PR01MB17320.jpnprd01.prod.outlook.com (2603:1096:604:438::18) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9073.27; Tue, 2 Sep

2025 17:08:17 +0000

Received: from TYCPR01MB11172.jpnprd01.prod.outlook.com

([fe80::9a5b:9ddd:ac6a:c24c]) by TYCPR01MB11172.jpnprd01.prod.outlook.com

([fe80::9a5b:9ddd:ac6a:c24c%4]) with mapi id 15.20.9073.026; Tue, 2 Sep 2025

17:08:17 +0000

From: Axel Carse

Subject: Re: Price...

Thread-Topic: Price...

Thread-Index: AQHcHCsnjlQaiy2rTU6Ym9P0163AgA==

Date: Tue, 2 Sep 2025 17:08:17 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYCPR01MB11172:EE_|OS7PR01MB17320:EE_

x-ms-office365-filtering-correlation-id: 5e252d51-69c7-4e2e-0891-08ddea434f50

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|8060799015|8062599012|10112599003|15080799012|31061999003|461199028|19110799012|39145399003|440099028|41105399003|39105399003|40105399003|3412199025|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?Sn1LG06V/wy3CAkUWP3R2bK5ga1MS6xQecZgRt+rIMdeI0kS1rVNp1zl?=

=?Windows-1252?Q?/xEsgZluXKZ8gxYYFNWTIFzeCcMskuqpvW9LXJyqyDXRfkAikIlvHe9U?=

=?Windows-1252?Q?e25ba/0RUv/a9WvyX3C2qW/sD8DiyJxah2kD6LBKBFKu7cqBBvWEhjd3?=

=?Windows-1252?Q?kZOwZ4wkeK2Emt/O1rfDPVEEbBLf+jBpgw3Cp2GDr+zvGtlRQ08kpdvt?=

=?Windows-1252?Q?66lK4z/nDos6smoY1y1gDHak+QHXVauBFogM/adJsnmflLMkTmP8+ARW?=

=?Windows-1252?Q?VDFZ8tQMNZrBozLiPbZrQXWuvv9skj1c4q90H36OFsWJAHIsSGm+a4Qc?=

=?Windows-1252?Q?Hv1ow5tIYK/7362Fh0B7uwgCHt7I3AUwl6y+2Qddw+lkzQD54JDicpNO?=

=?Windows-1252?Q?OpwNDF5LN/iifuqxRYygiwJi+K+9uFsttzofKtwO+sd+jNewB2L3Uv7h?=

=?Windows-1252?Q?6C/5Z9JqD313QPD/YOPeiuOUjXQbLLQpA0Cj/JDXU5cWwuw0KAN75xbV?=

=?Windows-1252?Q?JtzzL4RpZ3SQz2RiDzoNn8CgZrWFqTwzZVF05ND5L2gJOkOuObVGxrUV?=

=?Windows-1252?Q?AMcqa7yLIr0ex88wAFRgce/nXlXuEBm189+5RKWL8I8vtLE4kvKIXJ6o?=

=?Windows-1252?Q?1/UQ1rYJSSDwZ8mufhd/focKxNhmx9lW15TrkthoJIcNc1ymEVVqKcnP?=

=?Windows-1252?Q?Gh5behtWr/0vyEwv02kxV4J5aiMZowL/YukgReP57oCTFSpjMXb64LN3?=

=?Windows-1252?Q?TQCaKFZorNMDuZqg0mRJf86iTKhDpMTvvK0LmtXQ1uz4LToLr8g9GOmT?=

=?Windows-1252?Q?uNsRtYTGMNvnhrKAH2fqGM8tErqs0ilvlxVWkWki7J0tYfip6B+Sx6tO?=

=?Windows-1252?Q?/fxMH2LeSXW6enuDBXSpfUpsDn1kEKeoysNBpyWnrshqjwboy1AzYZDy?=

=?Windows-1252?Q?BylAeojRGeN2JZBrV7sQtCFkThwmigrgjYFciDWTclTxXD/opDPXJYkP?=

=?Windows-1252?Q?Azf/T7HQyViHWLzAxoFXjOmFFwxB0m3aEOXi173yPaE2YxC31Vhoxp1h?=

=?Windows-1252?Q?tmwKsaPpMQ5yWhS52D92VqDoXcFmk4JYFei3u/I7DrQisqFJm02gkb9x?=

=?Windows-1252?Q?8ocfP2XuUw3oND0PEPYPNNYtgV1xyKEYUMqS3y41N4jOodzuvZISedOw?=

=?Windows-1252?Q?BuXCDnrKhlxIHn6Thv6reoRtmiRQCoF2MQ6ZaRtcDrq+Oisqeg8gVdA6?=

=?Windows-1252?Q?XERzFYdMyjER//bvFkZTxH/wMApeTkuwlAUASr/6snSwq9QnZFm3WluP?=

=?Windows-1252?Q?LyYxi8VT3w4HpBwwvb9RaZNA96vCLPp1bJ/mxmr9toe2wCPm9PAOnZ6i?=

=?Windows-1252?Q?4OzoZc1FiWKX1xzEtf1hc6C6O7Ku0G5EWyg=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?8p8y4gao0CCJhlozcJzMe3c9ibGVjfWz4otbi+wYb1vfsvDd0QGvnmMl?=

=?Windows-1252?Q?ss79ZF6UX2h4x4NUTdii65UijoS+ZNB2MePW89YqE/eODggJBB9On5ZH?=

=?Windows-1252?Q?rASkpfJbmV/qQ3YxcFXCNblpX6AXNOG/K6F0f/tQr2B6HFgQ38ZCwIyn?=

=?Windows-1252?Q?2JkD/xLdduCe4mikPBNmoKZTFdlVPS+l2cOVrg0se4hHUPEXZeksYj2W?=

=?Windows-1252?Q?VOiUtsf2qkAE8jvx3Vjlx+TPpPLuMeJ0G8CF0AWl73i7oolONifVk4kK?=

=?Windows-1252?Q?B93vInek2nZiwnDlyFTTYqoivSSJcn2TB/gVGLzhh2An4luVEJAiTtXs?=

=?Windows-1252?Q?Xx3Jfto9xBtyl8DrLRvouPzpFOd9Zy+/IS/p6/VbnAb+RXZ/7dauVxUZ?=

=?Windows-1252?Q?WQPCqESBhxhlIDcLEtl9RbKDkwjbeNZ6BcX3U2ZGPLzbjs+FMpJFw6uw?=

=?Windows-1252?Q?lwBNQ9vDcNIZWf0YDdXMUGipDSlWwYvXf3Eolnveiv5qnwYF6JiTt6OY?=

=?Windows-1252?Q?4gp3E7Xqt4V6fOt/bkKiC4VqCSdEksn3urYpiIXVD8CxoMhblKppcwZ4?=

=?Windows-1252?Q?K9DX71/dGtlWWhpa0OOkkB7kaEZPa7FpMG7imkJ8g2057dRMkGyAYsFp?=

=?Windows-1252?Q?7cZq5BNyd377AbJcQZ8uqICEm4z8pwTa+NALZaiP9XsWQLlhm2ffyiL3?=

=?Windows-1252?Q?kfypksFIelLE9G2K4Ewa4mjgeWCKM6PnIOxzXgF9t9EJnButvkTgoW2o?=

=?Windows-1252?Q?V/gO3K9FwSueUPo88lfJrgZBhZqyguh1ycLWxB61Hpp0SVk8qB74LkI4?=

=?Windows-1252?Q?1Z5vfkUc0qghgxaI9181ONkix/Sp5WoP7j1Y4DFeyetgl5/mpYuyIn64?=

=?Windows-1252?Q?LeTaB8kx+n5cZ9J5bR279/57fWovpmZyKRpgf1F2UO1FCyn8BD+lR0sr?=

=?Windows-1252?Q?4wWBi/Dix3qhQYhn9MWyp45+776OxIn7/8a3/f6PZQoHB30QNuOJH47V?=

=?Windows-1252?Q?LPOe/jwYbG/0b+jp8rQB5Boh1HE/MRFIGDcDizCFpNBdbud054VRKL1S?=

=?Windows-1252?Q?vUKoliUYNd8mf8wS1sJI5Sirq5XrOSYHD/sKQ6gEvRKJbuTMzeQO+DZo?=

=?Windows-1252?Q?K8iwmErzrh8KaKa9+yDUU08nO4oWNXoiLFKxeRmQGuETRCuefYkMMCRY?=

=?Windows-1252?Q?Qb+KaqeSvq5TpBcxXFJFNf/BNV22nSG62p1A4l8bq9r2a2TkxVd6HuX0?=

=?Windows-1252?Q?Q3gItcL7AiaUtr4BC2QtX/OTb06YfmmQZIMbhmpHaRX9hJiAO2ZwBTio?=

=?Windows-1252?Q?ILO5Q/v4DSmZn+4e9YAnWd5r9SLhe0qi4mWRnfi+sViNzPKGUu8kjrPQ?=

=?Windows-1252?Q?6LY5QdCxYUZTeDjRFi3kSZF4ln6JkD8bknA=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYCPR01MB11172802A13CAFDF62E5B665FAA06ATYCPR01MB11172jp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYCPR01MB11172.jpnprd01.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 5e252d51-69c7-4e2e-0891-08ddea434f50

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Sep 2025 17:08:17.0735

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: OS7PR01MB17320

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I was checking your website and see you have a good

design and it looks great, but it’s not ranking on Google and other major

search engine. We can place your website on the 1st page of Google, Yahoo

and a better presence on Facebook, LinkedIn, YouTube, Instagram, Pinterest

etc.



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:3c4:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:3c4:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:3c4:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:3c4:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:3c4:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:3c4:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:3c4:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:3c4:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[52.103.43.4 listed in will-spam-for-food.eu.org]

[52.103.43.4 listed in will-spam-for-food.eu.org]

[52.103.43.4 listed in will-spam-for-food.eu.org]

[52.103.43.4 listed in will-spam-for-food.eu.org]

[52.103.43.4 listed in will-spam-for-food.eu.org]

[52.103.43.4 listed in will-spam-for-food.eu.org]

[52.103.43.4 listed in will-spam-for-food.eu.org]

[52.103.43.4 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.4 listed in dnsbl.ahbl.org]

[52.103.43.4 listed in dnsbl.ahbl.org]

[52.103.43.4 listed in dnsbl.ahbl.org]

[52.103.43.4 listed in dnsbl.ahbl.org]

[2603:1096:400:3c4:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:3c4:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:3c4:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:3c4:0:0:0:7 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.4 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.4 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.4 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.4 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.43.4 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.4 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[axelcarse(at)outlook.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Re: Price...



--_000_TYCPR01MB11172802A13CAFDF62E5B665FAA06ATYCPR01MB11172jp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hello,



I was checking your website and see you have a good design and it looks gre=

at, but it=92s not ranking on Google and other major search engine.



We can place your website on the 1st page of Google, Yahoo and a better pre=

sence on Facebook, LinkedIn, YouTube, Instagram, Pinterest etc.



May I send you an Proposal..?



Thank You,



--_000_TYCPR01MB11172802A13CAFDF62E5B665FAA06ATYCPR01MB11172jp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hello,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

I was checking your website and see you have a good design and it looks gre=

at, but it=92s not ranking on Google and other major search engine.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

We can place your website on the 1st page of Google, Yahoo and a better pre=

sence on Facebook, LinkedIn, YouTube, Instagram, Pinterest etc.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

May I send you an  Proposal..?



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Thank You,








--_000_TYCPR01MB11172802A13CAFDF62E5B665FAA06ATYCPR01MB11172jp_--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 08:53:00 -0600

Received: from mail-ed1-f67.google.com ([209.85.208.67]:58575)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utSNN-000000006xR-3lM6

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 08:52:58 -0600

Received: by mail-ed1-f67.google.com with SMTP id 4fb4d7f45d1cf-61cc281171cso9347493a12.0

for ; Tue, 02 Sep 2025 07:52:03 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1756824715; x=1757429515; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=vpE13FJ6Mi0UEwPcbe8+T8JusUo1dOhYBe8OdROY65w=;

b=h2TQ7seqf2SFvMmpCMaIgEeLkH9uLN8uvV9sl1Jf3vLMjhusLEISX7DT4MKPoQ9ZfS

fWlTd+j+MxivLu09MfgZhcaSbI/x6xjHnRPQoy8xRiKqQJwO5RwFDt8Fdqt5NkjxmU00

EkdNPiJATO8VlTFVOi3t9/huBEsCR8at8453iG7MXrWb4A4i+e66CTmPBWJQAydMrmOd

ivfXzO6G6iwoR7crI4Cw+wOE0P3ibQrZ4JGrlX3/wwkTqRuQchUEsD1OcOSLwXDilSoE

oycBwcvY0+eGKP30tBofpF1mVMzzuARP5fMAGLXSVf/9cfDEQTfgDUDjbaFAyTFzCUfZ

8r9A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1756824715; x=1757429515;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=vpE13FJ6Mi0UEwPcbe8+T8JusUo1dOhYBe8OdROY65w=;

b=u34TXj8qGFsmPmOGSVluWra4vObupwKErYv+wM8Ckr+HRD8r8qpOE5O1KTyr0eLcI8

qFUN8scAtDe+7L6Ncox80waXJiD2KjyRlHX9qUlMXQQ8rRotz1ddWZOPpVhgC+3qLTSC

eYTKcPRvEcpDgmz7TcE7MG7ZptT5WNz0jz8pBze3dUW2L6PeWs/xuIHGe/FmtYUCBmxM

lB7hvOqtf2OpfJ2nidvGMNKVLpjPRPAxW18XysfOQToXJl8auZB4NKHHwLqStBMYM4nE

0FWU0CrsAvcLz0y1cG6DRREUybKGANIJJDn46oT7C9y3YnsIb3vOrl549v04y5SA8e2e

75aA==

X-Forwarded-Encrypted: i=1; AJvYcCXDxbjy7H3LnTB2JqQhsT7IcyF8y1KjC9vse+rVlRbY4YyuW67vfkNp7jB2dFso6VGhTS4y@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YzUSQK0c6tGNLSjZnGqjAgosxw611g1M+WLy6JQjvSHWGSMhje2

Yv7eTUmnlw1iIX4aDLEpFjxktcNPmA02NbYnpny+E2oU4BwFkhdSxO9se+Q6rDUDf4sCBCjd6Ct

sDgAjIjXiFHnjgQPpdK3jwleLwUjwqBl6uA8CHTjmNg==

X-Gm-Gg: ASbGncvYMsGASh1isZjqJTRyEk+iYQhZGdkkS5hJHz1sCwodiQZR4pTv59ernFDlt2H

OmjgEnIVFZ4axlvJ82M4J0zqs+7q2wqepIIS0PPUhwGpczr3DOjVtxJRLq7mK/vIu1OVp+81seF

r5tF9Ak8KNUuKsCgZeONs46ty7P0LnNRklU6r8cmze9bYX1oBmKzXWixNFc6rravhh2Duf0eS/u

aL3nYCFiy30SwLyDIQGIKFxRLFgSunevRgaqeCWT1J7/oft9QsYEPM=

X-Google-Smtp-Source: AGHT+IFlYPupPRdRBK78fWrK0FiFC5EYcJxmGq1X+kJuHkqHYK7526sl5sspRUDY/7hZ91NdOSjy3iPcvfFY7jFGBFs=

X-Received: by 2002:a05:6402:350e:b0:61c:5b92:e316 with SMTP id

4fb4d7f45d1cf-61d2699749amr10144657a12.4.1756824714897; Tue, 02 Sep 2025

07:51:54 -0700 (PDT)

MIME-Version: 1.0

From: "MRS.Loveth Morgini"

Date: Mon, 1 Sep 2025 14:56:08 -0700

X-Gm-Features: Ac12FXxX_SklRplxJnhMfNjPH0qT_72ZjvF3BOY0T1Iy-IATNnNtv3G5qDYt5D4

Message-ID:

Subject: My name is MRS.Loveth Morgini

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000106ebb063dd2a188"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: My name is MRS.Loveth Morgini I’m a business woman and

I have decided to hand over the sum of ($8.4 Million Dollar) in my account

to you for the help of orphanage homes/the needy once in your location to

fulfill my wish on earth [...]



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

[209.85.208.67 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

[209.85.208.67 listed in dnsbl.ahbl.org]

[209.85.208.67 listed in dnsbl.ahbl.org]

[209.85.208.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.67 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.67 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[jenniferzongo75(at)gmail.com]

0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lovethmorgini884(at)gmail.com]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.208.67 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.208.67 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.67 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.67 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.208.67 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

2.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 T_MONEY_PERCENT X% of a lot of money for you

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} My name is MRS.Loveth Morgini



--000000000000106ebb063dd2a188

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



My name is MRS.Loveth Morgini



I=E2=80=99m a business woman and I have decided to hand over the sum of ($8=

.4

Million Dollar) in my account to you for the help of orphanage homes/the

needy once in your location to fulfill my wish on earth. But before handing

over my data=E2=80=99s to you, kindly assure me that you will take only 50%=

of the

money and share the rest to orphanage homes/the needy once in your country,

Return to enable me forward to you the bank contact details now that I have

access to Internet in the hospital to enable you contact the bank, always

check your email always remember me for doing good.



Please don't forget to reply me in my Private



E-mail:(lovethmorgini884@gmail.com)



Your early response will be appreciated.



Yours Faithfully,



MRS.Loveth Morgi



--000000000000106ebb063dd2a188

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable








ont-size:small;font-style:normal;font-variant-ligatures:normal;font-variant=

-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-in=

dent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decor=

ation-style:initial;text-decoration-color:initial;background-color:rgb(255,=

255,255);display:inline;float:none">My name is MRS.Loveth Morgini
style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-s=

ize:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps=

:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:=

0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration=

-style:initial;text-decoration-color:initial;background-color:rgb(255,255,2=

55)">

f;font-size:small;font-style:normal;font-variant-ligatures:normal;font-vari=

ant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text=

-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-de=

coration-style:initial;text-decoration-color:initial;background-color:rgb(2=

55,255,255)">
,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal=

;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:=

start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0=

px;text-decoration-style:initial;text-decoration-color:initial;background-c=

olor:rgb(255,255,255);display:inline;float:none">I=E2=80=99m

a business woman and I have decided to hand over the sum of ($8.4=20

Million Dollar) in my account to you for the help of orphanage homes/the

needy once in your location to fulfill my wish on earth. But before=20

handing over my data=E2=80=99s to you, kindly assure me that you will take =

only=20

50% of the money and share the rest to orphanage homes/the needy once in

your country, Return to enable me forward to you the bank contact=20

details now that I have access to Internet in the hospital to enable you

contact the bank, always check your email always remember me for doing=20

good.

ns-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;fo=

nt-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:sta=

rt;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;=

text-decoration-style:initial;text-decoration-color:initial;background-colo=

r:rgb(255,255,255)">

etica,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:n=

ormal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-a=

lign:start;text-indent:0px;text-transform:none;white-space:normal;word-spac=

ing:0px;text-decoration-style:initial;text-decoration-color:initial;backgro=

und-color:rgb(255,255,255)">
Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-l=

igatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:nor=

mal;text-align:start;text-indent:0px;text-transform:none;white-space:normal=

;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initi=

al;background-color:rgb(255,255,255);display:inline;float:none">Please don&=

#39;t forget to reply me in my Private

4);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal=

;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;let=

ter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;whi=

te-space:normal;word-spacing:0px;text-decoration-style:initial;text-decorat=

ion-color:initial;background-color:rgb(255,255,255)">

(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-styl=

e:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight=

:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:=

none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text=

-decoration-color:initial;background-color:rgb(255,255,255)">
"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small=

;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;f=

ont-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-=

transform:none;white-space:normal;word-spacing:0px;text-decoration-style:in=

itial;text-decoration-color:initial;background-color:rgb(255,255,255);displ=

ay:inline;float:none">E-mail:(
il.com" style=3D"color:rgb(17,85,204);font-family:Arial,Helvetica,sans-seri=

f;font-size:small;font-style:normal;font-variant-ligatures:normal;font-vari=

ant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text=

-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgro=

und-color:rgb(255,255,255)" target=3D"_blank">lovethmorgini884@gmail.com
>
font-size:small;font-style:normal;font-variant-ligatures:normal;font-varian=

t-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-i=

ndent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-deco=

ration-style:initial;text-decoration-color:initial;background-color:rgb(255=

,255,255);display:inline;float:none">)

4);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal=

;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;let=

ter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;whi=

te-space:normal;word-spacing:0px;text-decoration-style:initial;text-decorat=

ion-color:initial;background-color:rgb(255,255,255)">

(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-styl=

e:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight=

:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:=

none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text=

-decoration-color:initial;background-color:rgb(255,255,255)">
"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small=

;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;f=

ont-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-=

transform:none;white-space:normal;word-spacing:0px;text-decoration-style:in=

itial;text-decoration-color:initial;background-color:rgb(255,255,255);displ=

ay:inline;float:none">Your early response will be appreciated.

yle=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size=

:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:no=

rmal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px=

;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-st=

yle:initial;text-decoration-color:initial;background-color:rgb(255,255,255)=

">
;font-size:small;font-style:normal;font-variant-ligatures:normal;font-varia=

nt-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-=

indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-dec=

oration-style:initial;text-decoration-color:initial;background-color:rgb(25=

5,255,255);display:inline;float:none">=C2=A0 =C2=A0 =C2=A0

=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norma=

l;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;te=

xt-transform:none;white-space:normal;word-spacing:0px;text-decoration-style=

:initial;text-decoration-color:initial;background-color:rgb(255,255,255)"><=

span style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;fo=

nt-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-=

caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-ind=

ent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decora=

tion-style:initial;text-decoration-color:initial;background-color:rgb(255,2=

55,255);display:inline;float:none">Yours Faithfully,

or:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;fon=

t-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-=

weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-tran=

sform:none;white-space:normal;word-spacing:0px;text-decoration-style:initia=

l;text-decoration-color:initial;background-color:rgb(255,255,255)">

e=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:s=

mall;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norm=

al;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;t=

ext-transform:none;white-space:normal;word-spacing:0px;text-decoration-styl=

e:initial;text-decoration-color:initial;background-color:rgb(255,255,255)">=


ont-size:small;font-style:normal;font-variant-ligatures:normal;font-variant=

-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-in=

dent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decor=

ation-style:initial;text-decoration-color:initial;background-color:rgb(255,=

255,255);display:inline;float:none">MRS.Loveth Morgi











--000000000000106ebb063dd2a188--

Donation spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 05:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utPPo-000000006yy-3wPb

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 05:43:08 -0600

Resent-From: The Doctor

Resent-Date: Tue, 2 Sep 2025 05:43:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from servmx3.iam.ma ([194.204.197.198]:59709)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utMxU-0000000061o-2MTp

for root@nk.ca;

Tue, 02 Sep 2025 03:05:52 -0600

X-IronPort-AV: E=Sophos;i="6.18,230,1751238000";

d="scan'208,217";a="43409716"

Received: from unknown (HELO RDCMAILBOX08.iamdg.net.ma) ([10.0.76.189])

by servmx3.iam.ma with ESMTP; 02 Sep 2025 10:04:49 +0100

Received: from RDCMAILBOX04.iamdg.net.ma (10.0.76.185) by

RDCMAILBOX08.iamdg.net.ma (10.0.76.189) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.1.2507.57; Tue, 2 Sep 2025 10:04:40 +0100

Received: from RDCMAILBOX04.iamdg.net.ma ([fe80::d1e4:3c08:3ba2:6aed]) by

RDCMAILBOX04.iamdg.net.ma ([fe80::d1e4:3c08:3ba2:6aed%2]) with mapi id

15.01.2507.057; Tue, 2 Sep 2025 10:04:40 +0100

From: Zaher Soumia

Subject: Re

Thread-Topic: Re

Thread-Index: Adwb3ExcmsfOu5R6RhGktX+zSDsoEQ==

Date: Tue, 2 Sep 2025 09:04:40 +0000

Message-ID:

Reply-To: Zaher Soumia

Accept-Language: fr-FR, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [10.80.227.110]

Content-Type: multipart/alternative;

boundary="_000_c3daf56a8d884a1a91e65be21734d742iamma_"

MIME-Version: 1.0

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear, Donation made to you by Mr Francois Pinault, kindly

reply for more info. Ce message et toutes les pièces jointes sont adressés

à l'attention exclusive de leurs destinataires et sont strictement confidentiels.

Si vous le recevez par erreu [...]



Content analysis details: (10.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[194.204.197.198 listed in will-spam-for-food.eu.org]

[194.204.197.198 listed in will-spam-for-food.eu.org]

[194.204.197.198 listed in will-spam-for-food.eu.org]

[194.204.197.198 listed in will-spam-for-food.eu.org]

[194.204.197.198 listed in will-spam-for-food.eu.org]

[194.204.197.198 listed in will-spam-for-food.eu.org]

[194.204.197.198 listed in will-spam-for-food.eu.org]

[194.204.197.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[194.204.197.198 listed in dnsbl.ahbl.org]

[194.204.197.198 listed in dnsbl.ahbl.org]

[194.204.197.198 listed in dnsbl.ahbl.org]

[194.204.197.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[194.204.197.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[194.204.197.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[194.204.197.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[194.204.197.198 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Re



--_000_c3daf56a8d884a1a91e65be21734d742iamma_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello Dear,



Donation made to you by Mr Francois Pinault, kindly reply for more info.



































































































































________________________________

Ce message et toutes les pi=E8ces jointes sont adress=E9s =E0 l'attention e=

xclusive de leurs destinataires et sont strictement confidentiels. Si vous =

le recevez par erreur, merci de le d=E9truire apr=E8s en avoir inform=E9 l'=

exp=E9diteur sans d=E9lai. Toute divulgation, copie ou usage par une person=

ne autre que son destinataire sont interdits. Maroc Telecom d=E9cline toute=

responsabilit=E9 pour toute alt=E9ration, d=E9formation ou falsification s=

ubie par le message au cours de sa transmission. Retrouvez toutes les infor=

mations de Maroc Telecom sur www.iam.ma .

________________________________

This message and its attachments are intended only for the person or entity=

to which it is addressed and are strictly confidential. If you have receiv=

ed this in error, please delete the material from any computer after having=

informed the sender. Any copy or other use of this information by persons =

or entities other than the intended recipient is prohibited. Maroc Telecom =

accepts no liability for any alteration, distortion or falsification that m=

ay occur during the transmission of this message. All information about Mar=

oc Telecom on www.iam.ma .



--_000_c3daf56a8d884a1a91e65be21734d742iamma_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




1">











Hello Dear,



 



Donation made to you  by Mr Francois Pinault, k=

indly reply for more info.



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 







Ce message et toutes les pi=E8ces jointes sont adress=E9s =E0 l'attention e=

xclusive de leurs destinataires et sont strictement confidentiels. Si vous =

le recevez par erreur, merci de le d=E9truire apr=E8s en avoir inform=E9 l'=

exp=E9diteur sans d=E9lai. Toute divulgation, copie

ou usage par une personne autre que son destinataire sont interdits. Maroc=

Telecom d=E9cline toute responsabilit=E9 pour toute alt=E9ration, d=E9form=

ation ou falsification subie par le message au cours de sa transmission. Re=

trouvez toutes les informations de Maroc

Telecom sur www.iam.ma .



This message and its attachments are intended only for the person or entity=

to which it is addressed and are strictly confidential. If you have receiv=

ed this in error, please delete the material from any computer after having=

informed the sender. Any copy or

other use of this information by persons or entities other than the intend=

ed recipient is prohibited. Maroc Telecom accepts no liability for any alte=

ration, distortion or falsification that may occur during the transmission =

of this message. All information

about Maroc Telecom on www.iam.ma .







--_000_c3daf56a8d884a1a91e65be21734d742iamma_--

Web/SEO/App Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 05:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utPPz-000000008PH-0jRq

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 05:43:19 -0600

Resent-From: The Doctor

Resent-Date: Tue, 2 Sep 2025 05:43:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f179.google.com ([209.85.160.179]:42286)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utNQ3-000000007Lm-3Dgl

for sales@nk.ca;

Tue, 02 Sep 2025 03:35:24 -0600

Received: by mail-qt1-f179.google.com with SMTP id d75a77b69052e-4b30d09da9dso37930851cf.1

for ; Tue, 02 Sep 2025 02:34:29 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=expertbyseo-com.20230601.gappssmtp.com; s=20230601; t=1756805662; x=1757410462; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=zITV/ohx7L/c9+bTXTY4KJC2Lp5Hl0e+bGSXlMZFy1w=;

b=OvC4Ha0hgRZIER16fRfaXmv5OKpzRVKYZMiNhUmYmSMO1LY7MgrUpjHVxogDsXQh0E

oxncK9NzIAhHEbBqlYScOQG0gX7SVXBMOhFzydZFOTouoOkE5MsByyDzGXGg3CoPdeF6

GqXf4RqQPNuk0UR+sdt5uc3G4ybCmJCggklNdFQRq/RppdYk4KZ6i76DAyWFcxasceOn

hZ4a4pvO3jIiN1vacOxVxJekXtkBfbD702eSrMExhjxXG8VQEcAi5XIveh2SlC20BOBm

sVW+TSvf73kWFIB0GKV3qIqYWntKi7DDotf/bK1YTN8HTaVHytA+JVJnFyFoX+++17Qu

mzvg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1756805662; x=1757410462;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=zITV/ohx7L/c9+bTXTY4KJC2Lp5Hl0e+bGSXlMZFy1w=;

b=IbLH5+5O5ECQdHmk0kr7obOQlfknd1Ow3LPOQJIdCYX98JUnSn5ACTmmDHxgrG97Na

XTIkue1I7sFlBQ4aQp3263R/1E4JSsC0GkAbTusttfIcewYPBRsiinnELghKpevN8G9G

rlVkCUkQKPOS1RmC8r9sDXz+Any2WcJQIRWmFPVMnkOEbuQS2HbfqKYKEFFkKpTWwLsO

mRd/MyZt4V78XjTfMZGea+woDe3pN5tVSgZPbCYC06UcoMx3nUhnxKAbPtKy9Kx757fU

9p2dNflaOMBZMieH9dEgniy7gp5vGQBjf7sV+e4h0IIiS8fu+lpjgomthwb/68ajo660

4A0w==

X-Forwarded-Encrypted: i=1; AJvYcCVAEsyw79aZzpXj03D/f5l1Y4FTt8+KKgK6UZ/EZg7kWId19h+pZWsEBqsi6+UEOdidFb9lVg==@nk.ca

X-Gm-Message-State: AOJu0YyxCtJveoWSv63RqgICwIrInVzZUzp6ZHCpbAD2HxtCrryNZL0l

1bhy8vUQKdu78i49bTHf1ZmFU2FFofkxzRFHqFuXAr+85RQBK133nA8aCja08KNLmVq9RNkev4h

JVr2z5mFCr7X9M6khQB3NzQddCt+1e/b+axB1oc/03Q==

X-Gm-Gg: ASbGnct5FfFzNxzMfVU33IIQf94Yhi6OkCQNmv1id4j7EM9HW89GvNf1zfV0oSJ2IO8

o06uF3hSAc3WOf2eCrSKcFaEDlrF2yVjI3TMrSXMKwPevvmHumXaFWVManrh5YFhSYGha2OyaD8

BcPMfshhQFNe131BDbiVbdPhR7Vh0XoVXwk0XOPoAeIEYEQ+ioqr7sECKlbBfuHIiZJHdvS8zKl

h2W2zQ0yXElqq8f2V4Vv1hySt7nTlabD3uzmcB+mprffMrwuUrIX//QKmKNSwZCCCfTI2SQjmZ9

UHkj/7XjfrWkXFQj

X-Google-Smtp-Source: AGHT+IGFU6E8L7cC+5tFGlcFa5YVDrLonU/PWi9NxL2HIbG6MRZmQVAaGIVnmka5fPpWt8l1fbojtJJUjf7C6/d0Z1Q=

X-Received: by 2002:a05:622a:4006:b0:4b2:fe24:a87b with SMTP id

d75a77b69052e-4b31dcc972emr119556481cf.39.1756805661805; Tue, 02 Sep 2025

02:34:21 -0700 (PDT)

MIME-Version: 1.0

From: Artha Devi

Date: Tue, 2 Sep 2025 15:04:09 +0530

X-Gm-Features: Ac12FXz-0BpJWA1XvfxicGXeVw2OGiIIFQNkUeK-TW-PGCu7pxcVTLJcTNPFFX8

Message-ID:

Subject: App Development Offer

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000696e28063dce311a"

Bcc: sales@nk.ca

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Have a good day. I am App Development Manager and I

work with 120+experienced IT professionals who are into:-



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.179 listed in dnsbl.ahbl.org]

[209.85.160.179 listed in dnsbl.ahbl.org]

[209.85.160.179 listed in dnsbl.ahbl.org]

[209.85.160.179 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.179 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.179 listed in dnsbl.ahbl.org]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.179 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.179 listed in list.dnswl.org]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} App Development Offer



--000000000000696e28063dce311a

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello



Have a good day.



I am App Development Manager and I work with 120+experienced IT

professionals who are into:-



(1) Transport App



(6) Taxi App



(2) Games App



(7) Cleaning App



(3) Shopping App



(8) Educational App



(4) Hospital App



(9) Healthcare App



(5) Real Estate App



(10) Video Editing Apps



iPhone and iPad apps, Android apps=E2=80=A6.



May I know if you are interested in any of these services?



If you are interested, then I can send you our Price list, company

information, and an affordable quotation with the best offer.



Please send your requirements and contact details.



Kind regards,



Artha



--000000000000696e28063dce311a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"">Hel=

lo






-size:11pt;font-family:Calibri,"sans-serif"">Have a good day.






-size:11pt;font-family:Calibri,"sans-serif"">






-size:11pt;font-family:Calibri,"sans-serif"">I am App Development=

Manager and

I work with 120+experienced IT professionals who are into:-






-size:11pt;font-family:Calibri,"sans-serif"">






-size:11pt;font-family:Calibri,"sans-serif"">(1) Transport App
>




-size:11pt;font-family:Calibri,"sans-serif"">(6) Taxi App






-size:11pt;font-family:Calibri,"sans-serif"">(2) Games App






-size:11pt;font-family:Calibri,"sans-serif"">(7) Cleaning App






-size:11pt;font-family:Calibri,"sans-serif"">(3) Shopping App






-size:11pt;font-family:Calibri,"sans-serif"">(8) Educational App<=

/p>




-size:11pt;font-family:Calibri,"sans-serif"">(4) Hospital App






-size:11pt;font-family:Calibri,"sans-serif"">(9) Healthcare App
p>




-size:11pt;font-family:Calibri,"sans-serif"">(5) Real Estate App<=

/p>




-size:11pt;font-family:Calibri,"sans-serif"">(10) Video Editing A=

pps






-size:11pt;font-family:Calibri,"sans-serif"">






-size:11pt;font-family:Calibri,"sans-serif"">iPhone and iPad apps=

, Android

apps=E2=80=A6.






-size:11pt;font-family:Calibri,"sans-serif"">






-size:11pt;font-family:Calibri,"sans-serif"">=C2=A0May I know if =

you are interested in any of

these services?






-size:11pt;font-family:Calibri,"sans-serif"">






-size:11pt;font-family:Calibri,"sans-serif"">If you are intereste=

d, then I can

send you our Price list, company information, and an affordable quotation w=

ith

the best offer.






-size:11pt;font-family:Calibri,"sans-serif"">Please send your req=

uirements and

contact details.






-size:11pt;font-family:Calibri,"sans-serif"">Kind regards,






-size:11pt;font-family:Calibri,"sans-serif"">Artha






-size:11pt;font-family:Calibri,"sans-serif"">=C2=A0






-size:11pt;font-family:Calibri,"sans-serif"">=C2=A0






-size:11pt;font-family:Calibri,"sans-serif"">=C2=A0






-size:11pt;font-family:Calibri,"sans-serif"">=C2=A0





--000000000000696e28063dce311a--

Link spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 05:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utPQU-00000000AAb-1EPd

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 05:43:50 -0600

Resent-From: The Doctor

Resent-Date: Tue, 2 Sep 2025 05:43:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f47.google.com ([209.85.218.47]:54734)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utOhi-00000000ATg-1zZt

for doctor@nl2k.ab.ca;

Tue, 02 Sep 2025 04:57:42 -0600

Received: by mail-ej1-f47.google.com with SMTP id a640c23a62f3a-b0411b83aafso378953966b.1

for ; Tue, 02 Sep 2025 03:56:47 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1756810600; x=1757415400; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=CDptfxo+0y6ayfOspkMx0nVZhp15aOJlCxaF+nnJock=;

b=UEaiEJSkqheOM0s9v7sCmwG9JSFOvcO2wuJdvcdgUxZji1yN5Lt1WcNNj58dDSZu91

F+bGyFIXxv9ab0+pFdNpIBjecXJTSds7eXfkiGt8voyDZr1CtRcoGJEotuAQtIeaV01h

7/AQSZ8IvhIJFbYWR3babplz6UYLqtqLS1x9ygZ98Mz0O/NzmD24he29zcEu6VfM4ypo

rFwGTT+s6NOIa9XuHvO3okaeXdMTF/1AWAA77vHBQ/RP/R/a9V70ECbNngHJATXeKuhQ

daFDobXmDNbq8lo9sk+P2TGS8ex5mglYZDW+0+BgpR1ndCPr0I1njLPHMReqLNj8c9aQ

aa6w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1756810600; x=1757415400;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=CDptfxo+0y6ayfOspkMx0nVZhp15aOJlCxaF+nnJock=;

b=Q/HqHZ39BEG1O56XIArZy0iArsaH/dDp2shNWM8Y7Iaytb22jW4/hrLA70rjutn6E+

limsmOwmWoAE8VxtvR5vCek18YJNeX6BlU/kPt5aqk6wh9zosuYtegfGIu1oTpKBnzQo

MJsSjvXWiLMmunABiCi+l7Q/kM9wS3ImVZdXxDqJD4Tzc37r5hDCJwfRdGCtyCXEBih7

ns3qyBOZ1xvar/q4MN2t9TO/X/1vbUqFJmR6ZKpAgmOKjP0pHwW/4cH7/2Z2FvwkwZFX

QwVisb9wTy5qVxD/2rZ2dEi4VRvFLj2aKlXUX82kK4UJnPzCozF1XdIwbG0IddabtwSF

hprQ==

X-Gm-Message-State: AOJu0YwTtqn8/9XlourhxJujEiqfiJAqrXEp92HjW0QFmW5X/9S2Pq2a

eLa2krUWAEv7/+eu+6VQpZ/E+5kw2N67zh5Gl8onBbZB/5FRBFaBVtF1Q/T2X9bhxS9gifbBA2s

iDAQQbN6NWrhC1/1sa22jEtX5DbT8cMCPIdbIj2s=

X-Gm-Gg: ASbGncteZQf6BjOvpOMnUfbDhbd+I5gChcN8n2Sp2zy/fRZAHCGI+FHOGrjLuqEPKRo

SXaG1i/iHLFTU2Lk7JWIo+FiJnAbI2NRbDWt+NjgqXebeBSjr0Lw5mQiQAyvnPirue2tllragn4

78T4yJ1BNsxuqW5ehdIgaohBjLUURqDKrL9hJrk+fybovZ4PH8yKCLPH/pB/vzb7SZKZ+QWUX1W

Yi9/4dZl0+Ri6Jx+66CzBw=

X-Google-Smtp-Source: AGHT+IF5tlXi45Km8T1FKyJisDypPNzKQpjTdxMM5F1B6onHW1ZZrsoBWCYAfctPPrZgI0P74h4nugtHYexXQBaeYik=

X-Received: by 2002:a17:907:6d15:b0:af9:c119:3b4 with SMTP id

a640c23a62f3a-b01d8a266e5mr1202023866b.13.1756810600040; Tue, 02 Sep 2025

03:56:40 -0700 (PDT)

MIME-Version: 1.0

From: Dagmar Duerr

Date: Tue, 2 Sep 2025 10:56:28 +0000

X-Gm-Features: Ac12FXw8Xe-f_0tlivVJwgA4zE5KwG1yklQmTwuL-i1BsYH8XdXZai5Na3GP66I

Message-ID:

Subject: doctor, Wie geht es Ihnen?

To: doctor

Content-Type: multipart/alternative; boundary="000000000000c0ccb3063dcf571a"



--000000000000c0ccb3063dcf571a

Content-Type: text/plain; charset="UTF-8"



http://bzpY.oconnec.cfd



--000000000000c0ccb3063dcf571a

Content-Type: text/html; charset="UTF-8"







--000000000000c0ccb3063dcf571a--

Web/SEO/App Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 05:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utPPX-000000005bH-3nlM

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 05:42:51 -0600

Resent-From: The Doctor

Resent-Date: Tue, 2 Sep 2025 05:42:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f195.google.com ([209.85.214.195]:49191)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utNHs-0000000070B-1z7H

for sales@nk.ca;

Tue, 02 Sep 2025 03:26:57 -0600

Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-2487a60d649so64418805ad.2

for ; Tue, 02 Sep 2025 02:26:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=oxigensoft.com; s=google; t=1756805155; x=1757409955; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=yl6AOhUKFtV0u8hlJSGsaP4RI96prsnmE9jejSxAHj0=;

b=BwksgmmzbT+rNs1OUWxPGMRp2i1lmKQ036p2dDPm/rfVVPT3l33xGGiBGIgVLxtqXW

+k0eTkF9kZrhAPx0MPVaeHN06GflSVzjsChs3IsrjCb+IZWZMempAGsbJCWMg57dPBtR

bpfsozuB23JPxOUkq6sNbb4JD0d+aoDKzn0Nw=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1756805155; x=1757409955;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=yl6AOhUKFtV0u8hlJSGsaP4RI96prsnmE9jejSxAHj0=;

b=fiU5pOnEkfQ1ybVYCw19XwyV0nTH/zOXrDgz01w2jo0sSnjCTyjv39egBpfa/uXtxF

wp8mBMZE/YB/sr9nt7FNq+9XzTxUS+uFU6tR4PIPWmKLEEpwkLOKvEcLjb3mvnA8Z58B

F9C6PlRAp0bGHHkTkXe8cdrwvEo2tpJrJLBsU0V8xeHp/IrxqkcJS2pWCklOxKI+/iTb

B6IF/KIfDMGki3W+2Q5srBJlCqw3xVkLCHRWlaphW+Y155Ya5VWfFHS3XxgI4Tu7COQw

PXGiJFatw5cBY153jtZe5Oq27mp7g6xbJUDSYiaQOfKZMpcF4QsF+t/FIZwxc+1BBsrv

guYg==

X-Gm-Message-State: AOJu0YykXhLm9+lECmtJO5B8zpijj6G2IZdB5qdePdqKYZN3Fh+Dk9Se

O4PJsuL395QPM9ewm/KbR1xx48e7i516N2GKHwccYhtO17FdEV7xCqFMIp6D8ay/ROiHBsxFxGt

tJ1ejXZc=

X-Gm-Gg: ASbGncsavn8AhduJ7SF5tDHfjW7XCKRtK5+pUftkKiJeOL5x4bOaSvewwz3pLA4RmR2

ochXFWyYUl3z3WmvTzlK90tJGyQpiezcL1CfHxZpCz7V1PlVDMu/4OnKLzZ/IUBWZcUFrApYf8o

Y8TUwTuBd5MOIVxgYR8M//UyBIB/0f4nCg5E+FafCjbJDc/C6RYTHVjDB49SYlY8gs/9gz1B3sb

5DDyzW/1AA/b7NKamZMGXIG3vLxScPkQBxHrOui1a9dzc5gnWwz5rv9ck0wm4oMVLjfbzvNddot

IRM8ehj7OgHkI8esMJ0kdh9AS+oZgwAaregmxdafQ99+PoPfLQ0ZXDBOm1M+11lRsr0dGnx2v5a

KV1wg4vouEsxFPI9bQNhHcTbOW9TdroWx3U+lQgZXFtsn8obgDsAn4vgmQQ==

X-Google-Smtp-Source: AGHT+IH5dvJR49VM3tnPGQChEx6q2A1IGbd2YNKrXepjHF1cAu1qKmFExmRugu9o/5L4b9sRAE6OiA==

X-Received: by 2002:a17:903:380f:b0:240:a889:554d with SMTP id d9443c01a7336-24944ae4ce6mr129210915ad.45.1756805155168;

Tue, 02 Sep 2025 02:25:55 -0700 (PDT)

Received: from vicPC ([2409:40d0:13af:f9c9:9db6:3d3f:c442:7cf8])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2493b6ce20dsm97743605ad.92.2025.09.02.02.25.53

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Tue, 02 Sep 2025 02:25:54 -0700 (PDT)

From: "Steve"

To:

Subject: Website

Date: Tue, 2 Sep 2025 14:30:33 +0530

Message-ID: <95d001dc1beb$da1e36f0$8e5aa4d0$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_95D1_01DC1C19.F3D672F0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adwb4iuRHtivO6K0TlWAj+XU/d7wLA==

Content-Language: en-us



This is a multipart message in MIME format.



------=_NextPart_000_95D1_01DC1C19.F3D672F0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,







Would you be interested in building a new site, or possibly

rebuilding/repairing your existing site: www.nk.ca, with the latest added

features? We are a professional Development company.







I would like to send you my Website Proposal and examples of websites to see

the kind of quality you can expect to receive.







Do let me know if you are interested.







Kind Regards,



Steve,































































PS- If you no longer wish to receive emails from us, kindly reply to this

email with the subject line "REMOVE" or "UNSUBSCRIBE," and we will promptly

remove your email address from our mailing list. Please allow up to 48 hours

for the changes to take effect.













------=_NextPart_000_95D1_01DC1C19.F3D672F0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">




















style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#002060;background:white'>Hello,
n>






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#002060;background:white'> 
n>






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#002060;background:white'>Would you be =

interested

in building a new site, or possibly rebuilding/repairing your existing =

site:
style=3D'font-size:11.5pt;font-family:"Verdana","sans-serif";color:#00206=

0;

background:white'>www.nk.ca
style=3D'font-size:11.5pt;font-family:"Verdana","sans-serif";color:#00206=

0;

background:white'>,
style=3D'font-size:11.5pt;font-family:"Verdana","sans-serif";color:#00206=

0;

background:white'> with the latest added features? We are a professional

Development company. 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#002060;background:white'> 
n>






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#002060;background:white'>I would like to =

send you

my Website Proposal and examples of websites to see the kind of quality =

you can

expect to receive.






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#002060;background:white'> 
n>






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#002060;background:white'>Do let me know if =

you

are interested. 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#002060;background:white'> 
n>






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#002060;background:white'>Kind =

Regards,






style=3D'font-size:11.5pt;

font-family:"Verdana","sans-serif";color:#002060;background:white'>Steve<=

/span>
class=3Dsize>
style=3D'font-size:11.5pt;font-family:"Verdana","sans-serif";

color:#002060;background:white'>,






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#002060'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:10.0pt;

font-family:"Verdana","sans-serif"'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'> 






style=3D'font-size:11.5pt;font-family:

"Verdana","sans-serif";color:#0F243E'>PS- If you no longer wish to =

receive emails

from us, kindly reply to this email with the subject line =

"
class=3Dsize>
style=3D'font-size:11.5pt;font-family:"Verdana","sans-serif";

color:red'>REMOVE" or "UNSUBSCRIBE
class=3Dsize>
style=3D'font-size:11.5pt;font-family:"Verdana","sans-serif";color:#0F243=

E'>,"

and we will promptly remove your email address from our mailing list. =

Please

allow up to 48 hours for the changes to take effect.





 





 

















------=_NextPart_000_95D1_01DC1C19.F3D672F0--

Selfridges spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Sep 2025 12:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utW3C-000000007YW-426u

for dave@doctor.nl2k.ab.ca;

Tue, 02 Sep 2025 12:48:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 2 Sep 2025 12:48:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ns552818.ip-142-44-139.net ([142.44.139.95]:41528 helo=mail.hackerspace.edu.pl)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1utTn0-00000000Auv-1YSD

for sales@nk.ca;

Tue, 02 Sep 2025 10:23:30 -0600

Received: from mail.hackerspace.edu.pl (localhost [127.0.0.1])

by mail.hackerspace.edu.pl (Postfix) with ESMTP id 4cGWHG4YYMz19rD

for ; Tue, 2 Sep 2025 16:22:34 +0000 (UTC)

Authentication-Results: mail.hackerspace.edu.pl (amavis); dkim=pass

reason="pass (just generated, assumed good)" header.d=hackerspace.edu.pl

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=

hackerspace.edu.pl; h=message-id:reply-to:date:from:to:subject

:mime-version:content-type; s=dkim; t=1756830154; x=1759422155;

bh=nlf1j4/64sk+3WV3bNmwnpQYeFccBgao+jYeuxEArfs=; b=TJKFdrrD2qRZ

6Dpp4PHbzD2ONMFGZRWmNAtyE17Bt62e6IzAydETtPccNJy6yrELC4CmsdFd5vWY

FxMd9WjspVTQOhCInQABp5m7CLPBYlbjwH0MJ35+ee/aiQadxBS83ZMf0BDjqF+G

PjomyD+ZYmqLzaFb644M+WfnPiBlvfcWss9+vqcQRmlbgSOUKhVUV5ZefOCCujy1

9HIRKsYDFry+05GIht8KtJAFDZwnli+yiMvRvAeJfk1jaE7g+j5Cm6qK6sHExkNx

iggJOSgablm98HB+2WReqpqIkEiMhBCuejuLb3Tt3Tc76j1ZtMWihUSTwRYXxU1k

7fx2T22kKA==

X-Virus-Scanned: Debian amavis at bookworm-container-o1

X-Spam-Flag: NO

X-Spam-Score: 4.236

X-Spam-Level: ****

X-Spam-Status: No, score=4.236 tagged_above=2 required=6.2

tests=[ALL_TRUSTED=-1, DEAR_SOMETHING=1.731, FREEMAIL_FORGED_REPLYTO=2.503,

HTML_MESSAGE=0.001, MIXED_HREF_CASE=1, URIBL_DBL_BLOCKED_OPENDNS=0.001]

autolearn=no autolearn_force=no

Received: from mail.hackerspace.edu.pl ([127.0.0.1])

by mail.hackerspace.edu.pl (mail.hackerspace.edu.pl [127.0.0.1]) (amavis, port 10024)

with ESMTP id IEkxxs45UnJf for ;

Tue, 2 Sep 2025 16:22:34 +0000 (UTC)

Received: from [192.168.101.109] (localhost [127.0.0.1])

by mail.hackerspace.edu.pl (Postfix) with ESMTP id 4cGWH76XdJz19lM;

Tue, 2 Sep 2025 16:22:27 +0000 (UTC)

Content-Type: multipart/alternative; boundary="===============0680599319=="

MIME-Version: 1.0

Subject: Head of Purchase and Marketing Department.

To: Recipients

From: SELFRIDGES

Date: Tue, 02 Sep 2025 18:22:17 +0200

Reply-To: margaretsmithh@representative.com

Message-Id: <4cGWH76XdJz19lM@mail.hackerspace.edu.pl>

X-Spam_score: 12.1

X-Spam_score_int: 121

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir We are interested in your products and partnering

with your company. We are a large wholesale and retail distributor with several

stores around the world, our shops are well patronized Kindly [...]



Content analysis details: (12.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[142.44.139.95 listed in will-spam-for-food.eu.org]

[142.44.139.95 listed in will-spam-for-food.eu.org]

[142.44.139.95 listed in will-spam-for-food.eu.org]

[142.44.139.95 listed in will-spam-for-food.eu.org]

[142.44.139.95 listed in will-spam-for-food.eu.org]

[142.44.139.95 listed in will-spam-for-food.eu.org]

[142.44.139.95 listed in will-spam-for-food.eu.org]

[142.44.139.95 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[142.44.139.95 listed in dnsbl.ahbl.org]

[142.44.139.95 listed in dnsbl.ahbl.org]

[142.44.139.95 listed in dnsbl.ahbl.org]

[142.44.139.95 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[142.44.139.95 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[142.44.139.95 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[142.44.139.95 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[142.44.139.95 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[142.44.139.95 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[142.44.139.95 listed in sa-accredit.habeas.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[142.44.139.95 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[142.44.139.95 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FROM_MISSP_SPF_FAIL No description available.

2.0 TEQF_USR_POLITE To and from user nearly same + polite greeting

2.0 MIXED_HREF_CASE Has href in mixed case

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

Subject: {SPAM?} Head of Purchase and Marketing Department.



You will not see this in a MIME-aware mail reader.

--===============0680599319==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Dear Sir

We are interested in your products and partnering with your company. We ar=

e a large wholesale and retail distributor with several stores around the w=

orld, our shops are well patronized

Kindly send us your Catalog to learn more about your products and price l=

ist along with stock availability. We hope that your products are of good q=

uality as we look forward to a long-term partnership.

Kindly contact Mrs. Margaret Smith with below email address for more disc=

ussion.

Email: margaretsmithh@representative.com

Head of Purchase and Marketing Department.

Mrs. Margaret Smith our Representative

SELFRIDGES

www.selfridges.com

Best regards

Frank Jonathan. =



=20



--===============0680599319==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>


FONT-FAMILY: Verdana; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFO=

RM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; MARGIN: =

0in 0in 10pt; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: n=

ormal; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps:=

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial=

; text-decoration-style: initial; text-decoration-color: initial">
le=3D'FONT-SIZE: 12pt; FONT-FAMILY: "Times New Roman", serif; COLOR: black'=

>Dear Sir




SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(0,0,0); FONT-STYLE: normal; MARGIN: 0in 0in 10pt; ORPHANS: 2; WID=

OWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: normal; TEXT-INDENT: 0px; font=

-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style: init=

ial; text-decoration-color: initial">
T-FAMILY: "Times New Roman", serif; COLOR: black'>We are interested in your=

products and partnering with your company. We are a large wholesale and re=

tail distributor with several stores around the world, our shops are well p=

atronized




SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(0,0,0); FONT-STYLE: normal; MARGIN: 0in 0in 10pt; ORPHANS: 2; WID=

OWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: normal; TEXT-INDENT: 0px; font=

-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style: init=

ial; text-decoration-color: initial">
T-FAMILY: "Times New Roman", serif; COLOR: black'> Kindly=

send us your Catalog to learn more about your products and price list alon=

g with stock availability. We hope that your products are of good quality a=

s we look forward to a long-term partnership.




SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(0,0,0); FONT-STYLE: normal; MARGIN: 0in 0in 10pt; ORPHANS: 2; WID=

OWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: normal; TEXT-INDENT: 0px; font=

-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style: init=

ial; text-decoration-color: initial">
T-FAMILY: "Times New Roman", serif; COLOR: black'> Kindly=

contact Mrs. Margaret Smith with below email address for more discussion.<=

/SPAN>




SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(0,0,0); FONT-STYLE: normal; MARGIN: 0in 0in 10pt; ORPHANS: 2; WID=

OWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: normal; TEXT-INDENT: 0px; font=

-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style: init=

ial; text-decoration-color: initial">
T-FAMILY: "Times New Roman", serif; COLOR: black'>Email: =


", serif; COLOR: rgb(0,112,192)'>margaretsmithh@representative.com
B>
COLOR: black'>




SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(0,0,0); FONT-STYLE: normal; MARGIN: 0in 0in 10pt; ORPHANS: 2; WID=

OWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: normal; TEXT-INDENT: 0px; font=

-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style: init=

ial; text-decoration-color: initial">
T-FAMILY: "Times New Roman", serif; COLOR: black'> Head o=

f Purchase and Marketing Department.




SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(0,0,0); FONT-STYLE: normal; MARGIN: 0in 0in 10pt; ORPHANS: 2; WID=

OWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: normal; TEXT-INDENT: 0px; font=

-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style: init=

ial; text-decoration-color: initial">
T-FAMILY: "Times New Roman", serif; COLOR: black'>Mrs. Margaret Smith our R=

epresentative




SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(0,0,0); FONT-STYLE: normal; MARGIN: 0in 0in 10pt; ORPHANS: 2; WID=

OWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: normal; TEXT-INDENT: 0px; font=

-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style: init=

ial; text-decoration-color: initial">
T-FAMILY: "Times New Roman", serif; COLOR: black'>SELFRIDGES




SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(0,0,0); FONT-STYLE: normal; MARGIN: 0in 0in 10pt; ORPHANS: 2; WID=

OWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: normal; TEXT-INDENT: 0px; font=

-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style: init=

ial; text-decoration-color: initial">
T-FAMILY: "Times New Roman", serif; COLOR: rgb(0,112,192)'>
://deref-mail.com/mail/client/K4PEGxbmCZk/dereferrer/?redirectUrl=3Dhttp%3A=

%2F%2Fwww.selfridges.com" target=3D_blank>www.selfridges.com=




SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(0,0,0); FONT-STYLE: normal; MARGIN: 0in 0in 10pt; ORPHANS: 2; WID=

OWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: normal; TEXT-INDENT: 0px; font=

-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style: init=

ial; text-decoration-color: initial">
T-FAMILY: "Times New Roman", serif; COLOR: black'>Best regards
P>


SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(0,0,0); FONT-STYLE: normal; MARGIN: 0in 0in 10pt; ORPHANS: 2; WID=

OWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: normal; TEXT-INDENT: 0px; font=

-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style: init=

ial; text-decoration-color: initial">
T-FAMILY: "Times New Roman", serif; COLOR: black'>Frank Jonathan. 
AN>
COLOR: black">




D-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); =

FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; TEXT-IND=

ENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-decorati=

on-style: initial; text-decoration-color: initial"> 



--===============0680599319==--