Web/SEO/App Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Feb 2026 06:36:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vqANZ-00000000Nhx-1Kot

for dave@doctor.nl2k.ab.ca;

Wed, 11 Feb 2026 06:35:41 -0700

Resent-From: The Doctor

Resent-Date: Wed, 11 Feb 2026 06:35:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f195.google.com ([209.85.214.195]:56758)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vq3gJ-000000005ai-2jhE

for sales@nk.ca;

Tue, 10 Feb 2026 23:26:47 -0700

Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-2aaf59c4f7cso7879155ad.1

for ; Tue, 10 Feb 2026 22:25:48 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webconsultingdesign-info.20230601.gappssmtp.com; s=20230601; t=1770791142; x=1771395942; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=1U+gix/pkotec0GZyGG/qv1i0jiDB5LVGGYPD32V8oo=;

b=0tTDGtf+S2OcC8D+yfbWnglr7RhK95MDQC3UACT3VEVhb5YK7zHS0d9ELYdQXw1FG4

dz9sm6zR9b4YDAeVHnA3UpbBhnjtFjoiWXfk66XXz08xmx/3rTfWyKHLOjSrkXqsjAOs

XwK4rS48s9PJhUJLYAjectF1vKW8xPscItByzqwOkhLC6vxWZFsSPOercAWeGabAlaIK

8yrzf2/sCWa6oncHIfplcx2di7CzscIf4Ff/7VA1WufNdHQt2hbUAOXXvuTfObCEvYof

U521WmwJTjYlELOylTF7KAn0zXToKS5wJ09ADkqS1ttJNpn5nNnTJvQhpCgVlY2U4Q+x

ISog==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770791142; x=1771395942;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=1U+gix/pkotec0GZyGG/qv1i0jiDB5LVGGYPD32V8oo=;

b=BA9WKObv/uqOOVRilZGeJILBnVDzhQucDk4cHmIeGweiAhnb6+THKXu2nzlRLVfLFl

LKmIswPCDGB7Y+nEoH2+GkMyE127RF99so2v81pwLvNW5bPB+nW9hjtDnLIDarCrp7hb

hZ4EQz0JZB2+La0wunJ89hONn0eqx73B3T3Yx3efihKdZLqUAJOTdSvYGdivFgGuNx7W

TlnnKnM5Xj16PrsAcbQJ7Ujg32JAm35NhCVSyCvZHChkDsk3vaOq1j84e3N8lf4lZ93i

gS2LagaWPhoqJsqaOD3kO+BZhXSwXouBRJIZ7UPWbmkaidSjmSVuy3rScoUGGdmnknAv

DpzQ==

X-Gm-Message-State: AOJu0Yx2t7pN/2ICZyZe7zNGDoqC70vPie1bm8qasHHGcB9G8/MHfafy

ugvvX6GdVAHeXb0i/P38o+WCbY+VkvPlAdcqZNXh+dMcxZldHhCbdy8eg18jZ1zmw6bNNx8rB6a

z3PH0D3U=

X-Gm-Gg: AZuq6aJZg94m652EUya0iqNC0aBgtnxyueurrYN8zL0RWPO5/CZzHX54OBjhAJjZnPS

EKc+BgjOHeVvTb8dAeUxDbamlP9gqJ5jKUDGhScIvMPkr12rQEOSTynMpS1MAJhu3uhz1nXbNZ6

EOuj48Wu/ea/Cm+TUF0Leg77npdfBhjS+vdzxNvDpFGbr+ZRuEAXrf1zs7y7a1h3nWqos9RW6La

vZrJOfWWOKlBbSfcF/lai/lSnIKcORKc3tK7KPwOUXobflt5davo9FUzh/osj/0cAdIo6yGXzgu

B+vvogP6d3HxxpvIliYLxcu3mZPmWlvwMykiY8CEZR+r1gwqANBh16AA8+JAv+iWLPfusExdQGp

YbeRZEJhVVGfJjDspqXOFIgtBEjRHKTZC2Cv9OYrRCHSKFOiskbSTXRlK19O3RYKOlLIvYo9CDj

oBRb2l1BBsAI0sLB7Hs/RxpMuyVPGO4B8zTqChs738Fx98LKboicppvg==

X-Received: by 2002:a17:902:ce81:b0:2a0:9eed:5182 with SMTP id d9443c01a7336-2a951629ac4mr146346005ad.20.1770791141889;

Tue, 10 Feb 2026 22:25:41 -0800 (PST)

Received: from DESKTOPMV2KPRA ([103.120.153.187])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2ab2997b3d8sm10384915ad.68.2026.02.10.22.25.40

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 10 Feb 2026 22:25:41 -0800 (PST)

From: "Olivia"

To:

Subject: Web & App Development Support

Date: Wed, 11 Feb 2026 11:49:25 +0530

Message-ID: <3c7401dc9b1f$3e6489e0$bb2d9da0$@webconsultingdesign.info>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_3C75_01DC9B4D.581CC5E0"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AdybHPfdBJWe/owhShaooRxq2MusBw==

Content-Language: en-us



This is a multipart message in MIME format.



------=_NextPart_000_3C75_01DC9B4D.581CC5E0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



We provide reliable web & mobile development services (design, development,

e-commerce, PHP, apps) with flexible pricing.

Share your requirements and I'll send a tailored proposal.



Best regards,

Olivia









------=_NextPart_000_3C75_01DC9B4D.581CC5E0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hi,


class=3Disselectedend>We provide reliable web & mobile development =

services (design, development, e-commerce, PHP, apps) with flexible =

pricing.
Share your requirements and I’ll send a tailored =

proposal.

Best regards,
Olivia


class=3DMsoNormal> 



------=_NextPart_000_3C75_01DC9B4D.581CC5E0--



Web/SEO/App Spam from Microsoft Outlook Part 2

--_000_KUXPR02MB88533E6C64D6DE4AF04D21DB9963AKUXPR02MB8853apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi, Good morning,



Hope you have a good one!

Just checking if you'd be interested, Can I send more details about SEO pac=

kage?

Thanks

Fatima Sofia

________________________________

From: Fatima Sofia

Sent: Thursday, February 5, 2026 12:31 PM

Subject: SEO Proposal Cost Agencies



Hi,



I=92m Fatima, A Facebook & Instagram Ads specialist with a decade of experi=

ence. After reviewing your online presence, I=92ve compiled a SEO report wi=

th insights on how you can improve engagement and results.



We propose a targeted SEO strategy to increase visibility, traffic, and lea=

ds for your Property Management services.



Would you like to receive it? "SEO pricing and packages"



Best regards,

Fatima Sofia

SEO Director | Head of Operations



--_000_KUXPR02MB88533E6C64D6DE4AF04D21DB9963AKUXPR02MB8853apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








color: rgb(0, 0, 0);" class=3D"elementToProof">

Hi, Good morning,



color: rgb(0, 0, 0);" class=3D"elementToProof">













Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(36, 36, 36);" =

class=3D"elementToProof">

Hope you have a good one!



, 255, 255); margin: 1em 0px; font-family: Calibri, Helvetica, sans-serif; =

font-size: 10pt;" class=3D"elementToProof">

Just checking if you'd be intereste=

d,


Can I send more details about SEO p=

ackage?



Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);" cla=

ss=3D"elementToProof">

Thanks



Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);" cla=

ss=3D"elementToProof">

Fatima Sofia














yle=3D"font-size:11pt" color=3D"#000000">From: Fatima Sofia


Sent: Thursday, February 5, 2026 12:31 PM


Subject: SEO Proposal Cost Agencies


 









ze:11pt; color:rgb(0,0,0)">

Hi,



ze:11pt; color:rgb(0,0,0)">







ze:11pt; color:rgb(0,0,0)">

I=92m Fatima, A Facebook & Instagram Ads specialist with a decade of ex=

perience. After reviewing your online presence, I=92ve compiled a SEO repor=

t with insights on how you can improve engagement and results.



ze:11pt; color:rgb(0,0,0)">







ze:11pt; color:rgb(0,0,0)">

We propose a targeted SEO strategy to increase visibility, traffic, and lea=

ds for your Property Management services.



ze:11pt; color:rgb(0,0,0)">







ze:11pt; color:rgb(0,0,0)">

Would you like to receive it? "SEO pricing and packages"



ze:11pt; color:rgb(0,0,0)">







ze:11pt; color:rgb(0,0,0)">

Best regards,



ze:11pt; color:rgb(0,0,0)">

Fatima Sofia


=

SEO Director | Head of Operations










--_000_KUXPR02MB88533E6C64D6DE4AF04D21DB9963AKUXPR02MB8853apcp_--

Web/SEO/App Spam from Microsoft Outlook Part 2

--_000_KUXPR02MB88533E6C64D6DE4AF04D21DB9963AKUXPR02MB8853apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi, Good morning,



Hope you have a good one!

Just checking if you'd be interested, Can I send more details about SEO pac=

kage?

Thanks

Fatima Sofia

________________________________

From: Fatima Sofia

Sent: Thursday, February 5, 2026 12:31 PM

Subject: SEO Proposal Cost Agencies



Hi,



I=92m Fatima, A Facebook & Instagram Ads specialist with a decade of experi=

ence. After reviewing your online presence, I=92ve compiled a SEO report wi=

th insights on how you can improve engagement and results.



We propose a targeted SEO strategy to increase visibility, traffic, and lea=

ds for your Property Management services.



Would you like to receive it? "SEO pricing and packages"



Best regards,

Fatima Sofia

SEO Director | Head of Operations



--_000_KUXPR02MB88533E6C64D6DE4AF04D21DB9963AKUXPR02MB8853apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








color: rgb(0, 0, 0);" class=3D"elementToProof">

Hi, Good morning,



color: rgb(0, 0, 0);" class=3D"elementToProof">













Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(36, 36, 36);" =

class=3D"elementToProof">

Hope you have a good one!



, 255, 255); margin: 1em 0px; font-family: Calibri, Helvetica, sans-serif; =

font-size: 10pt;" class=3D"elementToProof">

Just checking if you'd be intereste=

d,


Can I send more details about SEO p=

ackage?



Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);" cla=

ss=3D"elementToProof">

Thanks



Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);" cla=

ss=3D"elementToProof">

Fatima Sofia














yle=3D"font-size:11pt" color=3D"#000000">From: Fatima Sofia


Sent: Thursday, February 5, 2026 12:31 PM


Subject: SEO Proposal Cost Agencies


 









ze:11pt; color:rgb(0,0,0)">

Hi,



ze:11pt; color:rgb(0,0,0)">







ze:11pt; color:rgb(0,0,0)">

I=92m Fatima, A Facebook & Instagram Ads specialist with a decade of ex=

perience. After reviewing your online presence, I=92ve compiled a SEO repor=

t with insights on how you can improve engagement and results.



ze:11pt; color:rgb(0,0,0)">







ze:11pt; color:rgb(0,0,0)">

We propose a targeted SEO strategy to increase visibility, traffic, and lea=

ds for your Property Management services.



ze:11pt; color:rgb(0,0,0)">







ze:11pt; color:rgb(0,0,0)">

Would you like to receive it? "SEO pricing and packages"



ze:11pt; color:rgb(0,0,0)">







ze:11pt; color:rgb(0,0,0)">

Best regards,



ze:11pt; color:rgb(0,0,0)">

Fatima Sofia


=

SEO Director | Head of Operations










--_000_KUXPR02MB88533E6C64D6DE4AF04D21DB9963AKUXPR02MB8853apcp_--

Web/SEO/App Spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Feb 2026 06:36:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vqANP-00000000NDE-0QpG

for dave@doctor.nl2k.ab.ca;

Wed, 11 Feb 2026 06:35:31 -0700

Resent-From: The Doctor

Resent-Date: Wed, 11 Feb 2026 06:35:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012056.outbound.protection.outlook.com ([52.103.66.56]:24582 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vq2pO-00000000022-06UR

for sales@nk.ca;

Tue, 10 Feb 2026 22:32:06 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=PvUL3VGuLLzz2pSEhCrt8hWAmmgTyPOkm1obokE2nUCo2wRadMnCncr83cvBqN/u+g99TsxJTpXa8m2mzH35GCdtCuOdpipckHuwtAgyVQwXjFmg6CKv3ZjD2xocYy65G9215VDh8Mn2k4gIfsMO5cG9vgH0IUQFD5CSs7YUG+juR/iN4F9yhGTWQsIMiW586ID1pYzkBwozA3xna5krdoY6l2FzE6MuiOWclWnzfqf9OBou41QS7qa7Szfmb2+EhzOWxZgT2vvmyRV+aw2P3DTlkptqOS+/za/2QY7QuY9hzZyvMfxQ/vEupCigRryqVgZ8s3WZuDBG8Cfn+eQRhw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ANB24fnxgBL55tcd873hrsDMV/J80NM1iVHXuXBBQnA=;

b=dTso8HXyfgGmLlPkVUxWaYEalL5lZ+z7KLu7Met45VJX5q+j3r0DMl8Wcn+yIKXy7nU7kJHwPF5oJiMrAkqHMcvsAn1rslzUqrauHHg5B/SAuflnm5Dj1sYf9yXDw3V1rNttD/fNitDRkG2IweMMyy5gm4rWZM8AAgUmwCXaQy5AM9m1y5twqHBNnjg+LLm9OiA2yZG0hji+A/QF393b2ZkIHP82mKPak4bO3yatu5hHY3wdSrD177P9j8SjxI+6VrHziseiVLXymM/hHGXWcLltGt3bFP0mC/bjDiiLHl5zvOcYu59LPv7sA+z0sg0l4qyjc1CCvJpIb6/hQXt8+Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ANB24fnxgBL55tcd873hrsDMV/J80NM1iVHXuXBBQnA=;

b=LezM4UCPQp9KlCp0Anq8nYQxiESg7bd0WXHodGRv4+9NM2G1a5PhU9A8gCFyHKcMTzBe9UCJ0F9MZ6bS7oiaEN7mO9u6dghU+7EGyZR+LJPuS7D8UR/LGGLQNWIdRUUm7vOugcc/pZkKs1DWxscB+vKCbYvAU02FAdvxusKLuttRk8J2qfR/OAF/sOQnUrIMenlWPbrI9RYEfy7fm0HrV+mdU4DXB8/fQq/tbrifF18Qt8BOnuwqBbsBG/m1lZ0qDi5VFPn1126WNprorxt2ZZhdi9YHEhEFst9o1QPZv2TOH6uB9XqOPs6xCc+n5CjdF6b7aDYsaz7Ik0O81NRbbQ==

Received: from KUXPR02MB8853.apcprd02.prod.outlook.com (2603:1096:d10:53::5)

by SEYPR02MB6444.apcprd02.prod.outlook.com (2603:1096:101:13f::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.18; Wed, 11 Feb

2026 05:30:18 +0000

Received: from KUXPR02MB8853.apcprd02.prod.outlook.com

([fe80::48a5:a66:cb8f:c87]) by KUXPR02MB8853.apcprd02.prod.outlook.com

([fe80::48a5:a66:cb8f:c87%5]) with mapi id 15.20.9587.017; Wed, 11 Feb 2026

05:30:18 +0000

From: Fatima Sofia

Subject: Re: SEO Proposal Cost Agencies

Thread-Topic: SEO Proposal Cost Agencies

Thread-Index: AQHclpsZJhUClQ4SfU2YrvY7XQ2fBbV9AZQn

Date: Wed, 11 Feb 2026 05:30:18 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KUXPR02MB8853:EE_|SEYPR02MB6444:EE_

x-ms-office365-filtering-correlation-id: e13160f8-64a7-4d98-ab89-08de692ea4ce

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|39105399006|7042599007|8062599012|461199028|15030799006|15080799012|19110799012|8060799015|41001999006|41105399003|40105399003|39145399003|440099028|3412199025|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?SRYsVnZ81wHfwFDTSoL4Gpu1Dlaj31NgCkpFYXKRmgtrvBgCnbvgeFnu?=

=?Windows-1252?Q?OThyHl1EOV7thNxNpRHKJmT57zvnqkGZS+ELuJ2JLuYBT4AZtr37VLnh?=

=?Windows-1252?Q?eMprx/Sf/1iTt3bE2Gr7qVzaLdd5MlYEqD76UcRwJ1XdnSzQrGWlytNw?=

=?Windows-1252?Q?kXzyHtGwECAwVasa9h/4X3W0562tENgppkbQWeaxJqjMfNBboMDcpsEc?=

=?Windows-1252?Q?h11Uk796/PZVpszfqBXZ47EBvSJwoMGMCdLvgsfHf1u8MOPyYLtjpEcN?=

=?Windows-1252?Q?X5+Yy4VmEfeBKMUyIy8En0U0Bzkk0x7igah14JqAHKIXT/4sH11PCqSf?=

=?Windows-1252?Q?t+32dTeJsFgm1iwEcjwKr3ixm0U1/zuQFvxV1nAXPFi13Ae/PEABkn92?=

=?Windows-1252?Q?IGokLmPBbm8tpurWAcb4V4RCY2ku+Br9r2LfBjsk9w4RoZF6sARZd6lm?=

=?Windows-1252?Q?AKPIwJEWGo9/tfIorwDHwO0tSpAlK1Q4snhEJgwRS6iI4TOTCRK1S+h/?=

=?Windows-1252?Q?3oyThNKClSrIXnaQ1JPUBk4yQgd+ZIa+N3X/cvCgWY9ztXX26L9Dvg3d?=

=?Windows-1252?Q?kLkJCTJCHGxHOBEgPlSjJqiusApuYjiaQ400JWx7EmCOEQcFCZ8pA1Al?=

=?Windows-1252?Q?lsMM7YY2v0U0bQdW7jB46bdw7kL3+RfPxNmSQ8/rYE0S9iCcnH2WyC6k?=

=?Windows-1252?Q?GJwQdgmGopqnlQVBBuN0cmKAYYC/LfkdR1IMEXSDJ3MPsRLf9Rsbp7A4?=

=?Windows-1252?Q?o1t53lXb/ZVUxyW2L/vHKiQ3LMH7UVORyaJYnmrtiqitHKBuXABcoCFG?=

=?Windows-1252?Q?xkUsxXuw3TlUIa8SgiY1trKEQUcG9dxa+mR90yy6M3DQZrikZdoUz8wQ?=

=?Windows-1252?Q?R1qZQ9obv0l6uW7PvZHrJjk5dj29PiuANbdMcYTfF7vkbZZDTEJAdwMw?=

=?Windows-1252?Q?xBnEWpoW0AI0ND2zV2tfR+uU/+bbPbWP1C3sFQFWI2M2bLK0eUH68BzE?=

=?Windows-1252?Q?VIC5bWtk1NwPwxTAiJhKqb12/010de3Gmybi/vC14aOHXgl7ZlsbaSx5?=

=?Windows-1252?Q?xxMvqtZ7wTsBmd1XGfdo5/avT1rv4qSezJ4jnII7oYR+y2m6VblrusvA?=

=?Windows-1252?Q?hmbTOYubN5b3dCXR5no7LSypMb4G5UbGoIp/rh1Cb2bL/O7o4QPtB2lV?=

=?Windows-1252?Q?I2kBQtzQbHmlH7DWUvDdVXBe30mkiFQY8OqaWraeuNf/WTjM8oBGxT8N?=

=?Windows-1252?Q?mERBIzA8pQ2tQMem1ZJcwY1di7bTEbup75DQaGkYahwIrKjkREaAR/Af?=

=?Windows-1252?Q?vLqYHFfZuDgM1+H/JbD8nkYEJ5ucRs2BYyWlqzI66Qpmdlq31vheIK1O?=

=?Windows-1252?Q?frBdtQgiEJN7ivQqB7rFhMoN8t/UTvmda7LKHNNu1kd8ylOYfWfXDmS9?=

=?Windows-1252?Q?EwB0rm+pT9IiLHQ+LTmL+Q=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?d1pWgdhJmCcFMamYKl4ZZEm/+g0LZjdiR4bYwKGcovA5RRl4sT/XZ6Ng?=

=?Windows-1252?Q?FiXoo1sqS2au+GGjjn2X/MRh7IG+aq3r/DURvntcb7nvMMAc76yWhYPG?=

=?Windows-1252?Q?nUDdXyvWBmQsQY0Qgrj/hDyhfHrebdehjxAPZ+IKJEUeOfbREnsV7gYK?=

=?Windows-1252?Q?R/CrMumCLmu86m3Vj45PSMXbD/OkF9yIjZClDvCB61PIM/+GO1OKQFhr?=

=?Windows-1252?Q?Xfc5Qf+yWIrq1QYs3kGw82Sq6w2zkTwGdwC8+VcC6IW0gRzLq8zD8c20?=

=?Windows-1252?Q?aQxQtj5x3WyZ8r0vnpw1TgiDJJQDgajBk/HWyFGmAau/IkITj+QuVhdy?=

=?Windows-1252?Q?tnJz8h/zucBQNVoBUiXvQZcOHjhi/oYfV6GOEaRUNqYVIwOip7U/oXs5?=

=?Windows-1252?Q?Cm+EjngN29+2gzdpxQgwszx7If+2bsa5UR+qHVukMOhCWW38SxlJ739g?=

=?Windows-1252?Q?HGcToNFosQ3jxF6+VNnTbXOcSF+yZo1YpSdnkNctSAvQnYoSuxE4S0OP?=

=?Windows-1252?Q?8iaP2938/YxYslEB5ggSmZsyFhSESdW+qua6t3YYlcMBdrhx4m4rLyRK?=

=?Windows-1252?Q?+PUv0kVHW0gnF80dnXORApIJMwW867bJ7lC3zwHnHpgjFUst10XL4qpo?=

=?Windows-1252?Q?QKiIjEMBoAH/NKy1v81Kipi6PCoYuaAC8HyGqxtuZVzhdy+TXvr6MO/u?=

=?Windows-1252?Q?vd21qD7EUrIF2kws4yNSH/C/By2p0ArPKXtbbxzZp2vgCwdcsADE3/gd?=

=?Windows-1252?Q?EY3f1w2+q8fVt0md3+lJMDOAXA1LSEMbsR1jYMn0qkJG24XBe/91sc0g?=

=?Windows-1252?Q?ltTpruBgyg91/exGPkhx6hXSiZUL/ip66v0r0bJ9KYj0u5kEIDxyRcXP?=

=?Windows-1252?Q?Js/sWgC0b/ZLhT2yQwnKj4W+CT6/9dDaillYQy36ow78FN6IaYsN03rc?=

=?Windows-1252?Q?GzKldNdXoMO+pWOleIjJIz2dskn5oxWN1Os8M3Z8sL1blfnd7Ssbzla1?=

=?Windows-1252?Q?PATHFN5Zl5IYjdikaWkxusL25w3am44X5nSHpD8uoIbYGxBoHiMmgpXW?=

=?Windows-1252?Q?wypCITFguzxSxS7FhpEIwWWJU6mplz4EDTKdv2XY3rlNYIB80CyCeG8v?=

=?Windows-1252?Q?5Ua07xA6aVN45MHXXoh2XheJ5O9PEfHtJkZst/My8QgklMzjR4qgm6S/?=

=?Windows-1252?Q?Xyyxf3ZVa5e8ixL9Q3ubc1jMjeWmSiHpZ/kkW9Nhr49e57A2sCnTk1EL?=

=?Windows-1252?Q?bGclv34X/OZBlnV4l9/kOi5GIASS0dIQ1E2m1GAcuIo7i4DwS0yR0+Nh?=

=?Windows-1252?Q?pWt/6rfm6A2CeEdmzhT0BMVEJ7vdVmG3gZhkLRPjjjb/RdaiuKQ/CWZL?=

=?Windows-1252?Q?MX5TLdn8fCRXrxEXA//KzmRZNimAaPWPe9/MM86K+I5qCMmH/MgAoJHh?=

=?Windows-1252?Q?7qYcGkKB8HbLkGhzspcwW+gR7ykEqqAYCQCKaR1LEp1mgMbZ7KJYQY4D?=

=?Windows-1252?Q?U5+CtCnmUCIEuLZFxSKxUx61TQqhBTFuHgb04Gpw0vMy/6mC1G05wmXv?=

=?Windows-1252?Q?1o1Bi5mpL1JrdzY1?=

Content-Type: multipart/alternative;

boundary="_000_KUXPR02MB88533E6C64D6DE4AF04D21DB9963AKUXPR02MB8853apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-31b93.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KUXPR02MB8853.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e13160f8-64a7-4d98-ab89-08de692ea4ce

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Feb 2026 05:30:18.7530

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR02MB6444

Intelcom Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Feb 2026 17:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vpyGI-00000000Nfs-276M

for dave@doctor.nl2k.ab.ca;

Tue, 10 Feb 2026 17:39:22 -0700

Resent-From: The Doctor

Resent-Date: Tue, 10 Feb 2026 17:39:22 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 6017177.cicinsurancegroup.com ([162.215.13.43]:37424)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vpwWn-00000000BD2-03LD

for sales@netknow.ca;

Tue, 10 Feb 2026 15:48:24 -0700

Received: from careers by 6017177.cicinsurancegroup.com with local (Exim 4.99.1)

(envelope-from )

id 1vpwVy-000000006xI-3IlD

for sales@netknow.ca;

Wed, 11 Feb 2026 01:47:26 +0300

Date: Tue, 10 Feb 2026 22:47:02 +0000

To: sales@netknow.ca

From: Intelcom

Subject: Important: Your Package Requires Customs Clearance - 2.96 CAD Due

Message-ID: <7d262102b49b57b37712a322daac9ac8@intelcom.com>

List-Unsubscribe: mailto:bounce715-3wjLorsqL85rU7V@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1bc821dfee5eeaa1e69dc50c250c57419"

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - 6017177.cicinsurancegroup.com

X-AntiAbuse: Original Domain - netknow.ca

X-AntiAbuse: Originator/Caller UID/GID - [1018 981] / [47 12]

X-AntiAbuse: Sender Address Domain - 6017177.cicinsurancegroup.com

X-Get-Message-Sender-Via: 6017177.cicinsurancegroup.com: authenticated_id: careers/only user confirmed/virtual account not confirmed

X-Authenticated-Sender: 6017177.cicinsurancegroup.com: careers

X-Source:

X-Source-Args: php-fpm: pool careers_cicinsurancegroup_com

X-Source-Dir: careers.cicinsurancegroup.com:/public_html

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Intelcom - Customs Notification Action Required: Customs

Clearance



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[162.215.13.43 listed in will-spam-for-food.eu.org]

[162.215.13.43 listed in will-spam-for-food.eu.org]

[162.215.13.43 listed in will-spam-for-food.eu.org]

[162.215.13.43 listed in will-spam-for-food.eu.org]

[162.215.13.43 listed in will-spam-for-food.eu.org]

[162.215.13.43 listed in will-spam-for-food.eu.org]

[162.215.13.43 listed in will-spam-for-food.eu.org]

[162.215.13.43 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[162.215.13.43 listed in dnsbl.ahbl.org]

[162.215.13.43 listed in dnsbl.ahbl.org]

[162.215.13.43 listed in dnsbl.ahbl.org]

[162.215.13.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[162.215.13.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[162.215.13.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[162.215.13.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[162.215.13.43 listed in dnsbl.ahbl.org]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Important: Your Package Requires Customs Clearance - 2.96 CAD Due



This is a multi-part message in MIME format.



--1bc821dfee5eeaa1e69dc50c250c57419

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



Intelcom - Customs Notification



Action Required: Customs Clearance



Dear Customer,



Your international shipment (Tracking #INTL7845923) has arrived and requires customs clearance documentation to proceed.



Access Customs Portal



Please complete within 48 hours to avoid delays.

For assistance, contact: 1-888-744-1155



Intelcom Logistics Inc. • 1-888-744-1155

© 2024 Intelcom. All rights reserved.



--1bc821dfee5eeaa1e69dc50c250c57419

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit







Intelcom - Customs Notification











































Intelcom


Action Required: Customs Clearance



Dear Customer,



Your international shipment (Tracking #INTL7845923) has arrived and requires customs clearance documentation to proceed.





Please complete within 48 hours to avoid delays.


For assistance, contact: 1-888-744-1155





Intelcom Logistics Inc. • 1-888-744-1155


© 2024 Intelcom. All rights reserved.











--1bc821dfee5eeaa1e69dc50c250c57419--

Web/SEO/App Spam from Microsoft Outlook Part 3

From: Seo Gibson

Sent: 22 January 2026 07:38

To: Seo Gibson

Subject: Re: Send



Hi,



I personally visited your website when I was browsing it.



In order to significantly improve these search results for you, I would lik=

e to send you an audit report of your website.



Can I Send you Quote=94 and Cost/=94?



Best regards



--_000_PN2P287MB2122B7042B4D65A6AC29F57DB562APN2P287MB2122INDP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I sent you an email a few days ago. I didn't get any response back from you=

.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

May I send you over those price list.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thank you!



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">









11pt; color: rgb(0, 0, 0);">

From: Seo Gibson <SeoGibsonExpert@outlook.com>


Sent: 22 January 2026 07:38


To: Seo Gibson <SeoGibsonExpert@outlook.com>


Subject: Re: Send


 





_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I personally visited your website when I was browsing it.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

In order to significantly improve these search results for you, I would lik=

e to send you an audit report of your website.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Can I Send you Quote=94 and Cost/=94? 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Best regards








--_000_PN2P287MB2122B7042B4D65A6AC29F57DB562APN2P287MB2122INDP_--

Marriott pillows phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Feb 2026 13:55:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vpuky-000000007Az-1t2r

for dave@doctor.nl2k.ab.ca;

Tue, 10 Feb 2026 13:54:48 -0700

Resent-From: The Doctor

Resent-Date: Tue, 10 Feb 2026 13:54:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [5.181.2.206] (port=51149 helo=aboveandbeyondmeta.xyz)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

id 1vptnt-000000003mZ-47WZ

for doctor@nl2k.ab.ca;

Tue, 10 Feb 2026 12:53:48 -0700

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;

h=Date:To:From:Subject:Content-Type:Mime-Version; i=doctor@nl2k.ab.ca;

bh=MoF2iYD7llMRKvL+LegVm3wEgF0=;

b=JhHWNCkd/oMTBkrKAKZ9P2yrBEghS0ktaywwf6n6h10eOjinUFPP+TcRFhwVx9ptmpADBpc+ctP5

v0pkszztUJ/a5gk0eUHnU8HjgW8K1lXCx9wvu3hOnUBIdEZ0ut0hg/p8vfCjzrl5Azfdw/k9Ih3D

fq+kuMreLBYcEVdEVvQ=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;

b=mzcdaQOBZPAoCO/DS+CPOY7WxFvXS+wVNCX2GKQ9u3dcCyjV8kPRFt9MzusCMEc7kAqFtk4knPhp

bRzs1Ps8J7PyWt12fJ2CSSJJ5eINmLeX1Z8mdqAq6vISf7EIP81YP1uegHzjYAUL56PwUWBwWEyG

gYwDFOrPHabUGO4cPQ8=;

Date: Tue, 10 Feb 2026 19:52:26 +0000

To: doctor@nl2k.ab.ca

From: Marriott Department

Subject: You have won Marriott Luxury Pillows 2-Piece Set

Content-Type: text/html

Mime-Version: 1.0

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: doctor! Unsubscribe 115 E 23rd St New York, NY, US 10010



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[5.181.2.206 listed in will-spam-for-food.eu.org]

[5.181.2.206 listed in will-spam-for-food.eu.org]

[5.181.2.206 listed in will-spam-for-food.eu.org]

[5.181.2.206 listed in will-spam-for-food.eu.org]

[5.181.2.206 listed in will-spam-for-food.eu.org]

[5.181.2.206 listed in will-spam-for-food.eu.org]

[5.181.2.206 listed in will-spam-for-food.eu.org]

[5.181.2.206 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[5.181.2.206 listed in dnsbl.ahbl.org]

[5.181.2.206 listed in dnsbl.ahbl.org]

[5.181.2.206 listed in dnsbl.ahbl.org]

[5.181.2.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[5.181.2.206 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[5.181.2.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[5.181.2.206 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[5.181.2.206 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX

1.4 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

Subject: {SPAM?} You have won Marriott Luxury Pillows 2-Piece Set











doctor!




























Unsubscribe


115 E 23rd St New York, NY, US 10010











Web/SEO/App Spam from Microsoft Outlook Part 2



































In-Reply-To:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PN2P287MB2122:EE_|PN3P287MB1020:EE_

x-ms-office365-filtering-correlation-id: f8cf9980-ecd0-48ec-72a1-08de68d5a485

x-microsoft-antispam:

BCL:0;ARA:14566002|48001999003|37102599003|31061999003|20031999003|39105399006|7071999006|19110799012|15030799006|15080799012|8062599012|8060799015|461199028|39145399003|40105399003|41105399003|35041999009|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?kt+L0414KGGtPLGVYotlG5m3v65fEH2sk2E/qx3sB2Eapc8ijb9enzT3?=

=?Windows-1252?Q?y9zglnywc6D+Zz8bdNWat5VSXINWhA7ptXbfbWgSG1ebq/VUPefU8xMi?=

=?Windows-1252?Q?wvVE5DctQ2kqSXRamZUyIQ5YRKGG+cIsTF89eWrK5/Lv+Mn28uhSxpL4?=

=?Windows-1252?Q?M6BwJCiiScpw7ILpHk0vUm3d3nKysI4mq7XFEV9CyHV2yJ6jBftT9/b9?=

=?Windows-1252?Q?5KY95Bz1RYNl9VfeV7Rrplkm3DWCRyF2M9RgYmK0HaPlHB4IvJcMyycL?=

=?Windows-1252?Q?+XmtNlCLANJYHeg+pV3ZaCbGuIPbf/YVYfU+m+MXPjIsBZcsmbLqlaZY?=

=?Windows-1252?Q?xB637EXmKzmi8rklpiatThpUMdlHxn93dTwoescPn90DE1QAM6fQnL82?=

=?Windows-1252?Q?aR2lSBYgXh0Pxm3un3s9kqas2vNi5M8VUiF4srL68AgPe2oz9//rA3gW?=

=?Windows-1252?Q?lilyH2M64GCHMAjiCWkklOcnmvWEAjbxG5A36YgcGfqK1wyJdbBwrVTO?=

=?Windows-1252?Q?egFBxvljAUPmaXG05/6vgvx2z6CF/Uz02Y9jN2s4AruGbgR4fmCiXPOs?=

=?Windows-1252?Q?/91lvygo0yXQycjGcPSYc8o+beA+ZhCvs3YFIVKhlUvq0Gj6XSl08yEK?=

=?Windows-1252?Q?ls1lCt0K9PfFC+lyxF9iRDqhXo62+GC3x6Xe2zKt6Q7QBbWXTe6z7V4I?=

=?Windows-1252?Q?hXfH6T8v8k/JJXBLc6pVSpeDn9Na95TFUVGhyO9Mk/+ZN9RyLocu5cDS?=

=?Windows-1252?Q?D1zGuU11Q2POXueHOshaaX5x+9PkfE5+h2j6A7D79+tmzWsyYYI5VnNl?=

=?Windows-1252?Q?GBc7GYXtiJLLI+5jMyct5XgFuLbJyytCU6F8KNjHuZJYoG8/yEbSgYbP?=

=?Windows-1252?Q?CTVYfIfZJtOWp8Oe5Gxo7lBxkleejRLGwPQjwHJ/KFDyVtV6OKNEAOxZ?=

=?Windows-1252?Q?QQK3zNEv/d7lw+72ZYbmsfPMSijTaLSidWkhedRIebirlH937vKqUvwS?=

=?Windows-1252?Q?8IlG+3DbhzhgOShymVTA/fsvsdo6YDljDirjWuVtvJVPYQG+ZoCRIxVh?=

=?Windows-1252?Q?OzNsBJQIIkkBscG/l4gS03VLky4PHypQKQ721bIFvlZTsg9oydCKlJ5J?=

=?Windows-1252?Q?57C3gcNi/u4/Kj7lwXz6Z9W4ujGY+UwyEiP6UdU6ezPC+Z8QpL+CTwxt?=

=?Windows-1252?Q?NysetE9TTVeUo/iVsrryiZv2gIVBSyZeHvSQgtH3a6y1DrbsuT8BDYAT?=

=?Windows-1252?Q?I8aV6Up5RuC/jmB8x+hYyGG1s2RVa69sUP4T08ozkCpQNK1CHVEaUhOy?=

=?Windows-1252?Q?ab6YesqFAvJhcck65jNlPUcEXuAppezoNTNiKTAyAukay3z76ZTBFXbq?=

=?Windows-1252?Q?TCYy69CCqW2h4GKZFkT8Z+sJ8RlP0RN7JbM4XFQA7AdeJL8vvRwBdS1j?=

=?Windows-1252?Q?UA7ikg7QXvb2T31I/y4p9GyJwu98AciF99lwsNz4SJZ/Hk6qZzuDVdgX?=

=?Windows-1252?Q?fjQpT7vRhUX9clHdO5tWWkoe8QpEzaptSJ6gGfd7rc1rE11O3zrB8uTp?=

=?Windows-1252?Q?gQvVP7CHMae1J12R?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?5eLrSS60U3r//39tEQ3+X9f51H6jnsQGXWzbLd7QdB/HjB+hxHnSW1g9?=

=?Windows-1252?Q?qouaICcsxPELeZcgWAsV5ZBPDwTWKHTus5KXs7NrnMZ/OJUm+qpJDvmA?=

=?Windows-1252?Q?8bM0InWDTJ2xPtj1xmAcLCYrgnsKkqNoWrleUBCrR2T+U4jeQyqokbkt?=

=?Windows-1252?Q?T4Nf0bZ93E6MBhmCVFQ4KJst5CameojJCp5oEQ06WwcRCEiw2bHkMSJ/?=

=?Windows-1252?Q?uzN4jbO92AOlVnQOo3N03e6T7bBxQRNP2hjLD00vxXEJ7Ugr+YkWvnTH?=

=?Windows-1252?Q?7yhqf6B3YURdBKnP+s5nC/jYQhYtskNDZ++dw47l6JHxFr3pm6agv8JU?=

=?Windows-1252?Q?xK4XLDX8fSSkn10XqMQJTNgOUiCOOMif6fXJ0/6lQbY21vB/B7Yhqfbm?=

=?Windows-1252?Q?BsfXiywkd6zuTxNzcwtvK44KIX5+4o2u+TlgpDvMAqBYiU3q7Q/xOOOt?=

=?Windows-1252?Q?dr3AL7PHCuLjWemSU2GHP3dy/0VjTWQMAehVHhBPeSOfq9yMFNPTFfnG?=

=?Windows-1252?Q?YuU/MX7JXrFLAQOxhN1zBD/k9+LlLrUMqhkW/CINxUX8Zn+mDpfo9Hfa?=

=?Windows-1252?Q?sPK/MV4C2Z7qWJ67qmMSg9HMcnOMUy4Aotl3BVaiQ0Z+8neK9VAe2JLl?=

=?Windows-1252?Q?EEx5AsgjPyrwVjyUXcEvcbN1pLlmL712NllprxliRJe8KjkJGu0TkkhM?=

=?Windows-1252?Q?eTeDipTGXiPJ+jHuEjAwXMPDelmL1HpKUPcv6EexPXVM3khCQ8VgWg42?=

=?Windows-1252?Q?cidvtqcxDXp64E03Xqo0tiZadtMYir3G3wJtaF5pBiF1njxB8Pm8nPb5?=

=?Windows-1252?Q?Z2fDODoFqix98/vboefnWfl7SDMNR91F72wGrX0Htukm6VO4yDiYTUxE?=

=?Windows-1252?Q?v8XtdgIxo3xedQRz7lYCQt4YQMh6dOhNpSLtIy6LKXpgpRNL1qc4zDo1?=

=?Windows-1252?Q?AsLRI5dEOLgDv9Llu127cF5FPWszNUFxtzoQi68Kk3orbaDH5Qu/aaic?=

=?Windows-1252?Q?O3lLZk4C/9IAXH4vew1vZa1KY4w9LKI6rSVI5/8qz9YrqYRIu54cXJ5/?=

=?Windows-1252?Q?c2mO/SA9k64idoeKQH3eT4NhXXhJbkwgTVow3lHPy1xrNDKDlwDlwFJF?=

=?Windows-1252?Q?qQk1S/BBG87UbIQI8IfKSmSvmSs15puqSrfYVAystjiLuP99gR34Jmhd?=

=?Windows-1252?Q?HYgq1S45ksJQU6OC1VwTpjCYnys/x2mmLFrx92lwyW0Pw5aq9IwBV107?=

=?Windows-1252?Q?kF0VxAgmTliPsq0PWThBjRdj8rgGtvQKQzoybRI1i8oUKnTzhMBQPI14?=

=?Windows-1252?Q?QRhqVI0sOI0GM9AE+gOc+tgueVvl73IDANki8yooJmYEa/Qq5NPW6YKz?=

=?Windows-1252?Q?VMf5CvV1aUmYDC6x54kho0scAo1Eom6cVMZGNnYz53acKEKdM0sFJ/bi?=

=?Windows-1252?Q?ctZ7ZApo40mhD8uSDY9TrLwqxJvIeus9bFiMSKNNwcZ9RFbUCDCAWMeY?=

=?Windows-1252?Q?gOr5C187igcXibim+jsrYa2OJiMG/Al8cwb5xc6AzS6YKjhfB5SIRptv?=

=?Windows-1252?Q?VsIEn7oQr83jar4I?=

Content-Type: multipart/alternative;

boundary="_000_PN2P287MB2122B7042B4D65A6AC29F57DB562APN2P287MB2122INDP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PN2P287MB2122.INDP287.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: f8cf9980-ecd0-48ec-72a1-08de68d5a485

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Feb 2026 18:53:13.0433

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PN3P287MB1020



--_000_PN2P287MB2122B7042B4D65A6AC29F57DB562APN2P287MB2122INDP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I sent you an email a few days ago. I didn't get any response back from you=

.



May I send you over those price list.



Thank you!

Web/SEO/App Spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Feb 2026 12:00:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vpsxT-00000000B2p-0nHR

for dave@doctor.nl2k.ab.ca;

Tue, 10 Feb 2026 11:59:35 -0700

Resent-From: The Doctor

Resent-Date: Tue, 10 Feb 2026 11:59:35 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-centralindiaazolkn19011024.outbound.protection.outlook.com ([52.103.68.24]:8479 helo=PNZPR01CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vpssg-00000000Ajx-3nbM

for root@nk.ca;

Tue, 10 Feb 2026 11:54:49 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=KKUWKCuFJcPw9T7BmQykTCiLIIe1EGESckJ02xAPnIpOPjCyFRAdEkYY6EvTvFYpGYQccqoEQy9tggqjhqCu7cvv93nzXi+1io21RyRyEL0yukiUja1kRrUY2Z1K+wGv5NmLauejmZBhvugLo2q6c/Ezgb+EJjCYJiCbc0ZmYqGqVcUVKGLSV+B/7Vlh7rFJsdcszU2KDRd1k/FHsauxkmZLfM9OBL30Q1UlgyuIbTTe8pE/wiAkJBU09UEYfiMU+p3iXWDFmDBUOL0A8YXk61DTmVExDwKXM4IfOFnk1XDR5T6iVF+J78eKGFcqynS8PHKySRBzIqcoHDBj07EkSQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=VY+HC4rmH0C2iRrhzJ9oc66mYgUTCMv9CMT63Awm1UM=;

b=MhHD2aNf0OzssNmkdcO5EmWv1qNgGo7pzHUialWUyTYa2uNPkuOPlTe/TTBrh25m8XOO5W7ezIRB9VQ5ioFIyAi3uLGkqvNCDe+NTR5SmsXoTocGO6U7PhaeDBow2Hyk/YF9/iNHK/Ul73e8ESZ/4bCVdum1Dh0EwrhQFgYDx7lyKu9fMgNQPBudD22ZyXtMDbNjU1MQNJ9Rw1ptFoBCfHLbpSQ2JoCsI1KrTb0S4HsLP9GhoOtHZn5/qi7V0MWZyctDV5MxBxDGUuPa79eubcGHr6tnsrYjIUNL2RGRE53GHIzx+QrNnoQ7bsMhdY6JftImNnp1op8nJ0jgcDMwFA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=VY+HC4rmH0C2iRrhzJ9oc66mYgUTCMv9CMT63Awm1UM=;

b=EFRzAYU97xWt1xFEbZZxXwMie5TDcTdBl8BcCaKJOmWy9L/mth0sMLQyL6HZrGWeojA6X4+373+DduNW8QQN83ib+l2SY0GWVklp5BLXOj0CMacIgsFmYeaHsehu/cMT3eLSo9Pt+Q/ExZK7pDhB8RmFDicXGK8r2q0MwktAPcYDSK6/vhX06bxUPoX89tpPDbkUa1Z6ms/w3QCJgRUjbWIaF/1ns4FgTzqcQcIt0fI9PEi6AMliixFZgwBxY2DfVMPE9NKXwsMLpzaldek2toEsdGYYgyQPoQHryD7sil+9ijWQw6QH5ZNI2ij/YMzPNEz0NevtVGl4W96W5jMvUw==

Received: from PN2P287MB2122.INDP287.PROD.OUTLOOK.COM (2603:1096:c01:1ca::12)

by PN3P287MB1020.INDP287.PROD.OUTLOOK.COM (2603:1096:c01:17c::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.8; Tue, 10 Feb

2026 18:53:13 +0000

Received: from PN2P287MB2122.INDP287.PROD.OUTLOOK.COM

([fe80::2e32:8774:260b:8d4f]) by PN2P287MB2122.INDP287.PROD.OUTLOOK.COM

([fe80::2e32:8774:260b:8d4f%4]) with mapi id 15.20.9611.006; Tue, 10 Feb 2026

18:53:13 +0000

From: Seo Gibson

To: Seo Gibson

Subject: Re: Send

Thread-Topic: Send

Thread-Index: AQHcl5hiOqP4GoHhHkK6hz4H7cGugbV2Aa4igAGWeTCAAY3LToABlV0+gAGScis=

Date: Tue, 10 Feb 2026 18:53:13 +0000

Message-ID:



References:



























































































































Coinbased phish from Google Gmail Part 3






background-color: transparent; border-collapse: collapse; padding: 0;">














style=3D"vertical-align: middle; padding: 10px 0; text-align: left; =

font-family: Arial, sans-serif; font-size: 25px; color: #333333; padding: =

0px;">

Invoice

style=3D"vertical-align: middle; padding: 10px 0; text-align: right; =

padding: 0px;">



36px;">k
style=3D"color: rgb(41, 105, 176);">Pay

172, 210);">Pal

255);">s



background-color: transparent; border-collapse: collapse; padding: 0;">












style=3D"padding: 5px 0; font-family: Arial, sans-serif; font-size: 14px; =

color: #333333;">Invoice Number: RDS73XSE
Date =

of Issue:
February 10,2026



background-color: transparent; border-collapse: collapse; padding: 0px; =

margin-top: 10px; margin-left: calc(0%);">














Arial, sans-serif; font-size: 14px; color: #333333; vertical-align: top; =

text-align: left;">Stripe=


2660 Monterey Rd,
San Jose, CA =

95111

USA  


padding: 5px 0; font-family: Arial, sans-serif; font-size: 14px; color: =

#333333; vertical-align: top; text-align: left;">Billed =

to


PayPal Stripe User



background-color: transparent; border-collapse: collapse; padding: 0; =

margin-top: 20px;">












sans-serif; font-size: 18px; color: #333333; text-align: =

left;">$657.99 USD due February 10,2026



border-collapse: collapse; padding: 0; margin-top: 20px;">












style=3D"padding: 5px 0; font-family: Arial, sans-serif; font-size: 16px; =

color: #333333; text-align: left;">YOU'VE SENT A PAYMENT OF =

$657.99 USD  TO COINBASE
, Times, serif;">CORPORATION



background-color: transparent; border-collapse: collapse; padding: 0;">
















font-family: Arial, sans-serif; font-size: 12px; color: #333333; =

text-align: left;">It may take a few =

moments for this transaction to appear in your statement.
Issues=

with this transaction?

If you have any questions about your =

order, please contact us within 12 hr by calling at 

style=3D"font-size: 17px;">
201);">+1 859-913-0940
.=




collapse; font-family: Arial, sans-serif; font-size: 14px; color: #333333; =

margin-top: 20px;">


































#333; padding-bottom: 5px;">Description

style=3D"text-align: center; border-bottom: 1px solid #333; padding-bottom:=

5px;">Qty

border-bottom: 1px solid #333; padding-bottom: 5px;">Unit price

solid #333; padding-bottom: 5px;">Amount
Btc Purchased 1 $657.99 USD $657.99 USD



collapse; font-family: Arial, sans-serif; font-size: 14px; color: =

#333333;">






























10px 0; border-bottom: 1px solid #ccc;">Subtotal

solid #ccc;">$657.99 USD

10px 0; border-bottom: 1px solid #ccc;">Total

style=3D"text-align: right; border-bottom: 1px solid #ccc;">$657.99 =

USD

10px 0; border-bottom: 1px solid #ccc;">Amount due

solid #ccc;">$657.99 USD



border-collapse: collapse; font-family: Arial, sans-serif; font-size: 12px;=

color: #333333; margin-top: 20px;" class=3D"fr-table-selection-hover">


















style=3D"padding: 10px 0; text-align: left; font-size: 13px; font-weight: =

bold;">Don’t recognize this =

transaction? Contact PayPal+1 859-913-0940 

style=3D"font-weight: normal; font-size: 17px;">For =

dispute/claim

font-size: 11px; color: #666666;">
14px;">Copyright © 1999-2025 PayPal, Inc. All rights reserved. PayPal =

is located at 2660 Monterey Rd,San Jose, CA 95111.










----_NmP-31af29c271b0ab28-Part_1--

Coinbased phish from Google Gmail Part 2

----_NmP-31af29c271b0ab28-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit















ppl



body

font-family: Arial, sans-serif;

background-color: #f9f6f4;

margin: 0;

padding: 0;





.header

max-width: 210mm;

margin: 10px auto;

background-color: #ffffff;

padding: 20px;

border-collapse: collapse;



















Invoice

kPayPals













Invoice Number: RDS73XSEDate of Issue: February 10,2026













Stripe2660 Monterey Rd,San Jose, CA 95111USA  

Billed toPayPal Stripe User













$657.99 USD due February 10,2026







----_NmP-31af29c271b0ab28-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




height:0px;max-width:0px;opacity:0;overflow:hidden;">Hey! Check this out...=

 ‌ ‌ ‌ ‌ ‌ ‌&nb=

sp;‌ ‌ ‌ ‌ ‌ ‌ =












content=3D"width=3Ddevice-width, initial-scale=3D1.0">

ppl



Coinbased phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Feb 2026 11:59:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vpswc-00000000B00-17Iz

for dave@doctor.nl2k.ab.ca;

Tue, 10 Feb 2026 11:58:42 -0700

Resent-From: The Doctor

Resent-Date: Tue, 10 Feb 2026 11:58:42 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f169.google.com ([209.85.214.169]:49583)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vprcl-000000004u3-2Kbq

for doctor@doctor.nl2k.ab.ca;

Tue, 10 Feb 2026 10:34:16 -0700

Received: by mail-pl1-f169.google.com with SMTP id d9443c01a7336-2aae146b604so18876165ad.3

for ; Tue, 10 Feb 2026 09:33:20 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cmdsantofagasta.cl; s=google; t=1770744794; x=1771349594; darn=doctor.nl2k.ab.ca;

h=mime-version:date:message-id:subject:reply-to:to:list-unsubscribe

:precedence:from:from:to:cc:subject:date:message-id:reply-to;

bh=WwrL/nR67gQHoJwD+Xzu2TuzOuU5o05Jzh440394BXc=;

b=f+3QPdlnFaMuMq+JtysgiiXFmdsDKQMUJEOWdnEav9bEvyY4fm5HesVV/kJQ0YzKBs

YLM0f6qqaoSRbktHyLFTPCA6qsr8Ih62nkXk8UjloAPMVeJ+tjZ3SpGBp9WUqtJz8dQX

bWEFzg8BfUqC1bz5nlUkBdVQl7gPyearS3GrFMkGzaIY23npMvK1y79E84EM1+5v2SVs

wQpPq5ScQd12u5iMXIyA/rRs9uF0IYTmVMkwCerGnmTpVLlPCU60tHd/MHSGjXIg7Gfq

tNfHDIXlkfLwpPqNtjDYVTkQqeUzkmVKuaPbCs1HowJDuiz2EHD1+grE55vRnga+xiFJ

Rb0w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770744794; x=1771349594;

h=mime-version:date:message-id:subject:reply-to:to:list-unsubscribe

:precedence:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=WwrL/nR67gQHoJwD+Xzu2TuzOuU5o05Jzh440394BXc=;

b=ppDzMlQAGlHwLK/GdA0ey98r8anOTBzRA2SHRPoMZGm2pwsXhHlGMAI+gMTMb2A09a

SSOUURjBDDCBLvsObacoWc/n7CtaomD37Wg6Vr0YfM3+XTFN4T8+Nb93o4d2akgQOyWf

et0EGIrEjkBgNrwkZ4Y1GsOn2d1seY6YMpfjRepORhQZBDkxcPreTmXpyxtBDM6wyEZv

FAc3qGbv5wyhaZrnNzv/f53I2Kl/SiuGvgDf6TF/kve/DGHrtlr9wERgecKnB++F3Lh/

iip6uW8GDbeF8NrtZEvXjmGWf7oeGGCdgNiQy/9JF7/qomsA2xy3GMa9cKJ8dtvwtJUK

C+1A==

X-Gm-Message-State: AOJu0YyCRRjlJB8l4v2F3UYfrl/UPraNHash/YFEc9UKb0u+elw5Awoe

2H8IY6gzzgCZmy/nG7tqAA+EyJQjUbGfoFliRT/C1sk333xUN1EDVaRrJNPGjosIEWZmnA+bIi0

GKgKq

X-Gm-Gg: AZuq6aIKo6F6iqB+mYrVZe4VztAe692pdUljXYq9yrAZmy4u3wERG9vNjeQB4YLyM/2

QKWYXG87wump/xJfrwh2k5rh6sLiyBEKovlRQZWWB9FTvq6Oz9I1FjPMiYuTBXmnyDR8y2U5LgU

QY2QEYvrE9ef7I0AFWs1Q/wbs6tJ4Q/UfA/JgElhji/QUBxllWITbmNzEaBkWTHag72y3gryUOt

bt4ZlG5E4kzdmFtOYe3xrBXN7SdM0egf/N/h7ESB1Aa4prGNhBIIj5mcotHvOpG6xrF6IYykoyV

1gF1xZoSrqxcxIuzj1yfVSuf1j89suG+dfyBNCoHaw7g53oDZjrY30itoFuZj8qIwWKrkqidXZv

PWB4FPAs4anzUTRFK0jE8K+f/tbLB3IZ1eIUMGGQxNW7uZaUSnz3lIYItSYCezB4JHIokImfxA8

Va2ljvw3akEQPV5g4uWdk3eOu9ePZYX6isAANHm2R1Avh/Kmcv+LgH

X-Received: by 2002:a17:902:e547:b0:2aa:d600:d03e with SMTP id d9443c01a7336-2ab105899c7mr35329345ad.18.1770744794239;

Tue, 10 Feb 2026 09:33:14 -0800 (PST)

Received: from [127.0.0.1] ([59.153.16.175])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2a9521f8cb6sm150405295ad.79.2026.02.10.09.33.12

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 10 Feb 2026 09:33:13 -0800 (PST)

From: Invoice PayPal

X-Google-Original-From: Invoice PayPal

X-Entity-ID: 1770744813792

Precedence: bulk

List-Unsubscribe:



X-Mailer: ThreadMailer v2 (Thread 24)

To: doctor@doctor.nl2k.ab.ca

Reply-To: Jasmine.Mills@cmdsantofagasta.cl

Subject: Good news! Your code G4S6ND is ready.

Message-ID: <2d8f8b5b-0043-f1a3-8d59-546a1805ee10@cmdsantofagasta.cl>

Date: Tue, 10 Feb 2026 17:33:09 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-31af29c271b0ab28-Part_1"

X-Spam_score: 13.1

X-Spam_score_int: 131

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ppl body font-family: Arial, sans-serif; background-color:

#f9f6f4; margin: 0; padding: 0;



Content analysis details: (13.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[59.153.16.175 listed in will-spam-for-food.eu.org]

[59.153.16.175 listed in will-spam-for-food.eu.org]

[59.153.16.175 listed in will-spam-for-food.eu.org]

[59.153.16.175 listed in will-spam-for-food.eu.org]

[59.153.16.175 listed in will-spam-for-food.eu.org]

[59.153.16.175 listed in will-spam-for-food.eu.org]

[59.153.16.175 listed in will-spam-for-food.eu.org]

[59.153.16.175 listed in will-spam-for-food.eu.org]

[209.85.214.169 listed in will-spam-for-food.eu.org]

[209.85.214.169 listed in will-spam-for-food.eu.org]

[209.85.214.169 listed in will-spam-for-food.eu.org]

[209.85.214.169 listed in will-spam-for-food.eu.org]

[209.85.214.169 listed in will-spam-for-food.eu.org]

[209.85.214.169 listed in will-spam-for-food.eu.org]

[209.85.214.169 listed in will-spam-for-food.eu.org]

[209.85.214.169 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.169 listed in dnsbl.ahbl.org]

[209.85.214.169 listed in dnsbl.ahbl.org]

[209.85.214.169 listed in dnsbl.ahbl.org]

[209.85.214.169 listed in dnsbl.ahbl.org]

[59.153.16.175 listed in dnsbl.ahbl.org]

[59.153.16.175 listed in dnsbl.ahbl.org]

[59.153.16.175 listed in dnsbl.ahbl.org]

[59.153.16.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.169 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.169 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.169 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.169 listed in list.dnswl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[59.153.16.175 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 J_CHICKENPOX_23 BODY: 2alpha-pock-3alpha

2.5 TVD_DOLLARS_US BODY: No description available.

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.169 listed in wl.mailspike.net]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Good news! Your code G4S6ND is ready.

Geek squad phish from Google Gmail Part 3



=20



=20



=20



=20



Geek squad phish from Google Gmail Part 4














/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Gwendolyn Scheidemantel: Dear Member, Transaction update details s=

tored"/>

a.org/Event">
entScheduled"/>
hema.org/Organization">
>

G3UKwjMmfh2w"/>
ine-height: 1px; height: 0; max-height: 0; width: 0; max-width: 0; opacity:=

0; overflow: hidden;" itemprop=3D"name">Dear Member, Transaction update de=

tails stored

spacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" =

class=3D"body-container">

">
 

"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width=

:100%;" class=3D"">
>

n itemscope itemtype=3D"http://schema.org/EmailMessage">


ription">Dear Member, Transaction update details stored


le=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"">
y>

: rtl; font-size: 0; padding: 24px 32px; text-align: left; vertical-align: =

top;" class=3D"main-container-inner"><=

div class=3D"" style=3D"font-size: 13px; text-align: left; direction: ltr; =

display: inline-block; vertical-align: top; width: 100%;overflow: hidden; w=

ord-wrap: break-word;">
"0" role=3D"presentation" width=3D"100%" class=3D"main-column-table-ltr" st=

yle=3D"padding-right: 32px; padding-left: 0;;table-layout: fixed;"><=

tr><=

/tr>=


d style=3D"font-size: 0; padding: 0; text-align: left; word-break: break-wo=

rd;;padding-bottom:24px;">

t-style: normal; font-weight: 400; font-size: 14px; line-height: 20px; lett=

er-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-=

text" role=3D"presentation">

able border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation"=

width=3D"100%" style=3D"table-layout: fixed;">

0; padding: 0; text-align: left; word-break: break-word;;padding-bottom:2px=

;">

t-weight: 400; font-size: 22px; line-height: 28px;color: #3c4043; text-deco=

ration: none;" class=3D"primary-text" role=3D"presentation">
=3D"name">Dear Member, Transaction update details stored

: break-word;;padding-bottom:24px;">

-serif;font-style: normal; font-weight: 400; font-size: 14px; line-height: =

20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=

=3D"primary-text" role=3D"presentation">Tuesday Feb 10,=

2026 =E2=8B=85 9:29pm (Eastern Time - New York)

word;;padding-bottom:24px;">

ont-style: normal; font-weight: 400; font-size: 14px; line-height: 20px; le=

tter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primar=

y-text" role=3D"presentation">

GeekSquad Transaction Date: Tue=

sday, 10 February 2026
Transaction No: RX40933BSX0278
Custome=

r Support Call
: 1(859) 312-3507

Me=

mbership updated for continued access

Dear Member
trong>,

Your membership renewal is queued for processing today with a=

charge of USD446.33.

Order Summary Screen
- Quan=

tity: 3x
- Product: Premium Core Plan
- Warranty Coverage: 48 Months<=

br>- Payment Status: Auto Debit
- Paid Amount: USD446.33
- Client ID:=

XL2LU5EP0X
- Activation Code: cea4ad18-caae-47e9-be09-2ba0827eefdb

<=

p>Auto-renewal applies annually unless cancelled at least 48 hours before r=

enewal.

For assistance, reach 1(859) 312-3507.

<=

p>Much appreciated,,
Geek Squad By Best Buy
Accounts head: James Mark=

eting
Assistance Phone Line: (865) 201-3278
Billing=

Team: 5701 El Camino Real Baytown Tx 77522 USA
Service Availability: 6 =

AM =E2=80=93 6 PM


"GeekSquad Transaction Date: Tuesday, 10 February 2026Transaction No: RX409=

33BSX0278Customer Support Call: 1(859) 312-3507Membership updated for cont=

inued accessDear Member,Your membership renewal is queued for processing to=

day with a charge of USD446.33.Order Summary Screen- Quantity: 3x- Product:=

Premium Core Plan- Warranty Coverage: 48 Months- Payment Status: Auto Debi=

t- Paid Amount: USD446.33- Client ID: XL2LU5EP0X- Activation Code: cea4ad18=

-caae-47e9-be09-2ba0827eefdbAuto-renewal applies annually unless cancelled =

at least 48 hours before renewal.For assistance, reach 1(859) 312-3507.Muc=

h appreciated,,Geek Squad By Best BuyAccounts head: James MarketingAssistan=

ce Phone Line: (865) 201-3278Billing Team: 5701 El Camino Real Baytown Tx =

77522 USAService Availability: 6 AM =E2=80=93 6 PM"/>

ng=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;">


lass=3D"primary-text" style=3D"font-size: 14px;color: #3c4043; text-decorat=

ion: none;font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; p=

adding: 0;">Guests

(Guest list has been hidden at org=

anizer's request)

--[if mso | IE]>
r>

--00000000000003649d064a783fe8--

Geek squad phish from Google Gmail Part 2