Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 05:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPfU3-000000007is-2TVn

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 05:53:07 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 May 2026 05:53:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f200.google.com ([209.85.214.200]:44218)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPfAl-00000000Mg9-02lp

for doctor@nl2k.ab.ca;

Wed, 20 May 2026 05:33:21 -0600

Received: by mail-pl1-f200.google.com with SMTP id d9443c01a7336-2bc7f9b2213so36218575ad.0

for ; Wed, 20 May 2026 04:32:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779276737; x=1779881537; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=RuFEez9I/rHYgiiTgreDZodrbhWAylhuPvwf8GLMqKA=;

b=F9GB2GM6YjMKhughxF+LO/1pd0hMA7L5gfOKfkMDGBJRQkLZZBoOs4yvShljAwjvem

kDw8FL6ISX+21S8IhYBZzZ1iduFujMfYVz8CRnf19T3vtHfwIKP3yZNi1tQIE6jrXIuA

SHQzcbBOVLIDjmqBj4q467Pgzg3qGXCZYJIhOluo1rHR7UFLRwjajimJmfiipBRcqib8

5BjtORyiSnAZvN2F4RQfiWGByLDnIb3LHUHbkVTmxkzWy5HiLD5kMMCo1qyTAN3AnYto

QEaIkznQwuGoBtR1e8mfHSL/EMD/qpEoYTEuCKDlx+NgTjSy4H03AJN/sH+CUShB5T21

JaaQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779276737; x=1779881537;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=RuFEez9I/rHYgiiTgreDZodrbhWAylhuPvwf8GLMqKA=;

b=clF9eqQIby4Ety0Sz+PksDCPGNeSab83bg7Xh+0Jp2Xd5CZWDUMFqkkPbVqgIvzQeK

8zEhDiQDHhc0o/YnzG+NKDAq9CRhjEwWBsbzcWCDWuCWAwAj5csbL/hm5x98OOWiak9D

AZqipp44PRAGqa5RXLXOUrVEUTbyP6Y3EWNnhuiM6jjaJTCbLKUrBcNEOqr5lAy7mIoN

/yedasPJ27sL3eD5DpAsARbHfZa6kqmv2oCJ3h2oOeOt9UE7yfKs8J/VUXeOVXEa0pTF

suSVmt/oKMhbBz1LVXJOalFDKXb9afqjKav6Hoa3R2kkh/V66niuBp8QinXuNkviy5zN

OWUQ==

X-Gm-Message-State: AOJu0YyM4bWi0HgjM/pcUxc4iygDIDOQNQkc4/3QtyYtF0PdnHVfdoby

5Yab/Szt/8QV7Oqlz6RGJthbd8mF/IkXFucqLAODzpJONPpaGsm6lrHL/qQHNpfu1xNDZPMqUiD

xz8M=

MIME-Version: 1.0

X-Received: by 2002:a17:903:1aad:b0:2b2:ebed:7afc with SMTP id

d9443c01a7336-2bd7e936549mr264180815ad.27.1779276737197; Wed, 20 May 2026

04:32:17 -0700 (PDT)

Message-ID:

Date: Wed, 20 May 2026 11:32:17 +0000

Subject: Packages at cost which is much lower

From: habsksnoskdksbs@gmail.com

To: doctor@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000e0ba6e06523e259e"

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello doctor@nl2k.ab.ca, I am reaching out to you to provide

a little help with your website's interface. I am a professional web designer

with over 10 years of experience and I can do just about anything you can

imagine, and [...]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.200 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[habsksnoskdksbs(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.200 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.200 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Packages at cost which is much lower



--000000000000e0ba6e06523e259e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hello doctor@nl2k.ab.ca,



I am reaching out to you to provide a little help with your website's

interface. I am a professional web designer with over 10 years of

experience and I can do just about anything you can imagine, and do it all

for an easily affordable price.



If you are interested in any website to Renovation, re-design and

development? I will forward you our website design (Prices/ past work

/Sample)



Thanks,

Business Development Manager



--000000000000e0ba6e06523e259e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello doctor@nl2k.ab.ca,

I am reaching out to you to provide a litt=

le help with your website's interface. I am a professional web designer wit=

h over 10 years of experience and I can do just about anything you can imag=

ine, and do it all for an easily affordable price.

If you are intere=

sted in any website to Renovation, re-design and development? I will forwar=

d you our website design (Prices/ past work /Sample)

Thanks,
Busi=

ness Development Manager

--000000000000e0ba6e06523e259e--

WEb/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 05:34:00 -0600

Received: from mail-pl1-f198.google.com ([209.85.214.198]:44209)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPfAi-00000000Mfv-0HfX

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 05:33:17 -0600

Received: by mail-pl1-f198.google.com with SMTP id d9443c01a7336-2bc7f9b2213so36218025ad.0

for ; Wed, 20 May 2026 04:32:20 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779276734; x=1779881534; darn=doctor.nl2k.ab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=RbR2qUkEOaAP1zPbP2n46EyguBjmzqhF7rUo9wYxILM=;

b=JLmfntRqZEXf8mZSclMGQ4yey9rntchgqpnokriOYRFKp2li+Atp02RE07+UxP8DyD

n2Up+D4IoMmm4bTAiERiHaIOe7cUKDnSSMKHoInR0H0m5t9V57DiAXw6Xa5A/1+mVe9W

H42m/ZwSFuCjK1oYhZOv5WiPzo8GhUEsxlHIaftcqxA/MJXpI5rhEeGOh3V1rYThYewy

9c10lztVEgiWzW3BbLwYnk61oDZqjKanU1UP1ltmr3vWu/04vqo4T2KTq9TVJJ8Vf2fl

k+Xvo0ZsQLvgwcgcRXngqB2KDIlWhPUllX45ybR9IjV9DBUhpsdmF1o5PW73CHc5oF69

KPFw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779276734; x=1779881534;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=RbR2qUkEOaAP1zPbP2n46EyguBjmzqhF7rUo9wYxILM=;

b=tLY2ag0dF/8oKURSc6XBGzJ3XEYExUrHY5loYfvITJclmqjVBpNADnCIwyaecbRHEJ

8zzBUm/vl+Yx5A3Q+Ly+52SI3gPc7MMFQA/WA7uYSVUCCOMPAv7oC6GBLbsOlaVe31+0

WM+5HnNID1xSaPNVb2VL46VrPHKx/d9ccNLRvUxgI4UQqe8Nwvi+5ebD9otlG2TifNyu

oQPGawDA/f++Zg+GqqAJkQ6ObpvxHoJU0s4K1BHVnBZWLbqv/bfWCrjfk1cwNOGvzH0w

ChHBbdOQHaXzhCG7Cp2U6DvujJroB0kxd0G+7wQk+IoSnXo0jHlilK44KsH5UXmoRgTW

sasw==

X-Gm-Message-State: AOJu0YwVDZFubCBmfk2XEG6QNwNbOBwsDPFC4MEaTFKdo1/yb+NPw/r7

NvO/1WbvmeTnlkrV+5boQhKCrY+hOxXfWbHeVM4VlCl/yClPbUT5aW7zwsGGOPG2GBWHI2mtgfG

hg/k=

MIME-Version: 1.0

X-Received: by 2002:a17:902:ea0b:b0:2bd:ab38:d6ae with SMTP id

d9443c01a7336-2bdab38d79emr186133135ad.6.1779276734228; Wed, 20 May 2026

04:32:14 -0700 (PDT)

Message-ID:

Date: Wed, 20 May 2026 11:32:14 +0000

Subject: Packages at cost which is much lower

From: habsksnoskdksbs@gmail.com

To: dave@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000b37bf306523e2505"

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello dave@doctor.nl2k.ab.ca, I am reaching out to you to

provide a little help with your website's interface. I am a professional web

designer with over 10 years of experience and I can do just about anything

you can imagine, and [...]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.198 listed in list.dnswl.org]

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[habsksnoskdksbs(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.198 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.198 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Packages at cost which is much lower



--000000000000b37bf306523e2505

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hello dave@doctor.nl2k.ab.ca,



I am reaching out to you to provide a little help with your website's

interface. I am a professional web designer with over 10 years of

experience and I can do just about anything you can imagine, and do it all

for an easily affordable price.



If you are interested in any website to Renovation, re-design and

development? I will forward you our website design (Prices/ past work

/Sample)



Thanks,

Business Development Manager



--000000000000b37bf306523e2505

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello dave@doctor.nl2k.ab.ca,

I am reaching out to you to provide a=

little help with your website's interface. I am a professional web designe=

r with over 10 years of experience and I can do just about anything you can=

imagine, and do it all for an easily affordable price.

If you are i=

nterested in any website to Renovation, re-design and development? I will f=

orward you our website design (Prices/ past work /Sample)

Thanks,
>Business Development Manager

--000000000000b37bf306523e2505--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 05:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPfTz-000000007Wv-2YEQ

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 05:53:03 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 May 2026 05:53:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f199.google.com ([209.85.214.199]:48265)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPfAh-00000000Mfp-0efG

for doctor@doctor.nl2k.ab.ca;

Wed, 20 May 2026 05:33:16 -0600

Received: by mail-pl1-f199.google.com with SMTP id d9443c01a7336-2b9fe2d6793so114072565ad.0

for ; Wed, 20 May 2026 04:32:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779276733; x=1779881533; darn=doctor.nl2k.ab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=sue86ID4rtnDXsxkXkNxQ8x6wJzny8Is+JOH+9q63N4=;

b=YTmvuwifxdBI3zt2fzk7j1bzxPeJpGiRjzaf5DAnBxfpDACUMmSbacNq6WU1zYjUzK

tXXkxzgXIbplpvqX26bBWRUaY9ag9MfBRvPtFIBqkg1ZiKN9PP0d2SrnkEv8odY2sEFN

Wa8siTkkUkXlVzbNMkkT7TZ99VPYbywO5rYoKPPmUD/lVVqPCkIBleL56lqYk09pe3ib

WGqktwOd0x4WmzFBH13Ywtj4908iXyaVIqrf34RNzEBZ0hFDWJ4WCjKpXn+6Nlp9CJVw

ZUlXGmF3ccnw89+I2/kvGBvAFVAlJr8tiWjOy1QTFun4g0rbyMRK1tLiL4hO934y64YW

9g4w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779276733; x=1779881533;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=sue86ID4rtnDXsxkXkNxQ8x6wJzny8Is+JOH+9q63N4=;

b=BtT0KRjVLkqZJ5FHKPBkbPdVXo2unOVtAZfy7D1RU3hRFM/UC0wT1GKmqh3bwHyJ2o

ZyDdcZ4hRyEYX/J/AxjrdM+fKme1wG0TYEXCxGRa9Via/QJTW5OjtZEHxiemNM239gMq

6azd9VqUUXLximg2J9XRaqvvy42T3vSnBKaq3sFM+q+tvtTUgwKQbarI8m4Uhqf74zfP

RCPYjrTKGg2sY74gOjjAhslROrUIMTdlla0HCjJ4o9+rzuc7ZHnrt1GcztJoaOT7ASqD

CwETbA7Hom9gY/eJ96OvuMJ7amLPrTZ3ISEwxxTzs6m3m3Syt1HsynKhzdfTxcLsmKz5

Q8ew==

X-Gm-Message-State: AOJu0YwJR63q/us0bpZfaClPbSvLul/rXNpqrpOV9cQ17Ek1TdEd+vzw

xLw85ekGSVUXym02IGGG1/IY3dqOvClMNPsRJnbq8uS1EgwZQITRKuwIdMzSwa4+QEMcVuJTuac

+exY=

MIME-Version: 1.0

X-Received: by 2002:a17:902:f38e:b0:2b2:4d36:7aa with SMTP id

d9443c01a7336-2bd7e8cbc80mr198592925ad.35.1779276733364; Wed, 20 May 2026

04:32:13 -0700 (PDT)

Message-ID:

Date: Wed, 20 May 2026 11:32:13 +0000

Subject: Packages at cost which is much lower

From: habsksnoskdksbs@gmail.com

To: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000a63e1206523e2596"

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello doctor@doctor.nl2k.ab.ca, I am reaching out to you to

provide a little help with your website's interface. I am a professional

web designer with over 10 years of experience and I can do just about anything

you can imagine, and [...]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.199 listed in dnsbl.ahbl.org]

[209.85.214.199 listed in dnsbl.ahbl.org]

[209.85.214.199 listed in dnsbl.ahbl.org]

[209.85.214.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.199 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.199 listed in will-spam-for-food.eu.org]

[209.85.214.199 listed in will-spam-for-food.eu.org]

[209.85.214.199 listed in will-spam-for-food.eu.org]

[209.85.214.199 listed in will-spam-for-food.eu.org]

[209.85.214.199 listed in will-spam-for-food.eu.org]

[209.85.214.199 listed in will-spam-for-food.eu.org]

[209.85.214.199 listed in will-spam-for-food.eu.org]

[209.85.214.199 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.199 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.199 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.199 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[habsksnoskdksbs(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Packages at cost which is much lower



--000000000000a63e1206523e2596

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hello doctor@doctor.nl2k.ab.ca,



I am reaching out to you to provide a little help with your website's

interface. I am a professional web designer with over 10 years of

experience and I can do just about anything you can imagine, and do it all

for an easily affordable price.



If you are interested in any website to Renovation, re-design and

development? I will forward you our website design (Prices/ past work

/Sample)



Thanks,

Business Development Manager



--000000000000a63e1206523e2596

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello doctor@doctor.nl2k.ab.ca,

I am reaching out to you to provide=

a little help with your website's interface. I am a professional web desig=

ner with over 10 years of experience and I can do just about anything you c=

an imagine, and do it all for an easily affordable price.

If you are=

interested in any website to Renovation, re-design and development? I will=

forward you our website design (Prices/ past work /Sample)

Thanks,<=

br>Business Development Manager

--000000000000a63e1206523e2596--

Turkish spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 05:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPfRE-00000000OjD-0Hbx

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 05:50:12 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 May 2026 05:50:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f45.google.com ([209.85.208.45]:44391)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPZ4W-00000000Eur-3IR5

for sales@nk.ca;

Tue, 19 May 2026 23:02:46 -0600

Received: by mail-ed1-f45.google.com with SMTP id 4fb4d7f45d1cf-6804e24803bso9922105a12.1

for ; Tue, 19 May 2026 22:00:46 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1779253239; cv=none;

d=google.com; s=arc-20240605;

b=J+3lCoeMoO/NqqCIsYyOfB666dmzbDSFIAgMsOQbk6gNkK20peZV4wfqsuRwCfphn5

aDL5k83opZp5gpktQjIEM5ZKDaaIUiiwAcy4CvVJQqQmQBjJOpM7nPixlBr577wCQa2h

GVBNx0bVDgr7uZLsr+7LP2zyK5733Rkw/eHmIGM3oicw6xbYxMN4ixqO2vDI4ApWcGK8

D/fgcPNdzenq16rJGADIlO6jwGOMLAw1wDGbWSWtmh6oa0dCfEcNWplk4igd2gwZRiEU

oPSLIFznVa52Bbnwy2V+8l7Vm1nMtOJiGWNFS3uzCHDS41/NOxj1FbKArJ0Ox0qq3m7q

pjWA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=DqlRRqLQW5/Vr03Wd6Vp5Ws+H1xtUXZHWtbB+HK3RfM=;

fh=SYJnbN52YPzUgld/JRH92FzAYsHswwg9CtZCQnDfUgE=;

b=BJXQwDKebT+s9G5IVvfcvHpiASfNtxPOHyEu1hIHTlKUzHUpzoILW6SlCGzoiK4KB7

MqTsq4fgMyfVTmoK+LIebx9lqNPXuR5M7Gw4qi9UguzRcHzqrqDKPtvDqBgLZ2E885CE

UQBMa3L9ZbDvUtOY3tRBrsShkxVwk9St6cc0rW+bsoM1zPPBiLSUxcq5JTy0u+pfZGux

bUoWAkD+G6m6rdyrgkC2CrviUKaK+Y7gBT7fmkM/+gy03e2mI0BrTr5osl9J1iP7J9M4

2LiK0AqSKwNaanUMtjGv5fppTEgf5t50T82RyMUy1ETcm7U7Rvli9l9Iaf+wsJxF2C9/

vc2Q==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=partner.remusenerji.com; s=google; t=1779253239; x=1779858039; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=DqlRRqLQW5/Vr03Wd6Vp5Ws+H1xtUXZHWtbB+HK3RfM=;

b=UdTRhdmYM4r/Ik/llJmeGCbqZqNSMJP0on9JxOv/nwsfVo7920lOSk7sIizk+aBFAW

xQcjI9kKAVE7XofU50bH8nums4XK7uAxCWhniIkgwuFDUoOnLJCPkeEkYlpMwMHdCJFB

uAMfezt3XjxnEg0RObUT/9Nf+tldT8scZJzJwUngcJNjMZVRPdIzNXRos41qyzkh8phy

L5bQDFc3eky40MZzUHKSaqAJxP61ibjMzOldmI0RWG/wBlLrfUFHba7bpRa65bEfGyKK

DP1eligh8g0RuOGKELMnbNGh+vfOHx78YYKhF8rN0wkzGc2VC4kmms32Vo/MT2q3PQ3o

o7dQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779253239; x=1779858039;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=DqlRRqLQW5/Vr03Wd6Vp5Ws+H1xtUXZHWtbB+HK3RfM=;

b=RtNbuvIdthKzurRkz/fzGMbN2GYcLhUsZjrzKHWYtl85cd//2/drCga7OLTiVOA4cH

4VIDu/V9GOZOpAn/Z/jeU1g9Xd2UN8/4T2z8szYL8b+ThJ9rkxyMesi28CMv9574YryV

5cq482vK25a2gzNFPITsZtbI5kRAQzCT4lnqFsgDOCHOdkOZoKY9XvhoCNLb4mr+Nu4B

SzPgDTMkz4/7NEWnCtjTXCbXeXBEr4LHgy7pyzcT7ohe3Dd866HSLdwOXFjMcWZX/GYN

g7ETiwGuCihcB+SiHHLOpruIG/Q8ked3W69fdhZR2nr1p6agY5kW17QqXiMSk/GO8oN4

F4vg==

X-Forwarded-Encrypted: i=1; AFNElJ+Iquq9ovCBLuDS1Z3ZBSE+AMINSK/FCGmiMwdIGKkXagQcAJA/uXtFKhpke9IDG67tg08UTg==@nk.ca

X-Gm-Message-State: AOJu0YyKpkADiprQmnkd920W9G5vI9w+l/mXDvUNQ/EBt91st3O+8F0T

B5YUttOuL6HQuoVYPhQzyyxNBrpoR+8KDuBewdpWGzbt9Me3H0prkc+ONmOhVxB2kUi3zi+TXRe

TGqRtEH+Z82dF1BgXbchZEZWWZUe0gur6ghka2nEHVg==

X-Gm-Gg: Acq92OFTlHzoDsJrmvRpZ5k8O22w3HgMk2B/U/1jFWGs9OnYNDpGNLPJdNZXwzqxH8O

Lbv8UpJ6LpEySTwzXHf2JzsKooHMpYv5yA000vDLyikUP4xCkRTSy/NJ0fD6wB7cDyI+MbJ1fB5

TJ5zrpj8d82c5WlJqTvVYWIKXeYH3ihePu8+5ThBZtEz7FFdfQL32XxkH965kWmPh30jLfr1FpU

dPTsQxLBtJ71mTu7Av8nBzpelH3B5ZuZgi0u0SocUBua5x6K6ZpFrv+yhhFmeXsY1jWtLIegtTL

IXojhTpRnQ==

X-Received: by 2002:aa7:d6cc:0:b0:67b:4e46:f13c with SMTP id

4fb4d7f45d1cf-683bd5812e7mr9831275a12.23.1779253237256; Tue, 19 May 2026

22:00:37 -0700 (PDT)

MIME-Version: 1.0

From: =?UTF-8?Q?Furkan_=C3=96zbay?=

Date: Wed, 20 May 2026 08:00:00 +0300

X-Gm-Features: AVHnY4IleabA-FOYoDiWlINhfjr8u5yWhYUUDqlvo1gGcR8KE7qPNqN-gRB9h2s

Message-ID:

Subject: =?UTF-8?Q?Elektrik_Faturan=C4=B1z=C4=B1_Kesin_Olarak_Azalt=C4=B1yoruz?=

To: undisclosed-recipients:;

Content-Type: multipart/mixed; boundary="0000000000002cd199065238ad5b"

Bcc: sales@nk.ca



--0000000000002cd199065238ad5b

Content-Type: multipart/alternative; boundary="0000000000002cd197065238ad59"



--0000000000002cd197065238ad59

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Say=C4=B1n Yetkili,



Artan enerji maliyetleri i=C5=9Fletmeler i=C3=A7in =C3=B6nemli bir y=C3=BCk=

haline gelirken,

do=C4=9Fru y=C3=B6netim ve do=C4=9Fru tedarik=C3=A7i ile bu maliyetleri kes=

in olarak d=C3=BC=C5=9F=C3=BCrmek

m=C3=BCmk=C3=BCnd=C3=BCr.



Remus Enerji olarak, i=C5=9Fletmelerin elektrik giderlerini somut ve =C3=B6=

l=C3=A7=C3=BClebilir

=C5=9Fekilde azalt=C4=B1yoruz. Geli=C5=9Ftirdi=C4=9Fimiz sistemler ve sundu=

=C4=9Fumuz =C3=B6zel tarifeler

sayesinde:



=E2=80=A2 Elektrik maliyetlerinizi net =C5=9Fekilde d=C3=BC=C5=9F=C3=BCr=C3=

=BCyoruz,

=E2=80=A2 %100 ye=C5=9Fil enerji ile s=C3=BCrd=C3=BCr=C3=BClebilir ve avant=

ajl=C4=B1 tedarik sa=C4=9Fl=C4=B1yoruz,

=E2=80=A2 T=C3=BCketiminizi anl=C4=B1k olarak izleyip gereksiz harcamalar=

=C4=B1 ortadan

kald=C4=B1r=C4=B1yoruz,

=E2=80=A2 Fatura y=C3=B6netiminizi sadele=C5=9Ftirerek operasyonel y=C3=BCk=

=C3=BCn=C3=BCz=C3=BC azalt=C4=B1yoruz.



Yapay zek=C3=A2 destekli altyap=C4=B1m=C4=B1z, piyasadaki en uygun fiyatlar=

=C4=B1 anl=C4=B1k analiz

ederek sizi her zaman avantajl=C4=B1 konumda tutar. Ayr=C4=B1ca anla=C5=9Fm=

al=C4=B1 bankalar

=C3=BCzerinden faizsiz ve komisyonsuz kredi kart=C4=B1 =C3=B6deme imk=C3=A2=

n=C4=B1 ve =C3=BCcretsiz

enerji verimlili=C4=9Fi uygulamam=C4=B1z ile tasarrufunuzu garanti alt=C4=

=B1na al=C4=B1yoruz.



Mevcut m=C3=BC=C5=9Fterilerimizde sa=C4=9Flad=C4=B1=C4=9F=C4=B1m=C4=B1z mal=

iyet d=C3=BC=C5=9F=C3=BC=C5=9Flerini, sizin

i=C5=9Fletmenizde de k=C4=B1sa s=C3=BCrede ger=C3=A7ekle=C5=9Ftirebiliriz.



Sizin i=C3=A7in en uygun enerji =C3=A7=C3=B6z=C3=BCm=C3=BCn=C3=BC birlikte =

belirleyelim.

Son iki d=C3=B6nem elektrik faturan=C4=B1z ve OSOS/OSF verilerinizi payla=

=C5=9Fman=C4=B1z

halinde, tamamen =C3=BCcretsiz analiz ve tasarruf raporunuzu hemen sunal=C4=

=B1m.



G=C3=B6r=C3=BC=C5=9Fmek dile=C4=9Fiyle,

Furkan =C3=96zbay **| Energy Advisor

Bar=C4=B1=C5=9F SB Mah. 5003 Sk. Marmara Teknokent

Teksen Kadir Has Binas=C4=B1 =C4=B0=C3=A7 Kap=C4=B1 No: Z02 Gebze / Kocaeli

M. 0537 479 5882

www.remusenerji.com

Chinese productus spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 19 May 2026 22:18:00 -0600

Received: from out0-9.static.mail.aliyun.com ([59.82.0.9]:46598)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPYMd-00000000Asl-1L8K

for dave@nk.ca;

Tue, 19 May 2026 22:17:09 -0600

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.820976|0.8687738;BR=01201311R331S78rulernew999_84748_200303;CH=yellow;DM=|SPAM|false|;DS=CONTINUE|ham_enroll_verification|0.320851-0.0326569-0.646492;FP=11091204362087923948|0|0|0|0|-1|-1|-1;HT=maildocker-contentspam033037028158;MF=ludy-lu@qyr-globaldata.com;NM=1;PH=DS;RN=1;RT=1;SR=0;TI=SMTPD_---.hbcldKf_1779250504;

Received: from localhost(mailfrom:ludy-lu@qyr-globaldata.com fp:SMTPD_---.hbcldKf_1779250504 cluster:ay29)

by smtp.aliyun-inc.com;

Wed, 20 May 2026 12:15:04 +0800

Mime-Version: 1.0

Date: Wed, 20 May 2026 12:15:04 +0800

X-Sender-ID: 295

From: Ludy

To: dave@nk.ca

Subject: =?UTF-8?q?=E8=A1=8C=E4=B8=9A=E7=8E=B0=E7=8A=B6=E4=B8=8E=E9=A2=84=E6=B5=8B?=

=?UTF-8?q?=E6=B4=9E=E5=AF=9F__Global_Semiconductor_Inspection_Equipment_T?=

=?UTF-8?q?rends_to_Watch_Out_for_From_2026_Onwards?=

X-Mailer: winmarketresearch/LuBrucedy.3.1.1.Ludy[ludy-lu@qyr-globaldata]

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello. My name is Ludy and here is a new report on Semiconductor

Inspection Equipment 2026. Please feel free to contact me if you would like

to get a quote or receive a sample.



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[59.82.0.9 listed in dnsbl.ahbl.org]

[59.82.0.9 listed in dnsbl.ahbl.org]

[59.82.0.9 listed in dnsbl.ahbl.org]

[59.82.0.9 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[59.82.0.9 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[59.82.0.9 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[59.82.0.9 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[59.82.0.9 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[59.82.0.9 listed in will-spam-for-food.eu.org]

[59.82.0.9 listed in will-spam-for-food.eu.org]

[59.82.0.9 listed in will-spam-for-food.eu.org]

[59.82.0.9 listed in will-spam-for-food.eu.org]

[59.82.0.9 listed in will-spam-for-food.eu.org]

[59.82.0.9 listed in will-spam-for-food.eu.org]

[59.82.0.9 listed in will-spam-for-food.eu.org]

[59.82.0.9 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[59.82.0.9 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[59.82.0.9 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or

Generic rPTR

0.1 TW_KY BODY: Odd Letter Triples with KY

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

3.7 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope

Subject: {SPAM?} =?UTF-8?q?=E8=A1=8C=E4=B8=9A=E7=8E=B0=E7=8A=B6=E4=B8=8E=E9=A2=84=E6=B5=8B?=

=?UTF-8?q?=E6=B4=9E=E5=AF=9F__Global_Semiconductor_Inspection_Equipment_T?=

=?UTF-8?q?rends_to_Watch_Out_for_From_2026_Onwards?=



Hello.

My name is Ludy and here is a new report on Semicon=

ductor Inspection Equipment 2026. Please feel free to contact me i=

f you would like to get a quote or receive a sample.

By Comp=

any:

   1. KLA Corporation
p>

   2. Applied Materials

 &n=

bsp; 3. Hitachi High-Technologies

  &=

nbsp;4. ASML

   5. Onto Innov=

ation

   6. Lasertec

&=

nbsp;  7. SCREEN Semiconductor Solutions

&=

nbsp;  8. ZEISS

   9.
ng>Camtek

   10. Skyverse
>

   11. Toray Engineering

 &n=

bsp; 12. RSIC

   13. Pre=

cision Measurement

   14. Microtronic=

   15. Unity=C2=A0Semiconductor=C2=

=A0SAS

   16. SMEE

&nb=

sp;  17. TZTEKMuetec

   18.=

DJEL

   19. MZSemi<=

/p>

   20. GOVION

   =

;21. VPTek

   22. YUWEITEK
trong>

.....

If you are interested in gett=

ing a PDF sample report or placing an order, please feel free to con=

tact Ludy@qyresearch.com

Maybe it will =

be helpful to the marketing department or the person in charge of your comp=

any. We would be grateful if you could forward it.

In addition, the =

latest reports contain the impact of the latest US tariff policy on global =

supply chain.

Thank you for taking the time to review this. I =

look forward to your prompt reply.

Best Regards,

ue'>Ludy


Email: Ludy@qyresearch.com
Phone: +86-135030=

65185 (WeChat)
Tel: +86-20-85206863 (CN)
USA Office: 17890 Castleton =

Street Suite 369 City of Industry CA 91748 United States
China Office: V=

ILI International Building No.167 Tianhe District Guangzhou City China



Show pass psam from Google Gmail Part 2

Posted by Dave Yadallee on


--00000000000018f402065233e2be

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=3D"gmail_signature" data-smartmail=3D"gmail_signature">

class=3D"MsoNormal" style=3D"margin:0in;line-height:normal;background-imag=

e:initial;background-position:initial;background-repeat:initial;font-size:1=

1pt;font-family:Aptos,sans-serif">
if;color:rgb(13,13,13)">Hi,






ckground-image:initial;background-position:initial;background-repeat:initia=

l;font-size:11pt;font-family:Aptos,sans-serif">
rial,sans-serif;color:rgb(13,13,13)">We=E2=80=99ve compiled a database of i=

ndustry professionals and

business contacts associated with
l,sans-serif;color:rgb(11,48,65);background:yellow">Queensland

Caravan & Camping Supershow 2026
rial,sans-serif;color:rgb(13,13,13);background:yellow">,
=3D"font-family:Arial,sans-serif;color:rgb(13,13,13)">


=3D"MsoNormal" style=3D"margin:0in;line-height:normal;background-image:init=

ial;background-position:initial;background-repeat:initial;font-size:11pt;fo=

nt-family:Aptos,sans-serif">
or:rgb(13,13,13)">taking place in Brisbane,=C2=A0Australia on 03 - 07 Jun

2026.


al;background-image:initial;background-position:initial;background-repeat:i=

nitial;font-size:11pt;font-family:Aptos,sans-serif">
ily:Arial,sans-serif;color:rgb(13,13,13)">=C2=A0


ormal" style=3D"margin:0in;line-height:normal;background-image:initial;back=

ground-position:initial;background-repeat:initial;font-size:11pt;font-famil=

y:Aptos,sans-serif">
3,13,13)">The database may be useful for companies interested in:
>


mage:initial;background-position:initial;background-repeat:initial;font-siz=

e:11pt;font-family:Aptos,sans-serif">
serif;color:rgb(13,13,13)">


=C2=A0=C2=A0=C2=A0=C2=A0 =E2=80=A2=C2=A0

=C2=A0Business development


=C2=A0=C2=A0=C2=A0=C2=A0 =E2=80=A2=C2=A0

=C2=A0Industry outreach


=C2=A0=C2=A0=C2=A0=C2=A0 =E2=80=A2=C2=A0

=C2=A0Marketing campaigns


=C2=A0=C2=A0=C2=A0=C2=A0 =E2=80=A2 =C2=A0=C2=A0Partnership opportunities
>

=C2=A0=C2=A0=C2=A0=C2=A0 =E2=80=A2=C2=A0

=C2=A0Expand professional networks






ckground-image:initial;background-position:initial;background-repeat:initia=

l;font-size:11pt;font-family:Aptos,sans-serif">
rial,sans-serif;color:rgb(13,13,13)">Available data fields include:






ckground-image:initial;background-position:initial;background-repeat:initia=

l;font-size:11pt;font-family:Aptos,sans-serif">
y:Arial,sans-serif;color:rgb(13,13,13)">Contact Name, Email Address, Compan=

y=C2=A0Name,

URL/Website, Phone No, Title/Designation.


al" style=3D"margin:0in;line-height:normal;background-image:initial;backgro=

und-position:initial;background-repeat:initial;font-size:11pt;font-family:A=

ptos,sans-serif">
3,13)">=C2=A0


ght:normal;background-image:initial;background-position:initial;background-=

repeat:initial;font-size:11pt;font-family:Aptos,sans-serif">
=3D"font-family:Arial,sans-serif;color:rgb(11,48,65);background:yellow">App=

roximate records available: 15,628
Arial,sans-serif;color:rgb(11,48,65)">


style=3D"margin:0in;line-height:normal;background-image:initial;background=

-position:initial;background-repeat:initial;font-size:11pt;font-family:Apto=

s,sans-serif">
3)">=C2=A0=C2=A0


10pt;line-height:115%;font-size:11pt;font-family:Aptos,sans-serif">
yle=3D"font-family:Arial,sans-serif;color:rgb(13,13,13)">If interested, ple=

ase reply with:


    pe=3D"disc">


  • line-height:115%;font-size:11pt;font-family:Aptos,sans-serif">
    e=3D"font-family:Arial,sans-serif;color:rgb(11,48,65);background:yellow">
    pan style=3D"color:windowtext">I=E2=80=99m

    Interested =E2=80=93 Send pricing & details
    pan style=3D"font-family:Arial,sans-serif;color:rgb(11,48,65)">    <=

    /li>


  • ht:115%;font-size:11pt;font-family:Aptos,sans-serif">
    mily:Arial,sans-serif;color:rgb(13,13,13)">
    >Not

    Interested



nd-image:initial;background-position:initial;background-repeat:initial;font=

-size:11pt;font-family:Aptos,sans-serif">
ans-serif;color:rgb(13,13,13)">I=E2=80=99d be happy to share additional inf=

ormation and pricing.


line-height:normal;background-image:initial;background-position:initial;bac=

kground-repeat:initial;font-size:11pt;font-family:Aptos,sans-serif">
tyle=3D"font-family:Arial,sans-serif;color:rgb(13,13,13)">=C2=A0

=


age:initial;background-position:initial;background-repeat:initial;font-size=

:11pt;font-family:Aptos,sans-serif">




























































;color:rgb(13,13,13)">Best regards,
e-height:115%;font-family:Arial,sans-serif;color:rgb(13,13,13)">
>


mage:initial;background-position:initial;background-repeat:initial;font-siz=

e:11pt;font-family:Aptos,sans-serif">
serif">Zara


iv>




--00000000000018f402065233e2be--

Show pass psam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 19 May 2026 17:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPU0K-00000000MID-1oTC

for dave@doctor.nl2k.ab.ca;

Tue, 19 May 2026 17:37:40 -0600

Resent-From: The Doctor

Resent-Date: Tue, 19 May 2026 17:37:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy1-f182.google.com ([74.125.82.182]:44393)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPThf-00000000CpY-3MEq

for sales@nk.ca;

Tue, 19 May 2026 17:18:33 -0600

Received: by mail-dy1-f182.google.com with SMTP id 5a478bee46e88-2f33ae12f97so802463eec.1

for ; Tue, 19 May 2026 16:17:36 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1779232650; cv=none;

d=google.com; s=arc-20240605;

b=NBxq/i9dmfzaJp1od1lFcT1f/7tUudqQ3LbOYxLHXkkDJvaQYQs4pxCcRXjkkJAZHu

hlkMdURHKZUzPNSF31qCT+Nth1x9f7ScAzyEZUxorPsFetYULAgYjSgkyK2Bq1oO6cqN

dxwb5WokK7U+Tmrfz6BmK/iYHJy8vj9qFxGTucdQXiXP5Xl+9PuL029wp/XsIqXSy8is

MPeVKAzdcLVKiAAcgeWxMnVCFQId6+3V5SlFf5zonbn27t7XXEYrPeZ9gat2hy/uswZx

ZvyKAuVPSlyMlUO7D9ssd1xv75rhycE9KYx2RKO0ivy3i2do9lrN+sOUKX4mE+WgHqMi

gwsA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=HKoiORsD+6irmvOYbucYsapukbBwxrVpCJ0RDfmm4nA=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=We+bXXHJGP8Utb1VG8i6Wxe2f6EQvQ3fyWZ+YoGsuX/w5H0XlnvCL6uL/retRkrNos

+WcQY789UR7ltlzVqU9vnHbYXF3bTs+U+KtWjh9XQnUCpqQ1C1lfZvQjR2BCU66KdrT3

qtA696Qc4jbQljKH/MNlYg+2Vd9kfCQQaK3xv67EhNd6e5ynXfeMXkrbQeyi9SEtToaQ

G1M9OMpUxnbruwys9pwYyHcsfY+4qKIih2xBda8PpapiEvBQovMsSnwMXjIuICnoR/7b

FVbRo7jJsYxWLZmOSdCxM8dguzcbK2G6Odvf+pJDkN3ljTqVlJBkthD1vWla95YpaUOO

jWHA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779232650; x=1779837450; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=HKoiORsD+6irmvOYbucYsapukbBwxrVpCJ0RDfmm4nA=;

b=oCRowB7lAHur3aPfAFnxo+YaF/GEWnT2VkKbwWDyEDNVz7sOvSp3+pa9z3lJWxkv32

yWVmiKaMj/tzOOuy5t8F5cILzxIpcSzve+abiJ86xNvmSzwuBmmScbAsug+eU/jP2Apm

JBbThLQmzMQZ6zTEdQ/2+V6XPps6g080acPk4iZkdalkiw+qfxGF4Gz17RxMd3VO/ky2

YmjFyIQIKdAi9kN8nY7YTT2UdNGBni/9JtlCwr2fMHeMbTqN9LdujmGJsYaIa1Tt+SGL

ITFTbG9nP1XIRU1H040RzGUy9jPiyH0BcTolz03Hf0aNO62GhWLbxTWUXiDopCPNFgnZ

zC7Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779232650; x=1779837450;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=HKoiORsD+6irmvOYbucYsapukbBwxrVpCJ0RDfmm4nA=;

b=ptWXe3WB+YbZNwhPgGw+TyRCZ8NEsiKtoLAoxahHsrrf4tPPEPeQHKtaMjwbX1GCWV

Cny4nlZJKxhgvh/q+fm6wsRRizaKIykdSl3cOaffMHW+jicavo3AMYj6FyovMRQZ+2oJ

wR8out3X9XWWK7X6pdVqhGPTe7wZleZR3zBBu4G+/CPHfs5To6LkKxjCRKfYkZYN9Jbk

HJ1TGeSUzDbCRyQbUqXg4uaYhppem1AbUdODlZNtSqwB3nSd72ug39lGO2NyaRBUnh8Z

zV66LY12sBTYqX5lYQRK/OgrF+T/ewtPzOTKuUi3ctOSJ+r02DySVAne15W7mv/4/8tq

J2mQ==

X-Gm-Message-State: AOJu0YxrCbAVOrpueMI+zmFkMjaQozgLQcibkBPepcEbSE7gGJCMyFHm

YbLmyCZHBMq/0mlnGs0FRn1wDnaLZ+SkSyqkO8zaGfBymLfUpki4YU6PfNh3Dmax1JihJYrliv3

kzG4r2ea3Z0ecZWzoF9xBD4Ya9DrJ94imIubX4ee5jQ==

X-Gm-Gg: Acq92OHZdN8RUFzithkb7Q8FQjxmfJXKlpKRK3JQi3kj0VGms20ODnQBGdpPIE/FFe4

Hipi+LGDDiYczqruvHm/xAh5chlJ8TT+g1J7afnIfKhzJl+Ot05Zl76wkcingLE/RQzV69AlUPs

X482zYAizI88jyI3l2irr+4qSohg7p7fCrARndFph5soJnE9yENTao3nD+y9+Pok/zlqwSI6TuU

xWzdlGQbehmmgTZYlSyU9rj7zF2kHeaxxDDHH9LpKGkVYAw+XXQvNOlKil5D1fTRyfEnPpKSpyh

kwknXWFCMQKOpXQMPGdOEfDdxRu7uVsdO12JwT/FpXte1p4WcBTXv7/orVT3aDNzmqD1VDiT/Xb

A9g==

X-Received: by 2002:a05:7301:6089:b0:2ed:e16:6b4c with SMTP id

5a478bee46e88-303986a9647mr10883708eec.34.1779232650358; Tue, 19 May 2026

16:17:30 -0700 (PDT)

MIME-Version: 1.0

From: Zara

Date: Wed, 20 May 2026 04:47:19 +0530

X-Gm-Features: AVHnY4IKuKrVhyisJxAtdu_8Vcn3SVYeFYnFdUGQXy0qa5cyHBSNK-AxUPbsG9w

Message-ID:

Subject: Queensland Caravan & Camping Supershow 2026

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000018f402065233e2be"



--00000000000018f402065233e2be

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,



We=E2=80=99ve compiled a database of industry professionals and business co=

ntacts

associated with *Queensland Caravan & Camping Supershow 2026*,



taking place in Brisbane, Australia on 03 - 07 Jun 2026.







The database may be useful for companies interested in:





=E2=80=A2 Business development

=E2=80=A2 Industry outreach

=E2=80=A2 Marketing campaigns

=E2=80=A2 Partnership opportunities

=E2=80=A2 Expand professional networks



Available data fields include:



Contact Name, Email Address, Company Name, URL/Website, Phone No,

Title/Designation.







Approximate records available: 15,628







If interested, please reply with:



- I=E2=80=99m Interested =E2=80=93 Send pricing & details

- Not Interested



I=E2=80=99d be happy to share additional information and pricing.







Best regards,



Zara

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
--_000_JH0PR02MB6398DB66C51DCC232DABFFE2D1002JH0PR02MB6398apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Nice day,



If you were on page #1, you'd get so many new customers every day.



Should I send you quotes with proposal & portfolio?



Thanks dear!





--_000_JH0PR02MB6398DB66C51DCC232DABFFE2D1002JH0PR02MB6398apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Nice day,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

If you were on page #1, you'd get so many new customers every day.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Should I send you quotes with proposal & portfolio?



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks dear!



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












--_000_JH0PR02MB6398DB66C51DCC232DABFFE2D1002JH0PR02MB6398apcp_--

WEb/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 19 May 2026 17:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPTv6-00000000Kim-1LEj

for dave@doctor.nl2k.ab.ca;

Tue, 19 May 2026 17:32:16 -0600

Resent-From: The Doctor

Resent-Date: Tue, 19 May 2026 17:32:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013082.outbound.protection.outlook.com ([52.103.43.82]:48488 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPPIc-00000000KWI-2WlH

for sales@nk.ca;

Tue, 19 May 2026 12:36:24 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=IMGKKGmV3BmHGW8HvK3PHvzpHKg2q6Zzrg23lWSqwCJetpCYafAuPqB0TO16YvwS5MBq9fAqXtnA8Ls29jDE3NTjQ7+BY4kUHfAYNcPLSYf2VELi/eRxImZLPBZQivb7UORNWod/kNoUoG+HHb3bckZuRS55bSOf0GdATnLBPtSyUb+4oFWM81y8+ymD6mUZLbJwNr0EuVRlbxDFu5JXUb0zyJ3B5cQ+hKkzeIizKhdaox+wnlClGcsgAhwj2tAzqI8fscEf7acIjGP8pADgf+wTbA1EFUyJrHzJL57M4cubqTGblVNyrY14g2Hflf4RyP0aYeDrk2PLvmEEaututg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=PXASKTbkd8FwmVARCJNQ0YoysmUDSo4A7ZH8f9oIch8=;

b=dVbOvKAcbhj3waU5BBvQbPtCK4qDiiOdsWbe9R3qpQi4NVZ2yGoZIUylyS/Dr2mfMx285c4GPbuGUcOorolEvM2gbWstwSk3CJxcEA8Az+9RKNFmnpMPPPcriA4CUyDzhm1c3EXG9sLDio/ZXfcCnNdQy7eQg1L7z2yfVgjTg6a1kMdpdLClrk8WhEGHwh6tq5/3rggy/uPIssgugvTLK1VVyOIpXTcXLoK2ca6FBQHBh6qKga1XwCxqDonWD4iExaujNw31GB9lfMrlA1OeTDy+A2MvrkHiLPb41ZuWQ8aWYNSvNS6jdeHmLfdBHJSuVC7VBELkKcvowZrIam/Nmw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=PXASKTbkd8FwmVARCJNQ0YoysmUDSo4A7ZH8f9oIch8=;

b=Eq0rvj4+ejumco0jlb4isJTeorQ1SGF0bRPLFCB9X5kzH+R0ceOt6Q+0OWPzie/unybgBAjEWh4QpSg0CpnyBil/omljusyyQ0KTmpLVDe3wRQ/MonfilsrrdjazC9IXN4Oll4lN9/RArV92GxzWMvwG8si8EwQfk5hF5y6uONAmMiphYWQ2zYukzDKmk9hxEDIcK8lRcqHdheG5sVLEcWfgtjxWACYG9u+geQ4vzUDa1FD8DlrWwPtTqXLUlqGl4cz7Kg/I7/mjbFZMGoaoNuGLc62hc3jde98YC86EXAQI4CAb37YnmhrS3MrNZc+qjFbQhYAgIcNagRG9NBikHg==

Received: from JH0PR02MB6398.apcprd02.prod.outlook.com (2603:1096:990:14::14)

by TYZPR02MB6877.apcprd02.prod.outlook.com (2603:1096:405:28::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.25.24; Tue, 19 May

2026 18:34:55 +0000

Received: from JH0PR02MB6398.apcprd02.prod.outlook.com

([fe80::c868:84b1:193:b6fd]) by JH0PR02MB6398.apcprd02.prod.outlook.com

([fe80::c868:84b1:193:b6fd%6]) with mapi id 15.21.0048.013; Tue, 19 May 2026

18:34:55 +0000

From: Hira Fatima

To: Hira Fatima

Subject: Re: "Rank Higher Now!"

Thread-Topic: "Rank Higher Now!"

Thread-Index: AQHc5sLWfzr6vxtpgkO+827hA+BksLYVrr+X

Date: Tue, 19 May 2026 18:34:55 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: JH0PR02MB6398:EE_|TYZPR02MB6877:EE_

x-ms-office365-filtering-correlation-id: 10e79ac8-8044-4ef2-12d6-08deb5d5529a

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|9112599006|31061999003|37011999003|39105399006|2604031031799003|2604031081799003|704163111799003|16051099003|2604032031799003|8060799015|8062599012|15080799012|15030799006|3430499032|40105399003|41105399003|39145399003|3420499032|440099028|3412199025|18071099003|102099032|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?izHe2rmbZOnYZ1iJ+H4Nq37Er+FpUmxUd5ed1bG8eWty6w3RGhigpbUpHp?=

=?iso-8859-1?Q?LhDw3Tu0u63OHApaR9Dqxu+tral7OLLOqUq+MRnuLrz/FR9n6BJpuACNhb?=

=?iso-8859-1?Q?p4MW/vITXvtxbqf0wquYztLOGYqqkjkAaL4mtBZauJe6u6CefDs/YWC1EZ?=

=?iso-8859-1?Q?KIWibC9y0RLWIICt/64DB/KtNyjfFrboGIxdA6/eFK0bQeoC+KYSPBpt8R?=

=?iso-8859-1?Q?4u5xIuayTZWiyQkXisudrsBwly2nrN72ZjyMqtB1qv7tWkXK/fVRYkaOFH?=

=?iso-8859-1?Q?+TB5ZhU7IfzLJ9dZFxiouPnhkbxpXIJrjYgGIRfcujJG3SzUAiuzmI54bk?=

=?iso-8859-1?Q?Ygzuktf7mX9eZ6sn5ILu2RGcnDyac8oEUZ0FrMO3aHgPyTCdlqh6SmGa55?=

=?iso-8859-1?Q?dS8HExOuOR2eBLAQyfYFpUNmv082XnqRRnv8RrT2m3N+AJYOChFguncfUd?=

=?iso-8859-1?Q?zNM/bxShrZIioaP2ZeE1hfClfOwZayoYqNV7RsjoZ3TYMc4m82ogDkX9WX?=

=?iso-8859-1?Q?GOoOcgrc4XSaruXpcSy3QdGTnzo/jYz6YNz3zxv6yhjdcn1X9CRh/GQ2eT?=

=?iso-8859-1?Q?jn6vmyc2Aj4NLli76rNI4j9IgWIqTD+emmdw/laHJnIG6hW5gmqNsRhh9y?=

=?iso-8859-1?Q?ySLp41WEpl5RjKnwProgm043s1MHVZqZU3dst4CmuZih6rDhQ+HY33V2Hi?=

=?iso-8859-1?Q?+avn1UjRMbu4Ow19Y/9OMKZ8Vr5wJXMHwplg6FxH45GzC1wMk9E9aZjG+s?=

=?iso-8859-1?Q?9mT3hEPCwG1MrHlIClOHP01pkASt0xGJBps+gY9diWEKGJLGUjanFBb9eh?=

=?iso-8859-1?Q?ReqD5wll/ang/ZCcmNF5Jp1jZJFunPbwHCo3FA8Y7rUqw/7iZiZIrQFEKV?=

=?iso-8859-1?Q?U5y8gITRpedBydPhy8eFEW2qBpJsHEzGwzlr9IhtLl+T5VNVgAdGEn80jT?=

=?iso-8859-1?Q?0BK3QN5je9Qfsp4dkX/uJCPiiRnkDFJpXAfVDPFirVFHNij5t5GcII23Le?=

=?iso-8859-1?Q?y+pztbCRL6jFaOpHxu7idiDVPRC2hie0XvHRuC040pSkeae5gY/weJ/cbh?=

=?iso-8859-1?Q?qBvSxZKHsPEIt3E2GfEq9woidMNDkgq2sdWrCxO7BVL48o60nFdMf5f1L6?=

=?iso-8859-1?Q?3jWM0SNQbif0Q440ywnwVz20FcZ68VvCSVrec6VK8X6sfaJjYqdnb+aUuK?=

=?iso-8859-1?Q?shcTCqXB1lR5Cgyb5D16Gon5HS42nVcqw1qRDUx1wua+/yAsJlwWWVBBUy?=

=?iso-8859-1?Q?Crv0ZoGXgKYLlu6wvVV6DvHyofatokgkkGER8Dj4t+23VWRPzd6gFC7B83?=

=?iso-8859-1?Q?wlxCwpNvpg8mVd8pufBjtmwp1F15DxmKWhwsfkfMSfP5h5If80z6suYP2y?=

=?iso-8859-1?Q?mgUIccyx5pkGEGDVqENu5cn8Tjbvb4oA=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?5jd809Z1w6/H2bLgpykcNDm5H0Svt+rjU3SplYLToO4CxkWVNjgROoqRaP?=

=?iso-8859-1?Q?Gfx9lBy5jYjVs34D19vaUIZriqkiXN3cl6h7KZHmWIvNS0R1IEpGBuLPGE?=

=?iso-8859-1?Q?LzOnxsa6XQBiVu6cjpl6A1QO5F5nb12znCzcZpdbYyrdsmda0eWD6Ex5CI?=

=?iso-8859-1?Q?wc1KDbXPxgGRnnESjmclV8pyIZX0b355z90OZGuKHzmSyvrdHpRPiYWCxs?=

=?iso-8859-1?Q?a4WfYqNmjxtGdt0B3izjkLL/3CFxWn1ec5XG71uqFhPQS30257yu4zIC9l?=

=?iso-8859-1?Q?Mik+ccr2WdTnTQbH2CSFDL83/ZGLy/mpQdee6ARzpzo24b2K2nEyCOZ/gE?=

=?iso-8859-1?Q?e8XIyFCMmmXFhqNgLfuSLGi70/6TGmptyXzTfSp/wmTAB5jzA+AzpLoDbV?=

=?iso-8859-1?Q?hUMn7nsV7xAM+bxUt7FTFsPSHH/B7j/nTZWUNC6J7EZH6UPo28JApQtyRE?=

=?iso-8859-1?Q?jrP/PnrXssfIj6+02FS4EcSokMH5BXlO7tAo0JDdQuYNXnPjkJqCwyDMU7?=

=?iso-8859-1?Q?DoI+qPMMpP/kCrpwP8tP6PUM01pdnvc2y2dXsC2pPx6AqZ+0pwTviCFYyJ?=

=?iso-8859-1?Q?CpuIV+c6SGJl6K6Y9nalh6FvPw0FYrrw9DXI8cdCBUsuvejBHEO0SwBOu1?=

=?iso-8859-1?Q?ULNBJo7pr4Ehb3acTLXV1KoAtDXmRv2YkgdJHJVkiDCr9vOLQDuSiPhE4U?=

=?iso-8859-1?Q?+rV0JNuPksWbF9ehFT4VzdWlSCEpB47z6t3u6c3joVpzXEhpKyrQEOoMrq?=

=?iso-8859-1?Q?Hf6/jLX5D8m5kfbGTzicxpWjaXymt+pdyINrpLMpuQxlZIbCwAomq/FwgE?=

=?iso-8859-1?Q?fERle2W7EjeYM2zk4rfd9WbKXK/MaFqMfPV2NcHoTiYYQZFsxG+F2kQKDO?=

=?iso-8859-1?Q?C0X7B5gK0OftIGv5WBMHYGrIUSygf22beyL6laSOriIfH5ZtEC2MOOMN6n?=

=?iso-8859-1?Q?rQw4yptkFpZFJ/99ayp8Zw5dMNmXTVlgCc4Jb8WCBCl8zAbmhGMwvbVoMM?=

=?iso-8859-1?Q?jO9MFTKKNoSlrEi5ALWwsiWIM0bzF14j1QoFV3WtOWVEHmZdSS2s39AXM9?=

=?iso-8859-1?Q?GJnopBAsKsmDgzwUXEwmK2JGgtoUDxpc3Qq00iCmlsAe8ssYYMZ4zpUocs?=

=?iso-8859-1?Q?gf9lskahI1SCB5WYrv1TrMPQU1n0ZUQlUzwsNcuFgL4AFCdk4S730rrJ9d?=

=?iso-8859-1?Q?SVTA1RmsBoKues26it9JLsT5f/SCpe43i7OtcH3pxzsP5NS3fJhRupCAP2?=

=?iso-8859-1?Q?mmD4VrL/nTFo7uV9aDGgR0Jlry1KsoWLyVLgA99menrHq6iVHIgR/nEkZg?=

=?iso-8859-1?Q?OsJEprJOoqAxHiDwp3oX1tRV08eFcZKdj6iPXKMo6yv5MPzf6zLFk37dV3?=

=?iso-8859-1?Q?D0fohEXP8hdfrRoSKyW7bmTxXkh/xQvrg9GOd2hovwOPtcFKGNeguOvi0t?=

=?iso-8859-1?Q?AOAAlVRSmCDT3FqW?=

Content-Type: multipart/alternative;

boundary="_000_JH0PR02MB6398DB66C51DCC232DABFFE2D1002JH0PR02MB6398apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: JH0PR02MB6398.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 10e79ac8-8044-4ef2-12d6-08deb5d5529a

X-MS-Exchange-CrossTenant-originalarrivaltime: 19 May 2026 18:34:55.1444

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR02MB6877

OpenAI Phish from nxcli

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 19 May 2026 17:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPTuD-00000000KYf-0Ppw

for dave@doctor.nl2k.ab.ca;

Tue, 19 May 2026 17:31:21 -0600

Resent-From: The Doctor

Resent-Date: Tue, 19 May 2026 17:31:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-3259332.us-midwest-1.nxcli.net ([209.87.149.210]:53062)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPNw7-00000000DlT-2c9K

for sales@nk.ca;

Tue, 19 May 2026 11:09:02 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=default; d=1be5a72acb.nxcli.io;

b=Cm++cmt60SgU14Ok7hCoSKOVUy112q6o+m1eTawRrSZoQc0wixU7DvbqTKXyVX4nkf4g5wytuegPgfmZx5wzac0n0bObXrFwwi7WXUaNGqXN1+3otzsXgb+vf3+M2gwx+XkIIfAEMT5x2k3GSShxJIcLlFzMguICOQgAwARgrAMSdQRHXKzdhiBTQL8CZItppvB5MS3embvxaN9g6yRpJ5lDxOSaRguT7LVz/9yHkugY6l2P9JxH5eGS86UnRVrtZjOHnAAFNevd7YjDVCEo+Q1r/q0Mj7OTeyTkkvGBz6YNLkH3R5tan0KwlV9quPizwtjCP6slsHn66bXHKUA+2A==;

h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:MIME-Version:Content-type:From:Reply-To;

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=1be5a72acb.nxcli.io; h=

date:message-id:to:subject:mime-version:content-type:from

:reply-to; s=default; bh=zvOnqv3d4JBdeL+VqtlEiyCNwUI=; b=QH/ll7p

yzV+n6HffppFR5lKewSGJs0XpbTgSHynC4mXanG6FAPFTqHS35ehMO8sr75dG0Am

5nVPNhYUnufoAMt9SL8ISt5o0WJz22LrPQ5OUjF+Cm59UaJ8bUeqKzHOAafQYp+k

wrsEG6LsHJnnqA7a5dbwMAX/syALN55uQWzn7hCrix678ctkYF45SEsXqmyNv/3D

ynKLR/AlsDbJfB61z6AVe2tt4NQS3JwYyd2tj83kBBN9xmbF3i7DclUbsTA4g2tB

wZ5/WuQHFGib6q4FoNbnFmCMAR9NVuSeJCvPl27bhj2Mi6hahneThb/crLPn51SO

/WvybK2y+dBVD5g==

Received: (qmail 12430 invoked by uid 10239); 19 May 2026 16:47:38 +0000

Date: 19 May 2026 16:47:38 +0000

Message-ID: <20260519164738.12421.qmail@cloudhost-3259332.us-midwest-1.nxcli.net>

To: sales@nk.ca

Subject: Action Required: Your ChatGPT Plus payment was declined

X-PHP-Originating-Script: 10239:info.php

MIME-Version: 1.0

Content-type: text/html; charset=UTF-8

From: ChatGPT Billing

Reply-To: support@1be5a72acb.nxcli.io















Subscription Declined











Subscription Payment Declined









Hello,





We attempted to process your subscription payment for ChatGPT, but unfortunately, the payment was declined.





This may be due to an issue with your payment method. To continue enjoying uninterrupted access to ChatGPT Plus, please update your payment information.





Update Payment Details




If you have any questions or need help, feel free to contact our support team.





Thank you for using ChatGPT.


The OpenAI Team







© 2026 OpenAI. All rights reserved.


Pioneer Building, San Francisco, CA








Geek squad phish from Microsoft Outlook Part 4

Posted by Dave Yadallee on




Haresasz Nxysarwsa has invited you to Important Notice: Geek Squad Plan Renewal

Title: Important Notice: Geek Squad Plan Renewal

Location: https://meet.google.com/sud-pnof-dei

When: May 19, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,



This notice confirms that your Geek Squad Advanced Protection Plan has been renewed successfully for the upcoming 3-year term.



Your registered payment method will be charged $179.99. Please allow up to 24 hours for the transaction to be reflected.



Plan Information

Protection Plan: Advanced Protection Plan

Renewal Period: 3 Years

Amount Due: $179.99



If you did not authorize this renewal, contact our Billing Team at +1 828 316 2843 immediately.



Thank you for your continued trust in Geek Squad Protection Services.



Best Regards, Geek Squad Billing Department



-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Pripojiť sa cez Google Meet: https://meet.google.com/sud-pnof-dei



Viac o službe Meet sa dozviete na https://support.google.com/a/users/answer/9282720



Túto sekciu neupravujte.

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Attendees:



cynthiaperez389903@groups.outlook.com



Important Notice: Geek Squad Plan Renewal

Pripojiť sa cez Google Meet – Dear Customer, This notice confirms that your Geek Squad Advanced Protection Plan has been renewed successfully for the upcoming 3-year term. Your registered payment method will be charged $179.99.



Pripojiť sa cez Google Meet

Odkaz na stretnutie

meet.google.com/sud-pnof-dei

Dear Customer,



This notice confirms that your Geek Squad Advanced Protection Plan has been renewed successfully for the upcoming 3-year term.



Your registered payment method will be charged $179.99. Please allow up to 24 hours for the transaction to be reflected.



Plan Information

Protection Plan: Advanced Protection Plan

Renewal Period: 3 Years

Amount Due: $179.99



If you did not authorize this renewal, contact our Billing Team at +1 828 316 2843 immediately.



Thank you for your continued trust in Geek Squad Protection Services.



Best Regards, Geek Squad Billing Department

Kedy

utorok 19. máj 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Geek squad phish from Microsoft Outlook Part 3

Posted by Dave Yadallee on
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.72 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[40.93.14.10 listed in will-spam-for-food.eu.org]

[40.93.14.10 listed in will-spam-for-food.eu.org]

[40.93.14.10 listed in will-spam-for-food.eu.org]

[40.93.14.10 listed in will-spam-for-food.eu.org]

[40.93.14.10 listed in will-spam-for-food.eu.org]

[40.93.14.10 listed in will-spam-for-food.eu.org]

[40.93.14.10 listed in will-spam-for-food.eu.org]

[40.93.14.10 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.14.10 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.14.10 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.14.10 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.0 HK_RANDOM_FROM From username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 TO_IN_SUBJ To address is in Subject

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Important_Notice=3A_Geek_Squad_Plan_Renewal?=

=?UTF-8?Q?_=40_ut_19=2E_m=C3=A1j_2026_=28cynthiaperez389903=40groups=2Eoutlook=2Ecom=29?=

Geek squad phish from Microsoft Outlook Part 2

Posted by Dave Yadallee on
X-MS-TrafficTypeDiagnostic: MWH0EPF000C618A:EE_|LV8PR18MB5960:EE_

X-MS-Office365-Filtering-Correlation-Id: abba2c8b-5df1-43d1-32c3-08deb5c600fe

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 209.85.128.72

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|5139299004|9400799043|3151999006|6019299003|3069299007|9020799019|34130799006|26000799027|26130799012|4040799016|970799063|1680799066|16200799027|32020799003|22000799015|9000799056|6092099016|24102599021|29080799009|1360799030|1370799030|1380799030|26104999009|21002599022;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?RWVhRk9KOXZlSTVDcjU3cGVHZytiOTV3Slo2djExd2hKdmo1ZC9hYUJiYm4r?=

=?utf-8?B?UndvKzQrdzB5d2IxNGxFNUZGQW0raDl1SVZ1UVViK1hpVHNrK0tWMnh5RGtO?=

=?utf-8?B?dnlFNDA1Qnd2WjNjM0xUWVUrSWVNM0tYRGp3YWZLamcxcVRERzNFUHFLKzZO?=

=?utf-8?B?dEExZXMrRUVFbzM4dGljUkhHeEJLbVRMOGVXblZ2Rk5RT1hUMUJQUGZtb1dP?=

=?utf-8?B?SHFyUGFCZ0g1VUplTElIUjFtaTAvQlhiYXhmY2ttY2lLKzdYWGJieXdmN0xL?=

=?utf-8?B?d3BHb0pQcWttOTNXOXAxNTlIaFFlR3d3VGk3eXp6NUhWOUt0RFJZcFFTRmJZ?=

=?utf-8?B?UnRXWmJpMkQ5SGdrK0NYU2Z4UEdzc3VVRHVDMkRDSjZNQUp5YmVaT0VUSXNl?=

=?utf-8?B?NHpQMEdtNU5QbGRFaTJWMEtkc0FKMVRvelZud3NKeDBHY0h1Q1NGVVVHRjNj?=

=?utf-8?B?ZG8ydXdNZkRKL1pYbnpnRVRkaXJPNXUybTlTbFB0bVZaZDV1RlhpTHoweWFy?=

=?utf-8?B?Y25BcFR3UGk1aW9jcU9xQWpiVU8xKy9QMU4yWEJHeEpmWVlxR1drdnU1bURS?=

=?utf-8?B?L0ZhdVBvREYwQ3g2WXlNUjFzakJ2WFp1aUJOTGtibjdrNGt6Wm5WNzdnTSsv?=

=?utf-8?B?b0dpeDdHdjJvUElpelBBS2EycUdwVjRwM3ZLSmZxWFZlWXI1M2J4UnVZWVp4?=

=?utf-8?B?QVVvWFRZT0FHOWhad1lXcEorL1hDMnZiaUEzc2xMdHU3V25mUmZoYU16dnl4?=

=?utf-8?B?Z1piRkt0NjVWdkhXdjFVRE5ZcDROSnBZY3NDRjM1QjJaN0piVEwxS0FvSmlJ?=

=?utf-8?B?T0F1ZER1RlZOa1BuY1JFYTdjcVRZN1JXMWRKYW1jUFJ1OHJDVEpST3c4VEtF?=

=?utf-8?B?SVFibmRCcmMra0ZKZDBweldIdlNKYWtFTlI4ZGoybHJScWIzZStwMlBLYnRP?=

=?utf-8?B?ZzRDcTRKcENVUkJJdWM5SmhCaThZdE9KdDhJajdEVXY5TlNzTUg3VWNGTlNV?=

=?utf-8?B?N0xWeHQvWWQrZGFIUk45SXRXMTJLRE9RdGhHNGllTVRuYlRseG9qNVhVNXZF?=

=?utf-8?B?ZHYxZFlTNHVuNk50MW5ieU9LV1REdk9iekM5VGJ4ZFgzc3JSMkQ4ejNpbHcz?=

=?utf-8?B?dVlSK2JMUEVqQU1DajRIVFhlN1BZU0krMnZTbVhlUGVrakRGSlBzS21IQUli?=

=?utf-8?B?Y2tkWWMvUWtraHgxZGpkNEVDakVxZ1p4QzZZZ1ZIZ0s1dm9pWFErTTI3TVNn?=

=?utf-8?B?M2cyaHVVRHNZRHpqWW9obUgyd25rdkh3SWNtTzdNMUxCWDlVVXVRK0R5NmhL?=

=?utf-8?B?U3drRHRvZzhsdlZDa0Jwbk9hNElLQ2lNY0NZL2ZoUjRubE9oeWxzbFJwU2RY?=

=?utf-8?B?dmQ3aCt3dFlodWtPUjY1djA4WnNNTlVmU0kxTmFQa3pIVnVXeE9CdHluVlZl?=

=?utf-8?B?bWRic25PYWNLZnRwTVhHcnZJQUZvMFVaV1EraFRpWDJ0SnRIa3ZBYkxHVnpr?=

=?utf-8?B?RElINUtaVXBuT3R6bGdsOWtaRmJ4Y1hVbXFielIrcnY4bEpTWkh1RUZaSTlM?=

=?utf-8?B?Q0ZKbld4NkdraytuMzNvR3BjZGlHcnIxL2VpQjRGTTQ4ZGVsdXAyVnpJRE1S?=

=?utf-8?B?dklOU1pTNzV6NkRxOExXTE9sdzgzQXFjcFFoREF5c2xiWHhnUWh2VXE5QkxE?=

=?utf-8?B?T0dJSEpPQTd0YTlrRGo4VzZXS0Q0eDJuVTdWMTNsczRwNWgrbHR0aENLdWdF?=

=?utf-8?B?MXhZNUE1cnV4QXByZnVZWTRXaDRHeENqcVBiWStvYmtuZytqemQ1SFh1V1Vj?=

=?utf-8?B?MzVJeUlTMXIzeHg2dDVqSUlqcWx5aG9UZDYrLzIxZ3QyT0JSbFRrRUpHcXdv?=

=?utf-8?B?OFNQUW92Zml1ekRHNzNrK1Bva1J2UG1KbWFRWUtjRlFibmxuV1JNaGcyVlFo?=

=?utf-8?B?YTVleGs1dUZkOGUxTTlxenhYQk11d2Q5cm5xZFppUHZjRXExY2NqWGtEa3ps?=

=?utf-8?B?c3h0Nk9YVFI2VE8wekFKeXU3ZzIrMjRxZXBlMW5rdnIvQnV3djV5ZmkvWC9w?=

=?utf-8?B?RGVCV2N5NElHV0c2Y01IaUpNN3NLOVhNcnhRWHVWWThyREtNQmJFTXU3K0dV?=

=?utf-8?B?TEJwNWVPOHRiYWQwdm1YNG9rUzM2aVlFRkRobWRqUlR4Wm5ldnI4VmhPNHlx?=

=?utf-8?B?VlVGdW5Xdm5Uekp1QXo3Mi83Vm54VWRORkEvL3VyajJVOERSV1g5S2gzRVFG?=

=?utf-8?B?VHQ0NmQxcGZNZnFiVmRvK2I1YWk1UGY4NkhjVTdxNnc5YVNEVG91QldOUUNt?=

=?utf-8?B?cDRWbE8xMlJkajZlcDZSSm5NN2hPdWhaWlIzVHJEZVVhNG1tWUd6bjNrc2tB?=

=?utf-8?B?TWdMSDgvajNncnMweXlRelVaZXdxRzVOb2dwOTV2OEprTTh0REltbmZkdWIr?=

=?utf-8?B?OC9pZzN6dFZRclZTNEdvVUg1dTliQXEwdHFQdFJjQ3NJRmxCN3pXdGFDaXN5?=

=?utf-8?B?T0N1S25WL2xUUlh5ME92eEl3U1ZWalJqemdoMWJadFFnOFJFTHVTUzBrZUVJ?=

=?utf-8?B?bDZxeDE1TnhHbUJtOFZiR3IrU2h4eks5TzFWdXBYODM1TzRsTGtpL3BSaXA3?=

=?utf-8?B?VEZvTWtSZkhES3ljbzFJOXQ5OGJ1TXJoWWRKT2tMUkFXbzNMaFZINUlMeDJ5?=

=?utf-8?B?YmtwWEtzZzMrTGNsY1BrZFU3NVRBeklXQzdNMFB0TnE2U3dRWEF3QWpNK1o2?=

=?utf-8?B?SzRGWmxTM3YrN2lONG84VnFlTnRBamhwaXVsSE9sSmF2Ukx0K1d0bnh6ZFAw?=

=?utf-8?B?eDJyaTIwaEE1MEZmdVRsY0NWRDdnN3AwV3NJcCtYOEszOWtvZzltdkxnd3d1?=

=?utf-8?B?QzZuWWY3VHZMTEtPWUduVjFlM2dtb2o4N2JoODQ5UkEwSjJraGpEcytiK0VH?=

=?utf-8?B?NXo4VXgxU3NGM241R05SMElUeEMwakRvMzVoTXJxKzdJbVB1NElMaXB1bGhF?=

=?utf-8?B?dDFUcmpoZ1FhMWx3R3RoRURCdnExU1V5RVE3ei81ajBCbThyNTIzU0JXQ3lt?=

=?utf-8?B?WDVrMWRkNlVKTFozZm5COEE0UVdCenZhck5kSWJJeTZLSXFDTVdhM0RFcXYr?=

=?utf-8?B?ZUlURlRxRXNnK29DMmdjdlh6QnRUL1NmYmhSR2NWaVY3WE5rS1Fic09ZeHZ3?=

=?utf-8?B?NUF1QTQ4clJyTDJORWI2R3ZBMERXalJrcUhPYk9HY00yWW55VEV0bnVZR2Np?=

=?utf-8?B?UXJxUUE9PQ==?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 May 2026 16:45:15.7619

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: abba2c8b-5df1-43d1-32c3-08deb5c600fe

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: MWH0EPF000C618A.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV8PR18MB5960

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Important Notice: Geek Squad Plan Renewal utorok 19. máj

2026 Pripojiť sa cez Google Meet https://meet.google.com/sud-pnof-dei?hs=224

Dear Customer,



Content analysis details: (11.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[40.93.14.10 listed in dnsbl.ahbl.org]

[40.93.14.10 listed in dnsbl.ahbl.org]

[40.93.14.10 listed in dnsbl.ahbl.org]

[40.93.14.10 listed in dnsbl.ahbl.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c3:cafe:0:0:5a listed in]

[dnsbl.ahbl.org]

Geek squad phish from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 19 May 2026 17:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPTu5-00000000KYD-3N1T

for dave@doctor.nl2k.ab.ca;

Tue, 19 May 2026 17:31:13 -0600

Resent-From: The Doctor

Resent-Date: Tue, 19 May 2026 17:31:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southcentralusazlp17012010.outbound.protection.outlook.com ([40.93.14.10]:10632 helo=SN4PR2101CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPNaC-000000007nZ-1fiJ

for doctor@doctor.nl2k.ab.ca;

Tue, 19 May 2026 10:46:28 -0600

Received: from SJ0PR13CA0194.namprd13.prod.outlook.com (2603:10b6:a03:2c3::19)

by LV8PR18MB5960.namprd18.prod.outlook.com (2603:10b6:408:221::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.25.21; Tue, 19 May

2026 16:45:16 +0000

Received: from MWH0EPF000C618A.namprd02.prod.outlook.com

(2603:10b6:a03:2c3:cafe::5a) by SJ0PR13CA0194.outlook.office365.com

(2603:10b6:a03:2c3::19) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.48.15 via Frontend Transport; Tue, 19

May 2026 16:45:15 +0000

Authentication-Results: spf=pass (sender IP is 209.85.128.72)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.128.72 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.128.72; helo=mail-wm1-f72.google.com; pr=C

Received: from mail-wm1-f72.google.com (209.85.128.72) by

MWH0EPF000C618A.mail.protection.outlook.com (10.167.249.122) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.48.11

via Frontend Transport; Tue, 19 May 2026 16:45:15 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:B7AE658131A6394BE6312AE19137CDA012BD1D6C2B3193AA7DFFA97B51D6F248;UpperCasedChecksum:68EF0452D5F77AD44F1D260A6F19CE9A7AA9C32B2CD325B7AC33618333688B2E;SizeAsReceived:3389;Count:15

Received: by mail-wm1-f72.google.com with SMTP id 5b1f17b1804b1-48fd3dbd16aso31741975e9.0

for ; Tue, 19 May 2026 09:45:15 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1779209114; x=1779813914; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=mz9tX4uEbuqzqrtET9xp5SbWPRHGdAkSGedGz2OWJQ0=;

b=uAjLJiBK6zUGqBZnTVIRuN+rVx1VR03825OrJ92IZz4GiM9+R67UPCU0uspf9Ulr6c

39qpbolW+4duCJhrfhCfP78arRX1w3i/nJIVeo/CZN/V1fAeDuW2K7gknqYEowyc4VA2

dOA+s3PHAUaVLamOJYiCdYfE0/IDBIP4OswCqxrmlhZLtQkokZMTbiuxIN4x4IE2fAn8

+nop9hER82eQzWjYSBvd9bmVQ5WvNxNk0aWj8V76bdW7ZasUJJ9epF0zZXStPBz1sICY

c5xViNC3tzfq0crgDccItQl/9PUgSKNHltzm1IpPb0HqyTH+8rFmzZ/DZSYANuR4p/Yh

utqg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779209114; x=1779813914; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=mz9tX4uEbuqzqrtET9xp5SbWPRHGdAkSGedGz2OWJQ0=;

b=RujZesF1Jnq8iAByw2pKCj/tgBayHk5iEPHX9iqLj23DRPxYp9QL6QBgfuzqUOz+hM

c5+WO2u0RX5gbpUMsYuofbRLPKe3+jYnAMBPqU88sZRGzJJdeWfyxS7hEzvrwlmvWE71

ceFVSeYLYlAV2PkPsmVGbGQdGrWGzSNxXjod4StM2pruFQebC+gZrUHV7t8qf+d+lkpM

fV/NSCInPlTyl5R290H7HomC+3eZunaNLOQ1XM1vHoQhI/bYXAELreNtr8jMP0eBA817

EOxKYiS6x7hQ5dBK8hyQfgxJzc6pILkeBd1IzCINyYn4M7v5cB+Wn4caY/Ap8JgbMeUc

9ypg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779209114; x=1779813914;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=mz9tX4uEbuqzqrtET9xp5SbWPRHGdAkSGedGz2OWJQ0=;

b=N79S1cP2GVIVoQez/rK1Z2R9erawT+yCPPtSJaC6V1esCpyz0qLbtHkGWusaUYKtIn

aFrZnH7ViRZ9LUtVHI/btSQCZH6VTmd/EOUoN9yEVKqAfCOfWPzZED6gcHW3M6UHPqNo

ddLKdUF4EGApKWTUFagskUxTavArw0q3kimJBhVVuUg5UUtR1xFVQdjqwiLfUY+LlQSa

CbT7tx1gkfG97yiwqNu40nxSAWR13Ngs94avfRa8r5z7Garn4u0gJPTcRlheMCj1EiV9

2nywCfOvkZ8HVaVLHK+hevSHg/OdvnQOtrt9TVZ0d8CmauBnCwDaZ/6KA9qwu0k/OPn0

a7ew==

X-Gm-Message-State: AOJu0YwtcHfTZ9/EkPtZ/dHl6qi0KkpgGp5MQtRiYF1j3TgqzydGFemS

CW7y+hzIYAT2R8HLvCl7YebJtrxiGDG8496U9Bfixy5w4+9JYpPysOPzElYGteD9wpAEZ00neNM

qI1JieO7apf3lrmUmzhhfscyQG/V4zEFUMQM=

MIME-Version: 1.0

X-Received: by 2002:a05:600d:8496:10b0:48f:eb8b:997e with SMTP id

5b1f17b1804b1-48feb8b9ab1mr198328715e9.26.1779209114135; Tue, 19 May 2026

09:45:14 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Tue, 19 May 2026 16:45:14 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Important_Notice=3A_Geek_Squad_Plan_Renewal?=

=?UTF-8?Q?_=40_ut_19=2E_m=C3=A1j_2026_=28cynthiaperez389903=40groups=2Eoutlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="0000000000003ab31706522e67a5"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

French langauge nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 19 May 2026 13:22:00 -0600

Received: from mail.ecoambienterovigo.it ([82.193.22.144]:56461)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPQ0O-00000000Osg-22Fy

for dave@doctor.nl2k.ab.ca;

Tue, 19 May 2026 13:21:42 -0600

X-MDAV-Result: clean

X-MDAV-Processed: mail.ecoambienterovigo.it, Tue, 19 May 2026 21:20:26 +0200

Received: from WorldClient by mail.ecoambienterovigo.it (82.193.22.144) with ESMTPA id md5001003096982.msg;

Tue, 19 May 2026 21:20:24 +0200

X-Spam-Processed: mail.ecoambienterovigo.it, Tue, 19 May 2026 21:20:24 +0200

(not processed: message from trusted or authenticated source)

X-MDArrival-Date: Tue, 19 May 2026 21:20:24 +0200

X-Authenticated-Sender: pesaportoviro@ecoambienterovigo.it

X-Return-Path: pesaportoviro@ecoambienterovigo.it

X-Envelope-From: pesaportoviro@ecoambienterovigo.it

X-MDaemon-Deliver-To: dave@doctor.nl2k.ab.ca

Received: from [79.127.164.159] by ecoambienterovigo.it via MDaemon Webmail with HTTP;

Tue, 19 May 2026 21:17:25 +0200

Date: Tue, 19 May 2026 21:17:25 +0200

From: "Pesa Portoviro"

To:

Reply-To: gbrigittemarie54@gmail.com

Subject: Re: En attente de votre =?utf-8?B?csOpcG9uc2Ugw6A=?= ce mail.

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="0519-1917-25-01-PART_BREAK"

Message-ID:

X-Mailer: MDaemon Webmail

X-MDCFSigsAdded: ecoambienterovigo.it

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Bonjour Je suis Madame Marie Brigitte GUIETTE (Française)

née le 08 Novembre 1954 à Paris 15 E veuve sans enfant. Si j'ai choisi

de vous contacter c'est parce que je souhaite mettre une somme importante

à [...]



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[82.193.22.144 listed in dnsbl.ahbl.org]

[82.193.22.144 listed in dnsbl.ahbl.org]

[82.193.22.144 listed in dnsbl.ahbl.org]

[82.193.22.144 listed in dnsbl.ahbl.org]

[79.127.164.159 listed in dnsbl.ahbl.org]

[79.127.164.159 listed in dnsbl.ahbl.org]

[79.127.164.159 listed in dnsbl.ahbl.org]

[79.127.164.159 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[82.193.22.144 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[82.193.22.144 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[82.193.22.144 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[82.193.22.144 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[79.127.164.159 listed in will-spam-for-food.eu.org]

[79.127.164.159 listed in will-spam-for-food.eu.org]

[79.127.164.159 listed in will-spam-for-food.eu.org]

[79.127.164.159 listed in will-spam-for-food.eu.org]

[79.127.164.159 listed in will-spam-for-food.eu.org]

[79.127.164.159 listed in will-spam-for-food.eu.org]

[79.127.164.159 listed in will-spam-for-food.eu.org]

[79.127.164.159 listed in will-spam-for-food.eu.org]

[82.193.22.144 listed in will-spam-for-food.eu.org]

[82.193.22.144 listed in will-spam-for-food.eu.org]

[82.193.22.144 listed in will-spam-for-food.eu.org]

[82.193.22.144 listed in will-spam-for-food.eu.org]

[82.193.22.144 listed in will-spam-for-food.eu.org]

[82.193.22.144 listed in will-spam-for-food.eu.org]

[82.193.22.144 listed in will-spam-for-food.eu.org]

[82.193.22.144 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[82.193.22.144 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[gbrigittemarie54(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} Re: En attente de votre =?utf-8?B?csOpcG9uc2Ugw6A=?= ce mail.



--0519-1917-25-01-PART_BREAK

Content-Type: multipart/alternative; boundary="0519-1917-25-03-PART_BREAK"



--0519-1917-25-03-PART_BREAK

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 8bit



Bonjour



Je suis Madame Marie Brigitte GUIETTE (Française) née le 08 Novembre 1954

à Paris 15 E veuve sans enfant. Si j'ai choisi de vous contacter c'est

parce que je souhaite mettre une somme importante à votre disposition par

un don pour vous permettre de réaliser des œuvres de bonnes volontés.



Il s'agit bien d'un don que je veux faire à cause de ma souffrance car je

souffre d'une maladie qui dégrade de jour en jour ma santé et le mois

passé, mon médecin traitant m'informa que vu le degré d'évolution de la

maladie que mes chances de survie sont très minces et seul un miracle est

possible. Je n’ai plus espoir de réaliser mes dernières volontés si ce

n’est vous aujourd’hui en qui je voudrais placer toute ma confiance.



J’aimerais prendre par vous pour aider d'une part ; des personnes en

besoin, les orphelins, rendre heureux les pauvres, aider les jeunes

entrepreneurs à la recherche de financement pour faire grandir leurs

secteurs d'activité. Je serai grée de vous donner cet argent qui pourra

d'autre part vous aider dans votre Entreprise, Société ou Association.



Je veux bien que cela se retrouve dans les mains d’une personne consciente

et qui a la crainte de Dieu avec un cœur ouvert et généreux pouvant en

faire bon usage. Je suis bien consciente que nous ne nous connaissons pas,

mais si nos chemins se sont croisés cela est de la volonté de Dieu parce

que lui il connaît bien votre cœur car j'ai prié jour et nuit avant de

tomber sur votre contact. Alors mon choix porté à votre égard, n'est

qu’un

mystère de Dieu car je ne cesse point d'évoquer son nom de m'aider Ã

trouver une modeste personne pour la bonne gestion de ma fortune au profit

des démunies.



Bien aimé, cette proposition n'a absolument rien avoir avec une

plaisanterie ou un canular, c'est de la pure vérité. Et j'ai la conviction

qu'avec le temps, vous finirez par le croire et à me faire confiance.



Veuillez me laisser votre message sur ma boîte e-mail la plus consultée

ci-dessous pour plus de détails.



E-mail : gbrigittemarie54@gmail.com



Votre sœur en Christ Marie Brigitte GUIETTE

--0519-1917-25-03-PART_BREAK