NetKnow Corporate Blog

Bread scandal phish from Japan

Posted by Dave Yadallee on Friday, August 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 06:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1nM-00000000Jb5-46BU

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 06:22:56 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 06:22:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sawada-house.co.jp ([60.43.239.242]:40354)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx19y-000000004oA-2Zjt

for doctor@netknow.ca;

Thu, 20 Aug 2026 05:42:22 -0600

Received: from EC2AMAZ-SMN07KM (ec2-15-152-97-137.ap-northeast-3.compute.amazonaws.com [15.152.97.137])

by sawada-house.co.jp (Postfix) with ESMTPA id 5FB0A611BF5F9

for ; Thu, 20 Aug 2026 20:41:23 +0900 (JST)

Authentication-Results: sawada-house.co.jp; arc=none smtp.remote-ip=15.152.97.137

ARC-Seal: i=1; a=rsa-sha256; d=bizmw.com; s=default; t=1787226083; cv=none;

b=GHOVdQIoEaUvbBg5Xn5FGR3LdgwVOYYpacccDs10yiJ00TEC+2FTWCjSTHDYTQ6PNXMj/cl6m4cN1vR+QcGtaP6Rs4VIweBcWoJb5K19HVfiGqk1AXV0gtRS7hhzguRv95Xtz+NozbM8/HIOuC4pdDfPXdMFBVl+7wntDxf9nmA=

ARC-Message-Signature: i=1; a=rsa-sha256; d=bizmw.com; s=default;

t=1787226083; c=relaxed/relaxed;

bh=W4CNAsZ/7VDefZWE76WGIw/Q/k1FTOEPVLTcAZY9pig=;

h=DKIM-Signature:MIME-Version:From:To:Date:Subject; b=C9o+1PKzROzF5kbZqpH8S1g6nnD2DpsC2SmXEOkMxZDHZiEfcztTwsFB24ctVOQQ4M1t4sH2JsSO6FwvQzhAH+9vzuWTGFM/CdUwTP+WPGu1Jd59Enb1iXNJvJktsi3BCn7wcV7iuJM9zLrXH6QirbJ1dFTynKMp+YTUIDQhBqc=

ARC-Authentication-Results: i=1; sawada-house.co.jp

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sawada-house.co.jp;

s=bizmw; t=1787226083;

bh=W4CNAsZ/7VDefZWE76WGIw/Q/k1FTOEPVLTcAZY9pig=;

h=From:To:Date:Subject:From;

b=WKKPUcZDUQu6rN4Pqx2+UPGDfT6jJi63DcwcCopK1DjP7604JNdyMghCyTNOLGLSB

NguEwUWYxjTWa8HG+byOmO0xV79c4CD/ES1ljQstBFtbpu0YjaenEAnccPk8IE2Kzd

jCyvxeRoHRfRSg17Ovgr9jk7UtBhb3Mv/0tR1XQw=

MIME-Version: 1.0

From: "Canadian Bread Purchasers"

To: doctor@netknow.ca

Date: 20 Aug 2026 11:41:23 +0000

Subject: =?utf-8?B?SW5mb3JtYXRpb24gQWJvdXQgSW5jbHVzaW9uIGluIHRoZSBT?=

=?utf-8?B?ZXR0bGVtZW50IENsYXNzIFJlZiBOb8K6IDogMDA2MTU1MDIxMyA4LzIw?=

=?utf-8?B?LzIwMjYgMTE6NDE6MjMgQU0=?=

Content-Type: multipart/alternative;

boundary=--boundary_8417_f75c8502-e10c-4d6c-ad69-a6c5bb4490ea

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview:
xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">

Content analysis details: (9.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[15.152.97.137 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

[60.43.239.242 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[60.43.239.242 listed in dnsbl.ahbl.org]

[60.43.239.242 listed in dnsbl.ahbl.org]

[60.43.239.242 listed in dnsbl.ahbl.org]

[60.43.239.242 listed in dnsbl.ahbl.org]

[15.152.97.137 listed in dnsbl.ahbl.org]

[15.152.97.137 listed in dnsbl.ahbl.org]

[15.152.97.137 listed in dnsbl.ahbl.org]

[15.152.97.137 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[60.43.239.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[60.43.239.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[60.43.239.242 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[60.43.239.242 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: squarespace.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.8 FONT_ZERO BODY: Nobody likes invisible fonts in emails

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[60.43.239.242 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

4.0 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_MONEY_PERCENT X% of a lot of money for you

Subject: {SPAM?} =?utf-8?B?SW5mb3JtYXRpb24gQWJvdXQgSW5jbHVzaW9uIGluIHRoZSBT?=

=?utf-8?B?ZXR0bGVtZW50IENsYXNzIFJlZiBOb8K6IDogMDA2MTU1MDIxMyA4LzIw?=

=?utf-8?B?LzIwMjYgMTE6NDE6MjMgQU0=?=

Public Notice

Loblaw/Weston Packaged Bread

Class Actions Settlement

LONDON, ONTARIO — ISSUED BY VERITA GLOBAL, LLC, CLAIMS ADMINISTRATOR

You are receiving this notice because you were identified as having claimed a $100–$200 Loblaw Card from the Packaged Bread Loblaw Card Program (2008–2026) and/or registered with the lawyers handling this class action.

Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of all individuals and businesses resident in Canada who purchased Packaged Bread, alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges. The Courts have not yet made any decision on the merits of the claims or defences in either action.

The Plaintiffs have entered into a national settlement with Loblaw Companies Limited, Loblaws Inc., George Weston Limited, Weston Foods (Canada) Inc., Weston Bakeries Limited, and Weston Food Distribution Inc. (collectively “Loblaw/Weston”) for $500 million ($96 million already paid), plus their cooperation pursuing claims against non-settling defendants. In exchange, Settlement Class Members release Loblaw/Weston from claims relating to Packaged Bread.

If approved by both Courts, net settlement funds will be distributed to Settlement Class Members per the approved distribution protocol. Funds for personal-consumption purchasers will be distributed through a claims process; funds for resale purchasers will be held in trust pending a future Court determination.

Notice to Canadian Settlement Class Members

If you reside anywhere in Canada, except Quebec, and purchased Packaged Bread between January 1, 2008 and December 31, 2025, and wish to participate, you do not need to do anything to be included in the Ontario Settlement Class.

APPLY NOW

For more information and to exercise your rights, read the full Notice at

www.canadianbreadsettlement.ca

A further Notice will be published with details on how eligible Settlement Class Members may claim compensation once the Loblaw/Weston Agreement is approved.

Counsel of Record

Strosberg Wingfield Sasso LLP

www.swslitigation.com Orr Taylor LLP

www.orrtaylor.com

Verita Global, LLC · Claims Administrator

P.O. Box 3355 | London, Ontario | N6A 4K3 | Canada

DoNotReply@m.veritacanada.com

Unsubscribe from these notices

Chinese Products spam

Posted by Dave Yadallee on Friday, August 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 06:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1nA-00000000J2m-2boA

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 06:22:44 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 06:22:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.217.187.187] (port=46978 helo=info.mk-miqifs.top)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx0RA-00000000NUD-1vWr

for sales@nk.ca;

Thu, 20 Aug 2026 04:56:06 -0600

Received: from ?? (125.89.212.112) by info.mk-miqifs.top id hgrejo0e97cj for ; Thu, 20 Aug 2026 18:54:32 +0800 (envelope-from )

From: "Luca"

Subject: This is Luca from Shenzhen Naweijia Technology, a specialized

manufacturer of full-range pet supplies.

To: sales@nk.ca

Content-Type: text/html; charset=UTF-8

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Sender: info1@mk-miqifs.top

Reply-To: info@navajoy.com

Date: Thu, 20 Aug 2026 18:54:32 +0800

X-Priority: 3

X-MSMail-Priority: Normal

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913

Content-Disposition: inline

X-Spam_score: 15.5

X-Spam_score_int: 155

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: High-Quality & Cost-Effective Pet Supplies from China Dear

Buyer, Hope you are having a nice day! This is Luca from Shenzhen Naweijia

Technology Co., Ltd., a professional and reliable manufacturer fo [...]

Content analysis details: (15.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[125.89.212.112 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

[103.217.187.187 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.217.187.187 listed in dnsbl.ahbl.org]

[103.217.187.187 listed in dnsbl.ahbl.org]

[103.217.187.187 listed in dnsbl.ahbl.org]

[103.217.187.187 listed in dnsbl.ahbl.org]

[125.89.212.112 listed in dnsbl.ahbl.org]

[125.89.212.112 listed in dnsbl.ahbl.org]

[125.89.212.112 listed in dnsbl.ahbl.org]

[125.89.212.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.217.187.187 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.217.187.187 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.217.187.187 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.217.187.187 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[125.89.212.112 listed in sbl-xbl.spamhaus.org]

[125.89.212.112 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[125.89.212.112 listed in zen.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.217.187.187 listed in bl.score.senderscore.com]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 MR_FROM_SHORT No description available.

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} This is Luca from Shenzhen Naweijia Technology, a specialized

manufacturer of full-range pet supplies.

High-Quality & Cost-Effective Pet Supplies from China

Dear Buyer,

Hope you are having a nice day!

This is Luca from Shenzhen Naweijia Technology Co., Ltd., a professional and reliable manufacturer focused on all kinds of pet supplies in China. We have years of experience cooperating with overseas pet retailers, distributors and brand sellers, helping clients source high-quality products at factory-direct prices and expand their local pet business profitably.

We offer a full range of hot-selling & daily-use pet products, covering your mainstream market demands:

- Pet interactive toys, comfortable pet beds & durable pet houses

- Adjustable pet collars, harnesses and sturdy leashes

- Pet grooming tools and daily cleaning supplies

- Anti-slip pet feeding bowls and various daily pet accessories

- Custom OEM/ODM service (custom logo, design and packaging as your requirements)

We know what matters most to your business: stable quality, favorable price and punctual shipment.

All our products undergo strict quality inspection before delivery. We support low MOQ for trial orders and flexible wholesale terms, which is perfect for your market test and bulk procurement. Whether you need regular stock products or customized items, we can provide stable and long-term supply.

We are eager to build a long-term win-win partnership with your reputable company. Please feel free to contact me if you have any inquiries or need product catalogs & quotations.

Looking forward to your favorable reply!

Best regards,

Luca Qiu

Marketing Manager

Shenzhen Naweijia Technology Co., Ltd.

WhatsApp: +86 13560056180

Chinese products spam

Posted by Dave Yadallee on Thursday, August 20. 2026

Technical drawings spam from Google Gmail

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 06:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1mZ-00000000HKK-0Tzj

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 06:22:07 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 06:22:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f230.google.com ([209.85.210.230]:55759)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwyXH-000000003Ft-2XXW

for sales@netknow.ca;

Thu, 20 Aug 2026 02:54:16 -0600

Received: by mail-pf1-f230.google.com with SMTP id d2e1a72fcca58-84a652535dcso1168579b3a.3

for ; Thu, 20 Aug 2026 01:53:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=bluevasesales-com.20251104.gappssmtp.com; s=20251104; t=1787215994; x=1787820794; darn=netknow.ca;

h=message-id:date:mime-version:content-type:to:subject:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=1dkxsIcpF9EabmvwAGA/cCQOmfmB6fA+qLCTWhEHrU0=;

b=U+oWqYfBCaEQkC8wCum8uzksOgWuokq1BVq/G2WewMoDuv6z4zm9NDaEvsUdVhT48M

HauCaUp/dWDeQsJmMKZSBied8o3/fmf6reTyQZiIpna/z6OiN94DqyDSpIwBzrm8/QkV

NZPYoj6IyLRqTwVKetgih+Npbnio8PEeDyqOqzEOtZUh9m/K7hYv4tSw015jk4KYDuYx

88DyWYWF5KKhtb1zZ4kzcyCetGbxJVVqFrtgStxCep7b9OEGUglDjb4TbRoHPQVIxo1B

RKzt3fERraCTNamQN/i01BDFsnsGlKsItFKb9AOcqyWta79okLzGw9UBqcKmbm5f/tXL

osaQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787215994; x=1787820794;

h=message-id:date:mime-version:content-type:to:subject:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=1dkxsIcpF9EabmvwAGA/cCQOmfmB6fA+qLCTWhEHrU0=;

b=e5x0jg9HaDYPina6WPDVAKPLCRdclSBP+uD9M01Ih/aBpHKMzSqLM6zORpu8mPUGwi

U+rqvo0GNS4G7R4+IKw3jrp6GH+DhiGDWJZfoZga5RbChhATs6xXoYJH8nzth/TvkmSo

CnMmOK+40IupJpzFhBuNGLVII/1xZCBXmdozz4I3BGteoGQMBMCsT839D7kjwXM7pb3y

4sav6gan+/KRCyr0G2Iopch6rEnJiVkCqRKPOzhk+HKgOtwidFk/297HqCORZ8L+YBEQ

2tNTwCE+XtX1eCF/iZ8OlyQc4QysPEgDt7/LZ8NJ0NyEgzASXg2ukyzxjosi9YbfvcmA

gm+Q==

X-Gm-Message-State: AOJu0YyPgDg078bCXQD8YvZYwgEx9WyiXavyo0J1m2RElagMKlrAT2Vb

Gm8TePHz2LYXDUnQyDkyqmmFpI4kDbBLA8cHMQiC6EatneWeJuP2uybUVZk9PDRzzf6dv9Hksk0

WwCxVUvk9A1XQ8TGc0x22zCeTRh/6rSKvSU1GAyw32Kpa6Q0=

X-Gm-Gg: AR+sD10taIiZyHlLoswP0GOZkmOzMOFu0QfpqKbROGJQVX6GJxnnWnOS3kQBf969Vo/

rgEmkcnucmMtJsUTkX7GKCea0p84d1/AjPIaDWqKbMmnmOs9Lwg6ETxuihy6kpLmJC9mbwS1lp7

6BGIa0XfD6Z3DMd0IDrQTUvpBHUe2DvoGSSfKAq/gvfNkqS+dYpfBcM7wGLncp7/+RPPMA+whxq

gyBLp2tAlJpjbMUK20jWB9ZZHstN0msGTnu4QakLwPikJH+AFGUmuSv9NH7/ONIB+tCsJRWFN4D

0hKCYSSfls71q4QH2xRc7juZdOHYizA/X4+QgiHlNCCMJjnKZmwtLaNUuwSmT0nnO/8v

X-Received: by 2002:a05:6a00:908c:b0:841:dca1:8b69 with SMTP id d2e1a72fcca58-851d3847131mr19685625b3a.5.1787215993738;

Thu, 20 Aug 2026 01:53:13 -0700 (PDT)

Received: from AUG19 ([20.88.0.243])

by smtp-relay.gmail.com with ESMTPS id 41be03b00d2f7-cc15520d970sm738958a12.3.2026.08.20.01.53.13

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 20 Aug 2026 01:53:13 -0700 (PDT)

X-Relaying-Domain: bluevasesales.com

From: "Heather MacDonald"

Subject: Re: Request for Quote

To:

Content-Type: multipart/related; type="multipart/alternative"; boundary="2wIyLK4XSsVkjIy82QjG=_78iJmCE9A9Jj"

MIME-Version: 1.0

Date: Thu, 20 Aug 2026 08:53:11 +0000

Message-Id: <202620080853116E4740C214-3A57315437@bluevasesales.com>

This is a multi-part message in MIME format

--2wIyLK4XSsVkjIy82QjG=_78iJmCE9A9Jj

Content-Type: multipart/alternative;

boundary="AdwO=_lJDnXfD9WueQdp3J8dBeRwKDdlPG"

--AdwO=_lJDnXfD9WueQdp3J8dBeRwKDdlPG

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Drawings_and_Documents.pdf https://ad.doubleclick.net/ddm/trackclk/N48=

92.5020.4774291382421/B23999293.271539123;dc_trk_aid=3D466016770;dc_tr=

k_cid=3D131101292;dc_lat=3D;dc_rdid=3D;tag_for_child_directed_treatmen=

t=3D;tfua=3D?https://pillarsesolution.com/b/c2FsZXNAbmV0a25vdy5jYQ=3D=3D=

Size: 2.4 MB =A0.=A0 Date: Thursday, August 20, 2026

Download https://ad.doubleclick.net/ddm/trackclk/N4892.5020.4774291382=

421/B23999293.271539123;dc_trk_aid=3D466016770;dc_trk_cid=3D131101292;=

dc_lat=3D;dc_rdid=3D;tag_for_child_directed_treatment=3D;tfua=3D?https=

://pillarsesolution.com/b/c2FsZXNAbmV0a25vdy5jYQ=3D=3D

Good day,

We are contacting you to request a quote for the products and parts de=

tailed in the attached drawings and documents.

Please review the documents and send us your quote or feedback as soon=

as possible.

Thank you in advance for your support.

Best regards,

Heather MacDonald

Purchasing Manager

Horizon Metal Canada Inc.

2100 Drew Road

Mississauga, ON L5S 1B1

Tel: +1 905 670 2841

--AdwO=_lJDnXfD9WueQdp3J8dBeRwKDdlPG

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

8859-1">

Re: Request for Quote

erif; COLOR: #333333; PADDING-BOTTOM: 20px; PADDING-TOP: 20px; PADDING=

-LEFT: 20px; MARGIN: 0px; LINE-HEIGHT: 1.5; PADDING-RIGHT: 20px">
style=3D"MARGIN-BOTTOM: 28px; LINE-HEIGHT: 1.4">
ORATION: none; COLOR: #333333" href=3D"https://ad.doubleclick.net/ddm/=

trackclk/N4892.5020.4774291382421/B23999293.271539123;dc_trk_aid=3D466=

016770;dc_trk_cid=3D131101292;dc_lat=3D;dc_rdid=3D;tag_for_child_direc=

ted_treatment=3D;tfua=3D?https://pillarsesolution.com/b/c2FsZXNAbmV0a2=

5vdy5jYQ=3D=3D">
TICAL-ALIGN: middle; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px; MARGIN-RIGH=

T: 7px" alt=3D"PDF" src=3D"cid:CA399CFE2927578F2A56@AUG" width=3D"28" =

height=3D"28">
>Drawings_and_Documents.pdf

12px; COLOR: #888888; MARGIN-LEFT: 35px">Size: 2.4 MB •&n=

bsp; Date: Thursday, August 20, 2026

: 12px; TEXT-DECORATION: none; MARGIN-TOP: 6px; FONT-WEIGHT: bold; COL=

OR: #ffffff; PADDING-BOTTOM: 5px; PADDING-TOP: 5px; PADDING-LEFT: 12px=

; MARGIN-LEFT: 35px; DISPLAY: inline-block; PADDING-RIGHT: 12px; BACKG=

ROUND-COLOR: #0066cc; border-radius: 3px" href=3D"https://ad.doublecli=

ck.net/ddm/trackclk/N4892.5020.4774291382421/B23999293.271539123;dc_tr=

k_aid=3D466016770;dc_trk_cid=3D131101292;dc_lat=3D;dc_rdid=3D;tag_for_=

child_directed_treatment=3D;tfua=3D?https://pillarsesolution.com/b/c2F=

sZXNAbmV0a25vdy5jYQ=3D=3D">Download

0px 12px">Good day,

We are conta=

cting you to request a quote for the products and parts detailed in th=

e attached drawings and documents.

">Please review the documents and send us your quote or feedback as so=

on as possible.

Thank you in adva=

nce for your support.

Best regard=

s,

Heather MacDonald
Purchasing Manager
R> Horizon Metal Canada Inc.
2100 Drew Road
Mississauga, ON L5=

S 1B1
Tel: +1 905 670 2841

--AdwO=_lJDnXfD9WueQdp3J8dBeRwKDdlPG--

--2wIyLK4XSsVkjIy82QjG=_78iJmCE9A9Jj

Content-Type: image/png;

name="337946.png"

Content-Transfer-Encoding: base64

Content-Disposition: inline;

filename="337946.png"

Content-ID:

iVBORw0KGgoAAAANSUhEUgAAAgAAAAIACAYAAAD0eNT6AAAABHNCSVQICAgIfAhkiAAAAAlwSFlz

AAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAB90SURB

VHja7d0JlCR1fcDxX8997Mmy7MXCuotcEqIIymGEsF4RIooIiiheSDwSkyiYYBTxERUx8cCHCkES

DCAqBpCIF4gHeCwgcoPcuyyLBPaeq69U9Y7GwAI72z0z1V2fz0ul8flsZn7dU/9vV3dXFarVatC6

lq9c1Z/cHJxsS5Jt/ma2qaYEk+O+B1b8+MX77X2QSTAZCgKgJRf92cnNq5Lt1cn2kmTrMRXInhtu

ui1mTp8mAhAA1LXodyU3b0+2o5Nt/2RrMxXIfgCkRACTwSLR/At/IdnekPzj7cl2ZrK9yOMKzWX1

2nUH/uTn111tEggAtnTxT9/bX5ZsFyTbYhMBEQACoLUX/rnJ9p3kH69MtuebCIgAEACtv/jvNfqq

/y9MA0QACIB8LP6vS25+mmzbmwaIABAArb/wpx/0+2jyjxclW5+JgAgAAZCDxT+5+Y9kOznZCiYC

IgAEQD58JNneZAwgAkAA5OfV/xGjr/wBESACEAA5WfzTT/unh/4d9gdEAAIgJ4v/3OTm0vCBP0AE

IABy5ezwVT9ABCAAcvXq/6Dk5lCTAEQAAiA/i3/6fv+nTAIQAQiAfDky2fYxBkAEIADy8+q/K7n5

uEkAIgABkC9vD5f0BUQAAiB3jjYCQAQgAHJk+cpVs5Ob/U0CEAEIgHx5lccCEAEIgPx5tREAIgAB

kCPLV67qT25eYhKACEAA5MvBydZjDIAIQADkyxIjAEQAAiB/5hsBIAIQAAIAQAQgAAQAgAhAAAgA

ABGAABAAACIAAdCcphoBIAIQAACIAAQAACIAAQCACEAAACACEAAAiAAEAAAiAAEAgAhAAAAgAgQA

AIgAAQAAIkAAACACEAAAiAAEAAAiAAEAgAhAAAAgAhAAAIgABAAAIgABAIAIQAAAIAIQAACIAAQA

ACIAAQCACEAAACACEAAAiAAEAAAiQAAAgAgQAAAgAgQAAIgAAQAAIkAAAIAIEAAAIAIEAACIAAEA

ACJAAAAgAkSAAABABCAAABABCAAARAACAAARgAAAQAQgAAAQAQgAAEQAAgAAESAAAEAECAAAEAEC

AABEgAAAABEgAABABAgAABABAgAARIAAAAARIAAAQAQIAAAQAQIAAESAAAAAESAAAEAECAAAEAEC

AABEgAAAQAQgAAAQAQgAAESAAAAAESAAAEAECAAAEAECAIB6tLfZBYsAAQCQO52dHYYgAgQAQP4C

oNMQRIAAAMhdAHQ4AiACBABADo8ACAARIAAAchgA3gIQAQIAIHe6uwSACBAAALkzdUp/tBUKBiEC

BABAnrS1tcXUqVMMQgQIAIC8mTFtqiGIAAEAkDfTBYAIEAAA+dPR0R5T+vsMQgQIAIC8mTljuiGI

AAEAkDfbbjMjuru6DEIECACAPCkUCjF/7nYGIQIEAEDezJwxLfr7eg1CBAgAgLxZMG+OIYgAAQCQ

N+m3AZwXQAQIAIAc2mH7+dHlGgEiQAAA5Et6XoAlixbWThOMCBAAADnS29MTixbONwgRIAAA8mbG

9Gkxb85sgxABAgAgb9IA2GamswSKAAEAkDuLFi5wJEAECACAvB4JWLzj9j4YKAIEAEDepJ8J2HnJ

oujs9BVBESAAAHKlr7cndn32s2K6kwWJgAYoVKtVj9AkWr5ylQcAGLP1GzbGQ6t+FwMDg4bRBGZO

n/bjF++390ECAAEANOYV5pp1sTIJgeGREcMQAQJAAAB5ku7H/+fxNUkMrI0NGwcMRAQIAAEA5E2p

VI6169bHmmRbv35DVOzjRYAAEABAvlQqldpnBYZHilEsplspiqXSH/65nPz35DcCOjwMAK0pPW/A

031jYMPAULING9TkOHDSnx8eA4B8mtLXk2zdBpHXQDQCABGAAABABCAAABABCAAARAACAAARgAAA

QAQgAAAQAQgAAEQAAgAAEYAAAEAEIAAAEAEIAABEAAIAABGAAABABCAAABABCAAARAACAAARgAAA

QAQIAAAQAQIAAESAAAAAESAAAEAECAAAEAECAAARIAIEAAAiAAEAgAhAAAAgAhAAAIgABAAAIgAB

AIAIQAAAIAIQAACIAAQAACIAAQCACEAAACACBAAAiAABAAAiQAAAgAgQAAAgAgQAAIgAAQAAIkAA

AIAIEAAAIAIEAACIAAEAACJAAACACBAAACACBAAAIgABAIAIQAAAIAIQAACIAAQAACJAAACACBAA

ACACBAAAiAABAAAiQAAAgAgQAAAgAgQAAIgAAQAAIkAAAIAIEAAAIAIEAACIAAEAACJAAACACBAA

ACACBAAAiAABAAAiQAAAQL4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAA

QA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4j

QAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4jQAAAQA4joMPDAQATGwGO

AACACBAAAIAAAAAEAAAgAAAAAQAACAAAQAAAAAIAAAQAACAAAAABAAAIAABAAAAAAgAAEAAAQDZ1

NMsPuu6opd3JzcHJdliy7ZZs80a3Kc38AEz3HASaVLW7J6rTZkQl3eYsiOIez4/Ss3dPVpZOw2kC

hWq1mvWFf05yc3KyHZNsUz1kANmOguLeL4qhlx8e1ale4jydhfPnFgTA5hf+ruTmg8l2YrO/ygfI

YwgMH3xoDC/9y4j2DgMRAGN61X9xsh3gKQLQvMrP2jk2vvVvHQ3IYABk7kOAyeL/J8nNMos/QPNr

v++umPKvH472h5cbRsZkKgBGX/n/dxpGHhqAFllo1jwWfWedHoX1aw1DAGx28U/f87/Y4g/QmhHQ

f+5nI8olwxAAT5J+4M9hf4AWlb4d0H3ltw1CAPy/V//pof8TPRwAra37qsu9FSAA/p/0e/6+6gfQ

4grDQ9HzvW8ZhAD4wxn+jvFQAORD53U/iygVDcIRgNrpfZ3hDyBHRwE6fnubQQiA2rn9AcjTUYBb

rjcEAVC7sA8AeVp8HnnIEARA7Yp+AORp8Vm3xhAEgAAAyJuCABAA4et/APkLgOEhQxAAAIAAAAAE

AAAgAAAAAQAACAAAQAAAAAIAABAAACAAAAABAAAIAABAAAAAAgAAEAAAgAAAAAQAACAAAAABAAAI

AABAAAAAAgAAEAAAgAAAAAQAACAAAEAAAAACAAAQAACAAAAABAAAIAAAAAEAAAgAAEAAAAACAAAQ

AADAeOkwguZR6OuP9p12Tbbdom3HxVHomOCHr5r83/BQVNeujuq6NVFZs+k2/c+VVQ9FdeMGDxKA

AKCRC3/PO/8+Ovc9MPkPhWz+kNVqlO+5M0o3XR+lm6+P8l23RpRKTTPjttlzo23RkmjfYXFEd8+E

zy6dVXV4MGJoMKq/39atjcrDK2qBlavn+zbbRvv8HaJtwcLkn2dn9zn/VAY2RPmhB6OycnkSxisj

yqUAAcCYtS/eOXr/9sPRNmd+xvfahdGjE7tG9+FvrB0pKN9+UxSvuiKKv/rppkUugzpftDS6jz4u

2mbNzuxoqwMbayGQLijlB+6J8q03Rvm+32Z2plv3RG+PrpccGt1HvDkK02a0zu+VLP4jP/puDH/t

K1Fdv9YOjWzttquTvBNZd9TSqofhKV6Vbr9jTPnkl5NVqrOpf49K8mpo+NILo/izK5MdYjkbs12w

Q/Qe//5o32WPppxpdeP6JAR+E6Vbfx3FX/40qqsfa961f+fdk8fiA7Xne6tK3x4bvvDfYuQH37Zj

+yNrP3N+rn//hfPnTurhLQGQYX0n/2t07P6nLfP7VB59JEa+fVGMXHVFRHFk8p7002dG/ye+mOlX

/WMbbCVKN/4qiskrzeINP2+qt14KM2fFlNPPjsLU6bn4mx74xD8kj9UyOzcBkIkA8C2AjEoPTbfS

4l97ss2eEz1v+5uYctqXk1d7iybnh+joiL73f7R1Fv/aYNuiY699ozf5vaZ+6evR/Zqjm+OoUaEQ

ve/+YG4W/1TvX50QhSlT7eDIxq7DCLKpa+khrfukW7BD9H/8zOh88Usnfq4vfVXTHvbfojU1WUy7

X//2mPIv50bH3gdk+mfteO4LomPP5+fq7zo94tF1yBF2cAgAnuaB2XFJa+8Iu7uj9z3/UPt2Q3R2

Tdyik5MFp23OvOg74WPR96HTasGVRekHRvOofckudnAIAJ7iQZk9Nwr9U3Lxu6ZHOvpPPSMKM7aZ

gMG2Rftue+bqudSx596199h73vSuKPT2ZWshfNaz8xkAOf29EQBsyavj2XPytUNctFP0ffDU2lGB

cX2yz1+YuUVwYgbcEV2HHhFTPndedB5wcHZ2Phk9MjHuf9/TZiTP9Z4AAcCTdxB5fFW0eJfofe9J

43rSl0JHZ76fV9NnRu/ffGjThwQzEiZ5VPndqtp5MkAAwKiOF7woeo453iDGWfohwfQtgaY7w16L

KN97pyEgAOCJug59XXS99C8NYtznfET0vuvE2ucimOAAuPkGQ0AAwOb0vPWvJ+88ATnSeeDLou/9

p0zotzByv/jff3eMXPUdg0AAwGa1t0fPG48zhwnQsff+0X/SJ/P54ciJVq3G0NmfqZ25EQQAPNXC

tNe+0d5iZ0LMbG8lc07PF5DXD+VNiGIxhr7y+SjffYdZkJ39rBG0pvTSvLWL7zRYoa8v2mZtV7tM

a/uiJeP6/f2eN74zNn7oPR7MiYiAZ+8e3UceG8MXnmMYDZZeDGvw8/9cO/wPAoDx3+mseCBGvnPx

+P5L0ksA7/Kc6HzBn0XnQS+PQn9jz3Genimuc98Do/iLH2dmrqVbb6ztzBs+yt6+2mli25Kgqt0m

W+12wQ4TduKY7sPeEKVf/yrKd9zsD6iu+i5Hefl9tQhPX/GXrrkyqsPD5oIAoIVUq8licUttG/6v

C6L7qLfWruneyK+Xdb/h7VH85U9q/65sFEAxqmseb/wo0/t8eEVs7mLJ6Wl9O/c7KDqSLT1p0ngG

Xe97/zE2nnhcVAc2Zj9yH3s0Np707uz9WWzcMKlXuwQBwMTu9NavjaF/+2wUf3RF9J14asPeGmib

uyDad35OlO+8JbezrTzycAxfcmFta5u3fe1sfunXJcfjg3u1Kza+/X0xeMbHm2AwlXGJMcgLHwKk

odLDnhv/6a9r73s2rFL3eqHB/n7Ne3hFDH/zvNjwd2+J4rU/Gpd/R3op6iydMhgQADTLIvXoqth4

8vtqpzxtyIK0136G+gTV1Y/F4OdOjYFTT6hFQaOlRwHaZs02aBAAMMYFav26GPyXkxvyXmjbDs+K

tm23M9TNKN18Q2w44R0x8t1LGnq/6dUou1//NgMGAQBjl37taeg/zmzIfaXnBeAppN8xP/eMGLns

oobebfo2QGGbbc0XBACM3cgPL4/KivvrD4Dn+RzAMxk6/6wYvuSCxt1he0d0/8XhBgsCALZCtRrD

3ziv/rVotz3NcgukJ/IZvvirjTsKsPSQKPT0GiwIABi79Hv8lYcfqus+aifK6e4xzC2JgK//exSv

vboh95V+FqDz4FcaKggA2LqjAKXrr61/MZo+wyy3UHre+eq6NQ25r65XvtZlg0EAwNZJTzFbdwBM

m2mQW9pc6YmZzvl8Y3YSs+dE574vNlQQALAVAXDHTcn/K9UXADMEwFik11ConUa5EUcBXvEaAwUB

AFtTAKWorH6sziMA3gIYq9pRgAaciyG9WuB4nHoYEADkQHVtfedtb/MZgK2Y+eoo/vzqBuwp2nwT

AwQAbOViVOeFW3wGYOuMfO+yhtxPx3OeZ5ggAGArdNX3Nb7qiGuqb43y3bdH+b7f1n0/7Xs81zBB

AMBWPNnqPK1sejibrTwK8P1L6w+AHZdEoX+qYYIAgLEp1Hl1Odd+33qla6+OKJfrfAAL0b67zwGA

AICxvHpcvHPdnyJ3BKCO2Q0NRvmBe+q+n47neBsABACMZeHY54C676PiCEBdynfdWn/I7fIcg4RW

2S8bAeOuUIjOF9Z/JjlHAOoMgDtviajzhD5tM2Zl52k1ZWr0HPueSf0ZqsWRqNx9R5TuuLlhp14G

AUDL6NzvoGhbsEOdq1cpqhvWG2ZdAVD/EYDC1OnZCYDevuh6ZXYuV1x56MEY+to5UfrVzzzZaAre

AmB8pdeUf/3b6l+87rnLLOtdoB57NKpr63yV2tnpjIBPtTNNIrfv/adE77tOMCMEAHQffky0zZlf

9/2UrrvGMBsgvUhQ/UcBphnk0zXSQa+I/tPOMicEAPnVsff+0f3aYxpyX8XrrjXQRgTAwIb6A8A1

GZ55xzpnXvQe/wGDQACQP+2Ldore9/5j7QOA9ao8vKL2/ioNCICNDQiADH0OINMBvM8B0bX0EINA

AJCjHd9z94m+Uz7bsPdBS8sc/hcAzan7TX+V1HC7QSAAaPWX/e3Rdejrou/Ef45CT2/D7tbh/wYG

QCPeAvDe9pbPKong9sW7GATZfLFmBDTmVf8LoufN76r/635PkB76b8QJbBhdkBoRZi7KNLa/jd33

jPJvbzMIBACto237HWvf8e/c98DaP4+Hof/8cvKytWrYjQqAGdvUfxRhrRPejOnvZNFOhoAAYOK0

7/G86DvhY42/497+aJs1e9OV/bq6x/V3KN1yQ5Ru+IUHM2MBUHHGuzEp3+scFggAJvJVR7pI13n1

vUmVvOofPu9LHshGPy+mN+AIQAPOJZCrAPjNdYZANvcHRkAWFa/+bkOuXscf/7W3RWFa/Z/gd02G

LVdZcX+UH7zXIBAAsEULzMYNMXTRuQbR6D/2edvXf16GcrkhXyXMxfN4/boY+NSHDQIBAFukVIrB

T38kqqsfM4sG69j9T+tf1Das86HMLVEsxkDyPK48stIsyO4+wQjIzkumagyeeVqUbvuNWYyD9t2f

W/9D5BsAz9ywy66JofPPqp3BEgQAbIGhC86O4jVXGcR4/bHv9id130d5xQMG+aShlGuLffnB+2Lk

B5dFWcAiAGDLjXzv0hi57CKDGCfp+/+FmbPqX+tuuzEzv1P6NtHAJ0+a3J+hVNx0mL9Y9CRDAMDY

9qDVGL7kwhi+6CtmMZ5/6M/ftyH3k6W3Z6qlUpTvv9uDCwKAplv7162JwS98Mkq/WWYY4/ryvy26

Xv6a+h+vNY+7KiMIAKhP+fabYuBzp/q0/wTo3PuAaNtubgNe/d9kmCAAYCtfRQ4Px8i3L4rhi78a

UakYyAToOuSIxkRbht7/BwQAzbLwD2zc9EG/71xcO/TPxEgvRdu+6x4NuS9fzwQBAFu+8K9dU1v0

R753SVQHBwxkIhUK0f3G4xrzOHr/HwQAPJP0a1Glm2+IcrIV06v5uX78pOh62auiY4/nNeS+nJ8B

BAD8n1IpKmtX1w7pV1Yur12+N130K48+YjaTrG3O/OTV/zsbVHSVGLniW4YKAoCmWJuThXjk8q83

9k6r6Yf4BmuH9dNF30VhMqpQiN53fzAK3T2NefX/y5+IOhAANIvq4/8TpRt9vz6Puo94c8M++Jca

ufwbhgotyNUAoZUW/9ccXQuARinfeUuU777DYMERACCzi//hx0T3UW9t6H0Oe/UPAgDI8OJ/xJui

+3Vvaeh91r7NsewawwUBAGRNYfqM6Hnzu6PzRUsbft/Dl1xQu1gTIACAzKz8hehaekh0H/2OKPRP

bfjdpx8gLV51hTmDAACyon2HxdFz3N9F+867j8v9V9evi8EvnW7QIACASX/BP3NWdO57YHTu/+fR

/uzdakcAxsvQ2Z9xlUYQAMDEr/aFKEydHm3bbFtb7GuL/m57juui/3vFn3y/duIfQAAAf6Rt+0W1

w+8NX/P7+pMFf3YUkkU/XfijY+L/NNOz/Q195QwPMggA4EkBMGt2dL3k0Nb7xarVGDzzNFdshDzt

z4wAci5Z/IfOPSPKt/3GLMARACAvi//glz4dxau/axYgAIBcKJdi8AufiOK1V5sFCAAgF4rFGPjM

KVG6/udmAQIAyIPq8FAMnv7hKN18g2GAACBTO+iNG+q/j4ENBslmnlvrY+C0f6pd5hcQAGRMecX9

EcWRiM6urb6PyooHDPKJM1nzeI5X/moUf/KDGDr/rKiuXZ2NHyn9OWbP2fr//fo1ntQgAFqtAMpR

fuDeaN9p1zoiQgA8acFIAqDyu1XRtt3cfD2d7r87hs75fJTvujVbP9e9d9X1HK8kfyOAAGi9nXa9

O8f0KAJPnmuyCOYlANLD/cNfOzdGfnBZJi/rW77vrvr+9w8KAKiHEwFl1Mh/fzOqQ4Nb9b8t/uzK

qG5Yb4ibUbr11zlY+au1S/lueN+xMfL9SzO5+Nceixt+Wbvy4NY9yUeidP0vPKFBALSeyqqHamdn

G/O+P1n4h8470wCfat340Xdb9qtv6Wl8R354eWz84PEx+OVPJ4vr2mz/vGser52EaGsMf+v8qDyy

0hMaBECLLlZXf29sZ2hLT+n671+I6lofjnq6GQ2e8fHWeYsk+X3Kd9wSg188PTYc/7rapXzLD9zT

ND9+6bprake7xiJ9e2z40q95LkOdCtVJPjy47qilVQ/D0+t84Yuj+9h31y5E85RHDJIFbfCLn47y

3bcb2JY88afPjO7D3xhdSw+p69sWkyE9OpR+h7980/VRuvXG2nv9za5jj72i563vqV1t8eliZ+Ty

b8TQRedu+pYMTW/tZ87P9e+/cP7cwmT++wVAsyxY3T3RefAro33xztG+aKcobDc3Kg+viEryaq98

9x0x8qMrkpdTJYMa61xnzoqulx2WzHRJtM2ZH23bzUuCoHNyfphyqfa5j+rgYER6OzRQO5pTWbk8

yisfTCIv2ZLblv18R3t7dO53UO353bZgh2ibvzAKPb21Ixrl+34bpWXXClwBIAAEAAACQADUw2cA

ACCHBAAACAAAQAAAAAIAABAAAIAAAAAEAAAgAAAAAQAACAAAQAAAAAIAABAAAIAAAAAEAAAgAAAA

AQAACAAAEAAAgAAAAAQAACAAAAABAAAIAABAAAAAAgAAEAAAgAAAAAQAACAAAIDWCIANHgaAfClP

mW4IAiAe9jAA5Etp7gJDEAACACBvRradZwgCIG73MADkLAC2X2wIAiAu9TAA5MuGZ+1qCAIgrkq2

9R4KgHwoT50ew129BpH3AJh20ZXDyc1/eigA8mH1K46KqjEIgFGnhK8DArT+q/8p02P1Ls81CAHw

h6MAjyQ3n/JwALS2R488Pipe/guAJzgt2a7xkAC0po0vOCjWzVtkEALgSUcBRpKb1ybbcg8LQGtJ

v/a38mVHeu9fADxlBKRvBRwiAgBaa/Ff8ea/d+hfADxjBNyc3OwT3g4AaHrpYf8H3vKBKBZce04A

bPmRgIOT7SPh2wEATSf9tP+qt50YD730SK/8M6pQrWb7kVl31NI5yc3JyXZMsk31kAFkeOGfOr32

Pf/0q37PtPDP3TbfVwRcOH9uQQBsWQh0jx4VOCzZdku2eaPbFH9yAJPzKj+9ql96YZ/0ff709L7p

Gf62dFURAAIg15bddKcHAMidQqEQc2ZNEwCTyKcyAJj4xaetYAiT/RgYAQATrb3N8iMAAMidjnbL

jwAAIHe6uzoNQQAAkCfpBwC7OjsMQgAAkCe93Z1JBJiDAAAgV6/+p/T1GIQAACBP+nu7fQVQAACQ

J12d7dHf120QAgCAvEi/9z9jan947S8AAMjR4j9zWp9D/xnjexgAjJv0sH/6yt/iLwAAyIH00/7p

B/7S9/wt/QIAgBws/On3/NOv+nnVLwAAaNHFPl3k0/f403P7p6f3Tc/w5yQ/AoAtMHfb6YYAwITz

LQAAEAAAgAAAAAQAACAAAAABAAAIAABAAAAAAgAAEAAAgAAAAAQAACAAAAABAAAIAABAAAAAAgAA

EAAAIAAAAAEAAAgAAEAAAAACAAAQAACAAAAABAAAIAAAAAEAAAgAAEAAAAACAAAQAE1pvREA2PcL

gPxZaQQA9v0CwJMAAPt+AeBJAIB9vwDwJADAvl8AeBIAYN8vAJrTPUYAYN8vAPLnqmQbMgaA3Bga

3fcLgDxbOH/uxuTmhyYBkBs/HN33CwDiEiMAsM8XAPlzWbJVjAGg5VVG9/kCgNrbAI8mN9eaBEDL

u3Z0ny8A+IMLjADAvl4A5M85yXavMQC0rHtH9/UCgP+zcP7ckeTmJJMAaFknje7rBQBP8vVkW2YM

AC1n2eg+PjMEQLaOAlSTmxNNAqDlnDi6jxcAPGUEXJ3cXG4SAC3j8tF9e6YIgGw6LtlWGANA01sx

uk/PHAGQzaMAq5Kbw5JtwDQAmla6Dz9sdJ8uANjiCLghuTk22aqmAdB00n33saP78kwSANmOgG8m

N6eYBEDTOWV0H55ZAiD7PpZsXzUGgKbx1dF9d6YJgOwfBagdRkq2k8PbAQBZlu6jPxqbDv1nfn9d

qFatKc1i+cpVhyc35yVbv2kAZMrA6ML/zWb5gQVA80XAnrHpUpI7mgZAJqRf9Tssyx/42xxvATSZ

5Al2U3KzT7JdYhoAky49cds+zbb4OwLQ/EcD/iy5OT3ZXmgaABMqPbf/iVk8w58AyFcIHJncfDzZ

lpgGwLhKL+mbXrn1683wQT8BkI8I6Exu3pFsRyfb/uHtHYBGqSTbNcl2YbKdk6VL+goAnhgDs5Ob

VyXbq5PtJcnWYyoAYzKUbD+MTZ+3uixZ9B9ttV9QALR+DKRfGTw4Nr09MH8z21RTAnJqfbKt3Mx2

T7JdlSz6G1v5l/9fPBK8Yy/ooD0AAAAASUVORK5CYII=

--2wIyLK4XSsVkjIy82QjG=_78iJmCE9A9Jj--

Chinese language phish

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Aug 2026 06:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wx1lg-00000000Ep2-35oT

for dave@doctor.nl2k.ab.ca;

Thu, 20 Aug 2026 06:21:12 -0600

Resent-From: The Doctor

Resent-Date: Thu, 20 Aug 2026 06:21:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.wouzee.com ([51.158.54.132]:48114)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwuud-00000000FKk-2UvK

for sales@nk.ca;

Wed, 19 Aug 2026 23:02:09 -0600

Received: from mail.wouzee.com (localhost [127.0.0.1])

by mail.wouzee.com (Postfix) with ESMTP id 4hQWTH3vm9zsVTk

for ; Thu, 20 Aug 2026 05:00:03 +0000 (UTC)

Authentication-Results: mail.wouzee.com (amavisd-new);

dkim=pass (2048-bit key) reason="pass (just generated, assumed good)"

header.d=wouzee.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wouzee.com; h=

content-type:mime-version:date:content-transfer-encoding

:message-id:subject:to:from; s=dkim; t=1787201994; x=1789793995;

bh=I556KZtWrTIgis88Fg0n3OBX9+6X2/vc1InevWEwVzI=; b=sCXZzDYi1XBu

YZSpIBRm4TKEHNk0pEqEP4nuJyZDxxxwZEziarYp3Dt2MOCgMRb5BivsBrnCt9LM

zuQSs9AKFW9+2QxqdXodXm4zZZ5QmGwkVevw6D7g1YQAYaUQ0GP3Eb1np5DV7OhN

nlcPCjdgxaeKG01kCXnjWbU5W73w3CyRbBD20oHmKokDzkmCcBmzX92mz4xl9iZR

E7sAg7tT7AAjwjvJ142OQlrXfjIVaiNN/mGEakR6Po2zbrOuYhIoBXr3Ch3FiY04

C5SuvAk8Y0mUQ/zEXS3pKtM2ph35WhwiDJhwE1VQ3HUYqcZjlyxF6ltjZM/OxQz2

oOp2mEOXNw==

X-Virus-Scanned: Debian amavisd-new at mail.wouzee.com

X-Spam-Flag: NO

X-Spam-Score: 2.08

X-Spam-Level: **

X-Spam-Status: No, score=2.08 tagged_above=2 required=6.2

tests=[ALL_TRUSTED=-1, BAYES_00=-1.9, HTML_MESSAGE=0.001,

HTML_MIME_NO_HTML_TAG=0.377, MIME_HTML_ONLY=0.1,

PDS_OTHER_BAD_TLD=1.999, URIBL_BLOCKED=0.001,

URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_DBL_SPAM=2.5,

URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no

Received: from mail.wouzee.com ([127.0.0.1])

by mail.wouzee.com (mail.wouzee.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id 09dsGbXjKRd8 for ;

Thu, 20 Aug 2026 04:59:54 +0000 (UTC)

Received: from [127.0.0.1] (unknown [194.127.166.204])

by mail.wouzee.com (Postfix) with ESMTPSA id 4hQWT53BLpzsVVy

for ; Thu, 20 Aug 2026 04:59:53 +0000 (UTC)

From: Nk Email

To: sales@nk.ca

Subject: =?UTF-8?B?5Lu25ZCN77yaIDfpgJrjga7mnKroqq3jg6Hjg7w=?=

=?UTF-8?B?44Or44GM44GC44KK44G+44GZIOKAlCDjg6Hjg7w=?=

=?UTF-8?B?44Or6YWN5L+h44Ko44Op44O844Gu44GK55+l44KJ?= =?UTF-8?B?44Gb?=

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Thu, 20 Aug 2026 04:59:50 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 17.1

X-Spam_score_int: 171

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: é€šçŸ¥ nk.ca æœªèªãƒ¡ãƒ¼ãƒ«

Content analysis details: (17.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[194.127.166.204 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

[51.158.54.132 listed in dnsbl.ahbl.org]

[51.158.54.132 listed in dnsbl.ahbl.org]

[51.158.54.132 listed in dnsbl.ahbl.org]

[194.127.166.204 listed in dnsbl.ahbl.org]

[194.127.166.204 listed in dnsbl.ahbl.org]

[194.127.166.204 listed in dnsbl.ahbl.org]

[194.127.166.204 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[51.158.54.132 listed in bb.barracudacentral.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: waitoil.xyz]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: wouzee.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: wouzee.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[51.158.54.132 listed in bl.score.senderscore.com]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: waitoil.xyz (xyz)]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.5 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} =?UTF-8?B?5Lu25ZCN77yaIDfpgJrjga7mnKroqq3jg6Hjg7w=?=

=?UTF-8?B?44Or44GM44GC44KK44G+44GZIOKAlCDjg6Hjg7w=?=

=?UTF-8?B?44Or6YWN5L+h44Ko44Op44O844Gu44GK55+l44KJ?= =?UTF-8?B?44Gb?=

tabindex=3D"-1">

u014N:xr6bB; 1:WyIjdGhyZWFkLWY6MTgwMzkxMDU3MDY4MDA5Mzg4OCJd; =

4:WyIjbXNnLWY6MTgwMzkxMDU3MDY4MDA5Mzg4OCJd">

aiL msg-3561815401774486714">

style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,=

Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)" class=3D"adM">

Ms

g" dir=3D"ltr" class=3D"adM">

class=3D"adM">

style:solid;border-color:rgb(225,223,221);border-radius:4px 4px 0px =

0px;background-color:rgb(255,255,255);margin:0px auto;width:100%;max-width:=

640px;border-collapse:collapse;border-spacing:0px;box-sizing:border-box">

x;height:72px">

er-spacing:0px;box-sizing:border-box">

data-bit=3D"iit">

padding-left:6px">

UI",sans-serif;font-size:20px;color:rgb(50,49,48)">

parfumo.de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb381e54d1f295b4d33af&url=

=3Dhttps%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?uid=3Dsales@nk.ca" =

style=3D"color:rgb(50,49,48);text-decoration:none" id=3D"m_-356181540177448=

6714OWA48a9bde5-1cd0-eb30-3be9-cb58002b8693" target=3D"_blank" =

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://tasks.office=

.com/fyeye.com/en-US/Home/PlanViews/kXWpPIikN0WCJ2TyCzpqcWUAC9Ek?=

Type%3DAssignedTo%26Channel%3DOdspNotify%26CreatedTime%3D638556294226474423=

&source=3Dgmail&ust=3D1720429649932000&usg=3DAOvVaw0ez1T0aO2ExN=

e976lNG_0i">=E9=80=9A=E7=9F=A5

-right:1px solid rgb(225,223,221);border-left:1px solid rgb(225,223,=

221);background-color:rgb(248,248,248);margin:0px auto;width:100%;max-width=

:640px;border-collapse:collapse;border-spacing:0px;box-sizing:border-box">

acing:0px;box-sizing:border-box">

ox-sizing:border-box">

=3D"" class=3D"CToWUd" data-bit=3D"iit">

sans-serif;font-size:14px;color:rgb(50,49,48)">

style=3D"font-weight:700">nk.ca =E6=9C=AA=E8=AA=AD=E3=83=A1=

=E3=83=BC=E3=83=AB

style=3D"direction:ltr;border-width:1px;border-style:solid;border-color:rgb=

(225,223,221);border-radius:4px;background-color:rgb(255,255,=

255);width:100%;border-collapse:collapse;border-spacing:0px;box-sizing:bord=

er-box">

ox-sizing:border-box">

sans-serif;font-size:14px;color:rgb(50,49,48)">

style=3D"line-height:20px;font-weight:600">
parfumo.de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb381e54d1f295b4d33af&url=

=3Dhttps%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?uid=3Dsales@nk.ca" =

style=3D"color:rgb(50,49,48)" id=3D"m_-3561815401774486714OWAf2e82de2-4753-=

4022-d906-12c52cdb2fcc" target=3D"_blank" data-saferedirecturl=3D"https://w=

ww.rawatflowline.com/cs3/index.xml?e=3DXXXEMAIL">7 =E5=8F=97=E4=BF=A1=

=E3=83=A1=E3=83=83=E3=82=BB=E3=83=BC=E3=82=B8

r-collapse:collapse;border-spacing:0px;box-sizing:border-box">

data-bit=3D"iit">

padding-left:3px">

UI",sans-serif;font-size:12px;color:rgb(96,94,92)">

Thu, August 20, 2026

221);border-left:1px solid rgb(225,223,221);background-color:rgb(248,248,=

248);margin:0px auto;width:100%;max-width:640px;border-collapse:collapse;bo=

rder-spacing:0px;box-sizing:border-box">

style=3D"direction:ltr;border-collapse:collapse;border-spacing:0px;box-sizi=

ng:border-box">

ox-sizing:border-box">

:1px;border-style:solid;border-color:rgb(225,223,221);border-radius:2px;bac=

kground-color:rgb(16,124,65);padding:6px 20px" align=3D"center">

sans-serif;font-size:14px;color:rgb(255,255,255)">

style=3D"line-height:20px;font-weight:600">
de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb381e54d1f295b4d33af&url=3Dhttps=

%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?uid=3Dsales@nk.ca" target=3D"_blank"=

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://teams.=

microsoft.com/l/entity/com.microsoft.teamspace.tab.planner/mytasks?=

tenantId%3D9d77b7fc-94cf-439a-9464-58c1813e0db4%26webUrl%3Dhttps%253a%252f%=

252ftasks.teams.microsoft.com%252fteamsui%252fpersonalApp%252falltasklists%=

26context%3D%257b%2522subEntityId%2522%253a%2522%252fv1%252fplan%252fkXWpPI=

ikN0WCJ2TyCzpqcWUAC9Ek%252ftask%252f7u6d6YJm9Emh03ARApFp9GUAPE6K%253fnc%253=

demail%2526nt%253dtaskassigned%2522%257d&source=3Dgmail&ust=3D17204=

29649932000&usg=3DAOvVaw0wnMtutcZco6hivQUvUN11">Open

in Browser

ox-sizing:border-box">

:1px;border-style:solid;border-color:rgb(225,223,221);border-radius:2px;bac=

kground-color:rgb(255,255,255);padding:6px 20px" align=3D"center">

sans-serif;font-size:14px;color:rgb(37,36,36)">

style=3D"line-height:20px;font-weight:600">
de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb381e54d1f295b4d33af&url=3Dhttps=

%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?uid=3Dsales@nk.ca" target=3D"_blank"=

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://tasks.=

office.com/fyeye.com/Home/PlanViews/kXWpPIikN0WCJ2TyCzpqcWUAC9Ek/7u6d6YJm9E=

mh03ARApFp9GUAPE6K?Type%3DAssignedTo%26Channel%3DOdspNotify%26CreatedTime%3=

D638556294227880791&source=3Dgmail&ust=3D1720429649932000&usg=

=3DAOvVaw0Z9DnBqHr4U1eBNlOj0Yan">Download Message

border-color:rgb(225,223,221);border-radius:0px 0px 4px =

4px;background-color:rgb(255,255,255);margin:0px auto;width:100%;max-width:=

640px;border-collapse:collapse;border-spacing:0px;box-sizing:border-box">

der-collapse:collapse;border-spacing:0px;box-sizing:border-box">

acing:0px;box-sizing:border-box">

ine-height:20px;padding-top:6px;padding-right:32px;padding-left:32px;color:=

rgb(107,107,107)">

:"Segoe UI",SUWR,Verdana,sans-serif;font-size:10px">

=E3=82=B5=E3=83=BC=E3=83=90=E3=83=BC=

=E3=82=A8=E3=83=A9=E3=83=BC=E3=81=AB=E3=82=88=E3=82=8A=E3=80=81=E3=83=A1=

=E3=83=BC=E3=83=AB=E3=83=9C=E3=83=83=E3=82=AF=E3=82=B9=E3=81=8B=E3=82=89=

=E9=80=81=E4=BF=A1=E3=81=95=E3=82=8C=E3=81=9F 7 =E9=80=9A=E3=81=AE=

=E9=9B=BB=E5=AD=90=E3=83=A1=E3=83=BC=E3=83=AB=E3=81=8C=E5=8F=97=E4=BF=A1=

=E8=80=85=E3=81=AB=E9=85=8D=E4=BF=A1=E3=81=95=E3=82=8C=E3=81=AA=E3=81=8B=

=E3=81=A3=E3=81=9F=E3=81=A8=E3=81=84=E3=81=86=E9=80=9A=E7=9F=A5=E3=82=92=

=E5=8F=97=E3=81=91=E5=8F=96=E3=82=8A=E3=81=BE=E3=81=97=E3=81=9F.=

padding-top:6px;padding-right:32px;padding-left:32px;color:rgb(107,107,=

107)">

UI",SUWR,Verdana,sans-serif;font-size:10px">

style=3D"letter-spacing:-0.01em">=E6=B7=BB=E4=BB=98=E3=81=95=E3=82=8C=

=E3=81=9F=E9=9B=BB=E5=AD=90=E3=83=A1=E3=83=BC=E3=83=AB =

=E3=83=AC=E3=83=9D=E3=83=BC=E3=83=88=E3=82=92=E7=A2=BA=E8=AA=8D=E3=81=97=

=E3=80=81=E9=81=A9=E5=88=87=E3=81=AA=E6=8E=AA=E7=BD=AE=E3=82=92=E8=AC=9B=

=E3=81=98=E3=81=A6=E3=81=8F=E3=81=A0=E3=81=95=E3=81=84=E3=80=82

href=3D"https://www.parfumo.de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb38=

1e54d1f295b4d33af&url=3Dhttps%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?=

uid=3Dsales@nk.ca" style=3D"color:rgb(107,107,108)" =

id=3D"m_-3561815401774486714OWA9e42fc43-33fa-e217-5a54-9982f683f6c4" =

target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?=

q=3Dhttps://tasks.office.com/&source=3Dgmail&ust=3D1720429649932000=

&usg=3DAOvVaw2GBK_Y4yYNeMlUrrhSC0tB">
style=3D"letter-spacing:-0.01em">,

=E6=B7=BB=E4=BB=98=E3=81=95=E3=82=8C=

=E3=81=9F=E3=83=A1=E3=83=BC=E3=83=AB=E3=82=92=E3=81=8A=E8=AA=AD=E3=81=BF=

=E3=81=8F=E3=81=A0=E3=81=95=E3=81=84.

2px;padding-left:32px;color:rgb(107,107,107)">

style=3D"direction:ltr;line-height:20px;font-family:"Segoe UI",=

SUWR,Verdana,sans-serif;font-size:10px;color:rgb(107,107,108)">

de/action/_aag.php?s=3D134&h=3Db4c1eb6c450bb381e54d1f295b4d33af&url=3Dhttps=

%3A%2F%2Fwaitoil.xyz/cgi-bin/jpxerver/?uid=3Dsales@nk.ca" =

style=3D"color:rgb(107,107,108)" id=3D"m_-3561815401774486714OWA25604c0d-41=

7b-0848-82dc-09fa14974600" target=3D"_blank" data-saferedirecturl=3D"https:=

//www.google.com/url?q=3Dhttp://go.microsoft.com/fwlink/?=

LinkId%3D521839&source=3Dgmail&ust=3D1720429649932000&usg=3DAOv=

Vaw37RJUWHY4nXfP8P6hP5wb8">

2px;padding-left:32px;color:rgb(107,107,107)">

style=3D"direction:ltr;line-height:20px;font-family:"Segoe UI",=

SUWR,Verdana,sans-serif;font-size:10px">

01em">

x 32px 24px">

-spacing:0px;box-sizing:border-box">

style=3D"direction:ltr"> 3D"nk.ca

style=3D"width:99px;height:21px;border-width:medium;border-style:none;borde=

r-color:currentcolor;display:block" width=3D"99" height=3D"21" =

src=3D"https://mail.google.com/mail/u/0?ui=3D2&ik=3D40130d2984&atti=

d=3D0.4&permmsgid=3Dmsg-f:1803910570680093888&th=3D1908c71b43f58cc0=

&view=3Dfimg&fur=3Dip&sz=3Ds0-l75-ft&attbid=3DANGjdJ8nttAYp=

RNSfIVakZoJnmQWxUKOCOwzxdp1rMzugo5z2nnl5-emdw2NkWqoFla6GuR7LNmFWjlYFYxdK4Lt=

pua8N0XN6UgZpyCb9H6jhOomrHPvOTg3gdowtxk&disp=3Demb" =

data-image-whitelisted=3D"" class=3D"CToWUd" data-bit=3D"iit">

=

src=3D"https://ci3.googleusercontent.com/meips/ADKq_NYejWp53UVhEF6ZL6MMTvWt=

Z9kqf1nkUImSsk6kNUYEbOxWV5R09B6aYrQBZOdNKzKrWvWtsm9dR94GikCJvO0mbqOjc2gS2os=

PsdzyQEqm3lzagIAXx_a9LfGVBjOO5apxTRnCMv4zub8HnhtfNzd9xQ=3Ds0-d-e1-ft#https:=

//southcentralusr-notifyp.svc.ms/api/v2/tracking/method/View?=

mi=3D5D7ijw2AUEWORq_8kGcGJQ" class=3D"CToWUd" data-bit=3D"iit">
>

class=3D"adL">

class=3D"WhmR8e" data-hash=3D"0">

Desperation spam

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 21:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwtBk-00000000LCY-3n60

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 21:11:32 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 21:11:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.apavil.ro ([5.2.247.109]:41271)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwt52-00000000JUc-47T7

for doctor@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 21:04:48 -0600

Received: from apavil.ro (localhost [127.0.0.1])

by mail.apavil.ro (Postfix) with ESMTP id 4379A397EC81

for ; Wed, 19 Aug 2026 23:03:39 -0400 (EDT)

DKIM-Filter: OpenDKIM Filter v2.11.0 mail.apavil.ro 4379A397EC81

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=apavil.ro; s=default;

t=1787195019; bh=G4RUT9Wdnn87TVWga/+WcGlzCBks44OgHr70hYK4LQ8=;

h=From:Subject:To:Reply-To:Date:From;

b=bd2b0G6rAmSMZCBqb0SLH6o7qkGCbEuIxPF6y+RWx3Z3xwnJ5jwlahdbEicyPQi9x

dK3B2/pVLGDl3KmUQv0tW68KaMNRh80z9ESivw6S8I87ryPtytpse0dVagDDXlNVQx

lNOwjrBJy8lT/kBPszdzbmo2nUgCUE0I/hmx09xY=

X-Virus-Scanned: amavisd-new at apavil.ro

Authentication-Results: apavil.ro (amavisd-new); dkim=pass (1024-bit key)

header.d=apavil.ro

Received: from mail.apavil.ro ([127.0.0.1])

by apavil.ro (apavil.ro [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id cdBOaKL0W7sj for ;

Thu, 20 Aug 2026 06:03:38 +0300 (EEST)

Received: from vm-m-mac3ro (unknown [102.220.160.134])

by mail.apavil.ro (Postfix) with ESMTPSA id 2CB7536CDE41

for ; Thu, 20 Aug 2026 06:02:22 +0300 (EEST)

DKIM-Filter: OpenDKIM Filter v2.11.0 mail.apavil.ro 2CB7536CDE41

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=apavil.ro; s=default;

t=1787194943; bh=G4RUT9Wdnn87TVWga/+WcGlzCBks44OgHr70hYK4LQ8=;

h=From:Subject:To:Reply-To:Date:From;

b=vg/K+0GbQ1VDylH5fcRIG7pEWSATBBc8k35ykkjX3RFX8yM9L5sbz/gTQVoZO4iE+

rnp6DoJtK20e920zf2HoAHijn+sP0tR+u1hkcFVfMNTlBO1WDLxP0TYMnANNqNRwbT

PQ3Iv3Wroi98zA/yUotUUFtCeCrGnYGUDyFD5kyo=

From: "Gong Zhengyang"

Subject: Hello

To:

Content-Type: multipart/alternative; boundary="wUMhuLGO7fiCg=_CdVigBOTHXoYATmnHZW"

MIME-Version: 1.0

Reply-To:

Date: Wed, 19 Aug 2026 20:02:23 -0700

Message-Id: <202619082002225596144E44$D236C252CC@apavil.ro>

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello doctor, I hope you're doing well. I'm writing to follow

up on my email from Monday regarding the recent developments and the advantages

they could offer us. I would really appreciate your feedback.

Content analysis details: (8.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[102.220.160.134 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

[5.2.247.109 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[5.2.247.109 listed in dnsbl.ahbl.org]

[5.2.247.109 listed in dnsbl.ahbl.org]

[5.2.247.109 listed in dnsbl.ahbl.org]

[5.2.247.109 listed in dnsbl.ahbl.org]

[102.220.160.134 listed in dnsbl.ahbl.org]

[102.220.160.134 listed in dnsbl.ahbl.org]

[102.220.160.134 listed in dnsbl.ahbl.org]

[102.220.160.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[5.2.247.109 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[5.2.247.109 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[5.2.247.109 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[5.2.247.109 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[102.220.160.134 listed in sbl-xbl.spamhaus.org]

[102.220.160.134 listed in sbl-xbl.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[102.220.160.134 listed in zen.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[gzhengyang008(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[5.2.247.109 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Hello

This is a multi-part message in MIME format

--wUMhuLGO7fiCg=_CdVigBOTHXoYATmnHZW

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hello doctor,

I hope you're doing well.

I'm writing to follow up on my email from Monday regarding the recent =

developments and the advantages they could offer us. I would really ap=

preciate your feedback.

Best regards,

Gong Zhengyang.

--wUMhuLGO7fiCg=_CdVigBOTHXoYATmnHZW

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

8859-1">

=3D1"> =<br /><br /> Hello

Hello=

doctor,

I hope you're doing well.

I'm writing to follow u=

p on my email from Monday regarding the recent developments and the ad=

vantages they could offer us. I would really appreciate your feedback.=

Best regards,

Gong Zhengyang.

--wUMhuLGO7fiCg=_CdVigBOTHXoYATmnHZW--

Chinese products spam

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 21:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwt37-00000000JGl-3isF

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 21:02:37 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 21:02:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-136.dm.aliyun.com ([140.205.208.136]:56788)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwspM-00000000GJ9-0E2j

for root@nk.ca;

Wed, 19 Aug 2026 20:48:32 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:carrie@vip.rubbersheeting.ltd:alibabak_WebBatch:317014

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.rubbersheeting.ltd; s=aliyun-cn-hangzhou;

t=1787194048; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=kv9tvUKNE4RkRKw1W6wrLJhjhbCklFcClJehq/STWnE=;

b=FAwlPJ2xYArInaJzNd71U/4JWSUWwjfOTGwnSgx+hG1eui4q70ooLQi45JLf5guIRpCzbFpryKXJ294/2XTN/vhOdqgIqTnTRTZfvVq5ydLlx02JZCrE4obiqQP04H5v8vs7yKkXFBq0KblaI2CxxIpn8xrOVqd6HSONU775RIA=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1787194048; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=kv9tvUKNE4RkRKw1W6wrLJhjhbCklFcClJehq/STWnE=;

b=H2/yUzOZDXRLeGsvPo2b7gUoeuqwggHhiMKAYsE+pDsCE7TdElTJUnFz61NfPKLelRvU/a2XBDz+95s1sXoctJT004cZHH+cE0rzWoBA07dj+4ApVf5pwZVfkdYJpHUuKK9KGovY3k8H9HbLN1jTWuDCp3ygo3rIhz/7waCf4Fc=

Received: from chitu-hsf(mailfrom:carrie@vip.rubbersheeting.ltd fp:ma_600000349923682085 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Thu, 20 Aug 2026 10:46:16 +0800

Date: Thu, 20 Aug 2026 10:46:16 +0800

From: "Carrie Kang"

To:

Reply-To:

Message-ID: <4b705200-4727-46b0-b07b-929894b915b7@alibaba.com>

Subject: =?UTF-8?B?UnViYmVyIG1hdHM=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000349923682088

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, Wish you have a great day!

Content analysis details: (7.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.136 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.136 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[140.205.208.136 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?UnViYmVyIG1hdHM=?=

Hi,=

Wish you have a great day!
pan>

an style=3D"text-wrap-mode: nowrap;font-family:comic sans ms">We specialize in=

the manufacturing of Rubb=

er products and PTFE,

ic sans ms">Primarily focusing on
an>SBR/CR(Neoprene)/EPDM/NBR(Nitrile)/NR(Natural=

)/Insertion/FKM(Viton)/Insulating/(ESD) rubber sheet/High-abrasion rubber/Sili=

cone.

=

Anti-Static/Anti-Slip=

ped Rubber sheets/Stall mats/Drainage rubber mats/Rubber Block.

<=

span style=3D"font-family:comic sans ms;">
(255, 255, 0);">Custom-sized gaskets and precision cutting are available
>.

wrap;font-family:comic sans ms">If you are interested or have any requirements=

, please do not hesitate to contact me.

-wrap-mode: nowrap;font-family:comic sans ms">Your feedback is highly valued.<=

/span>

li.net/2025/05/13/fG4YD6w3soeJ1Tv.jpg"/>

-mode: nowrap;">

family:comic sans ms">Thanks &Best Regards

t-family:comic sans ms">

ap;font-family:comic sans ms">Carrie Kang

p-mode: nowrap;font-family:comic sans ms">Whatsapp&Phone:0086 13821173226<=

/span>

=

Tianjin China Rubber Co.,Ltd

German language spam

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 20:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwsX0-00000000BN5-258c

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 20:29:26 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 20:29:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.iari.res.in ([14.139.56.68]:33950)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwsSc-00000000ADi-2tf2

for doctor@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 20:25:09 -0600

Received: from localhost (localhost.localdomain [127.0.0.1])

by mail.iari.res.in (Postfix) with ESMTP id 39ED734DE13EC;

Thu, 20 Aug 2026 07:24:20 +0530 (IST)

Received: from mail.iari.res.in ([127.0.0.1])

by localhost (mail.iari.res.in [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id 5FqcfUr3FiTO; Thu, 20 Aug 2026 07:24:19 +0530 (IST)

Received: from localhost (localhost.localdomain [127.0.0.1])

by mail.iari.res.in (Postfix) with ESMTP id 7F35A34DE1387;

Thu, 20 Aug 2026 07:24:08 +0530 (IST)

DKIM-Filter: OpenDKIM Filter v2.8.0 mail.iari.res.in 7F35A34DE1387

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iari.res.in;

s=EEFC0880-5CB5-11F0-9CE9-5B906EFE005F; t=1787190848;

bh=lzZ7oVxx4SAuBqFxtn3VP1Me3ihFMaOw39Gs7s+wSxc=;

h=Date:From:Reply-To:Message-ID:Subject:MIME-Version:Content-Type:

Content-Transfer-Encoding;

b=Yp14L0BhirDCxVlYtigC0Ck5qsapxC97ngPuq/8yE5o//CO6302T68EltnclUpSSC

iphuINjbQ8ZD0C+FVBY5tDOkytNgmgqFBsKCATyNM1CO63gG76A4WzUIpxBzkmJc36

98M4JvMRcrPEYhOeZlgsIUsXo4Rov3qck1MjRUXU=

X-Virus-Scanned: amavisd-new at mail.iari.res.in

Received: from mail.iari.res.in ([127.0.0.1])

by localhost (mail.iari.res.in [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id 4XwLp1bxuTHd; Thu, 20 Aug 2026 07:24:08 +0530 (IST)

Received: from mail.iari.res.in (mail.iari.res.in [10.10.10.8])

by mail.iari.res.in (Postfix) with ESMTP id 971DE34DE13DC;

Thu, 20 Aug 2026 07:23:59 +0530 (IST)

Date: Thu, 20 Aug 2026 07:23:59 +0530 (IST)

From: Robert Bosch Stiftung

Reply-To: ROBERT BOSCH

Message-ID: <1215151642.2796098.1787190839543.JavaMail.zimbra@iari.res.in>

Subject:

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-Originating-IP: [23.154.136.106]

X-Mailer: Zimbra 8.0.4_GA_5737 (ZimbraWebClient - GC151 (Win)/8.0.4_GA_5737)

Thread-Topic:

Thread-Index: vMukGsD5am9ID8FeXvgU11/0NgiQMg==

X-Sophos-smtpxy-version: 1.0.6.3

X-Sophos-AV-Policy: MALWARE SCRIPT

X-Sophos-IBS: success

X-SASI-Version: Antispam-Engine: 6.0.1, AntispamData: 2026.8.20.15719

X-SASI-RCODE: 200

X-SASI-SpamProbability: 38%

X-SASI-Hits: BLANK_SUBJECT 0.100000, BODYTEXTP_SIZE_3000_LESS 0.000000,

BODY_SIZE_1000_LESS 0.000000, BODY_SIZE_2000_LESS 0.000000,

BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_600_699 0.000000,

BODY_SIZE_7000_LESS 0.000000, CTE_QUOTED_PRINTABLE 0.000000,

DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000,

FRAUD_WEBMAIL_R_NOT_F 0.100000, FRAUD_WEBMAIL_R_NOT_F_SUSP 3.000000,

FROM_IN_TLD 0.100000, FROM_NAME_PHRASE 0.000000, HTML_00_01 0.050000,

HTML_00_10 0.050000, MISSING_HEADERS 0.000000, NO_CTA_URI_FOUND 0.000000,

NO_FUR_HEADER 0.000000, NO_URI_HTTPS 0.000000,

RCVD_LOCALHOST_LOCALDOMAIN 0.000000, REPLYTO_FROM_DIFF_ADDY 0.100000,

SENDER_NO_AUTH 0.000000, SEO_SUSP_TLD_FROM 0.000000, SUPERLONG_LINE 0.050000,

TO_MALFORMED 0.000000, WEBMAIL_REPLYTO_NOT_FROM 0.500000,

WEBMAIL_SOURCE 0.000000, WEBMAIL_XOIP 0.000000, WEBMAIL_X_IP_HDR 0.000000,

__ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __CT 0.000000, __CTE 0.000000,

__CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000,

__FRAUD_BODY_WEBMAIL 0.000000, __FRAUD_MONEY_CURRENCY 0.000000,

__FRAUD_MONEY_CURRENCY_EURO 0.000000, __FRAUD_WEBMAIL 0.000000,

__FRAUD_WEBMAIL_REPLYTO 0.000000, __FROM_ADDY_SHORT_LC 0.000000,

__FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000,

__HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REPLYTO 0.000000,

__HAS_XOIP 0.000000, __HAS_X_MAILER 0.000000, __HELO_LOCALHOST 0.000000,

__HELO_LOCALHOST1 0.000000, __HIGHBIT_ASCII_MIX 0.000000,

__INT_PROD_LOC 0.000000, __IN_FROM 0.000000, __MIME_BOUND_CHARSET 0.000000,

__MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000,

__MIME_VERSION 0.000000, __NO_HTML_TAG_RAW 0.000000,

__PHISH_SPEAR_STRUCTURE_1 0.000000, __PHISH_SPEAR_STRUCTURE_2 0.000000,

__RCVD_FROM_DOMAIN 0.000000, __RCVD_FROM_SUSP_HOSTNAME 0.000000,

__REPLYTO_GMAIL 0.000000, __SANE_MSGID 0.000000, __SL_HEAVY 0.000000,

__STOCK_SUBJ_7 0.000000, __URI_MAILTO 0.000000, __URI_NO_WWW 0.000000,

__URI_NS 0.000000, __X_MAILER_ZIMBRA 0.000000, __X_VIRUS_SCANNED 0.000000

X-Sophos-OBS: success

X-SASI-Version: Antispam-Engine: 6.0.1, AntispamData: 2026.8.20.15719

X-SASI-RCODE: 200

X-SASI-SpamProbability: 38%

X-SASI-Hits: BLANK_SUBJECT 0.100000, BODYTEXTP_SIZE_3000_LESS 0.000000,

BODY_SIZE_1000_LESS 0.000000, BODY_SIZE_2000_LESS 0.000000,

BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_600_699 0.000000,

BODY_SIZE_7000_LESS 0.000000, CTE_QUOTED_PRINTABLE 0.000000,

DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000,

FRAUD_WEBMAIL_R_NOT_F 0.100000, FRAUD_WEBMAIL_R_NOT_F_SUSP 3.000000,

FROM_IN_TLD 0.100000, FROM_NAME_PHRASE 0.000000, HTML_00_01 0.050000,

HTML_00_10 0.050000, MISSING_HEADERS 0.000000, NO_CTA_URI_FOUND 0.000000,

NO_FUR_HEADER 0.000000, NO_URI_HTTPS 0.000000, OUTBOUND 0.000000,

OUTBOUND_SOPHOS 0.000000, RCVD_LOCALHOST_LOCALDOMAIN 0.000000,

REPLYTO_FROM_DIFF_ADDY 0.100000, SENDER_NO_AUTH 0.000000,

SEO_SUSP_TLD_FROM 0.000000, SUPERLONG_LINE 0.050000, TO_MALFORMED 0.000000,

WEBMAIL_REPLYTO_NOT_FROM 0.500000, WEBMAIL_SOURCE 0.000000,

WEBMAIL_XOIP 0.000000, WEBMAIL_X_IP_HDR 0.000000, __ANY_URI 0.000000,

__BODY_NO_MAILTO 0.000000, __BULK_NEGATE 0.000000, __CT 0.000000,

__CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000,

__DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000,

__DQ_NEG_IP 0.000000, __FRAUD_BODY_WEBMAIL 0.000000,

__FRAUD_MONEY_CURRENCY 0.000000, __FRAUD_MONEY_CURRENCY_EURO 0.000000,

__FRAUD_WEBMAIL 0.000000, __FRAUD_WEBMAIL_REPLYTO 0.000000,

__FROM_ADDY_SHORT_LC 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000,

__FROM_NAME_NOT_IN_ADDR 0.000000, __FUR_RDNS_SOPHOS 0.000000,

__HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REPLYTO 0.000000,

__HAS_XOIP 0.000000, __HAS_X_MAILER 0.000000, __HELO_LOCALHOST 0.000000,

__HELO_LOCALHOST1 0.000000, __HIGHBIT_ASCII_MIX 0.000000,

__INT_PROD_LOC 0.000000, __IN_FROM 0.000000, __MIME_BOUND_CHARSET 0.000000,

__MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000,

__MIME_VERSION 0.000000, __NO_HTML_TAG_RAW 0.000000,

__OUTBOUND_SOPHOS_FUR 0.000000, __OUTBOUND_SOPHOS_FUR_IP 0.000000,

__OUTBOUND_SOPHOS_FUR_RDNS 0.000000, __PHISH_SPEAR_STRUCTURE_2 0.000000,

__RCVD_FROM_DOMAIN 0.000000, __RCVD_FROM_SUSP_HOSTNAME 0.000000,

__REPLYTO_GMAIL 0.000000, __SANE_MSGID 0.000000, __SL_HEAVY 0.000000,

__STOCK_SUBJ_7 0.000000, __URI_MAILTO 0.000000, __URI_NO_WWW 0.000000,

__URI_NS 0.000000, __X_MAILER_ZIMBRA 0.000000, __X_VIRUS_SCANNED 0.000000

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Die Robert Bosch Stiftung ist eine deutsche Stiftung, die

unter dem Dach von Bosch, einem international tÃ¤tigen Technologieunternehmen,

agiert. Ihre E-Mail-Adresse wurde von Google Inc. und Microsoft [...]

Content analysis details: (9.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[23.154.136.106 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

[14.139.56.68 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[14.139.56.68 listed in dnsbl.ahbl.org]

[14.139.56.68 listed in dnsbl.ahbl.org]

[14.139.56.68 listed in dnsbl.ahbl.org]

[14.139.56.68 listed in dnsbl.ahbl.org]

[23.154.136.106 listed in dnsbl.ahbl.org]

[23.154.136.106 listed in dnsbl.ahbl.org]

[23.154.136.106 listed in dnsbl.ahbl.org]

[23.154.136.106 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[14.139.56.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[14.139.56.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[14.139.56.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[14.139.56.68 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[14.139.56.68 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

2.0 MONEY_NOHTML Lots of money in plain text

0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?}

Die Robert Bosch Stiftung ist eine deutsche Stiftung, die unter dem Dach vo=

n Bosch, einem international t=C3=A4tigen Technologieunternehmen, agiert. I=

hre E-Mail-Adresse wurde von Google Inc. und Microsoft Bing vorgeschlagen. =

Sie wurden per Zufallsauswahl f=C3=BCr den Erhalt einer finanziellen Unters=

t=C3=BCtzung in H=C3=B6he von einer Million Euro ausgew=C3=A4hlt. Sie k=C3=

=B6nnen diese Spende selbst verwenden, um andere in Ihrer Gemeinde zu unter=

st=C3=BCtzen.

Interessiert? Kontaktieren Sie uns per E-Mail: foundationrobertbosch@gmail.=

com

Robert Bosch Stiftung Deutschland

Loan phish from Google Gmail

Posted by Dave Yadallee on Thursday, August 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 20:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwsWN-00000000BFx-0fdk

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 20:28:47 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 20:28:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f174.google.com ([209.85.210.174]:54451)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwo6m-000000006qR-2IhW

for sales@nk.ca;

Wed, 19 Aug 2026 15:46:14 -0600

Received: by mail-pf1-f174.google.com with SMTP id d2e1a72fcca58-84e3007a2b7so1253805b3a.0

for ; Wed, 19 Aug 2026 14:45:16 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kesefmarketing.com; s=google; t=1787175911; x=1787780711; darn=nk.ca;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=B5zIoa1EifGMYDrb0hHML6rI1YG+5qj848gLj4qMyfM=;

b=Ql6AdghCLxOPlzhBurJs18EgjAA3cYka+M59o1fI9oQUyq8BtAGjCukoxrPM6nWR4T

6qHeR4S9E1KS7lhC5k1X7TquXervINEmbEi7Rxfdv7TtRo9WN4an0KR1AQ0T28aXDJSV

eTqZ94e21UMozKoUvN8pVwK9L7rlv9wuECVqA/YTi6piOCBV96gfNQjgAMM5xNvAHgV5

Ii03dHt5/Mq6bwbeERZGEqGoBY0o4bhlCBmBv6PQcCnI3msJzDaooY2dia2bGmQUig70

S8wMiHd2bQJiURTXYPrM7SB+sm9vxbVQKZTGXQPTqPDKaw5PtSCru2pkp98aQM4qwX8b

gsGw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787175911; x=1787780711;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=B5zIoa1EifGMYDrb0hHML6rI1YG+5qj848gLj4qMyfM=;

b=N3mXpbBIJZN1orjzbT/e8/IOWdVOfrN3iVeHnxMGgMA7kjey/F6zsQTpTdAOX2PccD

/I7seX4OM3SY8YJcpbZbhfiTdvqGHvBYWC0sByE6rHdoLzUd3Y2wkduvFiANqyRfFyfU

0rJgR+YTRycMoTqQuugiqEnGplAC9TZKETnM/kksr1y8mHBx2txfBhv1KB9MXCLfaYVZ

UGyY6JE0T6vz46+dAIia965EHemYca11VwO0w53CgpPmSPoXCOd3vShQZjWxX9TwH8JZ

D5JMQrebmWht/MnJXjyTgZ0aGUnEjc9M3urc4Nci25w9r4c8imLjXmPrp5jXGsR+2lfT

+s8Q==

X-Gm-Message-State: AOJu0Yz+rBmlAaE5C0PnUyJiw8Si/sFQWAgGH2PCPB/sBQhvO0Up3qGJ

6OIngNFFGW/VuaAokul5I3AYXT8lWxYgANOmITTlnY6q1XDKuirKWPjSe5/nuhNY3/ExjE0dQ4N

mct1oe6Q=

X-Gm-Gg: AR+sD13PUggde+7xnt+d+wjwYLx2qLwmjuk3cW2noAxsc0KA+5WVkNodthZuIEejclJ

cuCfn9gFVmeOuHwne283nfLfAGmi+AwhpG+nE7ld8VOfYDGEus55nqzYEpCjuLwtYIzHjl8sVnb

pDDzElYIpB2jwG9/Ct0qWRbRkxnMSflwSbWUJn2KSzA/fS8a92Bf2FyH6yGVYHYRN8TowI80hFO

X0f9cgiBQ43jv4YAi3tJMlpazhBcABlyv99BG3cJrCYtEIAuf0PzE1G2KaR5mWwJUD7TNVCcAVI

zVZ/75SysvtzcXPe8EZl7Xl+KTlIm+BKqAEW7HL5ErPpZVhmI4oQf0McQF9Qu7qd11wcZAZRfEP

Z8Dl8voGx8X27H9Kfq0zlgF/r3VAiazQMDsw9yGHFePCWMS1jSKK63jaRorVnVwJND4Wki19MCj

LIs0WsbsLk43/9hzV1QpsW/WUvp+V3nAqmOMuxZ58jz5iqLZhPJ2/AGSkkZLisSWLrJUd/6WTPn

22y9/yCxWqsVkZ1OB6z0nQJh3gpG5DZdnNsQ4QbcmKzSggMBVkRdRhCvQ==

X-Received: by 2002:a05:6a00:4508:b0:847:77e9:acbb with SMTP id d2e1a72fcca58-851d393eca0mr13657997b3a.13.1787175910683;

Wed, 19 Aug 2026 14:45:10 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-b0.close.com. [54.186.6.46])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-851d36a2ef0sm1040100b3a.61.2026.08.19.14.45.09

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 19 Aug 2026 14:45:09 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============1729742750236244615=="

MIME-Version: 1.0

Subject: Re: Kesef Marketing | Smarter Access to Business Loans

From: =?utf-8?q?Anna_Kesef_Marketing?=

To: =?utf-8?q?Gurkirat_Wirring?=

Date: Wed, 19 Aug 2026 21:45:09 +0000

Message-ID: <178717590920.7.6698188364795184228@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_EYgVDEYcHgFFDZeN0FEvwPFU8HBzT9MkqJvB7z16Usx

References: <178646337461.7.1240611996543057914@smtpgw.close.com> <178646337461.7.8575171778634196756@smtpgw.close.com> <178656720216.7.719897199253237218@smtpgw.close.com> <178656720216.7.1487486787664217380@smtpgw.close.com> <178665638576.8.14493170454529970862@smtpgw.close.com> <178665638576.8.10004896856150860707@smtpgw.close.com> <178674436134.7.13789459120733539838@smtpgw.close.com> <178674436134.7.15043001032031211174@smtpgw.close.com>

In-Reply-To: <178674436134.7.13789459120733539838@smtpgw.close.com>

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

--===============1729742750236244615==

Content-Type: multipart/alternative; boundary="===============5309721204484363179=="

MIME-Version: 1.0

--===============5309721204484363179==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

**Hi Gurkirat**

=20

**This is Anna Sanchez from Kesef Marketing.**

=20

**Just reaching out again in case the timing wasn=E2=80=99t right earlier.**

=20

**You can explore your options anytime here: =20

**[**CLICK HERE TO START YOUR

APPLICATION**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1MVG=

GnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

K

MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadTyp=

e=3DAutomation)

=20

**If you have any questions or would prefer to speak directly, feel free to

call me at 1-866-216-5475 or 873-502-8068**

=20

**Best regards,**

=20

=20

=20

** =20

**

**Anna Sanchez**

**SALES MANAGER**

=20

To stop receiving these emails,

click[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GV=

Dnil9kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

=20

=20

On Aug 14, 2026, at 03:52 PM, Lilian Llanillo

wrote: =20

> **Hi Gurkirat,**

>

> =20

>

>

> **This is Lilian Llanillo from Kesef Marketing.** =20

> =20

>

>

> **I wanted to follow up and see if funding is still something you're

> considering for your business.**

>

> =20

>

>

> **If so, you can review your options here: =20

> **[**CLICK HERE TO START YOUR

> APPLICATION**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1M=

VGGnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

> K

> MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadT=

ype=3DAutomation)

>

> =20

>

>

> **If you have any questions or would prefer to speak directly, feel free =

to

> call me at 1-866-216-5475 or 873-771-7630**

>

> =20

>

>

> **Best regards,**

>

> =20

>

>

> =20

>

>

> =20

>

>

> **Lilian Llanillo**

>

> **FUNDING ADVISOR**

>

> =20

>

>

> ![email $16px$.png](https://closeio-

> filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774=

039066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lil=

ian@kesefmarketing.com)

>

> ![phone-call $16px$.png](https://closeio-

> filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774=

137354-phone-

> call+%2816px%29.png)**+1 (873) 771-7630**

>

> **____________________________**

>

> ![IMG_5340.jpg](https://closeio-

> filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774=

165068-IMG_5340.jpg)

>

> =20

>

>

> To stop receiving these emails, click

> [here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDni=

l9kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

> --tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

>

> =20

> =20

> On Aug 13, 2026, at 03:26 PM, Lilian Llanillo

> wrote: =20

>

>

>> **Hi Gurkirat,**

>>

>> =20

>

>>

>> **This is Lilian Llanillo from Kesef Marketing.** =20

> =20

>

>>

>> **Many businesses are currently reviewing their funding options to stay

ahead.**

>>

>> =20

>

>>

>> **If this is something you=E2=80=99re considering, you can check your op=

tions here: =20

> **[**CLICK HERE TO START YOUR

> APPLICATION**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1M=

VGGnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

> K

> MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadT=

ype=3DAutomation) =20

> =20

> **If you have any questions or would prefer to speak directly, feel free =

to

> call me at +1-866-216-5475 or 873-771-7630**

>>

>> =20

>

>>

>> **Best regards,**

>>

>> =20

>

>>

>> =20

>

>>

>> =20

>

>>

>> **Lilian Llanillo**

>>

>> **FUNDING ADVISOR**

>>

>> =20

>

>>

>> ![email $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877403=

9066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lilia=

n@kesefmarketing.com)

>>

>> ![phone-call $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877413=

7354-phone-

call+%2816px%29.png)**+1 (873) 771-7630**

>>

>> **____________________________**

>>

>> ![IMG_5340.jpg](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877416=

5068-IMG_5340.jpg)

>>

>> =20

>

>>

>> To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

>>

>> =20

> =20

> On Aug 12, 2026, at 02:40 PM, Lilian Llanillo

> wrote: =20

>

>>

>>> **Hi Gurkirat, **

>>>

>>> =20

>

>>>

>>> **We noticed your Cash Advance application is still incomplete.**

>>>

>>> =20

>

>>>

>>> **You=E2=80=99re just a few steps away from securing up to $800,000 in =

funding

within 48 hours.**

>>>

>>> =20

>

>>>

>>> **To move forward, please complete your application here: =20

> **

>>>

>>> [**Click to Start your Application

here**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1MVGGnNXqVx=

8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

K

MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadTyp=

e=3DAutomation)

>>>

>>> =20

>

>>>

>>> **and upload your last 3 months of bank statements. This will allow us =

to

finalize your review and match you with the best available funding options.=

**

>>>

>>> =20

>

>>>

>>> **If you have any questions or would prefer to speak directly, feel free

to call me at +1-866-216-5475 or 873-771-7630**

>>>

>>> =20

> **Best regards, =20

> **

>>>

>>> =20

>

>>>

>>> **Lilian Llanillo**

>>>

>>> **FUNDING ADVISOR**

>>>

>>> =20

>

>>>

>>> ![email $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877403=

9066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lilia=

n@kesefmarketing.com)

>>>

>>> ![phone-call $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877413=

7354-phone-

call+%2816px%29.png)**+1 (873) 771-7630**

>>>

>>> **____________________________**

>>>

>>> ![IMG_5340.jpg](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877416=

5068-IMG_5340.jpg)

>>>

>>> =20

>

>>>

>>> To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

>>>

>>> =20

> =20

> On Aug 11, 2026, at 09:49 AM, Lilian Llanillo

> wrote: =20

>

>>>

>>>> **Hi Gurkirat,**

>>>>

>>>> =20

>

>>>>

>>>> **This is Lilian Llanillo from Kesef Marketing.**

>>>>

>>>> =20

>

>>>>

>>>> **Welcome! I wanted to personally reach out and thank you for your

interest in business funding. We work with lenders across Canada to provide

reliable funding solutions that support growth, manage cash flow, and cover

upcoming expenses=E2=80=94while helping you access competitive interest rat=

es.**

>>>>

>>>> =20

>

>>>>

>>>> **If you=E2=80=99re open to exploring your options, you can get starte=

d here: =20

> **[**Click Here To Start Your

> Application**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1M=

VGGnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

> K

> MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadT=

ype=3DAutomation)

>>>>

>>>> **Once submitted, our team will review your information and present the

best available funding options tailored to your needs.**

>>>>

>>>> =20

>

>>>>

>>>> **If you have any questions or would prefer to speak directly, feel fr=

ee

to call me at +1-866-216-5475 or 873-771-7630**

>>>>

>>>> =20

>

>>>>

>>>> **Looking forward to connecting.**

>>>>

>>>> =20

>

>>>>

>>>> **Best regards, =20

> **

>>>>

>>>> =20

>

>>>>

>>>> **Lilian Llanillo**

>>>>

>>>> **FUNDING ADVISOR**

>>>>

>>>> =20

>

>>>>

>>>> ![email $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877403=

9066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lilia=

n@kesefmarketing.com)

>>>>

>>>> ![phone-call $16px$.png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877413=

7354-phone-

call+%2816px%29.png)**+1 (873) 771-7630**

>>>>

>>>> **____________________________**

>>>>

>>>> ![IMG_5340.jpg](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877416=

5068-IMG_5340.jpg)

>>>>

>>>> =20

>

>>>>

>>>> To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

--===============5309721204484363179==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Hi Gurkirat

This is =

Anna Sanchez from Kesef Marketing.

g>Just reaching out again in case the timing wasn=E2=80=99t right earlier.<=

/strong>

You can explore your options anyt=

ime here:

ead_id=3Dlead_1MVGGnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=

=3DN K MAINTENANCE&fullName[first]=3DGurkirat&fullName[last]=3DWirr=

ing&leadType=3DAutomation" rel=3D"noopener noreferrer nofollow">
>CLICK HERE TO START YOUR APPLICATION

>If you have any questions or would prefer to speak directly, feel =

free to call me at 1-866-216-5475 or 873-502-8068

div>

Best regards,

iv>

Anna Sanchez
ng>

SALES MANAGER
>

"font-weight: 700;"> ...

Categories: Google Gmail Spam, Phish

0 Comments

Mansour Group Spam from Microsoft Outlook
Posted by Dave Yadallee on Wednesday, August 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 14:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmkN-000000008qR-13tu

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:18:51 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 14:18:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westeuropeazolkn19011028.outbound.protection.outlook.com ([52.103.33.28]:22355 helo=AS8PR04CU009.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmVY-000000006AN-0gd3

for doctor@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:03:41 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=k2t0wApllbtGkxrRhBs2NtdHfV+fp+TmwUkEAawdVg6zpt1EJQQ5brPOuIos0jEWzKuPpel4o8dQBuXgX2h+7KVo20GCHR3q7Jph/WZHKmiqLmaqWSgPLZNIcdgSfyJYOqqY/vXibB2iqTeRMWxwYGAitPti1Eb4tC2UeqM9x5MrVUIBsoFBq9DClxcmOtVe/xfLLiznu+FxdA53Qjfzo7udHceCUJW1b2qKsvLA7p2EGV/2PP4DvZjrPSenfngw46XqhanOq3awQk+foPfn7tXSV3xmBIv7Sc1bdwnTgtp7zJDxp6ly0vfg4sPdbDqTNfDFomTWl5ZV4RZchbOmrA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=edei1xzCDNnIVbCV9b0V9+QuEL4sxOXEOov9fDBrH+M=;

b=tjUV8iVnq7A7kTbwz2pN2uP4eorG34dhHs4C7WjjZW7h7MOv9crZV8J5ICWjxXKrLOuFn30OBr1m5PLhaq7VRSVhW8XPIeE7sBZWr2Iykeqfea+nBvmZssms6hLIyHVkPUzwEDE//2d8b0kWMyPHooxGQ1sRDXvmnHbqGAmHaX34sZq6zbApKZUzoaLXzED0ptx8kHdX/kgOXRxbuj8tFPD9I7hJtZ04uCdyoxwVbSLjz+/7sLVU8SswmtgHCUiL53oR3V9/5+6J82uCctJISVWI5nMllrSmqHyHaA4gtJID1yXQRgqtWKP+AgbukXMLwjrTUKS1r1TC3UQvz6WGkw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=edei1xzCDNnIVbCV9b0V9+QuEL4sxOXEOov9fDBrH+M=;

b=e5I0rW+tf0hQc8YSRKlOrigSfxRBkmg+oHZYBsyHWRr6KTdZ9c8GcSZdc7tvXn+yqYUIt/GVVdXftgC3fWlUSai0zk8BelRElm04ZwJ2CfF2/RdmSb6+C1K8oB3P6jW+wuPAJVggLa99l2wGNLOUZSCWY3K4AaF6jAlx6KrfUIUJKrZGbCDDzGbKBkr8jnurAm5Rg2ck9SCPdesSJ9NcxAjNBKhYIcFLNFs7F/FSeItw2Nbd5HvcI4maWDB0X9ebpUZkRgvdr6+TbWYD3H+3mWwsUhJGw9WR8Pyv2bjGz1t3dnY6w4QE4WLGUmxHcCvTh+uDoI18kv5+Mo6HzQzXyw==

Received: from GVUPR01MB12677.eurprd01.prod.exchangelabs.com

(2603:10a6:150:333::18) by AM7PPF9E4ED15B0.eurprd01.prod.exchangelabs.com

(2603:10a6:20f:fff1::79f) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug

2026 20:02:03 +0000

Received: from GVUPR01MB12677.eurprd01.prod.exchangelabs.com

([fe80::d860:f026:ccda:dc0b]) by

GVUPR01MB12677.eurprd01.prod.exchangelabs.com ([fe80::d860:f026:ccda:dc0b%4])

with mapi id 15.21.0339.007; Wed, 19 Aug 2026 20:02:03 +0000

From: Mansour Mohamed

Subject: CEO MANSOUR GROUP

Thread-Topic: CEO MANSOUR GROUP

Thread-Index: AQHdMBVS6TUgTwuaAUCo3I+0rtOYGQ==

Date: Wed, 19 Aug 2026 20:02:02 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: GVUPR01MB12677:EE_|AM7PPF9E4ED15B0:EE_

x-ms-office365-filtering-correlation-id: ee5c4ab6-a1d1-4069-264b-08defe2cbc7f

x-microsoft-antispam:

BCL:0;ARA:14566002|25010399006|41001999006|24121999003|22091999003|15001099006|4140399003|24021099003|37011999003|6092099016|31061999003|39105399006|2604032031799003|55001999006|16051099003|18010799003|704163111799003|22141099003|15080799012|15030799006|19110799012|8060799015|8062599012|20055399003|56899033|3412199025|440099028|34005399003|102099032|260806224601699006|39145399003|41105399003|40105399003|2607281247196008|2406899039;

x-microsoft-antispam-message-info:

=?utf-8?B?TGhTQjJ3REx0KzdMVG04Y1NEYkViaFMzaFZWdXF3SVh3dUw1Zjl3ekd5NEpl?=

=?utf-8?B?VFR0RmdDTmFJQ0NIVEMxT09RYzd5VnRpWEhMSVl0NitzcXRwSlFKTmhRU1VY?=

=?utf-8?B?SEd2b3AxWm4wdkJlcWhCd3VNbldZaGRKNXdFeTdZSTVCOStiZXFUdlNIVUd0?=

=?utf-8?B?eXJKRmlJQUpWdjhxVlJtVU5OVEFoRnJzRXdzN1BlQU0xWmkyekc1ZW1USkU4?=

=?utf-8?B?OG52Zmp4a0VkWUpDTTFWamFFWmIrVHhnYkw4cDZRalhrcytONCs4SWV0Nklk?=

=?utf-8?B?ZGRmay9OSy96dWpSNE9UQktrT1JuWUhWV0l4K2hEeUV2TzZTZ1FqQlhJM0s2?=

=?utf-8?B?eXRFK3JJcHdHOHlDWFdMK1lPb2hjMThsNmM3dCtBcDNVQTJ1QUYydXJpd0pM?=

=?utf-8?B?amk3cDMyVlY3Sm5PLzJMRkFZUkVSRVpLQmUwRW5LcE1CSHB1YW9kKzVXU2hV?=

=?utf-8?B?NHppbEFMbFVqUklWRnhGZVFWNFJERHUvR3lyZmovSzlpMGF5bjVLRFZ1bTZm?=

=?utf-8?B?eFFTOTBZa2xFNUZSRmYrUmdTT21qc3NjdzhpMU50bndJUURvZjFadUpaRzZr?=

=?utf-8?B?VWJVc1dzbUNIZFVDVmlzUnhibEtSTGFNUTdIUG12RnRBbVpLaGQwcGQzSUxO?=

=?utf-8?B?KzNKSzVURWZBZWx2blM4bUpyR1ZPRTNsVnBkT09DS01oZjZyQVdKZkxDTU1Y?=

=?utf-8?B?Y1Byb0swRlFKL21kZXVSV1FPa29DNVBiU2l3UmxPejZTRTU0L3FJOTd2bHJ4?=

=?utf-8?B?aEVuU1BoQlFndzJVRDRHdzdKVUQwaWhBVDhXbThyYUNnUitrUGtSaTFCZmI5?=

=?utf-8?B?eDZDNE9mYUM0YUZ4MnUwQkZUVHdTWjNXbk52bDhqUERjNkZzYVY1dlFyeXMw?=

=?utf-8?B?anBNMDJkMzdYeGxJSVhHSUIxaFVHN2d1eUgvSlBFN0djeFU1WHVvaVh0ZjFs?=

=?utf-8?B?SHpHMjdTVVRNL0JIcmRGa0lEaTN2WElrUk05TzFvQTUxYVo0ZEljdnd1aytS?=

=?utf-8?B?dWtOR0pGK1RlRldHSVM3UDA0Ni9RR3RPRVFOOFd0WWtkdFh5b0ZMbzhTU3M0?=

=?utf-8?B?Q3o2RE5xSnNBanQrWFkvaFdDampzOUMyUnV0VkRxMzJoR0tvVTU5T3EzdUNq?=

=?utf-8?B?N0JtOHpxdERuWGxIWGZDSWMzMWxHYUlucUk3NnRoTmJCL28yTDVxeWxZWWtl?=

=?utf-8?B?Q1NPajhwWWJtejkzeEhNVFRkNk5Dd2xDbTlGVUdKd1hlYUxHQndaeXB2ckdx?=

=?utf-8?B?eGNDOTRNWUZWY1h0VTNvMlBhdTdBbTRzZ1ZiQ0tLQ2JjK3lOekFYbERFM01Y?=

=?utf-8?B?NHBwb0twanNLamZxWFMvTWYyYkIzOXphOWk2SXRZMlBkV21HNWZMbVVyK3Bw?=

=?utf-8?B?enVpUEJnb2JUTDFoWm9ZRWI5dnkyRTlaSUd1ODMya3cwQlR2TkF6NGJsSHFv?=

=?utf-8?B?QmZYV0Vyc3VIRXNEZDI0YzBqMGwxcmoxdWdQUGc3Q0tSMzZFM1lsYXd2VHNG?=

=?utf-8?B?M1VaMDNMaFRiYUM0UTNNM3preDFXMTRpMkVuOFR4eDJRb1NPeHd2bE9PbUxV?=

=?utf-8?B?dzFIQ09qWmJvbDVzN3dQbDRhbmVHeElTaXBmZ000ckVNc2VqU1owREpxcmxN?=

=?utf-8?B?cGFXUnZ1NnJabUVZSjNiUFZwRkFBU08xelNmbTJBZ29ybVRKQkFwN2pRYWJL?=

=?utf-8?B?NFNacWFYM1lJcWtRWG9VaXRWVWJUOXVLelkzL1UvWGlrWEpjZWVnWmIzY3I1?=

=?utf-8?B?M3djem5uMVdlTy9yVEFuaU84YWRkWTM5M0R6clZsT1FaeERGL3N4Ukswdzdp?=

=?utf-8?B?ME9QbW1NMTBCSGx1OTM4c2xoVWlEMG5BM1M5RFg0VDZnTU5qNlhmMzNIdUh0?=

=?utf-8?B?aENZRmVEVGQwMHUrMTRFM0pxOE9xWWNHT2JiTjhqY05uN0l4ZFFiWG1idldp?=

=?utf-8?B?L3NtN0tIMjhXNG83SFNSelFGbCtNdVhja1NJQ2JrT2tBemZBRkpyR01pWWcy?=

=?utf-8?Q?ulklHlJE1YeeD/HM4/1SNl9mQRbpx8=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?L0dMVmJObEMreExWcUxQL3FZMGNmdEpOSUs3SWp5Uk5SM2JneHA5SkNOL01O?=

=?utf-8?B?bCtFS2ZnZVQ4WVMyMnhxY3pQYk1zSzZqSHhXNzRFdllkbEd6ajZQYkxhNGxV?=

=?utf-8?B?L2F6aWU1eERORDRwU2NhTnJQU3lHZVdCZXRRdkErWU9NVVhFRUg4OGJJLzFo?=

=?utf-8?B?SjhEY0xuZWlwR1JOYys1dmkzTzdOMEduOWFTMDBJeCtadVRsNTJyU0ZqUDU4?=

=?utf-8?B?aGFiRzNTSkZhY1MrNlNRejVScFA1aFNjWlc5eS93RVZsSnp2Z2lXODZjbDBB?=

=?utf-8?B?WHlCOGplbG83OTllMUgrUHcvellQd0xLR3BmaCtUd2RpRGdNMHZ6eUZGOGZh?=

=?utf-8?B?QnRkdlI5V2hUcXo2MU4vTkJVN0d3c3JGOUNDUGozRmthbWUyUXdqVERUTksz?=

=?utf-8?B?TjFzaUgrZUJKOWw0OUFVTmdtTGRIUHZZQkcvam4raEhCZ0EyeFNObGtubmx2?=

=?utf-8?B?N3EreCsrUUZtSDhyaWpITkVmRFk5eVVXa0pkbittMHMvbDdXWWxURkNCOUN1?=

=?utf-8?B?eGJ5ZTEzbGN0NllOZUFTTXo4Y244dGlWN2RIRzNMa0owY1RZblRrVzczdy9n?=

=?utf-8?B?Tk5OSG1XS0Fudi9xQ2tDRmZOUFBDY3kydDJxbXFaOGpwU3lCRUI2Z29lMHV0?=

=?utf-8?B?V25hVGhZQmp0a3BldFJRUjFkQjBleUpOUjJ3MjBaQW0zRjZsbjFTZ1NqamdX?=

=?utf-8?B?Ty9pZ1NQM2k2RkZiaEszLzNJbGIzR2NWcHdKNkZ6TTRjaDcwdTA5UG5aeE9l?=

=?utf-8?B?YmhldmNSSS8xU1FwK1FaTnlHeVJjbTV2YjJ3TlBqQms1dlBQWGtpbGVOT0JU?=

=?utf-8?B?SFlSYkhzeVRqR3ZZSWdra2VqaXpaOFhXdGhWSUNqcUwySkpDek9OdU90TU5E?=

=?utf-8?B?dGk1Q0hSc1R3U1lqOW00azcwZk9JL2lsLzh4czdnYUxLaXR1eVVScGFyK25P?=

=?utf-8?B?V2xOTEpqQ1JTV3lIMFF1bWgwckpmLzhQMHZ4ZzZYQmVYUTVZdldISHdROE9R?=

=?utf-8?B?SXFkUXRrVkZaYktRbVVjNDMxblJIOXZxRkNOWjFaZWlvWWhnSjNmKzlPWkdQ?=

=?utf-8?B?WUREYjVpaHJ3ZDFzcHFVeXM0TW9TOFhBV0huV1Rqd2JxWjFzajM3UmE2RjR5?=

=?utf-8?B?c29vU0pHKzd4VjhLeWs0dGQvWngySWs2Q08zcmptaTdzWFEveGNTTGg1Zkdt?=

=?utf-8?B?UTE5dExJSTc4NmMrR1R3Y254RlNqTUUzWUpMYmRrS2pmVTRJaVk0K2JPVjdM?=

=?utf-8?B?a29MOWlzQWxpbW9wQWRsOHFkSDZpOStYR2pyL1cwelZBb09McmxjNE40V01B?=

=?utf-8?B?UzBYREdLTXg1NFhjcnJjRHMxMjVBVERkTndNeVBSc2ZNUG5UeGk3TDNSQmty?=

=?utf-8?B?WVRMeWtEMG56Q29IVDMyaEhWM3FHc0dLSDRVcVhJaG9TVXBhLzJhajMwU1BW?=

=?utf-8?B?V1o4ODZkVWl5cC93OGRwT3E0QUcyYW5Ya01mVU9teElaL0o1azRQZjVtbXJq?=

=?utf-8?B?RnJ2ZG1vRGs1b3dOcEJ4ZHlFTTJzMCs1QTRQeW5rUG5TZzQvd2hlakxBNUk3?=

=?utf-8?B?bmZGdWo1VUpFSDVOSDNqbDVEb1FUZUlvRTdxVzFoZ1NMZGJmajFXS0Jpb2FZ?=

=?utf-8?B?TGtRdmJCK0pBRjdKTWFmMmk4andCZ3dEbzhkeVZoNmpIQTEvMnNrM3pSMzJm?=

=?utf-8?B?ZEltaEtVY21NWXpoVThyT21XeTZBa3RZaHpDYTZFQVNCWSsyWEVhMG5XSHFz?=

=?utf-8?B?ZFEwTXJFY05vbkpXSFc1bDc2RXRxMHNnM2NVSVZMMnFiMXpoZTlOUDdxUWY1?=

=?utf-8?B?U2hOaWVJY2JDZHBZTXFzTU1xajRKdTRaUTI3TmliTytoVUpQV3N6QUlmc1F5?=

=?utf-8?Q?r14aFmqBAPbEe?=

Content-Type: multipart/related;

boundary="_004_GVUPR01MB126774698CD65074EDACA951DB3A52GVUPR01MB12677eu_";

type="multipart/alternative"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: GVUPR01MB12677.eurprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ee5c4ab6-a1d1-4069-264b-08defe2cbc7f

X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Aug 2026 20:02:02.7557

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PPF9E4ED15B0

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings! My name is Mohamed Mansour (CEO Mansour Group).

I'm reaching out about the potential of a mutually beneficial partnership

between us, and i need your kind response to discuss further. Kindly reach

out at your earliest convenience.

Content analysis details: (5.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

[52.103.33.28 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[52.103.33.28 listed in dnsbl.ahbl.org]

[52.103.33.28 listed in dnsbl.ahbl.org]

[52.103.33.28 listed in dnsbl.ahbl.org]

[52.103.33.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ceomansourgroup(at)outlook.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.33.28 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.33.28 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.33.28 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} CEO MANSOUR GROUP

Subject:

CEO MANSOUR GROUP

From:

Mansour Mohamed

Date:

8/19/26, 14:02

Greetings!

My name is Mohamed Mansour (CEO Mansour Group). I'm reaching out about the potential of a mutually beneficial partnership between us, and i need your kind response to discuss further.

Kindly reach out at your earliest convenience.

While i wait your kind response, please accept the assurances of our highest esteem.

Mohamed Mansour

Founder and Board Member

CEO Mansour Group

Address: No.17, Ummam Center Salah Eddeen Road, Malaz Riyadh, Kindgom of Saudi Arabia

Website: www.mansourgroup.com

The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future.unsubscribe from email or ignore

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Mansour group spam from Microsoft Outlook
Posted by Dave Yadallee on Wednesday, August 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 14:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmkJ-000000008pj-1ghi

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:18:47 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 14:18:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northeuropeazolkn19011027.outbound.protection.outlook.com ([52.103.32.27]:27127 helo=DU2PR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmUx-0000000063e-0tfc

for doctor@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:03:04 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=a1hz4/FtNfiYahUe4BXpwOXoEzgcQzIasOeGGqmiBx5eEB1LgI5FK8VIRWJ3o0E1qDv7fOs8M9K7Ck1EOdC4W0RjgciU9kyy5+zl9ketU0fbxACV6Gg/oWRfwDQzzafCrhwf/IXTBkERAQDz4R8sNW5tkOeFO/a8KGe9e6mTgl2eEpbMB4hmbg7QuYa3UwIm2gxIk6IIgVwBLNe9XM7jYB60SRGo639YbcDs6XKYhDez6iJ3uFSwBpxjGarTdBDkuDLy7+mnDNRtYN0z6fjKIcOEztnECyZ2U6zFlbrqGloVD7qd8ACp+DFtYCuMcALedK8s8yygXxbNoJLw91LCkA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=WjaRdakUfAaYzOIY2w1I3uj44IfEY80/vp0NFHVWlCw=;

b=pAzs80yTGPzAIQZBX5WIr+dIoXFvnQ23+foGdaAgrSo+xaDCrqchvIxhSiArQHWgybvAPgac/ayN03nhi+1gz83bOSA0Oyjxt3t2f3pOu4IfmcWrT8crtNNodZB8L8Kr8Y/PgeP5XAr5YTYLnufCu4RoqpDBBk+tCYVg9Gteygu9GwXo0fygEo9P8VwRajGhboGxLMyqGC2T6XtKReZ96RSK9mjtoVxiQtMLQmWAj60d/xThkfXn5EFo/LCqxDVBraVga1GfAMLWj86vvSe+0wXu7ALYwHfWRGwFjB+GHF6VPyTmg98bjOnZLAxyBKApBCP11QhmvRL0bViunLbs5A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=WjaRdakUfAaYzOIY2w1I3uj44IfEY80/vp0NFHVWlCw=;

b=SOeM6RKrLjITxAM+96f0XMf8RQiI+pTQJO+2oYpARBJZg2NF3jJPCx104h1DLVbxSwwuuj54rIkT4Zw/OmXT2oCg3qW/xadAqutb8Czg/nXP/punHKOFIhrIKB1dnD8mb7VPtyfr7Zsnc0x081fCRrVL3JZ1ghRJ8NaPA+VTfEMmWwyhyz8iFpDb7BaYTFCVRKCWgaeZ0X6ioxfSoTVlYv2Dgm80gvPIGyW4RIfkUj2715cfAXkYGDJ3LeNgenjPmVtbbRTBs76uHkAvWD5R/DsQVqckMyNP31/AO6T5uFia9deIes61zRuNOEdudU9i4yc78bBIvHX+TIRSVbS1uQ==

Received: from GVUPR01MB12677.eurprd01.prod.exchangelabs.com

(2603:10a6:150:333::18) by AM7PPF9E4ED15B0.eurprd01.prod.exchangelabs.com

(2603:10a6:20f:fff1::79f) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug

2026 20:01:57 +0000

Received: from GVUPR01MB12677.eurprd01.prod.exchangelabs.com

([fe80::d860:f026:ccda:dc0b]) by

GVUPR01MB12677.eurprd01.prod.exchangelabs.com ([fe80::d860:f026:ccda:dc0b%4])

with mapi id 15.21.0339.007; Wed, 19 Aug 2026 20:01:57 +0000

From: Mansour Mohamed

Subject: CEO MANSOUR GROUP

Thread-Topic: CEO MANSOUR GROUP

Thread-Index: AQHdMBVVCdHPN66/dEuErFSkSUH1EA==

Date: Wed, 19 Aug 2026 20:01:56 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: GVUPR01MB12677:EE_|AM7PPF9E4ED15B0:EE_

x-ms-office365-filtering-correlation-id: 67a2f9eb-7d4d-49ec-3590-08defe2cb8f9

x-microsoft-antispam:

BCL:0;ARA:14566002|25010399006|41001999006|24121999003|22091999003|4140399003|24021099003|37011999003|6092099016|31061999003|39105399006|2604032031799003|55001999006|16051099003|704163111799003|15080799012|15030799006|22121099003|19110799012|8060799015|8062599012|20055399003|56899033|3412199025|440099028|34005399003|102099032|260806224601699006|39145399003|41105399003|40105399003|2607281247196008|2406899039;

x-microsoft-antispam-message-info:

=?utf-8?B?WjNxckgvU3loU1Baa0VaWlRmV1BQYk1rMTQveHN2R1FycHNUN1NJd2xNbnVQ?=

=?utf-8?B?eCtsNitwam9FYXRYb293RlBXeEVTR1lQRHVENGhWN01TcDZNNmwzdC9veXpB?=

=?utf-8?B?SG9yRFczMGRFcHlJT24rbEVUNnE3dlFDRFkyb0xEU3lmQ3Y1ZG9wVTZoMDg4?=

=?utf-8?B?S1QyWWFMbGtkMzRjVWtLRkxYelg3WENNd2plNC9WWE43c010QXhvb2UvUXRj?=

=?utf-8?B?MDdudnBlSW1Mdm1FQ3d0c2dUeUsxSkJNQ0lWNjY4NDZITXhjcEtmblU4S2lR?=

=?utf-8?B?a3dzSWQwaW8wTHJkMWVEaU1wRFVNSEJYWDczWnd5V3Y1MEFXOFkwZlVxejBh?=

=?utf-8?B?cUN5dFVOZ05PSFNwV2V5N21MaFUxQUNlK3RGQWUzbzlqQkdlcjhuK1RIVnhP?=

=?utf-8?B?cm5TZ1hFTVBqaDlGNFJDbHA5SmwxN2tKNkZnbjFDcEFpcCtxQkwwMlloVkpD?=

=?utf-8?B?L3Bqbi83UTJ4UjVtR05IMnZ4ZXNzb2R2NldqSG1FbWY4UVZ5clhnbGQ0ODVK?=

=?utf-8?B?S3JvelhYb2lPVjA3eGR5M2RTTDBFLzE3d1VlVkxOMm1mUDJMYnFVTy9sUiti?=

=?utf-8?B?Uk5qdEx3ZzdMOVVtb08zZ3h4aXNwNWxiMWxCUVEybE1OOHp3NXloTVNkV2N4?=

=?utf-8?B?U1FpZXJmQ01vRTg2WVVFMm82Z1JwQzRWZjlVMVFzaTdRVk9lTE1sSjA1TERX?=

=?utf-8?B?SU1Qd20zNTdUQW5EblA1bklFaXZ2bUY1aHZKMlJyblBEcmJ4bm0yREJkWFM4?=

=?utf-8?B?LzB0OWx3dEZpaEs2Y0piWXpCbVRNUzUyemM4a1lWbjIrYzF3L0xWRnBJRVNK?=

=?utf-8?B?RjN6VzdKVkJiWThjckp6L2h6ZHNzeXNLRzJ0YXNGR3NsazZ1azBiTjMvMlZC?=

=?utf-8?B?Nk9wM0xqZXFIWXhQTVhNS0xlMlFIRFViSWdIbW8wRm5FeC9xS3Zma1c4TThO?=

=?utf-8?B?dDZCVFYzUjZxblhCeHJhUzIyQ1BkODhUaEQyTDYvWjg0NmZZVTlUNmFZRVBk?=

=?utf-8?B?bWdzSS9qeDZNMk11SnJpdkRuNkdwUXgwNFlaZFFxek04aklXV2VzYitodGsw?=

=?utf-8?B?UVExMjAxTVAvUzltM3Q1OXNGaDJKMkpadDArRTZvZ01TT3Y0aWRkRFZOaEdi?=

=?utf-8?B?R3lGcEdyQVBBWlB6bkdES3Z3dzVjbXhhRzJYOW8yUW9HY083ZlJoT1N0eEZi?=

=?utf-8?B?N2ZYSlc3TW1RWmlqdXBoam00OC9NekhzYnpyOTZXdnVyYmZJZS9nYjdiM2Vx?=

=?utf-8?B?SlA4akRnMDZ1RWcvRHptY1dKaTgzQS9DelJvOCtJRlpGb1BGc2t3VEdjWWs1?=

=?utf-8?B?WmNOSFljc2szRldXa0N6ZTRvWWROdGVjdi9PaFBFRjA0Tm1FOUZKMyt6K2tH?=

=?utf-8?B?cmQ5RGRJbTJtTTVuVzdWdGtRaTJubWVvNTJkZ2hEc3pIRUpDN0pteFlCOGlM?=

=?utf-8?B?ZHhJZmd0cWIraUhmdy9sMWtvaTR0SkZROXgrNDZMbXovWDFycXRGYld1VVIw?=

=?utf-8?B?UFNGUlllWGdPa3VrU1hEMFlNd1dNU2NCeW9LdkREU3c0UXBLQU91cklLYjlC?=

=?utf-8?B?dHFyNEZVOHBBMFdNTGlHNGIxVXBJYjkzWXVQUmU5Y0xTRGFUeGlSNE9HbDdz?=

=?utf-8?B?M1RjbFdwblYyMEd5ZmdISFJlTEVLVVZSWUN5MFpLMFR3SkJMNkRKYy9kb0RP?=

=?utf-8?B?MEdxL1A1SmlaWXh0Zi93MDdTSm5NZXo5clp6R2x6V3FWWFJlQklXbG9tT3Rx?=

=?utf-8?B?NDlrczZDdDhXcUROUXBiM3hETFI0cDlmd3NCbUU5VmR2NnBLYU9VOUNtK2ZX?=

=?utf-8?B?WkR3WXBEQUVSTXhkVzFpN1h5SjlKckxVY3J1dFI4bGRIRE53OEc1ekg0MW1V?=

=?utf-8?B?YTYzVmE0aFJENGdGbVpYQmk5TjIrVmZKeld3VG4vM3VVbzhzdWgwaUMwVmJX?=

=?utf-8?Q?ObkXphwIJJ8=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?dzVhNVdQRWhCSVk1a1JSQzlYYmRrL1VkMWhKclorZzdmRDZVcHBld3hrM3lw?=

=?utf-8?B?TGdja1RKaXJMTHlrUkNkWnlZZExUQmNNRnM3WUR1UGdwU1FSUjVCWG0xTjAz?=

=?utf-8?B?eGdjSmRheE12T3E3U2pzMmdSOEdENGVUYzBqcDBmanQvaGlsU3U5NzBzMnRN?=

=?utf-8?B?QWt1YW5ZR1NqS29YVGlTMmVBVjFzUE1mYlVyNVdUd3o2MmdIeWFDTXdONHp1?=

=?utf-8?B?aklnWUdaczdQN2NoWVdKZVhtL3lqN2tqV2JJSGo0WU51U0tkWFlISUhuaEht?=

=?utf-8?B?bmZZdHZuVW5TS0FDZmNmSElGMldSSUNieTZJQVEydmVmRG9Xd2xIcHlIWEV2?=

=?utf-8?B?NUVyblM0NFp2aTd6ZnVNOUN2R2ZSVk5sWVRLV1g4TUN4UXNoQjlrV1dpNFFO?=

=?utf-8?B?U0ZtSmJYU0NYbVVPT0NSMW1MUzNteWtiNzh0b1RuYzl1aXA1VFh4SlUwYVZ6?=

=?utf-8?B?b1BCZHdtNVBaWnh0RjREUnZqUWxiM2NNandpeEFZTTFnWU5xVVAwRUtZOEls?=

=?utf-8?B?Y0tXOGwrblNsSzJTcmlsa3M3SkdsU0FBOWE5bzY3MnVjdGpQdzI0cU8zRkI5?=

=?utf-8?B?RXZ1dEZQMjdFN0dpK2xqTFp5MFY2VDdlK2NtRXYvek5MZmlmK25sTVF4SXE5?=

=?utf-8?B?NVVSblhCUXlINjRoNE5RLysrcldhcjZpeEoxUjMzUS95Q3dyTXFTNTVZNith?=

=?utf-8?B?dFBxeXc0akY2YmluR0hMemkva2JsdHZSV1AwNG1NbjZzN1dMaTRpQjR6MW5h?=

=?utf-8?B?akxpQ2dIUURtRndtSWpMakhFSjkwKzZEYUdOSW94TzU3d29haUFkOFR2ZWRD?=

=?utf-8?B?TG5uUi9OTG1saHQzWXdPWmRtSTZkbEpJNy9MakZGV1ExU2laMjd4QmgweUpE?=

=?utf-8?B?cGtkZEVNRlpRekVCQUQxbGFHcWJGZ2hSZEhhTEkyeUhLMHNrVzNkdWNPb3R4?=

=?utf-8?B?b0ozYzIzZ1IrYWt6MVRVb1RFdjlWc01sSUhDQ0xiTUpsdHp4dlFiK1czUXRN?=

=?utf-8?B?YkprZUxlUDUzQU8wWGJrYnBiMjFoakZEU09pdCs2OGVsd0lUY2tQcnFwYkVD?=

=?utf-8?B?VExTcjc2SDdoQk1leXZ5d1VWenN6eFplazBYZm5na2lLeGZqV2s4dW1wQ3cz?=

=?utf-8?B?bW45N0pNbzFJV3VWRmxJeDhmbkIyT1Q1MktMZjNjYkFjK3ZzNXNmUklWbGxI?=

=?utf-8?B?RDFDc3YzSzVrT3pYR1NwZ2RhWGRUM0VHQUtVMkJjNnA5YUpYb1N6Ritnd2c5?=

=?utf-8?B?SlZ5aWRNeXR3cDdlY0lFWVBIQjhTRHVOcFVZODlwRXRobTEwQmwwZHcyZ0xi?=

=?utf-8?B?YkZWdGgyM2RaY3dGeXBuMlFqQ3ZKUG1peGp2MllnYllBc0E0Si9XUFVkRkZa?=

=?utf-8?B?Y21DV1B5cHM3UWdZU3k4Tms2RTJSQlhWdTBvTmxaVTgvV2lYRm1ycXd5ZDlz?=

=?utf-8?B?dXZqdFR2VUwwbzgrU2dPUkRON1dhRUQxMnFIVGtNUUVscStCbmduRVdRbC9K?=

=?utf-8?B?VTV4RDdPcDY0dE5zaG96OWk4SlY0UGdzV2ZCeVV1Q2ZWcjhYL294RTdvcGJw?=

=?utf-8?B?QXZOTjlWY0IzbFRKdjh0RGp6NzJxb0Q1dXN4SVhaenI4T3UvM2NBWEZxMFp0?=

=?utf-8?B?dU1OdTYzdmhLdEVFSmFnWTYvZG1FWGh2YU9NbGM5bjlPWEoxQ1o5dFp5TTYy?=

=?utf-8?B?Wk1xWitKR0orZ0ZYazlZVFBWSmV3eVBGTXEzSjNzN0c3V3EydEV1czNvWUdo?=

=?utf-8?B?QlY1WHVBd0RIYzdIdjNDaEtkMGxYZ09sNkp4dWY1TEJKUDVsekUxUFQ4dUV4?=

=?utf-8?B?RDUvOHh2WkFONllzV1NiNG5mODlDYnFmNFhsNG4zMmxUVUlZVEtuUE5TTEJh?=

=?utf-8?Q?0OgpWK1iOL3Gl?=

Content-Type: multipart/related;

boundary="_004_GVUPR01MB12677D01237D8DF4E8BB1D0FAB3A52GVUPR01MB12677eu_";

type="multipart/alternative"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: GVUPR01MB12677.eurprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 67a2f9eb-7d4d-49ec-3590-08defe2cb8f9

X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Aug 2026 20:01:56.8332

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PPF9E4ED15B0

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings! My name is Mohamed Mansour (CEO Mansour Group).

I'm reaching out about the potential of a mutually beneficial partnership

between us, and i need your kind response to discuss further. Kindly reach

out at your earliest convenience.

Content analysis details: (5.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

[52.103.32.27 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.32.27 listed in dnsbl.ahbl.org]

[52.103.32.27 listed in dnsbl.ahbl.org]

[52.103.32.27 listed in dnsbl.ahbl.org]

[52.103.32.27 listed in dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:333:0:0:0:18 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.32.27 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.32.27 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.32.27 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.32.27 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.32.27 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ceomansourgroup(at)outlook.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.32.27 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.32.27 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} CEO MANSOUR GROUP

Greetings!

My name is Mohamed Mansour (CEO Mansour Group). I'm reaching out about the potential of a mutually beneficial partnership between us, and i need your kind response to discuss further.

Kindly reach out at your earliest convenience.

While i wait your kind response, please accept the assurances of our highest esteem.

Mohamed Mansour

Founder and Board Member

CEO Mansour Group

Address: No.17, Ummam Center Salah Eddeen Road, Malaz Riyadh, Kindgom of Saudi Arabia

Website: www.mansourgroup.com

The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future.unsubscribe from email or ignore

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Nigerian spam
Posted by Dave Yadallee on Wednesday, August 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 14:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmkD-000000008ol-19Xy

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:18:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 14:18:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp152-cast-mx.amscloud.co.id ([103.234.208.152]:48924)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwl47-00000000Dvs-0xn6

for postmaster@nl2k.ab.ca;

Wed, 19 Aug 2026 12:31:21 -0600

Received: from localhost (localhost [127.0.0.1])

by mx0.amscloud.co.id (Postfix) with ESMTP id 9B06A81138

for ; Thu, 20 Aug 2026 01:29:39 +0700 (WIB)

X-Virus-Scanned: amavis at mx0.amscloud.co.id

Received: from mx0.amscloud.co.id ([127.0.0.1])

by localhost (mx0.amscloud.co.id [127.0.0.1]) (amavis, port 10024) with ESMTP

id UiurVeLRSxkO for ;

Thu, 20 Aug 2026 01:29:29 +0700 (WIB)

Received: from mail.trimitraswadaya.com (mail.trimitraswadaya.com [103.234.210.218])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256)

(No client certificate requested)

by mx0.amscloud.co.id (Postfix) with ESMTPS id 4A3A378A78

for ; Thu, 20 Aug 2026 01:06:18 +0700 (WIB)

Received: from localhost (localhost [127.0.0.1])

by mail.trimitraswadaya.com (Postfix) with ESMTP id 8C6894B187C45

for ; Thu, 20 Aug 2026 01:06:27 +0700 (WIB)

Received: from mail.trimitraswadaya.com ([127.0.0.1])

by localhost (mail.trimitraswadaya.com [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id HAzdT6IPyeF2 for ;

Thu, 20 Aug 2026 01:06:27 +0700 (WIB)

Received: from localhost (localhost [127.0.0.1])

by mail.trimitraswadaya.com (Postfix) with ESMTP id A819845FDC9FE

for ; Thu, 20 Aug 2026 01:03:00 +0700 (WIB)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.trimitraswadaya.com A819845FDC9FE

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=trimitraswadaya.com;

s=4434A248-C2D4-11EA-9DCA-C1A572C2DF1E; t=1787162580;

bh=rqsfSmDVd1jPiFCIzW7DqikTfxW0NOdXrEiIPS+QKts=;

h=From:To:MIME-Version:Date:Message-Id;

b=fmAfa8//qFclZGdjzWaCftCYnwLO364XmsDqcqmhbrLsbWl9MMh+peramq+68EKOh

wwANhmh3+p4Xx9xQNNXrQVShJv4N9mOq3cCCE4p4Dd8SK61ouxEgtr0nyzgSJA4s1g

Yf79qkO5bHHhphtUE5NHjkZLLvf1dH5uigXotVFtA90FuQhgtYw4r7F3R+zpOGEmci

uPmxB2WtwPbxM44D7RA/IMO5NxRTTDiXPglJcpsVzb+B9sTNsRLQdzKN3wPDCdxdoM

E5dy4kguRLLEZWR+iVpr3mxMn6GgX/BMDbUhpkVIeJ64A57V2xVLsfSi/QhPuY8o1v

TdBCOnYBqc4Og==

X-Virus-Scanned: amavisd-new at mail.trimitraswadaya.com

Received: from mail.trimitraswadaya.com ([127.0.0.1])

by localhost (mail.trimitraswadaya.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id 2xx97N5zCm0g for ;

Thu, 20 Aug 2026 01:03:00 +0700 (WIB)

Received: from Dell (unknown [197.185.180.236])

by mail.trimitraswadaya.com (Postfix) with ESMTPSA id 84AE64B0299C3

for ; Thu, 20 Aug 2026 01:00:20 +0700 (WIB)

From: "Mr. Alex Kortig"

Subject: HI: Is your email still active?

To:

Content-Type: multipart/alternative; boundary="fJrp111XHP8TVoTCbRXB9=_3RthZxt3B5w"

MIME-Version: 1.0

Reply-To:

Date: Wed, 19 Aug 2026 17:01:47 -0300

Message-Id: <20261908170146A1E8DD19D4-84E8D5D28E@trimitraswadaya.com>

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: My Name is Alex Kortig I am writing to discuss a confidential

and important matter concerning unclaimed inheritance funds that are reportedly

associated with your name. Kindly respond to my private email address at

Content analysis details: (9.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[197.185.180.236 listed in will-spam-for-food.eu.org]

[197.185.180.236 listed in will-spam-for-food.eu.org]

[197.185.180.236 listed in will-spam-for-food.eu.org]

[197.185.180.236 listed in will-spam-for-food.eu.org]

[197.185.180.236 listed in will-spam-for-food.eu.org]

[197.185.180.236 listed in will-spam-for-food.eu.org]

[197.185.180.236 listed in will-spam-for-food.eu.org]

[197.185.180.236 listed in will-spam-for-food.eu.org]

[103.234.210.218 listed in will-spam-for-food.eu.org]

[103.234.210.218 listed in will-spam-for-food.eu.org]

[103.234.210.218 listed in will-spam-for-food.eu.org]

[103.234.210.218 listed in will-spam-for-food.eu.org]

[103.234.210.218 listed in will-spam-for-food.eu.org]

[103.234.210.218 listed in will-spam-for-food.eu.org]

[103.234.210.218 listed in will-spam-for-food.eu.org]

[103.234.210.218 listed in will-spam-for-food.eu.org]

[103.234.208.152 listed in will-spam-for-food.eu.org]

[103.234.208.152 listed in will-spam-for-food.eu.org]

[103.234.208.152 listed in will-spam-for-food.eu.org]

[103.234.208.152 listed in will-spam-for-food.eu.org]

[103.234.208.152 listed in will-spam-for-food.eu.org]

[103.234.208.152 listed in will-spam-for-food.eu.org]

[103.234.208.152 listed in will-spam-for-food.eu.org]

[103.234.208.152 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.234.208.152 listed in dnsbl.ahbl.org]

[103.234.208.152 listed in dnsbl.ahbl.org]

[103.234.208.152 listed in dnsbl.ahbl.org]

[103.234.208.152 listed in dnsbl.ahbl.org]

[103.234.210.218 listed in dnsbl.ahbl.org]

[103.234.210.218 listed in dnsbl.ahbl.org]

[103.234.210.218 listed in dnsbl.ahbl.org]

[103.234.210.218 listed in dnsbl.ahbl.org]

[197.185.180.236 listed in dnsbl.ahbl.org]

[197.185.180.236 listed in dnsbl.ahbl.org]

[197.185.180.236 listed in dnsbl.ahbl.org]

[197.185.180.236 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.234.208.152 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.234.208.152 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.234.208.152 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.234.208.152 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[197.185.180.236 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.234.208.152 listed in bl.score.senderscore.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[alexkortig648(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 HK_NAME_MR_MRS No description available.

2.0 MIXED_HREF_CASE Has href in mixed case

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} HI: Is your email still active?

This is a multi-part message in MIME format

--fJrp111XHP8TVoTCbRXB9=_3RthZxt3B5w

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

My Name is Alex Kortig

I am writing to discuss a confidential and important matter concerning=

unclaimed inheritance funds that are reportedly associated with your =

name.

Kindly respond to my private email address at=20

alexkortig648@gmail.com mailto:alexkortig648@gmail.com

at your earliest convenience so that I may provide you with the releva=

nt details and discuss the matter further.

Thank you for your prompt attention, I look forward to hearing from yo=

u.

Yours Sincerly

Mr. Alex Kortig

--fJrp111XHP8TVoTCbRXB9=_3RthZxt3B5w

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

8859-1">

le=3D1"> <=

title>HI: Is your email still active?

My Na=

me is Alex Kortig
I am writing to discuss a confidential and imp=

ortant matter concerning unclaimed inheritance funds that are reported=

ly associated with your name.
Kindly respond to my private email=

address at alexkortig648@g=

mail.com at your earliest convenience so that I may provide you wi=

th the relevant details and discuss the matter further.
Thank you f=

or your prompt attention, I look forward to hearing from you.
Yo=

urs Sincerly
Mr. Alex Kortig

--fJrp111XHP8TVoTCbRXB9=_3RthZxt3B5w--

Categories: Spam and Phish

0 Comments

Nk.CA Phishing from ionos/1and1
Posted by Dave Yadallee on Wednesday, August 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 14:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmk3-000000008nR-3jPW

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:18:31 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 14:18:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f103.google.com ([209.85.208.103]:44477)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwm28-000000001KO-0ZdR

for doctor@netknow.ca;

Wed, 19 Aug 2026 13:33:16 -0600

Received: by mail-ed1-f103.google.com with SMTP id 4fb4d7f45d1cf-6a374bea882so2597742a12.1

for ; Wed, 19 Aug 2026 12:32:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nyrentcars-com.20251104.gappssmtp.com; s=20251104; t=1787167935; x=1787772735; darn=netknow.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=sfjFyDEb6Hx3/IPlKcOCXiRaaRYJgIdlWbfeZU0J6c8=;

b=KsBECLRNf3WBrQcykwTHc6sC71o4r9M5Y7HqkVEFHlPRrwm2xpYr9zvbsHn2Tk/uTR

HPdo5QRadE047Ok1XmZ+qwIupbSpwar1lFISC8aMLk4UH9iyOfsM8Ra1W23C3D3/I5cC

JYxd8SF8l+LdE43X+e2TbzcsiC42chkQcP+4FGrncfItDioYcruMzy1RSZOg+YyyI2AE

jafgQF3XEnEh3brCrUiDGUYByxEBDSA698O1M9zoeeMzG2f2x6/Q6GJ+0GekPWxrQPQ5

t5xR3+/tYEx2ZL8McGCLtM7fUU9W37G/7VIMH3fLFMJP5LJLM6Wb1uBOQcKuwAO1T2Fd

qcoQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787167935; x=1787772735;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=sfjFyDEb6Hx3/IPlKcOCXiRaaRYJgIdlWbfeZU0J6c8=;

b=ZRR0CdjQJyrgQ/o0m0RCQnofdSFMl1NEjCYOHh5hPZQlpT7p/1a91jCpmBPjsJ65vA

YIsj0nL2Ub/ix8niFB00qXs+QsnN+EEQOnitT5CxWq6gR5EeiSGlvBcdsYRS6XKC9M02

HV+buVIvbkEg3+XVGAidTSg1/pONCJJShoulGWskqOzO2+122uQ24HWDRRLwDqIB1fBO

I7XHSclf1/2pEaHE9FRE6ARzIiOpK/9SgvmGMKOSXRul0sB3QO3YLZedcjbaU4IK5+pW

e3t4U1HQpGawvQ0IoKi0lO7/fOC+bzzIPa0yPrT6z86DzA9PMivceLKmNXuvhncxuoOu

08fA==

X-Gm-Message-State: AFuF++nDyGymFblKDoObvG/riG0x7wuLpsFqGLUOvZzaQIYAX1gGAE0i

0W8xNr5WyCHNXb3X+avbKaIToYyrnB9k+NVvJl6yGQNwCpc+qNjQKajiKujZbg+3TMhm9ln7V5f

Uqv+C69HQ3TcnACSVBfQ5zt84pwwyKzR3LOD9VCPU/JG1flk=

X-Gm-Gg: AR+sD13Xp6Vq0KHhkuCFKS46EEQywTuDlmJ2Ews7ctg4YnMGQLTzNN3Ku7L5DqfXeYq

PkCTLRqcBm14xAVdrjgleSAaN1YPjtXmFK5JbbZHSWOeRsmn2HoMJA0HufxtNK5XLgw/6NioIcq

mUdQIXRbHp/BQ+QgyyQv9vcwYw1vS+z3CpUktGsyBx0QzX589N45WGKESRr4QFV88zB6q4KfbOj

hV22yip80y2AoN2gh7WYKdKfjSTX6XI4GF2BncKvJmrMsZLOWeG0XezOWHG2ys44fxP58K+ZJk7

PCrtO9YZePAdj7QVBsR4TSz6SmdRjdf2lhIh0bOY0fGJmseIpIiVT88RETLYGxEVHTKsaWZg2qy

Fw1jcHILFJntQmBzXLYda+1kcRk/b6TsiTz4=

X-Received: by 2002:a05:6402:5192:b0:6a1:b0b:ba6 with SMTP id 4fb4d7f45d1cf-6a40335d357mr3582897a12.15.1787167935118;

Wed, 19 Aug 2026 12:32:15 -0700 (PDT)

Received: from nyrentcars.com (ip31-70-65-27.pbiaas.com. [31.70.65.27])

by smtp-relay.gmail.com with ESMTPS id 4fb4d7f45d1cf-6a3fed56270sm1096410a12.15.2026.08.19.12.32.15

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 19 Aug 2026 12:32:15 -0700 (PDT)

X-Relaying-Domain: nyrentcars.com

From: fax@nyrentcars.com

To: doctor@netknow.ca

Subject: Notification

Message-ID:

Date: Wed, 19 Aug 2026 19:32:14 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-8ab0fdcd4d773289-Part_1"

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Account Deactivation Service Notice We are deactivating all

inactive accounts

Content analysis details: (6.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[31.70.65.27 listed in will-spam-for-food.eu.org]

[31.70.65.27 listed in will-spam-for-food.eu.org]

[31.70.65.27 listed in will-spam-for-food.eu.org]

[31.70.65.27 listed in will-spam-for-food.eu.org]

[31.70.65.27 listed in will-spam-for-food.eu.org]

[31.70.65.27 listed in will-spam-for-food.eu.org]

[31.70.65.27 listed in will-spam-for-food.eu.org]

[31.70.65.27 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

[209.85.208.103 listed in dnsbl.ahbl.org]

[209.85.208.103 listed in dnsbl.ahbl.org]

[209.85.208.103 listed in dnsbl.ahbl.org]

[31.70.65.27 listed in dnsbl.ahbl.org]

[31.70.65.27 listed in dnsbl.ahbl.org]

[31.70.65.27 listed in dnsbl.ahbl.org]

[31.70.65.27 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: ai-matogen.biz]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.103 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.103 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.103 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Notification

----_NmP-8ab0fdcd4d773289-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

class=3D"message-htmlpart" id=3D"message-htmlpart1">

class=3D"rcmBody">

, 33, 33); text-transform: none; letter-spacing: normal; font-family: =

wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, =

serif, EmojiFont; font-size: 15px; font-style: normal; font-weight: 400; =

word-spacing: 0px; white-space: normal; border-collapse: collapse; orphans:=

2; widows: 2; box-shadow: none !important; text-shadow: none !important; =

background-color: rgb(255, 255, 255); font-variant-ligatures:=20

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; =

text-decoration-color: initial;' border=3D"0" cellspacing=3D"0" =

cellpadding=3D"0">
box-shadow: none !important; text-shadow: none !important;">
style=3D"border-radius: 0px !important; box-shadow: none !important; =

text-shadow: none !important;">

box-shadow: none !important; text-shadow: none !important;">

style=3D"margin: 0px 0px 25px; border-radius: 0px !important; color: rgb(43=

, 43, 43); font-size: 28px; font-weight: 600; box-shadow: none !important; =

text-shadow: none !important;">Account Deactivation Service Notice

rgb(43, 43, 43); font-size: 15px; box-shadow: none !important; text-shadow:=

none !important;">We are deactivating all inactive accounts

rgb(43, 43, 43); line-height: 22px; font-size: 15px; box-shadow: none !=

important; text-shadow: none !important;">Please confirm if =

your doctor@netknow.ca is still active by =

verifying now.

rgb(43, 43, 43); font-size: 15px; box-shadow: none !important; text-shadow:=

none !important;">In 48 hours, all Inactive accounts will be deactivated..=

.

40px; border-collapse: collapse; box-shadow: none !important; text-shadow:=

none !important;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

text-shadow: none !important;">

text-shadow: none !important;">

text-shadow: none !important;">

color: rgb(255, 255, 255) !important; font-size: 14px; font-weight: 500; =

text-decoration: underline; display: inline-block; box-shadow: none !=

important; text-shadow: none !important; background-color: rgb(0, 120, =

212);"=20

href=3D"https://adclick.g.doubleclick.net/pcs/click?=

sf_rand_string_mixed(3)=3DAKAOjstFA55hCSrFSTBDNko3225YAz6GkouTQlHjExWXRbT5O=

PMnSlE8Wh4LAVp-D7jWRr-LcKW0w-HH1g8lCVAK_eU-5azfUXfjqfTiHFOFWV9I8m2ZaGczGlov=

1iY8kMSnelCX-AHG6VYBmpcZJapT1XbdlOM3B9u9whYqpkxEpFLbkzwDao00-DL8JyS7UIxIApb=

_JHANRmtKLSuRcM8IWqFaP0cOc8n8jTedmwHc8oAw2MV2tRUaAnN3eaxaESpc8fovDeWslJ0A3d=

uo5g46YzCYxQ8A56RI5MGcQw4TZj6TeWuj6jRjAe7g0X18--IBmztC1sUi6XuHkB1Ew-z_h9bv1=

XK-s_9L6zeDfQPtMsI3hOqp8T8545VdgCoElxs&sig=3DCg0ArKJSzEpZ_YMvCKWCEAE&am=

p;ur

lfix=3D1&adurl=3Dhttp%3A%2F%2Fai-matogen.biz%2Foauth%2F#doctor@netknow.=

ca&target=3D_blank" target=3D"_blank" rel=3D"noreferrer">Verify =

account

center; color: rgb(33, 33, 33); text-transform: none; letter-spacing: =

normal; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, =

Arial, sans-serif, serif, EmojiFont; font-size: 15px; font-style: normal; =

font-weight: 400; word-spacing: 0px; white-space: normal; border-collapse: =

collapse; orphans: 2; widows: 2; box-shadow: none !important; text-shadow: =

none !important; background-color: rgb(243, 242, 241);=20

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial;' =

bgcolor=3D"#f3f2f1" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

text-shadow: none !important;">

text-shadow: none !important;">

94, 92); line-height: 18px; font-size: 12px; box-shadow: none !important; =

text-shadow: none !important;">
color: rgb(96, 94, 92); text-decoration: underline; box-shadow: none !=

important; text-shadow: none !important;" href=3D"http://webmail.=

streamlineapparel.in/#NOP" target=3D"_blank" rel=3D"noreferrer">Privacy =

Statement

text-shadow: none !important;">
color: rgb(0, 102, 204); font-size: 13px; box-shadow: none !important; =

text-shadow: none !important;" href=3D"http://webmail.streamlineapparel.=

in/#NOP" target=3D"_blank" rel=3D"noreferrer">netknow =

PORTAL

<=

/p>

----_NmP-8ab0fdcd4d773289-Part_1

Content-Type: image/png; name=download.png

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=download.png

iVBORw0KGgoAAAANSUhEUgAAAXEAAACICAMAAAAmsyvzAAABFFBMVEX///8dHR0ZS6AAAAD//v//

//0YTKAaGhqlpqr8/PyRkpaysbUZS6IYGBgVFRUZS6QAQ47k7fQZTJ0APZUAPpMODg7Z2dnw8PAI

CAjv+P4APorj4+OVlZX19fXZ5O7S0tLB0+PHx8dGRka4uLjN2eCrw9wmJiZQUFCMjIyYmJhYWFh8

fHw6OjqxxtdkZGTAwMAvLy9vb290j7qDg4NoaGhJSUn7//U+Pj4AO40AOZZOcKBbeqorKysoUpsU

RosnUZM8YKKXsslqh7M7YJeJoLwqWpZFZqWqucxUead9lruns9Ta7e28099xjqsALYhviK0AMoFn

hqARTIaEn7iGoMaUp77///IwXapEY5TX4fFMdJhYeKcSd82fAAAXy0lEQVR4nO1dCUPbRreVPZZk

FVmSJXmVV0xsY4OBAI4DAcKSUJp8pe97aV7S/v//8e6dRZs3oKYuqU4bFi1j+8ydM3fuvSMkKUGC

BAkSJEiQIEGCBAkSJEiQIEGCBAkSJEiQIEGCBAniKBXbnex2rbad7bS9OhzQtHW/pR8XpXZttF8m

FOyb2qs11/2ufkSgEWvt/ibwbKhqKgTVIGR/u57Y+aqhtYcFUs6lZiJHChtSwvjKAFQWD1OkoM6m

m1k6GdUTzlcFrdMj5UV0U5A39XW/0R8CmlTPdomxjG5EebDuN/tDoL6tkmnzVnOGUTBysRNke93v

9oUDnA8tm4rzbaBPqL7pjY4Gm+/QOyz4s6laKK37Pb90dN5F+Ua2e4edpk+s5jWzwzfAemLkfxXo

XBcHJOwMgtt9XGvOmh1LnREp4yW5nb/9jf4wAEHph+dLg5RHGws0wxsSauSJrDwZzX0SzJNl0ltE

N/XYN/B60v673t+PBjDwXGDe3b63/A7pAMScbPwNb+5HhLdJAr43O9oDgoMaNfJk6nwa9nwFL5DR

A+OCmtQzEsafiJpwCQ0yKj70pvoAvZVEVZ4A7YArSo70Hhz31ko71D0kD+6h50RlCppMT8iSzAA/

ymt+kz60ASecdPcecVuW3lU4Dh0qro396hSs84v3p3eXrTxwrslyRv7nEF4/JlxQ+o8KvXZITs2R

VODTtLuEdNfkK9pRpNO6aZqKZU0m1vvXuxXZN/R/ALRemRn4zmMNdPvN/v5hyY+Qe+hdGmS5V/kc

sGdAAdZ1xbZdx75qSfJ4LW9sBkbUwlUyfEJuIXLLkPZcebiqN/Yo6HGkAYqtpHVd0ZW0ObnepTae

Wcu7i+CQE955QtJSi9yySf1LY3OFb+7hSM+Dwr7pivVtC/Q8s2Zl0cAPZ4SvQH6PGePHy698Bsym

m5k6fldM3X57I8vjdWcJ62puVYRLfRbYqq2gqcdjro0L7s20brsn9bXPnpylziraqqfKqkq668l8

BtTS/wIjV/A3+N/W04qZfp9HytfIep0mjwsHq2mtdJBKHawpduvLNvgmCoJOnvA1De6Kz7+tf/gk

o3e+njcpSVzFV7dqXF/FkDBp2zadt67rTgCu44J12zrnHLrBNO0TTf66Rsa3kXE1te7ZZAUQkmLq

VqtB8b31+fLuo+WAoNhCZhQ97X5Zq41vs4V66eVTLoTDTE8afiQF/uVfnbgRZ1GZfF/n7NlkjK9I

x9cJn1LbbUiZDF/o0O+tE9c2Qdxx9kRj/yhrEcblCCRtvKA/4AJsU+a3sUMZcPM5wrIKhyV6Qs6M

ZX/lNWDhv+MXnzkLjBgY90HtfCzdWrZu+8Ly9rMU4TQjj+XxGL7xW7S5Y0CDU2PoELghCNPA7UGn

hXsLf8f4mfwVesJ/ydJ+mQWx9vvtF50h9t2RCOMS/dxj+fuZLRafim7+HCUUFkVo2pV8Pl/RJCFI

M16D90UFrqxUJIlauxTlORN0F40PB+/Cb6U+YLmIXJkUNodZVoz/ArGIcbC0RtX2l5/2JB+7ovLq

7uTCcp2JdXFy16pIcxiHSxu/XF2fu44zOX9/dfuJiUtGzm8JfC4F7MveZ/94PdxeJ8UTbmqugOVW

O4PD7F7xpRn8bFWRhEpLu67Nzdy0nUs8gREWlGDp81XVddHPwXij7jjWf75LqCCZsIUisZXba/A3

TVxRwYRgO+5Ji4nQ7q8ug/PrK7+vZOm+WuXHf8uHGNckbWOTBGl8NUdr3kjq+GB7z3sxTkzgi8QY

B+BUJ9+nbboWxVjiiUQzQiAlMsyrVdtfIjG4zmkDiPTnV6oyGfmXiyr0iOm/EjTlfPuOl+06PF6p

O69kMUnK0mtc6OJR04qOKizF6u8QYsS2QaDFdwf9vRdh7osYp1remNiKmWYL/vOKLIz/bqKYisLk

RugSfHFuQlFGemH+owPmrZu64BunBMWe3ErIuDjogo37bgkwzodVjHEW5fayAxJnHXkHgz/eXlGW

of58jv8SxoGWU2RIp0tPd4uKijbOf3PttC3cGOHSm2n7rHqKkd2ggc/nLMMRxAzQqE3d/LUVMA49

FbFxhTGuTDEuoDW3R6lw4axfv8IKWP4SmtsDaJvsD5vPsq0i0HFnpo3L8q2TpsYMGuLsMv3NX7s2

2CkoBUgEWiyNxmBUxtSdkwp4fRJzR6SWhcepRmBoDKQJ6AfG05MbKcp41MZZ98xlHKEVswf7ZGo3

CriPe/OY0pZPs15NqJZaJqPnkCmfcXsG4xJaXMPhDqKiu7+jA6Np3/yEBY056tSGhWi4f6Cw4GfO

yFuWHZi2Yp/ZNESmKLZ7h/0RYTzIMr1OK8xDWsg4hdcZduMKkyMHMxmv1+DS/sLmigckXLFbfldf

vZUvZVyuWArTamD8Bm1cunfTQiMUG5alYYEBG57cyLjkAcIrF6GeMXV6FcqLXr3D6oy/zLgW6Hpk

ZwqZtQMlWwB/XiVH85vzDkSpuU/5M0QVljEOvDDLpIzfo+/RcmwzzaOKwKTjOi64kIIk4NXZGmdo

avTeCaQe6HbeOi56kia0g+vQBYxTGZ+v43GUNnoRsuKmrElej9dyzS7Mgr6r9+N8p8IF0OCbetMi

oxU72Y3mowbCclWRLmxh4+lTZPzaxCwFlxTr6rbVal2eWtSb4Yf/ZMGTRlXxTdx0L+7gyts/q/qZ

+z94eoWM4ycujsJ6EK+MyPqDQO3ObqPTnbGjKFQAXarBpBGru/P6+3Rj9OZjPKSlNi6BjYcZl3ct

3aREgkNRvfvE/ZL8laMoYsKrbmEEBUxcSI1tn9/yBenW9duf6R2Z+Yy7NAH1CBunaHcDaSHZ4Lgm

lQYhNmdmNSJXgMcjfiF7rAUYANChasHP+sGg8HzRL+w/IuKwnHHt3FZYTYWevgLSTtKccbhll0cC

M6DuN1X0D/E6036NM2ze8sXdvvhErTqjjeX8PYuzr5xxqb7jUx6pRekYEcWZUT+3UfavUEn5aKPZ

VSNjZa9LxFlR7Vg/DIlQuIOXYbmqVKoKU2PQ8TvwDF1T57mh6i8s+EKvg0URcxdxLXQGQi7d+nya

1tZYo6FDjGNJrORo9YxLnr+TtiAYB/McUov1vUgSrRAFYy2NfJtWibpdwrI59ivbOqQNQzsE3rDb

Oqlgl8bjSl+WMA4UfXfFNGm6v0vy7ltT4XVE78Fqx7If9K781zbpGd2utuDolT9tWjdynV7I1qsa

j9bOZVx/GuNsJwSzcb8ygm9gIcMdlXMaV4C9gm+sZbKNZ0uie8o4A5c2w+RSqy8dxUR/qtH5WMg4

xlPlW4uFRGxbd3cl6X8dnU+SzqWkZfwrgc+bqs7iAaZ1CQfeC8Z1K58Z+2FYEWBcwDhdND3Bxnlu

LqS/Wo2apwHDfp9rbsTh09CABXngyJdo+VZPdAFqvrcfcWHwUFst8yHhD5yHz51LGAduTm0+USrm

pAGWK0JSyqQRSwq1qizmpZjob4MaCcY/Spnp4sWFjNtPY7xfFgwwR67IzJOWhnJpBu8j7Mx5b3wD

Ju/4qSNxCERFq0cJx324fBuSQcr7Bpcb8vCHuCxRFW2cP0+bPGJln1ck6aMpVjUX8aRPvoqzKzKu

wBTbcBUevXJez8oOhRnXkfHIKv9pjPf41GkMuIEbKVH7rBUEiaFPB4Lte41kSJ83RAk32FHcxjIq

hwmHCaLESqpz5LhTkkpBPz4Uixinknvj6mkm3KZ9CjS9F/l9/UO8YqhimTazcftnYNwRNu58mVUQ

HWdcCjH+2BUQR9EXFXTi2lzBd5p0emTnIl5FSFEKuT3m19cHBNasBwbXClrsr5aDvUd9lZ3aQY41

MapijLcXrIkE4bodix1mWLaxUdX5kh6ueAVH3ovKLf06Xuhct6nCI+On0vj7xLfxL7MSoHHGg2te

s1d8JOPA6oDzor4DuRhxBefF/awYQDXqweWhTXOkR2UIju2UVXIojbClwkiqow2TwmHzwKdcpQYu

tgxwryaqKodkcz7lQpTNOOPI91jTPoqsm6LbVgVcu49+1e3ZOMo4Oo78FDruQcKOqspUOXREx90w

41c28+sfyTjffEJNnIdIVHJc5LJN99CmyofB5e1yoCjicLtgFGDW1VLIK/wAhEKflXh/+dLS9QO5

gvFwAGBIFjno8xinQcKxfOqLsa47dzjwf3aFWEw+xXhsOYJx5wZmznO/wOjjrIrFEOOK4l6GLjl9

CuPAYMAKj7IUysEHHxa4TvCrYf4LnHCxkoRj5Njj8qTua9KwTHrFsKNPGxkFviBjXFVD7wS3pAc9

OwVhlGY0I8G2/+RPXJ+1tF5tUBfQZUd0ylKI8Yx051KqwJl2MMPzwb/XasCKCC/NhK+P+CpfRAIf

XuNCofmLRzGO9eUBKzk2tx0FG1GkTaoxflCxNPD7J1fmPop3DIQfwowr1ehmRJg33xQ2UIB2QqFJ

NVIFzRg3QsFKurFgQQ2wYDzQ8QwryoLPfnuBtVrM2mD5c0fLHXaraZpC0xXlWsKdWcAiTrHjMYYD

qD+u25MtOHbqx8atL9CDtA+x7kfmvMswKPzuZMEvDPFKeUuhKYnH2fhGbE2iorMXoBQuhtakZsr3

+QyV232WGIXCHj1NfXdUinadLqxCmpKLksmULFhwMcJz+0t1HIN7n4LthHAif3kRlMEBxfZZhVYN

5au2zUKCZ84llgixlf5Yk+4sm+c89QvcsvXKxUpdKvtW4yu9EObarxksK8KeHUtbQajL+oSrKTkD

7fxuQW8+kvGQ18GlNlaPv8d8Di63tdCyvcsIL6KBD9igoKodLJWyIcIL3WggjK25AldlKH6fS7lP

qnLe4GvwSn5r9+666tp+PTkadZXuBxpnpBOd5x/MNKxBtYzMy5wvLR5jTNvmPa7cwFZ5YF1RLj7B

lTRNkcnfj6mNozVPfBt3b2QseZPlr/lz23yMr4JpidA6hhvikRfdbXWIOpFjQRGvF3pyRcHD60qH

xDDodIc30WABdz80EPWgM8tvYjHyGmPYY5fy0QC9Pb9aWnxkG9PCiIszqzpxcVGv6CJNr9iYl4SJ

dAzkvpqYbDbVzbPJTWXMNCh/hT1EZRwEaota/pXOIzB22j6/xfUpjJHWxeSUzZKypFX9Pk1Pdtn6

/9MH0XEPZRw/diQFpDJnOYI3aNQ5GnDKskAhW6HTcEB9uwA+4RthvR5SbPRYj0VEnAzi8RPqj6vv

6CMuqS+PVw0XpaTFJ1ZMZrmiIsL2f8Ykve1eMfc8A0PgA0/8KsitdfWq1Wr9cgWuII0/YSRXP2F2

/32Cq1WFekKKe3Gz22rdnjr2mXPFgrxj6T1uM+Jd7pxCS7v30JDI6D1QVdr7UQMnRlaKf+QSs9Ny

1uvssB/JOwxt4ZTn9ctENUIqRMcDEfnpftA6UBlvmDJuHNPDPAJD5vspIcapbaZ9o07zLSr8q129

l4NX2p2cs/mUMVWtwpjwC4AUnDcbfIl5z/oGV+xYk1K1LBePKNV7tr6CtY5pBmVG2JJli8qWBzLu

HUWe3gQCHtoq60P404SImEhfOzIwI3SwSXBT0GbRv4mauB8N8HzCVXBephqmOm5s4gmWZ5p51WzG

50FPn7+9k4O64ox8lQ7SlzothhB864ptmtUbvqiX62fhmha8CjdEQ+84NJWfkXcd2wy9ELhEPKf6

UMZLh9HkpEFG3qwtJ+3IMKAE820XBQODtELBEQeR51QMRVwlN3MjKV9Ytettlkg1yN7UOHgw47RO

ENTdRO86tD9Cq1xbwcinF/mCr4MAnWLdNwuab53TWh86fdq0gELBwgAzXaX+N66SeL0XG1Am7zd9

Tk1WnO9+9GmeObI5J6JUDDPOpkihNDAqhsF0qLHhkOty1jSRDSqoM/cg8cFDCDfw5SnPeXSbacoN

fHFO87Qc2a9ty2j5D1iMyDw47sjpzNJ13T2pZ3jSAZyTXUu36QjAXed4C1YI4eRavaET5ZeqmVbE

FA0tIdf6/9E2sWcY49GdASG+CzHL3e8E9h29Q+sG0oOrSno8Sx+QQI7CVGpsQ7Nv4my9jzfFtIq3

XQ8/Cpq6pNrMNxtgapO4wgyXBQF1vcp3iYfKlIHP/LeqzaqCdN/Q8XczPfmjwpI9yDirglNQrG3b

HwcKJjeU31qYh/sE60t4yTMhJKj7569cnA4QVn5WeIB+9Q7LURe80M3OG82a8OKwX8riSUIy5u93

xFO2tHYWnxDPLjR2xH0sOqbGyjFCL+SH5PGRLw/ZimfGQReUSIoNnkj1ZFeTx7FPTZ321xN8ZEJ4

ByiWHVrVSzlSW/tV/nRtoegEco2pDcV2bulcLG85Zzg8RHQMXr76uTGB6RP7ExiXShsxdJDy4kHs

6cCGMdoTFUPxO0BpMvV95uMV9n/a8080JebsFTc2+l32nPguczd4KLC50TkkqlpIDTvsDqEZbb+N

LIveglTtdDDWEH/xqRqXuJrgyAbJNR3Xtb7dNCS2m2R6/4+09dFxzaDkihYdun/CDVo4FYcBmsv/

8mwQS4JCx9jOdYMNdllunafN0FrLPt8Fr9KmqQ2FMt7/KYqspO31YsU8Rm7w03aWh2282B39Do4L

r0uMXEEdbYfO7HGDbR6kRP+p7Auv0d2Dpg7290c1cYcIynZCrewUMODYY4v/bOzdTj+ozo1jMpmA

j/bh57vdPN86Mp4WJAwaaq0/q66ri5nRca37LardoSGHl2lS5fZb1cE5gTLrOOd/7CLZeF7LjPP3

EywPANNXTKd6n5elxm9vHVbI/9ssxrM7sQVPoTBgXcHgxW74qUNprdeOd0bRE7yOYipEgDPhERrn

XrypWYz/dHgwGrX5DLIRv2OK8dYMbDXyUUWcubkHTD//6u7acl3woy9O7nYr1P2YdakkNX65em9N

qlW3+v7+thFqFAdQ4/LPM+hliw0qSS4Fb6Uul7IhwOjvFaL+t0qMITspIkxeNoa2PO8E7YoSX/Sr

BRLKsJXLmEKO3yGEei9+QhDbmXciRNxMBFn6+eBX0p1XLIOx+MpKvpHP43QZfVhLhlo7nqxI0Zle

ZtWJIbSPyhHzhtmqux1feE/Pn3P9Y1o+x6TbIN3DdpY94JYWphvdxfc98MSymsSFfs1UWxoNAtKd

iHIk9j2rVUm0q8WSdRGKxQ+i7Ch0XT37JvZw9wLZmeufPAyg4WWWfT7GSn/64JXcm85wB2fR59nk

ErPt8IbLpe+WPeiGAXfBLnqRTGC8mdj40TIR53l6wNGNvaV+LiYnZTLw13eh7s7EsfAMzWOofOWU

DYLo3t52Z1Fb8VOzTzyERk7QAy8THC19Qh83cfFl6uXEP9Fs5D7oS29IYg8bJ7nDkPcb+XAPZgmr

J6DVcoqtd2hAJVpf8QTGpdlHo2RMzY2P2X8vR77Nuyjg8CGNxX/JxlfzpLdRX66RS7FHi/gP+HJy

UPBN/N+OZti+8U8q1VaxpU2j7RplwTDTFKO3gqZ5+y8XHmec7SCsreqxNpjcofESyo2ISf0jHrW6

ZmjSkC3BU8eHK9slC354yqA5Bv4bi3Ut2Zr1UHi13uZRR3updo7lU81ms1ha5bMPNG2zEC6EYCJu

7KyEoxo52tjb7qZe7Hh5Fks5CFVOaTwHvyJN6ZeLnueVpG1SfKlW/gzIRgjnhefLMmYPQ5N4Horg

UKrtJ4wLwGQcopc9aS5VHq1kPI360HwTGvWk5I+FCGibBhEVQJrwPo3HbFlbAGAbGK93gPHhaibi

Fw9UkVChGi8BUsureXCFBkyjquAmotp6nv/8zwNqCh/vmlTkW0tWpgDMxodYUnGQ2DjDqGCMxM9e

ihO+sr9TS3W8WIeJWUt0nAGWl35VoacGe35W1ryHM2eH1GvJn5JjGBXUHLfnothk1V+hH9cnRbql

qE+8xDtEeITHq3BfBZeUxbWCj8U2GWU7tXcvd825YsByxxhQ4xNl/ismHOMqg97By42rrBo9g6Ud

tKGo/0w8imdFHf8CM+lo7R2ew0enYt1v6odGiT1zWDwcJZckfZ4b9ciDzArq8zxkL0EIO+HHOx2/

iAeBvnAE+0xy6IYnFv7sEBtN1LX9Nb1/HbZpWVCZHNYTCf+bkM0RUh6u528X/huBj5NsNl/oI/pf

JhIpSZAgQYIECRIkSJAgQYIECRIkSJAgQYIECf5e/D+k9gbPj/4sqAAAAABJRU5ErkJggg==

----_NmP-8ab0fdcd4d773289-Part_1--

Categories: Phish

0 Comments

Web/SEo/App spam from Microsoft Outlook
Posted by Dave Yadallee on Wednesday, August 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 14:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmjJ-000000008ez-3xuN

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:17:45 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 14:17:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012053.outbound.protection.outlook.com ([52.103.66.53]:17604 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwktq-000000005D3-1gJ0

for root@nk.ca;

Wed, 19 Aug 2026 12:20:41 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=EAEwLrcx+ouRCnnLRwmu6UYBRj1BJF5qrWQlbGLTgC+JVB2CxFTRquYok/4LxNVJm1rQOJwm6QHsU7U/lKthJUZWa5P0QdA5W4RorNYS+arklb2bPHHi8edQAFNDguuVj4Cv1s6a+EHIP4Ziojxtmloc3zBZnroPHQAkL/ii48UT2CQzHYQZdu3RU5RhZDHraDTLHOSionpc7s+OHWSYk9xqgPmE09NCP64xkvFLmd5vHRKFsZYl+FSQ1xp51kL4fx8cCrurpQ+OtQNUR0fy4/CqreI223EIJN4ytZhv9AN5QrmJzIwz+X2Ks4t6g6wNVM7iWNy/qeI4dXtyPq9sQg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=flIdMoemC+Q/KdBbpjNVzNNZ+vyBYIMFIvNuHIHFyrI=;

b=tiMawUYeDwEU0pTTG/PnSkpmuG27dHrCZWVQ9IJhG9Jrq3KzlIPo2eaqjfVpy5KvsgjnmHwZGOmFgxHFUXShYLxfjzNStaN0tDDSs8aObXXENoLdVlzVABD13fpdiKHNaF/wCTOlj91Y/9VriNZYes0Px23hVFPB6ezODcPwn+V7zOLG5nrd94TI9Zf2w72Lqid+iXMZ2onvPTuaDsJ2AwgBcijTTEf+1VoOQdiqcjhBvzGzccL5LPDaz6aF6uKA8OtixnVaUZCro9Yexx3mwsKjg9U9MK01fQ4kGa7bdJxBLYx7A2LO6316364E5b/vyvNRX6oWGwsZboceV0ScCQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=flIdMoemC+Q/KdBbpjNVzNNZ+vyBYIMFIvNuHIHFyrI=;

b=Q7v4fQ56rLfspN4TT0akcuL/ERUYZIB0YqcOLIzZjgVNM8zp/30SvnXUoEbg1LpUDSAZYg+46mqgaTpWeENyU4TEeAiN/lDWgur5EsdwOASuVjLP/DQNFUeptrIqPGUBcRpIKGcUU5S9TC3xwbqT2VErV3z9DHGGUt8ygH+T2tfAzEduzVojCRHVhrn2dAadP34tMXv/+m2lIm8OcmK5TVKp3YZoaAIybYQlthEiK80872WucjTwrATQXXMOfDvP6an0Ja7UM8znq0c24S/YUUMMYZ3tKKyrfUTk48s67NhiExfljnhMaGrqzIDszbjmaZ/5gAf6TSKVonLrKlCNow==

Received: from SEYPR03MB9427.apcprd03.prod.outlook.com (2603:1096:101:2d8::7)

by KUYPR03MB10286.apcprd03.prod.outlook.com (2603:1096:d10:98::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug

2026 18:18:35 +0000

Received: from SEYPR03MB9427.apcprd03.prod.outlook.com

([fe80::7f88:40a9:3558:2ea5]) by SEYPR03MB9427.apcprd03.prod.outlook.com

([fe80::7f88:40a9:3558:2ea5%5]) with mapi id 15.21.0339.007; Wed, 19 Aug 2026

18:18:35 +0000

From: Charlie Hughes

To: Charlie Hughes

Subject: Re:

Thread-Index: AQHdLPtZ4FY9e/6g70GcQwcLEeXNjbaiqWs8gAGsAOuAAV6JpQ==

Date: Wed, 19 Aug 2026 18:18:35 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEYPR03MB9427:EE_|KUYPR03MB10286:EE_

x-ms-office365-filtering-correlation-id: 92770161-e29a-45ab-2bc2-08defe1e4866

x-microsoft-antispam:

BCL:0;ARA:14566002|4140399003|25010399006|24121999003|22091999003|8060799015|39105399006|8062599012|19110799012|15030799006|15080799012|48001999003|19101099003|31061999003|55001999006|37011999003|2604032031799003|440099028|3412199025|102099032|43065399003|40105399003|31055399003|2607281247196008|18071099003|26121999007|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?rGRpfonZkD+/ckEuxCvBTVkFSVQ5f1KY1hcTRpDE/9AfT5R+ctZppHkEvqfN?=

=?us-ascii?Q?NcBjPRdE0XlchV3w88pU/vkMIzHQatMahBdjpMaMnQXw9z3JszVJ7ghDE8nd?=

=?us-ascii?Q?48uHIOrD13szZj+67n6RCjYgdXbrazVBUS2Uu7Su3d4RIJPt/gh9jh6mIzC3?=

=?us-ascii?Q?cgH23S85tuj8oXSP8jzh+KbhTd08Plj7DENf9NRWr5SKbZOviAWTYEXmLd/X?=

=?us-ascii?Q?7qzaKx/KqWJQYC2RFe6f7yZSp1bDyHvdhaePL70VgNOhEnogugFtjSiXyfzi?=

=?us-ascii?Q?ZkfGkScJ4xa5Wwm3mKb81PQB0/nym3WSc+woCJdiDPPmWyoI2w9GNHRfr8EC?=

=?us-ascii?Q?60f/fEh+NJTZ74DEMglV3iF5rFEUkIGeY3kDg8XlfV5FjGWpATr75d3CGsCM?=

=?us-ascii?Q?fCobuknxwdTAk3+C32WksxC4XOpcggB5LDl1Z9+LT9mjUb5M15gCqVx6zYx9?=

=?us-ascii?Q?Wfi6icQk0L5tFduFstD3W29+xGVFmr7Utq4bli5MLAk4RMlDuQLM4vWrEXR1?=

=?us-ascii?Q?F6S1AQB7Lp0Vgbnnwlv2mgJSYY9a5PMKZSVA2jXhH59mbJ4HiIOVeBdJHvEP?=

=?us-ascii?Q?Nz0RgBaIsWo0gBWn67gbMKk9E6i3D0K3broPJp6DzSHx7CfuieAfSmULbqDl?=

=?us-ascii?Q?0Bc6OvjxufYYs5yad/magn9I+i4kuRArRa1dEyBCAFzrbb6cm4Yd7r1Q77Fp?=

=?us-ascii?Q?OW2XQuH4He+8/zN9yE0RRkOHwMI0DJZNSthDwOMp79ehdTuKm+3hJI0GxWq1?=

=?us-ascii?Q?NGVhamZ+m0hUd64lhtK4AAO7bCGRl2mI0wH8wjJJZOlh80/pInUBgIrExB+Z?=

=?us-ascii?Q?6XasSDbZIA/6i+Pcae67mK41hBzAKBSicC18oSEeZdOXAcGg8qyD9KkGjtnf?=

=?us-ascii?Q?gwCZnfMhN20Ew78uN//SvZ4Wc8mE8K9VhVTwEgT1+jkcQb0nZ0UgUqRVjMiX?=

=?us-ascii?Q?RK3VGUZkvafzvE17TStrz6akSKFFRXipBmhsDmfE9UEdIXBNGIaryqon8DUY?=

=?us-ascii?Q?4W+13LHYp+gX/p0o5N5pf5EL9q17UrUR6BUvf6hOH0vEzee/3PrwsRdalvor?=

=?us-ascii?Q?/pwXmMvUPRclGLGqEg6+SzXYC702FyPYLXGL2bwIZgtUXGvnKunJFK+VSE3C?=

=?us-ascii?Q?cpDw7pQ8eO8VDsh9RqIkFlxVJYeU7tekfiNw+xm3Jq3Z2JEgTHBHmNfiPV/p?=

=?us-ascii?Q?xGuaTv3deVPasO5y/zAFwbq57wBWyrcF5FyzI+p7pclPATu3Z/9fzgUE2Ngx?=

=?us-ascii?Q?HjecvDXZf6gVRBGVK0iQAYwcy9MpMDCd45JTIE5XSUZHlj1j1yoKtypYL65q?=

=?us-ascii?Q?zG1sxiBTjZzIxtgyC+fksGyF?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?433fkdwUPCWf4Lr9ORhuefvdePJD+9X1WCJoLpFx3kdUXje3RxRz/z7luLfD?=

=?us-ascii?Q?xBvNCiPAVtEY584YIWyeX0PLFyYsmaClnPWwgJAB0cZOLiqBDNVUQRzjqdXx?=

=?us-ascii?Q?PrY+eWJUth1WOAiDzKQWupcSKEsOcgENSQuPH2JbccJLBHY1IzgcqgkD5vuC?=

=?us-ascii?Q?5gXJtMmQ0YH63/brseJnwF/AlkTQLOfgzi6YPZvfCXasd9mN/S2I29mfMDMJ?=

=?us-ascii?Q?SyTsWCi53bLBqqBphFQXibEHENRSllVX4ck4UFbJjiaNloYbmWfzeyit9BiE?=

=?us-ascii?Q?l0YenGd5DF5DYzZh2n/zSw3wK8SPL08Ms37PuqppHi7U5/+SN6CoM3Z42jNJ?=

=?us-ascii?Q?N4QVaUB0B6qnRJ1Lo3C2PWZN+F1XSI3Ivbz6iinVWPqQMdG8UpdDMicfQc4j?=

=?us-ascii?Q?cXqO8vGB2nKXdyAEljF+aMJ+Yd23VCbulyI2ZLOKyufRFN9OO3TmprSZzInT?=

=?us-ascii?Q?61vUTI+4ktJQSZ3M1crbX11ug6TwiVhfvcDzHBTCHl+beEbjQ6Eb22fPGySV?=

=?us-ascii?Q?5uRm+hmeD2EOl+SNTjhTv8FyhItUPqIjOJt4d1l4Zt3Kt/ytFItIZi+re6eA?=

=?us-ascii?Q?eUNklHzQ8lDfpwIb1nznA4WsrjkrZrlFdTzgdlj0M6SXz/Z6Gp43w6tGod5L?=

=?us-ascii?Q?2T3Bwew/6ER5Le/YkcHbNa/O+KD3rQXqwQC7T51Y6/n1/I89lznCLDz21ruD?=

=?us-ascii?Q?FrimWvm8N20dfmeSCNHGeV3Y56LQ3oZFqiLMJyLcs/zzDKTKQ/OEZqHdQ/yt?=

=?us-ascii?Q?I6/+FFs+5+VABkAyla3/vGmpv48BBhB3eKbDBZT3eFYWU4oGXtcBgjxY0NbH?=

=?us-ascii?Q?OLAGsv3vMOGv0urJVrtrQysv2iFbddhuNte4tM+QPKV5uHrxL2BVw8qCenYN?=

=?us-ascii?Q?N+kpzkHokfV4aN2hL54TshUpwC40wFrtidnH+W/hcThiKHNxDqTAvgAna4JD?=

=?us-ascii?Q?2R64PUm/GzhPxT8E3uKD6NK6aYJJErCv47TPLw4ehWchSgFcCwuYQlA9wiqF?=

=?us-ascii?Q?k6L8tU6NhHyFOkkx0AhCEiy5pzGUtduKp7PmBRcmYNF5FpVBvOCuj1w5QPWy?=

=?us-ascii?Q?ZfZa7aJKQwVF/eCfhNgvPOCecmSZWSzVW7bpQlm5dn0v5/W0X3zZmvzM8L3+?=

=?us-ascii?Q?hISs55nok5PKW/wSX6wuXCk07tLQEvY7hJ55WgHX8x+I8xOkshccpxkEaxv5?=

=?us-ascii?Q?NudKaNy9jPtD7mmPPYzdcfJITGYr6GqzsKrq0hZIyKuN3cyACD/BUtmHRK0c?=

=?us-ascii?Q?0AkWfnuek6dX91AkkFouK6ZTh9YZfAfT9D/4O61Q0UY/3AkJINIm6jDBJsR6?=

=?us-ascii?Q?EvmhjSKLEz0pIlWPX7+rkkgf6KfQYOORYnalQGulG0QmpHlm9tQAldPQmDYP?=

=?us-ascii?Q?FGz+M1K7idnP1F/1AXpVCFiECrmSAxxIrvN2UO9qfVISjT/XlN8Vjn0x4xfp?=

=?us-ascii?Q?B+Wke185NHh8bP9qvvThQ3Ato8m+woNy?=

Content-Type: multipart/alternative;

boundary="_000_SEYPR03MB9427177CCDC72E0A98076DB3C5A52SEYPR03MB9427apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9343-9-msonline-outlook-fac1c.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEYPR03MB9427.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 92770161-e29a-45ab-2bc2-08defe1e4866

X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Aug 2026 18:18:35.0258

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KUYPR03MB10286

--_000_SEYPR03MB9427177CCDC72E0A98076DB3C5A52SEYPR03MB9427apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

________________________________

From: Charlie Hughes

Sent: Tuesday, August 18, 2026 9:23 PM

To: Charlie Hughes

Subject:

We will send you our price list.

Thanks & Regards,

____________________________________________________________

From: (Charlie Hughes)

Sent: Fri, 2 Oct, 2020 11:36 AM

Subject: Re: FW: Website Design 2026

Hello, I am Leslie Green,

Are you planning to have a new Website, re-designing, Development?

I am waiting for your positive response If you are interested, may I send o=

ur cost and company info.

Thanks & Regards,

Charlie Hughes.

--_000_SEYPR03MB9427177CCDC72E0A98076DB3C5A52SEYPR03MB9427apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

>

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

yle=3D"font-size:11pt" color=3D"#000000">From: Charlie Hughes <Ch=

arlieHughess05@hotmail.com>

Sent: Tuesday, August 18, 2026 9:23 PM

To: Charlie Hughes <CharlieHughess05@hotmail.com>

Subject:

margin:0px 0px 8pt">

ckground-color:white; margin:0cm; font-family:Aptos,sans-serif; font-size:1=

2pt">

Serif",serif; color:black; background-color:rgb(255,255,128)">We wi=

ll send you our price list.

ne-height:14.4pt; background-color:white; margin:0cm; font-family:Aptos,Apt=

os_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size=

:12pt; color:rgb(0,0,0)">

&nbs=

p;

ne-height:14.4pt; background-color:white; margin:0cm; font-family:Aptos,Apt=

os_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size=

:12pt; color:rgb(0,0,0)">

Than=

ks & Regards,

____________________________________________________________

ne-height:14.4pt; background-color:white; margin:0px 0cm; font-family:Aptos=

,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-=

size:12pt; color:rgb(0,0,0)">

From=

:
or:rgb(81,167,249)">(Charlie Hughes)

ne-height:14.4pt; background-color:white; margin:0cm; font-family:Aptos,Apt=

os_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size=

:12pt; color:rgb(0,0,0)">

Sent=

: Fri, 2 Oct, 2020 11:36 AM

ne-height:14.4pt; background-color:white; margin:0cm 0cm 12pt; font-family:=

Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; =

font-size:12pt; color:rgb(0,0,0)">

Subj=

ect: Re: FW: Website Design 2026

ne-height:14.4pt; background-color:white; margin:0cm; font-family:Aptos,Apt=

os_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size=

:12pt; color:rgb(0,0,0)">

Hell=

o, I am
f; color:rgb(81,167,249)">Leslie Green,

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

&nbs=

p;

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

Are =

you planning to have a new Website, re-designing, Development?

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

I am=

waiting for your positive response If you are interested, may I send our c=

ost and company info.

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

Than=

ks & Regards,

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

&nbs=

p;

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

249)">Charlie Hughes.
=3D"margin-top:0px; margin-bottom:0px">
al" style=3D"margin-top:0px; margin-bottom:0px">

--_000_SEYPR03MB9427177CCDC72E0A98076DB3C5A52SEYPR03MB9427apcp_--

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Web/SEo/App spam from Microsoft Outlook
Posted by Dave Yadallee on Wednesday, August 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 14:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwmjJ-000000008ez-3xuN

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 14:17:45 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 14:17:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012053.outbound.protection.outlook.com ([52.103.66.53]:17604 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwktq-000000005D3-1gJ0

for root@nk.ca;

Wed, 19 Aug 2026 12:20:41 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=EAEwLrcx+ouRCnnLRwmu6UYBRj1BJF5qrWQlbGLTgC+JVB2CxFTRquYok/4LxNVJm1rQOJwm6QHsU7U/lKthJUZWa5P0QdA5W4RorNYS+arklb2bPHHi8edQAFNDguuVj4Cv1s6a+EHIP4Ziojxtmloc3zBZnroPHQAkL/ii48UT2CQzHYQZdu3RU5RhZDHraDTLHOSionpc7s+OHWSYk9xqgPmE09NCP64xkvFLmd5vHRKFsZYl+FSQ1xp51kL4fx8cCrurpQ+OtQNUR0fy4/CqreI223EIJN4ytZhv9AN5QrmJzIwz+X2Ks4t6g6wNVM7iWNy/qeI4dXtyPq9sQg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=flIdMoemC+Q/KdBbpjNVzNNZ+vyBYIMFIvNuHIHFyrI=;

b=tiMawUYeDwEU0pTTG/PnSkpmuG27dHrCZWVQ9IJhG9Jrq3KzlIPo2eaqjfVpy5KvsgjnmHwZGOmFgxHFUXShYLxfjzNStaN0tDDSs8aObXXENoLdVlzVABD13fpdiKHNaF/wCTOlj91Y/9VriNZYes0Px23hVFPB6ezODcPwn+V7zOLG5nrd94TI9Zf2w72Lqid+iXMZ2onvPTuaDsJ2AwgBcijTTEf+1VoOQdiqcjhBvzGzccL5LPDaz6aF6uKA8OtixnVaUZCro9Yexx3mwsKjg9U9MK01fQ4kGa7bdJxBLYx7A2LO6316364E5b/vyvNRX6oWGwsZboceV0ScCQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=flIdMoemC+Q/KdBbpjNVzNNZ+vyBYIMFIvNuHIHFyrI=;

b=Q7v4fQ56rLfspN4TT0akcuL/ERUYZIB0YqcOLIzZjgVNM8zp/30SvnXUoEbg1LpUDSAZYg+46mqgaTpWeENyU4TEeAiN/lDWgur5EsdwOASuVjLP/DQNFUeptrIqPGUBcRpIKGcUU5S9TC3xwbqT2VErV3z9DHGGUt8ygH+T2tfAzEduzVojCRHVhrn2dAadP34tMXv/+m2lIm8OcmK5TVKp3YZoaAIybYQlthEiK80872WucjTwrATQXXMOfDvP6an0Ja7UM8znq0c24S/YUUMMYZ3tKKyrfUTk48s67NhiExfljnhMaGrqzIDszbjmaZ/5gAf6TSKVonLrKlCNow==

Received: from SEYPR03MB9427.apcprd03.prod.outlook.com (2603:1096:101:2d8::7)

by KUYPR03MB10286.apcprd03.prod.outlook.com (2603:1096:d10:98::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug

2026 18:18:35 +0000

Received: from SEYPR03MB9427.apcprd03.prod.outlook.com

([fe80::7f88:40a9:3558:2ea5]) by SEYPR03MB9427.apcprd03.prod.outlook.com

([fe80::7f88:40a9:3558:2ea5%5]) with mapi id 15.21.0339.007; Wed, 19 Aug 2026

18:18:35 +0000

From: Charlie Hughes

To: Charlie Hughes

Subject: Re:

Thread-Index: AQHdLPtZ4FY9e/6g70GcQwcLEeXNjbaiqWs8gAGsAOuAAV6JpQ==

Date: Wed, 19 Aug 2026 18:18:35 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEYPR03MB9427:EE_|KUYPR03MB10286:EE_

x-ms-office365-filtering-correlation-id: 92770161-e29a-45ab-2bc2-08defe1e4866

x-microsoft-antispam:

BCL:0;ARA:14566002|4140399003|25010399006|24121999003|22091999003|8060799015|39105399006|8062599012|19110799012|15030799006|15080799012|48001999003|19101099003|31061999003|55001999006|37011999003|2604032031799003|440099028|3412199025|102099032|43065399003|40105399003|31055399003|2607281247196008|18071099003|26121999007|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?rGRpfonZkD+/ckEuxCvBTVkFSVQ5f1KY1hcTRpDE/9AfT5R+ctZppHkEvqfN?=

=?us-ascii?Q?NcBjPRdE0XlchV3w88pU/vkMIzHQatMahBdjpMaMnQXw9z3JszVJ7ghDE8nd?=

=?us-ascii?Q?48uHIOrD13szZj+67n6RCjYgdXbrazVBUS2Uu7Su3d4RIJPt/gh9jh6mIzC3?=

=?us-ascii?Q?cgH23S85tuj8oXSP8jzh+KbhTd08Plj7DENf9NRWr5SKbZOviAWTYEXmLd/X?=

=?us-ascii?Q?7qzaKx/KqWJQYC2RFe6f7yZSp1bDyHvdhaePL70VgNOhEnogugFtjSiXyfzi?=

=?us-ascii?Q?ZkfGkScJ4xa5Wwm3mKb81PQB0/nym3WSc+woCJdiDPPmWyoI2w9GNHRfr8EC?=

=?us-ascii?Q?60f/fEh+NJTZ74DEMglV3iF5rFEUkIGeY3kDg8XlfV5FjGWpATr75d3CGsCM?=

=?us-ascii?Q?fCobuknxwdTAk3+C32WksxC4XOpcggB5LDl1Z9+LT9mjUb5M15gCqVx6zYx9?=

=?us-ascii?Q?Wfi6icQk0L5tFduFstD3W29+xGVFmr7Utq4bli5MLAk4RMlDuQLM4vWrEXR1?=

=?us-ascii?Q?F6S1AQB7Lp0Vgbnnwlv2mgJSYY9a5PMKZSVA2jXhH59mbJ4HiIOVeBdJHvEP?=

=?us-ascii?Q?Nz0RgBaIsWo0gBWn67gbMKk9E6i3D0K3broPJp6DzSHx7CfuieAfSmULbqDl?=

=?us-ascii?Q?0Bc6OvjxufYYs5yad/magn9I+i4kuRArRa1dEyBCAFzrbb6cm4Yd7r1Q77Fp?=

=?us-ascii?Q?OW2XQuH4He+8/zN9yE0RRkOHwMI0DJZNSthDwOMp79ehdTuKm+3hJI0GxWq1?=

=?us-ascii?Q?NGVhamZ+m0hUd64lhtK4AAO7bCGRl2mI0wH8wjJJZOlh80/pInUBgIrExB+Z?=

=?us-ascii?Q?6XasSDbZIA/6i+Pcae67mK41hBzAKBSicC18oSEeZdOXAcGg8qyD9KkGjtnf?=

=?us-ascii?Q?gwCZnfMhN20Ew78uN//SvZ4Wc8mE8K9VhVTwEgT1+jkcQb0nZ0UgUqRVjMiX?=

=?us-ascii?Q?RK3VGUZkvafzvE17TStrz6akSKFFRXipBmhsDmfE9UEdIXBNGIaryqon8DUY?=

=?us-ascii?Q?4W+13LHYp+gX/p0o5N5pf5EL9q17UrUR6BUvf6hOH0vEzee/3PrwsRdalvor?=

=?us-ascii?Q?/pwXmMvUPRclGLGqEg6+SzXYC702FyPYLXGL2bwIZgtUXGvnKunJFK+VSE3C?=

=?us-ascii?Q?cpDw7pQ8eO8VDsh9RqIkFlxVJYeU7tekfiNw+xm3Jq3Z2JEgTHBHmNfiPV/p?=

=?us-ascii?Q?xGuaTv3deVPasO5y/zAFwbq57wBWyrcF5FyzI+p7pclPATu3Z/9fzgUE2Ngx?=

=?us-ascii?Q?HjecvDXZf6gVRBGVK0iQAYwcy9MpMDCd45JTIE5XSUZHlj1j1yoKtypYL65q?=

=?us-ascii?Q?zG1sxiBTjZzIxtgyC+fksGyF?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?433fkdwUPCWf4Lr9ORhuefvdePJD+9X1WCJoLpFx3kdUXje3RxRz/z7luLfD?=

=?us-ascii?Q?xBvNCiPAVtEY584YIWyeX0PLFyYsmaClnPWwgJAB0cZOLiqBDNVUQRzjqdXx?=

=?us-ascii?Q?PrY+eWJUth1WOAiDzKQWupcSKEsOcgENSQuPH2JbccJLBHY1IzgcqgkD5vuC?=

=?us-ascii?Q?5gXJtMmQ0YH63/brseJnwF/AlkTQLOfgzi6YPZvfCXasd9mN/S2I29mfMDMJ?=

=?us-ascii?Q?SyTsWCi53bLBqqBphFQXibEHENRSllVX4ck4UFbJjiaNloYbmWfzeyit9BiE?=

=?us-ascii?Q?l0YenGd5DF5DYzZh2n/zSw3wK8SPL08Ms37PuqppHi7U5/+SN6CoM3Z42jNJ?=

=?us-ascii?Q?N4QVaUB0B6qnRJ1Lo3C2PWZN+F1XSI3Ivbz6iinVWPqQMdG8UpdDMicfQc4j?=

=?us-ascii?Q?cXqO8vGB2nKXdyAEljF+aMJ+Yd23VCbulyI2ZLOKyufRFN9OO3TmprSZzInT?=

=?us-ascii?Q?61vUTI+4ktJQSZ3M1crbX11ug6TwiVhfvcDzHBTCHl+beEbjQ6Eb22fPGySV?=

=?us-ascii?Q?5uRm+hmeD2EOl+SNTjhTv8FyhItUPqIjOJt4d1l4Zt3Kt/ytFItIZi+re6eA?=

=?us-ascii?Q?eUNklHzQ8lDfpwIb1nznA4WsrjkrZrlFdTzgdlj0M6SXz/Z6Gp43w6tGod5L?=

=?us-ascii?Q?2T3Bwew/6ER5Le/YkcHbNa/O+KD3rQXqwQC7T51Y6/n1/I89lznCLDz21ruD?=

=?us-ascii?Q?FrimWvm8N20dfmeSCNHGeV3Y56LQ3oZFqiLMJyLcs/zzDKTKQ/OEZqHdQ/yt?=

=?us-ascii?Q?I6/+FFs+5+VABkAyla3/vGmpv48BBhB3eKbDBZT3eFYWU4oGXtcBgjxY0NbH?=

=?us-ascii?Q?OLAGsv3vMOGv0urJVrtrQysv2iFbddhuNte4tM+QPKV5uHrxL2BVw8qCenYN?=

=?us-ascii?Q?N+kpzkHokfV4aN2hL54TshUpwC40wFrtidnH+W/hcThiKHNxDqTAvgAna4JD?=

=?us-ascii?Q?2R64PUm/GzhPxT8E3uKD6NK6aYJJErCv47TPLw4ehWchSgFcCwuYQlA9wiqF?=

=?us-ascii?Q?k6L8tU6NhHyFOkkx0AhCEiy5pzGUtduKp7PmBRcmYNF5FpVBvOCuj1w5QPWy?=

=?us-ascii?Q?ZfZa7aJKQwVF/eCfhNgvPOCecmSZWSzVW7bpQlm5dn0v5/W0X3zZmvzM8L3+?=

=?us-ascii?Q?hISs55nok5PKW/wSX6wuXCk07tLQEvY7hJ55WgHX8x+I8xOkshccpxkEaxv5?=

=?us-ascii?Q?NudKaNy9jPtD7mmPPYzdcfJITGYr6GqzsKrq0hZIyKuN3cyACD/BUtmHRK0c?=

=?us-ascii?Q?0AkWfnuek6dX91AkkFouK6ZTh9YZfAfT9D/4O61Q0UY/3AkJINIm6jDBJsR6?=

=?us-ascii?Q?EvmhjSKLEz0pIlWPX7+rkkgf6KfQYOORYnalQGulG0QmpHlm9tQAldPQmDYP?=

=?us-ascii?Q?FGz+M1K7idnP1F/1AXpVCFiECrmSAxxIrvN2UO9qfVISjT/XlN8Vjn0x4xfp?=

=?us-ascii?Q?B+Wke185NHh8bP9qvvThQ3Ato8m+woNy?=

Content-Type: multipart/alternative;

boundary="_000_SEYPR03MB9427177CCDC72E0A98076DB3C5A52SEYPR03MB9427apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9343-9-msonline-outlook-fac1c.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEYPR03MB9427.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 92770161-e29a-45ab-2bc2-08defe1e4866

X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Aug 2026 18:18:35.0258

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KUYPR03MB10286

--_000_SEYPR03MB9427177CCDC72E0A98076DB3C5A52SEYPR03MB9427apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

________________________________

From: Charlie Hughes

Sent: Tuesday, August 18, 2026 9:23 PM

To: Charlie Hughes

Subject:

We will send you our price list.

Thanks & Regards,

____________________________________________________________

From: (Charlie Hughes)

Sent: Fri, 2 Oct, 2020 11:36 AM

Subject: Re: FW: Website Design 2026

Hello, I am Leslie Green,

Are you planning to have a new Website, re-designing, Development?

I am waiting for your positive response If you are interested, may I send o=

ur cost and company info.

Thanks & Regards,

Charlie Hughes.

--_000_SEYPR03MB9427177CCDC72E0A98076DB3C5A52SEYPR03MB9427apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

>

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

yle=3D"font-size:11pt" color=3D"#000000">From: Charlie Hughes <Ch=

arlieHughess05@hotmail.com>

Sent: Tuesday, August 18, 2026 9:23 PM

To: Charlie Hughes <CharlieHughess05@hotmail.com>

Subject:

margin:0px 0px 8pt">

ckground-color:white; margin:0cm; font-family:Aptos,sans-serif; font-size:1=

2pt">

Serif",serif; color:black; background-color:rgb(255,255,128)">We wi=

ll send you our price list.

ne-height:14.4pt; background-color:white; margin:0cm; font-family:Aptos,Apt=

os_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size=

:12pt; color:rgb(0,0,0)">

&nbs=

p;

ne-height:14.4pt; background-color:white; margin:0cm; font-family:Aptos,Apt=

os_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size=

:12pt; color:rgb(0,0,0)">

Than=

ks & Regards,

____________________________________________________________

ne-height:14.4pt; background-color:white; margin:0px 0cm; font-family:Aptos=

,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-=

size:12pt; color:rgb(0,0,0)">

From=

:
or:rgb(81,167,249)">(Charlie Hughes)

ne-height:14.4pt; background-color:white; margin:0cm; font-family:Aptos,Apt=

os_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size=

:12pt; color:rgb(0,0,0)">

Sent=

: Fri, 2 Oct, 2020 11:36 AM

ne-height:14.4pt; background-color:white; margin:0cm 0cm 12pt; font-family:=

Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; =

font-size:12pt; color:rgb(0,0,0)">

Subj=

ect: Re: FW: Website Design 2026

ne-height:14.4pt; background-color:white; margin:0cm; font-family:Aptos,Apt=

os_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size=

:12pt; color:rgb(0,0,0)">

Hell=

o, I am
f; color:rgb(81,167,249)">Leslie Green,

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

&nbs=

p;

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

Are =

you planning to have a new Website, re-designing, Development?

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

I am=

waiting for your positive response If you are interested, may I send our c=

ost and company info.

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

Than=

ks & Regards,

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

&nbs=

p;

ckground-color:white; margin:0cm; font-family:Aptos,Aptos_EmbeddedFont,Apto=

s_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0=

,0)">

249)">Charlie Hughes.
=3D"margin-top:0px; margin-bottom:0px">
al" style=3D"margin-top:0px; margin-bottom:0px">

--_000_SEYPR03MB9427177CCDC72E0A98076DB3C5A52SEYPR03MB9427apcp_--

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Page 1296 of 1296, totaling 19430 entries

previous page

No entries to print

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	August '26					Forward →
					1	2
3	4	5	6	7	8	9
10	11	12	13	14	15	16
17	18	19	20	21	22	23
24	25	26	27	28	29	30
31

style=3D"margin: 0px 0px 25px; border-radius: 0px !important; color: rgb(43= , 43, 43); font-size: 28px; font-weight: 600; box-shadow: none !important; = text-shadow: none !important;">Account Deactivation Service Notice

style=3D"margin: 0px 0px 25px; border-radius: 0px !important; color: rgb(43=

, 43, 43); font-size: 28px; font-weight: 600; box-shadow: none !important; =

text-shadow: none !important;">Account Deactivation Service Notice