Instagram followers phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Feb 2026 10:43:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vngta-00000000EUz-3ZzY

for dave@doctor.nl2k.ab.ca;

Wed, 04 Feb 2026 10:42:30 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Feb 2026 10:42:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f198.google.com ([209.85.160.198]:55300)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <3HG-DaQwJBVsRHB5ABKHF7SH9F3BE.5HFL3E7LGD.53@maestro.bounces.google.com>)

id 1vnfRx-00000000Nal-2v3N

for sales@nk.ca;

Wed, 04 Feb 2026 09:10:01 -0700

Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-502a4aca949so354634251cf.2

for ; Wed, 04 Feb 2026 08:09:06 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1770221340; x=1770826140; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=Mt53FO10xmQLF8DRc2hAJVNSLHqgJoL41s/q1diNQOU=;

b=GTDrM0Fpz9naGDFwPVbDRMpK4yS3Sfm9JGLtKAUnAfDFgdqC//0/nSwu8mFtySYuSN

KdcGO75JJrTM1iY5xpfwut5cjZ2LZ3uMlF2vdE+H5j7kuw1+JDHL6qKPvG5+XEaUoKRw

FjpDbzCZUOydWpGW/ekIPG9xzfKDJUx9XYOk5yzHlnO2cJFCWlRVV05RxLyU6GYcugH+

lP+5nQj6dHNJgPjuRz1Ci9XXYM6Z/+VKXsNE6Zoc54zRBzX6oQkEivGIusvdp/XpmlnS

9mFtXghLcnBIl9hCyV2xA7f0kkNtDiS/0xn9SdQX63bkUM4gdXBlZamwQWJB5OjhZu2P

S5mA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770221340; x=1770826140;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=Mt53FO10xmQLF8DRc2hAJVNSLHqgJoL41s/q1diNQOU=;

b=w9EQ6FOThzNzCWLLIr/H4t/amQqqq2PUd5AzWNU9C8eQSHmXVP3fSC5onp0wz5cj2C

vmcwf1nX7S+wnn9gjOh/iULlnM8ZV4jiM86J+zDk6VQFyaLE7owAjV7i1MK9uk3b6pd8

zEtSZzyYP9N5bRvSDwYiMtYtVT/4nCkNY+cQqs/wndZkj97IspU8voF+YKd1r+i/NRlY

d4TomMgsB6Rmh+x2dmiTLVpjssxB1zStSSwG7Z8Nr7itpDHGi46Bsw6NbP//bal0tdKD

MCQyKsIhP+GT5+VNMZHREFErBD5iHg11SkakobnKaIdOYR1fPhOV40T0+uprsZb2eEi+

dAoQ==

X-Gm-Message-State: AOJu0Yz3TPoWgx+9VlKU7EcyRX7WgrjI0r9M80A9URiPrJzCyf4TAW49

Qs73RvoaxUTlMhEzrCBH+D9g+XwWr0vkT0SVh3KFPGApizNHMnoEC553CqLNImWB0oLpDpR36Ls

l91Y=

MIME-Version: 1.0

X-Received: by 2002:ac8:7f09:0:b0:4ff:c5f7:ece1 with SMTP id

d75a77b69052e-5061c1b59b8mr40694191cf.68.1770221340082; Wed, 04 Feb 2026

08:09:00 -0800 (PST)

Message-ID:

Date: Wed, 04 Feb 2026 16:09:00 +0000

Subject: daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook

Likes here

From: yoichiromezo@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, daveyadallee, Get More 1,000 Instagram Followers and 1,000

Facebook Likes here Sorry to interrupt your time. We offer social media services,

If you're interested, please visit our Website. If you're not interested,

please skip this step.



Content analysis details: (10.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.198 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[yoichiromezo(at)gmail.com]

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.198 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook

Likes here



Hi, daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook Likes here

Sorry to interrupt your time.



We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.



We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )



Are you interested in a free trial ?

Special For You Bonus Extra $2 FREE SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :



[ https://instatool.site/services/?daveyadallee ]





Take free trial service today only...!!

10 -101K Instagram Followers



- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest



Thank you,

Regards,



Shopify users list spam from Google Gmail Part 2

This is a multipart message in MIME format.



------=_NextPart_000_0807_01DC9619.F26004C0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







I wanted to check if you are interested in acquiring Shopify Users List for

your sales and marketing initiatives?







You might be interested in following users list: WooCommerce, BigCommerce,

NetSuite, Klaviyo, Ecwid, SAP Commerce Cloud, Magento, eBay, Stripe, Wix,

Avalara, Gorgias, Weebly, FastSpring, PrestaShop, Oracle Commerce and many

more.







Please let me know your target audience and geography so that I can get back

to you with samples, counts and pricing for the same.







Appreciate your time and look forward to your response.







Best Regards,



Rose Atkins



Sr. Demand Generation







Please reply with "Not Interested" in the subject line if you would prefer

not to receive emails in the future.





------=_NextPart_000_0807_01DC9619.F26004C0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
style=3D'word-wrap:break-word'>


class=3DMsoNoSpacing>Hi,

 


class=3DMsoNoSpacing>I wanted to check if you are interested in =

acquiring Shopify Users List for your sales and marketing =

initiatives?

 


class=3DMsoNoSpacing>You might be interested in following users list: =

WooCommerce, BigCommerce, NetSuite, Klaviyo, Ecwid, SAP Commerce =

Cloud, Magento, eBay, Stripe, Wix, Avalara, Gorgias, Weebly, FastSpring, =

PrestaShop, Oracle Commerce and many more.


class=3DMsoNoSpacing> 

Please let =

me know your target audience and geography so that I can get back =

to you with samples, counts and pricing for the same.


class=3DMsoNoSpacing> 

Appreciate your =

time and look forward to your response.


class=3DMsoNoSpacing> 

Best =

Regards,

Rose =

Atkins


class=3DMsoNoSpacing>Sr. Demand Generation


class=3DMsoNoSpacing> 


style=3D'color:gray'>Please reply with "Not Interested" in the =

subject line if you would prefer not to receive emails in the =

future.



------=_NextPart_000_0807_01DC9619.F26004C0--

Arabic language spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Feb 2026 07:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vne0g-00000000Kpg-0cKl

for dave@doctor.nl2k.ab.ca;

Wed, 04 Feb 2026 07:37:38 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Feb 2026 07:37:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f41.google.com ([209.85.161.41]:48447)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vndDo-000000007zY-3gRb

for sales@nk.ca;

Wed, 04 Feb 2026 06:47:18 -0700

Received: by mail-oo1-f41.google.com with SMTP id 006d021491bc7-669f0b0290fso681546eaf.1

for ; Wed, 04 Feb 2026 05:46:21 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1770212775; cv=none;

d=google.com; s=arc-20240605;

b=RQht+6lUg+7HwjfJVZv+5MeKSiMiuw4LukER+H22vAk4lYD89QptNThu/JQG7SLLze

NXuwXdmY89jkFXPN+eSXdhN+9GE9hpaICqASq/olorwI52kBBD2aDzTyRzVT49pZo3ad

J3K0HScs/HXqbCLOY1d9ePTcAu8XPZJD4fX7Hon9f5RCKG/FRdgLTUIDGGwHFAE6Ylgs

XmPsfar8AFfnvCRhvS5dB2AP3dPf4zDPb4jpxj0/r6tawJZdvuw99Ljax8tOwY+E9L7K

TcZm95pPOdenfr+6/zPkIKS1I4HDtrrITrXN+l1M/HSrL80C4QU9s+oVnrmD+cWpLkip

YxKQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=kLGdaPJWstgkzWd1C8jef0IO0xj8+4CAItWWuepwjBI=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=Pyk3koLbbdGA+yJWjrxtad5PIcgCtGEbn2sTjoilcdZNMsXlLfEv3mcC4T9guYFms/

1tloPYwUtHnBdgQL65NSNIL9FcGBDOCDHVFVc30BenhIwemm/N0TChIWGExBwZa/hUHV

FdKOOBP6MSpCcG19e6zhUEcrDqRJKmHcmWvVInFh/w47UCiQbl5EhBBPYQFx6lj+juZt

B3JBvcodCqRLEZ7+x8RDZcLIV6lMOy6RMzhPPeBZn6o3PeEI42cNCdhRMlPEUgOLXHAx

6cXUvMZsJkjD8aBy/ywk1JyYyqO3LxZwmQ5W7FBD1eoHTauh8Ock1BUbk/D8LQZ78Alu

ywFQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1770212775; x=1770817575; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=kLGdaPJWstgkzWd1C8jef0IO0xj8+4CAItWWuepwjBI=;

b=A+y+rDkbnv+qVTFYC/KzYKwHNurPc8czjiERA1Rfijbp1qrTlGOg9B5rykQU0nulRm

tYzk99jg9VPOvXvtq/1y28Mvk6jM9kjkm+JBHkv38gkPNSl8oyJwBX0Emt/YrR2Cjt3I

9FJTtka2y4dk2cV9GbReRB8LMurHtLoe8wVL3lTNK/8lE6i1CF3F3mQTuPAxMFZwIQCE

oEfyv0iK9O0cX7LcmVHCOt5wvP6cH/Cmu8RMpR3Y+vBmTt53NHGxWg/4y3qe5trdoonf

3DmWOJQv1AIUumC8TO29G8joMGl31EKFGHtBzWVzbS+aIJZ0ov7m5sBVUhG31ZyVRsRW

Ma/w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770212775; x=1770817575;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=kLGdaPJWstgkzWd1C8jef0IO0xj8+4CAItWWuepwjBI=;

b=ktDQXcWXhe+KOIMDMwA9tfFVhzOyClns7IOTZ3fyJFqQJG+ua5t4N+0iHHowwXp5bC

Hrsuk+PcCxz1YUBTTc6S/5DuAiuHoPMrpkWNSRLu/2ajFjD7x/lwZTdAR7CAoSdgtRHQ

9yQR/zuZY4CN248dYFFWGhOkAmrJH1N9vvB7uNY+1MBSdA2c8tjzSdC2HMO9Y2dZ22to

VT/14JCu3gNTSPw4kKAfxYITmkMnI3hGYw6B1aJ91n+jHnkNSzmLU+XpFtNHFncF1K52

VkC8LmjFXN4an9o0mf3NIOo9W0i31To+MO83HN5aCUSv/kZTcsK2BFUaUCM7NpYsjUOs

/T9A==

X-Gm-Message-State: AOJu0Ywk+h49SVbC+DVx2U01M9jVRxZgUvAjV+vSlUT50AxKEWVkLeCE

6vQdAuBeGI0T3yPLjupCaUxfI//gLZy4S4enMN9tPXo4sEkvthxnb42SslOw+e2x3/jijUeflB4

RFKD6NQDhjSCHSsFtanyZdNPhKH1PRexTfA==

X-Gm-Gg: AZuq6aKhRyuZviUpWhc3FStMldrGzZqtMA5szB6pf/HIWDSO5AC3hmeXkZECkg0Nk/P

j8VrHCVsjyQg4l7pbPn5+dfKuxMOdHNiCjsP1pTZAuYzjS55CcHRIPH91a+3vooTU7SVR0h0xuj

mWqsKF/YCKelldj2qHj/9GqLqEKiyVXwUqALnNIc+uTSJPneioaTd+5VCIRRN7ApoYFtdOAlyOv

gbDx43v4kUMS1oQt/AQrsWhcsEVTk24HEHui415HS5BNWWnQwfxim/4aDLCUPb8ey/bqA==

X-Received: by 2002:a05:6820:c81:b0:66a:142:bcec with SMTP id

006d021491bc7-66a22599e39mr1405842eaf.39.1770212774713; Wed, 04 Feb 2026

05:46:14 -0800 (PST)

MIME-Version: 1.0

From: =?UTF-8?B?2YXYrdmF2K8g2K3bjNiv2LHbjA==?=

Date: Wed, 4 Feb 2026 17:16:00 +0330

X-Gm-Features: AZwV_Qj1Y1QzRx3HQFJqiRr09iJRsmsBNui8hjALuvF-Q7hjgQEJf4W9MGidnFE

Message-ID:

Subject: =?UTF-8?B?2KjZhyDYqtmI2YXYp9mGINuM2LnZhtuMINiv2LHZh9ix2YXYp9mHINqG2YbYr9iq2YjZhQ==?=

=?UTF-8?B?2KfZhiDZhduM2LTZiNiv?=

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000009d1cd90649ffc741"

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (10.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.41 listed in dnsbl.ahbl.org]

[209.85.161.41 listed in dnsbl.ahbl.org]

[209.85.161.41 listed in dnsbl.ahbl.org]

[209.85.161.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.41 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mbvcxz1360(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mbvcxz1360(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.41 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} =?UTF-8?B?2KjZhyDYqtmI2YXYp9mGINuM2LnZhtuMINiv2LHZh9ix2YXYp9mHINqG2YbYr9iq2YjZhQ==?=

=?UTF-8?B?2KfZhiDZhduM2LTZiNiv?=



--0000000000009d1cd90649ffc741

Content-Type: text/plain; charset="UTF-8"







--0000000000009d1cd90649ffc741

Content-Type: text/html; charset="UTF-8"







--0000000000009d1cd90649ffc741--

Shopify users list spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Feb 2026 08:37:00 -0700

Received: from mail-pl1-f193.google.com ([209.85.214.193]:52355)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnevD-00000000Jnh-2aJY

for dave@doctor.nl2k.ab.ca;

Wed, 04 Feb 2026 08:36:14 -0700

Received: by mail-pl1-f193.google.com with SMTP id d9443c01a7336-29f30233d8aso44447695ad.0

for ; Wed, 04 Feb 2026 07:35:16 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thedatabuild-com.20230601.gappssmtp.com; s=20230601; t=1770219310; x=1770824110; darn=doctor.nl2k.ab.ca;

h=disposition-notification-to:thread-index:content-language

:mime-version:message-id:date:subject:to:from:from:to:cc:subject

:date:message-id:reply-to;

bh=CF8PkCTX1WYhoLJWN4gQxzkdTDZRPBYq1jkUnNqncgM=;

b=YnnTcYzedYnFBqAaFuZtZjFh/l3oyLI5X9HUFswVT6Wq9treQ/0Jp55C4j2qlIexmj

WflgozhjwjYfnw297Q4SYAZemSQx4naaz7OPaX81eRr/0WD/AyB1PJ3ds94Xl8OuHuJr

8aFWVi7dTV7Aqic5LsFvUQ7pogomCRDyATQL8c22MgtR0D+TW+buqANxhrjA5K9qm6/9

62+CcsyTwRv/JMHp7uNBEQ0lFkndGZ14DV0sP/8lQtVNWFPUUCoNTw9HWw+PFDcCbA73

lcON9FL8NxJpQQqr3yDehF1dqvsv+K5tEA5VyxiEgL/bpj1NhcmvBgLoOc/d8Q/O7uA8

1mTg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770219310; x=1770824110;

h=disposition-notification-to:thread-index:content-language

:mime-version:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=CF8PkCTX1WYhoLJWN4gQxzkdTDZRPBYq1jkUnNqncgM=;

b=E/HVBAq81iDHJA1sqwjZjpWcBYBs0E50Ws4Et7cW9Z0KImyaNUkCK/PrrdcwCwCh6r

1ItjKJ6Zr2Szj4U6+uQo1rfLgenvFnma0N7bpOEIDHla+jrMa3AKQy71it0naa7YBo83

5nP+oxR7EEfEvufvgtVJjl1VZ2zYfelIO2Y9tCsabZhH1kdPMERyeFjTi+i0v9laKfqa

S2kXQMUS1G56SHsQGkNM/g1cvijAwunBFU+0d+e4BwNPSvNnCYoXQ15Q84LnzHFO2ZW/

EsA/yaqsT3dPQPg3C3UiNKJs9Ru+Cu4BMkN8/JypCh6fekLQl39Qx2+nkXJr7MW9h7vX

AWJQ==

X-Gm-Message-State: AOJu0YxKdyc6q3MTwNgtZBrbexlse/znTSoNUe4dfAlxkrPq/vLzk26/

3ysCtibEcE/u7A7I5+g20ihxsi0+czmS34ABTrWhXK1VQxDkhYMbFX6hfw5a6Oj3Pz7rtAkGeZS

eh4i3bMs=

X-Gm-Gg: AZuq6aLq5QffKiIElO1DGhNeBpfwSEA0hV7ukrXWMcypRXRMELjrKOASNUOE3cZu8AV

PBd3hvPwhhA7xM3PZIdtnJ2CNvmFAu99dWzfoJj0ytCFzW1pNpEcN0/FGwVOibTxoVjuZk9QWnV

wPJ1smKvgGTCugbPF1gKV1Memu7t1DhD7XuUei9XNUqswp7lRyIWfQX1R7Vd8tu7b4DDIQsosYs

BiAfzPDJlKwpJfED5yrZ4DHs2GtohPGUSiv5HpubB9VgtoTF9fZ26tCJSFzSwURwGRf8QTrdoDT

qzZcWl5SVhTmc3BvYSEEFOJFEH73YJ2BwYwNDoibY6EgSg8oIkiVaEhfE9AHhcpMmkMtXyG9Xa6

hV9NbzSa2wOdSKcSfhhsMnloVzcEjFqjY12tR3pjltsA7EdkU8ktRCjMVmzs/AzD+Z12eXyb6s5

8nZunDmjriWWSOVETvOLg6+Aclf/dG1ybNXTI=

X-Received: by 2002:a17:903:3bcc:b0:297:df4e:fdd5 with SMTP id d9443c01a7336-2a933e3fba2mr36002345ad.23.1770219310375;

Wed, 04 Feb 2026 07:35:10 -0800 (PST)

Received: from DESKTOPDP4EVTG ([103.214.61.23])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2a9338a11f1sm37374155ad.38.2026.02.04.07.35.08

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 04 Feb 2026 07:35:09 -0800 (PST)

From:

To:

Subject: Shopify Users List

Date: Wed, 4 Feb 2026 21:04:20 +0530

Message-ID: <080601dc95eb$d8a7c8c0$89f75a40$@thedatabuild.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0807_01DC9619.F26004C0"

X-Mailer: Microsoft Outlook 16.0

Content-Language: en-us

Thread-Index: AdyV67XR5dTiUVW3ReWOq/atHfT79A==

Disposition-Notification-To:

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I wanted to check if you are interested in acquiring Shopify

Users List for your sales and marketing initiatives? You might be interested

in following users list: WooCommerce, BigCommerce, NetSuite, Klaviyo, Ecwid,

SAP Commerce Cloud, Magento, eBay, Stripe, Wix, Avalara, Gorgias, Weebly,

FastSpring, PrestaShop, O [...]



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.214.61.23 listed in will-spam-for-food.eu.org]

[103.214.61.23 listed in will-spam-for-food.eu.org]

[103.214.61.23 listed in will-spam-for-food.eu.org]

[103.214.61.23 listed in will-spam-for-food.eu.org]

[103.214.61.23 listed in will-spam-for-food.eu.org]

[103.214.61.23 listed in will-spam-for-food.eu.org]

[103.214.61.23 listed in will-spam-for-food.eu.org]

[103.214.61.23 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

[209.85.214.193 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.193 listed in dnsbl.ahbl.org]

[209.85.214.193 listed in dnsbl.ahbl.org]

[209.85.214.193 listed in dnsbl.ahbl.org]

[209.85.214.193 listed in dnsbl.ahbl.org]

[103.214.61.23 listed in dnsbl.ahbl.org]

[103.214.61.23 listed in dnsbl.ahbl.org]

[103.214.61.23 listed in dnsbl.ahbl.org]

[103.214.61.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.193 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.193 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.193 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.193 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.193 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Shopify Users List

Arabic language spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Feb 2026 07:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vne0g-00000000Kpg-0cKl

for dave@doctor.nl2k.ab.ca;

Wed, 04 Feb 2026 07:37:38 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Feb 2026 07:37:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f41.google.com ([209.85.161.41]:48447)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vndDo-000000007zY-3gRb

for sales@nk.ca;

Wed, 04 Feb 2026 06:47:18 -0700

Received: by mail-oo1-f41.google.com with SMTP id 006d021491bc7-669f0b0290fso681546eaf.1

for ; Wed, 04 Feb 2026 05:46:21 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1770212775; cv=none;

d=google.com; s=arc-20240605;

b=RQht+6lUg+7HwjfJVZv+5MeKSiMiuw4LukER+H22vAk4lYD89QptNThu/JQG7SLLze

NXuwXdmY89jkFXPN+eSXdhN+9GE9hpaICqASq/olorwI52kBBD2aDzTyRzVT49pZo3ad

J3K0HScs/HXqbCLOY1d9ePTcAu8XPZJD4fX7Hon9f5RCKG/FRdgLTUIDGGwHFAE6Ylgs

XmPsfar8AFfnvCRhvS5dB2AP3dPf4zDPb4jpxj0/r6tawJZdvuw99Ljax8tOwY+E9L7K

TcZm95pPOdenfr+6/zPkIKS1I4HDtrrITrXN+l1M/HSrL80C4QU9s+oVnrmD+cWpLkip

YxKQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=kLGdaPJWstgkzWd1C8jef0IO0xj8+4CAItWWuepwjBI=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=Pyk3koLbbdGA+yJWjrxtad5PIcgCtGEbn2sTjoilcdZNMsXlLfEv3mcC4T9guYFms/

1tloPYwUtHnBdgQL65NSNIL9FcGBDOCDHVFVc30BenhIwemm/N0TChIWGExBwZa/hUHV

FdKOOBP6MSpCcG19e6zhUEcrDqRJKmHcmWvVInFh/w47UCiQbl5EhBBPYQFx6lj+juZt

B3JBvcodCqRLEZ7+x8RDZcLIV6lMOy6RMzhPPeBZn6o3PeEI42cNCdhRMlPEUgOLXHAx

6cXUvMZsJkjD8aBy/ywk1JyYyqO3LxZwmQ5W7FBD1eoHTauh8Ock1BUbk/D8LQZ78Alu

ywFQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1770212775; x=1770817575; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=kLGdaPJWstgkzWd1C8jef0IO0xj8+4CAItWWuepwjBI=;

b=A+y+rDkbnv+qVTFYC/KzYKwHNurPc8czjiERA1Rfijbp1qrTlGOg9B5rykQU0nulRm

tYzk99jg9VPOvXvtq/1y28Mvk6jM9kjkm+JBHkv38gkPNSl8oyJwBX0Emt/YrR2Cjt3I

9FJTtka2y4dk2cV9GbReRB8LMurHtLoe8wVL3lTNK/8lE6i1CF3F3mQTuPAxMFZwIQCE

oEfyv0iK9O0cX7LcmVHCOt5wvP6cH/Cmu8RMpR3Y+vBmTt53NHGxWg/4y3qe5trdoonf

3DmWOJQv1AIUumC8TO29G8joMGl31EKFGHtBzWVzbS+aIJZ0ov7m5sBVUhG31ZyVRsRW

Ma/w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770212775; x=1770817575;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=kLGdaPJWstgkzWd1C8jef0IO0xj8+4CAItWWuepwjBI=;

b=ktDQXcWXhe+KOIMDMwA9tfFVhzOyClns7IOTZ3fyJFqQJG+ua5t4N+0iHHowwXp5bC

Hrsuk+PcCxz1YUBTTc6S/5DuAiuHoPMrpkWNSRLu/2ajFjD7x/lwZTdAR7CAoSdgtRHQ

9yQR/zuZY4CN248dYFFWGhOkAmrJH1N9vvB7uNY+1MBSdA2c8tjzSdC2HMO9Y2dZ22to

VT/14JCu3gNTSPw4kKAfxYITmkMnI3hGYw6B1aJ91n+jHnkNSzmLU+XpFtNHFncF1K52

VkC8LmjFXN4an9o0mf3NIOo9W0i31To+MO83HN5aCUSv/kZTcsK2BFUaUCM7NpYsjUOs

/T9A==

X-Gm-Message-State: AOJu0Ywk+h49SVbC+DVx2U01M9jVRxZgUvAjV+vSlUT50AxKEWVkLeCE

6vQdAuBeGI0T3yPLjupCaUxfI//gLZy4S4enMN9tPXo4sEkvthxnb42SslOw+e2x3/jijUeflB4

RFKD6NQDhjSCHSsFtanyZdNPhKH1PRexTfA==

X-Gm-Gg: AZuq6aKhRyuZviUpWhc3FStMldrGzZqtMA5szB6pf/HIWDSO5AC3hmeXkZECkg0Nk/P

j8VrHCVsjyQg4l7pbPn5+dfKuxMOdHNiCjsP1pTZAuYzjS55CcHRIPH91a+3vooTU7SVR0h0xuj

mWqsKF/YCKelldj2qHj/9GqLqEKiyVXwUqALnNIc+uTSJPneioaTd+5VCIRRN7ApoYFtdOAlyOv

gbDx43v4kUMS1oQt/AQrsWhcsEVTk24HEHui415HS5BNWWnQwfxim/4aDLCUPb8ey/bqA==

X-Received: by 2002:a05:6820:c81:b0:66a:142:bcec with SMTP id

006d021491bc7-66a22599e39mr1405842eaf.39.1770212774713; Wed, 04 Feb 2026

05:46:14 -0800 (PST)

MIME-Version: 1.0

From: =?UTF-8?B?2YXYrdmF2K8g2K3bjNiv2LHbjA==?=

Date: Wed, 4 Feb 2026 17:16:00 +0330

X-Gm-Features: AZwV_Qj1Y1QzRx3HQFJqiRr09iJRsmsBNui8hjALuvF-Q7hjgQEJf4W9MGidnFE

Message-ID:

Subject: =?UTF-8?B?2KjZhyDYqtmI2YXYp9mGINuM2LnZhtuMINiv2LHZh9ix2YXYp9mHINqG2YbYr9iq2YjZhQ==?=

=?UTF-8?B?2KfZhiDZhduM2LTZiNiv?=

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000009d1cd90649ffc741"

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (10.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

[209.85.161.41 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.41 listed in dnsbl.ahbl.org]

[209.85.161.41 listed in dnsbl.ahbl.org]

[209.85.161.41 listed in dnsbl.ahbl.org]

[209.85.161.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.41 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mbvcxz1360(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mbvcxz1360(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.41 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} =?UTF-8?B?2KjZhyDYqtmI2YXYp9mGINuM2LnZhtuMINiv2LHZh9ix2YXYp9mHINqG2YbYr9iq2YjZhQ==?=

=?UTF-8?B?2KfZhiDZhduM2LTZiNiv?=



--0000000000009d1cd90649ffc741

Content-Type: text/plain; charset="UTF-8"







--0000000000009d1cd90649ffc741

Content-Type: text/html; charset="UTF-8"







--0000000000009d1cd90649ffc741--

HR Phish from Google Gmail

Evidence at Spamcop

McAfee Phish from Google Gmail Part 3

@font-face {

font-family: 'Google Sans';

font-style: normal;

font-weight: 700;

src: url(//fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLV154t=

zCwM.ttf) format('truetype');

}





=20



=20



=20



=20



McAfee Phish from Google Gmail Part 4














/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Earnest Holman: Step Closer to Joining Our Team at Softcat plc as =

a Customer Service Rep"/>

e=3D"http://schema.org/Event">
p://schema.org/EventScheduled"/>
type=3D"http://schema.org/Organization">
Google Calendar"/>

=3D"pUnSOWwrU5Tucb0I1klpYL9QIe"/>
px; color: #fff; line-height: 1px; height: 0; max-height: 0; width: 0; max-=

width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">Step Closer to J=

oining Our Team at Softcat plc as a Customer Service Rep

idden=3D"true">


--00000000000017662c0649f23b8a--

McAfee Phish from Google Gmail Part 2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">






























/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Winston Scruggs: Action Required: Confirm Your Interview for Softc=

at plc"/>

ma.org/Event">
ventScheduled"/>
chema.org/Organization">
/>

5SPFB9VV9yax1"/>
line-height: 1px; height: 0; max-height: 0; width: 0; max-width: 0; opacity=

: 0; overflow: hidden;" itemprop=3D"name">Action Required: Confirm Your Int=

erview for Softcat plc

=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"wi=

dth:100%;" class=3D"body-container">

ign=3D"left">
 
div>
lpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" sty=

le=3D"width:100%;" class=3D"">

"left">


rop=3D"description">Action Required: Confirm Your Interview for Softcat plc=


cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100=

%;" class=3D""><=

/tbody>

dius: 8px; direction: rtl; font-size: 0; padding: 24px 32px; text-align: le=

ft; vertical-align: top;" class=3D"main-container-inner">

ft; direction: ltr; display: inline-block; vertical-align: top; width: 100%=

;overflow: hidden; word-wrap: break-word;">
=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main=

-column-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-lay=

out: fixed;"><=

/tbody>

rtical-align:top;">
role=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;">
style=3D"font-size: 0; padding: 0; text-align: left; word-break: break-wor=

d;;padding-bottom:2px;">

oboto, sans-serif;font-weight: 400; font-size: 22px; line-height: 28px;colo=

r: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"presenta=

tion">Action Required: Confirm Your Interview for S=

oftcat plc

text-align: left; word-break: break-word;;padding-bottom:24px;">

=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; f=

ont-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; te=

xt-decoration: none;" class=3D"primary-text" role=3D"presentation">
ia-hidden=3D"true"><=

/span>Wednesday Feb 4, 2026 =E2=8B=85 3:35am (Mountain Standard Time =

- Phoenix)

text-align: left; word-break: break-word;;padding-bottom:24px;">

=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; f=

ont-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; te=

xt-decoration: none;" class=3D"primary-text" role=3D"presentation">
>

McAfee Payment Date: Wednesday, 04 February 2026
Payment id: OK2=

0695CUU4315
Support Contact Number: +1 (803) 201-7849

Account rest=

ored and valid.

Hey,

We are confirming your upcoming automatic =

renewal with McAfee. A payment of USD316.22 will be processed today, Wednes=

day, 04 February 2026, for your membership renewal.

Receipt D=

ispatch

- Quantity: x1 Device
- Product: InvisiGuard
- Cu=

rrent Plan: 48 Months Warranty
- Payment Method: Auto Debit
- Total P=

aid: USD316.22
- Client ID: HTZKSIZFL8
- Activation Key: b23b5b4d-07d=

3-45b3-b7e1-3c76a3f5cf9f

This membership will renew automatically eac=

h year unless canceled 48 hours before the renewal date.

Should you n=

eed to make any changes, please contact our Support Team at +1 (803) 201-78=

49.

In Humble Thanks,,
Softcat plc
Billing Manager: Erik Mathes=

on
Call Support Center: +1 (839)-317-8932
Official Office Address: 65=

16 Ellesmere Dr Uniontown Pa 15401 US
Work Schedule: 6 AM =E2=80=93 6 PM=


ednesday, 04 February 2026Payment id: OK20695CUU4315Support Contact Number:=

+1 (803) 201-7849Account restored and valid.Hey,We are confirming your upc=

oming automatic renewal with McAfee. A payment of USD316.22 will be process=

ed today, Wednesday, 04 February 2026, for your membership renewal.Receipt =

Dispatch- Quantity: x1 Device- Product: InvisiGuard- Current Plan: 48 Month=

s Warranty- Payment Method: Auto Debit- Total Paid: USD316.22- Client ID: H=

TZKSIZFL8- Activation Key: b23b5b4d-07d3-45b3-b7e1-3c76a3f5cf9fThis members=

hip will renew automatically each year unless canceled 48 hours before the =

renewal date.Should you need to make any changes, please contact our Suppor=

t Team at +1 (803) 201-7849.In Humble Thanks,,Softcat plcBilling Manager: E=

rik MathesonCall Support Center: +1 (839)-317-8932Official Office Address: =

6516 Ellesmere Dr Uniontown Pa 15401 USWork Schedule: 6 AM =E2=80=93 6 PM"/=

>

t; word-break: break-word;;padding-bottom:24px;">

Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px; =

line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: n=

one;" class=3D"primary-text" role=3D"presentation">
padding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bott=

om: 4px;">


: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing: a=

ntialiased;margin: 0; padding: 0;">Guests

(Guest list=

has been hidden at organizer's request)


--000000000000e176390649f23991--

McAfee Phish from Google Gmail Part 3



=20



=20



=20



=20





















McAfee Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Feb 2026 15:56:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnPJ5-00000000PAq-2LVz

for dave@doctor.nl2k.ab.ca;

Tue, 03 Feb 2026 15:55:39 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Feb 2026 15:55:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f73.google.com ([209.85.161.73]:47480)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnO4t-000000007gM-1V1l

for root@doctor.nl2k.ab.ca;

Tue, 03 Feb 2026 14:37:04 -0700

Received: by mail-oo1-f73.google.com with SMTP id 006d021491bc7-66317aad908so9406529eaf.3

for ; Tue, 03 Feb 2026 13:36:08 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1770154562; x=1770759362; darn=doctor.nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=edalLC+fMpNZoMV5irSN+ii7zxhtF910vcjaTsCHWcE=;

b=s2S6lcJ3/fmDo+5LP2IxRBHfWY4+IFp48IL5d4OkGY+p5nyFT54B1VvwRMttUYfA/7

A1/1ydqO+cv2Env1U9EU/a49TBx6NuWdoBO/OrcTIysmENgsF/mQENGe23fenw+zNKa/

KlvxrHkYhs2lKJAjq05458ggMt57ec7qEhXn9F7fcjqn4FCpP4MpCS/dsOJoDSJcNxPH

lql9nT38Yx2vtO/YGpqJVY19EIzwqAB3WMKhmxz/JrWsSaPz51c3AmHtTrpTMdWJ1WqI

iEbk9wVvqnSytHwyzd3Vy/qOWWuOqe0zQ+mbjtbncQxqIz8bXoFhfNn7j02/xdeHarfX

5n2g==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=geozyme-org.20230601.gappssmtp.com; s=20230601; t=1770154562; x=1770759362; darn=doctor.nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=edalLC+fMpNZoMV5irSN+ii7zxhtF910vcjaTsCHWcE=;

b=rpjHPlc4WspfVnhKHnblD2dLMOdFDpZgZx6VtzEZDTivjtGKObA/FGcVvR4aVDmMku

t77+ozN4nIyTpn6UjXeOM7GkDgC9wNtFM86CZWRGRL867wtq5BoNzAGSxFWBA9uq16NU

lzxxGbqSkH2JwhIDs5vbOK8Vo+srpSgxwChl/gBeFezLiAVSoeUEG/XGObuisFJdW9GI

rKVtvIDQ6vM/V0T/GBz2bEWCUIeZFFA0Tzi1ybeHRhDJ9DX4HVxVxiwqu78m1IbJyqlY

GaLNo1bNRXWCJkiK7/hMH+CU2tThL9wBGUmqwal47/ko0WbsR7fFchwCbCmbmlq/zk23

+tgg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770154562; x=1770759362;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=edalLC+fMpNZoMV5irSN+ii7zxhtF910vcjaTsCHWcE=;

b=fwjB8uj0prwPWzZhgzn32ZZ8Cnj573w8XQvmBVlt4pq15vlsodgJUpqQhj7ka2Edrk

UA87jMGkvlYNskZL8VrNLQES4liOsufG0/dNGBUTgvrfIa0/d+fMg7HnYRU4lweT2iQM

O49R2ShcfwSVDI7f8TXCOeAI7xDD5GkqO/XmFDPfsvDhF9HpnzBS98yMSxqt5pMmrfY4

ayClbDBMeBgOViqQ+/f+N/i+Var5RJPFDs2KyBU9yyTdIuhN0nhwxef5TLy2SxI2+Lz/

JVRYqkbaEUgvYthFh6VMQGQg0vj12ODz1J5QIIUSByKGo8x+xBoMiLawwr+H8RUtwAeh

H1HA==

X-Forwarded-Encrypted: i=1; AJvYcCVEBrU8mS+uTNTsli5nelALAEnwIkTShZzhaNfzeR8f72cecLBmiUziIBveGoVxbFvOt7gP@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyjU+OW4DzEl/L9wmmV4A4tU1B48jkGWfROw4GCUQablvwc1f4V

EOVHtB8aKktXqTfqcP05NxCCCn/DHru5flz7jvr2iObAGKnhNqip0zJk6LWQlv02E+UNOHh55XZ

s3ZVQQa+kgor5wb9PaRryXP9w01jXcCgFtHw+QbGbIcLmzQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:f031:b0:663:46f:6042 with SMTP id

006d021491bc7-66a20a7c331mt576072eaf.28.1770154562034; Tue, 03 Feb 2026

13:36:02 -0800 (PST)

Reply-To: Winston Scruggs

Sender: Google Calendar

Message-ID:

Date: Tue, 03 Feb 2026 21:36:02 +0000

Subject: Action Required: Confirm Your Interview for Softcat plc

From: Winston Scruggs

Content-Type: multipart/alternative; boundary="000000000000e176390649f23991"

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Action Required: Confirm Your Interview for Softcat plc Action

Required: Confirm Your Interview for Softcat plc Wednesday Feb 4, 2026 â‹…

3:35am Mountain Standard Time - Phoenix McAfee Payment Date: Wednesday, 04

February 2026Payment id: OK20695CUU4315Support Contact Number: +1 (803) 201-7849Account

restored and valid.Hey,We are confirming your upcoming automatic renewal

with [...]



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

[209.85.161.73 listed in dnsbl.ahbl.org]

[209.85.161.73 listed in dnsbl.ahbl.org]

[209.85.161.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.73 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.73 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Action Required: Confirm Your Interview for Softcat plc



--000000000000e176390649f23991

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



QWN0aW9uIFJlcXVpcmVkOiBDb25maXJtIFlvdXIgSW50ZXJ2aWV3IGZvciBTb2Z0Y2F0IHBsYw0K

DQpBY3Rpb24gUmVxdWlyZWQ6IENvbmZpcm0gWW91ciBJbnRlcnZpZXcgZm9yIFNvZnRjYXQgcGxj

DQpXZWRuZXNkYXkgRmViIDQsIDIwMjYg4ouFIDM6MzVhbQ0KTW91bnRhaW4gU3RhbmRhcmQgVGlt

ZSAtIFBob2VuaXgNCg0KDQoNCk1jQWZlZSBQYXltZW50IERhdGU6IFdlZG5lc2RheSwgMDQgRmVi

cnVhcnkgMjAyNlBheW1lbnQgaWQ6ICANCk9LMjA2OTVDVVU0MzE1U3VwcG9ydCBDb250YWN0IE51

bWJlcjogKzEgKDgwMykgMjAxLTc4NDlBY2NvdW50IHJlc3RvcmVkIGFuZCAgDQp2YWxpZC5IZXks

V2UgYXJlIGNvbmZpcm1pbmcgeW91ciB1cGNvbWluZyBhdXRvbWF0aWMgcmVuZXdhbCB3aXRoIE1j

QWZlZS4gQSAgDQpwYXltZW50IG9mIFVTRDMxNi4yMiB3aWxsIGJlIHByb2Nlc3NlZCB0b2RheSwg

V2VkbmVzZGF5LCAwNCBGZWJydWFyeSAyMDI2LCAgDQpmb3IgeW91ciBtZW1iZXJzaGlwIHJlbmV3

YWwuUmVjZWlwdCBEaXNwYXRjaC0gUXVhbnRpdHk6IHgxIERldmljZS0gUHJvZHVjdDogIA0KSW52

aXNpR3VhcmQtIEN1cnJlbnQgUGxhbjogNDggTW9udGhzIFdhcnJhbnR5LSBQYXltZW50IE1ldGhv

ZDogQXV0byBEZWJpdC0gIA0KVG90YWwgUGFpZDogVVNEMzE2LjIyLSBDbGllbnQgSUQ6IEhUWktT

SVpGTDgtIEFjdGl2YXRpb24gS2V5OiAgDQpiMjNiNWI0ZC0wN2QzLTQ1YjMtYjdlMS0zYzc2YTNm

NWNmOWZUaGlzIG1lbWJlcnNoaXAgd2lsbCByZW5ldyAgDQphdXRvbWF0aWNhbGx5IGVhY2ggeWVh

ciB1bmxlc3MgY2FuY2VsZWQgNDggaG91cnMgYmVmb3JlIHRoZSByZW5ld2FsICANCmRhdGUuU2hv

dWxkIHlvdSBuZWVkIHRvIG1ha2UgYW55IGNoYW5nZXMsIHBsZWFzZSBjb250YWN0IG91ciBTdXBw

b3J0IFRlYW0gIA0KYXQgKzEgKDgwMykgMjAxLTc4NDkuSW4gSHVtYmxlIFRoYW5rcywsU29mdGNh

dCBwbGNCaWxsaW5nIE1hbmFnZXI6IEVyaWsgIA0KTWF0aGVzb25DYWxsIFN1cHBvcnQgQ2VudGVy

OiArMSAoODM5KS0zMTctODkzMk9mZmljaWFsIE9mZmljZSBBZGRyZXNzOiA2NTE2ICANCkVsbGVz

bWVyZSBEciBVbmlvbnRvd24gUGEgMTU0MDEgVVNXb3JrIFNjaGVkdWxlOiA2IEFNIOKAkyA2IFBN

DQoNCk9yZ2FuaXplcg0KV2luc3RvbiBTY3J1Z2dzDQphc2hpcWh1c3NhaW5hc2hpcWh1c3NhaW41

ODVAZ2VvenltZS5vcmcNCg0KR3Vlc3RzDQooR3Vlc3QgbGlzdCBoYXMgYmVlbiBoaWRkZW4gYXQg

b3JnYW5pemVyJ3MgcmVxdWVzdCkNCg0K

--000000000000e176390649f23991

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">