Telnet Communications phish PArt 3

j4U/tCeDPjEZIdBv5I9RjXe+nXyeVOF/vAZIYe6k474rzP8AaS/aX8J6Dp3j

D4e3Vpqra3Lp7W4kjt0Nvulj+XLFwccjJxxQB6le/tA+ALPxTp/h1PElrfa1

fXC2sVpYkzlXPQOUyEHuxFejV+RXww8Q2ngr4g+GtbvUk+xaZex3EqW6guUX

OQoyAT9SK/R74PftHeF/jdqmoWGgW2qW89jEs8p1CBI1KsccbXbnPrigD5y1

f/goP4h0241KNfCWmuLWaaNSbiQEhGIH54zX2l4f1JtY0HTb90Eb3dtHOyA5

CllDEfrXxLrHxP8A2YIrnURd/DW/lkSaYTlbJTvYM28j9/3O4/jX2z4dltbj

QNMlsITBYPaxNbxEYKRlBtX8BgUAadFeJfEf9rv4e/DnUJtNkvbjWtShOyW3

0qMSCJvRnJCg+wJI7iuI03/goB4KuboJe6HrVlCcDzUWOXH1G4HH0zQB9SUV

y3gP4keHPibo/wDafhvVYdTtQQrhMh4m/uuhwVPsRXDfFn9qDwl8GfEkOia7

aatPeTWwulaxgSRApYqASXXn5T2x70AexUV4hJ+154At/h9Y+LbiXUILa+mm

gtdPkgU3czRPtchFYjaCOpYD8eK4zSv2/fBF3qCw3uj6zY27Nj7TsSQL7lQ2

cd+Mn2NAH1FRWX4f8Q6f4q0a01XSbyO/0+6QSQ3EJyrj2/UEdjxXj3xJ/bE8

A/DrVJ9LE9zr2pQMUli0xVaOJgeVaQkDPGMDOD1xQB7rRXy3p3/BQPwRNNtv

tE1qyi/56IkcuB7jcOPpmvpHQNds/EuiWOr2DtLY3sK3ELMhVmRhkHB5HXpQ

Bp0h6UtFAHK+N/CU/i+3t7UXotLVHMkihNzO2OO/Qc1gWvwXsLfl7+5lI5wF

Va9JpD0qHCLd2jtp42vSh7OnKy9Efjx4lLjxHrO8nzBe3Gc8EnzG6+9for+z

/wCAtGuPhb4fEaHyxY28gaJiuXeMPJ9fnZq+NP2ovhfd/DL4uauGgK6RrM76

hp84BKsHO6SP/eVy3HoVPSvUP2WP2rdK+H2iL4S8ZGW306NybLVUQyLEp5Mc

oHIUHJDc9celU0mY06sqd3F2b/zPr8/DuyB/d3Eyexw1eXftI63e/B74Wajq

+lXph1O4dLC1mVcNE0mdzj3ChiPQ4rrZv2n/AIVQWYuW8caV5RGRtkZmP4AZ

/CvIf2hfGWkftD/s969q/hD7TeW3hvVUkmeWBoy4WP8AeMgPJUJNuzjoG4qV

FIt4mtJNSlc+S/hD8Obj4ufEXSvDcdy9v9skaS5uz8zJGoLyPz1bAPXqTX1Z

8UP2F/CeneA9SvfCtxqUGuWNu9wn2u5M0dzsUlkZSOCwBwVxg4r5r/Zx+Ilh

8L/i9omuaodmmDzLa5lAJ8pJFK7+OynaTgdM190fFz9ofwR4X+G+qX1v4h07

Vbq7tHjsbOyuFlknkdMKNqkkDkEk4wAe/FWcp+fnwi+I2o/Cz4haR4g0+dol

SdIryHJ2z27MBIjDvwSw9CARXvn/AAUEkWfxj4QkQ5RtNkYHp1kFfM3hTw3d

+M/FGkaFZRGa81O7jt1Vf9pvmb2AXcc+gr6W/b+txaeLPBsAPEemOgOcZxIB

+FAHmf7PXwFvfj3rd3ZyapJpWiaVGrTzovmOGkLFUjB+UEkMST09ORWL8d/h

BL8EvH8nh9r86naSwLdWt2yhHaMkjDgcBgQRkcHg4FfTH/BPH/kXvGfb/TID

j/tma4T/AIKDf8lU8M/9gZv/AEe1AHBfs7fs93fx/wBS1H7Rq0ulaHpKpHLc

xqJJS7ZZY41bhRjJJORz05rmPjd8KZvgz8Qbvw3JfDUYljSe3uioVnifONyj

owww444zX1X/AME9P+RE8V/9hRP/AEUteTft68/G+y6ZOiW/H/baegD1H9mn

V5dQ/ZE8ZW0kjOtgNQgTP8KmESYHt85P418QafJNELf7OzpOwVE8tirEsAMA

9uuM19nfsr/8mp/Ej/rve/8ApHFXyD4OyfEegZ/5+7fr/vrQB9G+L/2H77wf

8JLrxNL4gabX7G1+13WmLCotwoGXRX+8WUd+hIPHSvmexjuLi7ghtPMNzOwh

jWNirOWO0L+OQMGv1Y+Ov/JGvG3/AGCbn/0Wa/L/AOHP/JQfCH/YZsf/AEoS

gD3r4mfsWXPw3+Ed54tfxGbzVtOgFzfaeIVEGzI3iNvvZXOcng4PA4ry39nP

VZ9H+O/gea3lMTS6mls7A4zHICrD6EHFfoB+1F/yb14/H/UKmP6Cvzu+CP8A

yWbwL/2Gbb/0MUAez/8ABQH/AJK5oHf/AIkw/D989eo/8E9f+SdeJz/1Fv8A

2kleaf8ABQSzlj+KHhu5KN5EukNGr443LMxI+uCD+NQfsafHnw18KYvEOi+K

r06ba386XltesrPGrBNrRttB2k4Ug9CSaANr/goj/wAjf4G/68Lz/wBGQ1pf

8E7v9d47/wC3X/2pXkX7Vnxn034z+PbCfRBI2jaVbNbwTyoUadnYNI+08hfl

QDvxnvXrv/BO45m8d/S1/lJQB8g6pIYdW1GQOUKXczBgSCCJW6eh4zX1D8O/

2GL7xz4CtvEOseJptJ1fUoftdvaLbiRVD/MpmY8ktkE7cYz3Oa+W9bUPqGqK

wyrXU4I9f3jcf0r9efB0Sw+EdDRBhEsYFUegEa8UAfkVqVhc6Hqt5ZXA8q9s

rh4JNrH5ZI2KnB9ip54r9CfjFrs3if8AYqv9WuX8y5vNAtZpmxjMhMW7j65r

4Q+Jv/JSvGX/AGGr7/0okr7b8cf8mEt/2Ltr/wChR0AfIH7Pn/Jd/AH/AGGI

v5NX0B+338Sb0ato/gi1naGx8j7feqjECZixWNG9Qu0tjoSRnoK+fv2fP+S8

fD//ALDEX/oLV7L+374Wu7H4iaJr5Rjp1/Y/ZhJjhZo2OV9vlZT78+lAHGfs

x/s4D463+pXup3s2n+HtNdYpWtsCW4lI3bFJ+6ApGTg9QPWvqXwl+xj4Q8Be

PNA8UaHqOqxTaXM0xtruVZ0nJjZME4BUjdnI7ivB/wBjP4/eH/hgur+GvE9y

NNsdQnF3a6jICYo5NoVo3I6ZCqQTxnI9K+u4/jt8P59V07TIPFmm3WoajOLe

1t7abzXkkJ6YXOPqcCgDzX9pP4b/AA08QeJ9L8Q/EfxW+j2lraG2h06Gby3m

y5bf8oMhGeMKMe9eEeKdP/Zk1DSJrLSNQ1bStRWJjBqESzOu/tvDfeHtgcdx

XiXxa8U6j4x+IviLVtUllkvHvJUCyZJiRWKrGB6KABgelfUd98KP2e/BHwpO

uXmoQ+IJ2sxJDMNSJuLmYrwqRow2ksRwR8vfoaAPlP4ceKLzwR498Pa3aSsl

zZ30TFoyQHUsFZfdWBIweoNfan7UP7NnhvVtN8X/ABGlvNRXWY7MSiFJVEBK

KFHGOn418IaYS2p2BICk3URIU5A/eDj6V+pn7Q8D3HwP8apGpdv7MlbA64Ay

f0BNAH5ofDPw1beM/iF4c0C9klis9TvY7WZ4CA4VjyR6Hiv0Z+DP7Nvhv4H6

tqV/ol5qNzLfwrBIt7KHAVTuGMAc571+dnwk1u18N/FDwjqt9KIrK01OCWaU

8BE3AFj7AHOfQV+rWleJtG12Vo9N1ax1CRUEhW0uUlIUnhvlJ496APyA8U/8

hDX/APr6u/8A0Y9foH+0X8Sb34d/s16KmmTtbalq9ra2Ec0Zw0SGEGRlPY7R

tz1G7I6V+fnikf6fr/8A19XX/ox6+5v2tPCl3rv7NnhbUrVGl/sdbSe4VRnb

E0IRmx6AlfoCT2oA+UvgZ8K5PjJ8SLDw0tybO2ZHuru4QZZIUxuK/wC0WZVG

emc9q+k/jb+xN4a8O/DzUda8HS38Op6XA1y8F5cmZLmNPmdTkfK2ATkemMV4

X+yz8TNO+FfxetNS1mUwaTeWz2FxPjIg3lSrn/ZBUA46Bs9q+xf2gf2gvB/h

v4V6zHYa7Yavqmq2clpZWllOszM0ildx2k7QoYkk46YoA+Iv2fviZe/C/wCK

WhapbTyCwvLiOy1CAH5ZoJGC8juVYhge2D616d+3z/yWXTP+wPH/AOjZK8R+

FnhG78ZfEPwvoNhG0k1xfQ5wCdkaMHdzjoAqnntXt37fP/JZdM/7A8f/AKNk

oA5L9nX9ne9+Pt1fNPqsuk6FpREclxGgkcyPlvLjDcD+8TjjI4Oaxf2gPgrP

8C/GsGjNfHVLC7tvtVpduoSR1DbWVwOAVOORgEEcdq+p/wDgnyij4W6+wADN

rD5IGCf3Uf515v8A8FDf+R/8Gf8AYLuf/RqUAbP7H/iTWp/gN8TtM09nefTF

klsApIZHkt2JC475UEAd/rXyN4cl05dY02TXYrq50kTK19HattnePPz7Seje

596+xP8Agn3ew6b4Y+Il5cP5cFvcW8sjnoFWFyT+QJrc8QfBj4DfGsy6zoHi

ax0a9uiXaTTb2OJGfuzQP/IAUAcZpHw6/Zm+KVlHp2j63d+HNWmjMcQubp4J

Q2MBmEmUZsnpnk9q+zvDmix+HfD+maVHIZorG1itVkYAFgiBQT7nGa/KD4ne

DLTwF441Pw/Za3a+I7S0ZRHqNrja+RnBwSAy5wQCRmv0C/Y28San4n+Amiza

rcPcz2009nFLISWaKOQrHknk4XAz7UAe4UUUUAFFFFAHM+Pfh7oHxN0CXRvE

WnR6hYudw3HDxOOjIw5Vh6j9RXyj4w/4J73P2mSTwr4qi8hjlbfV4WBQenmJ

nd9dor7UooA+AYP+Cf3jx5QH13QIV6lszE/+gda+nf2dvgK/wR8KarpN7qkW

ttqVz58oWDZGg2BCoBJ3Agd8fSvYaKAPkj4pfsFadrmpT6j4K1aPQzM5dtMv

EL2yE9fLZfmRf9nBA7Y6V5zZf8E+fGzXIE+uaBbRE/NJF5rN+A2DJ784r79o

oA8Y+Bn7MHhz4KM+oRyPrXiKRPLbUrlAvlKeqxJzsB7nJJ9ccVz/AO0x+zTq

3xz1/Rr/AE3WLLTEsbV4GS6RmLEtnI29u1fQ9FAHiH7MfwE1P4E6ZrttqWqW

uptqE8cqNaoy7AqkYO7vzXPftLfsv6z8cvGOk6xp2tWWmQ2dibRorpHZmPmF

twx9cV9IUUAeMfsy/AzUvgZ4c1nTtS1O11OS+uxcK9qrKFAQLg7u/Ga4v9o3

9lPWvjX4/g8Qafrdhp0Eenx2ZhuY3ZiyvIxbK/74H4V9N0UAeE/B/wDZ91T4

bfB3xV4NvNVtLy71iS4eO5gRhHH5kCRjIPPBUnjtXiWh/sAeJ9K1TTrp/FWk

yLazxSsqwyAttYHA446V9x0UAc58Q/DU3jPwLr+g28yW0+o2UtqksgJVC6kZ

OPrXyP4X/YK8TaD4m0TU5fFGlSx6ffW128axSAuscquQOO+3FfbdFAHG/F3w

TcfEf4Z+JPDFrcR2lzqlk9tHPMCURm7nHP5V8x+AP2GfEnhDx14e16fxLpc8

GmX0V3JFHFIGdUOSoyOvua+zqKAPNPjn8D9J+OPhePTr+Z7G+tXMtlfxLuaB

zwwK/wASsAMjjoPSvlE/8E/fHBvdn/CQ6F9m3f6799u2+u3b19s4r75ooA+Q

vEH7BkZ8B6Vo+ia3bjWkvjeX+qX0JHmr5ZQRRqudqgkHBJJPOegHoX7MX7O+

q/AiTxC2o6taan/aYh2fZUZdmzf13dfvDpXvdFAHwve/8E+vE91d3co8VaSq

zTvKAYZMgM5YduuDivtrRbFtM0exs3YO9vBHCzDoSqgcflV6igD4n8WfsG+J

PEPirXNVh8T6VDFqF/cXaRvFIWRZJWcA8dRuxxXvviH4OX+s/s5n4cR6hbR6

h/ZcNh9tZW8rchU7sdcHbXrdFAHxv8M/2IPEfgb4ieGvEdz4k0y5t9LvUupI

IopAzgA8DIwDz3r6j8ffD/RPiZ4budC8QWa3lhNgjna8bjo6N/CwzwR+OQTX

S0UAfDniv/gnvrcN7IfDfiixubEklY9UieOVR2GUBDH3wM+grS+Ef7D/AIo8

F+P9C8Q6rrukiDTLtbowWayO8m3Py/MoAz+lfaNFAHyj8cP2Ix458T33iLwn

q9vpV5fStNdWN8jGEyE5Z0ZclSTzjBGSTkdK5H4ef8E/tQt/EdreeMNY0+TT

IJBI9lpquz3AByUZmA2qehIySMjjrX25RQB8PXP7APiNtcmvLbxNpENv9ta4

hh8iX5I/N3In4DA/CvtS+0+HV9MuLG+iSaC5haGeI8q6sMMv0wTV2igD4c8Y

/wDBPvWk1aZ/C/iKwm0x2LRw6mrpLGCfukqCGA9eD7V6X+yx+zH4i+BvinWd

W1nU9NuoL+yW1WCx8wsGEm7cxZQMYBHHrX0xRQB8K6x/wT58Ualc6lKvirSU

+1SzSKGhk4DsxHbrzX2jpmgRQeFLPRL6OK8hSySznRlzHKAgVuD2ODxWzRQB

8ffEj9gG11HUJrzwVrqaVDKSRpupI0kUWT/BIuWC+gIP1rhtL/4J8eMmu1F1

r2hWlvn53gWV3PuBtGT9SK++qKAPI/gf+zf4c+CEEtxZtJqmuTp5c+qXKhXK

ZB2IoyEXgHAySepPbg/2jv2Vta+Nfjq013TtcsdNghsUtTDcxuzEh2bIx/vY

r6YooA8f/Zq+Cuo/A7whqOj6jqNtqUt1fNdrLaqyqAUVcc98rmuU/ab/AGZd

X+OniXQtS03WbLTI9OtJbZ0ukdmcs6sCNvb5cc19F0UAfPfwI/Zq1b4T+DPG

+h3+tWl5L4hjEcU9tE2IP3LRkkNjPLZxXg15/wAE8vGVq6rZ6/oV1Eg2rJKs

qPwOp+U4+gJr79ooA+GfCf8AwT21uS9j/wCEi8TWFpYKctHpcTySkemXChSf

XBx6Gvsvwd4T03wL4a07QdHt/s2m2EQhhj6nA7k9yTkk+9bdFAH/2Q==



------=_NextPart_000_0075_01C2A75B.0D4D60F8--

Telnet Communications phish PArt 2

------=_NextPart_000_0075_01C2A75B.0D4D60F8

Content-Type: image/jpeg;

name="img1.jpg"

Content-Transfer-Encoding: base64

Content-ID: <00DCD002B0BD$05C67A90$0100007f@qxlnomcnbjiohib>



/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAMCAgMCAgMDAwMEAwMEBQgFBQQE

BQoHBwYIDAoMDAsKCwsNDhIQDQ4RDgsLEBYQERMUFRUVDA8XGBYUGBIUFRT/

2wBDAQMEBAUEBQkFBQkUDQsNFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQU

FBQUFBQUFBQUFBQUFBQUFBQUFBQUFBT/wAARCABdAZ8DASIAAhEBAxEB/8QA

HwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUF

BAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkK

FhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1

dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXG

x8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEB

AQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAEC

AxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRom

JygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOE

hYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU

1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD9U6KKKACi

kJxSFgDg0ABYCjcD61V1C9h06zuLy4fZBBE0sjnsqgkn8ga8c/Zf+IM/jrw5

4gW6lZ7u21SWbBOQsczF1UewO+s3NKSh3O6lhKlXDVMTH4YNJ/8Ab1/6+Z7f

RTd2Bg9cU6tDhCiiigAopu6lyKAFooooAKKKKACiiigAooooAKKKKACiiigA

ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACi

iigAooooAKKKKACiikJxQAEZrxP40fHS8+DfjHSVutPGoeHby0d5fK+WeORW

52noRjHB/MV7JHdRySyQrIjSx43oCMrnpkds183/ALbuh/b/AAhoF/8AdEN1

JbM4GeJE4H/jhNYV5OMHKL2PbyajSxGNjQrRupJr52dvxscz8U/21PB3ij4f

6zpGiQ6tFqN7D9nR57dFQKxAfJDn+HcPxryj9nr9oLRvhR4svbrUo7yTS7y0

8qRbeMMwdWyhxkZ6kZ7V5Be+E4rOzmnW5kYxru2lQAa56FPNmjjJxvYLn0yR

z+tZx9nWl7WL2O6t/aOT0JZbWgkquvRvtunptp/wT7v179uzw1cwQ2nhjStQ

u9XupUghOoRiKFGZgoZsMS3J6DGfUV9P2vm/ZovPx52wb8dN2Of1r8xfhP8A

D6C9+KPhVJblzAmoxTSFwFVUQ72JPYDbnPavrXxv+3N4A8L38tlpkd94kmiJ

VpbJAluT6CRvvc9wCPc1pSqRqXlF6Hn5hl9bLYwoYmCjN3d73utEtm9mn2Po

2ivm3wX+3V4D8SahDZ6rbX/hx5SFW4ulEkAP+068rz3xj1Ir6LguI7uGOaGR

JYpFDpIjBlYHoQe475rc8Y+EfE/7dXj/AEbXtXsYNM0NorS5lhRnhlJKq5Az

8/XAr7b8H6tNr/hPRtTuVRbi8s4biRYwQoZkDED2ya/Jjx9/yOPiP/r/ALj/

ANGNX6Yn4iaf8KvgLoviXVYbiextNMs98dqgaQ7lRRgEjPLCgD1CivBvAf7Z

Hgbx5rFxYxx6hpKW9rJdzXeookcMcaAEkkOefbFcrrv7f/guw1FoNM0bVdXt

VYqboBYVYZ+8qtyR9cH2oA+o6K80+D/x/wDCfxqtrj+wriWG/tgGn028QRzx

qf4wMkMueMgnHfGRXZeKvFukeCdEuNX13UIdL06DHmXE5woz0A7knoAMk0Ab

NFfLWu/8FAfBtjdmLTND1bVYQceewWBT7gEkkfXB9q7n4V/ta+BvinqkOkwz

XGjaxMQsVpqSBBM392NwSGPscEnoDQB7ZXnXjr9oP4f/AA6Eia14mso7pFLG

ztm8+f8A74TJH41lfGr9o3w78Eb7TbLXLLUbqTUYnkiNjGrgBSAc5Yc8jpmv

zF1F0ubu8miUok0ruoYYPzEnn35oA/Yyyu47+zt7mLPlTRrIm4YOCMj+dWK+

evhD+1t4S8d654f8H2Gn6tFqc0AiWWeFBEDHHychyccHtX0IDmgBaKKKACii

igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKK

ACiiigAooooAqX7zxWc72qLLcrGxiRzhWbBwCewzivC/Cn7X/hbVJRaa/Z3n

h27Vtju6+dAGHDHcvIGR3Ga9t1fW9P0G1NzqN9b2FuvWS4lCLwPfrX56fFCL

S7z4i69PoNzHe6TPdNPBNCPkO7DFR7BiR+FcWJqzpWcD7PhzK8PmftaeJg9E

mpK6t3Xbto0dZefHvVdK+NWseLtJmNxp9xcCI2hO1Lm1T5UB44bAyDjIJ57i

vb/jX4h0r4tfs73evaNKbiCCWG48tgA8UgcKyOOxAc/hzyDXyNDpZbGQa63w

rreo+GrLVrG2fdYapbtb3Ns5+R8j5XA7Mpwcj6V5sK0rSjLZn6DjMooOdCvh

9J0nH5xjbR/LZ/L0871m2f8Ase8JHAjJrz/TwWv7RT3nQf8Ajwr2XxJppi8M

6k+OFgY/hxXj2jjdq+nD1uohj/ga124NWpyR8dxXUU8dQa6L9TuviHcy6TZQ

20LtEbosHZDglB1X6Ekcd65vwZp+jXl7K2s3cdvbRKNsbsVEjEnjjsMdK7v4

26DNHY2F+qEwwyPFIQOFLYwfYfLj61wngvStE1rU2tda1B9MR1zDOMbS2fun

PTPY1pRSVGy/A8/OK06mcuU0pJWspfDa3Xyvf5nT/E3RvA8PhXw9qPha/iGr

M0lrqempIzA7T+7nUH7u4cEZxnHvX1h+wV48vfEfw71Xw/euZRoN0sdtI7Zb

yZAWC/RSCB7HHavnCf4NeD7ODz7nxZHDFj7/AJ8R/QEmvqf9j7wB4X8K+E7r

WvDuuy6t/be0ypMAnlmMsvyr1xz1NdMJJqyPAxuGqUpupNJXe0Wnb/gHwP4+

/wCRx8R/9f8Acf8Aoxq+7/j/AP8AJmSf9g7Tv/Qoq+EfH3/I4eI/e/uP/Q2r

7u+P/wDyZkn/AGDtO/8AQoq1PLPhLwd4X1Dxv4o0zw9pZAvNTnW2TeSEGSPm

bvtGM/hX0H8Zf2LR8MPhpd+J7DxJcavc6eEe8tp7dY0dCQrGPHIILA4OcjPN

cB+yV/ycL4S/66Tf+iXr7x/aQH/FivGv/YOk/mKAPz//AGZteufD/wAePB09

s7KLi8+yTBT9+KRWUqfbO0/Va9C/bn8f3fiD4qL4YWdxpehwRk24OFa4kQOz

kdzsZAPT5vU15V8AufjZ4Fz/ANBWH+dehftueFbrQfjjd6lJG/2TWraG4glI

ypZEETqPcbFOOuGHrQBp/s7+E/glJ4SfU/iNrFjcazcyusenXU8qC2jVsKcJ

j5mILZJOAR3zXk/xj0Twz4V+INyngTWxqWgsqXNncRSFntnPVN3BJUjIPXBH

pXb/AAH+FPwz+J+lyW/iLxhceHfEUUjA20rxRxzR/wALxs45PYgnIPbkV6H4

n/Zp+Cvg61WfU/ihJGGIVY4p4ZncnoAqZJPPpQB6npPwu8O/tafC7wN4r8VT

6jHqUFg0L/YbgRgyBtshbKnJLJn8a+ANUhWyvbyKPJSGR0XccnAYgfjxX6v/

AAp+Hll8Lfh/p3hrTrme8tLVXKTXAAdtzFucfWvyl8QxPHrGpxOpSQXEysh6

g7jx9aAP0N+Ef7JngrwLrGgeL9NuNWbVYYBKqz3QaIl48N8u0ep717+OlcP8

OPiJ4Z8T+F/Dx03XLC4mubOMR263CecSEG5dmc5GDkdsV3AzzQAtFFFABRRR

QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA

BRRRQAUUUUAc5438EaL8QNDk0rW7JLy1Y7lJ4eN+zoeqsPWvkX4l/ArUvhtd

GYFtQ0V2xHequCnosg/hPv0P6V9u1WvbSG9tpLe4iSeCVSrxyDcrA9iO4rnq

0I1d9z3srznEZZLli7we8f1XZ/n1Pz+t9K6YFadvpPT5a9u+JXwVg8OLLq2k

ELpuRvtXb5ocnjaT1Xpx2964O30jOBt9OB615bpODsz9JpZnTxdNVaT0ON13

w4NR8P6jbGVLVZICpnkPyp7n0FeBS6do3h/VbWRNcGqG3nSVhaW7FSFYHAZi

AenUV1Xxx8cTatr8+gWspTSrBtkoUkCeYYyW9QucAdM5qv8ACr4J6j8S0kvW

nGm6RE5Q3JXc0jjGVQd8ep4Hoa9GlD2cbyZ8FmmMWPxKhRheUdL+n4W9Tspf

jl4V1WG4tNQ0i+aznBWRZFR1Kn1AbOfp0PNYth8EtL8fwT3/AIM10Pao+x7f

UYXVom67d2OR05x+NehTfsiaNNbgW2u6lDOBjfNHGyk+pAA/TFek/AP4K6j4

K0u/0eae3u5ri9Nws8WQuzYq5IPQ8dBn2oSjFfuxVHWryX15JxS3WjX3P80e

CaV+yF4jv7yOH+0dMBc4HkLI7n8Cor7R+CXwRtvhd4X0uzu7j+0dQtEIWXZt

VSSSSBk5PPcmub8V/tA/Db4GXM2mXF7LrGvRnbcQabEJXjOOjEkKn+7kkelc

rZf8FA/BstyEuvD+s20JODKgjkI/DcK3UW/iPDq1acW44ZWT0b6s4/xH+wJr

et63ql8niywiW8uJZlVrZyU3sTjrz1r6E+I/whuvG/wPHgODUIbW6+y21v8A

a5ELJmIoScdcHaa6T4d/FPwx8VNLa/8ADWqxajHGQJYgCssJPZ0PKng9eD2z

XL/GH9o/wv8ABLVNPsNetdUnmvYWnjNhAkihQcc7nXBz6ZrQ4jyb4OfsY6t8

MPiVo/ia58SWV7BYM7NBFA6s+5GXGT05bNfQvxP8IS+P/h9rvh2C5S0m1G2a

BZ5F3KhOOSB24rz+3/a3+H7/AA/TxdPcXtjZy3MlpBZ3EK/ap5EA3bI1Ygjk

ckgDuRXEWP7f/gi41ERXOi6zaWjNj7SURyPQlA3A+mSPQ0Ac78O/2HNZ8E+P

PD+vy+KLG5j028S5eGO3cM4XsCTxwe9fSPxR+FXh74veGm0bxDamaEN5kFxE

wSa2k/vxt2PYg5BHBBFYPjf9o7wH4D8L6brt5rS3ltqkfm2EOnr5s1yvcqvG

AOhLEAHjrxXlunft/wDgm4v0iu9F1mytWbH2kIkm3nqVDZx34yfQGgDzrxL/

AME9NcF4w0TxRpl3ZFsgapDJG4HYHYGBPuMfQUnhn/gnjrsV9E+reJ9Ks4Uk

Vz/Z0DyscEHGGCY6e9fY7eN9IbwVJ4rtbkahoq2bXyT2uGMsQUtlckc4B4OO

eOK8g8G/treAvHHiXS9EsbLXYLrUJVhikuraNI0J7uRKcD3GaAPfYkEUSoCS

FUDn2r5M+Mv7DjeL/FN/rvhLWbbTGv5TPPp9+jeUsjEl2R1yQCSTgg4PQ44H

VeNf25fAPhjVJrDTor/xFJE2x7iyVVt8jrtdj831AwexNdZ8JP2oPBfxeluL

Wynm0nVLeIzvZakFjJjX7zowJDAd+hA5IxzQB438Ev2MPFXwy+KWi+K9Q1jQ

54bF3Lx2qytK6spXALIMHmvsNa+bfFv7dvgLQdSks9NtdR18RMVa6tkVIW/3

CxywyOuAPc13Xwc/aV8I/Gi5msdKe5sdXhTzHsL5ArsgxlkIJDAZ9j3xigD1

qivIPi7+054T+CviG00bXrXVri7ubb7WjWFukiBNxXBLOuDkHit74PfGrQfj

Zo19qegQX9vb2dx9mkGoRLGxbaG4AZsjBHOaAPQaK8p+Mn7Rnhj4H6jpVnr9

rqdxLqMUs0J0+BJFCoyg7izrg5cevep/g5+0D4b+OL6qnh+21KA6b5fnf2hA

sed+cbdrtn7p64oA9Por5vT9u34ePqYsV07xEZjc/ZRiziKl9+z/AJ69M9/S

tj4nfti+BfhvrVxo6m717VbZzHcRaeqmOFx1VpGIG4ei5x0OKAPeK4n4y+Pb

j4YfDHX/ABRbWkd9caZAJUt5WKq5LquCR0+9XnXwz/bJ8DfEbXLfRnW90HUr

lgkC6gq+VKxPCiRScMfRsAngEnivQ/jRqfhvSPhf4gvPGGnSat4aigBvrKNA

7SpvUABdy5+baeooA+c/ht+3Drnjr4h+G/Dk/hiwtYdVvUtXnjncsgIPIB78

d6+wga+N/hn8Q/2d9Q+Ivhu18OeAL3T/ABBNeolhdvaKqwy4OGJ844GM84Nf

X9/qFtpNjPeXtxFaWkCGSWeZwqIoHJJPAFAFuivnDxV+3X8PdCvJLbTYtS8Q

Mhx9otIQkJ+jOQT9QMe9Xfhr+2d4P+I3inT/AA8unappmpX8pit/OjR4mbBO

CytkHAPbHvQB9BUV5h8XP2hvCPwXntbbX5ruS/uozNFaWVuZHZAcbskhQM8c

nPtXkZ/4KD+ERPgeHNZMO7G8mPdj1xnr7ZoA+q6illSCNnkcRooyzscAe5rz

Telnet Communications phish PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 09:34:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxSgR-00000000Oz8-487Z

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 09:33:19 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 09:33:19 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.ite.net ([202.88.64.59]:45392)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxS94-00000000NQl-0PJL

for sales@nk.ca;

Tue, 03 Mar 2026 08:58:59 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.ite.net;

s=smtp1dkim; t=1772553473;

bh=4Ez8NF8GMz8OWw3BoV6uTpsBG/455nBlY5bA1oSEK0A=;

h=From:Subject:Date:From;

b=DlaTNxqUDUokd+SwM6fb6JXGsYvktbQvEm9NDkjQ65JW5ycE9kQ7gV9Y9wB4QqQlo

liwYuVvHyLP5UxagAcdH0e9bhdkQRoIIYv6S03pzBEbo9lc62DinUHBmUPdL6Rxvvn

xOpGYBshiid9d95aa3WpBw+QF8lQCzeQ7/NpVGHs=

Received: from User (unknown [209.107.192.250])

by mail.ite.net (Postfix) with ESMTPA id C34A18CCA964;

Wed, 4 Mar 2026 01:57:25 +1000 (ChST)

From:

Subject: Telnet Security Notice :

Date: Tue, 3 Mar 2026 09:57:51 -0600

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0075_01C2A75B.0D4D60F8"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 5.50.4522.1200

X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200

X-Virus-Scanned: clamav-milter 1.4.3 at av01.ite.net

X-Virus-Status: Clean

X-Spam_score: 21.5

X-Spam_score_int: 215

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Telnet email account has been flagged for revalidation.

To revalidate and continue using the Telnet email services - CLICK HERE



Content analysis details: (21.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[209.107.192.250 listed in dnsbl.ahbl.org]

[209.107.192.250 listed in dnsbl.ahbl.org]

[209.107.192.250 listed in dnsbl.ahbl.org]

[209.107.192.250 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[202.88.64.59 listed in wl.mailspike.net]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

0.0 NSL_RCVD_FROM_USER Received from User

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.2 MISSING_HEADERS Missing To: header

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

2.0 MIXED_HREF_CASE Has href in mixed case

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

Subject: {SPAM?} Telnet Security Notice :



This is a multi-part message in MIME format.



------=_NextPart_000_0075_01C2A75B.0D4D60F8

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

















Your Telnet email account has been flagged for revalidation.




To revalidate and continue using the Telnet email services - CLICK HERE




 




Telnet Communications.




http://www.telnetcommunications.com/






PayPal Phish from Microsoft Outlook Part 3


"0" >








line-height:13pt; color:#000;">


"0" border=3D"0" width=3D"100%" style=3D"" dir=3D"ltr" lang=3D"en">









=20


x; color:#333;">

Tha=

nks for verifying your RileySnyder@Tamra707.onmicrosoft.com account!








x; color:#333; font-weight: bold">

You=

r code is: 882488













Segoe UI', Tahoma, sans-serif; font-size:14px; color:#333;">

Sincerely,




Segoe UI', Tahoma, sans-serif; font-size:14px; font-style:italic; color:#33=

3;">

P=C3=A0ym=C4=97nt h=C3=A5=

s b=C4=97=C4=97n c=C5=8Fnf=C3=ACrm=C4=97d fr=C5=8Fm y=C5=8Fur P=C4=81y_P=C3=

=A5l USD 799.99 Pl=C4=97=C3=A5s=C4=97 r=C4=97vi=C4=97w =C3=A5cc=C5=8Funt d=C4=

=97t=C3=A5=C3=ACls.C=C5=8Fnt=C3=A5ct f=C5=8Fr H=C4=97lp 18304603867.













 



 

=20

 








tom:1px solid #e3e3e3;">


e3;"> 


top" colspan=3D"6" style=3D"border-bottom:1px solid #e3e3e3; padding:20px 0=

;">


ing=3D"0" border=3D"0" width=3D"585">












g=3D"0" border=3D"0" dir=3D"ltr" lang=3D"en" style=3D"margin-right:30px;">










:'Segoe UI', Tahoma, sans-serif; margin:0px 0px 0px 5px; color:#666; font-s=

ize:10px;">


Info">

Microsoft Corpo=

ration

|

One Microsoft W=

ay Redmond, WA 98052-6399







This message was se=

nt from an unmonitored email address. Please do not reply to this message.


AndLegalLinks" style=3D"color:#0072c6;">






s://privacy.microsoft.com/en-US/privacystatement" id=3D"PrivacyLinkAnchor">

Privacy



|


ps://www.microsoft.com/en-US/servicesagreement/" id=3D"LegalLinkAnchor">

Legal





=20








passwordreset.microsoftonline.com/images/1_MSLogo.png" />












e3;"> 


tom:1px solid #e3e3e3;">
















KDBTBPEODKFAAVO7YL24JF2SSZDL2YJCMIZZFY5NRFH2XNZ664MWKAMISKUVNWUZ3CGD4FUZIPH=

U6JVTZIQQZUI6ZFTGFKO4V3QHP765FC6VHDI4CMXJHTHQI5TAYBUVDSIDBLHCHYQGZBFINI&i=3D=

AIAAD5KA3NWVYKTVNVVTH6PV44BUXHQTAGRRLXCQ4BYKI624ACYWJXH6KETVBVL7EW6ULCEUCCX=

OJUME2USC4LLZKDOJ5D5AVN5QBE7XD3NDLL2T5SR7KPJTQRJTF7QW6R3OYNSX7DK33L2ILP4X7G=

XF7FF52LT63FKSWLVJREXDCQI56323TJZFY2J4MCYRRCQBDDGQBKLBPUCU5YF3YLU55BDIHEANQ=

4FEC6VEAHNM6I6SV6CAYZD3CYKDCM26TVAI4WWX6SNPZRBKHFPYDJCTXO4WU4A' width=3D'1'=

height=3D'1' tabindex=3D'-1' aria-hidden=3D'true' alt=3D'' />

=

PayPal Phish from Microsoft Outlook Part 2

[2603:10b6:208:40b:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40b:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40b:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[40.93.23.2 listed in will-spam-for-food.eu.org]

[40.93.23.2 listed in will-spam-for-food.eu.org]

[40.93.23.2 listed in will-spam-for-food.eu.org]

[40.93.23.2 listed in will-spam-for-food.eu.org]

[40.93.23.2 listed in will-spam-for-food.eu.org]

[40.93.23.2 listed in will-spam-for-food.eu.org]

[40.93.23.2 listed in will-spam-for-food.eu.org]

[40.93.23.2 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.23.2 listed in dnsbl.ahbl.org]

[40.93.23.2 listed in dnsbl.ahbl.org]

[40.93.23.2 listed in dnsbl.ahbl.org]

[40.93.23.2 listed in dnsbl.ahbl.org]

[2603:10b6:208:40b:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:40b:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:40b:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:40b:0:0:0:22 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.23.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.23.2 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.23.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.23.2 listed in dnsbl.ahbl.org]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[40.93.23.2 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

2.1 MIXED_ES Too many es are not es

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.2 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

Subject: {SPAM?} =?utf-8?b?UMOgeW3El250IGjDpXMgYsSXxJduIGPFj25mw6xybcSXZCBmcsWPbSB5xY91cg==?=

=?utf-8?b?IFDEgXlfUMOlbCBVU0QgNzk5Ljk5?=

=?utf-8?b?IFBsxJfDpXPElyByxJd2acSXdyDDpWNjxY91bnQgZMSXdMOlw6xscy5DxY9udMOlY3Q=?=

=?utf-8?b?IGbFj3IgSMSXbHA=?= 18304603867. account email verification code






w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">













<br /><br /> =09<br /><br /> P=C3=A0ym=C4=97nt h=C3=A5s b=C4=97=C4=97n c=C5=8Fnf=C3=ACrm=C4=97d fr=C5=<br /><br /> =8Fm y=C5=8Fur P=C4=81y_P=C3=A5l USD 799.99 Pl=C4=97=C3=A5s=C4=97 r=C4=97vi=<br /><br /> =C4=97w =C3=A5cc=C5=8Funt d=C4=97t=C3=A5=C3=ACls.C=C5=8Fnt=C3=A5ct f=C5=8Fr=<br /><br /> H=C4=97lp 18304603867. account email verification code<br /><br /> <br /><br />










dir=3D"ltr" lang=3D"en">

















=20


der=3D"0" dir=3D"ltr" lang=3D"en" style=3D"border-left:1px solid #e3e3e3;bo=

rder-right: 1px solid #e3e3e3;">














:1px solid #e3e3e3;">

border-bottom:1px solid #e3e3e3;"> 

:1px solid #e3e3e3; border-bottom:1px solid #e3e3e3;padding:12px 0;">


Light; font-size:18pt; color:#ffffff; font-weight:normal;">

=20


"#FFFFFF">Verify your email address







;border-bottom: 1px solid #e3e3e3;"> 





der=3D"0" dir=3D"ltr" lang=3D"en">



















 
n=3D"2" style=3D"border-bottom:1px solid #e3e3e3; padding:10px 0 20px;"> =09

PayPal Phish from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 09:34:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxSgK-00000000Oyr-3fTd

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 09:33:12 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 09:33:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus3azacs10201002.outbound.protection.outlook.com ([40.93.23.2]:16856 helo=PH0PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxS6g-00000000NJX-3x32

for doctor@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 08:56:29 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=mMuydaIbi7RDPTTo682xneZMn/W6paYl7KSMhP8h+Wg8UdzWOuE+cUDvP+ToP5iqhJU3izfK/AFdNxLoQ6kiRCfdlGHchQn7bRI1gy9YlA8KgwYqx2qX0OiNW5494VH6tUF1q3E5GSqm64ng/FAtU8w6ODVCqgaG33GZDFP6CIu6XVb0kRungRF8q2cNv2DNGx9ugSkT2I+umwwr8iyA/3aqyVZwRHyB74mnNO3VifEI1Cs2OMAb7s3pi0WOVE4yd4yqy30X8QNgxYdKQj00uqVQfQkvReD4xvQXQ5bFeu96kEcgANeb4112QA+aGl/pG2/gfeWmYk4EgrQ0lJ/9Lw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=P4oMGZgQYy/rB3rqk5a3uWsgBTugoYpo5eR1EqtMmQ0=;

b=LQ1+DzObBpEsMSRZgnleITN6Dy9DKkXjv/OI8EzoZ5Nx7f2v5RAP3BYdMJeC37T6pIel80dkxDqx9gclaaYcSf8GH8Smttc/ltkeDiA2GwlSLGXcEumIO0GiLi/2P3/L9DFkj+kl48UQTw8+NG7XTY7Nzlk7VaKvlxXO4QsWyIyL0V1IdBkX0z4epfHcm2252IhQZizRB9eTkYcdkXI3z/k18NW7CoPxTnRwEd52hNxC19HLK1iYFpbKQCg2eYBpfedrJI7KsBiUUtPa0j3fYUfAs/A5WS4OHH/YK+K3iVBKJ1XBbOQ+49Ay9DqJlocU973Vdfv8SlOvk3qrsknbMQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

Received: from substrate.office.com (2603:10b6:208:40b::22) by

IA0PR10MB7273.namprd10.prod.outlook.com with HTTP via

DM6PR21CA0011.NAMPRD21.PROD.OUTLOOK.COM; Tue, 3 Mar 2026 15:55:28 +0000

DKIM-Signature: v=1; a=rsa-sha256; d=microsoftonline.com; s=s1024;

c=relaxed/relaxed; t=1772553328; h=from:to:cc:subject:date:messageid;

bh=P4oMGZgQYy/rB3rqk5a3uWsgBTugoYpo5eR1EqtMmQ0=;

b=X9bm2xdP7maeWTYD6uUU5oJW6W8R6XnSBzW/rfw5cX4/yzachoHBka7DSCdBvwEEDJZrt7Cwohm

PIQh5v368VXYVZTzLgTmzV9Vvlhnh5JhGErf+yG74F2dS4rU1Jgibs/mfne9l3/fUr8oYnqKwXL2v

76FiUUpWu5m2103LfQ4=

From: msonlineservicesteam@microsoftonline.com

To: doctor@doctor.nl2k.ab.ca

Subject: =?utf-8?b?UMOgeW3El250IGjDpXMgYsSXxJduIGPFj25mw6xybcSXZCBmcsWPbSB5xY91cg==?=

=?utf-8?b?IFDEgXlfUMOlbCBVU0QgNzk5Ljk5?=

=?utf-8?b?IFBsxJfDpXPElyByxJd2acSXdyDDpWNjxY91bnQgZMSXdMOlw6xscy5DxY9udMOlY3Q=?=

=?utf-8?b?IGbFj3IgSMSXbHA=?= 18304603867. account email verification code

Date: Tue, 03 Mar 2026 15:55:28 +0000

Message-ID: <[3bf39d65777947caadd340374ee344ce-JFZGS42DN5WW25LONFRWC5DJN5XFA3DBORTG64TNFVIHE33EFVBEYMSQPREUCTKTKNIFE7CTKNIFERLNMFUWY7CFPBXVG3LUOA======@microsoft.com]>

X-MS-Iris-MetaData: =?utf-8?q?{=22Type=22=3Anull=2C=22Fields=22=3A{=22InstanceID=22=3A=223bf39d65-7779-47ca-add3-?=

=?utf-8?q?40374ee344ce=22=2C=22ActivityID=22=3A=2261a8712e-038c-40ac-9963-271f5f541?=

=?utf-8?q?585=22}}?=

MIME-Version: 1.0

X-TsbHttpDeliveryResponseType: Success

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-MS-PublicTrafficType: Email

client-request-id: 3bf39d65-7779-47ca-add3-40374ee344ce

request-id: 3bf39d65-7779-47ca-add3-40374ee344ce

X-MS-TrafficTypeDiagnostic: IA0PR10MB7273:EE_ICP

X-MS-Exchange-SenderADCheck: 0

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|3109299003|69100299015|7149299003|7049299003|61400799027|376014|4076899003|8096899003|54012099003|15920700032;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?UVBzRG9YVVZFbWJyODdZUmhxdzR3VVB5U0xmVmJLU1k3NXNlSWdnNDRhR01r?=

=?utf-8?B?YXkvcm1leTB6QU9obkIzZmZ3UWd0RUsvOUpJdjBpdFJ5RE5XY3ljMC9GVXRF?=

=?utf-8?B?VEZLdFdicGQxcGN2UjBYTmpNL296SGFueCsveFY4eENhV3EzOHhLN21PRXp4?=

=?utf-8?B?MnlDWGcydVNDbGZpeW84Q05XeTdRZFdoaEZTUjQ4bnZLOC8xWWRxQlVaOGNi?=

=?utf-8?B?VnJzbjdnMURBVEYrZE00ZVhWMDdjZEJmTm1GbWdHdlNpUkgwcmEyekRJVFlW?=

=?utf-8?B?c2VmRy9seXpzWTM5OUhoOGRPU2lRTDluRUhxN0xpNHVTUzJuTjhKUFhJckpw?=

=?utf-8?B?KzZsUXNBbmxTK25zQjJlVDBVSm1qM2NiUXpMbzhVSnlpV1IxbkZjSG9NM2ta?=

=?utf-8?B?MGwzRjFQYk5ONDJld3NBaUJSWFV0VTcvbmtKU1lkeVdHRkdDM09nZWwzRnpP?=

=?utf-8?B?TDJsUUt6NENjS1RJV1FiOG96L284MzUreDlqMEt6cFBKOUFvRGtyWFowTVNY?=

=?utf-8?B?NmxtS2VLYTJaMEZuRW4xUEMvT0E2UzB0QWFDVVJMdzMrNVRrU2hFRmNzSFE3?=

=?utf-8?B?cHVKYld5SmN3UmZEd292WGp0bXRROEtQWEZIcFZDTHZRSDh6RVU2N0lNSUg2?=

=?utf-8?B?NEhySXBudGthVDZzRDM0TTN2bGhuMHJwVGdqSTd1ZytjTUhGYzV2QmJBWDBV?=

=?utf-8?B?dzBGNzRrdlNzb1IybmJyMFYwOXd1Q1pUTkdhU2d0NCtZb2Ria2ZwM2pBZWtU?=

=?utf-8?B?SkFHSmFsdURNVVhPUUk0bW16ZDlJeml2b0JPblZ3dWZKVmIzMGU5WGF3M0gy?=

=?utf-8?B?VVlNVjNaMk0vajUvRHY2N1FvSjR2SjBjMVlUM2tZV0RXQklGbHdPamI5Q3Az?=

=?utf-8?B?cFArZytML2FlQTZ3STZJaFlVVjdaQ0JidXNjY0o1ZE1SUml3REF6T3NIeW1x?=

=?utf-8?B?USs2c2tuS25BNU94UmJKL1R4RWRwVFVhSFJXbUwwRjZ1Z1FpVUZmdjVrMnBN?=

=?utf-8?B?N2F1RlJobjF6RXNBTWg5SzZxdEQ0ZjBDK004WXJqZ3F4S0d3TkkrUktsQlFH?=

=?utf-8?B?RURkNGNBWUh3SE1qVU9YaEpOTWFUR1FTbGVudkdzUWZDZnVrQ1BxTkM2TVVT?=

=?utf-8?B?czZrOEFiNHUrTkJ4ZkhCTmhpZ3Q2bU5KUkNOZmVldHE0dEFrVERkTFRwcVNQ?=

=?utf-8?B?bEVXYUxzdzhELy9zSFRwUnhpd1RnV3UreWI2VDJnNWlrZnZwemhZaHJ1L1dk?=

=?utf-8?B?b3hVaXZaMVJGR0lUc3Z4ejZhV0NkdE5Wb0hXYTdVMHdPVkxvVWFtMUZsSVRP?=

=?utf-8?B?YWtxeW81MUltWTR5ZWhQVjZXMkdxcER1TXJZOFJVNEtmQy94U1d0Rytkdkhm?=

=?utf-8?B?ZnE1a21KeG51K2p0YVRVZGZlOUFLM2NGZU5QVUJ6Slo2NVR1U3FYVFJnbFBG?=

=?utf-8?B?REcyVGhYRTRiUjY0TDdqR2RYRkF2bUx5NHNqekVhOU1QSUtnb0NuQVB4TXRl?=

=?utf-8?B?Y0h3eGQ3c1U4UnpCRU5kUGhheXJqR1ZPS0VNSUY3ZFROd0dFbStWMTBFZEM3?=

=?utf-8?Q?YIi34r2QSDVjJb/m2wW11gNfk=3D?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:8;SRV:;IPV:NLI;SFV:SPM;H:;PTR:;CAT:OSPM;SFS:(13230040)(3109299003)(69100299015)(7149299003)(7049299003)(61400799027)(376014)(4076899003)(8096899003)(54012099003)(15920700032);DIR:OUT;SFP:1020;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

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

X-OriginatorOrg: ideasprod04.microsoft.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: HttpSubmission-IA0PR10MB7273

X-MS-Exchange-CrossTenant-Id: 411ca7db-1b8b-4c3e-8589-e4ea7d89aaf9

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Mar 2026 15:55:28.1321 (UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id:

243bd456-5770-4816-298a-08de793d4a68

X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA0PR10MB7273

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Pà ymėnt hås bėėn cŏnfìrmėd frŏm yŏur Pāy_Pål

USD 799.99 Plėåsė rėviėw åccŏunt dėtåìls.Cŏntåct fŏr Hėlp 18304603867.

account email verification code Verify your email address Thanks for verifying

your RileySnyder@Tamra707.onmicrosoft.com account!



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:208:40b:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40b:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40b:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40b:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40b:0:0:0:22 listed in]

[will-spam-for-food.eu.org]


Thank you for using On Demand Delivery.



D‌H‌L‌ ‌E‌x‌p‌r‌e‌s‌s‌ ‌-‌ ‌E‌x‌c‌e‌l‌l‌e‌n‌c‌e‌.‌ ‌S‌i‌m‌p‌l‌y‌ ‌d‌e‌l‌i‌v‌e‌r‌e‌d‌.





D‌H‌L‌ ‌G‌r‌o‌u‌p







2023 © D‌H‌L‌ ‌I‌n‌t‌e‌r‌n‌a‌t‌i‌o‌n‌a‌l‌ ‌G‌m‌b‌H‌.‌ ‌A‌l‌l‌ ‌r‌i‌g‌h‌t‌s‌ ‌r‌e‌s‌e‌r‌v‌e‌d‌.





























style='display:inline-block;padding:10px 20px;font-size:13px;color:#777;

text-decoration:none;border-radius:4px;border:1px solid #ddd;'>

Unsubscribe





ID #yVXPG6z1cDRzLRiehQCxxqoIOh




DHL Phish Part 3





To ensure a smooth delivery, we kindly request you to update your address as soon as possible.



















DELIVERY INFORMATION













































Waybill No. 9779802484
Status On Hold
Reason Incomplete Address
Shipper's Reference N/A




















Update Your Shipping Address





DHL Phish Part 2



































=20









=20









=20







































DHL Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 07:21:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxQcA-000000004UV-371W

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 07:20:46 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 07:20:46 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [109.94.209.180] (port=47712 helo=vps.hasanboy.uz)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxPgv-000000000Xi-3JYk

for root@nk.ca;

Tue, 03 Mar 2026 06:21:47 -0700

Received: from test_portal_user by vps.hasanboy.uz with local (Exim 4.93)

(envelope-from )

id 1vxPg2-002uYU-F7; Tue, 03 Mar 2026 14:20:42 +0100

To: root@nk.ca

Subject: =?UTF-8?B?QWN0aW9uIG5lZWRlZDogT04gSE9MRCAjOTY2MTM2MQ==?=

From: ᴅʜʟ (ᴏɴ-ᴅᴇᴍᴀɴᴅ)

To: root@nk.ca

Reply-To: test_portal_user@test-portal.uz

Date: Tue, 03 Mar 2026 14:20:42 +0100

Message-ID:

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

X-Mailer: PHP/8.0.30

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Action Required ACTION REQUIRED: YOUR SHIPMENT IS ON HOLD

Hello, Your D‌H‌L‌ ‌E‌x‌p‌r‌e‌s‌s shipment with waybill

number 9779802484 is currently on hold due to an incomplete address. To ensure

a [...]



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.94.209.180 listed in will-spam-for-food.eu.org]

[109.94.209.180 listed in will-spam-for-food.eu.org]

[109.94.209.180 listed in will-spam-for-food.eu.org]

[109.94.209.180 listed in will-spam-for-food.eu.org]

[109.94.209.180 listed in will-spam-for-food.eu.org]

[109.94.209.180 listed in will-spam-for-food.eu.org]

[109.94.209.180 listed in will-spam-for-food.eu.org]

[109.94.209.180 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.94.209.180 listed in dnsbl.ahbl.org]

[109.94.209.180 listed in dnsbl.ahbl.org]

[109.94.209.180 listed in dnsbl.ahbl.org]

[109.94.209.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.94.209.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.94.209.180 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.94.209.180 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.94.209.180 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.3 MANGLED_DEALS BODY: mangled deal(s)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

3.0 UNICODE_OBFU_ZW_MANY Heavily obfuscating text with hidden characters

Subject: {SPAM?} =?UTF-8?B?QWN0aW9uIG5lZWRlZDogT04gSE9MRCAjOTY2MTM2MQ==?=















Action Required





Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 07:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxQaq-000000004LX-0zkn

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 07:19:24 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 07:19:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.transip2.ca-it.dk ([136.144.203.208]:46372)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxJis-00000000AT3-0JhZ

for doctor@nl2k.ab.ca;

Mon, 02 Mar 2026 23:59:23 -0700

Received: from 172.94.9.71 (unknown [172.94.9.71])

by mail.transip2.ca-it.dk (Postfix) with ESMTPSA id CB08221249

for ; Tue, 3 Mar 2026 07:57:31 +0100 (CET)

Message-ID: <9A60396C04D0FE5D8184CD70B433D1A5@172.94.9.71>

Reply-To: "Pual Samaniego Maxi"

From: "Pual Samaniego Maxi"

To:

Subject: GOOD MORNING TO YOU!!!

Date: Mon, 2 Mar 2026 22:57:28 -0800

Organization: Maxi Law

MIME-Version: 1.0

Content-Type: text/plain;

format=flowed;

charset="windows-1251";

reply-type=original

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Windows Live Mail 15.4.3538.513

X-MimeOLE: Produced By Microsoft MimeOLE V15.4.3538.513

X-Spam_score: 34.1

X-Spam_score_int: 341

X-Spam_bar: ++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, How are you? Please accept my apologies if my email

does not meet your personal ethical standards. I would like to introduce

myself and this business opportunity to you. My name is Barrister Rual Samaniego

Maxi of Integrity Law Firm London, I am the personal lawyer of my deceased

client who bears the same surname as you.



Content analysis details: (34.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.94.9.71 listed in will-spam-for-food.eu.org]

[172.94.9.71 listed in will-spam-for-food.eu.org]

[172.94.9.71 listed in will-spam-for-food.eu.org]

[172.94.9.71 listed in will-spam-for-food.eu.org]

[172.94.9.71 listed in will-spam-for-food.eu.org]

[172.94.9.71 listed in will-spam-for-food.eu.org]

[172.94.9.71 listed in will-spam-for-food.eu.org]

[172.94.9.71 listed in will-spam-for-food.eu.org]

[136.144.203.208 listed in will-spam-for-food.eu.org]

[136.144.203.208 listed in will-spam-for-food.eu.org]

[136.144.203.208 listed in will-spam-for-food.eu.org]

[136.144.203.208 listed in will-spam-for-food.eu.org]

[136.144.203.208 listed in will-spam-for-food.eu.org]

[136.144.203.208 listed in will-spam-for-food.eu.org]

[136.144.203.208 listed in will-spam-for-food.eu.org]

[136.144.203.208 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[136.144.203.208 listed in dnsbl.ahbl.org]

[136.144.203.208 listed in dnsbl.ahbl.org]

[136.144.203.208 listed in dnsbl.ahbl.org]

[136.144.203.208 listed in dnsbl.ahbl.org]

[172.94.9.71 listed in dnsbl.ahbl.org]

[172.94.9.71 listed in dnsbl.ahbl.org]

[172.94.9.71 listed in dnsbl.ahbl.org]

[172.94.9.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[136.144.203.208 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[136.144.203.208 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[136.144.203.208 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[136.144.203.208 listed in dnsbl.ahbl.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[172.94.9.71 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[172.94.9.71 listed in sbl-xbl.spamhaus.org]

[172.94.9.71 listed in sbl-xbl.spamhaus.org]

[172.94.9.71 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[136.144.203.208 listed in bb.barracudacentral.org]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[136.144.203.208 listed in sa-accredit.habeas.com]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[136.144.203.208 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 STOX_REPLY_TYPE No description available.

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[paulsmaxi108(at)gmail.com]

0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 HK_SCAM_N2 BODY: No description available.

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[136.144.203.208 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[136.144.203.208 listed in bl.score.senderscore.com]

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 HK_SCAM No description available.

0.5 MONEY_NOHTML Lots of money in plain text

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

1.0 MONEY_BARRISTER Lots of money from a UK lawyer

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.9 STOX_REPLY_TYPE_WITHOUT_QUOTES No description available.

2.0 FSL_HELO_BARE_IP_2 No description available.

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} GOOD MORNING TO YOU!!!



Greetings,



How are you? Please accept my apologies if my email does not meet your personal ethical standards. I would like to introduce myself and this business opportunity to you.



My name is Barrister Rual Samaniego Maxi of Integrity Law Firm London, I am the personal lawyer of my deceased client who bears the same surname as you.



I am contacting you regarding an unclaimed financial inheritance claim related to your surname. I want to know if we can work together as a team.



I want you to act as the next of kin of my deceased client who has an account worth $16.5 Million USD at a financial institution.



My deceased client died without any registered next of kin and therefore the funds now have an open beneficiary mandate. The board of his bank passed a resolution and I have been mandated to nominate his next of kin to pay this fund or the fund will be forfeited to the bank as unclaimed property.



Fortunately, since you share the same surname as my deceased client, it will be very easy for me to make you his official next of kin.



If you are interested, please let me know so I can give you full details on what we are to do.



Thanks,

Best Regards,

Barrister Pual Samaniego Maxi

180 Tottenham Court Road London, W1T 7PD.United Kingdom

The Law is Our Business

Valve electric actuator spam from China Alibaba Part 2

Hello Si=

r ,

Ar=

e you searching for high-performance, cost-effective actuator solutions with f=

aster delivery for your critical valve controls? Perhaps you have long relied =

on AUXX  or RoXXXX brands but are now facing supply chain uncertaint=

ies, lengthy lead times, or seeking more competitive cost optimization.
=

As a leading=

manufacturer specializing in the R&D and production of industrial actuato=

rs, we professionally provide reliable products that can directly replace majo=

r brands, helping your operations maintain efficiency, reliability, and profit=

ability.


x"> Why Choose Us as Your Strategic Partner?

<=

p>

<=

p>


style=3D"width: 704.27pt;" height=3D"332" width=3D"939" cellspacing=3D"0" cel=

lpadding=3D"0" border=3D"0">

353"/>
e=3D"height:54.00pt;" height=3D"72">
tr>
d style=3D"width:439.50pt;" width=3D"586" class=3D"et5">

gn: center;">
e: small; background-color: transparent;">Torque range from 50N=C2=B7m to 20,0=

00 N=C2=B7m. Enclosure protection up to IP67/IP68,

font-family:times new roman;font-size:12px">

> suitable for extreme tem=

peratures, corrosive environments,

r;"> and potentially hazar=

dous areas 

ight=3D"76">
le=3D"height:15.75pt;" height=3D"21">
e=3D"height:15.75pt;" height=3D"21">


ACTION REQUIRED: YOUR SHIPMENT IS ON HOLD



Hello,



Your D‌H‌L‌ ‌E‌x‌p‌r‌e‌s‌s shipment with waybill number 9779802484 is currently on hold due to an incomplete address.


4pt; width: 264.75pt;" width=3D"353" height=3D"72" class=3D"et2">
"font-family:times new roman;font-size:12px">Seamless Replacement & Broad =

Compatibility

th=3D"586" class=3D"et3">
12px">Our products are designed to be compatible with the mounting dimensions,=

interfaces, and control protocols of brands like AUXXand RoXXX.

; height: 51pt;" height=3D"68" class=3D"et4">
new roman;font-size:12px">Superior Performance & Reliability

s=3D"et4">Advanced =

Intelligent Control

ss=3D"et5">

t;times new roman"; font-size: small; background-color: transparent;">Sup=

ports multiple communication protocols: Profibus DP, Modbus RTU, HART,
<=

/div>

text-align: center;"> Foun=

dation Fieldbus. IoT modules with remote monitoring and predictive

>

nt;"> maintenance functions are optionally available.
=


center; height: 56pt;" height=3D"74" class=3D"et4">
:times new roman;font-size:12px">Significant Cost & Lead Time Advantages
span>

=3D"text-align: center;">
t;; font-size: small; background-color: transparent;">While offering equal or =

better quality, we provide more competitive pricing

"font-family:times new roman;font-size:12px">

"> and shorter lead times =

(typically 2 weeks for standard products),

n: center;"> effectively h=

elping you reduce Total Cost of Ownership

15.75pt;" height=3D"21" class=3D"et4">
an;font-size:12px">Certificate 

r;" class=3D"et6">C=

E / SIL / Ex d II C T4 Gb / Ex tb IIIC T130=C2=B0C Db

5.75pt;" height=3D"21" class=3D"et7">
n;font-size:12px">Industries Served:

r;" class=3D"et8">O=

il & Gas/Power Generation/Water & Wastewater/Chemical/ Pharmaceutical/=

Marine etc.

<=

img src=3D"https://pic2.ziyuan.wang/user/Emmmma/2025/11/FCC_6237633d35e64.jpg"=

/>


an style=3D"font-family:times new roman;font-size:12px">We ha=

ve successfully provided smooth upgrade solutions for numerous global clients =

to replace AU
XX or RoXX, ensuring sys=

tem performance while optimizing supply chains and reducing costs.

<=

p> 

=

Thank you for y=

our time. We look forward to discussing how we can provide the optimal solutio=

n for your specific application needs.


y:times new roman;font-size:12px">


y:times new roman;font-size:12px">best regards 


"font-family:times new roman;font-size:12px">


"font-family:times new roman;font-size:12px">lucy =EF=BC=88WhatsApp=EF=BC=9A+8=

615022134315=EF=BC=89


font-size:12px">





Valve electric actuator spam from China Alibaba Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 07:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxQag-000000004KZ-1zKg

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 07:19:14 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 07:19:14 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-137.dm.aliyun.com ([140.205.208.137]:30833)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxJQT-000000009m1-1WAr

for doctor@nl2k.ab.ca;

Mon, 02 Mar 2026 23:40:24 -0700

X-AliDM-RcptTo: ZG9jdG9yQG5sMmsuYWIuY2E=

Feedback-ID: default:vip@vip.twivfluidvalve.ltd:alibabak_WebBatch:336566

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.twivfluidvalve.ltd; s=aliyun-cn-hangzhou;

t=1772519955; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=8git28msTcx3k9PdFK/XoTOmd4febOV0YIFwdUp0ByM=;

b=FEeXbG40k/VnUiXIHhRl32Kp08uvmkBdXlGMoL5zecvrSaqQr5X4qvIf9M5FPjkgBzzwSL5EeqgdHdiD4iAzRL9G0ECx7k9vczGqCgd4NuQU7jmI4ZcsjHyDmT4rtQj7o7cGcxeChmylyuYt5bWoWb7RmOQXOpcDQeeu6yauAL8=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1772519955; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=8git28msTcx3k9PdFK/XoTOmd4febOV0YIFwdUp0ByM=;

b=D4k6QSlpOrXwLlRIwlGJ250k7+OPhhhXbZTpuMrZAq+k8t+YlrXueGEV79KfEmCnD73Dm5Otu719a7o/MES5SCK6GZreGqXrwNys4JdV+FaLOCoLzpNhZSSSHIlazKmxMpTRVL6ZF1bnTq1s4SsHpRZ8vm2YMbdjrd5KKP7BBXc=

Received: from chitu-hsf(mailfrom:vip@vip.twivfluidvalve.ltd fp:ma_600000272821935025 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Tue, 03 Mar 2026 14:38:40 +0800

Date: Tue, 03 Mar 2026 14:38:40 +0800

From: "lucy"

To:

Reply-To:

Message-ID:

Subject: =?UTF-8?B?dmFsdmUgZWxlY3RyaWMgYWN0dWF0b3I=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000272821935030

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Sir , Are you searching for high-performance, cost-effective

actuator solutions with faster delivery for your critical valve controls?

Perhaps you have long relied on AUXX or RoXXXX brands but are now facin [...]





Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.137 listed in dnsbl.ahbl.org]

[140.205.208.137 listed in dnsbl.ahbl.org]

[140.205.208.137 listed in dnsbl.ahbl.org]

[140.205.208.137 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.137 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.137 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.137 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[140.205.208.137 listed in sa-accredit.habeas.com]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[140.205.208.137 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)

[140.205.208.137 listed in wl.mailspike.net]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[140.205.208.137 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.137 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?UTF-8?B?dmFsdmUgZWxlY3RyaWMgYWN0dWF0b3I=?=

Ledger Security Phish from Google Gmail Part 3

Dear
=3D"color: #0b0b0b; font-weight: 600;">doctor@nk.ca
,


esponsive dark-mode-text-secondary" style=3D"margin: 0; padding: 0; color: =

#4a4a4a; font-size: 16px; line-height: 1.7; font-family: -apple-system, Bli=

nkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;">



Our records indicate that your Ledg=

er device is running an outdated firmware version. To keep your digital ass=

ets secure, please complete the mandatory firmware update by the deadline b=

elow.



This update contains critical secu=

rity enhancements that help protect your device and maintain safe access to=

your funds.



 





=20



=20




e-height: 32px; font-size: 0;"> 


=20




lpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"width: 100%;">








0;">


" target=3D"_blank" rel=3D"noopener" class=3D"btn-responsive dark-mode-btn"=

style=3D"display: inline-block; background-color: #0b0b0b; color: #ffffff;=

text-decoration: none; padding: 12px 40px; border-radius: 8px; font-weight=

: 400; font-size: 17px; min-width: 100px; text-align: center; font-family: =

-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sa=

ns-serif;">


>Update Now






=20




e-height: 40px; font-size: 0;"> 


=20



=20




e-height: 20px; font-size: 0;"> 


=20




style=3D"margin: 0; padding: 0; color: #6a6a6a; font-size: 16px; line-heigh=

t: 1.7; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto,=

Helvetica, Arial, sans-serif;">

Thank you for taking prompt action to keep =

your device safe and reliable.







=20




: 1px; background-color: #e9e9e9; border: 0; margin: 0; padding: 0;"> =




dding: 28px 32px; background-color: #ffffff; font-family: -apple-system, Bl=

inkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;">


lpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"width: 100%;">








">


d.wikimedia.org/wikipedia/commons/thumb/f/f0/Ledger-logo-long.svg/1280px-Le=

dger-logo-long.svg.png" alt=3D"Ledger" width=3D"117" height=3D"39" />



 



 





=20


size: 13px; line-height: 1.7; font-family: -apple-system, BlinkMacSystemFon=

t, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif; margin-top: 16px;">

Ledger SAS


1 rue du Mail, 75002 Paris, Fra=

nce



=C2=A9 2026 Ledger. All rights =

reserved.







=20





=20







--000000000000f09247064c161b8c--

Ledger Security Phish from Google Gmail Part 2






xt-size-adjust: 100%; -ms-text-size-adjust: 100%;">



=20




ng=3D"0" border=3D"0" style=3D"width: 100%; background-color: #f5f5f5; min-=

width: 100%;">




20px 0; background-color: #f5f5f5;">



=20




" cellspacing=3D"0" border=3D"0" align=3D"center" class=3D"main-table" styl=

e=3D"width: 100%; max-width: 600px; background-color: #ffffff; border-radiu=

s: 0;">



=20






dding: 40px 32px; background-color: #ffffff; font-family: -apple-system, Bl=

inkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;">

=20




margin-right: auto;" src=3D"https://upload.wikimedia.org/wikipedia/commons=

/thumb/f/f0/Ledger-logo-long.svg/1280px-Ledger-logo-long.svg.png" alt=3D"Le=

dger" width=3D"255" height=3D"85" />



=20




e-height: 40px; font-size: 0;"> 


=20






e-height: 20px; font-size: 0;"> 


=20




ry" style=3D"margin: 0; padding: 0; color: #4a4a4a; font-size: 16px; line-h=

eight: 1.7; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Rob=

oto, Helvetica, Arial, sans-serif;">