WEb/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 29 Apr 2026 06:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wI4Rs-000000001Il-1olD

for dave@doctor.nl2k.ab.ca;

Wed, 29 Apr 2026 06:55:28 -0600

Resent-From: The Doctor

Resent-Date: Wed, 29 Apr 2026 06:55:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f45.google.com ([209.85.210.45]:48490)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHyga-00000000B3t-2Fz4

for sales@nk.ca;

Wed, 29 Apr 2026 00:46:25 -0600

Received: by mail-ot1-f45.google.com with SMTP id 46e09a7af769-7de431da8fbso6102337a34.1

for ; Tue, 28 Apr 2026 23:45:33 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=acclaimgrowth.info; s=google; t=1777445127; x=1778049927; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:message-id:subject:to

:from:from:to:cc:subject:date:message-id:reply-to;

bh=4wkMUESbVcTn7UYTGiqxniu6wVk2UishA9yHcT9koeA=;

b=Poso3kbg8JAD1jXVYE35+vvYi3rtwCIfOVQKt7LC8uB/VIV5joYn6Wf6tS+ZQmJlvU

E5KJmgKTVF6NL/Y5deSg2Nt+RaEPozu4GxBQRqH0wZoausCTnRxveHEVMDVbna46HsJy

8KRuJQzJ8w5p1B+CbLzdLrrr3ps0vhsNq6kYhJCQ98L43otmZAdSQDg1AKsroQ6+/aCX

frecCYnN/xOeNoSA2IE0Dzb66WwRDFU8xdbtkQ4cJFZvDhjBDUS9Vk1GOc/1wI0i0som

RyUGZCiRi1dO3m/TD6bmJvghPhXn2GBPuBfiMQ5365PeDK4xI3tntKQ2oLr57l7LDCgP

hVKQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1777445127; x=1778049927;

h=mime-version:date:content-transfer-encoding:message-id:subject:to

:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=4wkMUESbVcTn7UYTGiqxniu6wVk2UishA9yHcT9koeA=;

b=kgXmMvr+ykgo7ZVnnj9R+avvZVi7pGKQkVNBf3oHt3+zXQgxw27wrBL0rzGs2cblQk

iyCsprVo7x9spOCRwpqXg265k23CxY7bhxxc+IVXVGzx28gTSyHtBO7k7pqDS+3BClHe

nSBaUi/RHiSnqTpmuRmuHypfIdb7ZWhIzOvoK7AfwbGDov9MQCzUoYi9NbNLiKn50mU2

afqjQZxogvAPTQGW0KQutk7zP40mtKYH3rfpNFvlA4W9Z1IKJB6I639ls5lQX5boL2Co

LnWCMgCfsXNlRZqotXRTKUanw8d23z1wk2uDrFcLllrYFLWgLbJ64KC++UplnpyOAjTm

2JNw==

X-Gm-Message-State: AOJu0YxBHHB0a8aMJHzzopd14iA0zEJ5jGkMCJta8ie4k4GIp/DGcONx

qK8kxxbBAcdVOjMoolUlyhFAYgq1l16lSu79yWJ27v6BhC+9FVRylTS2GzEgIHXK6u9D02BVhWe

Ts2/Z6531

X-Gm-Gg: AeBDietMZiNISxge9PNt7IUgJEzR82z+Fj/sO/JyTHxQCszFTt/lAuF6J3W9WN4S4Vx

dqAZRBKdNu6QwolO3Aw/FB9bsknIsYpUdTK0fHcbvAmNRtHItzn+3BEqMrObQDCMyuIJG8hhhzR

s9xGmfFC6RXZk2EH+xpmLcpGu8czpQ+JwPBAJ4N5ZApKPYWTh/wLbY6+f1e0A0jlUEN/bR+PIZu

jP5xeZHgV9I95VDQQ/x6B2zvLu4jqN4/1TskZET8eQxfjdjf0jxxX7Q9hN1M1AvXFIzvcISZfzS

5QC39IU3byvktbA+UnQ/Z6xXMQbHlvIis7UMUzRSm045UBJAlncVtRniY9vNTvimL1HnNKH7/3Z

nuz32GnhrlVUcY7meGfs+mo7HeWIU2DRFUigWN/Y+9CVsOYocOEpPORJ/lRJje5JC3f3exO8SQ3

3mT1VBTVsRCELvZSW6UPTXrMMX1Nm/cbkZb8FbmL4CZmrnZxGq+oVpQJdqRcgdidC+w9DCtLTO2

fZ1yAsl1rshZLaLtTZC6rgjlvOOos2qZDVjHSLmY6klbTJ7uwwKfBq6pw==

X-Received: by 2002:a0c:e00f:0:b0:8ac:b31c:9961 with SMTP id 6a1803df08f44-8b3e29b9456mr2205276d6.43.1777312833229;

Mon, 27 Apr 2026 11:00:33 -0700 (PDT)

Received: from ip-172-31-22-143.ec2.internal (ec2-54-235-236-161.compute-1.amazonaws.com. [54.235.236.161])

by smtp.gmail.com with ESMTPSA id 6a1803df08f44-8b3e286b81dsm1253246d6.22.2026.04.27.11.00.31

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 27 Apr 2026 11:00:32 -0700 (PDT)

From: Dawid Stasiak

To: sales@nk.ca

Subject: Hey

Message-ID: <4c3a424a-284c-sl26-42a8-be63-082ac8851ee0@acclaimgrowth.info>

Content-Transfer-Encoding: quoted-printable

Date: Mon, 27 Apr 2026 18:00:31 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I’ve seen you guys do impressive work in web development.

We’re a Polish agency and we often assist companies like yours with developing

websites in WordPress, Webflow and Framer when they are overloaded and need

extra hands.



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.235.236.161 listed in will-spam-for-food.eu.org]

[54.235.236.161 listed in will-spam-for-food.eu.org]

[54.235.236.161 listed in will-spam-for-food.eu.org]

[54.235.236.161 listed in will-spam-for-food.eu.org]

[54.235.236.161 listed in will-spam-for-food.eu.org]

[54.235.236.161 listed in will-spam-for-food.eu.org]

[54.235.236.161 listed in will-spam-for-food.eu.org]

[54.235.236.161 listed in will-spam-for-food.eu.org]

[209.85.210.45 listed in will-spam-for-food.eu.org]

[209.85.210.45 listed in will-spam-for-food.eu.org]

[209.85.210.45 listed in will-spam-for-food.eu.org]

[209.85.210.45 listed in will-spam-for-food.eu.org]

[209.85.210.45 listed in will-spam-for-food.eu.org]

[209.85.210.45 listed in will-spam-for-food.eu.org]

[209.85.210.45 listed in will-spam-for-food.eu.org]

[209.85.210.45 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.45 listed in dnsbl.ahbl.org]

[209.85.210.45 listed in dnsbl.ahbl.org]

[209.85.210.45 listed in dnsbl.ahbl.org]

[209.85.210.45 listed in dnsbl.ahbl.org]

[54.235.236.161 listed in dnsbl.ahbl.org]

[54.235.236.161 listed in dnsbl.ahbl.org]

[54.235.236.161 listed in dnsbl.ahbl.org]

[54.235.236.161 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.45 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.45 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.45 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.45 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.45 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.45 listed in bl.score.senderscore.com]

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28 days

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Hey



I=E2=80=99ve seen you guys do impressive work in web development.





We=E2=80=99re a Polish agency and we often assist companies like yours with=

developing websites in WordPress, Webflow and Framer when they are =

overloaded and need extra hands.





Would you like to take a look at a few =

websites we recently created for another agency in Canada?





Regards,=C2=A0

Dawid Stasiak =C2=A0

The Acclaim Agency



Doamin for sales spam from Google Gmial

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 29 Apr 2026 06:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wI4Rl-000000001IT-0P5G

for dave@doctor.nl2k.ab.ca;

Wed, 29 Apr 2026 06:55:21 -0600

Resent-From: The Doctor

Resent-Date: Wed, 29 Apr 2026 06:55:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f48.google.com ([209.85.219.48]:52375)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHzwB-00000000FLa-2xeL

for sales@nk.ca;

Wed, 29 Apr 2026 02:06:35 -0600

Received: by mail-qv1-f48.google.com with SMTP id 6a1803df08f44-8a48deebe95so95976396d6.0

for ; Wed, 29 Apr 2026 01:05:39 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1777449933; cv=none;

d=google.com; s=arc-20240605;

b=UBAQm1GZbupRl6MqH3D7dS+d4O1AAOHwE6lL9X0ji2X8ou3EGTTAXWG7FommC3cI2n

W/9apAuw+96+1pUYWnSQBddOgf0mQfuiEgDGDk8Vfe3ie9ExlcUloXTexJLLBNVjTG0Y

FBsMZlG/kz5rBBaF0jxRYJpBDjDJuvfTDu54kIpQdDnRmN4Qgk2FYVW+9MbWE+utyqOw

c1vhnNBPlVY6Iq4TRi4qwq9fOwztIDsxQeaCR4GUmSu/X5a0S8kA2pxcu79vCMDRnBdT

bMOigrd8rOENFHbhw8td6ClzJ9JE0xo/vrdksygdILCSs9zWKEje/ZQ6SQA8nXpJix5S

M8Eg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=t3+EvERFHfg+kJ8C9WpnR83VHm+SE4C3A7L9p6IU1Cs=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=D0vv9UlvgrjYuQAMjnzZbiWylTlIsiYKLuDjmvvAi0heYlV+Nm8GjjSe2y4yyuwz2O

9jFRFQT2BL90t6RvHo80NcvCLmT+TjYXoMvUB5C+KpYjJ5eVpFS3b0FeCcl35DB7C9Qt

vbpmmL1ZJaE+N0BRjrRyzKZJ6T6KfWmH+BkNUNMtJR42J6tJO+0kqpJC8sZ0QICbtlV7

n19Pbt90wIC+oCxW+iYrgvaOAbJ66l6spTqGPrJpSXOftyLDuQx1UlzMPeyLX4gi6sUp

z/nCOabe9OH9Cz6/NZK21V7DuyfeMZhBfJnRKzgEaoMP97gHt/rPGJt2hhuwxssjv8cm

BkVQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1777449933; x=1778054733; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=t3+EvERFHfg+kJ8C9WpnR83VHm+SE4C3A7L9p6IU1Cs=;

b=WEzY8YUyNklXPzGHIXO72kbaaDUVMNUj1BIl2kPxSuitGxAlwEabipIkaewj2Jm1t9

O1LdYgg2+VUrHATqnlKfbi1bM+ItzbUX2279MBta7hK6dbuF0IMKtC9rtentKvGcFIi0

aMo1AUR5gMeLQqICZEnYBVh9g27GXlhozWFi7QFkO9jBtNAwv0eAViwQutwkdDV1Hd2f

1sRxCGg+ZleCm4YjDSI8DeQd9owRYW3aYGNgzR+tReLlY8PlYfAkSSOES4mmbBphlHwc

KFYzt4Afk60PAMGAzSsCPMMEP7xELxE08LcHHA3Z6ikDjcGgjTQ/M8rpnvMaRGmVIhT/

scgw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1777449933; x=1778054733;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=t3+EvERFHfg+kJ8C9WpnR83VHm+SE4C3A7L9p6IU1Cs=;

b=bd4gI9WFtBEJQqw7eWg7Cx0twyvNz+71kM7np7/CLFEj5IJtnJi4wK35S4lHyDl7SJ

r6efWxD4ntHVdhA0lHzZEgFbW1BXUTctvgdFyhAZpA3P28zlmlEyCJQGhsudbK3CFIX5

nBzJnu1BVcbQ/bG+JQ/6lyQEQWxxyIVtG3C7vDn3jCk1kBPIlz5AwTf9B/rKUeVkmhOv

MWVrQLwN+fPJFvRjI1rcUFtBWhWPSr2QhSDd7Yq7wRgAWNzoPESSgFHpRjmDyBw5xvaE

qbsyAzCHqXnscUKsI+G+r0X61v50oxMAx02ks4U89FojGbyq9vX+A2DmbNf3kQx2J6I1

2x7A==

X-Gm-Message-State: AOJu0YzFwibMuOQxDJRqHfAIU6s9HKt7q7Se/pD2UZhw65YnCYgczKTD

eP9qCDzrGgzaYPcNHjQu+Sm/krG3pWkUj2jkYUpaHiRouWi+77/ovcUxa8GMcA8GHMyzPP325Oq

fGQvFIYwY0JB1iP/wcQeFKhSnbeGCAZWGnMqdb1VqSA==

X-Gm-Gg: AeBDiesIU3V1pSge9Sste2LjqY3i7JeK10Z8i2etuQQ6J9Enm8GTqTCfhFvEkm6Vcz2

MJQveADh/8dLBsZYEvS819KQjqgqAu6+yeyrrgb6P1H09Tm0D6cp2EEvkeaKXjZDJqnH8m0vwY4

hEURa2W34NhkR54m5I2Be2WKi+p6STvzfKMlkkigZ8OacQu8oa/3QbruKm+znWP2a7p1E702YBH

83YtWufVlTPvaJwsjQ1zcLVmcV5jFr0jLVABEVYlJz1Z+DOOMSdWmvZjHd1BRByEObxGEu1NzQD

trsiThhLJJXLvbU8ycWxorb55MwmK0TZu3sbdG60xFLYxSP+6m0RGzFjAEI8

X-Received: by 2002:a05:6214:2686:b0:8a4:8b2c:428f with SMTP id

6a1803df08f44-8b027ff8849mr781788996d6.2.1777304418786; Mon, 27 Apr 2026

08:40:18 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Dave Smith

Date: Mon, 27 Apr 2026 20:40:05 +0500

X-Gm-Features: AVHnY4JSpuAWdASDlUeoMsR8Mln1iPgS75qSewxFI7N65WSM7SALULsGhWlBvtE

Message-ID:

Subject: Re: Broadband Alberta

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000008a1f7d065072ee33"



--0000000000008a1f7d065072ee33

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey



What can I do to make this work?



On Thu, 23 Apr 2026, 8:59=E2=80=AFpm Dave Smith,
.com>

wrote:



> Hello

>

> BroadbandAlberta.com is currently available on GoDaddy, would you be

> interested in owning it?

>

> Dave

>



--0000000000008a1f7d065072ee33

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






l_signature">Hey

What can I do to make this work?


iv class=3D"gmail_quote gmail_quote_container">

ail_attr">On Thu, 23 Apr 2026, 8:59=E2=80=AFpm Dave Smith, <
ailto:roofingcompanymaine@gmail.com">roofingcompanymaine@gmail.com> =

wrote:

x;border-left:1px #ccc solid;padding-left:1ex">
Hello

dir=3D"auto">
BroadbandAlberta.com is currently =

available on GoDaddy, would you be interested in owning it?

=3D"auto">
Dave=C2=A0






--0000000000008a1f7d065072ee33--

WEb/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 29 Apr 2026 06:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wI4RK-000000001GL-0TKY

for dave@doctor.nl2k.ab.ca;

Wed, 29 Apr 2026 06:54:54 -0600

Resent-From: The Doctor

Resent-Date: Wed, 29 Apr 2026 06:54:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f72.google.com ([209.85.222.72]:60669)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wI04X-00000000Fas-0we8

for root@nk.ca;

Wed, 29 Apr 2026 02:15:14 -0600

Received: by mail-ua1-f72.google.com with SMTP id a1e0cc1a2514c-9570d05becaso14176752241.0

for ; Wed, 29 Apr 2026 01:14:14 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1777450448; x=1778055248; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=2NQ4pQ0gENjwqqsgthwUbxX12YHGrL87pzYio6xh0rE=;

b=NQo2pO/WYoSc7Xy37E6skLoHt0B0a4tk1AGprH6utlkhnjZUWMM3HLccIx5UKzbiCr

1JBWSBjYro+I8FdnfGhCHL5U8UR72TAQRAz8yvP1+clNjkPTyx3jehAwY87WX0BuoXax

qmytWTAjfvpKbesj00Dlhg9F44FacLrDJRlQScxaq0pu53eJ1Won+I1CSTV0K9zm8VeE

4aFeh65KBoxqU+FypqxG80NVvY5PsYa0klh+d+lUdtiCj173AGz/PsYJU4Ep60bj3Frv

Vd3469rx/lrCnEhbovXaGw0D4HJJcRBSxd1LtZjcVzwntMZUMXDzEz0+CTDXgWrdS15J

/UZA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1777450448; x=1778055248;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=2NQ4pQ0gENjwqqsgthwUbxX12YHGrL87pzYio6xh0rE=;

b=UaqtPQ0GXq+LeaE3tfOX9LdZIftlKzHTTxZHN8PyjC3qD5Rh55kvrpgEj4jFkMPMxm

7yn6qCcdFRoQH3gDPgRP0ysK+IdqCRM/oJyVaSbs7Nfr3Mt1Z+RhlhByoxRBDCQsYMcW

+FxMOCT1TJ7YjwGY/deagelGAqkNGuZz1+ZcADWA6KxtQhn3L7U54fM/Z9GW/0CKxAyD

lacDNcUaxl9DvKiBqkkeEM1Yme2MZhYt59hjKdES768pN0zW1WegEeXvsuvd8NhKpk/p

qBtNh9IYQEhymqhjGsAJINVSHGi/4gvXkm4k1Cw+50yiIRoTm84SSnE9fo5VCcBF/QWV

JQxQ==

X-Gm-Message-State: AOJu0YxnqlbPs3u29Iq+4DwrzBHUG9dTmPrslvy2CN06XH8hyH8bIpD/

JPzzM2MZXPRNhy5x4yEL+s9BEawbjJTgXj9pwpoXQbG0di4xdcYtfRccgDPtgMqg5gKLhpydaHb

GB+XoJg==

MIME-Version: 1.0

X-Received: by 2002:a05:6122:8198:b0:56a:ef51:4cae with SMTP id

71dfb90a1353d-56fa586085bmr15511179e0c.4.1777279835181; Mon, 27 Apr 2026

01:50:35 -0700 (PDT)

Message-ID:

Date: Mon, 27 Apr 2026 08:50:35 +0000

Subject: Website to the first page of Google.

From: valadoifrigeltk12@gmail.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="0000000000003e14f806506d353c"



--0000000000003e14f806506d353c

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SGkscm9vdEBuay5jYQ0KDQpJIHdhcyBjaGVja2luZyB5b3VyIHdlYnNpdGUgb24gYmVoYWxmIHRo

aXMgZW1haWwgcm9vdEBuay5jYSwgYW5kIHNlZSB5b3UgIA0KaGF2ZSBhIGdvb2QgZGVzaWduIGFu

ZCBpdCBsb29rcyBncmVhdCwgYnV0IGl0J3Mgbm90IHJhbmtpbmcgb24gR29vZ2xlIGFuZCAgDQpv

dGhlciBtYWpvciBzZWFyY2ggZW5naW5lLg0KDQpJJ20gYSBTRU8gRXhwZXJ0IGFuZCBJIGhlbHBl

ZCBvdmVyIDI1MCBidXNpbmVzc2VzIHJhbmsgb24gdGhlICgxc3QgUGFnZSBvbiAgDQpHb29nbGUp

Lg0KDQpMZXQgbWUga25vdyB3aGF0IHlvdSB0aGluay4NCg0KVGhhbmtzLA0KDQpWSUNUT1IsDQoN

Ck5vdGU6IC0gV2Ugd2lsbCBiZSBtb3JlIHRoYW4gaGFwcHkgdG8gc2VuZCB5b3Ug4oCcUHJvcG9z

YWzigJ0gYW5kIOKAnFByaWNpbmfigJ0uDQo=

--0000000000003e14f806506d353c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,root@nk.ca

I was checking your website on behalf this email root@=

nk.ca, and see you have a good design and it looks great, but it=E2=80=99s =

not ranking on Google and other major search engine.

I=E2=80=99m a S=

EO Expert and I helped over 250 businesses rank on the (1st Page on Google)=

.

Let me know what you think.

Thanks,

VICTOR,

N=

ote: - We will be more than happy to send you =E2=80=9CProposal=E2=80=9D an=

d =E2=80=9CPricing=E2=80=9D.

--0000000000003e14f806506d353c--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 29 Apr 2026 06:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wI4R8-000000001FP-0s5j

for dave@doctor.nl2k.ab.ca;

Wed, 29 Apr 2026 06:54:42 -0600

Resent-From: The Doctor

Resent-Date: Wed, 29 Apr 2026 06:54:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f43.google.com ([209.85.217.43]:61741)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wI1Lc-00000000JPf-2pyv

for root@nk.ca;

Wed, 29 Apr 2026 03:36:57 -0600

Received: by mail-vs1-f43.google.com with SMTP id ada2fe7eead31-60579b9c0ccso9767512137.3

for ; Wed, 29 Apr 2026 02:36:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1777455355; x=1778060155; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=QlbZZ3l3gtVLYnQ44LyGillPs3I4oeBT4luLzBQCeHo=;

b=LasCiOqV+Mbxiaos+7dfflckrdX9mx/qixKCxzM8tJEw++teR1X1RThi+lXmAgqRTz

6LhNlit2FjIUz0pPThA7C82T8Lg4ULr00Ld3bRcoshUl+2xESsnIXwjTc/qIpM52JpMQ

ENV0FAKSBQUHXx3KvmjMCTXQLr3gFq1FafNSK2r0L4jiE5fYTOKMklCVioTVXIXlWfKs

wlD8oPGdsf+4QoBMHGbud5vD/p+WAJwbInT7CtGoV3dXvdb8QTv86zxl3gdkuzxnqhjg

GYESSUMF2vqwPcEP4Q0k3xQCAx1xgBq7w/WvQCf4vD9Ye9o7euIdzNrUsKYmkH3ZPBrR

WQPA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1777455355; x=1778060155;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=QlbZZ3l3gtVLYnQ44LyGillPs3I4oeBT4luLzBQCeHo=;

b=m0j7mTPutwKFhhy/wybe7p2o41UAtGbb/+4BZGKP2AHrOBRPFwcX+FlPtiwZEpq2vo

2tnhsyOaYzL93IN7NIVMbevXaBFJL9X9xDW4Hx3v+sEqMKU9o/3KPok+ROBruh0W6gfR

TXH8wMqte4M++3hiJbNDWSMzojmfuAI9NPhBarS5u4hW7e2HbbJ4hC8buYCH56Yh8UZL

8yhSkkgUr9fCtO6s7pLRgjsW6ssfvfC1MgWjC3gNzGGpfQbtT1KIBRtWU/W2K5tWUOX/

zqMCl80HMqs887rw/2Rwdr2Bpe8bqvgwzZidJXLgf+BbJRch1j4WOsR+W+QkvxHqKKrz

XMxw==

X-Gm-Message-State: AOJu0YzTvF16WjBRYVbvmBUAFj/4fl8T1ZV+TxSz1v+1BhArnCfAKTll

Bl0J9hJ6WMxKaCLBKDc5ZnYQjayFwCZd+wi+sCN7rMljWgvayRTJRtTn7mrdKivWOQ==

X-Gm-Gg: AeBDiesH5no13KCpMZ8C4fgCsOJB1RA+S1cMBwMMwuy+dVxFcugcGbaAKjj9WZDdc+j

jwHEKJlx7gHk7OvcBOady2Z8AqLmq/hbjRl7Ca8aNSwKHc7Np2PZbkT7yI05PIYK8UovVEFAV6C

LyN8OtYeintfPRLyjUmkEygQX38lXKSIEVc62rtA+8etH6j59jpKw6NMfiSFtb/hxPpPdsYqwJV

Kmu0SbhSHaphlctae/baqzwRX+KBo5e5VrsNB+h7zg0ZhHtX84adDNdRm22xzGhDu0iwU+mYMxy

W6efQtdk7ZtxpCncdmuaHAVNXRNbgCEGJCXyp2elwKKN5wjgk+CgBpboLWLTLniiFQe0E9pVf+d

B/LDVCSs67rwKdacPu9gw5sdTw3g0u1Qd+IuyIPFYtJd9yYT9REwigwrdBvyx2svrp8dWIo5jr6

ez/1rrSpUb1lnIPjuXGDlFSSyuwXPuyOdIPRytE5a5CWGu1A==

X-Received: by 2002:a05:6a20:1611:b0:3a2:e0d3:37d1 with SMTP id adf61e73a8af0-3a2e0d339aemr31001040637.41.1777226956798;

Sun, 26 Apr 2026 11:09:16 -0700 (PDT)

Received: from DESKTOPVFI8GCA ([2401:4900:87f4:9dfa:4029:dc14:e5a5:1777])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-c7976f8f4e8sm22455030a12.1.2026.04.26.11.09.15

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Sun, 26 Apr 2026 11:09:16 -0700 (PDT)

From: "Akash"

To:

Subject: Re: Good Afternoon, Price list ?

Date: Sun, 26 Apr 2026 23:39:02 +0530

Message-ID: <00d201dcd5a7$cb79e3d0$626dab70$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_00D3_01DCD5D5.E53490D0"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AdzVltfXj01918kuRu2b0yOLtQSj2w==

Content-Language: en-us



This is a multipart message in MIME format.



------=_NextPart_000_00D3_01DCD5D5.E53490D0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi Good Afternoon,



How are you?



I reached out earlier, but haven't heard back yet. Are you looking for

effective yet affordable SEO services?



Can I send you a price list?



Thank you,







On Fri, Mar 20, 2026, 3:57 PM < > wrote:



Hi, root@nk.ca



I was checking your website https://www.nk.ca and see you have a good design

and it looks great, but it's not ranking on Google and other major search

engines.



With your permission : I would like to send you a SEO report with prices

showing you a few things to greatly improve these search results for you.

These things are not difficult, and my report will be very specific. It will

show you exactly what needs to be done to move you up in the rankings

dramatica.



Best,



P.S. : If you are not interested in our services, please write Unsubscribe

in the Subject and send it to us.





------=_NextPart_000_00D3_01DCD5D5.E53490D0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hi Good Afternoon,


class=3DMsoNormal>How are you?

I reached out =

earlier, but haven't heard back yet. Are you looking for effective yet =

affordable SEO services?

Can I send you a price =

list?

Thank you,


class=3DMsoNormal> 

On Fri, Mar =

20, 2026, 3:57 PM < > wrote:

Hi, =

root@nk.ca

I was checking your
style=3D'background:yellow;mso-highlight:yellow'>website
style=3D'background:yellow;mso-highlight:yellow'> =

https://www.nk.ca and see you have a good design and it looks =

great, but it's not ranking on Google and other major search =

engines.

With your permission : I would like to =

send you a SEO report with prices showing you a few things =

to greatly improve these search results for you. These things are not =

difficult, and my report will be very specific. It will show you exactly =

what needs to be done to move you up in the rankings dramatica.


class=3DMsoNormal>Best,

P.S. : If you are not =

interested in our services, please write Unsubscribe in the Subject and =

send it to us.



------=_NextPart_000_00D3_01DCD5D5.E53490D0--



Web/SEO/App spam From Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Apr 2026 22:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHwx9-000000006L5-3HIG

for dave@doctor.nl2k.ab.ca;

Tue, 28 Apr 2026 22:55:15 -0600

Resent-From: The Doctor

Resent-Date: Tue, 28 Apr 2026 22:55:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f195.google.com ([209.85.160.195]:57576)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHwr5-00000000606-2gNp

for root@nk.ca;

Tue, 28 Apr 2026 22:49:09 -0600

Received: by mail-qt1-f195.google.com with SMTP id d75a77b69052e-50d6ab4476eso119822461cf.2

for ; Tue, 28 Apr 2026 21:47:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1777438033; x=1778042833; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=jrJYZfjBynBqB3AGcyZRmMW9MVbAJAROamVH9gMKhFY=;

b=mjOvcwP4tF7jzdrQzrTkON/8Eu62aSiDz3qLVS0aYfxjKyhR09LokF82uuyb+PRIzU

1gQ5rxSPVWAZM5LchMqzqy4iCURRv+upc4KdCI5KSD6dfEzvI/gqlkQP+Ia+fuadhCtP

WqlQZQJfatrZH4tWpzY9wtyVOusZDxJZtmSc9+ucdUVi6D4sYTWlqGJVmxDDEFCJtjs1

6twqILS9jCOymKYOVkYeO1HYh9sAXZpIy1df3gVgBNA1/Oux+TR2cu6KKYSaaosjYwgc

luRKS0cOHFgcrGwLZwmOTvM7jN+suASqArildoE5rR1TJuOQRQu0alihiACyH6UES9ot

Wl8g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1777438033; x=1778042833;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=jrJYZfjBynBqB3AGcyZRmMW9MVbAJAROamVH9gMKhFY=;

b=qKb1s7N+kCrwOJk9y5RFBcZYm1zPzZHW1cKS17zMA0N9lBLsAlWAmZcCKMu/pF4RhM

HboewAeDgOcVUmor3P+fK2mqGzvM5BBooQO6HtrpTAtwg/Mlwa5L2wwnRb8BvYCIq9o0

ZGr/f7VBBD3t4zOoIzqHIKg3snq/DVsiPa5Cn+2Gjsajf/VFX+mL5/D4AktFPwNMilwH

HEHoesOKPe9NbdyXN8o1F8/qOAfBK9Hq0sLX6/udcGEn7T8LjyvkosrcrdOqGhdUZMsD

JlRBakCzw9L2GQ6IEKGsS3O/KmpE/3ugEVgHOpXrz6A9gZEZD2nhNPyzbzzDvIb+2+1t

R41Q==

X-Gm-Message-State: AOJu0YzN97mFnpFFR5uK6PbDC8Lzu2J3V8GgjdLtDDoP3Qk9BIQbRjk4

Y9XP3S/D9QKDcggwMV2a/l6LQmlW97fuLX2/o02408FtYF7d2kwZqVMRqqh/FCsWMQ==

X-Gm-Gg: AeBDiev9mrcIj8CIjTrm7Z2Sa3yXc5nQIl/ua0siPpjQhvkjSNfAOw219IXsPHN7bEB

NqbHQS//vxDa0/AcS4DgGeq51uvi+boZ4Fo3PLKvnZ3WknKrHUh6aCe5hH2EM41rMs0mDCWG6lW

4+tNtbZ0gawo3/juBOo99LMsH5QHHTU+O2u04y8BiLgU3/sNz8Vy5N4m8oxyswk1ojwfes3qhDZ

95L9HjvHc14LjwQhZF5yMQL7Cj1Ix3XQjGyl9OHv/sKHGX+ypIeWCP7aV9dkYd7br90tuwqluX2

7m/9Lxfkqvde82MR20hwmYrzHvAcPGqOOdFBk6QbjEoiWO52r0ZwF04Ky/jca8ucCSxP7daD2+g

1CApvx0fe4wzeBhEBepyVQ6D/pavBfvhCb6CJnd1mer+PvHN0yaK8NBYDQ4ltxM/uWtI811sYE+

qhqKJLNqMoBdQFLwR/IK64RbwjPQpaTVvB28LEqkCawhcta/6CpAUIR+EZlAJsxcJ+tw==

X-Received: by 2002:a17:902:d592:b0:2b0:ccad:de1a with SMTP id d9443c01a7336-2b5f9f3aa58mr366417435ad.30.1777154369807;

Sat, 25 Apr 2026 14:59:29 -0700 (PDT)

Received: from DESKTOPVFI8GCA ([2401:4900:5fc1:4c6d:e1a4:6f81:82f9:d7b4])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2b5faa507cbsm271216145ad.37.2026.04.25.14.59.28

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Sat, 25 Apr 2026 14:59:29 -0700 (PDT)

From: "wade"

To:

Subject: Re: Good Afternoon, SEO price ?

Date: Sun, 26 Apr 2026 03:28:49 +0530

Message-ID: <180901dcd4fe$ca5e4670$5f1ad350$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_180A_01DCD52C.E418F370"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AdzU/gW2grR+qF9ETPKXoG7FHPFFDA==

Content-Language: en-us



This is a multipart message in MIME format.



------=_NextPart_000_180A_01DCD52C.E418F370

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



I reached out earlier but haven't heard back yet.



Can I send you a price list?



Thank you,



On Fri, Mar 20, 2026, 3:57 PM < > wrote:



Hi, root@nk.ca



Are you looking for effective yet affordable SEO services?



I'm an SEO Expert, and I've helped over 250+ businesses rank on the 1st page

of Google. My rates are very affordable, and I do great work.



Would you like me to share our pricing and service packages?



Thank you!



------=_NextPart_000_180A_01DCD52C.E418F370

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hi,


class=3DMsoNoSpacing> 

I reached out =

earlier but haven't heard back yet.


class=3DMsoNoSpacing> 

Can I send =

you a price list?

 


class=3DMsoNoSpacing>Thank you,

 


class=3DMsoNoSpacing>On Fri, Mar 20, 2026, 3:57 PM < > =

wrote:

 


class=3DMsoNoSpacing>Hi, root@nk.ca


class=3DMsoNoSpacing> 

Are you looking =

for effective yet affordable SEO services?


class=3DMsoNoSpacing> 

I'm an SEO =

Expert, and I've helped over 250+ businesses rank on the 1st page of =

Google. My rates are very affordable, and I do great =

work.

 


class=3DMsoNoSpacing>Would you like me to share our pricing and =

service packages?

 


class=3DMsoNoSpacing>Thank you!


class=3DMsoNormal> 



------=_NextPart_000_180A_01DCD52C.E418F370--





Web/SEo/App spam from Microsoft Outlook Part 3

Posted by Dave Yadallee on



;Arial",sans-serif;color:#333333"> 




;Arial",sans-serif;color:#333333">We can give you best services of:
p>




;Arial",sans-serif;color:#333333"> 




so-list:l0 level1 lfo1">


or:#333333">·
pt "Times New Roman"">       &=

nbsp;


ly:"Arial",sans-serif;color:#333333">Website Design and Developme=

nt




so-list:l0 level1 lfo1">


or:#333333">·
pt "Times New Roman"">       &=

nbsp;


ly:"Arial",sans-serif;color:#333333">e-Commerce Website / Online =

shopping Store




so-list:l0 level1 lfo1">


or:#333333">·
pt "Times New Roman"">       &=

nbsp;


ly:"Arial",sans-serif;color:#333333">Mobile Apps Development: - (=

iOS, Android &Windows)




so-list:l0 level1 lfo1">


or:#333333">·
pt "Times New Roman"">       &=

nbsp;


ly:"Arial",sans-serif;color:#333333">e-Business development / eCo=

mmerce development/ Web site design and development
p>


so-list:l0 level1 lfo1">


or:#333333">·
pt "Times New Roman"">       &=

nbsp;


ly:"Arial",sans-serif;color:#333333">Specialized custom applicati=

ons for Supply chain management, Network management, Business process manag=

ement etc.




;Arial",sans-serif;color:#333333"> 




;Arial",sans-serif;color:#333333">Some of these platforms we use to bu=

ild great websites are

WordPress, PHP, Magento, Drual, JAVA, Big-commerce, Shopify & a =

lot more.




;Arial",sans-serif;color:#333333"> 




;Arial",sans-serif;color:#333333">Ask for our design samples and under=

stand how we create custom online stores and the most informative websites.=




;Arial",sans-serif;color:#333333"> 




;Arial",sans-serif;color:#333333">We are waiting for your positive ema=

il to proceed further.




;Arial",sans-serif;color:#333333"> 




;Arial",sans-serif;color:#333333">Best Regards,




uot;Arial",sans-serif;color:#333333">Ridhi
nt-size:11.0pt;font-family:"Arial",sans-serif;color:#333333"> | W=

eb Manager




;Arial",sans-serif;color:#333333">Associate - IT Services
span>











--_000_TYWPR01MB10242331A0A468E852E93240E96372TYWPR01MB10242jp_--

Web/SEo/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Some of these platforms we use to build great websites are WordPress, PHP, =

Magento, Drual, JAVA, Big-commerce, Shopify & a lot more.







Ask for our design samples and understand how we create custom online store=

s and the most informative websites.







We are waiting for your positive email to proceed further.







Best Regards,



Ridhi | Web Manager



Associate - IT Services



--_000_TYWPR01MB10242331A0A468E852E93240E96372TYWPR01MB10242jp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>












;Arial",sans-serif;color:#333333">Hello,




;Arial",sans-serif;color:#333333"> 




;Arial",sans-serif;color:#333333">We provide world-class website desig=

n & development services at affordable Price to enhance your web presen=

ce. We create logo design, animated logo design, business

and stationery, complete branding and Website design and development.=

Web/SEo/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Apr 2026 07:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHicZ-00000000CPB-16He

for dave@doctor.nl2k.ab.ca;

Tue, 28 Apr 2026 07:37:03 -0600

Resent-From: The Doctor

Resent-Date: Tue, 28 Apr 2026 07:37:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19010020.outbound.protection.outlook.com ([52.103.43.20]:45366 helo=TY3P286CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHheT-00000000HRq-1qeV

for root@nk.ca;

Tue, 28 Apr 2026 06:35:08 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=bTKXcge1KqM/NmuHU/mQrbyPkv7Y0/DufsxpT2rXgkxhv7An31oMkO9Or6NYwlKElSwKv4XIb1U8uqhJu2GHTBBoDcykblK2rW5XJbjFZpHNumuRXqaYnv+a2rzi8sGxyNmeUumJkgcx/+sC1eTc2l03M6fdfDUBIT6OQnF3rOSgGvLCNPPCHZQiS9uwfI7kgOb9/9Hdsd3dV+8ig5Do6Cd3QhJWNrNY2EjSZFZS2lbthBGNTObsPLTCY+YJlwq3li9YVVdIwLmgWWU2J5tJvhb88Qt5gyTjle0o6Yc/khdgWapHOMG8nNNYWgdToEKQdkj4LG2slK/2s85DiihKOQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=mFp+gE9zxdg3JFZXVyY1xXiCLilAoPFqoJdPtR/ZyFo=;

b=vragqa21z7nEtbXJWnhM/6HjHQ9w59PqvZVmNGT6U7si6FJYoiKHucab6bANXHe+V2ZMRIkYPZyKcZymhe7K96UYGxS5qaVQkvpHy0J6xvmkwo9FrTRyF9s6qPfEjmigxsm23096ToCNVAJvYyfE4ZblmCnA77p2Y5jPH0MOdaM8yMCAIH2+h91cSiQ7BMPmaYS/XUKB6d+lTwapyp4ZsUyX4ScfaXlzInFdebnNbbfZY1IrL7nPukVupPQ6p5swl7bYNbt5UXipkURuV3in3m6NBrsuUG23/L1Fy2EhvDbWX2rF6qqMQlje/5EOV9Yrsy71Fli7KqgM42C66lXbhA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=mFp+gE9zxdg3JFZXVyY1xXiCLilAoPFqoJdPtR/ZyFo=;

b=jkHRMg065BgxV8UaSQw53BR0SCpJ6Tvgz6Nt5VA+Gf7hxkMurhaLVz9l5XXtHnuUKY7uJrOSGFjRSx82LWpgfnSEKWzEwCwBYKlHUMo/pLnCUK2RadOKLZTUpaafIHH1wxNmQSOhqkAXhGhUBWcWVkz+IzAW/COFUKiuo/R3dzfIaJ685x6nTjlVCzQ/DZs4qZ9NbUvb3aY4AqVQqHRmxamrOcvztL6LzD3yN7RWG53m5NlCD7Hsn14wzvkhz2Q6acEt21CjkEESVjXBee+LfBrNfD7quMnG3eLI67oo8RuHsN1QpiPHNMPQRY2dA70XZ3miTbEoFvAbbYNyR6iFkg==

Received: from TYWPR01MB10242.jpnprd01.prod.outlook.com (2603:1096:400:1d4::9)

by TYYPR01MB12827.jpnprd01.prod.outlook.com (2603:1096:405:159::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9846.26; Tue, 28 Apr

2026 12:34:01 +0000

Received: from TYWPR01MB10242.jpnprd01.prod.outlook.com

([fe80::25da:977b:d59a:7d3b]) by TYWPR01MB10242.jpnprd01.prod.outlook.com

([fe80::25da:977b:d59a:7d3b%4]) with mapi id 15.20.9846.025; Tue, 28 Apr 2026

12:34:01 +0000

From: ridhi websolutions

To: "root@nk.ca"

Subject: Custom Website Development and Designing

Thread-Topic: Custom Website Development and Designing

Thread-Index: AdzXCp3srnokWVSrQL+u/lvpJeO3EQ==

Date: Tue, 28 Apr 2026 12:34:01 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYWPR01MB10242:EE_|TYYPR01MB12827:EE_

x-ms-office365-filtering-correlation-id: 0055e954-237e-4b2c-ab7e-08dea5226d78

x-microsoft-antispam:

BCL:0;ARA:14566002|37011999003|15080799012|31061999003|39105399006|24121999003|22091999003|461199028|13091999003|24071999003|8060799015|8062599012|55001999006|20031999006|24021099003|41001999006|19110799012|26121999007|3412199025|440099028|102099032|35041999009|40105399003;

x-microsoft-antispam-message-info:

=?us-ascii?Q?sw48GyDwpNt1KGo/InBZISo+jspAY9+/444lAiC7LHJ5jVO7AIcwea0Tvgv0?=

=?us-ascii?Q?1lM39CQW9bt3UkUH2KdMcrZnGzk/0kKQjckLfuMPh1FOEl0uL1RFLR4C7Lkg?=

=?us-ascii?Q?4sAwlJHxYs56qu/PTk0XgmdY3vQ1igi+S6MXh/4o0LUuYZBVhYdATabGNjYJ?=

=?us-ascii?Q?56Fo69DvSnAy6N/087bF57Z19prNMlx6H8H7xx57124cHrZGXl3rNPtzypI1?=

=?us-ascii?Q?nw4K7CLD4Ze7DwR8rSZqOWa6xkNtVc+7K9FAO9fXEd9OpT8BCeWUvg2gW7+v?=

=?us-ascii?Q?IA/6iT/L2gb/mZgvgmd5zntqeNRy+rueS+9COD41btWn7pQonf6DEcJi+OBz?=

=?us-ascii?Q?+PPvzpKkq046aOCc1HZ0Ij8r0tJ63B13Nvm6xGEteSQWTqkhkZG44d0XESbM?=

=?us-ascii?Q?/KxLAVsMb4upUFzaNEGFTqia9dOA0n5vipNtAuiNI504z2SI4130gSuKWAHX?=

=?us-ascii?Q?ViSeHFHyy7wDzvFbNE9bk8EqWUng40Y+wMmR2S3z52Z3rX+y5QCelDXNk8Qi?=

=?us-ascii?Q?YU+FcLDsqK5FhttAQbf8Y3383UzUj/XT4h8vdO36BJKB0P4xCykJ8SnwmYBj?=

=?us-ascii?Q?CpIgzsd+5ifcOu6KOpX3dVZ6CU3z/QSpTf+ZBy8Gv/rjw2lXqjnEeoBYCm2O?=

=?us-ascii?Q?2084vbX6/jCBxBmG817+J1bLhf8Xq31adtYESEsk1WKRASo+yPSolZX5MPuN?=

=?us-ascii?Q?9rccecR4W3iUEEHkHLhWAKIwYeqaBu9wa42J73v1sFhVHCRo1deYkokjUp7q?=

=?us-ascii?Q?/DQCV21Pyms2hrL3rMltE9eufQ25Al8SfN8ejtVMMy6f7lxIB0CihbZEynAC?=

=?us-ascii?Q?KixggcyT+ROT9jV+bviAd8yrZNDJooz958QjrB2rI5Ocv3TAya8raBRJc9iG?=

=?us-ascii?Q?hKz4tJ0eul6i7aX/IhZZzYeukEGUhBvcctPsJZifC+dOlkpWsdnQDp1gDeQH?=

=?us-ascii?Q?KbeJtwixSEBqXnDXcXx1CucSmEtt0nRXcsyeD0b0+E3e+DbuKjoJAxDTLpCC?=

=?us-ascii?Q?UE2WRvygs9MDQx/NFsFVLKQrmaaw8pLjQo2f0Kvc8m/yWMCG7axasF8FH6er?=

=?us-ascii?Q?vRT6VgfAvoVjcBDcqwnw/TLZmrdtrEh2hELY/V3yjG8CX02Gx27ArWkyYHld?=

=?us-ascii?Q?952QHKtIUhhaSyHaOMRvqK6dyIDhg2OWpKJvF67PvQp0RGLA1kiWlim4G4HX?=

=?us-ascii?Q?rc0lMu3m/H2q8fJ8w+XhJJztXrfeoINJgVqZXAv6VEb7rX0xFxhuaSfiMprQ?=

=?us-ascii?Q?XNMiaGOVFgKHVyzry4u0?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?ijUKZzWKmmQuby6m2y6t2sWs6HBkKGs+vCUJ4JzKcb9X7PFmuQD49WCkt5cK?=

=?us-ascii?Q?p669gD78JlTwu1abkrMm2Td7WhveJ7P6V5oFCozJ2U41Mm14LBp6i2nqlMUe?=

=?us-ascii?Q?+HeHlIeyxvB3euhnWvT0KrQj7DB+YiXrofrlmemjZkAaNDpriKV3cDKzAebS?=

=?us-ascii?Q?d9PFI4c/W8UA3GJosf0rUMrRpKmaFmSxzehtaP0Gr7ggqi3EXjLYcsbhylEb?=

=?us-ascii?Q?B8nw2OfIgpEBK6IzXUcyvYJdIlp78lyZEPyzIQdaXTxJhBVAelQo0IXj68XB?=

=?us-ascii?Q?vx64KM6paHkmGkX7BywjMeOL2zhHh5Fs1DJUy5XGYKY3yQ2lgKCTlpbVHdga?=

=?us-ascii?Q?SMHIwyv0wVTUXuLLB5xYFe2Ac+jQc9/vB7Xuh2MVpL3skbR6zhmERqH4K+Ys?=

=?us-ascii?Q?8kvO91TwuFFzR+VEDpJvKlTzjXjNnpE17LhpYkX2NDmC62V5GOiFYtZOQSXb?=

=?us-ascii?Q?ckookmmgd8tPeP97toxHfjhmAHken8TjhUhCjlM/B1P67fy7HU02bBa9Myxp?=

=?us-ascii?Q?5DvjbOkIFrIwU1ms36Ar/UwNMDi1UntshgPqDdWQXXuP/jLj6my9vJndrs/E?=

=?us-ascii?Q?WY/Z0CW5VHMMJtbqNQjxi7IrRzB+N0zQ4RQNkR20Y+3OufSyw4L2uiEoENyS?=

=?us-ascii?Q?8fmTIw3xW2EeBUnyolX9EIcWCFhFR+DTLEXtxjRn8FNcGtwfFJtbTwWYfY1h?=

=?us-ascii?Q?ppbBxw3NmzxIKl47BC6aD2ExbCwz1gk77IYXFeRS1TDldykvXu5bcoic6ORS?=

=?us-ascii?Q?O8BoypEXxsL7wuwiBMWeX2B8MXq43KcH1ZIvY9NKQPY8u5UszaV0hONRbSYK?=

=?us-ascii?Q?+b5Q8J0B+jyfoEj6liGUNqyvlOPO0kWjidT6nQ+AhAjOJDrhH86K4duzK+8R?=

=?us-ascii?Q?kGgDKdT9Kse54Uub9I+fL6HDVYrXEJ7D7dnTqhTwRaIs8gvrQa5+KO+C/l5r?=

=?us-ascii?Q?krBWxj1XMnUxiRPQg6+kM1Jxt6X2RgvWa8z46yqeWAPFmk6UMRERTNTkLQxC?=

=?us-ascii?Q?T4o9X+yq05lXGPdFJa3EZXdeuJeN4z1i+8RArFloFK9eD2MlVCit51SXl4L2?=

=?us-ascii?Q?7dci8fwxeTC2cgsxtpkA6anI7vqsXVFWdcLFunPRi3mkpqYd88EyuIL6x1RZ?=

=?us-ascii?Q?aI5qMNqjuUQJ/dXIKXP5dOa1ck6WDWKGJUsqm8oLfrfZdeH+Vh+ENUAnHh8C?=

=?us-ascii?Q?eg+xYOcLJveWGGIyI1NFudTrmRDafoxkgQXwf6gPnmdLeNV7kf+cj66yMvuH?=

=?us-ascii?Q?ic2slSkhv0OoiX08n7urTTqMCHr9W2I5GTI8nI4V0fBjIkL8jlvUkizqC0aj?=

=?us-ascii?Q?RSnQ9Ek10G4MxisFdytSKV07vwMc3yJG2Ap+BYWzduU2RX3qQbjujBOMz7jO?=

=?us-ascii?Q?wrky8qaKUhru3gdz9gbFnZQ9kYUAluLRhcNuZgEjUDD8Em1E1f2mH4DL3H7P?=

=?us-ascii?Q?hcsVdj567y33K5GmDDY6DxzzhhJkNjWQx7SnUJ4FSaL0UVKrrnZ9KQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYWPR01MB10242331A0A468E852E93240E96372TYWPR01MB10242jp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYWPR01MB10242.jpnprd01.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0055e954-237e-4b2c-ab7e-08dea5226d78

X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Apr 2026 12:34:01.6824

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYYPR01MB12827



--_000_TYWPR01MB10242331A0A468E852E93240E96372TYWPR01MB10242jp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello,







We provide world-class website design & development services at affordable =

Price to enhance your web presence. We create logo design, animated logo de=

sign, business and stationery, complete branding and Website design and dev=

elopment.







We can give you best services of:







Website Design and Development



 e-Commerce Website / Online shopping Store



Mobile Apps Development: - (iOS, Android &Windows)



 e-Business development / eCommerce development/ Web site design a=

nd development



* Specialized custom applications for Supply chain management, Netw=

ork management, Business process management etc.

Intelcom phish from Sendgrid Part 3

Posted by Dave Yadallee on


We =

=20

will re-validate the =

=20

details after submission. I=

f =20

the check =

=20

passes, service will continue =

=20

with the new address; =

=20

if you have multiple=

=20

linked shipments, th=

ey =20

will be =

=20

updated to match the latest =

=20

informat=

ion. =20




=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">






bgcolor=3D"#0a5c4d">
r-radius: 9px; color: rgb(240, 255, 251); line-height: 1; font-size: 14px; =

font-weight: 600; text-decoration: none; display: inline-block;"=20

href=3D"https://u53727460.ct.sendgrid.net/ls/click?upn=3D=

u001.NwahWh90hLwJ776AzKEinu5VK-2BEx7q3mRgqItj3aSy2PUQ8iQaQKzk84Qj4mtzv4Sd2D=

2QAU7P6LuQyYf5ro7Q-3D-3DXgIY_YmNPztx4miJCrnDYqcF7jXq78F4oB9F625GBzMg8N-2BXu=

vp3MwL-2BmtZxIkNyFxULnDvKi0bKkUD1-2F2TzqbOb5kThKG9k4HoTssOLFyvDfy5tmSN7aHSx=

Z00joPp73AOzOvj6wbcwIR-2BDeeDEzrxuOYPC1g6cL7xOM-2FWeNmsaWf3BBosIVcWV8eo6wrR=

a7ksUC" target=3D"_blank"=20

rel=3D"noopener noreferrer"> Open pa=

ge to =20

=

=20

=

=20

=

=20

update =

=20

address =

=20

 =

=20

=

=20

=

=20

=

=20




e-height: 1.6; font-size: 13px;">=20

=

=20

If =

=20

you have already updated =

=20

your address in this =

=20

system or through =

=20

another official channel, =

you =20

do not need to do it =

=20

again. It may tak=

e=20

about 5=E2=80=9310 =

minutes=20

for the status to =

=20

refresh=E2=80=94please check b=

ack =20

shortly. =

=20






ine-height: 1.6; font-size: 12px; border-top-color: rgb(212, 224, 219); bor=

der-top-width: 1px; border-top-style: solid;">=20

=

=20

This =

=20

message was sent =

=20

automatically based on your=

=20

shipment =

=20

activity. This inbox does not accept =

=20

replies.
=

=20

Thank you for =

=20

your =20

cooperation=E2=80=94we appreciate your help =

=20

getting your package =

=20

to you. =

=20

=20


53727460.ct.sendgrid.net/wf/open?upn=3Du001.EtyC8XKcPmGZYDmBykh8zVlSKkHOq97=

3wZr7etXLZUDIim67JLxKiCi8R555kQ-2FTP4ZtJep4KBmyb4i8Yb0JmmHXEYRojnOzt6nmu6Rs=

-2F6TEhOUwM0UlGrHBOAvbuiS5gOLA9NSNtq7kFIXtboI3GsoEOhZ-2BdkQI4ck5aL-2Bl4ic9A=

6tqrYBOmrA60mgKolIkpbDrlxS5u4EgnvAHqrHSbA-3D-3D" alt=3D"" width=3D"1" heigh=

t=3D"1" border=3D"0" style=3D"height:1px !important;width:1px !important;bo=

rder-width:0 !important;margin-top:0 !important;margin-bottom:0 !important;=

margin-right:0 !important;margin-left:0 !important;padding-top:0 !important=

;padding-bottom:0 !important;padding-right:0 !important;padding-left:0 !imp=

ortant;"/>



--9d934a68890d4b842515d25200055221--



Intelcom phish from Sendgrid Part 2

Posted by Dave Yadallee on
--9d934a68890d4b842515d25200055221

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable





=20

=20


0"> =20

Delive=<br /><br /> ry Address =20<br /><br /> Update =E2=80=94 Action Required=20

=20


ans-serif; background-color: rgb(232, 240, 237);'>


ckground-color: rgb(232, 240, 237);"=20

border=3D"0" cellspacing=3D"0" cellpadding=3D"0">








px; border: 1px solid rgb(196, 212, 206); border-image: none; width: 100%; =

overflow: hidden; max-width: 700px; background-color: rgb(255, 255, 255);"=20

border=3D"0" cellspacing=3D"0" cellpadding=3D"0">










; background-color: rgb(10, 92, 77);">


t: 1.35; font-size: 22px; font-weight: 700;">Your=20

=

=20

Shipment Needs a =

=20

Complete Address




ne-height: 1.55; font-size: 14px;">After=20

=

=20

you review and =

=20

submit the full address, we =

=20

will continue proces=

sing =20

using the update=

d =20

details.




th: 1px 1px 1px 4px; border-style: solid; border-color: rgb(155, 201, 189) =

rgb(155, 201, 189) rgb(155, 201, 189) rgb(10, 92, 77); border-radius: 10px;=

border-image: none; background-color: rgb(232, 245, 241);"=20

border=3D"0" cellspacing=3D"0" cellpadding=3D"0">






ne-height: 1.55; font-size: 14px;">Status:=20

=

=20

=

=20

=

=20

This =

=20

shipment is on hold =

=20

until the delivery =

=20

=

=20

address is =

=20

=

=20

confirmed. Completing the ste=

p =20

below w=

ill =20

=

=20

allow us to move =

=20

forwar=

d. =20

=

=20

=

=20

=

=20




height: 1.7; font-size: 15px;">Hello,




height: 1.7; font-size: 15px;">=20

=

=20

While =

=20

entering routing =

=20

information, we found that =

=20

some address =

=20

fields may be empty, incomplete, =

=20

or not in a format =

=20

we can validate. To =

=20

avoid returns or =

=20

extra back-and-forth, =

=20

please use the link below =

to =20

=

=20

provide a clear, deliverable address in one go. =

=20

=

=20




height: 1.7; font-size: 15px;">=20

=

=20

Intelcom phish from Sendgrid Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Apr 2026 13:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHnrl-00000000N6U-3A7B

for dave@doctor.nl2k.ab.ca;

Tue, 28 Apr 2026 13:13:05 -0600

Resent-From: The Doctor

Resent-Date: Tue, 28 Apr 2026 13:13:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsw.outbound-mail.sendgrid.net ([159.183.224.105]:64120)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHmKC-00000000IJ1-2tx9

for root@nk.ca;

Tue, 28 Apr 2026 11:34:28 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tengzhouyujie.com;

h=from:subject:date:mime-version:to:content-type:cc:content-type:date:

from:subject:to;

s=s1; t=1777397595; bh=5ySpHlrQAtLIMkXMZLTcwNaDqwVHt2VVFXLX8dhOFSE=;

b=OW/XcQnNqPuKv99TPaetoad3Pd+I6EZxQ0PTjmYogfsrqSX/KqetqNTc1KfSQQon2ELq

znXY/8wxfuAdnKJEMM9onOUk+nqT9m0HhP3u9JoR9r3hRogIeraNmiEakbEvNuLecZcb8S

jyWH6wh8jVx4OZfO+i40kwLE/sCnsASQq5z5Nk14lmnYSpZNh5jFBPIPYIvo+reyVcogam

jYAOhW1LRG5uY86/x26fp0vXN1z1TGwotr2LGXLmqsUlkUlRKH463dqfXTHHnXOyTVEhtx

+eoclSRMTA9SLFgyCy+frprT4ujYSevo/akKPR2uYbEjtiKkb6tnfyeRGBmH+Knw==

Received: by recvd-7d6bb58668-6xzp8 with SMTP id recvd-7d6bb58668-6xzp8-1-69F0EF5B-64

2026-04-28 17:33:15.613191327 +0000 UTC m=+589794.004855532

Received: from beefightcenter.fit (unknown)

by geopod-ismtpd-95 (SG)

with ESMTP id MlcSkqFFR-aqnHNiepFGrg

for ;

Tue, 28 Apr 2026 17:33:15.534 +0000 (UTC)

Message-Id: <29e1e5cef9b636eb39425f6d1c7e1b01@tengzhouyujie.com>

From: "Intelcom: Action Required"

Subject: Action Required: Verify Your Shipping Address

Date: Tue, 28 Apr 2026 17:33:15 +0000 (UTC)

X-Priority: 3

X-Mailer: Qkryprs Sfwmhwijzrpmuz Inandmjfauewf 145.19885.38933

Mime-Version: 1.0

X-SG-EID:

=?us-ascii?Q?u001=2EGM1ezKrRA2nnkzmYqQfR9eBAZy30VfJEQHIAfmzV2a3OVBq8ew7jjvDqo?=

=?us-ascii?Q?ABg3iUwhIlK7Ph7+eHPEt33SP4JiDfjRGhcZ6Qi?=

=?us-ascii?Q?cD+lzRTgGUU793KAreYAMpV08g2zaZK90ZSlePc?=

=?us-ascii?Q?ZXnG4TsaOltf940UcfxfGQrwRTx+JnN6RH8qAGN?=

=?us-ascii?Q?uj6WpPPhUkGA39OXsZmBhDmbURAeEtuoLK1nA61?=

=?us-ascii?Q?eb5sOA5v2VDGennbh1uN4Xq+TCdOT3r2g7jCKWj?= =?us-ascii?Q?Rrqe?=

To: root

X-Entity-ID: u001.7880lIEr0DVpgBOOWF90/A==

Content-Type: multipart/alternative;

boundary="9d934a68890d4b842515d25200055221"

X-Spam_score: 34.6

X-Spam_score_int: 346

X-Spam_bar: ++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Delivery Address Update — Action Required Your Shipment

Needs a Complete AddressAfter you review and submit the full address, we

will continue processing using the updated details.Status: This ship [...]





Content analysis details: (34.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

2.2 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: u53727460.ct.sendgrid.net]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.224.105 listed in bl.score.senderscore.com]

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Action Required: Verify Your Shipping Address



This is a multi-part message in MIME format.



--9d934a68890d4b842515d25200055221

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Delivery Address Update =E2=80=94 Action Required Your Shipment Need=

s a Complete AddressAfter you review and submit the full address, we will=

continue processing using the updated details.Status: This shipment is=

on hold until the delivery address is confirmed. Completing the step bel=

ow will allow us to move forward. Hello, While entering routing inform=

ation, we found that some address fields may be empty, incomplete, or not i=

n a format we can validate. To avoid returns or extra back-and-forth, pleas=

e use the link below to provide a clear, deliverable address in one go. =

We will re-validate the details after submission. If the check passes, serv=

ice will continue with the new address; if you have multiple linked shipmen=

ts, they will be updated to match the latest information. Open page to =

update address If you have already updated your address in this syst=

em or through another official channel, you do not need to do it again. It =

may take about 5=E2=80=9310 minutes for the status to refresh=E2=80=94pleas=

e check back shortly. This message was sent automatically based on your =

shipment activity. This inbox does not accept replies. Thank you for your =

cooperation=E2=80=94we appreciate your help getting your package to you. =20=

Paypal Crypto Phish from Microsoft outlook Part 2

Posted by Dave Yadallee on


=?utf-8?B?SGJzYXpqbXJlQWNnc3c4WWJHSXJ4b2VvTGtyRjZjVTJNOWVOc1ducVlUZFhP?=

=?utf-8?B?MUo2SXpEZ1FUOUVtQVZuMXp0SE16R25kb0hmZWllVmxheTBSVWRyWitweVVp?=

=?utf-8?B?YWRNakhpNUQ3cUF6NlFUazBHSnYvQitUd0JuNnU5Q1FRTnhxckZ6UDZSQUNq?=

=?utf-8?B?cU9xcEZ1akErOFZrVFNxZU50YU96eitnQURsb0pLS0hnZFg2YlhpczllVzdI?=

=?utf-8?B?eHB3QU5qY29xT0pJQXdGak5nQ0V5c0NzNjdEazc4c0p3ZVcvZHRPL2lBdVpp?=

=?utf-8?B?TDZaZnMyR3JJVW5aRldScjk4ZzZpeGxkQTlyOWQ3MzR2UnZ1UVRhUjFOYnFw?=

=?utf-8?B?SHVDV2g2M1F3aVdBODNxVFNTeGd0azdPRHllR01FYldPeldUN1QvOGRuTFVF?=

=?utf-8?B?MXd1OEdNZ0VLU3p0UmhvRVVwaWFXWnJkQnhRUTNzc2V3S1dBVmJEeWtlNWFI?=

=?utf-8?B?U1pTWWhMNkRMcmtDSDRyd0FqR2k0bE5MbmNpalJTVWNIY2JSRWxLZ29VcGtX?=

=?utf-8?B?ams0c2htOGpjSlU4TmMvQTVkYkEvZUZiM0VwLzhQaWNxU1U3RDZqay84bFhu?=

=?utf-8?B?Zjlrakd5cmU2WUtwSm4xRElRdktGUEsxYzlQdUZ3UjRaeDdsSi9nOWRpSmty?=

=?utf-8?B?ZWh5aFpzZ1ZCamZ0c21pbjc3WGRMN3Zublk5V1FCdkx2dkNtSmQxdU90dmsx?=

=?utf-8?B?V3EyQkdKRzhDUTFkaHA2Q3JDbEcrazB4WFUvQklDNzVBMzRZQmlTYVlteE8v?=

=?utf-8?B?K1lCNDJJb2t3QXVuRXRja29pT2NNSktqcTBhbWFtVGdKQVZJNk9JbzBHQ0Jr?=

=?utf-8?B?U2ZhWCtLZVZQUDBLblluNU9MRis5U0tJdHZTZ2txNWozS2NqK0VhVFd4VUhl?=

=?utf-8?B?VzV3aVNSMGo1eVk4M3FlMGJDbEFWNnpvQkE5a1dxZVREZGxMd1ZJbTJIRkRp?=

=?utf-8?Q?20ISlqgd2wBJOmNsvy4=3D?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Apr 2026 14:10:24.5613

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: f723f83c-ebed-4b70-8c1d-08dea52fe44f

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: AM3PEPF0000A799.eurprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN7PR18MB4397

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PayPal Crypto Transaction Notice utorok 28. apr 2026 Pripojiť

sa cez Google Meet https://meet.google.com/zry-isqh-tjw?hs=224 A recent transaction

request has been initiated on your PayPal account for the purchase of 0.0095

BTC, totaling $674.00 USD.



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[40.93.23.33 listed in will-spam-for-food.eu.org]

[40.93.23.33 listed in will-spam-for-food.eu.org]

[40.93.23.33 listed in will-spam-for-food.eu.org]

[40.93.23.33 listed in will-spam-for-food.eu.org]

[40.93.23.33 listed in will-spam-for-food.eu.org]

[40.93.23.33 listed in will-spam-for-food.eu.org]

[40.93.23.33 listed in will-spam-for-food.eu.org]

[40.93.23.33 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.23.33 listed in dnsbl.ahbl.org]

[40.93.23.33 listed in dnsbl.ahbl.org]

[40.93.23.33 listed in dnsbl.ahbl.org]

[40.93.23.33 listed in dnsbl.ahbl.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[dnsbl.ahbl.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[dnsbl.ahbl.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[dnsbl.ahbl.org]

[2603:10a6:400:297:cafe:0:0:52 listed in]

[dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:400:297:0:0:0:18 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.23.33 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.23.33 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.23.33 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.23.33 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.23.33 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.23.33 listed in wl.mailspike.net]

1.0 HK_RANDOM_FROM From username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.23.33 listed in bl.score.senderscore.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

Paypal Crypto Phish from Microsoft outlook Part 3

Posted by Dave Yadallee on


0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_TJ BODY: Odd Letter Triples with TJ

0.1 TW_SQ BODY: Odd Letter Triples with SQ

0.1 TW_RW BODY: Odd Letter Triples with RW

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 TO_IN_SUBJ To address is in Subject

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Crypto_Transaction_Notice_=40_ut_28=2E?=

=?UTF-8?Q?_apr_2026_=28cynthiaperez389903=40groups=2Eoutlook=2Ecom=29?=





Haresasz Nxysarwsa has invited you to PayPal Crypto Transaction Notice

Title: PayPal Crypto Transaction Notice

Location: https://meet.google.com/zry-isqh-tjw

When: April 28, 2026

Organizer:

Haresasz Nxysarwsa

Description: A recent transaction request has been initiated on your PayPal account for the purchase of 0.0095 BTC, totaling $674.00 USD.



If you did not authorize this activity, please contact our Account Security Team immediately at +1 (810) 268-2411 to review and cancel the request.



Invoice ID: PP-2026-6583

Transaction Date: April 28, 2026

Current Status: Completed



Please note: If no action is taken within 24 hours, the transaction may be finalized and irreversible.



Thank you for your attention,

PayPal Security Team



-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Pripojiť sa cez Google Meet: https://meet.google.com/zry-isqh-tjw



Viac o službe Meet sa dozviete na https://support.google.com/a/users/answer/9282720



Túto sekciu neupravujte.

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Attendees:



cynthiaperez389903@groups.outlook.com



PayPal Crypto Transaction Notice

Pripojiť sa cez Google Meet – A recent transaction request has been initiated on your PayPal account for the purchase of 0.0095 BTC, totaling $674.00 USD. If you did not authorize this activity, please contact our Account Securit



Pripojiť sa cez Google Meet

Odkaz na stretnutie

meet.google.com/zry-isqh-tjw

A recent transaction request has been initiated on your PayPal account for the purchase of 0.0095 BTC, totaling $674.00 USD.



If you did not authorize this activity, please contact our Account Security Team immediately at +1 (810) 268-2411 to review and cancel the request.



Invoice ID: PP-2026-6583

Transaction Date: April 28, 2026

Current Status: Completed



Please note: If no action is taken within 24 hours, the transaction may be finalized and irreversible.



Thank you for your attention,

PayPal Security Team

Kedy

utorok 28. apr 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Paypal Crypto Phish from Microsoft outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Apr 2026 10:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHlWu-00000000Ec4-47L0

for dave@doctor.nl2k.ab.ca;

Tue, 28 Apr 2026 10:43:24 -0600

Resent-From: The Doctor

Resent-Date: Tue, 28 Apr 2026 10:43:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus3azlp17012033.outbound.protection.outlook.com ([40.93.23.33]:11505 helo=PH8PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHj9u-000000008l7-3Gny

for doctor@doctor.nl2k.ab.ca;

Tue, 28 Apr 2026 08:11:43 -0600

Received: from CW1P302CA0020.GBRP302.PROD.OUTLOOK.COM (2603:10a6:400:297::18)

by SN7PR18MB4397.namprd18.prod.outlook.com (2603:10b6:806:104::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9846.27; Tue, 28 Apr

2026 14:10:26 +0000

Received: from AM3PEPF0000A799.eurprd04.prod.outlook.com

(2603:10a6:400:297:cafe::52) by CW1P302CA0020.outlook.office365.com

(2603:10a6:400:297::18) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.9846.26 via Frontend Transport; Tue,

28 Apr 2026 14:10:24 +0000

Authentication-Results: spf=pass (sender IP is 209.85.128.73)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.128.73 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.128.73; helo=mail-wm1-f73.google.com; pr=C

Received: from mail-wm1-f73.google.com (209.85.128.73) by

AM3PEPF0000A799.mail.protection.outlook.com (10.167.16.104) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9846.18

via Frontend Transport; Tue, 28 Apr 2026 14:10:24 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:D3428396B23F3C62C67372C3A101E8B71C08B666104BC911F449625E15530355;UpperCasedChecksum:70A7AE0506A6C933B0CD6CDF9B1A990731B1E2AFB075BB748E7A2E16B8620DCC;SizeAsReceived:3370;Count:15

Received: by mail-wm1-f73.google.com with SMTP id 5b1f17b1804b1-488d2cd2674so89394855e9.0

for ; Tue, 28 Apr 2026 07:10:24 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1777385424; x=1777990224; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=pVZxCR9esOtGRLwdsMDnW5sjUeviMaidQ7kxxNKNQ7w=;

b=doni7JZ+LnNk4LHlceUvQ2zI02Bq/afn6LvDynEw5y0sFGm5CgF22B0gR8cYhTYzSd

5C1w/mkFdo25l3l2wq3iBf6kBDzopGBgGO4ZLQOacJ6RwGBV15nWJ+PKbqIYM4csd5rA

1Tn/GryM5OGqn4FwPoVWyUjR/GqVmnI9NTgOM4mS/P8qxsRc1GkDS50/6Ck1Tw2sHTys

musCVHzDnUCUTQtvtwL/5xNEc6kboGYJwP9oz5rjRmuY78TX5vzR6Fs5ymyaET7FZ32x

CWE0OupUFKg++tZ65fuSMPHaOS0NzA/1s+43Bzjj9iHL36yE+bVqmxeouZR4+sPbWswk

U73Q==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1777385424; x=1777990224; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=pVZxCR9esOtGRLwdsMDnW5sjUeviMaidQ7kxxNKNQ7w=;

b=kubi9NtaCLVZnM5dq73ICoowvz35ulwWRfJGUCmmr6KcVIUHyXRqZhT6tDw1u2ToBy

8DQ69reISoUTn5Rhjlqd/n6xeH067eX0SzaasAEMhg4y4eCkClt3vVxheZyDvjmPSRfe

vRcX16zNTxMnWBysg8pbnXluSxYHwh9aSGcu/Xl/YKn1oUi07TKhh/m0mtiO8jL5Xm/p

T3NYlcnJqrtO/I7gCt4UqPBeu/CeIBqXVt+ru+a33eUTqsDqPGQDOeu8CwWmcGuIKyr0

d+hoWurkeWqtuxx3CqMQnB5hlzjH+jXTN+xnFv5U0RIJsdc2ykgi7g+crLvVvDDaySFZ

QfkQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1777385424; x=1777990224;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=pVZxCR9esOtGRLwdsMDnW5sjUeviMaidQ7kxxNKNQ7w=;

b=Ex33dMNTV8+5bPefa1xcxOd/SEPr6OcLyz1YjQIs9BM9nY1a7uzap5ZxdKpg7Vw897

JM8s2E0+STlTTEcGStEE1NEpBnFKceBuKQzwWyQNciG/RvuJwIjLqeIpERW1uyiY8R1z

IB+hhBRP5BPwYtVdIjaeKRloE99aARhgwGvsKJ5dYjLfdVBPtYOoXHy2K5/Q/fGwN0Z6

pS8nieGVpkbCOTGKIB+Du4BVsHbU/LkBBZSs/o6j4I/RldUPnjIbbywsfinjrvtUhE/m

gZb1TlvzjAqE5oh3H2T/NaWxGBJSqOVbwLX2MHF/jgCJCjTw2wpDsJKg81llOV/epxrg

H3vQ==

X-Gm-Message-State: AOJu0Yy/ZqtBbzFfYjvzFFhYSVZuOcEFHCWO2L+4WY12589PgnRHg8oD

rRi2QVgAwu4X6yDBmB3Knzsf19rqIXiU0xQN2/+gSjyG6WcE6sk8q/lkoW7fhLjlUQXb3xeJO+1

6OF4MNAZ0rlJvtZnVg5Fg5Y2C2+3jijHK85w=

MIME-Version: 1.0

X-Received: by 2002:a05:600c:8b2f:b0:485:3b9e:caa7 with SMTP id

5b1f17b1804b1-48a77b19d6fmr56340425e9.23.1777385423678; Tue, 28 Apr 2026

07:10:23 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Tue, 28 Apr 2026 14:10:23 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Crypto_Transaction_Notice_=40_ut_28=2E?=

=?UTF-8?Q?_apr_2026_=28cynthiaperez389903=40groups=2Eoutlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="000000000000ceb395065085ca5c"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: AM3PEPF0000A799:EE_|SN7PR18MB4397:EE_

X-MS-Office365-Filtering-Correlation-Id: f723f83c-ebed-4b70-8c1d-08dea52fe44f

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 209.85.128.73

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|41120799003|6019299003|9020799019|26000799027|16200799027|3151999006|9000799056|5139299004|1680799066|4040799016|32020799003|9400799043|461199028|24102599021|29080799006|26130799006|6092099016|21002599022;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?T2kxTHA5SnpBVWpOKzErUGxaWWtaRGRXdlJBbk1lNnA1N3h6NEZ2WXRoU0RP?=

=?utf-8?B?Y2wxMmt0OGt2bFpRUVNYakpwQ2lrTFg5NFBoTGJQbnpxc3J3ampvMytmbWR1?=

=?utf-8?B?NTA2bkd6aFZpWHJTc1R5bGJvZ3pRQmd4QVRqOC9rNm55dEYvemJLK3gvcThl?=

=?utf-8?B?elBpanNTN3h5elVSTmxOTDlqSXhhOW0xemNsV3R4K0U0SEVTOHhFc2V5UExh?=

=?utf-8?B?b01pcDc2VEhodTdma2QvMjFOQm5Td2NYYlpXT0hMWGFZQVoxSWw0WllTdURw?=

=?utf-8?B?K0g4S0xmbjBUQVhUd25IUU53NHV5NDE5NXhpYjJ6U3cxNzlTbGMrelQvUm81?=

=?utf-8?B?OFlLL3ZvN054bWZ1Rmx1Nm9MdWFLUmlWbFlzanRlVmZvOHA1N2JwV2RaQ2Fi?=

=?utf-8?B?aEloQWNzbVExaTlaK3BSa0ZVMFExdjIvb2gweEF5WS9zOU92WjJDZ1hjZWlC?=

=?utf-8?B?YnlJUk9XZ3dxZ1ZTK2tDdUJ2d2k2T1hGTUF1QUJna2hXaXpOWjBCWkI5T0JK?=

=?utf-8?B?RXdGTThEcHErc2ZOTXVlcHNGc0hJbE9qdTJrait0ZUZ4UTN4NWM3R1VML3BU?=

=?utf-8?B?M1pGNjZJVG9UdFo3RnE2R2pkMHBrdVdBTmtXbEVGMFMvM2x3RkVWYSsrVUUv?=

=?utf-8?B?UlZYNGZNR1BkNnRKalc1Z2NsRjZya1BOeDZkaDcrc2hZT1lEZHo4UHNFVSti?=

=?utf-8?B?SDhiaDFRYWQ4aXJLdlNBTlRCbXcweWh1SGxhalZEbWkyeFpDWGhDNVZ0czln?=

=?utf-8?B?WVFkWnlINUVveDFLRFBDVVRpUWhzcXpWOFMydlFNOGJIWDcrcWxXb2dWM0FB?=

=?utf-8?B?cjZLeHN3WFhQSkkrbUJ3OUMyVEpKTDlqdHR4dUhSQkNSVkt6RjFjbForL2Fi?=

=?utf-8?B?YXA4bE00bjJVYkZ1V1oxd0ZBK0V6T1d6d1FWelkyT0l0UFhSTmhRYlFaMlpT?=

=?utf-8?B?MEtiY3BZUTlYRkc4TExBUWkwVUF0QnBxTDdpYWlhZTNIbGNzQU9UbXhBSVcz?=

=?utf-8?B?UVhFMytUMTBSNitCTTVTYnRlbEZkNTYwRzVhd1NPMjFUWjFRdHhKeEg1RkJl?=

=?utf-8?B?ejFnUTQ5OGIwRnVKSUVzUGI0eENyam05NkNjdVA5ZDFSTldram95Z2dIcVhi?=

=?utf-8?B?S29YSDBjYVVCZG1KY2hEK3JnMkdLN2FwSUxUdHJRejJYK1hOVkhwNHhmNVpm?=

=?utf-8?B?RHBLekZ4UC9kcC9xeWViK1lvQnNnZG5NM0dpWE9sbS9FQWFoN1kvODBUTmNj?=

=?utf-8?B?SjVqREdRRmtZQzZlK255VVI2UzQxNjNWVjQxQytMQ2hUWEpsNnU3RkU5UkRV?=

=?utf-8?B?K2Vyd0tOYzh1bkw2MVNQK1JwSGs3dk1SRDNzV2ZyQ1NrQjhUV201RnFGWW5v?=

=?utf-8?B?T2l0WTI0TUZQaklrR0R1dDA4dUpaNXVLdU9pNFc3SGpFQVBsRUczZDlHNGFI?=

=?utf-8?B?U2tFMXFBQlZKSFExdEJkUnhNUUEzbENid09WdkhPdm9paU02U2ZNNnJKZmNs?=

=?utf-8?B?ODNRaXlRb0ZKU2RpZXlxRjdpQUY5RXd5ejFjVXhTL1VDN1orRm02aVNramNk?=

=?utf-8?B?U0Fpcy9aemlxTGE5a3EzMmxqbU54b0dqNk53MHVPYk5KamZuM3dvVlFTRUhn?=

=?utf-8?B?SHJtbEt2UzdubXRVVnV5aFhhSndVUmwrbnRaclEvc1dWb0VPai9nYitjckY4?=

=?utf-8?B?M3AzRE4wNUpIYXM3b0JwOFd2SHF3eFA1R016RndrR2sxSlFMUi9VMmxQNGZD?=

=?utf-8?B?VDdNZ1k2MWgwS3NCVG9ERVhYN3pFUDZaL21UcXA4UDNmVnNkZnY3cS9XVVJS?=

=?utf-8?B?SmRjMnBMUVJtSmdFeGlQdU9BREloV2tiRnI3cTE4TlJiYXlpTUZhRjVMd1Bp?=

=?utf-8?B?R2p5c1didFlMNzZEOTk1S2w5ZkY2YjJVdG1PWEUwbG9KRnI4NVRTQVpkcXpO?=

=?utf-8?B?M3BKZXFnc2dseWZlNDUzUjZ6REtLaDc1cWcvckhucnVwSXRqVDJtVnkwKzhp?=

=?utf-8?B?ajJRaXJsZ3ZLVE1wMkwrUHJYR1JQM01Wa3lZN0phOUxJZGVZSml3WDkzd1JD?=

=?utf-8?B?K0tKbGw4dXZGN0ZuLzJrTDBPUGhpTEFLRXlLSWQvTGxINWJibEg1a3B0ZUJE?=

=?utf-8?B?SUs0WGJTbk1TdS9yWFhhZWtvdFprd2pqWFRCTU9VSGJueWl3dFZGZTcwTmdX?=

=?utf-8?B?NW9JMTR6ZHZnN0t3NklvWWFPSmpBcnBaUVhCdzgwaTJrK0I5NnQyQVdsVDQ5?=

=?utf-8?B?VXBsTVYyeFE2eVNHV3drMnlrWmIrTzlzVWFxMytSUHpXRW1mY3V5SXRqbEgw?=

=?utf-8?B?amVQaUd4a291OVo3MHJEemptZ1RzcWc0cy9JT2lWME9FYkUvWG5vZjJSNWhP?=

=?utf-8?B?UUd3RytYcnFvdlFlb3I0eDlBOW5UaTkxZ2lVRlBPa01QcWorck9XaG1qSllr?=

Business financinf spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Apr 2026 07:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHicR-00000000Bis-39R9

for dave@doctor.nl2k.ab.ca;

Tue, 28 Apr 2026 07:36:55 -0600

Resent-From: The Doctor

Resent-Date: Tue, 28 Apr 2026 07:36:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sv249d239.static.dc.ngoinhamang.com ([103.54.249.239]:59695)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wHhb7-00000000HLN-2e1j

for doctor@doctor.nl2k.ab.ca;

Tue, 28 Apr 2026 06:31:38 -0600

Received: from eswil.com ([127.0.0.1])

by sv249d239.static.dc.ngoinhamang.com (Mail Server) with SMTP id 202604281930324764

for ; Tue, 28 Apr 2026 19:30:32 +0700

Reply-To: pauladamsinvestment@consultant.com

From: "Engr. Paul Maxwell"

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?UmU6IFlvdXIgTG9hbiBVcGRhdGXCoCBGcm9tIEVuZ3IuIFBhdWwgMg==?=

Date: 28 Apr 2026 14:30:31 +0200

Message-ID: <20260428143030.4EE3878E0D79AE38@eswil.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good Day, I am contacting you to know if you are open for

Investors into your company or business as we have potential investors who

are willing and able to provide financial support to companies, corporate

Org [...]



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.54.249.239 listed in will-spam-for-food.eu.org]

[103.54.249.239 listed in will-spam-for-food.eu.org]

[103.54.249.239 listed in will-spam-for-food.eu.org]

[103.54.249.239 listed in will-spam-for-food.eu.org]

[103.54.249.239 listed in will-spam-for-food.eu.org]

[103.54.249.239 listed in will-spam-for-food.eu.org]

[103.54.249.239 listed in will-spam-for-food.eu.org]

[103.54.249.239 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.54.249.239 listed in dnsbl.ahbl.org]

[103.54.249.239 listed in dnsbl.ahbl.org]

[103.54.249.239 listed in dnsbl.ahbl.org]

[103.54.249.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.54.249.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.54.249.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.54.249.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.54.249.239 listed in dnsbl.ahbl.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or

Generic rPTR

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To

0.0 FROM_MISSPACED From: missing whitespace

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.54.249.239 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[103.54.249.239 listed in wl.mailspike.net]

Subject: {SPAM?} =?UTF-8?B?UmU6IFlvdXIgTG9hbiBVcGRhdGXCoCBGcm9tIEVuZ3IuIFBhdWwgMg==?=







Good Day,

I am contacting you to know if you are open for Inv=

estors into your company or business as we have potential investors who are=

willing and able to provide financial support to companies, corporate Orga=

nizations and private Business Owners for business expansion.

We al=

so offer 1% commission to brokers who introduce project owners to us. For a=

possible collaboration we’re open to further discussions. 
=


Best regards;
Engr. Paul Maxwell


Int' Loan Advisor/Consultant Hill-Berry Green,
Douglas Isle of Man Unit=

ed Kingdom