Norton Phish from Google Gmail Part 4

Posted by Dave Yadallee on

/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Joshua Shirley: N0RT0N LIFELOCK Alohaexchange Kitz United States 1=

859 3123932 Welcome, This notice confirms that your subscription has renewe=

d automatically as scheduled. The renewal process was successfully complete=

d on 2026-02-27. We value your continued membership and look forward to ser=

ving you for the upcoming 12 Months term. Invoice Analytics Dashboard Recei=

pt receipt:- WKML-5104-ANF License Key:- 5fc166e4-73d5-4bb1-b2f3-d528bd0afe=

79 Purchased Item:- Secure Protection Plus Service Term:- 1-Year Processed =

Amount:- $ 541.44 For further inquiries, please contact Customer Support at=

1 859 312-3932. 2026 N0RT0N 360, LLC. All rights reserved. Mailing Address=

: 237 Lullwater Drive Annawan Il 61234 USA . . . . . . . . . . . . . . . . =

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .=

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . =

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .=

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . =

. . . . . . . . . . . . . . . . . . . ."/>
itemscope itemtype=3D"http://schema.org/Event">
s" content=3D"http://schema.org/EventScheduled"/>
r" itemscope itemtype=3D"http://schema.org/Organization">
name" content=3D"Google Calendar"/>
alendar" content=3D"nj0scchkgv6tpsg9b8jb5rtmoc"/>
ne; font-size: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0=

; width: 0; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">=

Transaction Number NGAT-1827 confirmation available
=3D"true">
ble border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" =

align=3D"center" style=3D"width:100%;" class=3D"body-container">=


a-hidden=3D"true">  

tation" align=3D"center" style=3D"width:100%;" class=3D"">

yle=3D"" class=3D"" align=3D"left">
a.org/EmailMessage">

N0RT0N LIFELOCK
Alohaexc=

hange Kitz
United States
1859 3123932

Welcome,

This notice confir=

ms that your subscription has renewed automatically as scheduled. The renew=

al process was successfully completed on 2026-02-27.

We value your contin=

ued membership and look forward to serving you for the upcoming 12 Months t=

erm.

Invoice Analytics Dashboard
Receipt receipt:- WKML-5104-ANF
Li=

cense Key:- 5fc166e4-73d5-4bb1-b2f3-d528bd0afe79
Purchased Item:- Secure=

Protection Plus
Service Term:- 1-Year
Processed Amount:- $ 541.44

=

For further inquiries, please contact Customer Support at 1 859 312-3932.<=

p>2026 N0RT0N 360, LLC. All rights reserved.
Mailing Address: 237 Lullwa=

ter Drive Annawan Il 61234 USA
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.
.
.
.=


.
.
.
.
.
.
.
.
.
.
.
.


>

0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"">=

=


ction: rtl; font-size: 0; padding: 24px 32px; text-align: left; vertical-al=

ign: top;" class=3D"main-container-inner">

: ltr; display: inline-block; vertical-align: top; width: 100%;overflow: hi=

dden; word-wrap: break-word;">
cing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main-column-table-=

ltr" style=3D"padding-right: 32px; padding-left: 0;;table-layout: fixed;"><=

tbody>=


op;">
tation" width=3D"100%" style=3D"table-layout: fixed;">

-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bot=

tom:2px;">

rif;font-weight: 400; font-size: 22px; line-height: 28px;color: #3c4043; te=

xt-decoration: none;" class=3D"primary-text" role=3D"presentation">
emprop=3D"name">Transaction Number NGAT-1827 confirmation available<=

/div>

word-break: break-word;;padding-bottom:24px;">

oboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px; li=

ne-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: non=

e;" class=3D"primary-text" role=3D"presentation">
>Friday=

Feb 27, 2026 =E2=8B=85 12am =E2=80=93 11:30pm (Eastern Time - New York)
pan>

left; word-break: break-word;;padding-bottom:24px;">

ly: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14p=

x; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration=

: none;" class=3D"primary-text" role=3D"presentation">
ellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-b=

ottom: 4px;">


lor: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing=

: antialiased;margin: 0; padding: 0;">Organizer


td>

reak: break-word;;padding-bottom:24px;">

sans-serif;font-style: normal; font-weight: 400; font-size: 14px; line-heig=

ht: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" cla=

ss=3D"primary-text" role=3D"presentation">
=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px=

;">


43; text-decoration: none;font-weight: 700;-webkit-font-smoothing: antialia=

sed;margin: 0; padding: 0;">Guests

(Guest list has be=

en hidden at organizer's request)


--000000000000f5dbb8064bcf3782--

Norton Phish from Google Gmail Part 2

Posted by Dave Yadallee on
--000000000000f5dbb8064bcf3782

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TjBSVDBOIExJRkVMT0NLIEFsb2hhZXhjaGFuZ2UgS2l0eiBVbml0ZWQgU3RhdGVzIDE4NTkgMzEy

MzkzMiBXZWxjb21lLCBUaGlzICANCm5vdGljZSBjb25maXJtcyB0aGF0IHlvdXIgc3Vic2NyaXB0

aW9uIGhhcyByZW5ld2VkIGF1dG9tYXRpY2FsbHkgYXMgIA0Kc2NoZWR1bGVkLiBUaGUgcmVuZXdh

bCBwcm9jZXNzIHdhcyBzdWNjZXNzZnVsbHkgY29tcGxldGVkIG9uIDIwMjYtMDItMjcuIFdlICAN

CnZhbHVlIHlvdXIgY29udGludWVkIG1lbWJlcnNoaXAgYW5kIGxvb2sgZm9yd2FyZCB0byBzZXJ2

aW5nIHlvdSBmb3IgdGhlICANCnVwY29taW5nIDEyIE1vbnRocyB0ZXJtLiBJbnZvaWNlIEFuYWx5

dGljcyBEYXNoYm9hcmQgUmVjZWlwdCByZWNlaXB0Oi0gIA0KV0tNTC01MTA0LUFORiBMaWNlbnNl

IEtleTotIDVmYzE2NmU0LTczZDUtNGJiMS1iMmYzLWQ1MjhiZDBhZmU3OSBQdXJjaGFzZWQgIA0K

SXRlbTotIFNlY3VyZSBQcm90ZWN0aW9uIFBsdXMgU2VydmljZSBUZXJtOi0gMS1ZZWFyIFByb2Nl

c3NlZCBBbW91bnQ6LSAkICANCjU0MS40NCBGb3IgZnVydGhlciBpbnF1aXJpZXMsIHBsZWFzZSBj

b250YWN0IEN1c3RvbWVyIFN1cHBvcnQgYXQgMSA4NTkgIA0KMzEyLTM5MzIuIDIwMjYgTjBSVDBO

IDM2MCwgTExDLiBBbGwgcmlnaHRzIHJlc2VydmVkLiBNYWlsaW5nIEFkZHJlc3M6IDIzNyAgDQpM

dWxsd2F0ZXIgRHJpdmUgQW5uYXdhbiBJbCA2MTIzNCAgDQpVU0EgLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4NCg0KVHJhbnNhY3Rpb24gTnVtYmVyIE5HQVQtMTgyNyBjb25maXJtYXRpb24g

YXZhaWxhYmxlDQpGcmlkYXkgRmViIDI3LCAyMDI2IOKLhSAxMmFtIOKAkyAxMTozMHBtDQpFYXN0

ZXJuIFRpbWUgLSBOZXcgWW9yaw0KDQoNCg0KT3JnYW5pemVyDQpKb3NodWEgU2hpcmxleQ0KYm9s

YXJpbmRlam95ODVAZ3N5cHMub3JnDQoNCg==

--000000000000f5dbb8064bcf3782

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

















Norton Phish from Google Gmail Part 3

Posted by Dave Yadallee on


=20



=20



=20



=20

















Norton Phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Feb 2026 11:42:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vw2mg-000000007Fo-2kCf

for dave@doctor.nl2k.ab.ca;

Fri, 27 Feb 2026 11:41:54 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Feb 2026 11:41:54 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f74.google.com ([209.85.161.74]:47277)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvz1u-00000000ESc-2HQM

for doctor@nl2k.ab.ca;

Fri, 27 Feb 2026 07:41:32 -0700

Received: by mail-oo1-f74.google.com with SMTP id 006d021491bc7-679c52164f5so16601740eaf.2

for ; Fri, 27 Feb 2026 06:40:35 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1772203229; x=1772808029; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=kELLkhFnykNDEOz3WXIFe5mf/Seo33Dgsxu8QUVYp2U=;

b=1x8n2dRniIxg8ff1K/iqocdl7t2ipznWb45XCWopOh8d4eocpvMhNMwpB5Gp8BwUFt

rIW4k1LZ4hX83BhX/ibSWpYaRLNePxzbTQpwTc0xeP45bzG6Oob+9u4wRrjZOVdKaWm2

EXIQsP9yoPaLy8GrxHO/LqbKW/Vx6xCrmhSs2tgRIYVdLw70AMp47Rc9ZpUAUHHjLOuR

BBAk6yoanbNs2tVcQ4UkPlwRCbgy5jV9PJQb9pNdvQFoGSXiRg11EmY8gp3BSWhyE5wg

4DPLI1bIlmDKA+XDONBwzk0xYawA8sKcku3A25St5X4ghT0vjrWkLyojT7RVE/WjgA8I

SHfA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gsyps-org.20230601.gappssmtp.com; s=20230601; t=1772203229; x=1772808029; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=kELLkhFnykNDEOz3WXIFe5mf/Seo33Dgsxu8QUVYp2U=;

b=bVkQVPLmA5sZpmX4cCadsIEz16z3yF0KLX4yzGdgOCBPDFXrSBEADO0e1NNyXchQvH

gdUA4HragZUApWOJQ//355GFehw44ejF6FVBNFwz+khLUI/bC+gfkG73ayM/pxEe9SzM

akAQxahjyAr1SSuP2hLfzkJhuofDZTlRD52EFau9ryYwOxKB/lrzwIg45uoJlSde0k3f

J9GpVkd8N9YmgyxztEEL606XqIfaHhb5dm2nqNI2jCZIS1V/8Y25n3ZlbTHXRDPZpFrl

8VLlpIiG2IYBCoyUvBBRxjZc2VlGIUedQFtJLVd3esm1z2vuAveJzTUqWMTH+f8GxlOX

sdvA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772203229; x=1772808029;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=kELLkhFnykNDEOz3WXIFe5mf/Seo33Dgsxu8QUVYp2U=;

b=MFaqRHmuVxi9QtZSSeTvOUd3lIN4tZOntEaaR7+i4D3q5FMsFq2IktfCzWvc9lETfk

erhitiPVprJSYYzYDU6WEqraKH0MA2QnPD733YSMM+Y5FM7dkMO3RLd3gwR41bwD1Wlx

oP865fJVDfsqnA0wuqdowLkEZvoOH2HyUfeMVsmAi6cVyalHvH4FasZ15oB/d9AYJWLT

0El9M928DICYpCrB9ScORGxfE8XHOyLCRzQaVNfM8IeM+4ocgVPL/LjyqXAdlpqPKIni

upGT+KmEP2CEaWmZiQbvawvCgv/aTH+y11EpSHNwYO2RYlZV/eWdL8X8mtHc5CCDr/4K

Qpvg==

X-Forwarded-Encrypted: i=1; AJvYcCXOfAd576rNy5hKrW6C5fZMrsMRPJolJZNpaWXiEW7Iw1RP0RLrXVEB4V9KTZ3ZCSyU5/ApgcU=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YwpXh4hNvpnNXJPRepdzsC9+OZRrnPLwfnI0RqyTXTVkqD6xNbx

gJhDvvDifGf4X/SqSF9NsjSPrVqvNMPhtEPaPg6CMFLVQfr0oqgSAKn43ThOthaoziDS7541nSx

o8p2hzKvaBGHFzdV4/JomRlE1muP7AgyeBGkf6qo9NDGNlg==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:2203:b0:679:c358:8ed4 with SMTP id

006d021491bc7-679faf192c2mt2110783eaf.46.1772203229200; Fri, 27 Feb 2026

06:40:29 -0800 (PST)

Reply-To: Joshua Shirley

Sender: Google Calendar

Message-ID:

Date: Fri, 27 Feb 2026 14:40:29 +0000

Subject: Transaction Number NGAT-1827 confirmation available

From: Joshua Shirley

Content-Type: multipart/alternative; boundary="000000000000f5dbb8064bcf3782"

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: N0RT0N LIFELOCK Alohaexchange Kitz United States 1859 3123932

Welcome, This notice confirms that your subscription has renewed automatically

as scheduled. The renewal process was successfully complete [...]



Content analysis details: (15.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.74 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

1.0 FUZZY_NORTON BODY: Obfuscated "norton"

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.74 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Transaction Number NGAT-1827 confirmation available

Web/SEO/App spam from Microsoft Outlook Part 3

Posted by Dave Yadallee on


--_000_JH0PR01MB63933D616E09A1F2B987B200C973AJH0PR01MB6393apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Hi,



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Are you looking to improve your website=92s SEO at an affordable price?<=

/i>



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

We guarantee better rankings and can get your site on the first page of =

Google, Yahoo, Bing, and more.



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Can I send you our best SEO package and proposal?



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Best regards,



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Nidhi



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_JH0PR01MB63933D616E09A1F2B987B200C973AJH0PR01MB6393apcp_--

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on


X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-3e488.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: JH0PR01MB6393.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 991120f2-d5d0-48cb-8e39-08de75f9a608

X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2026 12:13:42.5859

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR01MB4083

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Are you looking to improve your website’s SEO at an

affordable price? We guarantee better rankings and can get your site on the

first page of Google, Yahoo, Bing, and more.



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:94:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

[52.103.43.59 listed in dnsbl.ahbl.org]

[52.103.43.59 listed in dnsbl.ahbl.org]

[52.103.43.59 listed in dnsbl.ahbl.org]

[2603:1096:990:94:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:94:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:94:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:94:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[alicebarnsme(at)hotmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.59 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Keyword Intelligence:



--_000_JH0PR01MB63933D616E09A1F2B987B200C973AJH0PR01MB6393apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Are you looking to improve your website=92s SEO at an affordable price?



We guarantee better rankings and can get your site on the first page of Goo=

gle, Yahoo, Bing, and more.



Can I send you our best SEO package and proposal?



Best regards,

Nidhi



Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Feb 2026 05:16:01 -0700

Received: from mail-japaneastazolkn19012059.outbound.protection.outlook.com ([52.103.43.59]:59915 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvwkh-000000007LO-2dVN

for dave@doctor.nl2k.ab.ca;

Fri, 27 Feb 2026 05:15:38 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=gXVbzgIBFYPulDVr5EPrWSZh+l+bS0pRjbr6en1bszL6V0s6oWCav19oxPAxQuYCyg1xEUqYw4xIs2Qes/B5uSkrHz1cEaeOHwfWIzZ4rjELYOsv9OagIaFPfQys8v7IL5C7m3Eyglz+Pwsxxunu49JXD8jJZtS5xZI4BpEoke3uvabeFM6GcHgbNJi28SUy2j86FdpF8ESimwfyvk0HzzEXyP5D1key+n2ZpmXo2NegaEzdxTVoWIQLIPsHHurJG7n7BP9VCU2JX+GCD2NbKtUErqktrMV8LRvcd2UegjOhlQfrQVCwfmW4eMvKQKq5asykF3/3GgYGmsi2NDYz4g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=0dZRnn0FCkisuLxVYBkDn7FtItnHvncySXySMbbw5nE=;

b=KWl0OmD9onvDDlg8+swSdmjfcAKQPAS8Nj+yVE+q/rF5ZVx5yddH1wMRGCsXR6muj8dH1IA96PYi/sOptavuzbk2l6LopOQVwdopGgSESHGIBU4DbQTmXoPrcXrg+j5r4clDEfRESI4hmOizAJswbGYRccnY25XRUdTbjpXTLMJm4A19ckrKkENf6Ys/5Poa4dBAr3/TN5NrWK3ChMyzToLl7t5u99IRiOkXBodm1yXFHm5OG0IxreAe9nsnuVfJKuPIIyvhtzbK5gL7dCblEUqkjAEwjJsdp2oOguVmitVQ1xQHYhOQxYQy4A0zgzFi9PmkOIVhRgMNFpe6TfGpRw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=0dZRnn0FCkisuLxVYBkDn7FtItnHvncySXySMbbw5nE=;

b=fna+RfQbkxDFHo8A9jrwRIHmPfU93aWmSftdHDAN0UP3dEmjSgRYhN8d8aT16QRcqUT6Pg95sRbbGyk4nXBQtUQzEVH2GCVD+dlgTvL5NXx07Z53JQezOCSbkIxGUuxrT2cZOwxyXF9YUH+CCGJ6wI+uS01PxRjD9tABHyRTmJR3/c1xOTlf+ucObfwsePmlhfe/toM87lsMuRls0qusYmWhhYQGHW97FAJZmPivyEdhrQ/d6xyU+a/r5csBFNLcZ96cUBfXUTFylLRAe6VTK+Q4EwT4Qk0luSCWiqstS6sp+08s+QYvihOsjrtJwPQPxB8k6v7B5XbIHpe3x/jpFg==

Received: from JH0PR01MB6393.apcprd01.prod.exchangelabs.com

(2603:1096:990:94::5) by SI2PR01MB4083.apcprd01.prod.exchangelabs.com

(2603:1096:4:1a2::5) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.15; Fri, 27 Feb

2026 12:13:42 +0000

Received: from JH0PR01MB6393.apcprd01.prod.exchangelabs.com

([fe80::2aa4:3a80:e641:4e3d]) by JH0PR01MB6393.apcprd01.prod.exchangelabs.com

([fe80::2aa4:3a80:e641:4e3d%3]) with mapi id 15.20.9654.014; Fri, 27 Feb 2026

12:13:42 +0000

From: Aashi Rai

Subject: Keyword Intelligence:

Thread-Topic: Keyword Intelligence:

Thread-Index: AQHcp+FPqYJQbgHKoUKVZwExmgWkeA==

Date: Fri, 27 Feb 2026 12:13:42 +0000

Message-ID:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: JH0PR01MB6393:EE_|SI2PR01MB4083:EE_

x-ms-office365-filtering-correlation-id: 991120f2-d5d0-48cb-8e39-08de75f9a608

x-microsoft-antispam:

BCL:0;ARA:14566002|41001999006|15080799012|15030799006|8062599012|8060799015|31061999003|461199028|19110799012|7071999006|39105399006|20031999003|440099028|3412199025|102099032|41105399003|40105399003|39145399003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?eYQcDV797t7/bgfRV6hwFsiNFwpN+h4Wd4HSYYXyzN14xdsoQwhRTZf5?=

=?Windows-1252?Q?0ZUcIp52TcXHCmqZcLOYhd280PBW8UDRkasZXejtrFJjqN3kPl6YJ5g3?=

=?Windows-1252?Q?EFlh6zLPhmKK17fOedWc2UE3VW10A97gJlOHsyuCXb7UOECIKmDL3/9T?=

=?Windows-1252?Q?m14MV58//IkXoJgnjPp8Q+ZC0pOsWTaHJH08KiqTNH2DbeuhgMGbP36u?=

=?Windows-1252?Q?gLwhQk295bWC8j/r+0k8VfxUQDjSKFPi+nLPFiqZBetSkYJmZQ/QCR4z?=

=?Windows-1252?Q?DrEKJjELw+SqLfwwaS7b7w22EtRGIFWwRKGpHZD9bnZlcqcCLNM5+aFN?=

=?Windows-1252?Q?Ee8Bdw2HidpGdeiY8DH78tp4uMSqk7OuuJtZiMwrFFwUVqIH7zd/icxv?=

=?Windows-1252?Q?1BjvfGjrHD72DFGTvjkyYbl31LZe44WV46PuwKoBytVkVYPwvz8J0mUm?=

=?Windows-1252?Q?F9r45p2zIII6WwkBOrOWWRKl5ECc756kzp91Q4kBUC7FUVn+1fG8J/Rz?=

=?Windows-1252?Q?7zDVN8YTzCzd7rWWDdQxrAs5/1ai9ljAJDoRojTOsRz2k/3zzJ/qSTaV?=

=?Windows-1252?Q?dfEbCoso42gW22P7AdmrDrY3mmg7uzyiIvQFrxy/b9l2KhEomkEVwVfs?=

=?Windows-1252?Q?EjgOhjVk0LUvV85bwzmalJY7MvenhIH2h0Adt1/W1T8Huhz/s0IUBA0X?=

=?Windows-1252?Q?n/JgISZ5XHU55wsI2UcNd0OONVvuc2F44PI0Mdl5gICVQEchX5sZ+aBS?=

=?Windows-1252?Q?edVWEfEseto0lSgEYqzXNJAm34MreDDqh73mHjIJr7DH7rkaatx04z0I?=

=?Windows-1252?Q?D2x3/pj1Ndq+AJbreIgwJEly6wVzGN2mbF5nv/wvBOxAjCihuvpUho4U?=

=?Windows-1252?Q?SWOYL87wPY7JLQb2VjJj4jlqHwWcYnjgB7NMQWl6t7rQ3exVM07kb+Fx?=

=?Windows-1252?Q?VX9pGu9ofxoAsaQFjaxK1i3JX8rZXlML2kSxRFQq+0M8V2/aq0AWit8S?=

=?Windows-1252?Q?eRjo5Ygix+7z8VZGZFZp/yhVYv7yQ0ddVO9ngxYIX83u6Tt5yVm+Zych?=

=?Windows-1252?Q?XGks4o+pZn+xthhCgsvcYejHkOExd6MeO53pgE5z8OyuOekc3Gie+/VD?=

=?Windows-1252?Q?SKAzq2jxxt4/yEzr7xgbiceI9+yuXs54BYxsa/jhLQ7y+A=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?H4r0/233ccw+PnotT4gqTYct1IFQsTwbphRF13g1Rmy+Azt2gmGPi+9L?=

=?Windows-1252?Q?Ozq785Jy3kMi2JSB812jpILTXduXJEP8AzfPCDD0bDF3108lx1P+4h3b?=

=?Windows-1252?Q?lAebe4QUpMCzH6mdw2qgWreZQCvxlwNxhUbZN7keTEHHNrggSXg2tjMu?=

=?Windows-1252?Q?eBZbczppiRD6+oqv3dMaAa0fwOnCJnUJjBjheuVGAanNKAXPHGOvKO7c?=

=?Windows-1252?Q?p4TsrWrPnOS0i60G7/t10NzjWLAjr3Jm/ATqgPfyT0gT70DM5HimleOY?=

=?Windows-1252?Q?2UM8qOREy8NPcP7LalP5B1rcjk5Mt68nrpGJXljfdXQyoR4QrthIToTW?=

=?Windows-1252?Q?vps6pD+objcK6zhCujMTxaP/l9BFfqQ36lLNN6QKHJQgZo1JO9V5ga0n?=

=?Windows-1252?Q?pmqQd+U7KWQO1IEIzRsapEMBCQXJG6hPPIx1hoC/FojAChnH36gQT+aA?=

=?Windows-1252?Q?qWi3s2A1lUWxsu+h0g0lDKe5EmLHwQRIOAG5C/ozLNJXbZGGsxmARp5A?=

=?Windows-1252?Q?nd/ZuDNDs+9x2KDVssUM/Q4C6I4Gi6YExuMXCfo5TA/s+MUFRQ34KQZ4?=

=?Windows-1252?Q?rvWrzkLePXvnUCeZriFRzDeY4TQ19DabgaSwzLfID2/SPqbIDVMLkKwL?=

=?Windows-1252?Q?u5ICNujUxO4bpfVaS9EBg9i5p5u1uvt6Yt5wNmGdAzIHYYM7b7AIrA0y?=

=?Windows-1252?Q?WvO67nb8nvQjynExjIlAZDLK+JjngrM6S5qBR0EcFdlCEke32+HkelCr?=

=?Windows-1252?Q?ywGoOZTTnrc7uvA/mslRDJ42YFPGB1tVlKXtl3CxHDg5tmO6xJTSFaVa?=

=?Windows-1252?Q?M5/RNCxp1SiP8ffgJf7Th4/uFiXwBfpa/q18MyCl0JtGVD9EQlAOfjl0?=

=?Windows-1252?Q?4f6/h17WMpMRl1UhfrGdW7VqXB66fJ3xJlvn0ojnsUuwoP4pGeH9W//X?=

=?Windows-1252?Q?rvR3DAmqIAN2R9WKVkgmANQ0agCLkxuudzju8ns5GX7JjNDNp0sqG97m?=

=?Windows-1252?Q?vxUx83xfPnes8QBPlXJe3cyTRSNjZOCUq/0L8k9Lupw5GHTEB+hKCufV?=

=?Windows-1252?Q?Bvld8tNt0B4TDFABUnVWKvsKbjJ1p73uS3G6H/ApR+bpFICB4ykMi/jH?=

=?Windows-1252?Q?ouRRu0zrDgLR3iqusF3mXgQtD7Z6Faa0Oo9S15MDoCe9uFhpnXA8pgM9?=

=?Windows-1252?Q?LK1JIVli+PnRbofH6uFZETgWKUuWyzo3V4AG0DkLHnxfDZCqDJsiwMAD?=

=?Windows-1252?Q?xZLOtm9jeRX1vBB/kQaRbtpxK3U3x2aHEzcVA1h1qW2azYUgRQ8w2Fre?=

=?Windows-1252?Q?zftaNGP9Ri1maHi57Mx/wmtfoQZkGmE6GsgcXgTwmjaIxvTInSVdVBqm?=

=?Windows-1252?Q?G0V7Rc8bT5uM7qMJrJY4G7atnkDe86B1y3I8GRq/QMFkRXzqJAQVR9gk?=

=?Windows-1252?Q?8SsqjXnIrR6Ul5juyOsggtDb3qOh9FYG9OW8c2NNoIxNEbJdiQNieZp1?=

=?Windows-1252?Q?+S1fDfE6?=

Content-Type: multipart/alternative;

boundary="_000_JH0PR01MB63933D616E09A1F2B987B200C973AJH0PR01MB6393apcp_"

MIME-Version: 1.0

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: fusion360.agency]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too

expensive

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.196 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.196 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Designer\Developer



This is a multi-part message in MIME format.



------=_NextPart_000_43180_01DCA811.37AFC9D0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



I'm reaching out to see if there is anything that would like to create

Shopify & Wordpress, upgrade, repair, or redesign on your website or Mobile

App.



I am a web designer/developer that can do just about anything you can

imagine at very affordable prices.



If interested. May I send you sample, Portfolio and company Details?



Thank you for your time and consideration.



Kind Regards,

Aarti





------=_NextPart_000_43180_01DCA811.37AFC9D0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hello,

I'm reaching =

out to see if there is anything that would like to create Shopify & =

Wordpress, upgrade, repair, or redesign on your website or Mobile =

App.

I am a web designer/developer that can do just about =

anything you can imagine at very affordable prices.

If =

interested. May I send you sample, Portfolio and company =

Details?

Thank you for your time and consideration.

Kind =

Regards,
Aarti



------=_NextPart_000_43180_01DCA811.37AFC9D0--



Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Feb 2026 06:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvxyu-000000008I4-1ffl

for dave@doctor.nl2k.ab.ca;

Fri, 27 Feb 2026 06:34:12 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Feb 2026 06:34:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f196.google.com ([209.85.210.196]:59723)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvwo2-00000000Fqb-0JKu

for sales@nk.ca;

Fri, 27 Feb 2026 05:19:07 -0700

Received: by mail-pf1-f196.google.com with SMTP id d2e1a72fcca58-827270d50d4so2078452b3a.3

for ; Fri, 27 Feb 2026 04:18:07 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=fusion360.agency; s=google; t=1772194681; x=1772799481; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=vsweOtuLM2Lm4e23uWITqk37YhQqG7x6BD/eg/mcspw=;

b=VmOrg+rfax8jmpYsbwjfbQ8seF+AfUPrtT3GzuLjB6Qx6HyBlPxKNG9xsg1MIQfEev

Q01xg73b/A+P5V6EV42l2lshB4KBKArVVJDBO8FivolB/guWHwRvM7Wv87AVK6fP2i1J

Tao4Nyug9huXgQNngPutGcoz2ISMzWw/kSJfdtdNC3fjR8lnHeI63AGuU84HiotcbtJy

cA5Vyfc0NMAjI8E4VZ5ISzbhKtY6h4p5qWOdOL1oJMAjBwuccUrvCW+2QiZWMssw7fY2

X2w5EmJp55AYQAGFaqr1Sww2FSluMlOdzvxuFxWYvRbP/XOUVLZIJkaLl1vqiOpkomoq

FPuA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772194681; x=1772799481;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=vsweOtuLM2Lm4e23uWITqk37YhQqG7x6BD/eg/mcspw=;

b=NfSGXV4lRp19snLXOO4Yw5LnxTZGsj0c4o/+hhdxNB1LvFoov21JKPP7f7+hEzai83

aeE+ihMUecR4fP18bfjLrYBtgqqOgrehCeqGd8gk2BTn5t0orJd+nVXj55tRIRiwjI0P

6o46JyNAFHClrna45IxKD+9aailjIPkH5mhxzwuEzqCcuhXENOY/M8bRdvGKFqkxm12X

tVaCK3f4eavTPZBpq8t8gB1+hbbHqXsPkBzlNadfEr6MZuBrilEKNvUDMeeEtmOOblmG

gmYcz81u7jyQKZsng/bgVkuDN0z7rFoGbsqSkRVpIHWJC7PTvdC+yoPHBFZ3N2Rq459P

HSHg==

X-Gm-Message-State: AOJu0Yw9F8UjQup1p2zu4PU6Hix4RjK0waeJ9P6RcfC0Gxh2C/3wNZ/S

sC93EJiWuBGu62MC0MLUTRyRUKZTmXOGmVVvg075FFDtl+P5EYN1vFUf1tj0ytopN8Pgnxj3ERM

gz91ZYK4=

X-Gm-Gg: ATEYQzz+e/xTnIfpBMfUNYS8QDpYf15EXcsL2P50001jMvRMHN5rlZrhhBvSpIP+EMn

3McIKqn4pw+Xei1PMg7ho6fEsnbOqZ8yoyuT0PD9mff7yvlJ5jHQDzt0MAE7DGnAdKJuqB0oUbR

wY9Jg0CoVZBWK3ujmHokIuZ2QX/uRWn6GdAqjjbGYcej1mECxJHUjCW1sJoV6nOZ5YxHUdhDEG9

FKSxI9tWEm6s8eWmeGZh1LemNrJdHbutilnzZDKp90TjXLigdhrc34c0t5QNsPdFB+aDMnuSqPu

KevyjkEWWVMJiG+xHBW1YyFRDHqFo6/FbIqPvjN4VZCbhJ3Inb9V9FnuZkoivAJNGccVcBxJm8G

UQ9b58DXNg2Jnvq2TQVA0hiK/0gj/PPbgortJlzB40MvoBJLNghQmYU5rDLcv57wf0YHn7brMMl

M1RpIZY/0cIPoUAX8hSG5R5hS/UsY4elROvlt8NyHfZxizqWM=

X-Received: by 2002:a05:6a00:c92:b0:827:26b0:58d6 with SMTP id d2e1a72fcca58-8274da12a0fmr2802330b3a.47.1772194680808;

Fri, 27 Feb 2026 04:18:00 -0800 (PST)

Received: from Kanhaiya ([2401:4900:1c62:8055:8d45:ff2f:995f:dac4])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-82739ff34fesm4680621b3a.42.2026.02.27.04.17.59

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 27 Feb 2026 04:18:00 -0800 (PST)

From: "Aarti"

To:

Subject: Designer\Developer

Date: Fri, 27 Feb 2026 17:35:28 +0530

Message-ID: <4317f01dca7e3$1df78dd0$59e6a970$@agency>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_43180_01DCA811.37AFC9D0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdynuCkCbIRuchtjSRGqGKSmVj8gWg==

Content-Language: en-us

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I'm reaching out to see if there is anything that would

like to create Shopify & Wordpress, upgrade, repair, or redesign on your

website or Mobile App. I am a web designer/developer that can do just about

anything you can imagine at very affordable prices.



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c62:8055:8d45:ff2f:995f:dac4 listed]

[in dnsbl.ahbl.org]

Web/SEO/App spam from Microsoft Outlook Part 3

Posted by Dave Yadallee on
--_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);">

Hi,



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Would you be interested in building an app for your business? We are a prof=

essional Mobile Application Development Were based locally in Teddington, L=

ondon Company.



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Our Mobile App Development Services:



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Android & iOS Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

 E-commerce Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Catering Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

 Real Estate Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Cleaning apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

 Lawyer Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Hospital/Clinic Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

 Music & video apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Photographic Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

 Taxi Booking App



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Gym & Fitness Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

 Hotel-Booking Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Spa & Salon Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

 Grocery Apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

* ...and many more apps



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

I'd be pleased to send some of our created app samples & price list if =

you'd like to assess our work.



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">







os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Kind Regards,



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

David Smith



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

Business Development Manager



os_MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: rgb(0, 0, 0);" class=3D"elementToProof">

*********************************








--_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_--

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

[52.103.43.21 listed in dnsbl.ahbl.org]

[52.103.43.21 listed in dnsbl.ahbl.org]

[52.103.43.21 listed in dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:159:0:0:0:14 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.21 listed in dnsbl.ahbl.org]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.21 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.43.21 listed in bl.score.senderscore.com]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.21 listed in sa-accredit.habeas.com]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.21 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[seoworkmarketingwebsite(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.21 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:159:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

[52.103.43.21 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.43.21 listed in list.dnswl.org]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Mobile Apps?



--_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



Would you be interested in building an app for your business? We are a prof=

essional Mobile Application Development Were based locally in Teddington, L=

ondon Company.



Our Mobile App Development Services:



Android & iOS Apps

 E-commerce Apps

Catering Apps

 Real Estate Apps

Cleaning apps

 Lawyer Apps

Hospital/Clinic Apps

 Music & video apps

Photographic Apps

 Taxi Booking App

Gym & Fitness Apps

 Hotel-Booking Apps

Spa & Salon Apps

 Grocery Apps

...and many more apps



I'd be pleased to send some of our created app samples & price list if you'=

d like to assess our work.



Kind Regards,

David Smith

Business Development Manager

********************************

Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Feb 2026 04:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvwBq-000000002BR-0ZWP

for dave@doctor.nl2k.ab.ca;

Fri, 27 Feb 2026 04:39:26 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Feb 2026 04:39:25 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19010021.outbound.protection.outlook.com ([52.103.43.21]:53072 helo=TY3P286CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvsNA-000000009Bt-0UgF

for sales@nk.ca;

Fri, 27 Feb 2026 00:35:03 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Gv+irqd+FrDA1mMxo1m9aa1YaFNN93ZRN0w330TJhJJNyelGfK370LnIfnOMBQu/EsnizMAIPBt9oikkOzg1PbBHFeEEMHkm5Pn5TVpTE2gHUXZCFDNSIOyqpnq0xFowcJjUwXTIT95bMv+FpRLH3qSUaDaPebLha/DiH7JwJq64zfulfd/ml+7TjcyDyDUJipuUKn4eJx6ZnlSL/JZVC+0js0JpEOdLdyc2ApK/2qB/zKwGKK37Jc2TBlFC6EtOR2pc9h4L1Jet47rMI4DBsZqhIXj7VT5bmuoYrPKGthWEh8mC/k7WIKdEPSA5aiB3mhEBw/fiENsE5hZ1AFxPdA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fc/kN3E8SxRGKKRhqjjXLW15geWPLav+7qkn+kWmvxw=;

b=qnD19XAEqb38jN6/NX6HvucfMNlOjTAypmKpgQ+gUWhAERtKHbp1uGK4NqX2kcVyHO0R1D5qEt00QolpSQqUY1Wje4wfGaVnUefqoBN7d3wVTAH/ushVJfuSgEld+E5jAwU9rxfpwDDCEcqlbIbHZ4GjVHlOetLA4/grdvy2Uiwu82m1HPEy5W3KL/N4siDYDtXpbhcPJ2yZL4i1jEbQKmF91dw4dwdf3qPQ1t2LDoqV2vE7DlzcWKbXznKJ1khkcM5UMN4zPqzHx9lhZ0WBIhNDXNmK1J3I5cfy7UwW81N/ZiT8LlDgsfwzckMD+/dGz75SuOjY0d0VSlZSNzBkAA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=fc/kN3E8SxRGKKRhqjjXLW15geWPLav+7qkn+kWmvxw=;

b=EAKBeKcCrL4vXRCm9ZSTlb7lpcTLFkWqTUgUP9JVQIw3/rnosq5ViJXXgTUUiOwKH7CHADvVeap/vk0siGc8VlUs/T8XlHH3EyZtm2nHnslC2lb2RFZm2fyezdodFzpPpYEJLVwUE0wUIpwjD/dpJSL83n+G0zXMRMUK83PTsQkSGPV+ocPf1Ne8NLHYLGECmYwedjVQw6LduoX70Of+3FTrzWLHCgQ0U6kCSGyaIOoXXRbp6Im9+HH9+vo0ZC/j/PbUdD0JydrCs31Dm+gFc/iMvbAjcngDxokPnk6vjk1eU7oNoIBl/skIROsP+EbkUpL/g5EJC5rxGqQQCiz2KQ==

Received: from TYCPR01MB8309.jpnprd01.prod.outlook.com (2603:1096:400:159::14)

by OS3PR01MB7359.jpnprd01.prod.outlook.com (2603:1096:604:149::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.15; Fri, 27 Feb

2026 07:33:55 +0000

Received: from TYCPR01MB8309.jpnprd01.prod.outlook.com

([fe80::ae67:81ef:8f23:edd6]) by TYCPR01MB8309.jpnprd01.prod.outlook.com

([fe80::ae67:81ef:8f23:edd6%5]) with mapi id 15.20.9654.014; Fri, 27 Feb 2026

07:33:55 +0000

From: David Smith

Subject: Mobile Apps?

Thread-Topic: Mobile Apps?

Thread-Index: AQHcp7s0LbLDHbY2ZEyp3cLpSobTLw==

Date: Fri, 27 Feb 2026 07:33:55 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYCPR01MB8309:EE_|OS3PR01MB7359:EE_

x-ms-office365-filtering-correlation-id: 9e0efdce-bd36-4d4c-f1b5-08de75d29019

x-microsoft-antispam:

BCL:0;ARA:14566002|20031999003|39105399006|8060799015|8062599012|15030799006|15080799012|19110799012|31061999003|461199028|40105399003|3412199025|440099028|102099032|30101999003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?oQ1l0VVx28+MzVFRzqonIfp984HzW8ciTqIr1dnn/1vPemd/7KzLgiEvct?=

=?iso-8859-1?Q?eKpbC9CcyY2sQOf/U3y7TvmlazEBBxUbqOrirQuVQrmF60VAik0c6/+wUO?=

=?iso-8859-1?Q?XqR4xSJ9kAqMzrRZBLCnXAZBII/lVVUCxvj8y8bV8uP9FEE9aawpc6DOHm?=

=?iso-8859-1?Q?xckZDf9YJ4MDP7EVIPgfyuf5Fkaz5kHoEhueuJpM5DPxoDs3QNBYyrnnAM?=

=?iso-8859-1?Q?5ZKGE6JKixSPxdkFbodnp1yhxrl9UbvFL2CUbgW9X8iX+HUuuA70MA4F98?=

=?iso-8859-1?Q?J3j7M1rYwAPHmsv7KuAQr/uuNWTkSrWIgDC0hidjvdUPMwe9sVo5mVs8XS?=

=?iso-8859-1?Q?jaI48HVKzdj+VSKUW63Uxbu9TI9INUrRdFEps7dNAZcR4zMZcl6Tbbex0k?=

=?iso-8859-1?Q?UU2wggJO2KMNJXFOiHCyj7XZeBi4H0tuwWvIu4Wupy/q+3RVRemwil+I9L?=

=?iso-8859-1?Q?vWlB7nKCvNVuSS4F4tJzqmDvIiDlaIZ97nxcBiGu0hOsLKhOJMxlEUnIIn?=

=?iso-8859-1?Q?761oELHAuOEQ6/jqfZ+KY5OAANanJGPrByEHfgQQmXc8BWgsQDfhCPmfJm?=

=?iso-8859-1?Q?ehoqwYLHY8U1dXkFuoRr1BuUzTYxWJXx4vehUdANRZNJkuSBWvTboQwmoG?=

=?iso-8859-1?Q?Z0v2R9HNOIWobh3DhU6Jk03CWlctXeIITYm7rPa/Dp+9OAh8XuZOs7BpYV?=

=?iso-8859-1?Q?IkLNOXbQsco3cWJ1DiPFvTmsFb3RE5iQrge03IugnJ8XOWW/KpJRHYI/D9?=

=?iso-8859-1?Q?3yP1K+1WBWTb0+M/c/KaruI4JZy1nMy7fpYSYrZkefK2U7BNTf+QIZM1wY?=

=?iso-8859-1?Q?8PKeWZLaU9+Zwqe2jnYXtZdgihXLuKaqb5KuKd6QihNGiePlAWjCOVU8Xl?=

=?iso-8859-1?Q?CqGgA8XJiHM6QB8HyPt28uQ0EeUhMoYNiuroUL/aOqyd+r6g6J5CdK1nX+?=

=?iso-8859-1?Q?j2l7tzoNbw9YDBUs6457TA3dLdJka+RXLBktFP+M2wqKQ4gRZ9l4q/gcfe?=

=?iso-8859-1?Q?GJVYZtAgOX1W2hG/ix28I6zULs8YeyF0IdgFBN?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?Tk67gxh9/Kn7M6FRta+VxdTKHjj98kcSaXukG9GW+W5EhtKSCa0emGl2Vt?=

=?iso-8859-1?Q?XxjS0qsnGdsuStzZ3Q+AsRtP5ywkqQRThuSvygMnSvS2nPzLSTj+8hyus4?=

=?iso-8859-1?Q?HQ/f5f3VcPDxNjWQoUyKN8N0h6PC8OIlEyOJRXpEsS5SsUU6z+zKVs9XfC?=

=?iso-8859-1?Q?JG/zy49BIDE7OF3w2gAkPHdtnRXyN+bNZmrI1Sws1bzRtd0RUnfFQl8JY0?=

=?iso-8859-1?Q?51soQmN1dH++5QIpjkqHdo0iJD5DjAoe+f1Xc32Bpt7b8vbV3fYT6zWdZ4?=

=?iso-8859-1?Q?xJsukWSqg/WAGCNCUzTNN64JDMHHQn6n6lk+HuRk9CVnmME3TW9Jy+LlC+?=

=?iso-8859-1?Q?vBfQrkb7I0vpEvtenQh8qN0P5aDne1o6ZjHypm5bHHtt9Fw4WissyLfMDP?=

=?iso-8859-1?Q?KDoeOHjhs/zXuYq099KCkEVl1VGq33X5Off/8+Y+mEOWBLrT2cdj1NU0SI?=

=?iso-8859-1?Q?2ioLqLYbP03J4bjaeEx5KmNwXFdj/qWwG6Xa9aroqt7fcyrV8MT5E7dMOh?=

=?iso-8859-1?Q?cF0Du/iPWZWeLgnXI8pxyqdE3K7/vbSDjkEUfT8mRWNjrWnrVWY0wAwe9K?=

=?iso-8859-1?Q?pkIjLcGn4/yLSwfT7UfzEyxmc5uZPrzqDe4vay30p2dsVWgeINw98P1FaU?=

=?iso-8859-1?Q?SUiD9Qzr+oP6sgzoi1ceh1438DdKMrhKyl6EyJ3a1rJCsc4otaYd8YxYDq?=

=?iso-8859-1?Q?vl1IjedH0+ox7dLS8tLg5WTaqRHqNfjbTvJ65MvunK+kVKQgqcVJUto/RX?=

=?iso-8859-1?Q?+v0WwrHNkobXlxqb9JGHOLq9W3D/2Ylk73MC6+fdgw2afXiShgZLmHTgQA?=

=?iso-8859-1?Q?+7Jx6xWnyYDEG1ikg0tcQEGpuhKYN3dNsMuTwv7WrDnpUhIsrfW/CtE6oL?=

=?iso-8859-1?Q?6rMTZwtJw+Ce9VJvJKp9q4tcsxYRdXQUin+ynfdB0/Q4XmiO+GFGVC/WNJ?=

=?iso-8859-1?Q?wp1MzKyBkuPeIpiMUDxyESShFb1d6CzC8zu+Co3rR4N+fv7gJv14xJ3JIH?=

=?iso-8859-1?Q?OH0IETJUd8mjSEh6pI69Plg43J0OYyjmAX6YQ6vIug5uYRr/C7gXG9Ody4?=

=?iso-8859-1?Q?a11fa99yPxPyPDPQ3jNOoIkvGpvsKJfiXtt9Fb8qW4ZbgVA8wMc9EGOrN0?=

=?iso-8859-1?Q?bzVSJU3CEodRLdktI6L5GPCwrhdd5e4otKwmv27SvrDtZLatsa0V8bQBNv?=

=?iso-8859-1?Q?KlF6YdztKbwB0Ic5zTyIMGRKJhJRYSzoRVJP9w80y/0hFBWpah0CBDOKnj?=

=?iso-8859-1?Q?gcxlRsv5ppjWrXSM+HjAiagQ/q72Emo2szxJvNlm4zyBPZft4bSH0o7iSa?=

=?iso-8859-1?Q?IYDoegGGFxrsWZ1k01JGTI7E0eKa5D3ZaUvmh0qhvGY8dAHsudslqmfh1p?=

=?iso-8859-1?Q?6WjZliMCh2t0rwQ7vxaJ2wVHbGLc+kbkoWLre6kl/EzYxBIiSFB9m5pJR0?=

=?iso-8859-1?Q?SgHhhRM0ue8DNGisn/KrEHLffCiPmzHBbCpFX9VRInuWfbq7JTM4JO814Z?=

=?iso-8859-1?Q?MpPml5shylSWEgsRi5ZmbN1OpjfNg18+YlWrrgGIUb/g=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYCPR01MB83097B6821BF47A1E961EFB8BB73ATYCPR01MB8309jpnp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYCPR01MB8309.jpnprd01.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 9e0efdce-bd36-4d4c-f1b5-08de75d29019

X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2026 07:33:55.4340

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: OS3PR01MB7359

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Would you be interested in building an app for your business?

We are a professional Mobile Application Development Were based locally in

Teddington, London Company. Our Mobile App Development Services:

Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 15:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvja2-00000000DAW-3Xh2

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 15:11:34 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 15:11:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [178.238.45.181] (port=45286 helo=getluff.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvjRe-00000000Cli-3uhb

for doctor@nl2k.ab.ca;

Thu, 26 Feb 2026 15:03:02 -0700

Received: by getluff.com (Postfix, from userid 33)

id 1684A4E54E; Thu, 26 Feb 2026 22:02:07 +0000 (UTC)

To: doctor@nl2k.ab.ca

Subject: Your package is on hold!

Date: Thu, 26 Feb 2026 21:47:48 +0000

From: =?UTF-8?Q?Intelcom_-_Dragonfly=C2=AE?=

Message-ID:

List-Unsubscribe: mailto:bounce086-8nbcTJvrBuXsfeG@getluff.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1f25cb1ca6c3a1453dc6bd5568695907e"

Content-Transfer-Encoding: 8bit

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: notifications@ca.dragonflyinternational.com| French version

follows



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.1 TW_UX BODY: Odd Letter Triples with UX

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 A_HREF_NOWHERE A link tag with empty href

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 HREF_EMPTY_NORDNS Empty href + no rDNS

2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Your package is on hold!







notifications@ca.dragonflyinternational.com|



French version follows



Intelcom is now Dragonfly! Learn more



Tracking # INTLCMH868877879

Hi,

You have a package waiting to be delivered!



Your merchant has handed us your package INTLCMH868877879.







However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 4.95 payable via our secure form below:

Access the form



Questions? Take a look at our FAQ.



This is an automated email, please do not reply.







Intelcom est maintenant Dragonfly! En savoir plus



# de suivi INTLCMH868877879

Bonjour,

Vous avez un colis en attente de livraison!



Votre marchand nous a remis votre colis INTLCMH868877879.







Cependant, vous avez un colis en attente de livraison en raison du non-paiement des frais de douane, des taxes et des frais de courtage auxquels il est soumis conformément aux conditions générales de l'Agence des services frontaliers du Canada, d'un montant de 4.95 $ CA, payable via notre formulaire sécurisé ci-dessous :

Accéder au formulaire



Des questions? Consultez notre FAQ.



Ceci est un message automatisé, veuillez ne pas répondre à ce courriel.





Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 15:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvjZz-00000000DAK-0bnJ

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 15:11:31 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 15:11:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [178.238.45.181] (port=37302 helo=getluff.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvjK5-000000008Vz-47tP

for root@mail.nl2k.ab.ca;

Thu, 26 Feb 2026 14:55:14 -0700

Received: by getluff.com (Postfix, from userid 33)

id 222E749EA1; Thu, 26 Feb 2026 21:53:33 +0000 (UTC)

To: root@mail.nl2k.ab.ca

Subject: Your package is on hold!

Date: Thu, 26 Feb 2026 21:47:48 +0000

From: =?UTF-8?Q?Intelcom_-_Dragonfly=C2=AE?=

Message-ID: <415bb196958ecaa8ac516e47d3fa1499@getluff.com>

List-Unsubscribe: mailto:bounce086-8nbcTJvrBuXsfeG@getluff.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="114734529c7e6ddcf9dadacb3d7358afd"

Content-Transfer-Encoding: 8bit

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: notifications@ca.dragonflyinternational.com| French version

follows



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

[178.238.45.181 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

[178.238.45.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.181 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.1 TW_UX BODY: Odd Letter Triples with UX

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 A_HREF_NOWHERE A link tag with empty href

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 HREF_EMPTY_NORDNS Empty href + no rDNS

2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Your package is on hold!







French version follows



Intelcom is now Dragonfly! Learn more



Tracking # INTLCMH868877879

Hi,

You have a package waiting to be delivered!



Your merchant has handed us your package INTLCMH868877879.







However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 4.95 payable via our secure form below:

Access the form



Questions? Take a look at our FAQ.



This is an automated email, please do not reply.







Intelcom est maintenant Dragonfly! En savoir plus



# de suivi INTLCMH868877879

Bonjour,

Vous avez un colis en attente de livraison!



Votre marchand nous a remis votre colis INTLCMH868877879.







Cependant, vous avez un colis en attente de livraison en raison du non-paiement des frais de douane, des taxes et des frais de courtage auxquels il est soumis conformément aux conditions générales de l'Agence des services frontaliers du Canada, d'un montant de 4.95 $ CA, payable via notre formulaire sécurisé ci-dessous :

Accéder au formulaire



Des questions? Consultez notre FAQ.



Ceci est un message automatisé, veuillez ne pas répondre à ce courriel.







Oil and gas consulting spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Feb 2026 14:54:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvjIS-000000004Nv-0fik

for dave@doctor.nl2k.ab.ca;

Thu, 26 Feb 2026 14:53:24 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Feb 2026 14:53:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [162.240.175.204] (port=59734 helo=162-240-175-204.unifiedlayer.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vvjD1-000000002lW-3EMD

for sales@nk.ca;

Thu, 26 Feb 2026 14:47:56 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=acolyte.net

; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID

:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=9H65W6WYg2izDBX6Qncvyk4spLNI0g13DUBC3mBVGko=; b=os0I95AIGrVQuOeKJxzx1hpydm

z8Z+wxFE/aOYhg0XEx0CF62/qVY4gn37oWwJlmeUhkuGkm4Tx1ODi1yWnUqDQKuRw60IJ22mF0S2e

BWCNZgrkaptLyNc4U67iHdnWffx2HQ96dstwKCR7DfuRbPHXP3tUt8PPauXy/FC3F3Xhcbvs0PM+2

79luWhGXs4ejdXKqRouw6Zw7NzdAlaynt9eKfj3omYrPuz8PUvjlSvCr1rmEkcR5YrA+0a0MxKkK3

tv0ZcFN58ZybM4l5nqffTs+U8XKSWLzcR0R6PPod03A64erghoiIYrQhIDq2QS6BR4KN0qqzTGcC/

IZammbcA==;

Received: from [173.239.224.91] (port=22370 helo=[173.239.224.97])

by server-605666.acolytehosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.1)

(envelope-from )

id 1vvjCG-000000007Gv-1ZLx

for sales@nk.ca;

Thu, 26 Feb 2026 16:47:00 -0500

Reply-To: info@5sogc.com

From: "5 STAR OIL AND GAS CONSULTING LLC"

To: sales@nk.ca

Subject: OFFER

Date: 26 Feb 2026 13:46:55 -0800

Message-ID: <20260226121141.FF25B735F4E5919D@acolyte.net>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server-605666.acolytehosting.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - acolyte.net

X-Get-Message-Sender-Via: server-605666.acolytehosting.com: authenticated_id: webmaster@acolyte.net

X-Authenticated-Sender: server-605666.acolytehosting.com: webmaster@acolyte.net

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: TO whom it may concern, In need of affordable and reliable

petroleum storage, logistics, and handling services? We offer dependable

solutions aligned with international standards across key ports such as Rotterdam,

Fujairah, [...]



Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[173.239.224.91 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

[162.240.175.204 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[173.239.224.91 listed in dnsbl.ahbl.org]

[173.239.224.91 listed in dnsbl.ahbl.org]

[173.239.224.91 listed in dnsbl.ahbl.org]

[173.239.224.91 listed in dnsbl.ahbl.org]

[162.240.175.204 listed in dnsbl.ahbl.org]

[162.240.175.204 listed in dnsbl.ahbl.org]

[162.240.175.204 listed in dnsbl.ahbl.org]

[162.240.175.204 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[173.239.224.91 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[173.239.224.91 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[173.239.224.91 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[173.239.224.91 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname

(Split IP)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 HELO_MISC_IP Looking for more Dynamic IP Relays

Subject: {SPAM?} OFFER













TO whom it may concern,<=

br>
In need of affordable and reliable petroleum storage, logistics, and=

handling services?
We offer dependable solutions aligned with internati=

onal standards across key ports such as Rotterdam, Fujairah, Houston, and J=

urong.

From tank storage and terminal handling to fuel injection, bl=

ending, and vessel support, our team ensures seamless and compliant operati=

ons at every stage. With over a decade of experience, we are trusted by cli=

ents worldwide for:

🔹Strategic storage
🔹Efficient=

terminal handling
🔹Blending and fuel injection
🔹24/7=

operational support
🔹Full compliance with industry standards
>
If you're preparing to lift products and need a logistics partner that=

gets the job done right on time and within budget, we invite you to connec=

t with us today.

Reach out for more information or send us a direct=

message.

Regards,