Social Media Spam from Microsoft Part 2

ICAgICAgICAgICAgLypAZWRpdGFibGUqLyBiYWNrZ3JvdW5kLXNpemU6IGNvdmVyOw0K

ICAgICAgICAgICAgLypAZWRpdGFibGUqLyBib3JkZXItdG9wOiAwOw0KICAgICAgICAg

ICAgLypAZWRpdGFibGUqLyBib3JkZXItYm90dG9tOiAwOw0KICAgICAgICAgICAgLypA

ZWRpdGFibGUqLyBwYWRkaW5nLXRvcDogMDsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxl

Ki8gcGFkZGluZy1ib3R0b206IDA7DQogICAgICAgIH0NCiAgICAgICAgICAgIC8qDQog

ICAgICAgIEB0YWIgSGVhZGVyDQogICAgICAgIEBzZWN0aW9uIEhlYWRlciBUZXh0DQog

ICAgICAgICovDQogICAgICAgICAgICAuaGVhZGVyQ29udGFpbmVyIC5tY25UZXh0Q29u

dGVudCwgLmhlYWRlckNvbnRhaW5lciAubWNuVGV4dENvbnRlbnQgcCB7DQogICAgICAg

ICAgICAgICAgLypAZWRpdGFibGUqLyBjb2xvcjogIzgwODA4MDsNCiAgICAgICAgICAg

ICAgICAvKkBlZGl0YWJsZSovIGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7DQogICAgICAg

ICAgICAgICAgLypAZWRpdGFibGUqLyBmb250LXNpemU6IDE2cHg7DQogICAgICAgICAg

ICAgICAgLypAZWRpdGFibGUqLyBsaW5lLWhlaWdodDogMTUwJTsNCiAgICAgICAgICAg

ICAgICAvKkBlZGl0YWJsZSovIHRleHQtYWxpZ246IGxlZnQ7DQogICAgICAgICAgICB9

DQogICAgICAgICAgICAgICAgLyoNCiAgICAgICAgQHRhYiBIZWFkZXINCiAgICAgICAg

QHNlY3Rpb24gSGVhZGVyIExpbmsNCiAgICAgICAgKi8NCiAgICAgICAgICAgICAgICAu

aGVhZGVyQ29udGFpbmVyIC5tY25UZXh0Q29udGVudCBhLCAuaGVhZGVyQ29udGFpbmVy

IC5tY25UZXh0Q29udGVudCBwIGEgew0KICAgICAgICAgICAgICAgICAgICAvKkBlZGl0

YWJsZSovIGNvbG9yOiAjMDBBREQ4Ow0KICAgICAgICAgICAgICAgICAgICAvKkBlZGl0

YWJsZSovIGZvbnQtd2VpZ2h0OiBub3JtYWw7DQogICAgICAgICAgICAgICAgICAgIC8q

QGVkaXRhYmxlKi8gdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7DQogICAgICAgICAg

ICAgICAgfQ0KICAgICAgICAvKg0KICAgICAgICBAdGFiIEJvZHkNCiAgICAgICAgQHNl

Y3Rpb24gQm9keSBDb250YWluZXIgU3R5bGUNCiAgICAgICAgKi8NCiAgICAgICAgI3Rl

bXBsYXRlQm9keSB7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIGJhY2tncm91bmQt

Y29sb3I6ICNGRkZGRkY7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIGJhY2tncm91

bmQtaW1hZ2U6IG5vbmU7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIGJhY2tncm91

bmQtcmVwZWF0OiBuby1yZXBlYXQ7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIGJh

Y2tncm91bmQtcG9zaXRpb246IGNlbnRlcjsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxl

Ki8gYmFja2dyb3VuZC1zaXplOiBjb3ZlcjsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxl

Ki8gYm9yZGVyLXRvcDogMDsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8gYm9yZGVy

LWJvdHRvbTogMDsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8gcGFkZGluZy10b3A6

IDM2cHg7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIHBhZGRpbmctYm90dG9tOiA0

NXB4Ow0KICAgICAgICB9DQogICAgICAgIC8qDQogICAgICAgIEB0YWIgQm9keQ0KICAg

ICAgICBAc2VjdGlvbiBCb2R5IEludGVyaW9yIFN0eWxlDQogICAgICAgICovDQogICAg

ICAgIC5ib2R5Q29udGFpbmVyIHsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8gYmFj

a2dyb3VuZC1jb2xvcjogdHJhbnNwYXJlbnQ7DQogICAgICAgICAgICAvKkBlZGl0YWJs

ZSovIGJhY2tncm91bmQtaW1hZ2U6IG5vbmU7DQogICAgICAgICAgICAvKkBlZGl0YWJs

ZSovIGJhY2tncm91bmQtcmVwZWF0OiBuby1yZXBlYXQ7DQogICAgICAgICAgICAvKkBl

ZGl0YWJsZSovIGJhY2tncm91bmQtcG9zaXRpb246IGNlbnRlcjsNCiAgICAgICAgICAg

IC8qQGVkaXRhYmxlKi8gYmFja2dyb3VuZC1zaXplOiBjb3ZlcjsNCiAgICAgICAgICAg

IC8qQGVkaXRhYmxlKi8gYm9yZGVyLXRvcDogMDsNCiAgICAgICAgICAgIC8qQGVkaXRh

YmxlKi8gYm9yZGVyLWJvdHRvbTogMDsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8g

cGFkZGluZy10b3A6IDA7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIHBhZGRpbmct

Ym90dG9tOiAwOw0KICAgICAgICB9DQogICAgICAgICAgICAvKg0KICAgICAgICBAdGFi

IEJvZHkNCiAgICAgICAgQHNlY3Rpb24gQm9keSBUZXh0DQogICAgICAgICovDQogICAg

ICAgICAgICAuYm9keUNvbnRhaW5lciAubWNuVGV4dENvbnRlbnQsIC5ib2R5Q29udGFp

bmVyIC5tY25UZXh0Q29udGVudCBwIHsNCiAgICAgICAgICAgICAgICAvKkBlZGl0YWJs

ZSovIGNvbG9yOiAjODA4MDgwOw0KICAgICAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8g

Zm9udC1mYW1pbHk6IEhlbHZldGljYTsNCiAgICAgICAgICAgICAgICAvKkBlZGl0YWJs

ZSovIGZvbnQtc2l6ZTogMTZweDsNCiAgICAgICAgICAgICAgICAvKkBlZGl0YWJsZSov

IGxpbmUtaGVpZ2h0OiAxNTAlOw0KICAgICAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8g

dGV4dC1hbGlnbjogbGVmdDsNCiAgICAgICAgICAgIH0NCiAgICAgICAgICAgICAgICAv

Kg0KICAgICAgICBAdGFiIEJvZHkNCiAgICAgICAgQHNlY3Rpb24gQm9keSBMaW5rDQog

ICAgICAgICovDQogICAgICAgICAgICAgICAgLmJvZHlDb250YWluZXIgLm1jblRleHRD

b250ZW50IGEsIC5ib2R5Q29udGFpbmVyIC5tY25UZXh0Q29udGVudCBwIGEgew0KICAg

ICAgICAgICAgICAgICAgICAvKkBlZGl0YWJsZSovIGNvbG9yOiAjMDBBREQ4Ow0KICAg

ICAgICAgICAgICAgICAgICAvKkBlZGl0YWJsZSovIGZvbnQtd2VpZ2h0OiBub3JtYWw7

DQogICAgICAgICAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8gdGV4dC1kZWNvcmF0aW9u

OiB1bmRlcmxpbmU7DQogICAgICAgICAgICAgICAgfQ0KICAgICAgICAvKg0KICAgICAg

ICBAdGFiIEZvb3Rlcg0KICAgICAgICBAc2VjdGlvbiBGb290ZXIgU3R5bGUNCiAgICAg

ICAgKi8NCiAgICAgICAgI3RlbXBsYXRlRm9vdGVyIHsNCiAgICAgICAgICAgIC8qQGVk

aXRhYmxlKi8gYmFja2dyb3VuZC1jb2xvcjogIzMzMzMzMzsNCiAgICAgICAgICAgIC8q

QGVkaXRhYmxlKi8gYmFja2dyb3VuZC1pbWFnZTogbm9uZTsNCiAgICAgICAgICAgIC8q

QGVkaXRhYmxlKi8gYmFja2dyb3VuZC1yZXBlYXQ6IG5vLXJlcGVhdDsNCiAgICAgICAg

ICAgIC8qQGVkaXRhYmxlKi8gYmFja2dyb3VuZC1wb3NpdGlvbjogY2VudGVyOw0KICAg

ICAgICAgICAgLypAZWRpdGFibGUqLyBiYWNrZ3JvdW5kLXNpemU6IGNvdmVyOw0KICAg

ICAgICAgICAgLypAZWRpdGFibGUqLyBib3JkZXItdG9wOiAwOw0KICAgICAgICAgICAg

LypAZWRpdGFibGUqLyBib3JkZXItYm90dG9tOiAwOw0KICAgICAgICAgICAgLypAZWRp

dGFibGUqLyBwYWRkaW5nLXRvcDogNDVweDsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxl

Ki8gcGFkZGluZy1ib3R0b206IDYzcHg7DQogICAgICAgIH0NCiAgICAgICAgLyoNCiAg

ICAgICAgQHRhYiBGb290ZXINCiAgICAgICAgQHNlY3Rpb24gRm9vdGVyIEludGVyaW9y

IFN0eWxlDQogICAgICAgICovDQogICAgICAgIC5mb290ZXJDb250YWluZXIgew0KICAg

ICAgICAgICAgLypAZWRpdGFibGUqLyBiYWNrZ3JvdW5kLWNvbG9yOiB0cmFuc3BhcmVu

dDsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8gYmFja2dyb3VuZC1pbWFnZTogbm9u

ZTsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8gYmFja2dyb3VuZC1yZXBlYXQ6IG5v

LXJlcGVhdDsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8gYmFja2dyb3VuZC1wb3Np

dGlvbjogY2VudGVyOw0KICAgICAgICAgICAgLypAZWRpdGFibGUqLyBiYWNrZ3JvdW5k

LXNpemU6IGNvdmVyOw0KICAgICAgICAgICAgLypAZWRpdGFibGUqLyBib3JkZXItdG9w

OiAwOw0KICAgICAgICAgICAgLypAZWRpdGFibGUqLyBib3JkZXItYm90dG9tOiAwOw0K

ICAgICAgICAgICAgLypAZWRpdGFibGUqLyBwYWRkaW5nLXRvcDogMDsNCiAgICAgICAg

ICAgIC8qQGVkaXRhYmxlKi8gcGFkZGluZy1ib3R0b206IDA7DQogICAgICAgIH0NCiAg

ICAgICAgICAgIC8qDQogICAgICAgIEB0YWIgRm9vdGVyDQogICAgICAgIEBzZWN0aW9u

IEZvb3RlciBUZXh0DQogICAgICAgICovDQogICAgICAgICAgICAuZm9vdGVyQ29udGFp

bmVyIC5tY25UZXh0Q29udGVudCwgLmZvb3RlckNvbnRhaW5lciAubWNuVGV4dENvbnRl

bnQgcCB7DQogICAgICAgICAgICAgICAgLypAZWRpdGFibGUqLyBjb2xvcjogI0ZGRkZG

RjsNCiAgICAgICAgICAgICAgICAvKkBlZGl0YWJsZSovIGZvbnQtZmFtaWx5OiBIZWx2

ZXRpY2E7DQogICAgICAgICAgICAgICAgLypAZWRpdGFibGUqLyBmb250LXNpemU6IDEy

cHg7DQogICAgICAgICAgICAgICAgLypAZWRpdGFibGUqLyBsaW5lLWhlaWdodDogMTUw

JTsNCiAgICAgICAgICAgICAgICAvKkBlZGl0YWJsZSovIHRleHQtYWxpZ246IGNlbnRl

cjsNCiAgICAgICAgICAgIH0NCiAgICAgICAgICAgICAgICAvKg0KICAgICAgICBAdGFi

IEZvb3Rlcg0KICAgICAgICBAc2VjdGlvbiBGb290ZXIgTGluaw0KICAgICAgICAqLw0K

ICAgICAgICAgICAgICAgIC5mb290ZXJDb250YWluZXIgLm1jblRleHRDb250ZW50IGEs

IC5mb290ZXJDb250YWluZXIgLm1jblRleHRDb250ZW50IHAgYSB7DQogICAgICAgICAg

ICAgICAgICAgIC8qQGVkaXRhYmxlKi8gY29sb3I6ICNGRkZGRkY7DQogICAgICAgICAg

ICAgICAgICAgIC8qQGVkaXRhYmxlKi8gZm9udC13ZWlnaHQ6IG5vcm1hbDsNCiAgICAg

ICAgICAgICAgICAgICAgLypAZWRpdGFibGUqLyB0ZXh0LWRlY29yYXRpb246IHVuZGVy

bGluZTsNCiAgICAgICAgICAgICAgICB9DQoNCiAgICAgICAgQG1lZGlhIG9ubHkgc2Ny

ZWVuIGFuZCAobWluLXdpZHRoOjc2OHB4KSB7DQogICAgICAgICAgICAudGVtcGxhdGVD

b250YWluZXIgew0KICAgICAgICAgICAgICAgIHdpZHRoOiA2MDBweCAhaW1wb3J0YW50

Ow0KICAgICAgICAgICAgfQ0KICAgICAgICB9DQoNCiAgICAgICAgQG1lZGlhIG9ubHkg

c2NyZWVuIGFuZCAobWF4LXdpZHRoOiA0ODBweCkgew0KICAgICAgICAgICAgYm9keSwg

dGFibGUsIHRkLCBwLCBhLCBsaSwgYmxvY2txdW90ZSB7DQogICAgICAgICAgICAgICAg

LXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBub25lICFpbXBvcnRhbnQ7DQogICAgICAg

ICAgICB9DQogICAgICAgIH0NCg0KICAgICAgICBAbWVkaWEgb25seSBzY3JlZW4gYW5k

IChtYXgtd2lkdGg6IDQ4MHB4KSB7DQogICAgICAgICAgICBib2R5IHsNCiAgICAgICAg

ICAgICAgICB3aWR0aDogMTAwJSAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgICAgIG1p

bi13aWR0aDogMTAwJSAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgfQ0KICAgICAgICB9

DQoNCiAgICAgICAgQG1lZGlhIG9ubHkgc2NyZWVuIGFuZCAobWF4LXdpZHRoOiA0ODBw

eCkgew0KICAgICAgICAgICAgLm1jbkltYWdlIHsNCiAgICAgICAgICAgICAgICB3aWR0

aDogMTAwJSAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgfQ0KICAgICAgICB9DQoNCiAg

ICAgICAgQG1lZGlhIG9ubHkgc2NyZWVuIGFuZCAobWF4LXdpZHRoOiA0ODBweCkgew0K

ICAgICAgICAgICAgLm1jbkNhcnRDb250YWluZXIsIC5tY25DYXB0aW9uVG9wQ29udGVu

dCwgLm1jblJlY0NvbnRlbnRDb250YWluZXIsIC5tY25DYXB0aW9uQm90dG9tQ29udGVu

dCwgLm1jblRleHRDb250ZW50Q29udGFpbmVyLCAubWNuQm94ZWRUZXh0Q29udGVudENv

bnRhaW5lciwgLm1jbkltYWdlR3JvdXBDb250ZW50Q29udGFpbmVyLCAubWNuQ2FwdGlv

bkxlZnRUZXh0Q29udGVudENvbnRhaW5lciwgLm1jbkNhcHRpb25SaWdodFRleHRDb250

ZW50Q29udGFpbmVyLCAubWNuQ2FwdGlvbkxlZnRJbWFnZUNvbnRlbnRDb250YWluZXIs

IC5tY25DYXB0aW9uUmlnaHRJbWFnZUNvbnRlbnRDb250YWluZXIsIC5tY25JbWFnZUNh

cmRMZWZ0VGV4dENvbnRlbnRDb250YWluZXIsIC5tY25JbWFnZUNhcmRSaWdodFRleHRD

b250ZW50Q29udGFpbmVyIHsNCiAgICAgICAgICAgICAgICBtYXgtd2lkdGg6IDEwMCUg

IWltcG9ydGFudDsNCiAgICAgICAgICAgICAgICB3aWR0aDogMTAwJSAhaW1wb3J0YW50

Ow0KICAgICAgICAgICAgfQ0KICAgICAgICB9DQoNCiAgICAgICAgQG1lZGlhIG9ubHkg

c2NyZWVuIGFuZCAobWF4LXdpZHRoOiA0ODBweCkgew0KICAgICAgICAgICAgLm1jbkJv

eGVkVGV4dENvbnRlbnRDb250YWluZXIgew0KICAgICAgICAgICAgICAgIG1pbi13aWR0

aDogMTAwJSAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgfQ0KICAgICAgICB9DQoNCiAg

ICAgICAgQG1lZGlhIG9ubHkgc2NyZWVuIGFuZCAobWF4LXdpZHRoOiA0ODBweCkgew0K

ICAgICAgICAgICAgLm1jbkltYWdlR3JvdXBDb250ZW50IHsNCiAgICAgICAgICAgICAg

ICBwYWRkaW5nOiA5cHggIWltcG9ydGFudDsNCiAgICAgICAgICAgIH0NCiAgICAgICAg

fQ0KDQogICAgICAgIEBtZWRpYSBvbmx5IHNjcmVlbiBhbmQgKG1heC13aWR0aDogNDgw

cHgpIHsNCiAgICAgICAgICAgIC5tY25DYXB0aW9uTGVmdENvbnRlbnRPdXRlciAubWNu

VGV4dENvbnRlbnQsIC5tY25DYXB0aW9uUmlnaHRDb250ZW50T3V0ZXIgLm1jblRleHRD

b250ZW50IHsNCiAgICAgICAgICAgICAgICBwYWRkaW5nLXRvcDogOXB4ICFpbXBvcnRh

bnQ7DQogICAgICAgICAgICB9DQogICAgICAgIH0NCg0KICAgICAgICBAbWVkaWEgb25s

eSBzY3JlZW4gYW5kIChtYXgtd2lkdGg6IDQ4MHB4KSB7DQogICAgICAgICAgICAubWNu

SW1hZ2VDYXJkVG9wSW1hZ2VDb250ZW50LCAubWNuQ2FwdGlvbkJsb2NrSW5uZXIgLm1j

bkNhcHRpb25Ub3BDb250ZW50Omxhc3QtY2hpbGQgLm1jblRleHRDb250ZW50IHsNCiAg

ICAgICAgICAgICAgICBwYWRkaW5nLXRvcDogMThweCAhaW1wb3J0YW50Ow0KICAgICAg

ICAgICAgfQ0KICAgICAgICB9DQoNCiAgICAgICAgQG1lZGlhIG9ubHkgc2NyZWVuIGFu

ZCAobWF4LXdpZHRoOiA0ODBweCkgew0KICAgICAgICAgICAgLm1jbkltYWdlQ2FyZEJv

dHRvbUltYWdlQ29udGVudCB7DQogICAgICAgICAgICAgICAgcGFkZGluZy1ib3R0b206

IDlweCAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgfQ0KICAgICAgICB9DQoNCiAgICAg

ICAgQG1lZGlhIG9ubHkgc2NyZWVuIGFuZCAobWF4LXdpZHRoOiA0ODBweCkgew0KICAg

ICAgICAgICAgLm1jbkltYWdlR3JvdXBCbG9ja0lubmVyIHsNCiAgICAgICAgICAgICAg

ICBwYWRkaW5nLXRvcDogMCAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgICAgIHBhZGRp

bmctYm90dG9tOiAwICFpbXBvcnRhbnQ7DQogICAgICAgICAgICB9DQogICAgICAgIH0N

Cg0KICAgICAgICBAbWVkaWEgb25seSBzY3JlZW4gYW5kIChtYXgtd2lkdGg6IDQ4MHB4

KSB7DQogICAgICAgICAgICAubWNuSW1hZ2VHcm91cEJsb2NrT3V0ZXIgew0KICAgICAg

ICAgICAgICAgIHBhZGRpbmctdG9wOiA5cHggIWltcG9ydGFudDsNCiAgICAgICAgICAg

ICAgICBwYWRkaW5nLWJvdHRvbTogOXB4ICFpbXBvcnRhbnQ7DQogICAgICAgICAgICB9

DQogICAgICAgIH0NCg0KICAgICAgICBAbWVkaWEgb25seSBzY3JlZW4gYW5kIChtYXgt

Social Media Spam from Microsoft Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 18 Jan 2026 06:34:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vhStq-000000001mx-3U89

for dave@doctor.nl2k.ab.ca;

Sun, 18 Jan 2026 06:33:02 -0700

Resent-From: The Doctor

Resent-Date: Sun, 18 Jan 2026 06:33:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp.cluodme.com ([104.214.224.93]:51418)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vhSdb-00000000K6v-3IMH

for sales@nk.ca;

Sun, 18 Jan 2026 06:16:25 -0700

dkim-signature: v=1; a=rsa-sha256; d=cluodme.com; s=dkim1;

c=relaxed/relaxed; q=dns/txt; h=From:Reply-To:Subject:Date:Message-ID:To:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=Q73xgRykMqeXLi8sOahASyGoQF2tL3SYdOSIUvS4Pfs=;

b=rBXlewSrl4f9JjfU/AI+KBG8OO0J3sCL6QXLoqwjKZ2PoQYUqSYISrA7AtR3UbTc6od7uQvgZG1IY7oN8ySkA0fMLrb4oERs9fKOVzHM6RZR5wQL/blEMzgSk+mj3J880Y0rs6ysUKk7O0oEQXsq/TfYMg9oiBB0biLkTtKiHyhE6RnFX829vKaeLAO7jwTrhviajEgfZCfUVv9nY78oFre7AoOp/BA7ByItUha7LU/VO2Hatw1duQRrXs

FgmE04RdTdVgcbnsxRY9mr6xRwVLWjxILLG+Er8XR+KWsw9esOZNSAR10fN6rIFUoo77S27t+1aCvdkco9xnDm25TVQA==

Received: from VM-IIS (Unknown [104.45.10.112])

by smtp.cluodme.com with ESMTPSA

(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256)

; Sun, 18 Jan 2026 14:15:21 +0100

Message-ID: <06CAF382-02EC-4DBA-B205-91556CB4FF60@smtp.cluodme.com>

MIME-Version: 1.0

From: "PowerYourSocial"

To: sales@nk.ca

Reply-To: "PowerYourSocial"

Date: 18 Jan 2026 14:15:21 +0100

Subject: New 20% OFF

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64



PCFkb2N0eXBlIGh0bWw+DQo8aHRtbCB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMTk5

OS94aHRtbCIgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHht

bG5zOm89InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSI+DQo8

aGVhZD4NCiAgICA8bWV0YSBjaGFyc2V0PSJVVEYtOCI+DQogICAgPG1ldGEgaHR0cC1l

cXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1lZGdlIj4NCiAgICA8bWV0

YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0

aWFsLXNjYWxlPTEiPg0KICAgIDx0aXRsZT5OZXdzPC90aXRsZT4NCg0KICAgIDxzdHls

ZSB0eXBlPSJ0ZXh0L2NzcyI+DQogICAgICAgIHAgew0KICAgICAgICAgICAgbWFyZ2lu

OiAxMHB4IDA7DQogICAgICAgICAgICBwYWRkaW5nOiAwOw0KICAgICAgICB9DQoNCiAg

ICAgICAgdGFibGUgew0KICAgICAgICAgICAgYm9yZGVyLWNvbGxhcHNlOiBjb2xsYXBz

ZTsNCiAgICAgICAgfQ0KDQogICAgICAgIGgxLCBoMiwgaDMsIGg0LCBoNSwgaDYgew0K

ICAgICAgICAgICAgZGlzcGxheTogYmxvY2s7DQogICAgICAgICAgICBtYXJnaW46IDA7

DQogICAgICAgICAgICBwYWRkaW5nOiAwOw0KICAgICAgICB9DQoNCiAgICAgICAgaW1n

LCBhIGltZyB7DQogICAgICAgICAgICBib3JkZXI6IDA7DQogICAgICAgICAgICBoZWln

aHQ6IGF1dG87DQogICAgICAgICAgICBvdXRsaW5lOiBub25lOw0KICAgICAgICAgICAg

dGV4dC1kZWNvcmF0aW9uOiBub25lOw0KICAgICAgICB9DQoNCiAgICAgICAgYm9keSwg

I2JvZHlUYWJsZSwgI2JvZHlDZWxsIHsNCiAgICAgICAgICAgIGhlaWdodDogMTAwJTsN

CiAgICAgICAgICAgIG1hcmdpbjogMDsNCiAgICAgICAgICAgIHBhZGRpbmc6IDA7DQog

ICAgICAgICAgICB3aWR0aDogMTAwJTsNCiAgICAgICAgfQ0KDQogICAgICAgIC5tY25Q

cmV2aWV3VGV4dCB7DQogICAgICAgICAgICBkaXNwbGF5OiBub25lICFpbXBvcnRhbnQ7

DQogICAgICAgIH0NCg0KICAgICAgICAjb3V0bG9vayBhIHsNCiAgICAgICAgICAgIHBh

ZGRpbmc6IDA7DQogICAgICAgIH0NCg0KICAgICAgICBpbWcgew0KICAgICAgICAgICAg

LW1zLWludGVycG9sYXRpb24tbW9kZTogYmljdWJpYzsNCiAgICAgICAgfQ0KDQogICAg

ICAgIHRhYmxlIHsNCiAgICAgICAgICAgIG1zby10YWJsZS1sc3BhY2U6IDBwdDsNCiAg

ICAgICAgICAgIG1zby10YWJsZS1yc3BhY2U6IDBwdDsNCiAgICAgICAgfQ0KDQogICAg

ICAgIC5SZWFkTXNnQm9keSB7DQogICAgICAgICAgICB3aWR0aDogMTAwJTsNCiAgICAg

ICAgfQ0KDQogICAgICAgIC5FeHRlcm5hbENsYXNzIHsNCiAgICAgICAgICAgIHdpZHRo

OiAxMDAlOw0KICAgICAgICB9DQoNCiAgICAgICAgcCwgYSwgbGksIHRkLCBibG9ja3F1

b3RlIHsNCiAgICAgICAgICAgIG1zby1saW5lLWhlaWdodC1ydWxlOiBleGFjdGx5Ow0K

ICAgICAgICB9DQoNCiAgICAgICAgICAgIGFbaHJlZl49dGVsXSwgYVtocmVmXj1zbXNd

IHsNCiAgICAgICAgICAgICAgICBjb2xvcjogaW5oZXJpdDsNCiAgICAgICAgICAgICAg

ICBjdXJzb3I6IGRlZmF1bHQ7DQogICAgICAgICAgICAgICAgdGV4dC1kZWNvcmF0aW9u

OiBub25lOw0KICAgICAgICAgICAgfQ0KDQogICAgICAgIHAsIGEsIGxpLCB0ZCwgYm9k

eSwgdGFibGUsIGJsb2NrcXVvdGUgew0KICAgICAgICAgICAgLW1zLXRleHQtc2l6ZS1h

ZGp1c3Q6IDEwMCU7DQogICAgICAgICAgICAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6

IDEwMCU7DQogICAgICAgIH0NCg0KICAgICAgICAuRXh0ZXJuYWxDbGFzcywgLkV4dGVy

bmFsQ2xhc3MgcCwgLkV4dGVybmFsQ2xhc3MgdGQsIC5FeHRlcm5hbENsYXNzIGRpdiwg

LkV4dGVybmFsQ2xhc3Mgc3BhbiwgLkV4dGVybmFsQ2xhc3MgZm9udCB7DQogICAgICAg

ICAgICBsaW5lLWhlaWdodDogMTAwJTsNCiAgICAgICAgfQ0KDQogICAgICAgIGFbeC1h

cHBsZS1kYXRhLWRldGVjdG9yc10gew0KICAgICAgICAgICAgY29sb3I6IGluaGVyaXQg

IWltcG9ydGFudDsNCiAgICAgICAgICAgIHRleHQtZGVjb3JhdGlvbjogbm9uZSAhaW1w

b3J0YW50Ow0KICAgICAgICAgICAgZm9udC1zaXplOiBpbmhlcml0ICFpbXBvcnRhbnQ7

DQogICAgICAgICAgICBmb250LWZhbWlseTogaW5oZXJpdCAhaW1wb3J0YW50Ow0KICAg

ICAgICAgICAgZm9udC13ZWlnaHQ6IGluaGVyaXQgIWltcG9ydGFudDsNCiAgICAgICAg

ICAgIGxpbmUtaGVpZ2h0OiBpbmhlcml0ICFpbXBvcnRhbnQ7DQogICAgICAgIH0NCg0K

ICAgICAgICAudGVtcGxhdGVDb250YWluZXIgew0KICAgICAgICAgICAgbWF4LXdpZHRo

OiA2MDBweCAhaW1wb3J0YW50Ow0KICAgICAgICB9DQoNCiAgICAgICAgYS5tY25CdXR0

b24gew0KICAgICAgICAgICAgZGlzcGxheTogYmxvY2s7DQogICAgICAgIH0NCg0KICAg

ICAgICAubWNuSW1hZ2Ugew0KICAgICAgICAgICAgdmVydGljYWwtYWxpZ246IGJvdHRv

bTsNCiAgICAgICAgfQ0KDQogICAgICAgIC5tY25UZXh0Q29udGVudCB7DQogICAgICAg

ICAgICB3b3JkLWJyZWFrOiBicmVhay13b3JkOw0KICAgICAgICB9DQoNCiAgICAgICAg

ICAgIC5tY25UZXh0Q29udGVudCBpbWcgew0KICAgICAgICAgICAgICAgIGhlaWdodDog

YXV0byAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgfQ0KDQogICAgICAgIC5tY25EaXZp

ZGVyQmxvY2sgew0KICAgICAgICAgICAgdGFibGUtbGF5b3V0OiBmaXhlZCAhaW1wb3J0

YW50Ow0KICAgICAgICB9DQogICAgICAgIC8qDQogICAgICAgIEB0YWIgUGFnZQ0KICAg

ICAgICBAc2VjdGlvbiBIZWFkaW5nIDENCiAgICAgICAgQHN0eWxlIGhlYWRpbmcgMQ0K

ICAgICAgICAqLw0KICAgICAgICBoMSB7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSov

IGNvbG9yOiAjMjIyMjIyOw0KICAgICAgICAgICAgLypAZWRpdGFibGUqLyBmb250LWZh

bWlseTogSGVsdmV0aWNhOw0KICAgICAgICAgICAgLypAZWRpdGFibGUqLyBmb250LXNp

emU6IDQwcHg7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIGZvbnQtc3R5bGU6IG5v

cm1hbDsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8gZm9udC13ZWlnaHQ6IGJvbGQ7

DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIGxpbmUtaGVpZ2h0OiAxNTAlOw0KICAg

ICAgICAgICAgLypAZWRpdGFibGUqLyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOw0KICAg

ICAgICAgICAgLypAZWRpdGFibGUqLyB0ZXh0LWFsaWduOiBjZW50ZXI7DQogICAgICAg

IH0NCiAgICAgICAgLyoNCiAgICAgICAgQHRhYiBQYWdlDQogICAgICAgIEBzZWN0aW9u

IEhlYWRpbmcgMg0KICAgICAgICBAc3R5bGUgaGVhZGluZyAyDQogICAgICAgICovDQog

ICAgICAgIGgyIHsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8gY29sb3I6ICMyMjIy

MjI7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIGZvbnQtZmFtaWx5OiBIZWx2ZXRp

Y2E7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIGZvbnQtc2l6ZTogMzRweDsNCiAg

ICAgICAgICAgIC8qQGVkaXRhYmxlKi8gZm9udC1zdHlsZTogbm9ybWFsOw0KICAgICAg

ICAgICAgLypAZWRpdGFibGUqLyBmb250LXdlaWdodDogYm9sZDsNCiAgICAgICAgICAg

IC8qQGVkaXRhYmxlKi8gbGluZS1oZWlnaHQ6IDE1MCU7DQogICAgICAgICAgICAvKkBl

ZGl0YWJsZSovIGxldHRlci1zcGFjaW5nOiBub3JtYWw7DQogICAgICAgICAgICAvKkBl

ZGl0YWJsZSovIHRleHQtYWxpZ246IGxlZnQ7DQogICAgICAgIH0NCiAgICAgICAgLyoN

CiAgICAgICAgQHRhYiBQYWdlDQogICAgICAgIEBzZWN0aW9uIEhlYWRpbmcgMw0KICAg

ICAgICBAc3R5bGUgaGVhZGluZyAzDQogICAgICAgICovDQogICAgICAgIGgzIHsNCiAg

ICAgICAgICAgIC8qQGVkaXRhYmxlKi8gY29sb3I6ICM0NDQ0NDQ7DQogICAgICAgICAg

ICAvKkBlZGl0YWJsZSovIGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7DQogICAgICAgICAg

ICAvKkBlZGl0YWJsZSovIGZvbnQtc2l6ZTogMjJweDsNCiAgICAgICAgICAgIC8qQGVk

aXRhYmxlKi8gZm9udC1zdHlsZTogbm9ybWFsOw0KICAgICAgICAgICAgLypAZWRpdGFi

bGUqLyBmb250LXdlaWdodDogYm9sZDsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8g

bGluZS1oZWlnaHQ6IDE1MCU7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIGxldHRl

ci1zcGFjaW5nOiBub3JtYWw7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIHRleHQt

YWxpZ246IGxlZnQ7DQogICAgICAgIH0NCiAgICAgICAgLyoNCiAgICAgICAgQHRhYiBQ

YWdlDQogICAgICAgIEBzZWN0aW9uIEhlYWRpbmcgNA0KICAgICAgICBAc3R5bGUgaGVh

ZGluZyA0DQogICAgICAgICovDQogICAgICAgIGg0IHsNCiAgICAgICAgICAgIC8qQGVk

aXRhYmxlKi8gY29sb3I6ICM5OTk5OTk7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSov

IGZvbnQtZmFtaWx5OiBHZW9yZ2lhOw0KICAgICAgICAgICAgLypAZWRpdGFibGUqLyBm

b250LXNpemU6IDIwcHg7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIGZvbnQtc3R5

bGU6IGl0YWxpYzsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8gZm9udC13ZWlnaHQ6

IG5vcm1hbDsNCiAgICAgICAgICAgIC8qQGVkaXRhYmxlKi8gbGluZS1oZWlnaHQ6IDEy

NSU7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIGxldHRlci1zcGFjaW5nOiBub3Jt

YWw7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIHRleHQtYWxpZ246IGxlZnQ7DQog

ICAgICAgIH0NCiAgICAgICAgLyoNCiAgICAgICAgQHRhYiBIZWFkZXINCiAgICAgICAg

QHNlY3Rpb24gSGVhZGVyIENvbnRhaW5lciBTdHlsZQ0KICAgICAgICAqLw0KICAgICAg

ICAjdGVtcGxhdGVIZWFkZXIgew0KICAgICAgICAgICAgLypAZWRpdGFibGUqLyBiYWNr

Z3JvdW5kLWNvbG9yOiAjMDAwMDAwOw0KICAgICAgICAgICAgLypAZWRpdGFibGUqLyBi

YWNrZ3JvdW5kLWltYWdlOiBub25lOw0KICAgICAgICAgICAgLypAZWRpdGFibGUqLyBi

YWNrZ3JvdW5kLXJlcGVhdDogbm8tcmVwZWF0Ow0KICAgICAgICAgICAgLypAZWRpdGFi

bGUqLyBiYWNrZ3JvdW5kLXBvc2l0aW9uOiBjZW50ZXI7DQogICAgICAgICAgICAvKkBl

ZGl0YWJsZSovIGJhY2tncm91bmQtc2l6ZTogY292ZXI7DQogICAgICAgICAgICAvKkBl

ZGl0YWJsZSovIGJvcmRlci10b3A6IDA7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSov

IGJvcmRlci1ib3R0b206IDA7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIHBhZGRp

bmctdG9wOiA1cHg7DQogICAgICAgICAgICAvKkBlZGl0YWJsZSovIHBhZGRpbmctYm90

dG9tOiA1cHg7DQogICAgICAgIH0NCiAgICAgICAgLyoNCiAgICAgICAgQHRhYiBIZWFk

ZXINCiAgICAgICAgQHNlY3Rpb24gSGVhZGVyIEludGVyaW9yIFN0eWxlDQogICAgICAg

ICovDQogICAgICAgIC5oZWFkZXJDb250YWluZXIgew0KICAgICAgICAgICAgLypAZWRp

dGFibGUqLyBiYWNrZ3JvdW5kLWNvbG9yOiB0cmFuc3BhcmVudDsNCiAgICAgICAgICAg

IC8qQGVkaXRhYmxlKi8gYmFja2dyb3VuZC1pbWFnZTogbm9uZTsNCiAgICAgICAgICAg

IC8qQGVkaXRhYmxlKi8gYmFja2dyb3VuZC1yZXBlYXQ6IG5vLXJlcGVhdDsNCiAgICAg

ICAgICAgIC8qQGVkaXRhYmxlKi8gYmFja2dyb3VuZC1wb3NpdGlvbjogY2VudGVyOw0K

French language office delivery phish

Evidence at spamcop

Project spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Jan 2026 10:45:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vhALZ-00000000DZC-0q0x

for dave@doctor.nl2k.ab.ca;

Sat, 17 Jan 2026 10:44:25 -0700

Resent-From: The Doctor

Resent-Date: Sat, 17 Jan 2026 10:44:25 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp4.tnebnet.org ([103.234.149.160]:50064 helo=mail.tnebnet.org)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh9Me-000000009do-1iZv

for root@nk.ca;

Sat, 17 Jan 2026 09:41:38 -0700

Received: from mail.tnebnet.org (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id C499E102404;

Sat, 17 Jan 2026 22:10:17 +0530 (IST)

Received: from mail.tnebnet.org (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id 989371023FB;

Sat, 17 Jan 2026 22:10:17 +0530 (IST)

Received: from zmta1.tnebnet.org (unknown [192.168.170.3])

by mail.tnebnet.org (Postfix) with ESMTPS;

Sat, 17 Jan 2026 22:10:17 +0530 (IST)

Received: from localhost (localhost [127.0.0.1])

by zmta1.tnebnet.org (Postfix) with ESMTP id 8C3B9106036D;

Sat, 17 Jan 2026 22:05:18 +0530 (IST)

Received: from zmta1.tnebnet.org ([127.0.0.1])

by localhost (zmta1.tnebnet.org [127.0.0.1]) (amavis, port 10032) with ESMTP

id u1U_2v-dIOAD; Sat, 17 Jan 2026 22:05:10 +0530 (IST)

Received: from localhost (localhost [127.0.0.1])

by zmta1.tnebnet.org (Postfix) with ESMTP id 7F17F1060399;

Sat, 17 Jan 2026 22:05:09 +0530 (IST)

DKIM-Filter: OpenDKIM Filter v2.10.3 zmta1.tnebnet.org 7F17F1060399

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tnebnet.org;

s=6BF38A0E-ADE8-11ED-BC22-E5F2691EE429; t=1768667709;

bh=I6IWLFl5wmwNLUTe+NMMIjiGAyEkNv3i27avXaI9eLQ=;

h=Date:From:Message-ID:MIME-Version;

b=hu9865hZ12UOd1vT+1mlWmnJWRMuAM9o+hj/0m9wj0iO+7GF3oj0bcnodNacKPCj4

5tEwQnWLGI5ne1dcGoqm0uXmXyyfVgJ4+k5Xszb1oJkYEIpWE2sBocTRJMZxvP9qk4

kpPxRQNxtRlJQPZorYWwLDajhDX6Ucd/H1RqK9/korTZVv0vzQ/aJ7iD/5Cky5+YHU

QMCURbAGMagwth4oe/OVrVmimzvvDU6FUkHesOrGnbuR7RwC3pYwfnPWHHaK215BXR

r6alr2P0lWSSQo7jwZFN+9DL5WTuGvjkq05MADSgaTq2sL7o4EvhW1wsb4nz0C3mMv

L3yCvk9+YAEtQ==

X-Virus-Scanned: amavis at

Received: from zmta1.tnebnet.org ([127.0.0.1])

by localhost (zmta1.tnebnet.org [127.0.0.1]) (amavis, port 10026) with ESMTP

id HYGygwrS-aKk; Sat, 17 Jan 2026 22:05:09 +0530 (IST)

Received: from zmbs2.tnebnet.org (zmbs2.tnebnet.org [192.168.170.8])

by zmta1.tnebnet.org (Postfix) with ESMTP id C01551060357;

Sat, 17 Jan 2026 22:04:57 +0530 (IST)

Date: Sat, 17 Jan 2026 22:04:57 +0530 (IST)

From: mrfaus

Reply-To: mrfaustinwin@gmail.com

Message-ID: <1961616447.1769586.1768667697749.JavaMail.zimbra@tnebnet.org>

Subject: Please respond

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_4c11c7e5-5028-4e5c-b1c5-a7101bc29573"

X-Originating-IP: [103.108.174.13]

X-Mailer: Zimbra 8.8.15_GA_4562 (ZimbraWebClient - GC144 (Win)/8.8.15_GA_4570)

Thread-Index: 5zGfzwnZwSaIEXx/oEBHGUd1K7NzMA==

Thread-Topic: Please respond

X-TM-AS-GCONF: 11111111

X-TM-AS-SMTP: 1.0 em10YTEudG5lYm5ldC5vcmc= Y2hjMjA3YWVAdG5lYm5ldC5vcmc=

X-TM-AS-ERS: 192.168.170.3-127.5.254.253

X-TM-AS-Product-Ver: IMSVA-9.1.0.5098-9.0.0.1006-29704.001

X-TM-AS-Result: No--2.558-5.0-31-10

X-imss-scan-details: No--2.558-5.0-31-10

X-TMASE-Version: IMSVA-9.1.0.5098-9.0.1006-29704.001

X-TMASE-Result: 10--2.558000-10.000000

X-TMASE-MatchedRID: fmZkB+LvCGmAu5TqwJfe9tN9TX8X49szZpZpZFu3mKBTYyyCA5vjwPNO

7flRFqXmtsdkQqjFDhuD28NNt7xCyPoohGVesYF730kDaWZBE1RZoriDkmUBVjdHHXXKh5RC3Sl

EgVuyN9tMF7CJ9YNQzJcZ0icLp7Dq5UcZtwNsCroURSScn+QSXrTrdaH1ZWqCLPUYrlSS/47zzL

mUbXMXc6BMANavD7Ph2ffvDxhR0wqNhWKdkxzYLowbkxJFZ1Zdyc6gCYCLO474jwZB8DUjwOcNf

h7XKgLltpB6IQr6mzvmhzSX2i7+YsRYtiahrCtj4TFF+HILz1Xc2DEA49qeXlAQl+qiqze758FI

BeDQRHTW6cAlgRXPbNGS9wyjmdjIvQTxgXOaiSHDPQn1LiKboD+ywRtg5JBFpcNHrge+VdC9Glp

+2gUdWA==

X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:0-0

X-Spam_score: 11.2

X-Spam_score_int: 112

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Hi, I would like to talk to you about a project right

now. Please respond right away. Mrs Tania



Content analysis details: (11.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.234.149.160 listed in dnsbl.ahbl.org]

[103.234.149.160 listed in dnsbl.ahbl.org]

[103.234.149.160 listed in dnsbl.ahbl.org]

[103.234.149.160 listed in dnsbl.ahbl.org]

[103.108.174.13 listed in dnsbl.ahbl.org]

[103.108.174.13 listed in dnsbl.ahbl.org]

[103.108.174.13 listed in dnsbl.ahbl.org]

[103.108.174.13 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.234.149.160 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.234.149.160 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.234.149.160 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.234.149.160 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.108.174.13 listed in will-spam-for-food.eu.org]

[103.108.174.13 listed in will-spam-for-food.eu.org]

[103.108.174.13 listed in will-spam-for-food.eu.org]

[103.108.174.13 listed in will-spam-for-food.eu.org]

[103.108.174.13 listed in will-spam-for-food.eu.org]

[103.108.174.13 listed in will-spam-for-food.eu.org]

[103.108.174.13 listed in will-spam-for-food.eu.org]

[103.108.174.13 listed in will-spam-for-food.eu.org]

[103.234.149.160 listed in will-spam-for-food.eu.org]

[103.234.149.160 listed in will-spam-for-food.eu.org]

[103.234.149.160 listed in will-spam-for-food.eu.org]

[103.234.149.160 listed in will-spam-for-food.eu.org]

[103.234.149.160 listed in will-spam-for-food.eu.org]

[103.234.149.160 listed in will-spam-for-food.eu.org]

[103.234.149.160 listed in will-spam-for-food.eu.org]

[103.234.149.160 listed in will-spam-for-food.eu.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Please respond



--=_4c11c7e5-5028-4e5c-b1c5-a7101bc29573

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit







--

Hi, I would like to talk to you about a project right now. Please respond right away.



Mrs Tania



--=_4c11c7e5-5028-4e5c-b1c5-a7101bc29573

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit





--
Hi, I would like to talk to you about a project right now. Please respond right away.

Mrs Tania


--=_4c11c7e5-5028-4e5c-b1c5-a7101bc29573--



Web/SEO/App Spam from Microsoft Outlook Part 3



X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR03MB8635



--_000_PUZPR03MB5850987660787BAD368A8D4DB48AAPUZPR03MB5850apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Still waiting for a reply from you.



Can I send the audit report?



Thank you



From: Micheal Owen

Sent: , October 2, 2025 1:51 PM

Subject: Re: Website Audit report...........?



Hi,

I checked your website and noticed a couple of small SEO gaps that are stop=

ping you from ranking higher on Google. The good news? They=92re easy to fi=

x.



Would you like me to send you a quick audit ?

Looking forward to your quick response.



Just reply "YES"

Best Regards,

Owen



--_000_PUZPR03MB5850987660787BAD368A8D4DB48AAPUZPR03MB5850apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








es, serif; font-size: 11pt; color: rgb(0, 0, 0);">

Hi,  



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

 



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

Still waiting for a reply from you.



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

 



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

Can I send the audit report?



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

 



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

Thank you



es, serif; font-size: 11pt; color: rgb(0, 0, 0);">







es, serif; font-size: 11pt; color: rgb(0, 0, 0);">

From: Micheal Owen <Michealowen1934@hotmail.com>


Sent: , October 2, 2025 1:51 PM


Subject: Re: Website Audit report...........?



x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x=

_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_=

x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">


es, serif; font-size: 11pt;">

 





-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

Hi,



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

I checked your website and noticed a couple of small SEO gaps that are stop=

ping you from ranking higher on Google. The good news? They=92re easy to fi=

x.



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

 



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

Would you like me to send you a quick audit ?



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

Looking forward to your quick response.



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

 



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

Just reply "YES"



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

Best Regards,



-family: "Times New Roman", Times, serif; font-size: 11pt; color:=

rgb(0, 0, 0);">

Owen








--_000_PUZPR03MB5850987660787BAD368A8D4DB48AAPUZPR03MB5850apcp_--

Web/SEO/App spam from Microsoft Outlook Part 2















































































































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PUZPR03MB5850:EE_|SEZPR03MB8635:EE_

x-ms-office365-filtering-correlation-id: efe44f28-ae3c-49bc-e8f7-08de55d71a4e

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|461199028|37102599003|15080799012|15030799006|8060799015|8062599012|19110799012|39105399006|40105399003|51015399003|440099028|3412199025|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?4zslJydWXTM4w746SDnBQmO3yAyWcLOsniTM/QfukS3tfdWz1aTRA+Sk?=

=?Windows-1252?Q?UYQbwPQ8og4u/WpLtKA39y+99Ntqdtjxg/a36D3G/8Tb92t/5vCD92fD?=

=?Windows-1252?Q?tFPKcQLpVl3wgq8gxjLylaLNH51P75kobOSramuoZIYh/XIIkYwzk7y2?=

=?Windows-1252?Q?1+EmnhLRRk5SJnLK61A17xqdgxk262x7Br6/AlfN5D7TORge0gfdftrt?=

=?Windows-1252?Q?qRJ6z0nsQWlNNtL8HFh1JmRHd9tD/O+2zIO3uHpcd9mnzqV2qIQ8zSw8?=

=?Windows-1252?Q?fp7TVDOx7Rl+I/3pcr4MdTK2YCnJl7Du842qo0lxUiOfoJqFiPrdRDCM?=

=?Windows-1252?Q?7UFKh7CNV5O/brM0HYTE125sRYzCmn7sgTcri7lgDxy2AqF3nEyAyiSo?=

=?Windows-1252?Q?4gukPJKGJvzBkeRjMXAE1GXEqeE26O7npSHCT0ScObxANKWqZ+1kCITs?=

=?Windows-1252?Q?EXGNam4P9+wccbhtdzVagk13tFXxSzo6K8zNNPBe8M8kl/0WWgtYdzXl?=

=?Windows-1252?Q?BzcBOXN0QkYuzIe9ksM37seA4eo8pTW+QjSXK0a7nd3n1E8KhbE2FRFx?=

=?Windows-1252?Q?pe/L3LaMy6v/EAUecmy+0w8cb7GMdt40uYgdhx2Rh0XzknpI6HQGtCs6?=

=?Windows-1252?Q?mKWDyTp2WGWOcFWEDkoYJ2VRqSRAijg0KXIPUD5WbHZz/NmJOOlEvt8U?=

=?Windows-1252?Q?KABWwW7C1QYcqA6YNcxxkToqtDPK4fIKi/Y1/G2OkPiNpb4rGowL13KB?=

=?Windows-1252?Q?ReeQv8TEXpZIm9DZWNM/c/+m8ISYdwVyOsBpjcpgy/VhlqgdqRJeNS+8?=

=?Windows-1252?Q?NRFgiVtvSOrYqk9YDsquCxcNbXMDiMU/zzsDCUCDz6vt6/XUwPgmyrHV?=

=?Windows-1252?Q?oswvQHq5lCFqNYs3W3ng4FyshQieOxZ4Unv9QgSomctLAKWy7engCazK?=

=?Windows-1252?Q?THR+1A/WoGri0FbI11tNfqc0vOw33FW/l7WEbLejuq6FeNUM78bKlrPH?=

=?Windows-1252?Q?Nj2w8+rDzomzYWEayGaf6s3IgkPMJJ2iBxu6Ajqfa9R9wN9TIMg6fKv8?=

=?Windows-1252?Q?fQrGm/4c7IBv11Gb9KrYZRbMx64X16+dy6ZnYe1kFrSuEhu1RWShBLlt?=

=?Windows-1252?Q?q2plv8nU9DN6nXEP4pEnzgiH2tAZANjKPeon5k+6UV7LWbUd1cdoRgke?=

=?Windows-1252?Q?ESfg1TwruoYRzsSVvCJwMpBVQtScvVtVdTF92KiI3VTfB7KhovSUvda/?=

=?Windows-1252?Q?AAm0R+TD162MPfys82+booSlYaiFKEZpaACoFz/W33FgCYvgmYUfB/HI?=

=?Windows-1252?Q?aIMOvXU5b2j/thHB8N61XuvZbCrq38y7ImgrSN57N5Txur7jY2IBlAIy?=

=?Windows-1252?Q?HsaGC4MyoelbWa+S29F+C+gt8VgxmijQEZg=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?5ENFG5vnvm+Lfgcljgzmu7t14nkFkAbW01qew/YCniLJSxxLt5igsHjL?=

=?Windows-1252?Q?UXkAgple9TRZmzwcMT08jo7gutNSmpec51sHN19siBTe6Sw4m2QEvTrz?=

=?Windows-1252?Q?n45uImdAcaMekLuIUyjw6nwB+eHjWZyql91xRExI7KVn02hE8Xi75jt4?=

=?Windows-1252?Q?l+lS4oOsb5Zda7Ko+hqFxSrAbmCtRwF68uqBcQAdFKhxtxifpoqKqLpI?=

=?Windows-1252?Q?Cl5IqyzNRFgDBB62+toNYdskbVcCmwIm/DfAt9EcVARErxvPUB9VV/Dv?=

=?Windows-1252?Q?RiCt2ps4SdCqYg5QJAMJ6mIIhrmdqeR1xlC0Az8L5vmnpfY6tPU84Vg+?=

=?Windows-1252?Q?EZbwgDE+REI4o6CyRVG7ylAPMmJ54kIbwImWhsqX+axxaB66MswzgZy3?=

=?Windows-1252?Q?yEKBFgwkmGyZ0rJq6M2+cq5FwPxTMiBotiLA4VbyZZdaDJdxQ8YGuW5J?=

=?Windows-1252?Q?uM4x53Ln/x+x6+mRVEVfyC091xpcQ46h4aCOrQzDZYrATSGcrJxIrGKX?=

=?Windows-1252?Q?57FqDL/tAkb1xcRdnV3nj45MEvVI4iRg8lBj9yxxovQUVNDdgcA453yy?=

=?Windows-1252?Q?C8cICpotDZYEgSe4ra5Z4QKBXnqM5yNk8f8wu5JVnI4+/j1liTQcN4/W?=

=?Windows-1252?Q?Guyt26WxSwVT+yAv4gNsu+T4o5DA4aX9pqxdbvHrKHY1jMfGgErXH8ek?=

=?Windows-1252?Q?jUKBw3TNI3dBCb5ZzH7qb1TM/APaoso6I8yeFMZf9/hZZWrRjnPEFffn?=

=?Windows-1252?Q?bIrGSoFfMAQ9YJQXEeEn1OHJ86idfIB9c8LiGNJpdBAh8JbpstCHl6FG?=

=?Windows-1252?Q?2/iaBIh1+mKIwC/MAYpfJJApHoxTdK2C/pR5uybVcn3JOdcRKlFiPey5?=

=?Windows-1252?Q?4OCuvCzPg57JwF6QORADQh/lgC1BqioD/4RbMv+DneDNepmikGPJwu7o?=

=?Windows-1252?Q?9fi6Z5rb9XyE8XrvWtbYNurX629st/kNJddPvbBv84whHnjt0tsFMQyM?=

=?Windows-1252?Q?8E1GAGALa2EuRakz+KmclePVxrluoheGV6lyDQRUgZpo8EwCk/dq/3Uv?=

=?Windows-1252?Q?TVLyl7K4mkDKdJZecgCudny5nA8vRYxnQY1622gctbcZ9syZAUfIAySa?=

=?Windows-1252?Q?NGCj+o6tzweDKEKs+xpQ1IqBznF+nEqi+jIfrQJvMq4ratuyM8h4H6E7?=

=?Windows-1252?Q?D0nISQWdd9y/FF3C2MRlpVpIE4OWARgJoZdA1NKInRsdEmzoQ/JcvhvF?=

=?Windows-1252?Q?bLk9enkh0SzhNpKg3m6hGki/mAmrT9kd7c/U5VE9gF2qXkAE1C0If6UU?=

=?Windows-1252?Q?7bYg/p/rZ3joWOdFkQzXlwE9USVIdffqF/+yAapkn2B8xYbEmyKxtbtq?=

=?Windows-1252?Q?/erajyd0BX4m+rawaJ8y1tLYdl0gLT56Zh2DF/IXr+jvUcnW/zusAgCy?=

=?Windows-1252?Q?GYtxmVUiTdx9qfA7RC3R1y+eJrvSMu6XGbbe+rFU3FZpub/LNE4ZBGCd?=

=?Windows-1252?Q?8RtmnkBvAVlCXqrNlqSRkcqI3meIz4Gy1BzFg31TxNFj5q3hYhxsOLXe?=

=?Windows-1252?Q?bz6RWMiOt4V8DCh4?=

Content-Type: multipart/alternative;

boundary="_000_PUZPR03MB5850987660787BAD368A8D4DB48AAPUZPR03MB5850apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9343-5-msonline-outlook-51c6a.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PUZPR03MB5850.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: efe44f28-ae3c-49bc-e8f7-08de55d71a4e

X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2026 14:45:48.0358

(UTC)

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Jan 2026 09:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh8pI-00000000LQZ-3dOG

for dave@doctor.nl2k.ab.ca;

Sat, 17 Jan 2026 09:07:00 -0700

Resent-From: The Doctor

Resent-Date: Sat, 17 Jan 2026 09:07:00 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012051.outbound.protection.outlook.com ([52.103.66.51]:29776 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh7Zx-00000000MEQ-2tWm

for root@nk.ca;

Sat, 17 Jan 2026 07:47:16 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Zns6iD+tZkXlnZzGRVYPVqQDF8YOhbcxW+1xOy8+YEAa/uzAiDWcsEg21UzaWUFKYvZq27o8GfSg4kSm6+7SUSeI73UJK4nlzS+Oi0QALVzbNAi0okKWB/Dh/dQKVxcCA44bLSmPr1Ha1nPNDT3JCf8iVT2FT1tjB3je8lPwsfolccmnkCa0bf5LyPSSWOuuyTWapFbgS9fl7bri0J/qH9Pr6r5cW04pshYFw85KQDrT+bF8St5o8NtHScuRO5N/YIwV6WTBT9rciFQzF2u+pxG4yP6/yKZ6I0l36vyF0pitnjRmAJn29DMgBKHqzpu0NqNDwLoM1Ql/N/whoXIrFA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=BtTng/TWXDEo0dV2qnePMrUME5GsGFjWFsPVTjIGaYw=;

b=A6/dYC6u3f1sZ/G2kUtqWg8dQA/OV3xT781ds734IGRHO00Uaf81fyLbx5Jeeu28meFpkN0avG7iy0OTEe+QZ+8t4SLInn4JuzspuNna3xQ6dkWnzM83t3EVIZjNDagwO5O7ke6Iql2t6LzBFPEvu2c7V3sHS7S1rNeYsmelmRxkvfxYG67cjUKHjaTk5Ar+9TFL0zLAT4VwaWzMlNjP7xPDBZ3cPJ6X3C24Np9eIGgc/h2RcbI3kKdD2sIWdzAvjWccnBxNYRE7UPYcdo/6EMBkSKfsA3JyZfGkvH2l8HTCHJGgzpkInANnZ0ZGFLXr/w2InMhTk7TRNT2Xa6jt6Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=BtTng/TWXDEo0dV2qnePMrUME5GsGFjWFsPVTjIGaYw=;

b=sVNAcCny/WBVI0mxsRi7o3tjYFeuAKdmW9Wme5A6/14QuivHDpoPV8ugbZB0kyJJnabPQAlW1NUBqBKGDCb0wvumLyirFmOcRdJ3KUQIDYJK9qzWxADcIj899Boopen8dsLwQkz0V/Rqj9/fUjf6Xu8eaNC+bvokmquuQR/meMHWfsxn66Brl9veKFRUY1mzqUhuPF6tCMLnGc33Ch3XyU/qu84nbNAUYGJDURVkqHLvoGxNdx0TMMvx4+ZuO8J4xwrGYJ16w/Cj77ApAqXPlKxjGM0HHs+h76nzBF5j0IUpFhLcYpMc8s9SQwTNWfc2Bfw2fCkcTtjS+cl1SK+cIg==

Received: from PUZPR03MB5850.apcprd03.prod.outlook.com (2603:1096:301:a5::9)

by SEZPR03MB8635.apcprd03.prod.outlook.com (2603:1096:101:225::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9520.5; Sat, 17 Jan

2026 14:45:48 +0000

Received: from PUZPR03MB5850.apcprd03.prod.outlook.com

([fe80::4479:279:18c5:8d14]) by PUZPR03MB5850.apcprd03.prod.outlook.com

([fe80::4479:279:18c5:8d14%6]) with mapi id 15.20.9520.009; Sat, 17 Jan 2026

14:45:48 +0000

From: Micheal Owen

To: Micheal Owen

Subject: Re: Yes....?

Thread-Topic: Yes....?

Thread-Index: AQHchiwkI/YlkMFs40e1VH98zLhgm7VU5OK2gAGOcCk=

Date: Sat, 17 Jan 2026 14:45:48 +0000

Message-ID:



References:































































































































































French language donation spam from Google Gmail Part 2

--0000000000007e78720648947716

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Bonjour,



Je vous prie de m=E2=80=99excuser pour cette intrusion, je suis Monsieur Lo=

mbardi

Jean Michel, =C3=A2g=C3=A9 de 79 ans, originaire d=E2=80=99Espagne, je suis=

actuellement dans

un camp. J=E2=80=99ai d=C3=BB entrer en contact avec vous de cette classe p=

arce que je

d=C3=A9sire vous confier un secret et une affaire tr=C3=A8s importante, cel=

a semble

peu suspect tr=C3=A8s vraiment =C3=A0 qui ne me conna=C3=AEt pas et parce q=

ue je ne le

connais pas. Je vais aller =C3=A0 l=E2=80=99essentiel.



De toute fa=C3=A7on, en r=C3=A9alit=C3=A9 j=E2=80=99ai un cancer qui est en=

phase terminale, une

boule s=E2=80=99installe actuellement dans ma cage c=C3=A9r=C3=A9brale, j=

=E2=80=99ai cette maladie

depuis 2 ans. D=E2=80=99apr=C3=A8s les m=C3=A9decins, j=E2=80=99ai de la fi=

=C3=A8vre, des maux de t=C3=AAte, de

la toux et des difficult=C3=A9s respiratoires. Les m=C3=A9decins qui m=E2=

=80=99assistent

m=E2=80=99ont inform=C3=A9 que je pourrais mourir du jour au lendemain en r=

aison de mon

=C3=A9tat de sant=C3=A9 tr=C3=A8s d=C3=A9t=C3=A9rior=C3=A9. Je suis veuf, j=

e n=E2=80=99ai pas d=E2=80=99enfants car avec

ma femme nous n=E2=80=99avons jamais pu avoir d=E2=80=99enfants malgr=C3=A9=

tout ce que nous

avons comme moyen financier. Sans m=E2=80=99immiscer dans ma douleur, j=E2=

=80=99ai aussi

perdu ma femme, le mois dernier par cette maudite maladie.



Nous n=E2=80=99avons jamais pens=C3=A9 =C3=A0 adopter un enfant, ce que je =

regrette

profond=C3=A9ment. Je songe =C3=A0 faire un don, gr=C3=A2ce =C3=A0 ma fortu=

ne. J=E2=80=99ai presque

vendu mon entreprise, y compris une soci=C3=A9t=C3=A9 d=E2=80=99exportation=

de ciment en

France dans la ville de Nice o=C3=B9 je faisais le transport entre la Franc=

e et

l=E2=80=99Espagne. J=E2=80=99ai en ce moment sur mon compte personnel, la s=

omme forfaitaire

de 1.250.000 =E2=82=AC (UN MILLION DEUX CENT CINQUANTE MILLE EUROS). Je vou=

drais

vous donner cet argent qui pourra vous aider dans votre projet et dans

votre vie. Si vous =C3=AAtes une personne honn=C3=AAte et humble, s=E2=80=

=99il vous pla=C3=AEt

contactez-moi d=C3=A8s que possible afin que nous puissions en discuter.



Les formalit=C3=A9s et la transaction ne seront effectu=C3=A9es qu=E2=80=99=

en ligne . Je me

sens tr=C3=A8s mal et j=E2=80=99ai tr=C3=A8s peur. Je ne peux pas mourir sa=

ns avoir donn=C3=A9

tout cet argent ou je pense que ce serait un gaspillage





Vous devez me r=C3=A9pondre d=C3=A8s que possible si vous acceptez mon offr=

e

directement via mon e-mail : lombardijean.michel10@gmail.com





Cordialement.



Sr Lombardi Jean Michel.



--0000000000007e78720648947716

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




il-Al editable gmail-LW-avf gmail-tS-tW gmail-tS-tY" aria-label=3D"Cuerpo d=

el mensaje" role=3D"textbox" aria-multiline=3D"true" tabindex=3D"1" style=

=3D"direction:ltr;min-height:200px" aria-controls=3D":25p" aria-expanded=3D=

"false">
Bonjour,

Je vous prie de m=E2=80=99exc=

user pour cette intrusion, je suis Monsieur Lombardi Jean Michel, =C3=A2g=

=C3=A9 de 79 ans, originaire d=E2=80=99Espagne, je suis actuellement dans u=

n camp. J=E2=80=99ai d=C3=BB entrer en contact avec vous de cette classe pa=

rce que je d=C3=A9sire vous confier un secret et une affaire tr=C3=A8s impo=

rtante, cela semble peu suspect tr=C3=A8s vraiment =C3=A0 qui ne me conna=

=C3=AEt pas et parce que je ne le connais pas. Je vais aller =C3=A0 l=E2=80=

=99essentiel.

De toute fa=C3=A7on, en r=C3=A9alit=C3=A9 j=E2=80=99ai=

un cancer qui est en phase terminale, une boule s=E2=80=99installe actuell=

ement dans ma cage c=C3=A9r=C3=A9brale, j=E2=80=99ai cette maladie depuis 2=

ans. D=E2=80=99apr=C3=A8s les m=C3=A9decins, j=E2=80=99ai de la fi=C3=A8vr=

e, des maux de t=C3=AAte, de la toux et des difficult=C3=A9s respiratoires.=

Les m=C3=A9decins qui m=E2=80=99assistent m=E2=80=99ont inform=C3=A9 que j=

e pourrais mourir du jour au lendemain en raison de mon =C3=A9tat de sant=

=C3=A9 tr=C3=A8s d=C3=A9t=C3=A9rior=C3=A9. Je suis veuf, je n=E2=80=99ai pa=

s d=E2=80=99enfants car avec ma femme nous n=E2=80=99avons jamais pu avoir =

d=E2=80=99enfants malgr=C3=A9 tout ce que nous avons comme moyen financier.=

Sans m=E2=80=99immiscer dans ma douleur, j=E2=80=99ai aussi perdu ma femme=

, le mois dernier par cette maudite maladie.

Nous n=E2=80=99avons ja=

mais pens=C3=A9 =C3=A0 adopter un enfant, ce que je regrette profond=C3=A9m=

ent. Je songe =C3=A0 faire un don, gr=C3=A2ce =C3=A0 ma fortune. J=E2=80=99=

ai presque vendu mon entreprise, y compris une soci=C3=A9t=C3=A9 d=E2=80=99=

exportation de ciment en France dans la ville de Nice o=C3=B9 je faisais le=

transport entre la France et l=E2=80=99Espagne. J=E2=80=99ai en ce moment =

sur mon compte personnel, la somme forfaitaire de 1.250.000 =E2=82=AC (UN M=

ILLION DEUX CENT CINQUANTE MILLE EUROS). Je voudrais vous donner cet argent=

qui pourra vous aider dans votre projet et dans votre vie. Si vous =C3=AAt=

es une personne honn=C3=AAte et humble, s=E2=80=99il vous pla=C3=AEt contac=

tez-moi d=C3=A8s que possible afin que nous puissions en discuter.

L=

es formalit=C3=A9s et la transaction ne seront effectu=C3=A9es qu=E2=80=99e=

n ligne =C2=A0. Je me sens tr=C3=A8s mal et j=E2=80=99ai tr=C3=A8s peur. Je=

ne peux pas mourir sans avoir donn=C3=A9 tout cet argent ou je pense que c=

e serait un gaspillage


Vous devez me r=C3=A9pondre d=C3=A8s que =

possible si vous acceptez mon offre directement via mon e-mail=C2=A0:=C2=A0=


et=3D"_blank">lombardijean.michel10@gmail.com


Cordial=

ement.

Sr Lombardi Jean Michel.




--0000000000007e78720648947716--

French language donation spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Jan 2026 07:39:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh7RT-000000001pr-46L6

for dave@doctor.nl2k.ab.ca;

Sat, 17 Jan 2026 07:38:19 -0700

Resent-From: The Doctor

Resent-Date: Sat, 17 Jan 2026 07:38:19 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl1-f68.google.com ([74.125.82.68]:44533)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh5Hp-000000003uo-229w

for doctor@nk.ca;

Sat, 17 Jan 2026 05:20:22 -0700

Received: by mail-dl1-f68.google.com with SMTP id a92af1059eb24-12336c0a8b6so6130598c88.1

for ; Sat, 17 Jan 2026 04:19:24 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=unal.edu.co; s=google; t=1768652358; x=1769257158; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=usxGD+AosP+JtFuhxCRYtWcuhd1v48EQxlCnEIb4YVI=;

b=OH4SS5JQQPrdGmMEXPrddhIozGFsoKfEg4ZmV5b4Wa07j/ejOHuh5ScBZurPVJOeIb

EVs696IrK4b9qxkLdjDlZ1rSzXYIkgmmYyoh3yap6hZ/BqhJKLJhOgEbSQPhA6uCtNr9

+JJozGARDsQPBeRmVO9zG2B4gVzXXg53ZojIE=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1768652358; x=1769257158;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=usxGD+AosP+JtFuhxCRYtWcuhd1v48EQxlCnEIb4YVI=;

b=byzVmuuWR171A0TJdCDhR5nrOQ8Z9LeBTjjBEjS+QbbLqQ4p9skI9fWRk79i2OFhBU

zedegkLM7WuLIUmOX0MRMfub7o/gZP/u507AIVbuftGnTsRdeTjW9GVGCIubpzPkiI85

czSTIeDf18J9jO9p8+Vr/EEDcxu+68nl/blziyXH10yFOoLQWCdftMAyPbJ15S316CNw

w2GDXa9PIg3qdgE3kkTicq3umNjPv6WnUz+HpBrvDMrlSKSLHr48Qy0XngbeEtTEenpW

+zI8hds02CZF9pMCzCIG54jOSkWx+QezcPa/Ptj2IGXggZJf0ZiuFt5skJ7bIIfcxlNM

gD0w==

X-Forwarded-Encrypted: i=1; AJvYcCXdDZ+nRYYPoaqE0s+q5EO4CBjI2mhK0aL0/4czSM/r+q8+QbT3m48xyg+WcMea9pm+MWRQJe4=@nk.ca

X-Gm-Message-State: AOJu0YxQVZxSKMYq7mWjCjHoOfOjsJVknD4R1tSVEa+HJhtcN5ie0uxK

GhDIiLaPFokNUECMtjRq+VWrLT2tEZvIFDgw1mM1aP2JNuawtE3uwI21XSyAO5TidCoaonk6NqZ

AoftWE+yDfKWh4/0VGnvgyTEI8C+owCgBmsZqd8iJ5g==

X-Gm-Gg: AY/fxX58TzKDROIANqLor4EZciISwPi0hte9E3xDeR9veZUSQRM26J2aZwLvNnb39u/

BVS0Slqk8noFsxkyQnVisIbCYSXbkC7axEYFoBPvK/vQacRvPQ6Lb2ojtIXsjrHHe9oUgZvvEp5

yoMwdsdeVuUiSOIm8QMuNhiAsO+7zbrLx99tuA5y4V8Tgf1rmKKFrl1WwfX1vT+zJ+x4rtcLs9y

koT0SZZZPzmS4gAlm/17f0TANy54d3rFNa/jpsizkS0gMcoThi9bjEoVOcpvsZuGueQ27uO4YZM

2nzsAu3/UDFWiupY5Sha51ALiX9rxUwv55CiLCLd

X-Received: by 2002:a05:7022:608b:b0:11e:3e9:3e8a with SMTP id

a92af1059eb24-1244a7910d8mr6302466c88.49.1768652357394; Sat, 17 Jan 2026

04:19:17 -0800 (PST)

MIME-Version: 1.0

References:

In-Reply-To:

From: Jenny Marcela Moreno Poveda

Date: Sat, 17 Jan 2026 13:19:00 +0100

X-Gm-Features: AZwV_QjgwIMloSr3jXEy5gU4NV3Jsh035FPK9kEHgx0XNW0BrPYxI4won9hBDq4

Message-ID:

Subject: =?UTF-8?B?RndkOiBUciA6IFLDqXBvbnNlIMOgIGzigJlFLW1haWwgZGUgZG9uYXRpb24gLg==?=

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000007e78720648947716"

Bcc: doctor@nk.ca

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Bonjour, Je vous prie de m’excuser pour cette intrusion,

je suis Monsieur Lombardi Jean Michel, âgé de 79 ans, originaire d’Espagne,

je suis actuellement dans un camp. J’ai dû entrer en contact avec v [...]





Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.82.68 listed in dnsbl.ahbl.org]

[74.125.82.68 listed in dnsbl.ahbl.org]

[74.125.82.68 listed in dnsbl.ahbl.org]

[74.125.82.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.82.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.82.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.82.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.82.68 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.82.68 listed in will-spam-for-food.eu.org]

[74.125.82.68 listed in will-spam-for-food.eu.org]

[74.125.82.68 listed in will-spam-for-food.eu.org]

[74.125.82.68 listed in will-spam-for-food.eu.org]

[74.125.82.68 listed in will-spam-for-food.eu.org]

[74.125.82.68 listed in will-spam-for-food.eu.org]

[74.125.82.68 listed in will-spam-for-food.eu.org]

[74.125.82.68 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.68 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[74.125.82.68 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[74.125.82.68 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.68 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[74.125.82.68 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.68 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 MILLION_EUR BODY: Talks about millions of euros

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} =?UTF-8?B?RndkOiBUciA6IFLDqXBvbnNlIMOgIGzigJlFLW1haWwgZGUgZG9uYXRpb24gLg==?=

investment opportunity spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Jan 2026 04:45:00 -0700

Received: from mail.customs.gov.kg ([212.42.104.104]:35062)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh4jO-000000002Y4-15Lx

for dave@doctor.nl2k.ab.ca;

Sat, 17 Jan 2026 04:44:47 -0700

Received: from mail.customs.gov.kg (mail.customs.gov.kg [127.0.0.1])

by mail.customs.gov.kg (Postfix) with ESMTP id 4dtZcK3ysbz3Pwy

for ; Sat, 17 Jan 2026 17:43:45 +0600 (+06)

X-Virus-Scanned: Debian amavis at mail.customs.gov.kg

X-Spam-Flag: YES

X-Spam-Score: 10.607

X-Spam-Level: **********

X-Spam-Status: Yes, score=10.607 tagged_above=2 required=6.2

tests=[ADVANCE_FEE_3_NEW=1, ALL_TRUSTED=-1, DEAR_FRIEND=2.604,

FREEMAIL_FORGED_REPLYTO=2.503, FREEMAIL_REPLYTO=1, HK_NAME_MR_MRS=1,

ODD_FREEM_REPTO=1, SUBJ_ALL_CAPS=0.5, UNDISC_FREEM=1, UNDISC_MONEY=1]

autolearn=no autolearn_force=no

Received: from mail.customs.gov.kg ([127.0.0.1])

by mail.customs.gov.kg (mail.customs.gov.kg [127.0.0.1]) (amavis, port 10026)

with ESMTP id oFgf2IlAXUMf for ;

Sat, 17 Jan 2026 17:43:38 +0600 (+06)

Received: from localhost (mail.customs.gov.kg [127.0.0.1])

by mail.customs.gov.kg (Postfix) with ESMTPSA id 4dtZc85C2Yz3PGv;

Sat, 17 Jan 2026 17:43:36 +0600 (+06)

MIME-Version: 1.0

Date: Sat, 17 Jan 2026 11:43:36 +0000

From: Mr Danny Geoffrey

To: undisclosed-recipients:;

Subject: [SPAM] INVESTMENT OPPORTUNITY IN YOUR COUNTRY

Reply-To: danngeooffrey@gmail.com

Mail-Reply-To: danngeooffrey@gmail.com

User-Agent: Roundcube Webmail

Message-ID:

X-Sender: info@dannys-food-equipment-ltd.com

Content-Type: text/plain; charset=US-ASCII;

format=flowed

Content-Transfer-Encoding: 7bit

X-Spam_score: 26.2

X-Spam_score_int: 262

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend Greetings, I hope this email finds you well. I

know we've never met before. I would like to take this opportunity to introduce

myself to you, My name is Danny Geoffrey, I am a Financial Consultant and

[...]



Content analysis details: (26.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.42.104.104 listed in dnsbl.ahbl.org]

[212.42.104.104 listed in dnsbl.ahbl.org]

[212.42.104.104 listed in dnsbl.ahbl.org]

[212.42.104.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.42.104.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.42.104.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.42.104.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.42.104.104 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.6 SUBJ_ALL_CAPS Subject is all capitals

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

1.8 ODD_FREEM_REPTO Has unusual reply-to header

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_HK_NAME_MR_MRS No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 HK_NAME_MR_MRS No description available.

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} [SPAM] INVESTMENT OPPORTUNITY IN YOUR COUNTRY



Dear Friend



Greetings, I hope this email finds you well. I know we've never met

before. I would like to take this opportunity to introduce myself to

you, My name is Danny Geoffrey, I am a Financial Consultant and I'm

contacting you from Scotland. I know it can be annoying to get emails

from people you don't know. Still, I'm getting in touch because I wanted

to discuss a business opportunity with you. I have a client who has an

interest in Investing in your country into a Joint Venture /Partnership.

He has funds available meant for investment. We believe that your

expertise and experience align well with our investment objectives, and

we would like to explore potential collaboration opportunities with you.



You can reach me directly at ( danngeooffrey@yahoo.com ) if you're

interested.



I look forward to your response if interested.



Note: Kindly move this message to your inbox if found in spam folder,

Sometimes messages may be filtered into the spam folder due to

restrictions implemented by your Internet Service Provider (ISP)



Regards

Mr Danny Geoffrey

investment opportunity spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Jan 2026 07:39:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh7RI-000000000Hu-04TU

for dave@doctor.nl2k.ab.ca;

Sat, 17 Jan 2026 07:38:08 -0700

Resent-From: The Doctor

Resent-Date: Sat, 17 Jan 2026 07:38:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.customs.gov.kg ([212.42.104.104]:41556)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh4j6-000000002Xe-2Fxs

for doctor@doctor.nl2k.ab.ca;

Sat, 17 Jan 2026 04:44:30 -0700

Received: from mail.customs.gov.kg (mail.customs.gov.kg [127.0.0.1])

by mail.customs.gov.kg (Postfix) with ESMTP id 4dtZbn6wHNz3Pw3

for ; Sat, 17 Jan 2026 17:43:17 +0600 (+06)

X-Virus-Scanned: Debian amavis at mail.customs.gov.kg

X-Spam-Flag: YES

X-Spam-Score: 10.607

X-Spam-Level: **********

X-Spam-Status: Yes, score=10.607 tagged_above=2 required=6.2

tests=[ADVANCE_FEE_3_NEW=1, ALL_TRUSTED=-1, DEAR_FRIEND=2.604,

FREEMAIL_FORGED_REPLYTO=2.503, FREEMAIL_REPLYTO=1, HK_NAME_MR_MRS=1,

ODD_FREEM_REPTO=1, SUBJ_ALL_CAPS=0.5, UNDISC_FREEM=1, UNDISC_MONEY=1]

autolearn=no autolearn_force=no

Received: from mail.customs.gov.kg ([127.0.0.1])

by mail.customs.gov.kg (mail.customs.gov.kg [127.0.0.1]) (amavis, port 10026)

with ESMTP id AivU8Zl99_oJ for ;

Sat, 17 Jan 2026 17:43:17 +0600 (+06)

Received: from localhost (mail.customs.gov.kg [127.0.0.1])

by mail.customs.gov.kg (Postfix) with ESMTPSA id 4dtZbP5hryz3PGv;

Sat, 17 Jan 2026 17:42:57 +0600 (+06)

MIME-Version: 1.0

Date: Sat, 17 Jan 2026 11:42:57 +0000

From: Mr Danny Geoffrey

To: undisclosed-recipients:;

Subject: [SPAM] INVESTMENT OPPORTUNITY IN YOUR COUNTRY

Reply-To: danngeooffrey@gmail.com

Mail-Reply-To: danngeooffrey@gmail.com

User-Agent: Roundcube Webmail

Message-ID: <9f8942ae8d2b4d45e341a6ff4dbc010f@dannys-food-equipment-ltd.com>

X-Sender: info@dannys-food-equipment-ltd.com

Content-Type: text/plain; charset=US-ASCII;

format=flowed

Content-Transfer-Encoding: 7bit

X-Spam_score: 26.2

X-Spam_score_int: 262

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend Greetings, I hope this email finds you well. I

know we've never met before. I would like to take this opportunity to introduce

myself to you, My name is Danny Geoffrey, I am a Financial Consultant and

[...]



Content analysis details: (26.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.42.104.104 listed in dnsbl.ahbl.org]

[212.42.104.104 listed in dnsbl.ahbl.org]

[212.42.104.104 listed in dnsbl.ahbl.org]

[212.42.104.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.42.104.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.42.104.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.42.104.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.42.104.104 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

[212.42.104.104 listed in will-spam-for-food.eu.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.6 SUBJ_ALL_CAPS Subject is all capitals

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 T_HK_NAME_MR_MRS No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 HK_NAME_MR_MRS No description available.

1.8 ODD_FREEM_REPTO Has unusual reply-to header

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} [SPAM] INVESTMENT OPPORTUNITY IN YOUR COUNTRY



Dear Friend



Greetings, I hope this email finds you well. I know we've never met

before. I would like to take this opportunity to introduce myself to

you, My name is Danny Geoffrey, I am a Financial Consultant and I'm

contacting you from Scotland. I know it can be annoying to get emails

from people you don't know. Still, I'm getting in touch because I wanted

to discuss a business opportunity with you. I have a client who has an

interest in Investing in your country into a Joint Venture /Partnership.

He has funds available meant for investment. We believe that your

expertise and experience align well with our investment objectives, and

we would like to explore potential collaboration opportunities with you.



You can reach me directly at ( danngeooffrey@yahoo.com ) if you're

interested.



I look forward to your response if interested.



Note: Kindly move this message to your inbox if found in spam folder,

Sometimes messages may be filtered into the spam folder due to

restrictions implemented by your Internet Service Provider (ISP)



Regards

Mr Danny Geoffrey

walmart phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Jan 2026 09:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh8pY-00000000LTV-3GKe

for dave@doctor.nl2k.ab.ca;

Sat, 17 Jan 2026 09:07:16 -0700

Resent-From: The Doctor

Resent-Date: Sat, 17 Jan 2026 09:07:16 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.menbdsr.cc ([163.44.121.134]:41118)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh8Tc-00000000J8Y-15Q1

for doctor@nl2k.ab.ca;

Sat, 17 Jan 2026 08:44:43 -0700

Authentication-Results: mail.menbdsr.cc;

auth=pass (login)

Message-ID: <8deb0ca15aea5c4d73fa2fcb294f45ff@menbdsr.cc>

From: Walmart

To: doctor

Subject: Your Walmart Rewards points are available

Date: Sun, 18 Jan 2026 00:43:45 +0900

X-Priority: 3

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Received: from localhost (Unknown [127.0.0.1])

by mail.menbdsr.cc (Haraka) with ESMTPSA id B1F310CD-E613-4761-BAB2-F947EB367EA4.1

envelope-from

tls TLS_AES_256_GCM_SHA384 (authenticated bits=0);

Sat, 17 Jan 2026 23:43:46 +0800

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=menbdsr.cc;

h=Content-Transfer-Encoding: Content-Type: MIME-Version: Date: Subject:

To: From: Message-ID; q=dns/txt; s=s20260117179; t=1768664627;

bh=Qnyke4G2+mFFHdzoQ97E8iKeUavoCWqVtYwJsBN44NY=;

b=CyQ6t8wFz0mk7tsmZG0Y5bnmuCdmJENpKRBXlbmMndwM6FoIBMi8+VL0wi1XisU6INCHxiS3U

odKJvj/yhVewGPMmQ5s1rrG0odjK0F1FS5RVSEssydFHF+zW9RconCPKsmnCa1/7SWla4foenpY

YrqLpZ9mahof1kXPkfq/BhY=

X-Spam_score: 21.1

X-Spam_score_int: 211

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Thank you for being a registered customer with Walmart

Canada.



Content analysis details: (21.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.44.121.134 listed in dnsbl.ahbl.org]

[163.44.121.134 listed in dnsbl.ahbl.org]

[163.44.121.134 listed in dnsbl.ahbl.org]

[163.44.121.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.44.121.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.44.121.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.44.121.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.44.121.134 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: lickinpussy.net]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: lickinpussy.net]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: lickinpussy.net]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: lickinpussy.net]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: menbdsr.cc]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: lickinpussy.net]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[163.44.121.134 listed in bb.barracudacentral.org]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

2.0 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} Your Walmart Rewards points are available



=0D=0A<=

HEAD>=0D=0A
t-Type>=0D=0A
EAD>=0D=0A=0D=0A

Hello,

=0D=0A

Thank you for being a registere=

d customer with Walmart =0D=0ACanada.

=0D=0A

We=E2=80=

=99re writing to let you know that Walmart Rewards points have been=

=0D=0Aadded to your account
. These points can be redeemed on elig=

ible =0D=0Apurchases online at walmart.ca or at participat=

ing Walmart =0D=0ACanada stores.

=0D=0A

To view your points balance an=

d redeem your rewards, please sign in to your =0D=0Aaccount using the link =

below:

=0D=0A

=F0=9F=

=91=89 View and redeem your =0D=0AWalmart Rewards points
A>
Sign in to your=

Walmart =0D=0Aaccount

=0D=0A

Please note:

=0D=

=0A
    =0D=0A
  • =0D=0A

    Rewards points are subject to Walmart Rewards=

    terms and =0D=0Aconditions.

  • =0D=0A
  • =0D=0A

    Points may expi=

    re if not redeemed within the applicable time =0D=0A period.

  • =0D=

    =0A
  • =0D=0A

    You must be signed in to your registered Walmart accoun=

    t to access your =0D=0A rewards.

=0D=0A

If you did not expe=

ct this email or believe it was sent to you in error, =0D=0Aplease visit th=

e Walmart Canada Help Centre for more information.

=0D=0A

Thank you fo=

r shopping with Walmart Canada.

=0D=0A

Kind regards,
Walmar=

t Canada Rewards

Walmart =0D=0ACanada
walmart.ca

=0D=0A
R>=0D=0A=0D=0A

This email was sent from an automated notification add=

ress. Please do not =0D=0Areply to this message.

=0D=

=0A



Walmart phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Jan 2026 07:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh7R6-00000000OnG-22nT

for dave@doctor.nl2k.ab.ca;

Sat, 17 Jan 2026 07:37:56 -0700

Resent-From: The Doctor

Resent-Date: Sat, 17 Jan 2026 07:37:56 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.menbdsr.cc ([163.44.121.134]:54652)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh3sF-00000000PtN-3TgS

for doctor@nl2k.ab.ca;

Sat, 17 Jan 2026 03:49:51 -0700

Authentication-Results: mail.menbdsr.cc;

auth=pass (login)

Message-ID: <361507d47fbc7030aef9dec92fbee803@menbdsr.cc>

From: Walmart

To:

Subject: Your Walmart Rewards points are available

Date: Sat, 17 Jan 2026 19:48:51 +0900

X-Priority: 3

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Received: from localhost (Unknown [127.0.0.1])

by mail.menbdsr.cc (Haraka) with ESMTPSA id D78CA048-378E-4A06-82E1-B0F5C39C94D7.1

envelope-from

tls TLS_AES_256_GCM_SHA384 (authenticated bits=0);

Sat, 17 Jan 2026 18:48:51 +0800

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=menbdsr.cc;

h=Content-Transfer-Encoding: Content-Type: MIME-Version: Date: Subject:

To: From: Message-ID; q=dns/txt; s=s20260117179; t=1768646931;

bh=Qnyke4G2+mFFHdzoQ97E8iKeUavoCWqVtYwJsBN44NY=;

b=d+bdF39DP9EOMrh8gLwpndFIY+ynIxEo511o67jp4BxkCr9ZwE6SWcjlTn/O3ueZSMd/Ye1oC

8zlNRrl3xs0p7E0daZnqph0zHReWlz6elZkvbSHCbLB/Ge6myDO7E35CnTQQ4TQkmcKolN5eI4Y

8KtE2bkVLSn+5YW5FhiNPPg=

X-Spam_score: 15.7

X-Spam_score_int: 157

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Thank you for being a registered customer with Walmart

Canada.



Content analysis details: (15.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.44.121.134 listed in dnsbl.ahbl.org]

[163.44.121.134 listed in dnsbl.ahbl.org]

[163.44.121.134 listed in dnsbl.ahbl.org]

[163.44.121.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.44.121.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.44.121.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.44.121.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.44.121.134 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

[163.44.121.134 listed in will-spam-for-food.eu.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: lickinpussy.net]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: lickinpussy.net]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: lickinpussy.net]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: lickinpussy.net]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: menbdsr.cc]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[163.44.121.134 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[163.44.121.134 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[163.44.121.134 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[163.44.121.134 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[163.44.121.134 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

2.0 MIXED_HREF_CASE Has href in mixed case

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} Your Walmart Rewards points are available



=0D=0A<=

HEAD>=0D=0A
t-Type>=0D=0A
EAD>=0D=0A=0D=0A

Hello,

=0D=0A

Thank you for being a registere=

d customer with Walmart =0D=0ACanada.

=0D=0A

We=E2=80=

=99re writing to let you know that Walmart Rewards points have been=

=0D=0Aadded to your account
. These points can be redeemed on elig=

ible =0D=0Apurchases online at walmart.ca or at participat=

ing Walmart =0D=0ACanada stores.

=0D=0A

To view your points balance an=

d redeem your rewards, please sign in to your =0D=0Aaccount using the link =

below:

=0D=0A

=F0=9F=

=91=89 View and redeem your =0D=0AWalmart Rewards points
A>
Sign in to your=

Walmart =0D=0Aaccount

=0D=0A

Please note:

=0D=

=0A
    =0D=0A
  • =0D=0A

    Rewards points are subject to Walmart Rewards=

    terms and =0D=0Aconditions.

  • =0D=0A
  • =0D=0A

    Points may expi=

    re if not redeemed within the applicable time =0D=0A period.

  • =0D=

    =0A
  • =0D=0A

    You must be signed in to your registered Walmart accoun=

    t to access your =0D=0A rewards.

=0D=0A

If you did not expe=

ct this email or believe it was sent to you in error, =0D=0Aplease visit th=

e Walmart Canada Help Centre for more information.

=0D=0A

Thank you fo=

r shopping with Walmart Canada.

=0D=0A

Kind regards,
Walmar=

t Canada Rewards

Walmart =0D=0ACanada
walmart.ca

=0D=0A
R>=0D=0A=0D=0A

This email was sent from an automated notification add=

ress. Please do not =0D=0Areply to this message.

=0D=

=0A



Donation spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Jan 2026 07:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh7Qz-00000000O9l-2Hgu

for dave@doctor.nl2k.ab.ca;

Sat, 17 Jan 2026 07:37:49 -0700

Resent-From: The Doctor

Resent-Date: Sat, 17 Jan 2026 07:37:49 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from computeone.uk ([95.154.244.134]:48494)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh3eA-00000000PMu-15Zl

for sales@nk.ca;

Sat, 17 Jan 2026 03:35:20 -0700

Received: from [108.175.8.68] (port=59106)

by smtp.computeone.uk with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.1)

(envelope-from )

id 1vh3dI-000000003nU-1Om5

for sales@nk.ca;

Sat, 17 Jan 2026 10:34:16 +0000

Reply-To: ironwoodfamilytrustfoundation@hotmail.com

From: Ironwood Family Trust Foundation

To: sales@nk.ca

Subject: Official Notification of Donation Approval!!!

Date: 17 Jan 2026 10:34:18 +0000

Message-ID: <20260117103418.3D500A4F166F2018@spicearoma.uk>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - smtp.computeone.uk

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - spicearoma.uk

X-Get-Message-Sender-Via: smtp.computeone.uk: authenticated_id: bills@spicearoma.uk

X-Authenticated-Sender: smtp.computeone.uk: bills@spicearoma.uk

X-Source:

X-Source-Args:

X-Source-Dir:

X-From-Rewrite: unmodified, already matched

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, This is to confirm that a USD $1,000,000

donation from the Ironwood Family Trust Foundation has been approved. Please

respond to indicate your interest and enable us to proceed.



Content analysis details: (11.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[95.154.244.134 listed in dnsbl.ahbl.org]

[95.154.244.134 listed in dnsbl.ahbl.org]

[95.154.244.134 listed in dnsbl.ahbl.org]

[95.154.244.134 listed in dnsbl.ahbl.org]

[108.175.8.68 listed in dnsbl.ahbl.org]

[108.175.8.68 listed in dnsbl.ahbl.org]

[108.175.8.68 listed in dnsbl.ahbl.org]

[108.175.8.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[95.154.244.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[95.154.244.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[95.154.244.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[95.154.244.134 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[95.154.244.134 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[95.154.244.134 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[95.154.244.134 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[95.154.244.134 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 LOTS_OF_MONEY Huge... sums of money

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

Subject: {SPAM?} Official Notification of Donation Approval!!!













Dear Sir/Ma=

dam,

This is to confirm that a U=

SD $1,000,000 donation from the Ironwood Family Trust Foundation has been a=

pproved. Please respond to indicate your interest and enable us to proceed.=

Best regards,
Mr. David Guzman
Ironw=

ood Family Trust Foundation



Donation spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Jan 2026 07:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh7Qu-00000000Non-0BTk

for dave@doctor.nl2k.ab.ca;

Sat, 17 Jan 2026 07:37:44 -0700

Resent-From: The Doctor

Resent-Date: Sat, 17 Jan 2026 07:37:43 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from computeone.uk ([95.154.244.134]:48792)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vh3eA-00000000PNJ-15c9

for root@nk.ca;

Sat, 17 Jan 2026 03:35:20 -0700

Received: from [108.175.8.68] (port=59111)

by smtp.computeone.uk with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.1)

(envelope-from )

id 1vh3dJ-000000003qw-0ap1

for root@nk.ca;

Sat, 17 Jan 2026 10:34:17 +0000

Reply-To: ironwoodfamilytrustfoundation@hotmail.com

From: Ironwood Family Trust Foundation

To: root@nk.ca

Subject: Official Notification of Donation Approval!!!

Date: 17 Jan 2026 10:34:18 +0000

Message-ID: <20260117103418.1CA03D2401837C1F@spicearoma.uk>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - smtp.computeone.uk

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - spicearoma.uk

X-Get-Message-Sender-Via: smtp.computeone.uk: authenticated_id: bills@spicearoma.uk

X-Authenticated-Sender: smtp.computeone.uk: bills@spicearoma.uk

X-Source:

X-Source-Args:

X-Source-Dir:

X-From-Rewrite: unmodified, already matched

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, This is to confirm that a USD $1,000,000

donation from the Ironwood Family Trust Foundation has been approved. Please

respond to indicate your interest and enable us to proceed.



Content analysis details: (11.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[108.175.8.68 listed in dnsbl.ahbl.org]

[108.175.8.68 listed in dnsbl.ahbl.org]

[108.175.8.68 listed in dnsbl.ahbl.org]

[108.175.8.68 listed in dnsbl.ahbl.org]

[95.154.244.134 listed in dnsbl.ahbl.org]

[95.154.244.134 listed in dnsbl.ahbl.org]

[95.154.244.134 listed in dnsbl.ahbl.org]

[95.154.244.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[108.175.8.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[108.175.8.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[108.175.8.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[108.175.8.68 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[108.175.8.68 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

[95.154.244.134 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[95.154.244.134 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[95.154.244.134 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[95.154.244.134 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[95.154.244.134 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 LOTS_OF_MONEY Huge... sums of money

0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Official Notification of Donation Approval!!!













Dear Sir/Ma=

dam,

This is to confirm that a U=

SD $1,000,000 donation from the Ironwood Family Trust Foundation has been a=

pproved. Please respond to indicate your interest and enable us to proceed.=

Best regards,
Mr. David Guzman
Ironw=

ood Family Trust Foundation