NetKnow Corporate Blog

Bounced E-mail spam from Yahoo! Spam

Posted by Dave Yadallee on Saturday, February 28. 2026

Evidence at spamcop

update phish from Google Gmail PArt 4

Posted by Dave Yadallee on Saturday, February 28. 2026

Ledger

.94V127.998H382.57V91.6548H374.511V119.94H327.262ZM327.262 0V8.05844H374.51=

1V36.3452H382.57V0H327.262ZM298.74 62.3411V43.6158H311.382C317.546 43.6158 =

319.758 45.6696 319.758 51.2803V54.5982C319.758 60.3657 317.624 62.3411 311=

.382 62.3411H298.74ZM318.808 65.6589C324.575 64.1578 328.604 58.7842 328.60=

4 52.3856C328.604 48.3564 327.025 44.7211 324.023 41.7972C320.23 38.1619 31=

5.172 36.3452 308.615 36.3452H290.838V91.6529H298.74V69.6097H310.592C316.67=

5 69.6097 319.125 72.1378 319.125 78.4599V91.6548H327.184V79.7239C327.184 7=

1.0325 325.13 67.7147 318.808 66.7662V65.6589ZM252.282 67.4756H276.618V60.2=

07H252.282V43.6139H278.988V36.3452H244.222V91.6529H280.173V84.3842H252.282V=

67.4756ZM225.812 70.3995V74.1916C225.812 82.1717 222.888 84.78 215.541 84.7=

8H213.803C206.454 84.78 202.899 82.4088 202.899 71.4264V56.5717C202.899 45.=

5109 206.613 43.2181 213.96 43.2181H215.539C222.73 43.2181 225.021 45.9048 =

225.099 53.3322H233.791C233.001 42.4283 225.732 35.5555 214.828 35.5555C209=

.535 35.5555 205.11 37.2153 201.792 40.3745C196.814 45.0367 194.049 52.9383=

194.049 63.9991C194.049 74.6659 196.42 82.5675 201.318 87.4649C204.636 90.=

7044 209.219 92.4426 213.723 92.4426C218.463 92.4426 222.81 90.5456 225.021=

86.438H226.126V91.6529H233.395V63.1309H211.983V70.3995H225.812ZM156.126 43=

.6139H164.739C172.878 43.6139 177.303 45.6677 177.303 56.7304V71.2677C177.3=

03 82.3285 172.878 84.3842 164.739 84.3842H156.126V43.6139ZM165.449 91.6548=

C180.541 91.6548 186.149 80.1982 186.149 64.001C186.149 47.5666 180.145 36.=

3471 165.29 36.3471H148.223V91.6548H165.449ZM110.063 67.4756H134.399V60.207=

H110.063V43.6139H136.768V36.3452H102.002V91.6529H137.954V84.3842H110.063V67=

.4756ZM63.4464 36.3452H55.3879V91.6529H91.7332V84.3842H63.4464V36.3452ZM0 9=

1.6548V128H55.3076V119.94H8.05844V91.6548H0ZM0 0V36.3452H8.05844V8.05844H55=

.3076V0H0Z" fill=3D"currentColor" style=3D"fill: currentColor;" />

=20

size: 13px; line-height: 1.7; font-family: -apple-system, BlinkMacSystemFon=

t, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif; margin-top: 16px;">

Ledger SAS

1 rue du Mail, 75002 Paris, Fra=

nce

=C2=A9 2026 Ledger. All rights =

reserved.

=20

=20

=20

--0000000000009f3e31064be17f83--

update phish from Google Gmail PArt 3

Posted by Dave Yadallee on Saturday, February 28. 2026

.org/2000/svg" width=3D"383" height=3D"128" viewBox=3D"0 0 383 128" fill=3D=

"none" role=3D"img" aria-label=3D"Ledger" style=3D"width: 100%; height: aut=

o; display: block;">

Ledger

.94V127.998H382.57V91.6548H374.511V119.94H327.262ZM327.262 0V8.05844H374.51=

1V36.3452H382.57V0H327.262ZM298.74 62.3411V43.6158H311.382C317.546 43.6158 =

319.758 45.6696 319.758 51.2803V54.5982C319.758 60.3657 317.624 62.3411 311=

.382 62.3411H298.74ZM318.808 65.6589C324.575 64.1578 328.604 58.7842 328.60=

4 52.3856C328.604 48.3564 327.025 44.7211 324.023 41.7972C320.23 38.1619 31=

5.172 36.3452 308.615 36.3452H290.838V91.6529H298.74V69.6097H310.592C316.67=

5 69.6097 319.125 72.1378 319.125 78.4599V91.6548H327.184V79.7239C327.184 7=

1.0325 325.13 67.7147 318.808 66.7662V65.6589ZM252.282 67.4756H276.618V60.2=

07H252.282V43.6139H278.988V36.3452H244.222V91.6529H280.173V84.3842H252.282V=

67.4756ZM225.812 70.3995V74.1916C225.812 82.1717 222.888 84.78 215.541 84.7=

8H213.803C206.454 84.78 202.899 82.4088 202.899 71.4264V56.5717C202.899 45.=

5109 206.613 43.2181 213.96 43.2181H215.539C222.73 43.2181 225.021 45.9048 =

225.099 53.3322H233.791C233.001 42.4283 225.732 35.5555 214.828 35.5555C209=

.535 35.5555 205.11 37.2153 201.792 40.3745C196.814 45.0367 194.049 52.9383=

194.049 63.9991C194.049 74.6659 196.42 82.5675 201.318 87.4649C204.636 90.=

7044 209.219 92.4426 213.723 92.4426C218.463 92.4426 222.81 90.5456 225.021=

86.438H226.126V91.6529H233.395V63.1309H211.983V70.3995H225.812ZM156.126 43=

.6139H164.739C172.878 43.6139 177.303 45.6677 177.303 56.7304V71.2677C177.3=

03 82.3285 172.878 84.3842 164.739 84.3842H156.126V43.6139ZM165.449 91.6548=

C180.541 91.6548 186.149 80.1982 186.149 64.001C186.149 47.5666 180.145 36.=

3471 165.29 36.3471H148.223V91.6548H165.449ZM110.063 67.4756H134.399V60.207=

H110.063V43.6139H136.768V36.3452H102.002V91.6529H137.954V84.3842H110.063V67=

.4756ZM63.4464 36.3452H55.3879V91.6529H91.7332V84.3842H63.4464V36.3452ZM0 9=

1.6548V128H55.3076V119.94H8.05844V91.6548H0ZM0 0V36.3452H8.05844V8.05844H55=

.3076V0H0Z" fill=3D"currentColor" style=3D"fill: currentColor;" />

=20

e-height: 40px; font-size: 0;">

=20

e-height: 20px; font-size: 0;">

=20

ry" style=3D"margin: 0; padding: 0; color: #4a4a4a; font-size: 16px; line-h=

eight: 1.7; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Rob=

oto, Helvetica, Arial, sans-serif;">

Dear
=3D"color: #0b0b0b; font-weight: 600;">doctor@nk.ca,

esponsive dark-mode-text-secondary" style=3D"margin: 0; padding: 0; color: =

#4a4a4a; font-size: 16px; line-height: 1.7; font-family: -apple-system, Bli=

nkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;">

We have identified a critical issue preventing your device from upd=

ating to the latest system version.

While your hardware wallet remains secure, =

this is your final reminder that access to your device may be compromised i=

f the required update is not completed immediately.

=

=3D"margin: 0; padding: 0; color: #4a4a4a; font-size: 16px; line-height: 1.=

7; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helv=

etica, Arial, sans-serif;">

To maintain uninterrupted access and continue protecting your assets, you m=

ust manually update your device before
le=3D"color: #0b0b0b; font-weight: 600;">March 1, 2026. Please com=

plete the update now to avoid any potential service disruption.

=20

=20

e-height: 32px; font-size: 0;">

=20

lpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"width: 100%;">

0;">

ctor" target=3D"_blank" rel=3D"noopener" class=3D"btn-responsive dark-mode-=

btn" style=3D"display: inline-block; background-color: #0b0b0b; color: #fff=

fff; text-decoration: none; padding: 12px 40px; border-radius: 8px; font-we=

ight: 400; font-size: 17px; min-width: 100px; text-align: center; font-fami=

ly: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial=

, sans-serif;">

>Update Now

=20

e-height: 40px; font-size: 0;">

=20

=20

e-height: 20px; font-size: 0;">

=20

style=3D"margin: 0; padding: 0; color: #6a6a6a; font-size: 16px; line-heigh=

t: 1.7; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto,=

Helvetica, Arial, sans-serif;">

Thank you for taking prompt action to keep =

your device safe and reliable.

=20

=20

: 1px; background-color: #e9e9e9; border: 0; margin: 0; padding: 0;"> =

=20

dding: 28px 32px; background-color: #ffffff; font-family: -apple-system, Bl=

inkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;">

lpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"width: 100%;">

">

target=3D"_blank" rel=3D"noopener" style=3D"text-decoration: none; display:=

inline-block; margin-bottom: 16px;">

update phish from Google Gmail PArt 2

Posted by Dave Yadallee on Saturday, February 28. 2026

w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

" />

=3D1.0" />

Keep Your Ledger Device Secure

xt-size-adjust: 100%; -ms-text-size-adjust: 100%;">

=20

ng=3D"0" border=3D"0" style=3D"width: 100%; background-color: #f5f5f5; min-=

width: 100%;">

20px 0; background-color: #f5f5f5;">

=20

" cellspacing=3D"0" border=3D"0" align=3D"center" class=3D"main-table" styl=

e=3D"width: 100%; max-width: 600px; background-color: #ffffff; border-radiu=

s: 0;">

=20

dding: 40px 32px; background-color: #ffffff; font-family: -apple-system, Bl=

inkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;">

=20

lpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"width: 100%;">

=

ottom: 12px;">

target=3D"_blank" rel=3D"noopener" style=3D"text-decoration: none; display:=

inline-block;">

ogo-svg-dark dark-mode-text" style=3D"max-width: 260px; margin: 0 auto; col=

or: #0b0b0b;">

update phish from Google Gmail PArt 1

Posted by Dave Yadallee on Saturday, February 28. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 28 Feb 2026 07:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwLUb-00000000Hxu-1GrE

for dave@doctor.nl2k.ab.ca;

Sat, 28 Feb 2026 07:40:29 -0700

Resent-From: The Doctor

Resent-Date: Sat, 28 Feb 2026 07:40:29 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f72.google.com ([209.85.161.72]:61726)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwJSF-00000000AnK-2R63

for doctor@nk.ca;

Sat, 28 Feb 2026 05:30:03 -0700

Received: by mail-oo1-f72.google.com with SMTP id 006d021491bc7-679943693c0so53338845eaf.3

for ; Sat, 28 Feb 2026 04:29:07 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1772281741; x=1772886541; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=Li9wBAq5yuZIt+GVAIFXYnlqHS6/kNzCIqOGGmESdYg=;

b=RFHdpucPtsoLjUS9ZXZugyZaJBmj3vAG9ShrKY0AbSCq2Vj0H6l8cF3S744N+un7nO

onlFWO1axjdf6v4UTeBBC/WEpffAuf55hzt2IYtReEifziR3h5CZ0dd8xZl96+YrHjJS

79Ims7q35vdIbX9h/nKMKrk8pgNl+mh81OEwV+ghwvUPXjECwNYGe9RzuxOYgJ5q4tDM

xjTJjDPcOm/FXHmuaMHQ0vbc56bUoDzxaI4RFwE12glQpeFHvllADPtWrld4R3glGV4+

+dhSMYhQG8yBlWuSjuZZcxK/w4SAlhnQzjUcUsjWyDItpl9UmwogheHApxmfO4nXHlks

FOag==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772281741; x=1772886541;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Li9wBAq5yuZIt+GVAIFXYnlqHS6/kNzCIqOGGmESdYg=;

b=AxuIyyjgzuxpU/wRuZwTyoM6YlkWuFkIzT2pE/MWbpM1Rd+OUTQedNphk6KzoFIVel

ffOM/Wt6NJNTUDdA80A78+zPoN6IOrJWe5KQuelNeO8mv/+Zw6B97a70SFk7Mf8W4GL7

+UrynvgX3lMMMNSLPBLUzC3mBCZHwF//O7w07ktITPB4pq0Azs57OWPWRtt7uuKJN9tq

up7mhHiYRmzaG0tYMnyTyn53vHi3akjta4eNSPWS15CAEoeqM2LTo4zbTfJ/qpqSDJDP

Tu9smg7s1v16+qACRLwS9W0MUahMy/eb7mwEPtjo6a96CwWV9rwsALq9Z/qop4SmF+qK

64lg==

X-Gm-Message-State: AOJu0YxueK0i7cvuJdMKLY4nKXajtOtv1R7YeqHV94FKyS5IBw42sVTg

yfyp9aKfCobRdIbMCsE0kNS8t1gyyK3AIOpfv00VOS0HgJtocy7Jfd5cqnv4bkNdLSUy5wYQ4qR

Fto5E5bqC2A==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:f0b:b0:679:c3e3:c360 with SMTP id

006d021491bc7-679fae7661cmr3833376eaf.32.1772281741130; Sat, 28 Feb 2026

04:29:01 -0800 (PST)

Message-ID: <0000000000009f3e3f064be17f86@google.com>

Date: Sat, 28 Feb 2026 12:29:01 +0000

Subject: Notice: Device Update Required

From: Ledger

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000009f3e31064be17f83"

X-Spam_score: 10.5

X-Spam_score_int: 105

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear doctor@nk.ca, We have identified a critical issue preventing

your device from updating to the latest system version. While your hardware

wallet remains secure, this is your final reminder that access to your device

[...]

Content analysis details: (10.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

[209.85.161.72 listed in dnsbl.ahbl.org]

[209.85.161.72 listed in dnsbl.ahbl.org]

[209.85.161.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: nitraperk.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.161.72 listed in sa-accredit.habeas.com]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.161.72 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.161.72 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.161.72 listed in sa-trusted.bondedsender.org]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

1.5 DEAR_EMAIL BODY: Message contains Dear email address

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.72 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 TVD_PH_SUBJ_META No description available.

Subject: {SPAM?} Notice: Device Update Required

--0000000000009f3e31064be17f83

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

RGVhciBkb2N0b3JAbmsuY2EsDQoNCldlIGhhdmUgaWRlbnRpZmllZCBhIGNyaXRpY2FsIGlzc3Vl

IHByZXZlbnRpbmcgeW91ciBkZXZpY2UgZnJvbSB1cGRhdGluZyB0byAgDQp0aGUgbGF0ZXN0IHN5

c3RlbSB2ZXJzaW9uLiBXaGlsZSB5b3VyIGhhcmR3YXJlIHdhbGxldCByZW1haW5zIHNlY3VyZSwg

dGhpcyAgDQppcyB5b3VyIGZpbmFsIHJlbWluZGVyIHRoYXQgYWNjZXNzIHRvIHlvdXIgZGV2aWNl

IG1heSBiZSBjb21wcm9taXNlZCBpZiB0aGUgIA0KcmVxdWlyZWQgdXBkYXRlIGlzIG5vdCBjb21w

bGV0ZWQgaW1tZWRpYXRlbHkuDQoNCg0KVG8gbWFpbnRhaW4gdW5pbnRlcnJ1cHRlZCBhY2Nlc3Mg

YW5kIGNvbnRpbnVlIHByb3RlY3RpbmcgeW91ciBhc3NldHMsIHlvdSAgDQptdXN0IG1hbnVhbGx5

IHVwZGF0ZSB5b3VyIGRldmljZSBiZWZvcmUgTWFyY2ggMSwgMjAyNi4gUGxlYXNlIGNvbXBsZXRl

IHRoZSAgDQp1cGRhdGUgbm93IHRvIGF2b2lkIGFueSBwb3RlbnRpYWwgc2VydmljZSBkaXNydXB0

aW9uLg0KDQoNClVwZGF0ZSBOb3cNCg0KDQpUaGFuayB5b3UgZm9yIHRha2luZyBwcm9tcHQgYWN0

aW9uIHRvIGtlZXAgeW91ciBkZXZpY2Ugc2FmZSBhbmQgcmVsaWFibGUuDQoNCg0KDQoNCg0KDQpM

ZWRnZXIgU0FTDQoxIHJ1ZSBkdSBNYWlsLCA3NTAwMiBQYXJpcywgRnJhbmNlDQoNCsKpIDIwMjYg

TGVkZ2VyLiBBbGwgcmlnaHRzIHJlc2VydmVkLg0KDQoNCg0KDQoNCg==

--0000000000009f3e31064be17f83

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Chinese products spam

Posted by Dave Yadallee on Saturday, February 28. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 28 Feb 2026 07:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwLTa-00000000Cu4-3Efh

for dave@doctor.nl2k.ab.ca;

Sat, 28 Feb 2026 07:39:26 -0700

Resent-From: The Doctor

Resent-Date: Sat, 28 Feb 2026 07:39:26 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta43-53.mmglsmd.net ([103.37.43.53]:41864)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwGdY-000000000sm-3kHc

for root@nk.ca;

Sat, 28 Feb 2026 02:29:38 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.srtsteelpipe.com; i=@hn.srtsteelpipe.com; q=dns/txt;

s=umail; t=1772270915; h=content-type : mime-version :

message-id : reply-to : subject : from : to : date :

subject : from : date;

bh=/peqqRcfAlWNe4kFJJMIPTMQm0Ri2o45nwra/yWuHyk=;

b=dv44wJ3CvtG0nz/eaH/fZIc9uAZ6gZmEqBqrK6y5EWPhjXhvI4iTpTOg

tltCcsUVJhPgdAmUiBDn1cTaYiSTTxeGvRTj27wWidA8b2JtsTbmmZCcc/

UFpPrLfJo3WtRyU0BRNpdZN3i/serjc6b04/kPIC+aBqZd0bjV2OB18KQ=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.srtsteelpipe.com (Postfix) with ESMTP id GLlXndCaAZDU

for ; Sat, 28 Feb 2026 17:28:25 +0800

Content-Type: multipart/mixed; boundary="===============8924168633570832905=="

MIME-Version: 1.0

Message-Id: <20260228172825.55251-{13477:20260228170929-13477-35}-0017397@hn.srtsteelpipe.com>

Reply-to: stephen@threewaysteel.com

Subject: =?utf-8?q?Steel_pipe_and_fittings_supplier_in_China?=

From: Stephen Zhou

To: root

Date: Sat, 28 Feb 2026 17:28:25 +0800

Mail-ID: 69a2b0d8e1382308b46c9934

X-Spam_score: 12.7

X-Spam_score_int: 127

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear root, I hope this email finds you well. Threeway Steel

Co., Ltd has over 30 years of experience in steel supply and has become a

reputable and capable global supplier. We supply high quality steel products

for energy industry and industrial [...]

Content analysis details: (12.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.37.43.53 listed in will-spam-for-food.eu.org]

[103.37.43.53 listed in will-spam-for-food.eu.org]

[103.37.43.53 listed in will-spam-for-food.eu.org]

[103.37.43.53 listed in will-spam-for-food.eu.org]

[103.37.43.53 listed in will-spam-for-food.eu.org]

[103.37.43.53 listed in will-spam-for-food.eu.org]

[103.37.43.53 listed in will-spam-for-food.eu.org]

[103.37.43.53 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.37.43.53 listed in dnsbl.ahbl.org]

[103.37.43.53 listed in dnsbl.ahbl.org]

[103.37.43.53 listed in dnsbl.ahbl.org]

[103.37.43.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.37.43.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.37.43.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.37.43.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.37.43.53 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.37.43.53 listed in bb.barracudacentral.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.6 J_CHICKENPOX_52 BODY: 5alpha-pock-2alpha

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[103.37.43.53 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Steel_pipe_and_fittings_supplier_in_China?=

Dear root,

I hope this email finds you well.

Threeway Steel Co., Ltd has over 30 years of experience in steel supply and has become a reputable and capable global supplier. We supply high quality steel products for energy industry and industrial applications

1. Carbon steel pipe (seamless/welded)

- Material: ASTM A106 Gr.B / A53 Gr.B / API 5L Gr.B

- Size range:

- Seamless pipe: OD 1/2"~24" | WT SCH10~XXS

- Welded pipe: OD 1/2"~48" | WT SCH10~SCH160

- Standard: ASME B36.10M, EN 10255, DIN 2448

2. Carbon steel pipe fittings (butt weld/socket/thread)

- Type: elbow (90°/45°), tee, reducer, cap, flange

- Material: ASTM A234 WPB / A105

- Size: 1/2"~36" | Class 3000~6000

3.Alloy steel pipe: seamless/welded

- Material: ASTM A335 P5/P9/P11/P22/P91, A213 T5/T9/T11/T22/T91, EN 10216-2 15Mo3/13CrMo4-5

- Size range:OD 1/2" to 48" WTSCH 10 to SCH 160

4.Alloy steel Pipe fittings: elbows, tees, reducers, flanges

-ASME B16.9/B16.28, MSS-SP-43

-Fittings: Sizes cover 1/2" to 24", pressure levels SCH 40/SCH 80/XS/XXS

Strict quality control:

- All products provide Original Material Certificate (MTC), and accept third-party inspection

Welcome your steel pipes inquiry!

Best Regards

Stephen Zhou

Threeway Steel Co., Ltd

(Office:(0086)731-88678534

(Fax:(0086)731-88678578 | Mobile/Whatsapp : +86-15616250814

Email:stephen@threewaysteel.com

Social Media management spam from Google Gmail Part 2

Posted by Dave Yadallee on Saturday, February 28. 2026

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.198 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.198 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.198 listed in sa-trusted.bondedsender.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kundankumarzxcds(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.198 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.198 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.198 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: Social Media Management root@nk.ca

--000000000000788193064bdd378c

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

R29vZCBBZnRlcm5vb24sDQpJIHNlbnQgeW91IGFuIGVtYWlsIG9uIEZyaWRheSBidXQgZGlkbid0

IGhlYXIgYmFjay5JIG9mZmVyIGFmZm9yZGFibGUgVkEgIA0Kc3VwcG9ydC4NCkNvdWxkIHdlIHNj

aGVkdWxlIGEgYnJpZWYgNS1taW51dGUgY2FsbCBuZXh0IFR1ZXNkYXkgb3IgV2VkbmVzZGF5Pw0K

VGhhbmsgeW91IQ0KS3VuZGFuDQpWQSBUZWFtISENCg0KDQpPbiBGcmksIERlYyAxMiwgMjAyNSwg

YXQgOTo0MyBBTSwgPCA+IHdyb3RlOg0KDQpIaSwgcm9vdEBuay5jYQ0KDQpDb3VsZCB5b3UgcGxl

YXNlIGxldCBtZSBrbm93IGlmIHlvdSB3b3VsZCBiZSBpbnRlcmVzdGVkIGluIGhpcmluZyBhICAN

CkRlZGljYXRlZCBSZW1vdGUgVmlydHVhbCBBc3Npc3RhbnQgYXQgYSByZWFzb25hYmxlIGNvc3Q/

DQoNCldlIHNwZWNpYWxpemUgaW46DQoNCuKAoiBFbWFpbCBNYW5hZ2VtZW50ICYgQ2FsZW5kYXIg

TWFuYWdlbWVudA0K4oCiIEFwcG9pbnRtZW50IFNjaGVkdWxpbmcgJiBGb2xsb3ctdXBzDQrigKIg

TGVhZCBHZW5lcmF0aW9uICYgV2ViIFJlc2VhcmNoDQrigKIgQ29sZCBDYWxsaW5nICYgQ2xpZW50

IE91dHJlYWNoDQrigKIgQ1JNIEhhbmRsaW5nICYgRGF0YWJhc2UgTWFuYWdlbWVudA0K4oCiIERh

dGEgRW50cnkgJiBEYXRhIE1pbmluZw0K4oCiIERvY3VtZW50IFByZXBhcmF0aW9uICYgRmlsZSBN

YW5hZ2VtZW50DQrigKIgQWRtaW5pc3RyYXRpdmUgU3VwcG9ydA0K4oCiIEN1c3RvbWVyIFN1cHBv

cnQgKENoYXQgJiBFbWFpbCkNCuKAoiBTb2NpYWwgTWVkaWEgTWFuYWdlbWVudA0K4oCiIENvbnRl

bnQgQ3JlYXRpb24gJiBQb3N0IFNjaGVkdWxpbmcNCuKAoiBHcmFwaGljIERlc2lnbmluZyAoQ2Fu

dmEsIGJhc2ljIGJyYW5kaW5nKQ0K4oCiIFdlYnNpdGUgdXBkYXRlcyAoV29yZFByZXNzIOKAkyBi

YXNpYykNCuKAoiBPbmxpbmUgcmVzZWFyY2ggJiByZXBvcnQgcHJlcGFyYXRpb24NCuKAoiBQZXJz

b25hbCBhc3Npc3RhbnQgdGFza3MNCg0KSWYgaW50ZXJlc3RlZCwgY2FuIHdlIHNjaGVkdWxlIGEg

cXVpY2sgY2FsbCBzb21ldGltZSB0aGlzIHdlZWsgb3IgbmV4dCB3ZWVrPw0KDQpTaW5jZXJlbHks

DQpLdW5kYW4sDQpWQSBUZWFtISENCg==

--000000000000788193064bdd378c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Good Afternoon,
I sent you an email on Friday but didn=E2=80=99t hear ba=

ck.I offer affordable VA support.
Could we schedule a brief 5-minute cal=

l next Tuesday or Wednesday?
Thank you!
Kundan
VA Team!!

r>On Fri, Dec 12, 2025, at 9:43=E2=80=AFAM, < > wrote:

Hi, root@nk.c=

a

Could you please let me know if you would be interested in hiring =

a Dedicated Remote Virtual Assistant at a reasonable cost?

We specia=

lize in:

=E2=80=A2 Email Management & Calendar Management
=E2=80=

=A2 Appointment Scheduling & Follow-ups
=E2=80=A2 Lead Generation & Web =

Research
=E2=80=A2 Cold Calling & Client Outreach
=E2=80=A2 CRM Handl=

ing & Database Management
=E2=80=A2 Data Entry & Data Mining
=E2=80=

=A2 Document Preparation & File Management
=E2=80=A2 Administrative Supp=

ort
=E2=80=A2 Customer Support (Chat & Email)
=E2=80=A2 Social Media =

Management
=E2=80=A2 Content Creation & Post Scheduling
=E2=80=A2 Gra=

phic Designing (Canva, basic branding)
=E2=80=A2 Website updates (WordPr=

ess =E2=80=93 basic)
=E2=80=A2 Online research & report preparation
=

=E2=80=A2 Personal assistant tasks

If interested, can we schedule a =

quick call sometime this week or next week?

Sincerely,
Kundan,
>VA Team!!

--000000000000788193064bdd378c--

Social Media management spam from Google Gmail Part 1

Posted by Dave Yadallee on Saturday, February 28. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 28 Feb 2026 01:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwFe0-00000000MOz-3oJI

for dave@doctor.nl2k.ab.ca;

Sat, 28 Feb 2026 01:25:48 -0700

Resent-From: The Doctor

Resent-Date: Sat, 28 Feb 2026 01:25:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f198.google.com ([209.85.128.198]:56484)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwEg3-00000000Ihc-1HJj

for root@nk.ca;

Sat, 28 Feb 2026 00:24:00 -0700

Received: by mail-yw1-f198.google.com with SMTP id 00721157ae682-79801be4ca3so50493517b3.0

for ; Fri, 27 Feb 2026 23:22:37 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772263351; x=1772868151; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=LAemg93AebOCgP/LU7jFldsE7azdftPNbrip/TmWhzo=;

b=b1ToN1o+BjRJvBJ1NqtNZl3+XqoUaThbZ3VVWyQ2tFeyM8hM+M/Js2t68DGzsstvVt

B6YCQZJWG977rxvkTfFDwF6fA7cg5Di0RL67dpg0PxsB2LqB+q3ZWZy0XeG8yLG3EE75

7zdBrf3WGB1mmuVVe8vs9xUS66U2+YV/x23qQ0mve5vEllM9lJS58aR/UcarejOGWN7z

Xy7Z0HeQEMbbltbA4sXJBbwIzcc++41rA/NVvaoGXWQl3xVTaICEy/oqyEE8ruyIYN6S

gYxYpapb56PS4ezju4sV3LyV9SxKg7nNZXfVV+fE2ibIHfuaFEPbCLAPbsDRc1D8QTPy

rdfw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772263351; x=1772868151;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=LAemg93AebOCgP/LU7jFldsE7azdftPNbrip/TmWhzo=;

b=joB9raSO7waL/zweyJypIsntHl1CN0Q/F6rm8Uxp+MJI5Ikn42FqoF1+4NlIDH4K3U

Rk/YFkjsSHXBtBLw6pydWeCwL4k3WVIrOOlyp+uUP1+yZ6nu9Hw0uYsNlucX+05jGona

2B40CWNI2/JricbRFEN2avpfiyPd5JUKykhX+UnVkP8MXIoA+epktRB6m/G0UPyvhA3V

tF2lCTlRJnHPd+H1WGT6jlKLqC8ZEhqx2Cy26u22HXHoZ4+Etwvw8lCS5zVe/mRCZsJP

fc3p5i5kBEJMOG56bcY+8QrPaRkm13LyPYfcXezIbrBAeb/jtb/7037xEaVxv7cxOTcZ

3u8Q==

X-Gm-Message-State: AOJu0Yx6xlLz0MDqxRXQ+OoqhUbaV4f10AaK2xM9VHIQf0bbgbIzDdbp

o0mBjE9vmmaHwoCpznMTLPLXbnXMfcokLcVKv/XXSX+xXmIvwBVGII7qKndeUYIT4s1ht604UOo

ymH2DMg==

MIME-Version: 1.0

X-Received: by 2002:a53:ee42:0:b0:641:f5bc:69a4 with SMTP id

956f58d0204a3-64cc236a35amr3566847d50.82.1772263350762; Fri, 27 Feb 2026

23:22:30 -0800 (PST)

Message-ID:

Date: Sat, 28 Feb 2026 07:22:30 +0000

Subject: Re: Social Media Management root@nk.ca

From: kundankumarzxcds@gmail.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000788193064bdd378c"

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Good Afternoon, I sent you an email on Friday but didn't hear

back.I offer affordable VA support. Could we schedule a brief 5-minute call

next Tuesday or Wednesday? Thank you! Kundan VA Team!! On Fri, Dec 12, 2025,

at 9:43 AM, < > wrote:

Content analysis details: (8.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

Donation spam

Posted by Dave Yadallee on Saturday, February 28. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 28 Feb 2026 01:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwFdV-00000000MNn-31YR

for dave@doctor.nl2k.ab.ca;

Sat, 28 Feb 2026 01:25:17 -0700

Resent-From: The Doctor

Resent-Date: Sat, 28 Feb 2026 01:25:17 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [200.192.64.24] (port=50108 helo=lnpmf-zimbra.pmf.sc.gov.br)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vwCwp-000000009MA-3a9h

for sales@nk.ca;

Fri, 27 Feb 2026 22:33:13 -0700

Received: from localhost (localhost.localdomain [127.0.0.1])

by lnpmf-zimbra.pmf.sc.gov.br (Postfix) with ESMTP id 9DC3A1985835;

Sat, 28 Feb 2026 00:38:36 -0300 (-03)

Received: from lnpmf-zimbra.pmf.sc.gov.br ([127.0.0.1])

by localhost (lnpmf-zimbra.pmf.sc.gov.br [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id GnY7g4pfY_lE; Sat, 28 Feb 2026 00:38:36 -0300 (-03)

Received: from localhost (localhost.localdomain [127.0.0.1])

by lnpmf-zimbra.pmf.sc.gov.br (Postfix) with ESMTP id 8DBF4198580A;

Sat, 28 Feb 2026 00:38:33 -0300 (-03)

DKIM-Filter: OpenDKIM Filter v2.10.3 lnpmf-zimbra.pmf.sc.gov.br 8DBF4198580A

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pmf.sc.gov.br;

s=C9FDC13E-AA56-11EA-95E9-DD25EFAE2574; t=1772249913;

bh=4UEHNDS31GRLR7vJbQF63El11KbKwYSmjgxHW+8JPcI=;

h=Date:From:Message-ID:MIME-Version;

b=cLlQKVb38yCNxwb7T34xRxzKJE/zBNVzQmpzrECPxCIrVUXAIpwnvJCkIpLU3DL5S

77YLKFyicd/v2a5a9AhnpEH0XD9DlpGzIAPcp4KADWXgyO/392vN+YGAdDoqg3MitA

g5Apoti8JDFdV7YlT4kuLXu8NDh+q0xztDfiRKm6O6fEYwPcHbMsjBFlcPqyLxUNS+

/Rajs5jCMSwsuLWiGLP6LBWQwVY7NTx06+LbwWcvJSCZHO9cdDG2masRgp+3lH5OjB

DyQHJ32bB3mKHmB8xRvysNqdmgu8U4UuiB3heGrXgBQhII/w2evXcSib1f9o2XM4wo

UfU6dZg0xL5cw==

X-Virus-Scanned: amavisd-new at pmf.sc.gov.br

Received: from lnpmf-zimbra.pmf.sc.gov.br ([127.0.0.1])

by localhost (lnpmf-zimbra.pmf.sc.gov.br [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id 5PV2pkt_BTuc; Sat, 28 Feb 2026 00:38:33 -0300 (-03)

Received: from lnpmf-zimbra.pmf.sc.gov.br (lnpmf-zimbra.pmf.sc.gov.br [200.192.64.24])

by lnpmf-zimbra.pmf.sc.gov.br (Postfix) with ESMTP id DFC0E19857FA;

Sat, 28 Feb 2026 00:38:25 -0300 (-03)

Date: Sat, 28 Feb 2026 00:38:25 -0300 (BRT)

From: Cheng Saephan

Reply-To: Cheng Saephan

Message-ID: <170048781.31208672.1772249905835.JavaMail.zimbra@pmf.sc.gov.br>

Subject: Donation of 2.8 Dollars.

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_fc369b15-1be0-43ed-aa09-b7a1efcde323"

X-Originating-IP: [140.174.187.15]

X-Mailer: Zimbra 8.8.15_GA_4508 (zclient/8.8.15_GA_4508)

Thread-Index: HMBDxUdinZH1BtKGP+ptxQA0lv+k4Q==

Thread-Topic: Donation of 2.8 Dollars.

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview:

The sum of 2.8 million Dollars has been donated to you

by Mr Cheng Saephan. Get back for more details via (chengsaephandonation83@gmail.com)

FOR MORE INFORMATION.

The sum of 2.8 million Dollars has

been donated to you by Mr Cheng Saephan. Get back for more details via (chengsaephandonation83@gmail.com)

FOR MORE INFORMATION.

Content analysis details: (14.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[200.192.64.24 listed in dnsbl.ahbl.org]

[200.192.64.24 listed in dnsbl.ahbl.org]

[200.192.64.24 listed in dnsbl.ahbl.org]

[200.192.64.24 listed in dnsbl.ahbl.org]

[140.174.187.15 listed in dnsbl.ahbl.org]

[140.174.187.15 listed in dnsbl.ahbl.org]

[140.174.187.15 listed in dnsbl.ahbl.org]

[140.174.187.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[200.192.64.24 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[200.192.64.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[200.192.64.24 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[200.192.64.24 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[200.192.64.24 listed in list.dnswl.org]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[chengsaephandonation83(at)gmail.com]

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.0 XFER_LOTSA_MONEY Transfer a lot of money

Subject: {SPAM?} Donation of 2.8 Dollars.

--=_fc369b15-1be0-43ed-aa09-b7a1efcde323

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

The sum of 2.8 million Dollars has been donated to you by Mr Cheng Saephan. Get back for more details via (chengsaephandonation83@gmail.com) FOR MORE INFORMATION.

--=_fc369b15-1be0-43ed-aa09-b7a1efcde323

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

<div>The sum of 2.8 million Dollars has been donated to you by Mr Cheng Saephan. Get back for more details via (chengsaephandonation83@gmail.com) FOR MORE INFORMATION.<br /></div>

--=_fc369b15-1be0-43ed-aa09-b7a1efcde323--

Accounting Assistance spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on Friday, February 27. 2026

--_000_TYZPR06MB7528A17488FFF3CCE3AE11629973ATYZPR06MB7528apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi,

Circling back in case accounting support is still on your radar.

Open to a quick discussion this week?

Best,

________________________________

From: Michal Mars

Sent: 21 February 2026 19:25

Subject: Quick accounting Support

Hi,

We provide reliable, cost-effective accounting support as your offshore ext=

ension.

Shall I share a brief overview with pricing?

Warm regards,

Michal

--_000_TYZPR06MB7528A17488FFF3CCE3AE11629973ATYZPR06MB7528apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

11pt; color: rgb(0, 0, 0);">

Hi,

11pt; color: rgb(0, 0, 0);">

amily: Calibri, sans-serif; font-size: 11pt;">

Circling back in case accounting
> support is still on your radar.

Open to a quick discussion this week?

amily: Calibri, sans-serif; font-size: 11pt;">

Best,

gn=3D"center">

amily: Calibri, sans-serif; font-size: 11pt;">

From: Michal Mars

Sent: 21 February 2026 19:25

Subject: Quick accounting<=

/span> Support

amily: Calibri, sans-serif; font-size: 11pt;">

amily: Calibri, sans-serif; font-size: 11pt;">

Hi,

amily: Calibri, sans-serif; font-size: 11pt;">

amily: Calibri, sans-serif; font-size: 11pt;">

We provide reliable, cost-effective ac=

counting support as your offshore extension.

amily: Calibri, sans-serif; font-size: 11pt;">

amily: Calibri, sans-serif; font-size: 11pt;">

Shall I share a brief overview with pricing?

amily: Calibri, sans-serif; font-size: 11pt;">

amily: Calibri, sans-serif; font-size: 11pt;">

Warm regards,

amily: Calibri, sans-serif; font-size: 11pt;">

Michal

amily: Calibri, sans-serif; font-size: 11pt;">

--_000_TYZPR06MB7528A17488FFF3CCE3AE11629973ATYZPR06MB7528apcp_--

Accounting Assistance spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on Friday, February 27. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Feb 2026 11:43:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vw2nL-000000007Iq-0QH9

for dave@doctor.nl2k.ab.ca;

Fri, 27 Feb 2026 11:42:35 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Feb 2026 11:42:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012063.outbound.protection.outlook.com ([52.103.43.63]:15445 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vw09w-00000000JVc-32p4

for sales@nk.ca;

Fri, 27 Feb 2026 08:53:56 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=tLqSm7RxIHBUMDTYj3jL9YX4gufU1DyQYFGbvkkUjsGR1zf1Z2PWYJMWXCW5MIBPeLyqiBizUhBs4uVMtNe0Y1ZACkT9O4rjpfJPFKVH9yn7lcN55Uwv8vrLIIMB8iudi3HSJbxvkm4m5U0kxYbveMMRkXOuRBjSzCmdYJyzTpVT+9ApN/h0ZQY5heS8r7cmaB/N0mjKlXf9d/8CrCL+QyHOXqJSl7/IboAMmZQOMEP7Djg0RYP/AYab/AfuYY09nylC9pY6ZjehAQgo+dly2tGskilHOLr1ILCWAwMNauztcRzX0baM34KGtWjAk1HN/JBQsrU7bWSNO207Pcm5qw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=sZwuESajXGrGldgZtoQpG7J6F6sh+2eyKgc4KJ+zyro=;

b=I2lBWxKrWZqwcDXUYhICjDmEQORCUMsF4oGXMcKp6wvtH+TI5ELeSDfadSBVYxN4uYWUuMqSDwvB5XH3RaprvEKWWN3cJ3Uafq/xN+aqabT8IOkdz+a4ZPGF86mGYPuOuvr16BylWBNENyvdkcOLboRkDZzx5plmj/ZM8VdxD/Sx52pE8Fp8b6KRX9967ErcpIfgkvn14zaFheokzKlB7Ze6QpsyRmC0k0XGmvqlV/P8ITV0L/57Hekao+WRRlQvDKuU7K+XvWTTGFu0HXATrIL0iNXBDEER/Hzdpclhvbo/YIz99ijMk6n3tgdklsjiSZj6+jNUsFKlVoZOX6ZcXQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=sZwuESajXGrGldgZtoQpG7J6F6sh+2eyKgc4KJ+zyro=;

b=FjrYLzzePY73+yPPapKN8TKGNRSgP5vBBUiNRKqQ7j+maFBA91nfY4FFZJXsaSBxvghcNTZDXup80uLZP8V+Us751qV+KK3GJuhZIUcFB1EceHBDh9+SvLFeGacAoVMM1B7cz+7y1SPebGuXA+kM2XaafN1K0uI/UHaiGRzkCjbS6MS6tfts6I5QRZae3ii1Hi5vAaHylqbaNFv4rw2eqyjfoOv/V+HT9rkCe+C7goi4/NKqa7lLd1B8uPBcdkbsN9BkMma48PIlxEdCLjpKc4sv5WTHJ2+yjYHJcSBI2IwIMjSCj/aDVmMPVrVk35zHDJA8i9E5qUEAKnn+cRO5Hw==

Received: from TYZPR06MB7528.apcprd06.prod.outlook.com (2603:1096:405:df::13)

by SEZPR06MB6330.apcprd06.prod.outlook.com (2603:1096:101:131::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.23; Fri, 27 Feb

2026 15:52:15 +0000

Received: from TYZPR06MB7528.apcprd06.prod.outlook.com

([fe80::1d4f:e0d4:1a1:6c46]) by TYZPR06MB7528.apcprd06.prod.outlook.com

([fe80::1d4f:e0d4:1a1:6c46%6]) with mapi id 15.20.9654.014; Fri, 27 Feb 2026

15:52:15 +0000

From: Michal Mars

To: Michal Mars

Subject: Re: Your Availability for a Short Meeting?

Thread-Topic: Your Availability for a Short Meeting?

Thread-Index:

AdyklxaroUx+vj+cSAaK82YxUQgJtQBH2zkRAAAGxfcAKwfH+QAtiPapADnx/jkAABY7pQ==

Date: Fri, 27 Feb 2026 15:52:15 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR06MB7528:EE_|SEZPR06MB6330:EE_

x-ms-office365-filtering-correlation-id: ddd8e5d6-db47-498c-1e0f-08de76182ddb

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|8062599012|8060799015|19110799012|15080799012|461199028|31061999003|39105399006|15030799006|20031999003|440099028|3412199025|102099032|35041999009|39145399003|41105399003|40105399003|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?DwF3XtLiDFXC9cdnRbx1oLp7oiVqlmBb+e+dGmlFx3zByqauSqBItv/Xdx?=

=?iso-8859-1?Q?3Lmp2Bspt8+kJ8KAtAmBuwA4Ug7Mp8A8dguvIAS+H5T66yw5lGsdAFy2vJ?=

=?iso-8859-1?Q?wcFae5wIkpeZ8sJw/qO9znS06EPnMpbLDsRMrfr+b3NPtsf2a5hrOCtR77?=

=?iso-8859-1?Q?pRNT7dUzKWSUS/kGlzFj7OptgB43QjM8F5AfWnDOXLD6YzHgDuQQdMSbui?=

=?iso-8859-1?Q?YQMlJAhknLhXzuO3aw2+AMTBM4c2ALEoF5eiDUI7hgKAAopH4G7F9XcKtk?=

=?iso-8859-1?Q?/Wle+NCecPbf4vp+SjQH5MeonBkB+BRZUZLEWBLcD/zl8TKXhbqWBO6ETJ?=

=?iso-8859-1?Q?9R+Zv+fDzsDQCnnFSqGXZeW9GwxOR/8MMHi3aYvGtVWzvpDMwnxjeXmHQG?=

=?iso-8859-1?Q?YjQ4sWioNV+WdPexkuI1JTBqaXgrjmL/b7t3/jAEO/z8Z1G9vkh3NpPeYU?=

=?iso-8859-1?Q?1smpghnQHBPad4sTLQi6GZGqN1Uo9nWUEd5sP6Ow82jv+ENN1CTEofs44B?=

=?iso-8859-1?Q?G6pEKOIcs+B8PO3co0U208MZlFHDRDZ7wGwIMjPj6vpfpUwUkbPtRpmq4P?=

=?iso-8859-1?Q?QcnnWK8x6xlA5vQcW0YOlrHvRjr5IKoHnbcyoKmxKMy0Gp/CXRFxu/Erp2?=

=?iso-8859-1?Q?4VEiJGMXsKrBsQ8bb8Y+oUxSbCbSz6weEeVJ5SIIB3nXFXGS4fbjW79iLF?=

=?iso-8859-1?Q?kYpLUAoTZxgffiEhTnF9FRMrcAuCJx7TOO+C9KGImVkq0Qmfg4KBCMK11T?=

=?iso-8859-1?Q?hh1+UhBUnQ7pShoGwIgE1I6t5ZU+15ID2o8odKa+zFhCYTBs0AQNfCxLi7?=

=?iso-8859-1?Q?mDwu7C9HyWANTVeo3C8fem08WeVSlyvFQLLE2bZsh48CjLPD2Lunvj/82o?=

=?iso-8859-1?Q?TOVXFjUiBcjPmPnBp2f1rkXukosaV4C07kcrjJ24LcNHiiWltMNE+Vj5Xs?=

=?iso-8859-1?Q?678yHlGvOsbHj3bv6mU44Dh8mLN+GJFglnrnaTDtK+FMub4BwzpIbw72fu?=

=?iso-8859-1?Q?ud1+YOEawzifh3FMiarXHyQnOugG79TZYkcF/CEqOFQdfHtPw621axES3H?=

=?iso-8859-1?Q?I7pnJnTEkuR+UajVCuGoYIhJAaPVN27Egba0paBZZDbxlMcI9GIICscwET?=

=?iso-8859-1?Q?bCyQ5SrQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?w8yVBfCHH97gWMdJV2eaFv8qOtrVx4MpTqwa1WWZYyVN7MCF3KvQ8fpVCg?=

=?iso-8859-1?Q?KjjH14LQpN83Bx/cNkzsJJ/wdKYJa8EdSqjRS0ykM/rnp2zvzE3sOlOpgD?=

=?iso-8859-1?Q?OcYGh4b5qSVMJxpxw1Dn10Z94iQ46pKe/5NcloN/flgDu8q4KDTXTWH+Ch?=

=?iso-8859-1?Q?WHwx5xKOQz8O0McBhvmjunuH5CfxJpTeHEAjfdncBD2rv6wuAYLceJniS7?=

=?iso-8859-1?Q?1cD1EVp92fKFz1TkLrJJNt86fnYr7RmNHXkq266miPPZLTTsyJ7wTWO+S2?=

=?iso-8859-1?Q?fXiqIINWVo0drRTb1aegumLrACiI6pXr1vQZx7J5FAwFDikAX9+qvF8H9Y?=

=?iso-8859-1?Q?1Nso1n0DTj8yKtXi8XIX/1T7Oie2ezy2+ir50n1S8LVS3AlUrlhj0VhLwC?=

=?iso-8859-1?Q?9KiFSIbSZ0xX7CpPW8GYrFR9k1WY5tOQ+ftjQ08qnduvtEVDhtLIO9Ej3i?=

=?iso-8859-1?Q?gk4zqTHEsvxPKIJ3NJYZakd2NDmmcxa1YDcN1PvmfLMaHXAm9vmrjA67df?=

=?iso-8859-1?Q?5+Y6fmwCG2mkvcET6a8FTJO9VWoNDRag3BbQJ3gv/6YzxNOG5/ECdoy5EA?=

=?iso-8859-1?Q?Rp1TMibfKpp7xiyFB4Nwx6vEDq9a3SW2ZOk4mPvK6fepr1yewYc3H3+Nx1?=

=?iso-8859-1?Q?f/ncxk8zTTeg00ZMmgWLGSrzMe9+qF14qrQLeJQrKxLfTrXg2UcXVH3XFD?=

=?iso-8859-1?Q?hWYf6Aw4NgfQ7ZYNbZz8G4m5bhDvwvger+rz/XihTtKP6bqVfAroaE7kr2?=

=?iso-8859-1?Q?s3gtLHDK8ax4KJwev7YGGJDJqGJ026caHhm3g6BZ1l3K1jjjjVmnezka/R?=

=?iso-8859-1?Q?qFkmJngrrz2nBOD5KQcT4tVbDTTZu1azlojUr7FLhMsRlC8EdoI6izb+Mv?=

=?iso-8859-1?Q?uqQkl8FrvMrDMvfyBERCh9cXEE8OGPQWzegUzOPOpBE1jouyMlPYzVCt8X?=

=?iso-8859-1?Q?CPfFkRFDkJC8PzsDthZzZJTkhK/VSQ/MHWKkcRVriaREBmLJ8AXgVvZHkq?=

=?iso-8859-1?Q?m7hGbHSHXXMOQCgpSV8pekup8TbJFo44hCf1CKm3qFQ0kOAU7T6oiiZEsz?=

=?iso-8859-1?Q?PiKbvxgU1WQujlFTGfZ7GEpVDF83mVXWtnrCKxshoqAJb09Yd6kcRN6Nnv?=

=?iso-8859-1?Q?/nltPicr8G6lw2rBWgBR06MEyV5xLD0hTB64nqDzdsm6NMGNI2/tdyJvb/?=

=?iso-8859-1?Q?FGg0CWMOGkxDgigPX397vZyfPeXrnzQZAJjlSHw+PzFqFBOw1F7HdsLkxv?=

=?iso-8859-1?Q?tysM76TPY8KWsJcFI3hgUnIEEitCKCVg2117NU5daeCYfSI76L3taeJAx+?=

=?iso-8859-1?Q?kIRcAh1ME5+0bQQscC6sZujXvSX6VOsLZ+b0b2UEVpAgkyVnLzL4l1FlSM?=

=?iso-8859-1?Q?GUEdnmIRde2gVMLenLUQXCab4lCCAoA6NF+DRTHsI7ZEuoos/Q4WmRjTSC?=

=?iso-8859-1?Q?99ueO2Xnu4pl0zbApzORoH/J+poT57oF4JiMSgDp2Q6gSl7Lokqxk4MflT?=

=?iso-8859-1?Q?lKJa8PmuitzAGtLjcCWmw1?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR06MB7528A17488FFF3CCE3AE11629973ATYZPR06MB7528apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR06MB7528.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ddd8e5d6-db47-498c-1e0f-08de76182ddb

X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2026 15:52:15.2974

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR06MB6330

Norton Phish from Google Gmail Part 5

Posted by Dave Yadallee on Friday, February 27. 2026

br>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.<=

br>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.<=

br>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.<=

br>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.<=

br>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.<=

br>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.<=

br>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.<=

br>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.<=

br>.
.
.
.
.
.
.
.
.
.
.
.
.
.
.<=

br>.
.
.
.
.
.
.
.
.
.
.
.

" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D""><=

tbody>

tion: rtl; font-size: 0; padding: 24px 32px; text-align: left; vertical-ali=

gn: top;" class=3D"main-container-inner">

tr; display: inline-block; vertical-align: top; width: 100%;overflow: hidde=

n; word-wrap: break-word;">
g=3D"0" role=3D"presentation" width=3D"100%" class=3D"main-column-table-ltr=

" style=3D"padding-right: 32px; padding-left: 0;;table-layout: fixed;">
dy>

">
ion" width=3D"100%" style=3D"table-layout: fixed;">
tr>

ze: 0; padding: 0; text-align: left; word-break: break-word;;padding-bottom=

:2px;">

;font-weight: 400; font-size: 22px; line-height: 28px;color: #3c4043; text-=

decoration: none;" class=3D"primary-text" role=3D"presentation">
rop=3D"name">Receipt 294-KSYX order confirmation logged

break-word;;padding-bottom:24px;">

serif;font-style: normal; font-weight: 400; font-size: 14px; line-height: 2=

0px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D=

"primary-text" role=3D"presentation">
rop=3D"startDate" datetime=3D"20260227T050000Z">
dDate" datetime=3D"20260228T043000Z">Friday Feb 27 =E2=

=8B=85 1pm =E2=80=93 Saturday Feb 28, 2026 =E2=8B=85 12:30pm (Singapore Sta=

ndard Time)

; text-align: left; word-break: break-word;;padding-bottom:24px;">

e=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; =

font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; t=

ext-decoration: none;" class=3D"primary-text" role=3D"presentation">
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" styl=

e=3D"padding-bottom: 4px;">
>

-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-=

font-smoothing: antialiased;margin: 0; padding: 0;">Organizer

s=3D"primary-text underline-on-hover" style=3D"display: inline-block;;color=

: #3c4043; text-decoration: none;" href=3D"mailto:kirankummari0786@ppjss.or=

g">Manela Stapleton
pe=3D"http://schema.org/Person">
tapleton"/>
>

erline-on-hover" style=3D"display: inline-block;;color: #70757a; text-decor=

ation: none;" href=3D"mailto:kirankummari0786@ppjss.org">kirankummari0786@p=

pjss.org

; text-align: left; word-break: break-word;;padding-bottom:24px;">

e=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; =

font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; t=

ext-decoration: none;" class=3D"primary-text" role=3D"presentation">
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" styl=

e=3D"padding-bottom: 4px;">
table>(Guest list has been hidden at organizer's request)
table>

-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-=

font-smoothing: antialiased;margin: 0; padding: 0;">Guests

ody>

--000000000000a1a011064bcfe35c--

Norton Phish from Google Gmail Part 4

Posted by Dave Yadallee on Friday, February 27. 2026

/InformAction">
chema.org/Event">
g/EventScheduled"/>
//schema.org/Organization">
ar"/>
on4min0jaup9r1ts"/>
f; line-height: 1px; height: 0; max-height: 0; width: 0; max-width: 0; opac=

ity: 0; overflow: hidden;" itemprop=3D"name">Receipt 294-KSYX order confirm=

ation logged
datetime=3D"20260227T050000Z">
"20260228T043000Z">
spacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" =

class=3D"body-container">

">

"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width=

:100%;" class=3D"">

n itemscope itemtype=3D"http://schema.org/EmailMessage">

ription">2026-02-27
Billing Manager- Gerald Apa

Your account stays cur=

rent and enabled.

Customer Support Notice,

Your membership request has =

been successfully received and confirmed. Thank you for choosing our servic=

es.

Please note that this membership is enrolled in automatic renewal eve=

ry 1-Year. You may disable renewal at least 24 hours prior to the end of th=

e active term.

For assistance, please contact our support team at 1.859. =

312.1845.

Order Information Panel
Bill id- 6635-AYKK-5961
Account T=

ype- N0RT0N LIFELOCK
Product- Prime Defense Coverage
Service Term- On=

e Year
Payment Received- $ 476.00

If you would like to cancel your mem=

bership or require support, please contact (859) 312-1845.

Norton Phish from Google Gmail Part 3

Posted by Dave Yadallee on Friday, February 27. 2026

@font-face {

font-family: 'Google Sans';

font-style: normal;

font-weight: 700;

src: url(//fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLV154t=

zCwM.ttf) format('truetype');

}

=20

=20

=20

=20

Norton Phish from Google Gmail Part 2

Posted by Dave Yadallee on Friday, February 27. 2026

--000000000000a1a011064bcfe35c

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

MjAyNi0wMi0yNyBCaWxsaW5nIE1hbmFnZXItIEdlcmFsZCBBcGEgWW91ciBhY2NvdW50IHN0YXlz

IGN1cnJlbnQgYW5kICANCmVuYWJsZWQuIEN1c3RvbWVyIFN1cHBvcnQgTm90aWNlLCBZb3VyIG1l

bWJlcnNoaXAgcmVxdWVzdCBoYXMgYmVlbiAgDQpzdWNjZXNzZnVsbHkgcmVjZWl2ZWQgYW5kIGNv

bmZpcm1lZC4gVGhhbmsgeW91IGZvciBjaG9vc2luZyBvdXIgc2VydmljZXMuICANClBsZWFzZSBu

b3RlIHRoYXQgdGhpcyBtZW1iZXJzaGlwIGlzIGVucm9sbGVkIGluIGF1dG9tYXRpYyByZW5ld2Fs

IGV2ZXJ5ICANCjEtWWVhci4gWW91IG1heSBkaXNhYmxlIHJlbmV3YWwgYXQgbGVhc3QgMjQgaG91

cnMgcHJpb3IgdG8gdGhlIGVuZCBvZiB0aGUgIA0KYWN0aXZlIHRlcm0uIEZvciBhc3Npc3RhbmNl

LCBwbGVhc2UgY29udGFjdCBvdXIgc3VwcG9ydCB0ZWFtIGF0IDEuODU5LiAgDQozMTIuMTg0NS4g

T3JkZXIgSW5mb3JtYXRpb24gUGFuZWwgQmlsbCBpZC0gNjYzNS1BWUtLLTU5NjEgQWNjb3VudCBU

eXBlLSAgDQpOMFJUME4gTElGRUxPQ0sgUHJvZHVjdC0gUHJpbWUgRGVmZW5zZSBDb3ZlcmFnZSBT

ZXJ2aWNlIFRlcm0tIE9uZSBZZWFyICANClBheW1lbnQgUmVjZWl2ZWQtICQgNDc2LjAwIElmIHlv

dSB3b3VsZCBsaWtlIHRvIGNhbmNlbCB5b3VyIG1lbWJlcnNoaXAgb3IgIA0KcmVxdWlyZSBzdXBw

b3J0LCBwbGVhc2UgY29udGFjdCAoODU5KSAzMTItMTg0NS4gMjAyNiBOMFJUME4gMzYwLCBsbGMu

IEFsbCAgDQpyaWdodHMgIA0KcmVzZXJ2ZWQuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

DQoNClJlY2VpcHQgMjk0LUtTWVggb3JkZXIgY29uZmlybWF0aW9uIGxvZ2dlZA0KRnJpZGF5IEZl

YiAyNyDii4UgMXBtIOKAkyBTYXR1cmRheSBGZWIgMjgsIDIwMjYg4ouFIDEyOjMwcG0NClNpbmdh

cG9yZSBTdGFuZGFyZCBUaW1lDQoNCg0KDQpPcmdhbml6ZXINCk1hbmVsYSBTdGFwbGV0b24NCmtp

cmFua3VtbWFyaTA3ODZAcHBqc3Mub3JnDQoNCg==

--000000000000a1a011064bcfe35c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-= font-smoothing: antialiased;margin: 0; padding: 0;">Organizer

-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-= font-smoothing: antialiased;margin: 0; padding: 0;">Guests

-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-=

font-smoothing: antialiased;margin: 0; padding: 0;">Organizer

-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-=

font-smoothing: antialiased;margin: 0; padding: 0;">Guests