McAfee Phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 05:54:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuruQ-000000008tq-1sIY

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 05:53:02 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 05:53:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f201.google.com ([209.85.167.201]:55709)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vurRr-000000005yl-43Xd

for root@nl2k.ab.ca;

Tue, 24 Feb 2026 05:23:41 -0700

Received: by mail-oi1-f201.google.com with SMTP id 5614622812f47-45f0bfd68a3so22120730b6e.3

for ; Tue, 24 Feb 2026 04:22:44 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1771935758; x=1772540558; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=LeMIi/VvblqBL8yZEWKVqc3H7+cLuZt2Gr4BBinqdLM=;

b=GNeoKoSo9b5t/Ni40UA99/u/OcV34g2dfC4DK9dngpohl6QfKxsGL9Y9GqZuPt4yBk

CZ4ABVsWlsBGH81YUNapbg5f0Ut1reiE5mVnV06JWnyMDba1gNu5rIvG7AFCrkAxf6Zw

JjTHlX1BWpoaXVYFHmAV3cVhE1hqZyRgM4n4i4I0YNJ3pC7Fc8szwTbDaYE8cJJqnuI1

/EYP4MliGSTi4UjukEMu7ujUt7X4XNNEK3zu9VlenlMYLBQLAWMcbt0EeJwY1yP0uclx

NkmQHRzX0/HQ+En5IhtQWlABGrj5siaZWfw8pUnJlkhv8FGoyOLg9YbhhLRv9WULKj4N

Jbjg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=hk28-org.20230601.gappssmtp.com; s=20230601; t=1771935758; x=1772540558; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=LeMIi/VvblqBL8yZEWKVqc3H7+cLuZt2Gr4BBinqdLM=;

b=BZiCvKmDB4eusaHJBLw5mM+K9VCBetRYqvTE/JsD7m+CvO1UT6my5B0Gch37wWfNb1

6kn4wEOoN27h2EGsKgPrEv1es9h9dvOcuBHFHYOoAPKnXeQlavMNr3R/LLpfcbyxZ16q

puuXkkX61v0K1ZdwRewg6b/t6qU2gWpTpC0IutY0jHfMhvfmF0cTLoRvzsKAMoWUwSlK

IzbfIVX2zhTg1RieFhWTWqI70vDMvQznRuh41uaBs/BLOUj8qMZ9ErktsDcugx2c+6aF

oZmDZ5WdZI5wjsVBS+doKzBfhVvkl9V9iUesZz/Nx3K79Ztxthl4rS/9ab9WQUJGm/9c

91ew==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771935758; x=1772540558;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=LeMIi/VvblqBL8yZEWKVqc3H7+cLuZt2Gr4BBinqdLM=;

b=n25t5wH12JffKu1FpaoRNnRM/d0o7CPHy2Z3nm+Zs/UdjhIXE3IKcDabx72PJgbEbW

tRgWCfVuUgqqv8T4tQo4FRG5k8OQs8wDMTakvb03A08JYsVAGd/6yqJLRYC0td34re0H

TWfbVicrHwuvA+AeLwv/3xoy7Cq8gg6AwP1SmT3+32qwh2vTGINaL7T/xr+yrC+1t0qV

vrq3njUgtddMlg6i9dx9pkY4VnHzXjjAsmGHnmHZ18dnlT+uM//ZeP/21hshaXIOOuFx

Sc4A1tZqjpT03oVKnF/SdRZDUciWUPKqP7ncAZHj9L6xDmn9Cc5ydO0AcPMGB0i2cUf2

fkPA==

X-Forwarded-Encrypted: i=1; AJvYcCX9TYfkYirD3JafVyWgyimilLK66xfPbgZB9ocSfbiaF/gSGVZQ0yCerH/jC4cwZK30Fcyo@nl2k.ab.ca

X-Gm-Message-State: AOJu0Yy6e7OQ12Qk1k0SEJb+gH3XigH2yj3XUHp8BS67gTvLKP6VBKj0

ax8Uje9Wv+9lPr9FfHFNaaXI4ComaEWSn8YSk/MjSkojXSngpoeBb9HIH1AqtskME16ioe1DwqO

QFB6WEAISI464YYlImnBBO9oshlM57TdkkfhfPXAydl524g==

MIME-Version: 1.0

X-Received: by 2002:a4a:e911:0:b0:679:a650:cc0e with SMTP id

006d021491bc7-679c44f4484mt7395847eaf.57.1771935758522; Tue, 24 Feb 2026

04:22:38 -0800 (PST)

Reply-To: Ellen Johnson

Sender: Google Calendar

Message-ID:

Date: Tue, 24 Feb 2026 12:22:38 +0000

Subject: Status update notice Transaction

From: Ellen Johnson

Content-Type: multipart/alternative; boundary="00000000000076b010064b90f133"

X-Spam_score: 13.6

X-Spam_score_int: 136

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Status update notice Transaction Status update notice Transaction

Tuesday Feb 24, 2026 â‹… 8:22pm Eastern Time - New York Dear Service User,Your

recent subscription update has been completed successfully.The 60 Months

membership under McAfee is now active.Purchase Insights DashboardTransaction

id- GDFU-7353-783Purchased [...]



Content analysis details: (13.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

[209.85.167.201 listed in dnsbl.ahbl.org]

[209.85.167.201 listed in dnsbl.ahbl.org]

[209.85.167.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.201 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_44 BODY: 4alpha-pock-4alpha

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.201 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.9 REPLYTO_WITHOUT_TO_CC No description available.

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Status update notice Transaction



--00000000000076b010064b90f133

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



U3RhdHVzIHVwZGF0ZSBub3RpY2UgVHJhbnNhY3Rpb24NCg0KU3RhdHVzIHVwZGF0ZSBub3RpY2Ug

VHJhbnNhY3Rpb24NClR1ZXNkYXkgRmViIDI0LCAyMDI2IOKLhSA4OjIycG0NCkVhc3Rlcm4gVGlt

ZSAtIE5ldyBZb3JrDQoNCg0KDQpEZWFyIFNlcnZpY2UgVXNlcixZb3VyIHJlY2VudCBzdWJzY3Jp

cHRpb24gdXBkYXRlIGhhcyBiZWVuIGNvbXBsZXRlZCAgDQpzdWNjZXNzZnVsbHkuVGhlIDYwIE1v

bnRocyBtZW1iZXJzaGlwIHVuZGVyIE1jQWZlZSBpcyBub3cgYWN0aXZlLlB1cmNoYXNlICANCklu

c2lnaHRzIERhc2hib2FyZFRyYW5zYWN0aW9uIGlkLSBHREZVLTczNTMtNzgzUHVyY2hhc2VkIFNl

cnZpY2UtIFByaW1lICANClByb3RlY3Rpb24gUGxhbkNvdmVyYWdlIFRlcm0tIDYwIE1vbnRoc1Rv

dGFsIENoYXJnZWQtIFVTRDQyOC42NkZvciBzdXBwb3J0LCAgDQpwbGVhc2UgY2FsbCA4MTAgMjg4

IDQ1MDUuVGhhbmsgeW91IGZvciBjaG9vc2luZyBvdXIgIA0Kc2VydmljZXMuVGhhbmtmdWxseSws

TWljaGFlbCBDb2xsaW5zQmlsbGluZyBUZWFtODEwIDI4OCA0NTA1wqkgMjAyNiBNY0FmZWUgIA0K

TExDLiBBbGwgcmlnaHRzIHJlc2VydmVkLjIyMjMgQXZlbmlkYSBEZSBMYSBQbGF5YTsgIzIwMyBQ

b21wYW5vIEJlYWNoIEZsICANCjMzMzA4IFVzYQ0KDQpPcmdhbml6ZXINCkVsbGVuIEpvaG5zb24N

CmFid3dhbHRlcnNAaGsyOC5vcmcNCg0KR3Vlc3RzDQooR3Vlc3QgbGlzdCBoYXMgYmVlbiBoaWRk

ZW4gYXQgb3JnYW5pemVyJ3MgcmVxdWVzdCkNCg0K

--00000000000076b010064b90f133

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

Questtrade Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 05:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vurtA-000000002Q8-1NSU

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 05:51:44 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 05:51:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail4.jurnalminang.com ([34.130.103.215]:40602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuqDx-000000003LL-2EfZ

for root@nk.ca;

Tue, 24 Feb 2026 04:05:13 -0700

Authentication-Results: mail4.jurnalminang.com;

auth=pass (login)

From: =?utf-8?B?bm8tcmVwbHk=?=

To: =?utf-8?B?cm9vdEBuay5jYQ==?=

Subject: =?utf-8?B?UXVlc3RyYWRlOiBZb3VyIFctOEJFTiBGb3JtIEhhcyBFeHBp?=

=?utf-8?B?cmVk?=

Date: Tue, 24 Feb 2026 11:04:15 +0000

Message-ID:

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64

X-Priority: 3 (Normal)

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)

Importance: Normal

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

Received: from localhost (Unknown [127.0.0.1])

by mail4.jurnalminang.com (Haraka) with ESMTPSA id 942B2463-E89B-498A-A371-E8647B3063FE.1

envelope-from

tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (authenticated bits=0);

Tue, 24 Feb 2026 11:04:15 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mail4.jurnalminang.com; h=Content-Transfer-Encoding: Content-Type:

MIME-Version: Message-ID: Date: Subject: To: From; q=dns/txt;

s=s20260223160; t=1771931056;

bh=yEyby3yHSY/3KEEgFdjeJHYaTS+gudE3iWsHIKh2rt0=;

b=j0JpLH3j9lYMv6TwJ0oAuvABXjdHL0lKbpASPrDa1fkDw49ccR/NGeKJGjYw+LSGOfPxQLhf7

WCsrwPDla6SHJPR7OB0ObzGi2oJNdOiWCdEbnMAYfQnqvQVfIic/x6uvMXHEFkso/oIlQkX154b

Q8ZXgXHdycdBQOR3oSV+jDg=

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Confirmation of Tax Form Expiration – W-8BEN Renewal Required

for 2026 Dear Questrade Client,



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

Subject: {SPAM?} =?utf-8?B?UXVlc3RyYWRlOiBZb3VyIFctOEJFTiBGb3JtIEhhcyBFeHBp?=

=?utf-8?B?cmVk?=







Confirmation of Tax Form Expiration – W-8BEN Renewal Required for 2026



Dear Questrade Client,



This notice is issued to formally confirm that the W-8BEN form previously provided for your account has expired and is no longer valid for tax compliance or reporting purposes. The W-8BEN is a required certification used to establish your status as a non-U.S. individual and to determine the appropriate withholding and reporting treatment under applicable tax regulations.



According to regulatory standards, W-8BEN forms are valid only for a limited period. Once this period ends, the form can no longer be relied upon to support reduced withholding rates or eligibility for tax treaty benefits. Our records indicate that your W-8BEN has reached the end of its validity and must be renewed.



Until a renewed and approved W-8BEN is received, regulatory requirements may require standard withholding treatment to be applied to your account. This may affect how certain payments, distributions, or account activities are processed during this period.



To restore compliant tax documentation status, you are required to submit a renewed W-8BEN that will generally remain valid for the applicable IRS validity period, provided your tax residency and personal information remain accurate. The renewal process must be completed through our secure documentation system:

Complete Update



Login with the email address you used to register to complete your application today, or your Questrade Username and password.

Thank you,

Questrade Team

Questtrade Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 05:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vurtA-000000002Q8-1NSU

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 05:51:44 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 05:51:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail4.jurnalminang.com ([34.130.103.215]:40602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuqDx-000000003LL-2EfZ

for root@nk.ca;

Tue, 24 Feb 2026 04:05:13 -0700

Authentication-Results: mail4.jurnalminang.com;

auth=pass (login)

From: =?utf-8?B?bm8tcmVwbHk=?=

To: =?utf-8?B?cm9vdEBuay5jYQ==?=

Subject: =?utf-8?B?UXVlc3RyYWRlOiBZb3VyIFctOEJFTiBGb3JtIEhhcyBFeHBp?=

=?utf-8?B?cmVk?=

Date: Tue, 24 Feb 2026 11:04:15 +0000

Message-ID:

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64

X-Priority: 3 (Normal)

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)

Importance: Normal

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

Received: from localhost (Unknown [127.0.0.1])

by mail4.jurnalminang.com (Haraka) with ESMTPSA id 942B2463-E89B-498A-A371-E8647B3063FE.1

envelope-from

tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (authenticated bits=0);

Tue, 24 Feb 2026 11:04:15 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mail4.jurnalminang.com; h=Content-Transfer-Encoding: Content-Type:

MIME-Version: Message-ID: Date: Subject: To: From; q=dns/txt;

s=s20260223160; t=1771931056;

bh=yEyby3yHSY/3KEEgFdjeJHYaTS+gudE3iWsHIKh2rt0=;

b=j0JpLH3j9lYMv6TwJ0oAuvABXjdHL0lKbpASPrDa1fkDw49ccR/NGeKJGjYw+LSGOfPxQLhf7

WCsrwPDla6SHJPR7OB0ObzGi2oJNdOiWCdEbnMAYfQnqvQVfIic/x6uvMXHEFkso/oIlQkX154b

Q8ZXgXHdycdBQOR3oSV+jDg=

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Confirmation of Tax Form Expiration – W-8BEN Renewal Required

for 2026 Dear Questrade Client,



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

[34.130.103.215 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.130.103.215 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

[34.130.103.215 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

Subject: {SPAM?} =?utf-8?B?UXVlc3RyYWRlOiBZb3VyIFctOEJFTiBGb3JtIEhhcyBFeHBp?=

=?utf-8?B?cmVk?=







Confirmation of Tax Form Expiration – W-8BEN Renewal Required for 2026



Dear Questrade Client,



This notice is issued to formally confirm that the W-8BEN form previously provided for your account has expired and is no longer valid for tax compliance or reporting purposes. The W-8BEN is a required certification used to establish your status as a non-U.S. individual and to determine the appropriate withholding and reporting treatment under applicable tax regulations.



According to regulatory standards, W-8BEN forms are valid only for a limited period. Once this period ends, the form can no longer be relied upon to support reduced withholding rates or eligibility for tax treaty benefits. Our records indicate that your W-8BEN has reached the end of its validity and must be renewed.



Until a renewed and approved W-8BEN is received, regulatory requirements may require standard withholding treatment to be applied to your account. This may affect how certain payments, distributions, or account activities are processed during this period.



To restore compliant tax documentation status, you are required to submit a renewed W-8BEN that will generally remain valid for the applicable IRS validity period, provided your tax residency and personal information remain accurate. The renewal process must be completed through our secure documentation system:

Complete Update



Login with the email address you used to register to complete your application today, or your Questrade Username and password.

Thank you,

Questrade Team

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 05:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vursl-000000001Cu-18pY

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 05:51:19 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 05:51:19 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f175.google.com ([209.85.210.175]:49562)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vup9f-000000000LE-1vym

for sales@nk.ca;

Tue, 24 Feb 2026 02:56:44 -0700

Received: by mail-pf1-f175.google.com with SMTP id d2e1a72fcca58-824adc96ad2so5353378b3a.3

for ; Tue, 24 Feb 2026 01:55:47 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mobileapps.agency; s=google; t=1771926941; x=1772531741; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=Ub6gbAm98UcziMsO+gETJ1VHSjjv2tmkCtpKPiu4HUQ=;

b=O4N6kWAs8/9Qna2/7r5QlrkvS4yn4wN9kTByrvNb0IDdE/Sz6ny9+lMt/ogzG6n+qK

0rn+AjC9KWVp8D9iWelLBwkdk6rb1t6MwAaMlV+6ixysG/0RvJ8pZa2gsV71CvIhPEqf

AjXtYAuywDvkx+hSR94uLtroxEHPUaIGVYZnRkLNvtY6Krxxyp36OdE6d5WB7GTXdF5O

U0E+Pp3T2uYi2BECqeuRA/1rxURdRyHzH65PgUNp5CT8nxXQup8zk1GnUirvl7l2yEzH

NOff8Hs7lJea6LE4EE+YSY+w4bSbYrl5EYZMVP0ZmZ17TctzaViEMUAO9YzLycKIY+lk

gNVA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771926941; x=1772531741;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=Ub6gbAm98UcziMsO+gETJ1VHSjjv2tmkCtpKPiu4HUQ=;

b=PypbcdRe3roSliDCEkIjBHbNUBb4cye/Ky28R+uLFq8g9eAOAYBR0kZFKZE7DdhpCR

QoyWXLuwAa7mG/6ZbB+S7GxG5srIfql7h5dBp0L6it8sEEAjxaA5dnR+HMuTeMuMq9cS

ZY2pD0E4jCf6R7z18nlw8cnTrtdymp6wcSk725866dSSjydWJS2SUx5BvbgBtJAxlMOA

N7hFUWmo7fYyKrmLFNZmVXNXZfgZevawAe5fQXuqVyqDcHoQfc6ZYGjHfJ/IItX/Mqf0

SVV3a7LJ4kESeL3osEpNxELvL6bhUxKD0cadmmZO0dnvSjXzO3acL2hnBFXpGjF39swY

26Pw==

X-Gm-Message-State: AOJu0Yx9SZ0Fc/vH8J9HPzZdJ8PzP06mi5pObQxi3xgFLHT8O8qtYfSN

ZHzh82w5N9mWkHtFYtuwycXfT26VIwKISxeVP1ChHLra6XcRaJLNDZzq4I5iZMcM0Cc1zg+5ZJo

XW8A0OBc=

X-Gm-Gg: ATEYQzx6nQu4GUoUFkxlLq2tCTsZvf3Nq7PqXcFMS6BW9+yBR7CeoknEbFrOYZSUSJx

VKzQmmAtH+NIcpMwVtVjdbCBM5l+WS9mCVO72imVrBWxltvFxivkYKkO42wy3CC3bUsFB0Zx2xL

sZL32zlzaYzZGe5LfV2tWycZqj0xgMeAgYP1qkapzOIC/mjrGXsWxC7OaVUfHJTL7ORibk0QPhV

gwIT44ZLyAHlkn51zPLjf+v1UOqTVV8w1tnaLzAHZck2bZocIGopNaOGVV9tQfr7at6kAUE7mwD

PL4opEjYfBkSNRRMkrykEX3u3M3uC+JaIMLIFqAJVTZOQjw/VKpc4wwGtgBIuPdkLml/NRDoyvx

uskuEZF0pFNeraTsbyAKhvZBy9QcbKRZ6GwOohkGOy8hqm20ZtiXG/EvNppNGzXDygsFc3MTlxc

/TgwSRGM9UbewZEib4IJRQeehGMdks6FV/KgosaBEXLFPeBUI=

X-Received: by 2002:a05:6a00:4b51:b0:81c:6ca8:7ff8 with SMTP id d2e1a72fcca58-826daa80912mr11295697b3a.61.1771926940576;

Tue, 24 Feb 2026 01:55:40 -0800 (PST)

Received: from Vikash ([2401:4900:1c22:2d11:c005:42f1:e91d:ae0d])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-826dd8fdb81sm10454135b3a.64.2026.02.24.01.55.39

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 24 Feb 2026 01:55:40 -0800 (PST)

From: "srutti"

To:

Subject: 1st page of google.

Date: Tue, 24 Feb 2026 15:23:48 +0530

Message-ID: <8ed001dca573$b0f52470$12df6d50$@agency>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_8ED1_01DCA5A1.CAAD6070"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdylT2rGuDvQpJYMQQ6J6NPtrVQd4A==

Content-Language: en-us



This is a multi-part message in MIME format.



------=_NextPart_000_8ED1_01DCA5A1.CAAD6070

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hey,



I was checking your website and saw you have a good design and it looks

great,but it's not ranking on Google and other major search engines.



I'm an SEO Expert and I helped over 250 businesses rank on the (1st Page on

Google, Yahoo and Bing). My rates are very affordable.



May I send you quote? If interested.







Thanks!

srutti,





SEO Marketing Specialists [INDIA]





------=_NextPart_000_8ED1_01DCA5A1.CAAD6070

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hey,

I was checking =

your website and saw you have a good design and it looks great,but it's =

not ranking on Google and other major search engines.

I’m =

an SEO Expert and I helped over 250 businesses rank on the (1st Page on =

Google, Yahoo and Bing). My rates are very affordable.

May I send =

you quote? If interested.


class=3DMsoNoSpacing>Thanks!
  srutti,


class=3DMsoNoSpacing>
SEO Marketing Specialists =

[INDIA]



------=_NextPart_000_8ED1_01DCA5A1.CAAD6070--



Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on


x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?enBlaGJHM3U4UlpxalRYNE8vcTRFeENVUDVUZFp6Z3lmUXZkMmVEN1I3c2px?=

=?utf-8?B?dTZGWUF2QkFyaGtTZERWVURaYk9vSGE4OCtvOFhmNUxQbHUwSHN0a2lCWU1G?=

=?utf-8?B?aDZLSHpJNUJqVkNleEpSRlVDa01VTGxxd1NTUkpmNGFMcElqdTFocVNNMjA3?=

=?utf-8?B?OVJNTnFDbjBHRXlUMmljUEs0K3dENFhwdTRiRTdYWG1udEk2dlloUmFrTXVE?=

=?utf-8?B?ZjhYNFpBVVZPOVVHWnFOM2xrckhoR2lqTG14c2IvNk1ySVh3eFJrS2F6YkNp?=

=?utf-8?B?cDdvTlFEZ2RmOUFlalpEOUZIbVloK0ZJeUoyNllrZFkxZlVDRTBJcXpwMjVk?=

=?utf-8?B?UUF2QkVsNFhhQU9CZ2ZLYnlmUnY1Yk9nNjBPeVV5cFpXYytVMnlBYWFERkwx?=

=?utf-8?B?Z2tlYWJxV3U2U1dKeTVFZUd4V1hicWVzZ0EyTTJqMGZuWkNZd1cydW1sdkFC?=

=?utf-8?B?K3U0amFiQTdoT2dHQitKNCtvRmdUL3ZSUXhweDY5azdId1FlMkdCTHVTRlVp?=

=?utf-8?B?TEIwbzhDbjNFdEczY2FyMzRXV1QzcC9salhvMFN5NHRxQ1hYekNQWCtZWFhX?=

=?utf-8?B?NEw5V1hsUzY2ci9wL2granJTQTJWbTUwUUg1T3ZKVW8vUGwvMUJRRldFYVNG?=

=?utf-8?B?SUdEb0NuV3BaN2RLYVNmbEhYSjRiNWg2TjJZUVVNV2RUZ2sxNEo4aEl5SDRa?=

=?utf-8?B?YklpcGcyczFyeWtrZmhYRm1DcFlaeEhReWIyeEZlaUVkYi9sUFpaSFdvcEVn?=

=?utf-8?B?NmpEWTdwa1VHMlZOV0dRcnpxRzM4RUpiN1RBZUdKY1FvU1FNS1l2ZGNyU1px?=

=?utf-8?B?MklLSDl1OFJsOUx3VVRTV2Eyb042ZG82SGN3ZWt2b0pKc1pYRlpNek1vdklY?=

=?utf-8?B?dmVMaEg1T3A4eUU1V0tFOHllVk5wYVpoYXdZNkNwVldIUGpRT0E3dkM3dEJy?=

=?utf-8?B?VUk5Z3A5bTBobFUzN2VyNWd0MjNELytnYWw0VlhCeWtRam5yWTZUS1VYOUJW?=

=?utf-8?B?QnNoVVBWV3luNnBBc1E1eldXMkpqbWErcFBZRUxEckJCMkViN1I5VG5VSm5m?=

=?utf-8?B?dWptMGVBZEgwZ0JmWjRWMkUxVWNiSkhwM3NUTmNPcWJZVWMvT2REZWpVcDgw?=

=?utf-8?B?eDVxZkM4UDBLWTBNUzd3UldhMjJ4blRnK2liY05xNW5KbnYyUFpzSmYwNVcz?=

=?utf-8?B?azFNK0NpMVh3a29WdE5QVCtLeElLdCtXZWZqNmlDcGdaajRNbW55eWh1NTJj?=

=?utf-8?B?OWFJZkljUWlscVdNNVpsdjE5MU5GbHA4TUJNNjdnM2VYQXB4YzlQdkkza0Vk?=

=?utf-8?B?a2F3RmhoNHJXY0JSak1YVVBtN3hJNUtPaW5wNW5iTFZCMTRVa2xKcnhtaDZv?=

=?utf-8?B?TjZTWHpaR3FuWjIrbW5EWTUrMTFBS2hGRk1CRjVzNnhGZlhMd1RWeXNJS2Jx?=

=?utf-8?B?V3VSVUNkblFCY3JNWEpPZWZtTEtVUklMdyt4NHdsVndDakVxcjlZWkRlOWdn?=

=?utf-8?B?aDJtQzRQOSttN2FKREpiNkRoOHVVS0pYNXA5YTY5bWZYWUgvK2syVnJMYktv?=

=?utf-8?B?cE5HWmFsMzdwdjJjMGlCYUlSdUxaMVFwMDVkVHEzQ2FNVDlyaStMdnR3a1g2?=

=?utf-8?B?eHR5ZlBwTGhRWWIxeW45d0YzMllCMmdHMjhJUm4vMDNHR0t0VjJ6UWtscEkr?=

=?utf-8?B?NU5jdWRKeE5pNGZoelkvbTRRRlBtd3hhbG9OOEg1Tlh6YW0xMWdoc2I1SzFD?=

=?utf-8?B?bytIbTJ0TzZPSStaNDR0d3BJejY4R3JOT1ZCOTlLNkN5d3lkNnNNMWs1TVBZ?=

=?utf-8?B?aE1BaGY5R0s2YkJoNmR0cFpPWkhucnVvSTlnZkMvV0xiOGFUTEZrTlNhOUhG?=

=?utf-8?B?TDBFOEZJdkFqYzBrcnlHZE05NmFXMTRzOGVwckZwYVRLQWNwbThDR0dqQTVF?=

=?utf-8?Q?dO7dazSVDQ3rvr2CKNwsb05bPSkBpkhW?=

Content-Type: multipart/alternative;

boundary="_000_SA1PR10MB783057C63A1945A2A76C4DDEB474ASA1PR10MB7830namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SA1PR10MB7830.namprd10.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0a8c4dbf-c8c1-4a39-4c08-08de737ebfd9

X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Feb 2026 08:28:55.4318

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS4PR10MB997669



Hi sales@nk.ca,



I hope you’re doing well. I wanted to follow up to see if you have had a chance to review my previous message.



If you’re interested, It would be great if you share the details of your requirement so that I can come up with my best solution accordingly & I can send you more details on the packages/action/Portfolio/past work details.



Best regards,



Ashi.









From: Ashi Agarwal

Sent: 05 January 2026 14:40

To: sales@nk.ca

Subject: Re-design & Development/Re-development



Hello,







I am Web Development Company in India and I work with 100+ experienced IT professionals.







In CMS website package, we will do following:







✅- Design/Re-design & Development/Re-development







✅- Logo Design (1 Unique Logo)







✅- Web Portal Development







✅- PHP Development







✅- E-Commerce Solutions







✅- CMS (Word Press), Magento...etc.







May I know if you are interested in any of these services?







Best Regards,



Ashi.

Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 05:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vurs3-00000000Ok5-2QGo

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 05:50:35 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 05:50:35 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northcentralusazolkn19010021.outbound.protection.outlook.com ([52.103.20.21]:4313 helo=CH1PR05CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vunni-00000000MMW-4A9o

for sales@nk.ca;

Tue, 24 Feb 2026 01:30:01 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=gpPLtSzv25rm1n9LtGv2Cnxh0VfbO8T1zvazVvSZCgY9DKBKNE7COPFm7RBNO6ZVVhqb/RNi9+MuMSrVL8GlNTXkt7vPzZxsRJVjOeIIO6JWx/OUagdhibOcgkKIPFgHQgJaN6soSg4D5RDdxBxNgDjlGqbSZX3kBgc+xWkKc5vWWes4SSECk3N88sBEj3stCaJZ1ebGQZRVil4+yMGgsbOPtk3Jd240jEk/hd9B1Z+8Nh00YZT/YyaJyXmQKMWEhZbqWIG2Yy363KdHXesSW4XxrsvgyXpQm+AVckedXILnnTbAFTQnqw5zsu31gnKqoUVhiyrnlGwrUn3zBJjGRw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=xOJWpXz/2jAA2wdjRKyd2124K0ntIGQyX01aEEqtK28=;

b=cYq3USa4Kb3Wzd6H8m+WS81omZkNdB/J186fDemFjJ+k0mcT0WhJsoFXADJTa+MTLhqqrZvloXqUGSP7AXuPVTqP0MYFAdZsWlWLBfQaEGRlltL6ombrUQG8WqL3UzgGIORj2DjZ7USHI2+BhpXAlIe+HQSCDuRSOxoV+fFC2rksQtUxSVu4W60sbQXV3K2hLLqqEPsFUzxt0OFmS70FhBnGuQa0DbLZ+wJ/6L7e+0IY0v5pRhfM/R/v80d6yitMQT8cjRNYWI7yE13Cla2s2f9b29EFB4WHLKrTiKXlWANW0U30VgWlDrh9UZkRpW6jmRIgPhF/d1GdhuC/0Iowig==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=xOJWpXz/2jAA2wdjRKyd2124K0ntIGQyX01aEEqtK28=;

b=hcSD/FwJ45x3cuWbixY8yD6BKnp9UY5G89GYhs2ceXtn4EC/Naq2msOzrEI9b6qyGBgTPMgmT3v8YRsxhhCB+0nzTSrg5O4WLYU9I4qb8a5P1xaFSW8hwWNUF4jhA/tBf36/KmsoGh91tMXyj/0JEO3N4RTFz5+kG8ZuGwtD2pi0swEq6NsQ9R4QJrfVB5MkGSt9/8J9Go1kbE4yZOkqJNknTW+iXIG2w6JEnAYWxo8nsIRMwCPVcjfSBb5iIM6mcQsVrT2/QBnMwA7V9ghBBWc0BP73gGsLdPHJgYaCKLJ5SV/50QntgsNnD0o9BK27B9uX4bAnmH/ssyoOQSN+GA==

Received: from SA1PR10MB7830.namprd10.prod.outlook.com (2603:10b6:806:3b1::8)

by DS4PR10MB997669.namprd10.prod.outlook.com (2603:10b6:8:31c::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.22; Tue, 24 Feb

2026 08:28:55 +0000

Received: from SA1PR10MB7830.namprd10.prod.outlook.com

([fe80::a34e:6857:e5b3:7331]) by SA1PR10MB7830.namprd10.prod.outlook.com

([fe80::a34e:6857:e5b3:7331%4]) with mapi id 15.20.9632.017; Tue, 24 Feb 2026

08:28:55 +0000

From: Ashi Agarwal

To: "sales@nk.ca"

Subject: Re: Design & Development/Re-development

Thread-Topic: Re: Design & Development/Re-development

Thread-Index: AdylZJEoH+hxLlrXRj2nbP0clCZ2TA==

Disposition-Notification-To: Ashi Agarwal

Date: Tue, 24 Feb 2026 08:28:55 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SA1PR10MB7830:EE_|DS4PR10MB997669:EE_

x-ms-office365-filtering-correlation-id: 0a8c4dbf-c8c1-4a39-4c08-08de737ebfd9

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|20031999003|39105399006|5062599005|31061999003|461199028|41001999006|19110799012|8062599012|8060799015|15080799012|13091999003|3412199025|440099028|102099032|35041999009|40105399003;

x-microsoft-antispam-message-info:

=?utf-8?B?ZjVMcTVNU1VEdjE2dTRrNjlQVTFvS00xc1R0VnBKWWM5ZE0zZnpWTnNoNGh6?=

=?utf-8?B?UktsUUpaVHBQOE9SM1Q4R3hQS0VENEN3dFNGNndqbEtTempHUUZkMU0vdXNp?=

=?utf-8?B?YVBxdkFsc3F3Wlp3cEN2QlhJYW4vVlJQSmhjOTNRcFJJL09NdEJYMG54Z3Fo?=

=?utf-8?B?N0UwbzIyQ1pyalVtSmdmNVdsOS9WZUYwWkRaNzNSS2dFTHdOZiszOGhOWlU0?=

=?utf-8?B?T0ZBRTBTVkxTeENBdzZCOXJYbE1zMDB2Y0tIRDQvdGhGaDZUeDFra0NaaStJ?=

=?utf-8?B?TkpRbTdZM0RHRURmSEhUNlhQbWRMeVNVNDcwT3daaE4veitCdEE0RnRNM3px?=

=?utf-8?B?WDBmVUxqQjV5bnFkcW5CbzB6Uk1seXowK0Q1TWJhbzZXWSt1dWkwVExLNlJo?=

=?utf-8?B?V0YvMkZoa29kdmRqUUlXbkFGc2JseE9kQi8xT21jOGpNeXRzcHhWbVB0WlMy?=

=?utf-8?B?YVBEU3BYSHBkQTBudHorbHc3ZkFhYjM1KzdQWWhNcHI1V2FpQXliRmJZQkEz?=

=?utf-8?B?SHB3L2tBb0FMY0FySXpubjVhYlhQK3dRZnNUdDl1WVM1eHBNWVVzV1l3Njdr?=

=?utf-8?B?aEF5d0lNZlk0aUpUWHNZRm9YWXF2SGRKNFlVMG1pNjZkZGkzclIxUGl0R2Uz?=

=?utf-8?B?NVR5Tlp1UWk1NHlsSHU3STFNLzBHRDRwWG5iS2RCMG4rTVV0WFFURkluOGNa?=

=?utf-8?B?c1pxbGplbWM0ZHQ0c0Q5OVFhWE9QUDRWMjFQc1VhU2ptdU1JbEtnRVMxOVlp?=

=?utf-8?B?aUQ0SWQ5UDR2ZTNFS3BlMTVzMEVpb09aajZWTHJVVWlaSS9qV2dManhMN3NM?=

=?utf-8?B?RE5ZM29XMEtNL0Y3UVQ0Q2dSQWl0SXNjbTlBQmI0c1psQTdMTGhJMDZxcDdy?=

=?utf-8?B?RUVYUHpwWXhORnZzQkZIdHduT09RVlEwWWxVN2lGMUd1Ry9hb2JEY2ZhV1Bh?=

=?utf-8?B?TkVzY3pUWU90cEpZNU9NQzJPd2JGVXhMRkE2YkQ5MEkrKzd0VkIwUXZPZTBZ?=

=?utf-8?B?Q21nWVhkb0VlaFJ0N3NzbHZUQk16RHBLRzYwNWViS202dEZTTCtyRkZqNHNq?=

=?utf-8?B?UExRdExSYW9MbWF6c3MwVXhzNDAxNzd1cWdNaTQva2NZc2Zlak9GQUhUOWdZ?=

=?utf-8?B?TG1EcFB6UXZDVjJYVHlkL0hPWEIxMnJiWDNWMVJrRlBzMk15bk8wcktKd01V?=

=?utf-8?B?VG1NZEFIc2Z4NWFTZEVuVG1aN2ZWS0JDVXJ3dHRFU0h4eHZFQ1QrY0lxNWx3?=

=?utf-8?B?NDh2eC9DNGVMOFRJU3daM0RLRlpWUXlpZ0pMNnhyYmpHZlpzaUkwZnIyalVC?=

=?utf-8?B?OWJOZzV0UVNSRkxUanhqQzljZk9XTTFrdjc1dUxKVG1vS05IK2xKdW9QZ0N6?=

=?utf-8?B?T3pPK1dHVTFRZm5DMUtrQmsxZDV1cUcyVnNERUtQNElYeEhrVk5Fb1F1alVw?=

=?utf-8?B?OXJYamxKOWRUNUhTL0pZVGJyaXdxZFRRcVY4STJkc0REejV6cWk4OUJFMkNj?=

=?utf-8?B?NE5SSEE3bXgvaktyMTNLTmtkeVUwNEhRQTMvRlVEVG40aDh3UXFIYUVSMFJM?=

=?utf-8?B?MVptZko1aW93VUNwSmYvVHF3d2Z5VFh0UWtPVjFGUU9XUjZNTGYvanZmaTgw?=

=?utf-8?B?MmswWUhZNGI0dFR2V256M1dmWHJoN0tPMTNyb05ZTU5oVnozb3NvRXdCZGtm?=

=?utf-8?B?Tjc0dE9HOWVKYU50QUJtb1RBSFVYZlNMYnU1TERpNUprY3RqOEwzUFZ5eWhI?=

=?utf-8?B?TGg5V3FCTE1sQ1RkQ3ltc1pOaXhQVVRGLzN4MENtOWFBYXIwNUg3RlZwbHAz?=

=?utf-8?B?T2NNamlMZ2taNFJaNmVxZz09?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

bill of Quantities spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 20:00:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuieN-000000004en-1RTX

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 19:59:51 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 19:59:51 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.virtualsoftech.in ([103.185.74.120]:18734)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vui78-000000003Dj-1G6C

for sales@nk.ca;

Mon, 23 Feb 2026 19:25:42 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=ootysavaari.com; s=default; h=Content-Type:MIME-Version:Message-ID:Date:

Subject:To:From:Reply-To:Sender:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=b1ZkHdsJGocj87NRbQps62vew2uEFyGVU07lJ/haoJ0=; b=W5qjUiiY9rrKRksxTY2DNK8pMI

z5zqvNGcR8YhNx5ms8ByKaLZbOI+LSY4P1UYjAyUAQaaN04ukWGaekhA/CileOnh2jZKgJBj6GApr

a1PjUzTtDKq/tSkXVU67ffo9GO/3nXBVhtexxoJ+HqePKT7CJ/iNJScH5F1guluBrvcQFaXo+5OrB

M1z9DUpWquv6z71/Cl5Sfw8o2QT09rPzZM4daa/x82F086pUvCdkgOhbLbmOqMOE20Wbjj9xDRZjI

XDxDAQeufLGOhBxTuGxHf9VdO1IIVRjQhC4McPr++cFLXWX7eQuKvTKbLZH3CBtLP139Zg78hGcaD

qo1XaPMQ==;

Received: from [185.101.38.56] (port=58599 helo=error-no-valid-domain.com)

by server.virtualsoftech.in with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.1)

(envelope-from )

id 1vui6J-000000004gg-0dc5

for sales@nk.ca;

Tue, 24 Feb 2026 07:54:38 +0530

Reply-To: thomas.seitz@gmx.com

From: info@ootysavaari.com

To: sales@nk.ca

Subject: Quotation Ref No: RFQ/BOQ/JSMRU/26-27/095512-02/20/26

Date: 23 Feb 2026 18:25:09 -0800

Message-ID: <20260223182506.537F368CE6BCE6C7@ootysavaari.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_C145EEA5.D9CF2DB5"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.virtualsoftech.in

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - ootysavaari.com

X-Get-Message-Sender-Via: server.virtualsoftech.in: authenticated_id: info@ootysavaari.com

X-Authenticated-Sender: server.virtualsoftech.in: info@ootysavaari.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear sir/Madam, We, kindly request your best competitive

offer for the attached Bill of Quantities (BOQ).



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.185.74.120 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.185.74.120 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.185.74.120 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.185.74.120 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Quotation Ref No: RFQ/BOQ/JSMRU/26-27/095512-02/20/26



Dear sir/Madam,



We, kindly request your best competitive offer for the attached Bill of Quantities (BOQ).



Please confirm receipt of this RFQ and your expression of Interest to quote by return email.



Your techno-commercial offer should include the following details:

• Data Sheet / Catalogue / Compliance Statement

• Consignment Weight and Dimensions

• Make and Country of Origin

• Delivery Terms and Availability



Appreciated to receive your earliest reply.

Regards



R.Singarajan.



Sales Engineer



Call : +971-80-6319375 / +971-46-1588872.





Tec Sol International L.L.C, P.O. Box 113603, Dubai

Tel: 04-2214307,04-2214363.



TecSol Mechanical Contg LLC, Box 15422, Ajman, 056-2550007





bill of Quantities spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 19:26:00 -0700

Received: from server.virtualsoftech.in ([103.185.74.120]:1688)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vui78-000000003Dd-1GBD

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 19:25:45 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=ootysavaari.com; s=default; h=Content-Type:MIME-Version:Message-ID:Date:

Subject:To:From:Reply-To:Sender:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=NOvq96w7eTFxSZxKpmsaMu6o7NUUv9nwAjKbitU4LGU=; b=P0vLXT/rqJ6FdVBbEGRVCnVvgY

NAra9BzMAokXG3rgX7SKTmtVf1LsIDaIkOeoJse55g/IQCaaDKoPeBIVysqe9vdselp/HzDpDLZYs

ROq8fk1Ja/oR/CwkQHopD0A/WKrGAVD9TqGjPZdbi/th3VFQlZDdLvcrR9ii+RGcRPHx5NPrODPef

56QY4ayAzQLNSaxpeLm7fwBkLhKMzPXo7sfow6ezAotR2Hh+bOAvJlEWQofxG8Bp3Vak/P+L3395+

m/UDEOiD+vMkZvOhl97PLVZV2U0QEh5c6VCDBvka1TRpq0C6fopLyY/LeAhZy4m4SckBLJydAjopX

jtIcaudQ==;

Received: from [185.101.38.56] (port=58597 helo=error-no-valid-domain.com)

by server.virtualsoftech.in with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.1)

(envelope-from )

id 1vui6F-000000004gI-3fVk

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 07:54:35 +0530

Reply-To: thomas.seitz@gmx.com

From: info@ootysavaari.com

To: dave@doctor.nl2k.ab.ca

Subject: Quotation Ref No: RFQ/BOQ/JSMRU/26-27/095512-02/20/26

Date: 23 Feb 2026 18:25:06 -0800

Message-ID: <20260223182501.9065A92539C9BE07@ootysavaari.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_691CF822.1490BE1B"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.virtualsoftech.in

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - ootysavaari.com

X-Get-Message-Sender-Via: server.virtualsoftech.in: authenticated_id: info@ootysavaari.com

X-Authenticated-Sender: server.virtualsoftech.in: info@ootysavaari.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 12.6

X-Spam_score_int: 126

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear sir/Madam, We, kindly request your best competitive

offer for the attached Bill of Quantities (BOQ).



Content analysis details: (12.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.101.38.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.101.38.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.101.38.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.101.38.56 listed in dnsbl.ahbl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Quotation Ref No: RFQ/BOQ/JSMRU/26-27/095512-02/20/26



Dear sir/Madam,



We, kindly request your best competitive offer for the attached Bill of Quantities (BOQ).



Please confirm receipt of this RFQ and your expression of Interest to quote by return email.



Your techno-commercial offer should include the following details:

• Data Sheet / Catalogue / Compliance Statement

• Consignment Weight and Dimensions

• Make and Country of Origin

• Delivery Terms and Availability



Appreciated to receive your earliest reply.

Regards



R.Singarajan.



Sales Engineer



Call : +971-80-6319375 / +971-46-1588872.





Tec Sol International L.L.C, P.O. Box 113603, Dubai

Tel: 04-2214307,04-2214363.



TecSol Mechanical Contg LLC, Box 15422, Ajman, 056-2550007





bill of Quantities spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 20:00:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuieJ-000000004ei-444f

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 19:59:47 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 19:59:47 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.virtualsoftech.in ([103.185.74.120]:7946)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vui78-000000003DY-1G8Q

for doctor@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 19:25:42 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=ootysavaari.com; s=default; h=Content-Type:MIME-Version:Message-ID:Date:

Subject:To:From:Reply-To:Sender:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=BAx2QTPS9L71qMcn72Mqzu1zcnYD1y8zPyuDDtqm0a0=; b=OV4SESJOXgjGp2U4eoyYSTrU5f

GhLNaBX4c/XUyR6l/RwbzdBQoQ5aLXtE20o98GrKGbIWa2moU231layLtf1WR0pK+hbICACG5F8/X

uNP2YuGIvxWyQNni6VKICVZjErAxHMALP7fmCsTo48VvQ9OzSGmk7RvgwKD56cEqdu49ZKLv8Lxb+

xrwSJc0UwCg9CUv3aoZqRuU5gDyeKRYGsYw1M2vjo4F9QFLvcUbhtEIiOXBQdDokhtRUz846btlyx

ML0vOXndD+WGndo/jB12fV9FGZgDTqWaJervbvEgf6j4Im18OiQ84MmZnivGOZPU7cZwqEmGZvOTw

9fyUFfEg==;

Received: from [185.101.38.56] (port=58592 helo=error-no-valid-domain.com)

by server.virtualsoftech.in with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.1)

(envelope-from )

id 1vui6E-000000004fT-1t9M

for doctor@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 07:54:33 +0530

Reply-To: thomas.seitz@gmx.com

From: info@ootysavaari.com

To: doctor@doctor.nl2k.ab.ca

Subject: Quotation Ref No: RFQ/BOQ/JSMRU/26-27/095512-02/20/26

Date: 23 Feb 2026 18:25:01 -0800

Message-ID: <20260223182459.B6E9C46F98C352EF@ootysavaari.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_05181381.FB2A8C6B"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.virtualsoftech.in

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - ootysavaari.com

X-Get-Message-Sender-Via: server.virtualsoftech.in: authenticated_id: info@ootysavaari.com

X-Authenticated-Sender: server.virtualsoftech.in: info@ootysavaari.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear sir/Madam, We, kindly request your best competitive

offer for the attached Bill of Quantities (BOQ).



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[103.185.74.120 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

[185.101.38.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.185.74.120 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[185.101.38.56 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

[103.185.74.120 listed in will-spam-for-food.eu.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.185.74.120 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.185.74.120 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.185.74.120 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.185.74.120 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Quotation Ref No: RFQ/BOQ/JSMRU/26-27/095512-02/20/26



Dear sir/Madam,



We, kindly request your best competitive offer for the attached Bill of Quantities (BOQ).



Please confirm receipt of this RFQ and your expression of Interest to quote by return email.



Your techno-commercial offer should include the following details:

• Data Sheet / Catalogue / Compliance Statement

• Consignment Weight and Dimensions

• Make and Country of Origin

• Delivery Terms and Availability



Appreciated to receive your earliest reply.

Regards



R.Singarajan.



Sales Engineer



Call : +971-80-6319375 / +971-46-1588872.





Tec Sol International L.L.C, P.O. Box 113603, Dubai

Tel: 04-2214307,04-2214363.



TecSol Mechanical Contg LLC, Box 15422, Ajman, 056-2550007



NetKnow now in NetCraft's Top 10900 part 2

Posted by Dave Yadallee on


MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).



Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

NetKnow now in NetCraft's Top 10900 part 1

Posted by Dave Yadallee on
All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now at 10853 from 11008 at Netcraft and pfs compliant



A slight increase! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server


    3. and
  3. keep design current!




How do we compare with other providers in

Edmonton, Alberta, Canada?



Rogers





Rogers Business Solutions

which rank 4863 from 4567 and are hosted in Europe.



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 6286 from 6227 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Netknow again





We at Netknow are at 10853 from 18857 since the start of 2026.



Government of Alberta



The Government of Alberta Website

ranks 14791 from 14693 by Netcraft and seems to hosted on Cloudfare.



City of Edmonton







The City of Edmonton ranks 31807 from 31613 by Netcraft and hosted by Google.



University of Alberta







The University of Alberta ranks 51699 from 51647 hosted by Amazon Techonologies.



Juno and NetZero





We have Juno Internet ranked on top

at 309275 from 302237 who are the owners of

US Based Netzero at Netcraft Rank 77026 from 75654 .



Grant MacEwen University





MacEwan ranks 105894 from 106143 .



NAIT / Northern Alberta Institute of Technology





NAIT ranks 106467 from 109948 hosted by Microsoft .



TekSavvy



TekSavvy ranks 264427 from 249721 and are hosted by Microsoft



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank 1172972 from 1177511 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 303923 from 290106 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 364551 from 365358 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Internet Centre / CCINet



Internet Centre

rank 458365 from 459188 . Their partner Rack Nine ranks > 2000000.



Distributel / 3Web / CIA



Cybersurf

is ranked 915352 from 917764 and seems to be hosted in USA by DigitalOcean.



Primus



Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Northern lights Fiber







Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.



OkayVPN





OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

Grant opportunities spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 15:17:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vueE2-00000000OAj-2Z2o

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 15:16:22 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 15:16:22 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx1.syban.ca ([216.234.184.14]:23594)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vucan-00000000ITI-01bq

for doctor@nl2k.ab.ca;

Mon, 23 Feb 2026 13:31:53 -0700

Received: from mx1.syban.ca (mx1.syban.ca [127.0.0.1])

by mx1.syban.ca (Postfix) with ESMTP id 4fKXYR3vV0zFM91

for ; Mon, 23 Feb 2026 13:30:51 -0700 (MST)

Authentication-Results: mx1.syban.ca (amavis); dkim=pass (2048-bit key)

reason="pass (just generated, assumed good)" header.d=syban.ca

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=syban.ca; h=

content-transfer-encoding:content-type:mime-version:message-id

:date:subject:to:from:reply-to; s=dkim; t=1771878651; x=

1774470652; bh=Y9DyL+lp50Df6naPB+Gv6drAYHuc787C1s596EoUbNM=; b=q

reTQcts2iZe2IMJrJtwQA80jRup93R1xyupYzW2+Tn1W5OX5U6m8tqbosiSk4DSX

v7Cu9E6S57foUIr571x4MjH6+WeZ/k88p5DQcjjSVXhGdWosyaRrmHrLSFcaz532

m9525keD7BGiQTTtBauX33rMKYU5emc8Y7WqPzrdyoX4RZuJn+uL3YRgjmWPiWB2

dTLx79y0EVe6O5UiRuLkcdlCjvt6YFmB18RQYFr/ZB6+Qzcc9SwRwTg2IPmZz7dV

PMR/Hp76nJH0tgQD9ufGc+e7P4oCfHcqZJYxkTXp4psjGNWyLWxDhg2vXTdnp1Gw

2Y2M+bgyl11GMj6KligpA==

X-Virus-Scanned: amavis at mx1.syban.ca

Received: from mx1.syban.ca ([127.0.0.1])

by mx1.syban.ca (mx1.syban.ca [127.0.0.1]) (amavis, port 10026) with ESMTP

id hakSuLQlPhdl for ;

Mon, 23 Feb 2026 13:30:51 -0700 (MST)

Received: from ec2-54-226-129-179.compute-1.amazonaws.com (ec2-54-226-129-179.compute-1.amazonaws.com [54.226.129.179])

by mx1.syban.ca (Postfix) with ESMTPSA id 4fKXYQ5hvNzFM90

for ; Mon, 23 Feb 2026 13:30:50 -0700 (MST)

Reply-To: bizinfo@summitadps.com

From: NOTICE OF GRANT OPPORTUNITY

To: doctor@nl2k.ab.ca

Subject: GRANT

Date: 23 Feb 2026 20:30:49 +0000

Message-ID: <20260223190222.CE9522DD6E91819C@syban.net>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: In light of the global economic downturn, WelCome Trust is

providing grant opportunities to support individuals and households whose

businesses have been adversely affected. These grants are designed [...]



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

[54.226.129.179 listed in dnsbl.ahbl.org]

[54.226.129.179 listed in dnsbl.ahbl.org]

[54.226.129.179 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

Subject: {SPAM?} GRANT















In light of the global economic downturn, WelCome Trust is providing gra=

nt opportunities to support individuals and households whose businesses hav=

e been adversely affected. These grants are designed to aid in business rec=

overy, safeguard livelihoods, and bolster resilience. If your business has =

faced losses or disruptions, we encourage you to consider applying. For det=

ails on eligibility requirements and application processes, please contact =

Summit Advisory Partners by return mail.



Kind regards,
Barbara Kołodziej.









Cloud phishing from Google Gmail Part 3

Posted by Dave Yadallee on
.consequences li::before {

content: "=E2=9A=A0=EF=B8=8F";

font-size: 20px;

filter: drop-shadow(0 2px 2px #b33);

}



/ signature /

.signature {

margin: 20px 0 28px 0;

}



.signature p {

font-size: 16px;

color: #4e2e2e;

}



.signature .team {

font-weight: 800;

color: #8b1a1a;

margin-top: 12px;

font-size: 18px;

}



/ CTA button =E2=80=94 aggressive red /

.cta-block {

background: #b71c1c;

border-radius: 100px;

display: inline-block;

width: auto;

margin: 12px 0 20px 0;

box-shadow: 0 14px 24px -8px #7a2020;

transition: all 0.2s;

border: 1px solid #ffb7b7;

}



.cta-block a {

display: flex;

align-items: center;

gap: 20px;

padding: 18px 42px 18px 36px;

text-decoration: none;

color: white;

font-weight: 700;

font-size: 20px;

letter-spacing: 0.3px;

text-shadow: 0 2px 4px #5f0000;

}



.cta-block a span {

background: #ffffff;

color: #b71c1c;

padding: 6px 20px;

border-radius: 40px;

font-size: 16px;

font-weight: 800;

box-shadow: inset 0 -2px 0 #aaa;

}



.cta-block:hover {

background: #a11515;

transform: scale(1.01);

box-shadow: 0 18px 28px -6px #a14040;

}



/ footer /

.footer-links {

border-top: 2px solid #f0c0c0;

padding-top: 18px;

margin-top: 12px;

display: flex;

flex-wrap: wrap;

justify-content: space-between;

align-items: center;

color: #973d3d;

font-size: 14px;

}



.links a {

color: #a13232;

text-decoration: none;

margin-right: 22px;

font-weight: 600;

}



.links a:hover {

text-decoration: underline;

color: #c10000;

}



.copyright {

color: #ad5a5a;

}



hr {

border: none;

border-top: 3px dotted #d88;

margin: 16px 0 10px;

}



/ mobile /

@media (max-width: 650px) {

.alert-header {

flex-direction: column;

align-items: flex-start;

gap: 16px;

}

.usage-pill {

align-self: flex-start;

}

.account-detail {

flex-direction: column;

align-items: flex-start;

gap: 20px;

}

.plan-item {

gap: 24px;

}

.consequences ul {

grid-template-columns: 1fr;

}

.cta-block a {

padding: 15px 28px;

font-size: 18px;

flex-wrap: wrap;

justify-content: center;

}

}



Cloud phishing from Google Gmail Part 4

Posted by Dave Yadallee on














=E2=9A=A0=EF=B8=8F


CLOUD SECURITY =C2=B7 URGENT

DATA DELETION SEQUENCE =E2=80=94 ACTIVE














STORAGE LIMIT REACHED 100% FULL



Your cloud storage is currently at
r:#b71c1c;">100% capacity.
Uploads, backups, and synchronizatio=

n are restricted.




#ffcdcd; padding: 8px 16px; border-radius: 60px; color: #9f1b1b; font-weigh=

t: 600;">
x; border-radius: 30px; margin-right: 6px;">=E2=8F=B3 Don=E2=80=99t =

let years of memories disappear. Renew now
>.







0 GB


available of 500 GB
















Plan Type

Cloud Storage Plus





Current Status

=E2=9A=A0=EF=

=B8=8F EXPIRING SOON








-size: 14px; margin-right: 12px;">Final Date

February 24, 2026.
>











=E2=9B=94 WHAT HAPPENS IF YOU DON=E2=80=99T RENEW:





  • All photos and videos will be deleted


  • Contacts and calendar entries will be lost


  • Documents and app data will be removed


  • All device backups will be erased












Best regards,
Cloud Security Team
pan>











=F0=9F=94=A5 REACTIVATE STORAG=

E ACCESS Secure =E2=80=A2 Fast =E2=80=A2 Recommended








ont-weight: 500; border-left: 4px solid #e57373; padding-left: 16px;">This =

notification was sent to inform you of a critical storage issue.















Account =E2=80=A2
ref=3D"https://is.gd/g3xZUD">Support =E2=80=A2
/g3xZUD">Privacy =E2=80=A2 Unsubscribe=







=C2=A9 2026 Cloud Storage Services

















--000000000000a779fa064b830dcb--

Cloud phishing from Google Gmail Part 2

Posted by Dave Yadallee on









=3D1.0">

Cloud storage =C2=B7 urgent attention