Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:05:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j9r-00000000Nf8-0bGr

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:05:59 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:05:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m103131191108.xmail.ntesmail.com ([103.131.191.108]:47058)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4iZz-000000001Rh-0ZGJ

for sales@nk.ca;

Thu, 10 Sep 2026 11:29:08 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1579180_191164390.1789061275560"

To: sales

Subject: =?UTF-8?B?Q3VzdG9tIFNvY2tzIOKAkyBMb3cgTU9RICYgRnJlZSBEZXNpZ24gU2VydmljZQ==?=

X-Priority: 3

MIME-Version: 1.0

Received: from jack@dingfengsocks.com( [10.139.5.81] ) by ajax-webmail ( [127.0.0.1] ) ; Fri, 11 Sep 2026 01:27:55 +0800 (GMT+08:00)

From: jack

Date: Fri, 11 Sep 2026 01:27:55 +0800 (GMT+08:00)

X-WM-Tid: 0aa08c5c9f9c069ckunme41307031fce7e

DKIM-Signature: a=rsa-sha256;

b=ZpfuPLXAv4Fbb6ojszTk4dP/ZfSNcC65s3W1oCxt0SgR11aQcfBe/Wp8aRGOZWdjLd9IwZJQ+YP4HlzcxCPZKlLKB45Bqo8OF/BGfPXbwkAcf7nTy54oCe1zcSajWNGBj/YrgRv3mD4vskTd7ksuA0FHCZveE+udPj+z6JcwoXqDYOugnHqm08KfcuX9pYowgYVqwczJ2jqA3bJ6gUKRxSKESRPSXk4Gl1PB2ByQl4QumN1dQ60x93fSgPD+LKJxVaa4/8B1e6gOgAooRF70r83HKiSNbvEZMHjYTT6S+l6wFo9yK3LYRxUO4IXHTBMvynHrkyMpHAFrn0NXybPP1Q==; c=relaxed/relaxed; s=default; d=dingfengsocks.com; v=1;

bh=cTZvzxJ3G8NF4xyErN3Y5S/XMZo9cpV4PRwsvzsFxhY=;

h=date:mime-version:subject:message-id:from;

Message-ID:







Continue receiving fresh tips and features by hitting . Go With Future News



To eliminate this communication, just hit Manage Inbox Flow.



Hi Sales,

I’m Jack, representing a specialized sock factory with 15 years of production history.

We Provide

1.Low minimum Command quantity of Just 50 pairs per design, which is ideal for testing new styles or small businesses.

2.Costless design services to help bring your ideas to existence.

Looking forward your reply.

Best regards,

Jack

What's app: +86-13122045126 Website: CustomizeSocks

Loan DB Phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:05:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j9O-00000000NcW-08rN

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:05:30 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:05:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northeuropeazolkn19010017.outbound.protection.outlook.com ([52.103.32.17]:22370 helo=DB3PR0202CU003.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4hdQ-00000000Lpk-3ggN

for doctor@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 10:28:36 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=mHHd/vOy7TOX2nPSaQbDiNQvC58P4+kpFiEvHGyZo+cOq1e4ZwN5yaLfGfUIdh0QMy/6xxGLN4kL+J/d3W9aZQRZKa6TBZsPNxcm/mrpd94bLNBbFpxver1in2xIgf4XYEdKx9s5p5J1IKhACX4Uyaz5qM7xrHQSviyjdBVXz4Jr3Sr3ngeCU92f58R/48c7N7TfiUUPA3+FPJ9YLfDHqbBqiU8U+ElqDgxLhQ4ZxqhHAKrhZt92/SU6Of+xVNsnQ6kIhsMCDe883HlMbq7W9g4BoC36TYnnKu1gbaounpeW7KK62y/PPoir9RjrtP7a91CCK04NCnVKlBbSOv1Rhw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=6aVHdMbzLJ5T9Q2UsHG9KQAiJf7/EwUNvUPRufusmFM=;

b=D+C47lNwy5nYm3kawZdVHpajRDu1sxcHoGSLwyUsNPOXAViK8dSXlJBTTA6JAgmPa6b7SNKC89t6dfPkguLnzEDXdhfV0bx6T+x/OyjfrCxIKMS+ydXe+apvlI+KEKZLzHA0ShOj1pMmB9OYEESJMteFxbwY/9Wwwt7Go7qBcB/iKjMntt7tp3+0DCjMxRHIHYiLMdjo9rk+u4DxVwAP7ZS78wnh0ZiLI6gTF16WhB9/2B30hIN9yB0OPgfvRAWxTyjmOPCCvU5x69Ny3UsgQcAjWZsovLlkkx8M2FTWVRSkayj9Q8izHEaKKXKlWR+V/1avDGztP8e59sgxS5hzQg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=6aVHdMbzLJ5T9Q2UsHG9KQAiJf7/EwUNvUPRufusmFM=;

b=Yx/KQODdJwT0m/D7+IjxHfDnIvTMY9+JPaMB68prJ/8r1ENG+t3UL+9fdH4JDBtRqkG7peP2v/gCXTJiLqbO+FfV3OBKL+azIlTo1hlGcCMtXREstunWcpsiCEW43MetvkmCbpqVXRQFeYd8Q0GYl6UthLDChSyOsy+XBScv7XPbKEgb2VWRJV11QV7j59Po5PdULB7HJ8F3Vr4YQLTqpvGYc8H5vcWjt1Ct5k2rPDuArScmi+83rRlJ49KWTul6tWK5zG6w9OkPbwL1lAs5uFR8zr4dV0nNZ7pKPRvIOWR1MvZqTItpL7/ECYO5V7nO4flDFfs3Cnhw2fIqno1i7w==

Received: from DB5PR09MB8105.eurprd09.prod.outlook.com (2603:10a6:10:5e6::19)

by AS8PR09MB4534.eurprd09.prod.outlook.com (2603:10a6:20b:290::19) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep

2026 16:27:25 +0000

Received: from DB5PR09MB8105.eurprd09.prod.outlook.com

([fe80::dfc3:77c1:f71c:dfc6]) by DB5PR09MB8105.eurprd09.prod.outlook.com

([fe80::dfc3:77c1:f71c:dfc6%6]) with mapi id 15.21.0406.007; Thu, 10 Sep 2026

16:27:25 +0000

From: DB Loan

Subject: Apply For Your Next Loan

Thread-Topic: Apply For Your Next Loan

Thread-Index: AQHdQUEesmDI73waAEG3j3sz+p+wSA==

Date: Thu, 10 Sep 2026 16:27:23 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DB5PR09MB8105:EE_|AS8PR09MB4534:EE_

x-ms-office365-filtering-correlation-id: 3426f0d4-4963-4fd0-3093-08df0f58653d

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|31061999003|8060799015|55001999006|8062599012|7071999006|24021099003|6092099016|24071999003|24121999003|22091999003|39105399006|12121999013|11091999009|20110799003|15080799012|5062599005|15030799006|20031999006|4140399003|25010399006|43065399003|31055399003|40105399003|26121999007|11120399003|2607281247196008|29041999003|102099032|440099028|3412199025;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?osSTv6jy5YROCcVtnydtW6BhewpUM48I4iebLzmWgK1ZVpVpze6U9hok64?=

=?iso-8859-1?Q?+xfaNuJK8TsEw9dUXeanDoxOMTF3wVl/uf4KPQyW834ApQxxlKJBO1OV/C?=

=?iso-8859-1?Q?ox0f9X/CkbINdqCNN7sFStdyk7OseUC4HuNIMWM1Fg3L9XwtH6DNo4dqxB?=

=?iso-8859-1?Q?ECPoo48FykuYudQJ/iFJ0epQEFDBQu40Qqrh8CPZIEoGfZywpxcuEAau9v?=

=?iso-8859-1?Q?GlguvEoA0GYBx7lZ8bLOwc3su0PPTmkO7d1qrx/nPVNZgRrl5ZMbdmqgqu?=

=?iso-8859-1?Q?Zo/K7ZKxWFbd0zx4HD0o2nxK1+rY2Zz/WejgXAH6Gca5+iAcNSITPvAZuM?=

=?iso-8859-1?Q?X/Yc5+23F85n4S6gWg0tqIAfghJQCrlly/wtztQ2vUk4NIRbwZo+J/0orz?=

=?iso-8859-1?Q?wHIIW8oAJqIz2Agi63dlIDHvDgr/5W3i0NOjqeECUhLaUlZos88HfnUFnK?=

=?iso-8859-1?Q?Xk5t0DP/yRgTn+18oWoB75bMldmJAhxX4Y7kscWYNQiYzJAac+uem9BvKr?=

=?iso-8859-1?Q?bqBk5px+Uq12Kbbnxd9c3puF/o245BAd+AFD3h7R2xHewdbzEtRcft7xHD?=

=?iso-8859-1?Q?lWhm8qKja+QX6pF7OhJR80PpZ2NNM1QZ7ZTXV3iS8Jw633XTJnBzucU5ix?=

=?iso-8859-1?Q?Kz+8AGoPfOi+LxWNKptlLlPBCPRYOuQOVqAf2vX3ID509Wio+AEKurGc06?=

=?iso-8859-1?Q?+PcLZmxYCECrzB5jp1pqBOSb+jHELfuEtussJohXCjQ8IR9aLQrfUJtb/y?=

=?iso-8859-1?Q?rqmt4RmlyEX22W+h3pfP15TJhJiWfyhz1XjwYwgbSjUwQj1CQDAyDuIUTf?=

=?iso-8859-1?Q?WVY5UgW0qaqzKdeP8TJ30aFW7soMLLe661Vq+13SxuD6RCDbagj8pP0Bst?=

=?iso-8859-1?Q?0u1d+I5g2CKr/qC1QGfRzcVicgR2Z0fAjnq/oZVxu7uNygRCLMKuhZxcJ8?=

=?iso-8859-1?Q?EtfCTfdFtEndFnj9r2LnJmUgW0iy8Sps+3PYp9C/0wAk80ij8Tuf1D121E?=

=?iso-8859-1?Q?i60gBRjcOtZznKE7K6Ag6aw9ZZaZWKqaCbwQ50dBgovsXmIeHFmFVW+kjO?=

=?iso-8859-1?Q?QbcD1bxrYO8uuaVKv3+r7qldUdN/fd4Zv27W7TvoZhDulQRsAynEPim6Ad?=

=?iso-8859-1?Q?P+OgTWkbrF0D+nwW2E7Bn7CTiSnwixHJPVHuUuvKWMWGc9Mv+S+mEkHZrN?=

=?iso-8859-1?Q?x5qo8LT0hnbWHRRq7/R0KB27ujJUJgmjRMMYWPkw9wJc6NtbFfTzC0XrBe?=

=?iso-8859-1?Q?/GKzKUNRGWLksbWFEPFWHo571FAP9f/EPX2e6FpSJZGocx89kU5tLM4sVL?=

=?iso-8859-1?Q?dzHkK8HVxClxgY/f36egTuj8uAnuPujD7bqhRNYUYDUwP/36MJEw++zdpN?=

=?iso-8859-1?Q?CoYAH1ABZsCEv8p+eZnja5FwdmY0mgNGPBrklC7zen+aWYazyLU91/Z8P8?=

=?iso-8859-1?Q?/YADnRGOVtNzjQKd?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?Ek88+WfkkbsZHY96ErEm9henx+TNO4xg1do/BSe7in6nNTypyP80sC5eVA?=

=?iso-8859-1?Q?vgUUnOPb9TH3J2foqO39H59mpXDrEJeoOp4rN73iDFWrRvsmtFxHhx1NZN?=

=?iso-8859-1?Q?wsSYwRr2/7gNK5i007pKPAW6fJiJL4tLsTXA8DNsv9OQwkyD31ZJvPfb81?=

=?iso-8859-1?Q?P0Y9v1P6cyX30uWGi3KB7kppKP5WxV7zlhlcKV6+85j4Y7Cs0ZIxYif+2d?=

=?iso-8859-1?Q?DFAUYPaWg9cojXkIR6auxF/7els1sY2BfNptqbslQP0rvdqONrVn4wGhpa?=

=?iso-8859-1?Q?4R9Mc9+TxgFy8w9TdTV6nr8mwnH3HRLVT+t0Vp7OeYymd4/I5PgI/Bs7Cs?=

=?iso-8859-1?Q?WdrcuaUoEsxe0BUc/zWJw56XBkQSwyVkWQyo/GraNDv7TczyFXPZoSeJAP?=

=?iso-8859-1?Q?P1SjmVw0fgGTGr3JI717NQWMg9Nay2yH346GshMchm8Zdl7vZtO9O/PMJN?=

=?iso-8859-1?Q?vN2Fxx/cuBX9cJwdJhHhoPtZEhCck4RxFJt3g4JM23d6F9fTJhs+j1U132?=

=?iso-8859-1?Q?vEzRPJt6SV+s56v1wwA4X10/Uc2dfQM+qYGtNd4AmVdtZebptq6YMGx/QQ?=

=?iso-8859-1?Q?GOCPjG0mTUaC+lxll5Yr5KQmKcObUyFJBsnlhtfndA0FiJIBRvDJXJLFS/?=

=?iso-8859-1?Q?vkRv26GPb2bXadILRjqoVbK5HWJq8P6fB+ijtRSoZ81Cgx5mmc7xviORNc?=

=?iso-8859-1?Q?8lrokN7iGXE45cvPPPQcYvyPGb5OdA5mshfI6QtlRN4s06Gw45at0equot?=

=?iso-8859-1?Q?uY2K8PZkOssBUg0imyVd4dH30ZO413lpFIx2uzWN07mwRVkP3A+Zw48z95?=

=?iso-8859-1?Q?A9/E/WwEWp7veu2iSCBTorvvEU26+JJrpq2fdZxg+Jad4B4tIr74CI/TGS?=

=?iso-8859-1?Q?3OUwQBqCQ27P3YrEeWrOBMWeJah9YilYRIQAA+ig9wZO8Yk8izN0B189qL?=

=?iso-8859-1?Q?Sceor0luzZ3kAF+48cgRztigq9eWsM/gpbuTkuOVfi2sqxivyfNwFYKLsE?=

=?iso-8859-1?Q?2CIVsykbW7QIlZvveCWwRzpF9eY0O50NPPzrsZK2/mCc8DTxmfxH+hoRAY?=

=?iso-8859-1?Q?4hVt7dEbeZ14v/ki+FDJLhgg/9H2CAVg4Kg5C+dVizZS7p0J/V7p8yhbD0?=

=?iso-8859-1?Q?l/sJeaXe33WkFsWWvHmRmGWQNV9ctK8BnaVFj9sfPVkBYnn69d/QmZSNaJ?=

=?iso-8859-1?Q?ukpL0biQyF/K0ZQQvy0nPHKzDG6dGC5RVQblgngV8xMkBlg9ByNChS9AcA?=

=?iso-8859-1?Q?HBNh17dEgjsijVGGu+gprqWRmDSvmLXbfHJuEn/JOgJhbucpBjpxa78u+c?=

=?iso-8859-1?Q?zYlJsYTN960NNBVz3Vtqe0lO6a+PJsZWCD+aV/zgq+o/46l6OKSnVw1tf4?=

=?iso-8859-1?Q?46//Q2dsy2ZNTgZJlIPI6lAuT0pek3rs7l5xjDfepzgEoGP7sIhzA=3D?=

Content-Type: multipart/mixed;

boundary="_004_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DB5PR09MB8105.eurprd09.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 3426f0d4-4963-4fd0-3093-08df0f58653d

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Sep 2026 16:27:23.8648

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR09MB4534



--_004_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_

Content-Type: multipart/alternative;

boundary="_000_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_"



--_000_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Good day.



Apply for loan with DB FINANCE LOANS and have peace of mind, knowing that:

NO MUCH PAPERWORK

NO STANDING IN LONG QUEUES

APPROVAL WITHIN 24 Hours

INTEREST RATE @ 5% FIXED

BLACKLISTED AND DEBT REVIEW INDIVIDUALS CAN APPLY.

Open the attached document to see our LOAN REPAYMENT SCHEDULES that suit yo=

ur individual needs and apply for a loan with us. You can apply via our Ema=

il: dbloanservice@gmail.com



Kind Regards,

Sylvia Jacobs (Mrs.)

DB LOAN SERVICES



--_000_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Good day.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Apply for loan with DB FINANCE LOANS and have peace of mind, knowing that: =

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

NO MUCH PAPERWORK  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

NO STANDING IN LONG QUEUES  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

APPROVAL WITHIN 24 Hours  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

INTEREST RATE @ 5% FIXED  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

BLACKLISTED AND DEBT REVIEW INDIVIDUALS CAN APPLY.  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Open the attached document to see our LOAN REPAYMENT SCHEDULES that suit yo=

ur individual needs and apply for a loan with us. You can apply via our Ema=

il: dbloanservice@gmail.com



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Kind Regards,  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Sylvia Jacobs (Mrs.)



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

DB LOAN SERVICES








--_000_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_--



--_004_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_

Content-Type: application/pdf; name="DB LOAN SERVICES.pdf"

Content-Description: DB LOAN SERVICES.pdf

Content-Disposition: attachment; filename="DB LOAN SERVICES.pdf"; size=116094;

creation-date="Tue, 25 Aug 2026 16:32:01 GMT";

modification-date="Thu, 10 Sep 2026 16:26:24 GMT"

Content-Transfer-Encoding: base64



...



--_004_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_--

Investor Line Phish from SendGRid

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:04:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j8n-00000000NWj-3dIw

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:04:53 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:04:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzbpn.outbound-mail.sendgrid.net ([159.183.235.50]:63510)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4gJe-00000000DLb-33NL

for doctor@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 09:04:07 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mkxczd.com;

h=from:subject:date:mime-version:to:content-type:cc:content-type:date:

from:subject:to;

s=s1; t=1789052580;

bh=vi4U36+vt6EXwwz7bgllIsHMgyNyeW+i1tfTNvLGyYk=;

b=HDa7cJcnok/+i4cnghyFNZqdBfQvoic2yTFSc7xgwx+gpQmKTU+OOFU6vCAvdLs9BF+z

RC1FV0MWacCNFHQA/ASyf9lrdzY1v6N0pRAqnc8LWEcsXRFvoT3TQ9VEdT3RDXNJSKTfYH

5YCegDIiBCZBdlGN04+gIRBWqJnTJFBLSDNWKCrtv/XgZkn2oeZju+izyhpxgoD3zChS3j

+geUCxIGvXG8QyJiHfrBbnYUlcHPanMd6zO6KRPF3KYIhVuZkVjcaOmk2AWihXbSPHqqR3

8aNC9eG2febgDSWmn1+bqLXRU8Dj0C3nloNjjO/fj85/kP9O7CpxVENQiuT/Ux1w==

Received: by recvd-6cd9678977-4jqd5 with SMTP id recvd-6cd9678977-4jqd5-1-6AA2C6A4-71

2026-09-10 15:03:00.325352891 +0000 UTC m=+3787807.071772490

Received: from wiipress.ch (unknown)

by geopod-ismtpd-7 (SG) with ESMTP

id KjfPNiexRXK9blAjEWeagA

for ;

Thu, 10 Sep 2026 15:03:00.112 +0000 (UTC)

Message-Id: <92a496bd9aaf08e3157af64c27d5e69f@mkxczd.com>

From: InvestorLine Info

Subject: Action Required: Please Review Your Customer Information

Date: Thu, 10 Sep 2026 15:03:00 +0000 (UTC)

X-Priority: 3

X-Mailer: RZQGEZJBNXOHIK ZSWFRIH KGUIRAVRD 723

Mime-Version: 1.0

X-SG-EID:

=?us-ascii?Q?u001=2EnhMA48XH+kD7Dk1x3LbBwQT1mimGGynp44e3tDbfreTFd46cbvs40gFTd?=

=?us-ascii?Q?TGNxCktTAIrTQU0TkLQlKwK9nsk7T8ld6m6N5RK?=

=?us-ascii?Q?AJ5YSZZxp=2FtRijtg+X24WJhM0xhP=2FRYkb3HHHKk?=

=?us-ascii?Q?pvN6LhL9lYsZXjvx3rOD5HG8F5qbD6dSrQlW1Ih?=

=?us-ascii?Q?hvTAgttfcAcuPKLymkFeFRb7FcPqdpV76P7=2FfeJ?=

=?us-ascii?Q?cDgFiydwJr1F9Xegg2Ol46pSeQM++6wFBPLofEe?= =?us-ascii?Q?Esry?=

To: doctor

X-Entity-ID: u001.U3bXSLnQhyyXUhtoxL8Iww==

Content-Type: multipart/alternative; boundary="c307a3f1dd3ff4aa6c665b29000c3f01"

X-Spam_score: 29.4

X-Spam_score_int: 294

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  French message to follow/Version française ci-dessous

Dear Customer,As part of our regular review of customer records, we have

identified that certain personal or identification details associa [...]



Content analysis details: (29.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

[159.183.235.50 listed in dnsbl.ahbl.org]

[159.183.235.50 listed in dnsbl.ahbl.org]

[159.183.235.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: mkxczd.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.235.50 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.6 J_CHICKENPOX_82 BODY: 8alpha-pock-2alpha

0.6 J_CHICKENPOX_83 BODY: 8alpha-pock-3alpha

2.0 TVD_PH_REC BODY: Message includes a phrase commonly used in phishing

mails

0.6 J_CHICKENPOX_84 BODY: 8alpha-pock-4alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 MIXED_HREF_CASE Has href in mixed case

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} Action Required: Please Review Your Customer Information







French message to follow/Version française ci-dessous







Dear Customer,



As part of our regular review of customer records, we have identified that certain personal or identification details associated with your account need to be confirmed, supplemented, or updated.



Keeping your customer information complete and up to date is an important part of our customer identification and verification requirements and helps ensure that your account records remain accurate.



We kindly ask you to review the information currently registered on your account and make any necessary changes or additions.



To complete the review, please sign in directly through the official online banking service or mobile banking application and follow the instructions displayed in your account:Review Customer Information.



Once your updated information has been submitted, it will be reviewed by the appropriate team. Your customer records will be updated once the verification process has been completed.



Please note that incomplete or outdated information may temporarily affect the availability of certain account functions or services until the required review has been completed.



If you need assistance, please contact Customer Support through the institution’s official contact channels.



BMO InvestorLine







***********************************************************************************************************************







Madame, Monsieur,



dans le cadre de notre examen régulier des dossiers clients, nous avons constaté que certaines informations personnelles ou d’identification associées à votre compte doivent être confirmées, complétées ou mises à jour.



Le maintien d’informations client complètes et à jour constitue un élément important de nos exigences en matière d’identification et de vérification de la clientèle et contribue à garantir l’exactitude des informations relatives à votre compte.



Nous vous invitons donc à vérifier les informations actuellement enregistrées sur votre compte et à effectuer, le cas échéant, les modifications ou compléments nécessaires.



Pour finaliser cette vérification, veuillez vous connecter directement à votre espace bancaire en ligne officiel ou à l’application bancaire mobile et suivre les instructions affichées dans votre compte :Vérifier mes informations.



Après l’envoi de vos informations mises à jour, celles-ci seront examinées par le service compétent. Votre dossier client sera actualisé une fois le processus de vérification terminé.



Veuillez noter que des informations incomplètes ou obsolètes peuvent temporairement affecter la disponibilité de certaines fonctionnalités ou de certains services du compte jusqu’à la fin de la vérification requise.



Si vous avez besoin d’aide, veuillez contacter le service client par l’intermédiaire des canaux de contact officiels de l’établissement.



BMO Ligne d’action

WealthSimple Phish from Microsoft

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:04:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j8d-00000000NVu-3F5l

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:04:43 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:04:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from aejkz.bzjfls.com ([20.175.94.160]:49305)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4fjr-00000000AA0-2yEN

for support@nk.ca;

Thu, 10 Sep 2026 08:27:03 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=aejkz.bzjfls.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:List-Unsubscribe:

Reply-To; i=lsuee@aejkz.bzjfls.com;

bh=T9e1ux+W0Eta+5qj2kRPKMseV5fK7KXzrCf8fnLQ/6c=;

b=QVOXTGriPkQyci90K1S2v/whXfkelN2gY7c9A5ebu1nKICYxT5Rkc99HffIRdiqlpdsMY9qRINC9

cQ/Y/qoUg252hGfrzFX82DWgGFBnpEx/kOupGsYtEPZFmPFWLDm3BMgqix6FmynA7G2XMJB0hJSI

HG4L5tOlLrWiGJjEzfDZrPrt1TngItcZWSO8MSPyQAEDkT7y3kGpkqh6GYPgPLcTbULsvYLTBoWN

rEaCaYCSi6FFn9mUl2mPhtdblpT2rOq3aPuR1IS7iai98ufwLhLuycslntnXPojRWaK6tlEPpGwL

WYMRm4EuUqw65x85LuydtM8IzmB4HLaOhP/oig==

Content-Type: multipart/alternative;

boundary="===============5945496873381675340=="

MIME-Version: 1.0

From: Wealthsimple investing

To: support@nk.ca

Subject: Restore trading - Complete your account details

Date: Thu, 10 Sep 2026 10:26:07 -0400

Message-ID: <178905036757.6695.12570061606466614698@aejkz.bzjfls.com>

List-Unsubscribe:

Reply-To: feedback@wealthsimple.com

X-Entity-Ref-ID: 5202a6c5-a59b-4a89-b8bf-6c1e50466f93

Feedback-ID: campaign:wealthsimple.com:mailer

X-Spam_score: 29.1

X-Spam_score_int: 291

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Wealthsimple Complete your details to restore trading Hi support,





Content analysis details: (29.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.175.94.160 listed in dnsbl.ahbl.org]

[20.175.94.160 listed in dnsbl.ahbl.org]

[20.175.94.160 listed in dnsbl.ahbl.org]

[20.175.94.160 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.175.94.160 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.175.94.160 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.175.94.160 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.175.94.160 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.3 MANGLED_ACCNT BODY: mangled account(s)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[20.175.94.160 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_B FULL: Dec/Hex char Enc [Bb]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} Restore trading - Complete your account details



--===============5945496873381675340==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Wealthsimple



Complete your details to restore trading



Hi support,



Your account information has not been updated for a long time. To keep your account secure, trading is currently restricted.



Trading will be restored as soon as your account details are completed and confirmed.



Sign in to Wealthsimple to finish the update.



Restore my trading: https://www.aliboshi.com/?uid=koSkbNjiAGXcrdW38VRTz1LN



This email was sent to support@nk.ca. This is an automated message from Wealthsimple. Please do not reply.



---



FRANAIS



Bonjour support,



Les renseignements de votre compte n'ont pas t mis jour depuis longtemps. Afin d'assurer la scurit de votre compte, la ngociation est actuellement restreinte.



La ngociation sera rtablie ds que les renseignements de votre compte seront complts et confirms.



Connectez-vous Wealthsimple pour terminer la mise jour.



Rtablir la ngociation : https://www.aliboshi.com/?uid=Q5mEvfmENMb2zTAe5t1z0qgE



Ce courriel a t envoy support@nk.ca. Ceci est un message automatis de Wealthsimple. Veuillez ne pas y rpondre.



--===============5945496873381675340==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













Restore trading - Complete your account details



































































































Wealthsimple
Security notice


Complete your details to restore trading
Hi support,


Your account inform​ation has not been upd​ated for a long time. T​o keep your account secure, trading is currentl‍y restricted.


Trading will be rest‍ored as soon as your acco​unt details are completed and confirmed.
Sign in to Wealthsimp‍le to finish the update‍.


Restore my trading


The whole update takes​ only a few minutes. If t‌he button above doesn'‌t work, sign in to Wealthsimple‍ and go to your account s​ettings.


This email was sent to su‌pport@nk.ca.



This is an automated me‍ssage from Wealthsimpl‍e. Please do not reply.



Questions? Visit our Help Centre.












--===============5945496873381675340==--

Investment spam from China

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:04:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j8Y-00000000NVN-0GKN

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:04:38 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:04:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.nihao.cn ([61.135.129.15]:55178 helo=nihao.net.cn)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4e8L-000000008XJ-237k

for sales@nk.ca;

Thu, 10 Sep 2026 06:44:16 -0600

Received: from DESKTOP-BCBFKL4 (unknown [41.184.248.196])

by send (Coremail) with SMTP id D4GHPQAnFsTNoKJqX+ZXAw--.46038S19;

Thu, 10 Sep 2026 20:23:36 +0800 (CST)

From: "John Lucas"

Subject: Questions on Requests

To:

Content-Type: multipart/alternative; boundary="WWFn1M2bMBvanyB=_tauRuHcj8zxhimN8e"

MIME-Version: 1.0

Reply-To:

Date: Thu, 10 Sep 2026 05:43:02 -0700

Message-Id: <20261009054301D4A8CD556E$3373B56062@rauch.com.cn>

X-CM-TRANSID:D4GHPQAnFsTNoKJqX+ZXAw--.46038S19

Authentication-Results: send; spf=neutral smtp.mail=info@rauch.com.cn;

X-Coremail-Antispam: 1UD129KBjDUn29KB7ZKAUJUUUUU529EdanIXcx71UUUUU7v73

VFW2AGmfu7bjvjm3AaLaJ3UjIYCTnIWjDUYxBIdaVFxhVjvjDU0xZFpf9x0zRUUUUUUUUU

=

X-CM-SenderInfo: plqi0qpudxuxoofrzhdfq/

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, I hope this message finds you well. Kindly confirm

if you havereceived the loan offer letter.The company has a large portfolio

in Eastern partof Europe, Middle East and Asia which he earmarked forinve

[...]



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[61.135.129.15 listed in dnsbl.ahbl.org]

[61.135.129.15 listed in dnsbl.ahbl.org]

[61.135.129.15 listed in dnsbl.ahbl.org]

[61.135.129.15 listed in dnsbl.ahbl.org]

[41.184.248.196 listed in dnsbl.ahbl.org]

[41.184.248.196 listed in dnsbl.ahbl.org]

[41.184.248.196 listed in dnsbl.ahbl.org]

[41.184.248.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[61.135.129.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[61.135.129.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[61.135.129.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[61.135.129.15 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[61.135.129.15 listed in bl.score.senderscore.com]

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[jonlucas2104(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Questions on Requests



This is a multi-part message in MIME format



--WWFn1M2bMBvanyB=_tauRuHcj8zxhimN8e

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Greetings,



I

hope this message finds you well. Kindly confirm if you havereceived

the loan offer letter.The

company has a large portfolio in Eastern partof

Europe, Middle East and Asia which he earmarked forinvestment.



If

this is of interest to you, get back to me and I will give youfurther

details and my personal information



I

will give you more details as soon as I hear fromyou.

I await your response



Warm

regards,



John

LucasFinancial

Consultant



--WWFn1M2bMBvanyB=_tauRuHcj8zxhimN8e

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


e=3D1">
tle>Questions on Requests




=3Dleft>Greetings,


NG: border-box; FONT-SIZE: 16px; FONT-FAMILY: -apple-system, system-ui=

, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Helvetica,=

Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI S=

ymbol'; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 400; COLOR: rgb(34,26,20); FONT-STYLE: normal; ORPHANS: 2=

; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; scr=

ollbar-color: rgb(78, 69, 69) transparent; scrollbar-width: thin; user=

-select: text; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-=

user-drag: none; font-variant-ligatures: normal; font-variant-caps: no=

rmal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initi=

al; text-decoration-style: initial; text-decoration-color: initial">I =

hope this message finds you well. Kindly confirm if you have

"scrollbar-color: rgb(78, 69, 69) transparent; scrollbar-width: thin; =

user-select: text; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -web=

kit-user-drag: none">received the loan offer letter.

lbar-color: rgb(78, 69, 69) transparent; scrollbar-width: thin; user-s=

elect: text; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-us=

er-drag: none">The company has a large portfolio in Eastern part

yle=3D"scrollbar-color: rgb(78, 69, 69) transparent; scrollbar-width: =

thin; user-select: text; -webkit-tap-highlight-color: rgba(0, 0, 0, 0)=

; -webkit-user-drag: none">of Europe, Middle East and Asia which he ea=

rmarked for

scrollbar-width: thin; user-select: text; -webkit-tap-highlight-color:=

rgba(0, 0, 0, 0); -webkit-user-drag: none">investment.


"BOX-SIZING: border-box; FONT-SIZE: 16px; FONT-FAMILY: -apple-system, =

system-ui, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', H=

elvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'S=

egoe UI Symbol'; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFOR=

M: none; FONT-WEIGHT: 400; COLOR: rgb(34,26,20); FONT-STYLE: normal; O=

RPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT:=

0px; scrollbar-color: rgb(78, 69, 69) transparent; scrollbar-width: t=

hin; user-select: text; -webkit-tap-highlight-color: rgba(0, 0, 0, 0);=

-webkit-user-drag: none; font-variant-ligatures: normal; font-variant=

-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickne=

ss: initial; text-decoration-style: initial; text-decoration-color: in=

itial">If this is of interest to you, get back to me and I will give y=

ou

-width: thin; user-select: text; -webkit-tap-highlight-color: rgba(0, =

0, 0, 0); -webkit-user-drag: none">further details and my personal inf=

ormation


FAMILY: -apple-system, system-ui, BlinkMacSystemFont, 'Segoe UI', Robo=

to, 'Helvetica Neue', Helvetica, Arial, sans-serif, 'Apple Color Emoji=

', 'Segoe UI Emoji', 'Segoe UI Symbol'; WHITE-SPACE: normal; WORD-SPAC=

ING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,26,20)=

; FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255=

,255,255); TEXT-INDENT: 0px; scrollbar-color: rgb(78, 69, 69) transpar=

ent; scrollbar-width: thin; user-select: text; -webkit-tap-highlight-c=

olor: rgba(0, 0, 0, 0); -webkit-user-drag: none; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; te=

xt-decoration-color: initial">I will give you more details as soon as =

I hear from

scrollbar-width: thin; user-select: text; -webkit-tap-highlight-color:=

rgba(0, 0, 0, 0); -webkit-user-drag: none">you. I await your response=


-apple-system, system-ui, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Hel=

vetica Neue', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Sego=

e UI Emoji', 'Segoe UI Symbol'; WHITE-SPACE: normal; WORD-SPACING: 0px=

; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,26,20); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255=

); TEXT-INDENT: 0px; scrollbar-color: rgb(78, 69, 69) transparent; scr=

ollbar-width: thin; user-select: text; -webkit-tap-highlight-color: rg=

ba(0, 0, 0, 0); -webkit-user-drag: none; font-variant-ligatures: norma=

l; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-dec=

oration-thickness: initial; text-decoration-style: initial; text-decor=

ation-color: initial">Warm regards,


box; FONT-SIZE: 16px; FONT-FAMILY: -apple-system, system-ui, BlinkMacS=

ystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Helvetica, Arial, san=

s-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol'; WHI=

TE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT=

: 400; COLOR: rgb(34,26,20); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2=

; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; scrollbar-colo=

r: rgb(78, 69, 69) transparent; scrollbar-width: thin; user-select: te=

xt; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-user-drag: =

none; font-variant-ligatures: normal; font-variant-caps: normal; -webk=

it-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=

coration-style: initial; text-decoration-color: initial">John Lucas
style=3D"scrollbar-color: rgb(78, 69, 69) transparent; scrollbar-widt=

h: thin; user-select: text; -webkit-tap-highlight-color: rgba(0, 0, 0,=

0); -webkit-user-drag: none">Financial Consultant







--WWFn1M2bMBvanyB=_tauRuHcj8zxhimN8e--



Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:04:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j8M-00000000NUI-0h3i

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:04:26 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:04:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f41.google.com ([209.85.216.41]:51586)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4e0H-000000007Q4-2O8O

for root@nk.ca;

Thu, 10 Sep 2026 06:35:57 -0600

Received: by mail-pj1-f41.google.com with SMTP id 98e67ed59e1d1-39b9a99469fso2905332a91.3

for ; Thu, 10 Sep 2026 05:34:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1789043692; x=1789648492; darn=nk.ca;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=f+MeOVBBz8R8V/ZQ5JqiNOF0/jVmLOJJyLy26dsq/nk=;

b=ZJ+g2TXkaxJSPaAbpwRNJ6yfBnswoCNIScQDXHs9BzNXtcjfN6/APriUwae1M1ZgYj

1k71j40GTK47auIU13a7KJ+Kep4w6qiido4SW+/NpM4CqtnxH7DatLqaGNVIIvLal1xq

f7rtUaCXetvNb8MdB6Q1IM7Fs4B8YAK9WLd/ruad2VSF/MEC9FgBQAXQrqfDuGZVukL/

oGR6U7WpXpE5apfxjb3IwauG8ODdMyr9F8NxJ8eLGcCLxjwJrnf1pYVJyzLrZoofNMGT

y3FsAobA31QajikoRmDxcbtAfo/JyoRjFpz7dWWKYkaCk48GJsOws9DryeCkC3VGpX25

37vg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1789043692; x=1789648492;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=f+MeOVBBz8R8V/ZQ5JqiNOF0/jVmLOJJyLy26dsq/nk=;

b=dhbM7zkp4vX5L5iO3bkktFtYaK59G/7cSn2CXfolNyGa84drei71agN6wcNcm3XXOq

UW8TVjZvuzyfxzk4Hlgy6CGCUpYoeWmXuW5ckzC6Y4veRI3OTabfRWhbB2AC9auYHjMz

s65QMwWCh1tIHnCFYLNHD7IZpJCtpcv9TuxSBIaPL8+MYyt+sN73cCsS97InC5UeMyjK

0VIT03GeB7+adtjis8/XMdvmzc20S5+8TRdu0aWZd5pmcy67FSUOISqf+3GBD4RvEZce

taXfVaOQtQsxIgTFySBFCzLG9AjZ00xxBlxM7eMWldQZhVVTP0pAeGpcspj/62OE/6mM

/54g==

X-Gm-Message-State: AFuF++l43ovmIz7BFluVDb+FUhe0RTcqdrDX9xD7j+jJOglqcv5ayClf

cT74+KyKzKKyQ3yvxHMQMeHXJ3cWgjT8Ep3tsyFXeYyuwIGq09ZTqHm+evXNTn5J

X-Gm-Gg: AYBFou2+jxC5Qym9gQ6LTMD2pEoSx7HWSMLAQjTiRQrdX34W5Tv8B2ZvoXfw42ZVd1L

h4lVLAf8gXEaOH9f2vjpmBl747/0oD5qA+ZGIauHIl1+oz9mZOme21Mg/+RIedUToAyyQ4ZEqj+

f3SgE+rS8G/d8mKzVNP/gvGHsspceUOYZvkjs4gh6Nd8YRGKC/k7UqePG/WvEFt/WQsXvdVkCZ0

96S+AhOZwSzNFEpMSaigWx9DfYFT44GcCWwdosRaZLxOoxhiDXbsXi1aKUhxKMBxWGdCVWc/yQI

gPuGct6WQtA6cdYktZAC1Ji0rWiijyaWlhFFJVFLaZZHFxKMVtB61xsUSOsePsr2uPVPceniclF

iiZvzZ1m3r7mNXnPpdzQN3se9ydxqbNQV/awD9swRvAq3Jif/4mhJcRpZKQf/+2yv6if7N9SSRf

SGg+9KtkDmQATesct4HQTud/JrJwPaehQMBb/E8higerY0n+rUnvd1IdUhdy/mcG36OXhK4CR/w

HnCK1gVavbIelJ1/T0vgXvP

X-Received: by 2002:a17:90b:4d87:b0:380:540:d499 with SMTP id 98e67ed59e1d1-39b26100bfdmr56135532a91.6.1789043691747;

Thu, 10 Sep 2026 05:34:51 -0700 (PDT)

Received: from DESKTOPD8VAGM3 ([2401:4900:8f80:79cb:b43c:94e:ff57:93ff])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-39d7e7f4369sm4573702a91.8.2026.09.10.05.34.50

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 10 Sep 2026 05:34:51 -0700 (PDT)

From: "Adam"

To:

Subject: Design or Re-build?...

Date: Thu, 10 Sep 2026 18:00:22 +0530

Message-ID: <187f01dd4120$2c7559b0$85600d10$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1880_01DD414E.462D95B0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Ad1BHyN92SEWOTTLR1SvZOPU2uDT7Q==

Content-Language: en-us



This is a multi-part message in MIME format.



------=_NextPart_000_1880_01DD414E.462D95B0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello root@nk.ca,







I provide completely built new site re-design service like: Creative Web

Design, Word Press, PHP, Shopify, CMS Design, E-Commerce, Web, etc.







If you are interested, please send your requirement. And help us with the

reference site if you have one.







Thank you









------=_NextPart_000_1880_01DD414E.462D95B0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hello
style=3D'background:lime;mso-highlight:lime'>root@nk.ca,


class=3DMsoNoSpacing> 

I provide =

completely built new site re-design service like: Creative Web Design, =

Word Press, PHP, Shopify, CMS Design, E-Commerce, Web, etc.


class=3DMsoNoSpacing> 

If you are =

interested, please send your requirement. And help us with the reference =

site if you have one.

 


class=3DMsoNoSpacing>Thank you


class=3DMsoNormal> 



------=_NextPart_000_1880_01DD414E.462D95B0--



Investment inquiry spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 06:10:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4dbh-00000000Csr-2qZ3

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 06:10:21 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 06:10:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f44.google.com ([209.85.218.44]:57421)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4cuG-000000005PF-3TJ0

for doctor@nl2k.ab.ca;

Thu, 10 Sep 2026 05:25:38 -0600

Received: by mail-ej1-f44.google.com with SMTP id a640c23a62f3a-c1c52d920b8so951899766b.2

for ; Thu, 10 Sep 2026 04:24:41 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1789039474; cv=none;

d=google.com; s=arc-20260327;

b=qd+1OTOo8iAGc1ntTbg2cmmb24/K9Htd1N6VU7GQ+ba/V+8gk3oaYe3vQ4+5uCCcIh

UmIM5ppmLsOfj22wYrIdWsqA/ZHDzNqQW+6dC/xlOukjI7Wtd0hxK6m8LdTdU3bkKy2c

KYpk1YGiVeXh2yFlMJ5+gmXc8pqRc+COYfCGtzwPskALv57IPRHKQ8+9R5b2Dq29dJCi

YVz41QbeJnLJ+FoPW2pjJoXYmG1yuspLpVKVh6R3tsMZlpG3BCSmFOGKdwbAU79ycbWP

ukjnv5gPlYMKByICvJLd/cc9f/jICKac6hK6OACdcE3S/zQwf5jyxSHLIz91ewLgkx7S

k/hw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=y8w2sPg70c1WQOqbN4N8rSDljVSQ4dXSRqJZJ//AnVw=;

fh=4atT8ZWk/v84INkqS8Nb6Cito6AxhsQ33N+t1zi9pps=;

b=XiMIemYFxkjui9Sa+jeC7jdxQHL263MLTchgzaGiizKUxqG5wNOrE02O/x41qrMY4s

PhfK9VDd9hkHYF307DJIHBj9sPT7OOeK63qx8k3bookSrLhgesh1E5LVhvu5awEmWXtN

m5dvhaYgBVBzyMMHbi/EleMQrYFnO3u0pCtt/v3jqJQrgW6SOnooGZEZ0htG6Mvp272p

0W/iOzyzLeSd+76kPNMc0XRHIvplt1XNOm8zR6e0mHnkZFoRR4YbPF9XDeqz7PKqpJOR

NhPBmEvYGop6/fCJQqYzZrd1wpCeB6MUITo9LOgG5ZkSRPiLLJc3fJacRyOLmdejImIt

sHRA==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1789039474; x=1789644274; darn=nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=y8w2sPg70c1WQOqbN4N8rSDljVSQ4dXSRqJZJ//AnVw=;

b=GAQ8EIuJgU9a6vGQKbRGagVYJG15rRXHn5i6CdkQ0zKkAjc/9dMaHkYPlIBoDQcN4Q

Ec6JrlxqBWPvoJhyY2B0de4u1vISarmLEeVarPR3SjP59GHPQ8GS+0VoPfpQQuVjVydC

jloQxphlB3RKzQ2IniGvcVBHcGyU0v9Gt8BDVCVHuI4krm95yMVX8D809HLOT1r0xEAz

C2MEwK1BFlFIQJi9VlFR8lFqlKrViincmk7hW60ooyCa9JxRMhrVq4LUZA64MOcjHYai

wknqOGNWo3VFZaXewcbKrpDEt884i1DtPZgp/1AdIi0iAner11g1gDaozbfkRQOxUPlX

Qabw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1789039474; x=1789644274;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=y8w2sPg70c1WQOqbN4N8rSDljVSQ4dXSRqJZJ//AnVw=;

b=LBxeRtMSovdVL2iLlwkIoKOGccNOBqlwTQ99jjetPFhGcYe/1s2VQaPxeB4lT533Ru

lka7G1bfRieqbhSvcwOIuaqpbifRp+17ggFk+Yb4lWmOZX2c45HiA+hEI715kQpKe8cR

xWqGNXCbBL4OmFDGdtMAfn6IOJIu5gRk7qKOSZfb8o7ebkCEH6uAJUVxXsOt+4hiIRV0

1e7TcdEh//ZC7Im4L67t0nSzuI0xItlQ6OFE/aiVrZRGMshBb0CFCdvTugu5s7JeYbXJ

26dqrzKK7LhYfFNbw25jvQwn4EMI7OZoPvaw/rIbO23mtTOmfZBdeFpE1gxeFUrQ/OaG

WPHQ==

X-Forwarded-Encrypted: i=1; AKwUvBwSeVomBvevq0P023BIfLCjUesha8pLG3ARCyuWfVPHzHxK2zCvLfhAdg2aQwT4cHmkbrE3CDs=@nl2k.ab.ca

X-Gm-Message-State: AFuF++lSNbvlgrulP3tGKqm2f1DC2rKibps4/e1eWgqLvdO+zfN4ux3j

PuVI/ecDSFlrx23pgonKrn+KeFc80ska8Te+MzzJOlHj/PtRNg8KZFsikRyd9yJNbSMxOYIcqSY

FshlOcqrYGbSR71G3A2G3BXf6tzdFEmE=

X-Gm-Gg: AYBFou1ef6T8rPW1hD7vOKaY+HcOLV1F+NAG8FJKDYacLey2SbtTzzuMqdRlyQUtJiK

mPoKJAAfaIGlWr3L72zsNc17IyfmKBOwH1dbsgudptfogX7wKTVYfoK+79pAVMY3zDxko31uA9x

kwIR59gYeW2XMdMggCkhPfZ7GtLwWn1fL1OjBIg5nKyTr9uvLA7T+CokEw9pkMDcJ6xQijalKJv

5yGLp0hrzGUxqgCh7JMEGf0KZg9Gd0gGi8kH0B5sSFZqRXcN9kyH0bmu2wKTWGPzzIdhj1rWOKz

1wWQxG/4euK00l6RhZxuMHaWUd8/6kh5PtPin11yUydyv1flyYHyH6JzarF2hlNLYa5qhWFMi48

3wlBAsSTDH4fL+mTLGDcIYd4j1w9i7h+4CMx4E2z67fsX2mA15dbyopIkBfnb

X-Received: by 2002:a17:907:d9e:b0:c26:19de:9aed with SMTP id

a640c23a62f3a-c2619dea8femr1710531466b.44.1789039473509; Thu, 10 Sep 2026

04:24:33 -0700 (PDT)

MIME-Version: 1.0

Reply-To: steveford677@zohomail.com

From: Steve Ford

Date: Thu, 10 Sep 2026 13:23:40 +0200

X-Gm-Features: AcwNN1U3A05BdIEoaoa66dqObc6mMPfQRBUYq1wfu3HuOk34qQwalcYVixp1agI

Message-ID:

Subject: Investment Inquiry,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000004ecacb065b1f364c"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 12.7

X-Spam_score_int: 127

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Investment Inquiry, Greetings. we are here with our mother

and our younger ones meanwhile we got your name in our search for a foreign

partner who will help us as we and our mother status as refugee cannot allow

us to transfer our [...]



Content analysis details: (12.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.44 listed in dnsbl.ahbl.org]

[209.85.218.44 listed in dnsbl.ahbl.org]

[209.85.218.44 listed in dnsbl.ahbl.org]

[209.85.218.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.44 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.44 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.44 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[barclaysbnkheritance(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[steveford677(at)zohomail.com]

0.9 URG_BIZ BODY: Contains urgent matter

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.218.44 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.218.44 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.2 XFER_LOTSA_MONEY Transfer a lot of money

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Investment Inquiry,



--0000000000004ecacb065b1f364c

Content-Type: text/plain; charset="UTF-8"



Investment Inquiry,





Greetings.





we are here with our mother and our younger ones meanwhile we got your

name in our search for a foreign partner who will help us as we and our

mother status as refugee cannot allow us to transfer our money. Please

accept our apology if this e-mail is embarrassing as you don't know us. Our

mother and we are in need of urgent assistance. I the son and my sisters

miss Ruth, the daughter of Sir, and Daniel Mutombo of Zimbabwe. During the

current crises against farmers in Zimbabwe and from the support of

Zimbabwean government to claim all the white owned farms in our country.



All the white farmers were ordered to surrender their farms to his party

members. Our father who was one of the best farmers in our country did not

support his idea. And so the party members invaded my father's farms and

burnt everything in the farm, and our father was beaten up by this evil man

and made away with a lot of properties in our father's farm company and the

tension was so much on him he was rushed to a SPECIALIT HOSPITAL in South

Africa along with us and our mother and our junior ones we move out of

Zimbabwe because our lives were in danger. And after much distress our

beloved father died here in South Africa. But before then, our father

handed over to our mother a proof of deposit slip/Agreement and some

documents which was made between him and A VERY RELIABLE FINANCIAL SECURITY

COMPANY here in South Africa on which he deposited the sum of $30M (THIRTY

MILLION UNITED STATES OF AMERICA DOLLAR)



This money was raised by his farmer's group for the purchasing of

farming equipment s/machineries before the land dispute Rose. So we

decided to make contact with an overseas person, who will assist us to

transfer this money out of South Africa, we want to be there in your

country. We are here as refugee and our status don't allow us to stand for

the fund for transfer, we will like you to stand as our father's

beneficiary, and with

the help of our father's financial attorney this transfer is going to be

fast and easy.



Note that for your time and help 35% of this fund is yours and 5% of the

fund is for any expenses incurred both locally and internationally in the

course of this transfer and the remaining 60% is for our family to start up

business in your country with your support.



If you're interested in assisting me, please do not hesitate to Reply to my

email address (steveford677@zohomail.com) as soon as possible.



when you reply we will tell you things you need to do.



THANKS AND GOD BLESS YOU

Mr. Steve AND Miss Ruth Mutombo

(FOR THE FAMILY)



--0000000000004ecacb065b1f364c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





Investment Inquiry,


=C2=A0Greetings.
>

=C2=A0we are here with our mother and our younger ones meanwhile w=

e got your
=C2=A0name in our search for a foreign partner who will help =

us as we and our
=C2=A0mother status as refugee cannot allow us to trans=

fer our money. Please
=C2=A0accept our apology if this e-mail is embarra=

ssing as you don't know us. Our
=C2=A0mother and we are in need of u=

rgent assistance. I the son and my sisters
=C2=A0miss Ruth, the daughter=

of Sir, and Daniel Mutombo of Zimbabwe. During the current crises against =

farmers in Zimbabwe and from the support of
=C2=A0Zimbabwean government =

to claim all the white owned farms in our country.

=C2=A0All the whi=

te farmers were ordered to surrender their farms to his party
=C2=A0memb=

ers. Our father who was one of the best farmers in our country did not supp=

ort his idea. And so the party members invaded my father's farms and bu=

rnt everything in the farm, and our father was beaten up by this evil man a=

nd made away with a lot of properties in our father's farm company and =

the tension was so much on him he was rushed to a SPECIALIT HOSPITAL in Sou=

th Africa along with us and our mother and our junior ones we move out of Z=

imbabwe because our lives were in danger. And after much distress our belov=

ed father died here in South Africa. But before then, our father =C2=A0 han=

ded over to our mother a proof of deposit slip/Agreement and some documents=

which was made between him and A VERY RELIABLE FINANCIAL SECURITY COMPANY =

here in South Africa on which he deposited the sum of $30M (THIRTY MILLION =

UNITED STATES OF AMERICA DOLLAR)

=C2=A0This money was raised by his =

farmer's group for the purchasing of
=C2=A0farming equipment s/machi=

neries before the land dispute Rose. So we decided to make contact with an =

overseas person, who will assist us to transfer this money out of South Afr=

ica, we want to be there in your country. We are here as refugee and our st=

atus don't allow us to stand for the fund for transfer, we will like yo=

u to stand as our father's beneficiary, and with
=C2=A0the help of o=

ur father's financial attorney this transfer is going to be
=C2=A0fa=

st and easy.

=C2=A0Note that for your time and help 35% of this fund=

is yours and 5% of the
=C2=A0fund is for any expenses incurred both loc=

ally and internationally in the
=C2=A0course of this transfer and the re=

maining 60% is for our family to start up
=C2=A0business in your country=

with your support.

=C2=A0If you're interested in assisting me, =

please do not hesitate to Reply to my
=C2=A0email address (
ilto:steveford677@zohomail.com">steveford677@zohomail.com) as soon as p=

ossible.

=C2=A0when you reply we will tell you things you need to do=

.

=C2=A0THANKS AND GOD BLESS YOU
=C2=A0Mr. Steve AND Miss Ruth Mu=

tombo
=C2=A0(FOR THE FAMILY)




--0000000000004ecacb065b1f364c--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 06:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4dbW-00000000CrN-1z8a

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 06:10:10 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 06:10:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-australiaeastazolkn19012064.outbound.protection.outlook.com ([52.103.72.64]:1875 helo=SY5PR01CU010.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4cC2-00000000Oz7-0bED

for sales@nk.ca;

Thu, 10 Sep 2026 04:39:57 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=R2/lIanGj9X8NiG5gnyUBxTHt3zkeHA+C4BLHZFdDsrDO+zZ/prY74rO65ftyEBOj7irPJltsAnItQpwVmGJC5f0VODYr6yAOIA01BPI0JeIxNX+z7UdtXJQZtFLhKcj2ejfhYRyU3kzcDTxj+83w5g2M9h9uSqtQ6eKU8KQzwgULgh7APU4e6Z1b40W76qRquVhsemCYbmy9VwIfaD6y0B2AzuG7+iH+qaq8w+Cbjtn17i+jDxtcZcb512H/Rmz8LBk8XMSclC36QDgTWphvhYxSFUlaey6RyjOWeoZqqibefNg3exlHgQlRqNBH/7N0LWfsJGIN9wCOmcdoLWoGA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=01BBcrSSDhO9fvqQ08lpOF8OwR9nayrBf99Us1nqaGs=;

b=jszjGQNG1QE3G3eAJCCuhZaF4Tpu6wRSNpYp4SiQvJiCla85DHLnTloEWx2JGPAfC8pfOtKEmAgLbw0Pbyr7/kr3JT6hcdK+06SbYIszVwO8QaBBXFbgGVWagHUf1Rlq6fqh8lKPqHStmP0MKyR6usihLDAiReJgJRGcYtIIKxCuoOIvU4jKgHuyzUPtsAOoSNTr567CqSJzaQb6ndwvlsiHTWx9+LKntdYz4zmokojWuO3NGoF6tfFANDvHmcu78DnqDfAB2LAKBbgYkzZV2J6Rd8T0RzwFsyDrYeXPWR1kGBfKebtzM/dTCZY+cIXAi9JcCVNHTl6wp3WJAv9V3A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=01BBcrSSDhO9fvqQ08lpOF8OwR9nayrBf99Us1nqaGs=;

b=UFtfRs71MbAmS4Q6L+oufmcI8t+vOkWJOBvztn/7J/xGNT/t8GbRHIGsjSYIxTrhqTANXLPdvbpCgzAW3pOp0+PPPzY9hUMSgL/Q0bLrBbKdFmpXZIuDPBjvqlKo0vtENr0oZ+MhwVpLdZE8oFu2o5l6pOhvIqEHhru4owHi1KM6boxtefTMEjiPulsmnz+N/s60THqRPJUzM2saNZ6kbvZdhsMu4NZp2Epx8KrWdKGJCecJN4GlPUE1V2JcivnIidzaAr7qYCI1iuumZmyUqmZG3dEypaYPL8srufqu+VL+5GeUfGceNIZDVgscD0PGagByxnPsg2i1dm/ypJ+tyg==

Received: from SY3PPF94BCF1972.ausprd01.prod.outlook.com (2603:10c6:18::425)

by MEYPR01MB6791.ausprd01.prod.outlook.com (2603:10c6:220:12f::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.7; Thu, 10 Sep

2026 10:38:17 +0000

Received: from SY3PPF94BCF1972.ausprd01.prod.outlook.com

([fe80::80f1:fb95:df8f:8179]) by SY3PPF94BCF1972.ausprd01.prod.outlook.com

([fe80::80f1:fb95:df8f:8179%5]) with mapi id 15.21.0406.005; Thu, 10 Sep 2026

10:38:16 +0000

From: Pearson Row

To: Pearson Row

Subject: Re:

Thread-Index: AQHdQRB9NchSyW4/00q0ORUmxshRTQ==

Date: Thu, 10 Sep 2026 10:38:16 +0000

Message-ID:



References:



























In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SY3PPF94BCF1972:EE_|MEYPR01MB6791:EE_

x-ms-office365-filtering-correlation-id: 25a55929-cadb-4512-a3eb-08df0f279fbe

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|2604032031799003|15001099006|25010399006|15030799006|55001999006|51005399006|15080799012|19110799012|8060799015|31061999003|8062599012|16051099003|19101099003|704163111799003|22091999003|24121999003|37011999003|3412199025|440099028|102099032|40105399003|2607281247196008|260806224601699006|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?WJw41tFxvyCigDihsqnEn2nWmyuXvb6jM9s+My8tJBPITyx36e5mk65y9D9B?=

=?us-ascii?Q?Dzd+HWVJ4knW0sHOo70RRN4EutOrJGo8Asf2vU3hKvV3e/w2XXrRBB0gckaW?=

=?us-ascii?Q?LVkKzUwYrBZoK8VL0pGRadesbbtqUlAL7ZOwybxaHLI4xC2Md4o/5PYRUq3c?=

=?us-ascii?Q?AVy5r4OkarZUpFsy8udgRHlw7IfRUWfQBe6iiW71FR4VB/lX147s9a0TAi20?=

=?us-ascii?Q?E7Re+8FKJXs9jv1f7UjZus+rCNlsOvDruZgAgR+7axYVRSP9/iRwEx02ONzI?=

=?us-ascii?Q?5fLU+xHhXbDzK9mGGxDsua8EpGJuBWUmKaaE6RkEKv6EBX6sd2tL5tT41dYj?=

=?us-ascii?Q?UU0IJvna93RDcSkTriW/ZM2mMx1iKJXDE8TYIAX4yuZDGDxb3CIXUnJwlvqP?=

=?us-ascii?Q?7w3T9Nm/5qchw96XgPpfFJkX3tFyQizRvuSgU2y2/fGFKX5+XpQUqacqBDv9?=

=?us-ascii?Q?Y9y7ap9u7QB4PrBo+XTQUxM7Lb/APBCYtFR4l7S22LeQTXn2rdOIKeiq60G4?=

=?us-ascii?Q?MP3R/lWXSOcOvyOZpc/UPAxsUvGyFbX5eIKQmAIUtSvKGRHuE1wmNAPQI+VK?=

=?us-ascii?Q?DZbtQSis6azsU2OXZIsE+grBy+vPAODLaOtBBR58j9TnlmoMmOY+HANbTDQ5?=

=?us-ascii?Q?/Cg+Z5b/C/GpdhplzpwacvJQ0ox+X5PXNA71oUU+wlYShhmtj4eItWTgxaPE?=

=?us-ascii?Q?Qjd6GIbDt8xbDlcXFSz+mol3WUU11WosdDgCV9H5wCv6kU4JQl2WHo/6/tBt?=

=?us-ascii?Q?yQB1EgHpvWNL6MbTLq71MhruE+EjKuitdZ+0AtkW5guQ2mggmYLncO+d9TgH?=

=?us-ascii?Q?in4lwQW86LMKW7BmDWdEYdX3z1NClT23fLoJ2HmKGf4I6R6y63pbfbUXeCDp?=

=?us-ascii?Q?F8bjRQvZw6JPJYpc9JH9j0LHmCZmhMD0dQH4vzqjFNVciNaBrAoxIc/5F1IW?=

=?us-ascii?Q?tIeVxSFrbLlfLF2Dnf1CHGpf5xsooePJ/SBqZTE9mm+cz/quzdGp95FGrkgH?=

=?us-ascii?Q?QxrUEl0IabDb5N5IzvVRUqYnpVBMxDIfye/SDSKhL2DThI/LVaVjVmLi4iU0?=

=?us-ascii?Q?FiJFMH5aipJuTz6XAQWAo6czrUk1Atw5xJqoZ9ji3wxIw5ZK8wu56zwrabbD?=

=?us-ascii?Q?E0/8o+HvU1NjWYXKjKGT23UO6hT+mjj4C+Fw5LAZlQHpjOdq+RIaPiEI/OCG?=

=?us-ascii?Q?DAXHNZNcRpFpJiUKnMSLzsIj9JEIZwngwz8RZ+LpkWojiB5ZteQqZvb9taiL?=

=?us-ascii?Q?HnRQ2zZpWI6Fb1pKa+3mZdGhk6t01RLKh8LAPJZSic+ap5uJ7JfYxuur2uOP?=

=?us-ascii?Q?c6bIKOT2XOtUpyu8thfsYUv9?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?98S/GqNaxqu2hg+EiElls6W2kjlrRbbBkNi3R9bKIeKU6pGYFTDcjMixGeO2?=

=?us-ascii?Q?b93mqBteckGeoKUTiYEB5bLoD6Fp9We6+Bz0w8fCujFaLJswPpGr1JyEwwf2?=

=?us-ascii?Q?RwBqqbQsrcExdtIf8nOQCMVBiCxWQ+dKT+uBibigVGUNtiXIVQuhOvoWfCNj?=

=?us-ascii?Q?o2rvUxKv6MzOz2i51+42l/Rsp4Va35jbr73b9iESOvEiO8HbMZJrVUhOxvJx?=

=?us-ascii?Q?SZjkFLQ6dY9rA3SqRZlkhidpHYYEb0J5ezRfkl/s+ihNLX6M43nwI7TUGXoV?=

=?us-ascii?Q?j8iCyuLRLOwY8BfPcbNJekQnjPporUcYeapg/qAGbRQJwnqvWrxi6Ew6TwQa?=

=?us-ascii?Q?y++qbefzQTx9aMOG+4exUdizXTPxmtzLwxaJV9B7QWgeF0ziLZUx5wqd6jgJ?=

=?us-ascii?Q?ctHRFIw25958yNmxFEtUrXqY2ItGforKqdGlDq/j4HatXF+mF4xTMoKv+c2T?=

=?us-ascii?Q?vegg4xN9lQKyebLfXqUCqlSI+KbEwWwU51ywth+s9lpFQVxWBG9gQiXrdn56?=

=?us-ascii?Q?JIAnWGhSUZ4e7XAoqDCrT/3bPt7bGRL01MKlAOUThfUZXQIGnXKrvLE2OoPq?=

=?us-ascii?Q?4+CV+rnnJjZMuC8B3bZWq0tMq4b/FMpsD6IFGTKwZNFmUXxiPjNDOhNXiTCw?=

=?us-ascii?Q?Bms8a9OyZhlUZLjl9FooPRht6WTmf/oDmLBVZtqoTxi8r5r48b+/uQ8L9KSJ?=

=?us-ascii?Q?Xr3zTh/KLmxITYsIsDjs0Ycb5ChVd3uvTy2Yax2Yrxkb6yUk6ef6B+dowgi2?=

=?us-ascii?Q?0J9HTRDVTvVFkbdm/KnDinJK28Dktl94zmb8zqA+2nUqH2EI0K3Y3WtKVJEN?=

=?us-ascii?Q?Ekk6119m9SE7kgILWxxcCEqWtTGSW/X6gD1blH81KNAaVAqrbYT7rUDqH629?=

=?us-ascii?Q?1v6YSB6pBKBqTnh6UkmDoLAroTMUcl37gs+rp69XCL3MoQ5p5WUxlml3WiJV?=

=?us-ascii?Q?dgRnEiI5ACJg2UVTkaQHmv7bLnuIkAlWL7/KDPNE4LulxzjLYtbFBW0lDpme?=

=?us-ascii?Q?R5Nip7BK4EcBXwrZkbYNNVYDmBz05mgtBj2EKH6KscqZ02GGB1ApXxCGvM7V?=

=?us-ascii?Q?AzdpLNlpQN4duiyUWww925EhFngccITy2YBdGAZjRDKYsUQJwlEUUDZYLSYR?=

=?us-ascii?Q?5le8A7eLOWlfaaKwPs6fNdyvqR9pb43sPzHdeuMeHvFbMBOvrwDYshAXoaSY?=

=?us-ascii?Q?CrD9jdYlDG2bVmOh+qcJWN5UaMhfh4GQuIAyuIw9fHJpTJHKdjM7OiVX9C/R?=

=?us-ascii?Q?zVw9CKfijs6pwTtEbZTknsnEi7N6+LzwypHaHDP43NOazzFNoPhlijhA5JAh?=

=?us-ascii?Q?vQlHpv/TO1had7IKJWiv702crrihLoU4gn4t6ouQUt8D3J65eEuOP/mB0tXK?=

=?us-ascii?Q?O3091gvFK1Y/BBOVwrGx4/Ol1I1MJs91JtkxpQXKDnTeJlWM0OdnQybZfuSz?=

=?us-ascii?Q?fW3wFjUgy/GS5USaLS9AahTmjUISyQBt?=

Content-Type: multipart/alternative;

boundary="_000_SY3PPF94BCF1972B02EA29FDB69976411B1F8BF2SY3PPF94BCF1972_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SY3PPF94BCF1972.ausprd01.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 25a55929-cadb-4512-a3eb-08df0f279fbe

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Sep 2026 10:38:16.7522

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MEYPR01MB6791



--_000_SY3PPF94BCF1972B02EA29FDB69976411B1F8BF2SY3PPF94BCF1972_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello.



I'm waiting for your reply,



Can I send a portfolio and price list?



Thanks,



________________________________

From: Pearson Row

Sent: Wednesday, September 9, 2026 4:47 PM

To: Pearson Row

Subject: Re: Ranking Boost



Hello,



I found your details on Google and visited your website.



I can help improve your website ranking and get it onto the first page of G=

oogle.



If you are interested, can I send you seo proposal and price list?



Thank you,

@Pearson Row





--_000_SY3PPF94BCF1972B02EA29FDB69976411B1F8BF2SY3PPF94BCF1972_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








background-color: rgb(255, 255, 255); margin: 0px; font-family: Calibri, He=

lvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Hello.



background-color: rgb(255, 255, 255); margin: 0px; font-family: Calibri, He=

lvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">







background-color: rgb(255, 255, 255); margin: 0px; font-family: Calibri, He=

lvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

I'm waiting for your reply,



background-color: rgb(255, 255, 255); margin: 0px; font-family: Calibri, He=

lvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">







xt-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-fam=

ily: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"=

>

Can I send a portfolio and price list?



xt-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-fam=

ily: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"=

>







xt-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-fam=

ily: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"=

>

Thanks,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Pearson Row <pears=

one_row22@outlook.com>


Sent: Wednesday, September 9, 2026 4:47 PM


To: Pearson Row <pearsone_row22@outlook.com>


Subject: Re: Ranking Boost

 









nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

He=

llo,



olor:rgb(255,255,255); margin:0px; font-family:Calibri,Helvetica,sans-serif=

; font-size:11pt; color:rgb(0,0,0)">







olor:rgb(255,255,255); margin:0px; font-family:Calibri,Helvetica,sans-serif=

; font-size:11pt; color:rgb(0,0,0)">

I found your details on Google and visited your website.



olor:rgb(255,255,255); margin:0px; font-family:Calibri,Helvetica,sans-serif=

; font-size:11pt; color:rgb(0,0,0)">







olor:rgb(255,255,255); margin:0px; font-family:Calibri,Helvetica,sans-serif=

; font-size:11pt; color:rgb(0,0,0)">

I can help improve your website ranking and get it onto the first page of G=

oogle.



olor:rgb(255,255,255); margin:0px; font-family:Calibri,Helvetica,sans-serif=

; font-size:11pt; color:rgb(0,0,0)">







olor:rgb(255,255,255); margin:0px; font-family:Calibri,Helvetica,sans-serif=

; font-size:11pt; color:rgb(0,0,0)">

If you are interested, can I send you seo proposal and price list?



olor:rgb(255,255,255); margin:0px; font-family:Calibri,Helvetica,sans-serif=

; font-size:11pt; color:rgb(0,0,0)">







olor:rgb(255,255,255); margin:0px; font-family:Calibri,Helvetica,sans-serif=

; font-size:11pt; color:rgb(0,0,0)">

Thank you,



olor:rgb(255,255,255); margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Apt=

os_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(12=

,59,94)">


,228,250)">@Pearson Row



-size:11pt; color:rgb(0,0,0)">














--_000_SY3PPF94BCF1972B02EA29FDB69976411B1F8BF2SY3PPF94BCF1972_--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 04:20:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4btm-000000003tR-2mvR

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 04:20:54 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 04:20:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013076.outbound.protection.outlook.com ([52.103.74.76]:14931 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4ZVi-00000000G0d-42w6

for sales@nk.ca;

Thu, 10 Sep 2026 01:48:06 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=uu5sm6E79djg0d/w9FFV5zq2U/VW+AzRm6ghr+Pp6/6JjnnpgKOWZnEctRdEBZaP4yNHXy5SUMt/u5Rg7OqvV0qgMUSJAMqZZZ0wRJisQHdUlboltSZerD2Z8ehgPpfDPo7asfph3mAjHqC7m6SZ0tvDwTalYanXDJCob54Bc6ucm/0xcNPlXnvK57ntluHLuLiwuZrU3P2pZboNZX0ADDpURGEU8sK0FshRABbKeC/KdSfzUn/PWyVduc+UKVOZho9h0rDscqecfI8BZwAWp/QazLL85c805Zh6XKyTqauy4lXEe4yWmLlULMWVKRrd9aijWOmtRJS0ENUDBXUFkA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=OfYl6FyYmAMehqiQyaMvCYx3RO+0nfHl4AoKouM7Z+E=;

b=EBdfLbY5BAT0CNIV2CQeYvA+sQi4qIgAIx4+OG3xw6M70IcvIWgq50Xrzmdu/qmctbg/g0XkPIJmMlMQNJfKre8CI76k/Zfth9DDro9PgkHXLGXYqAu3STIl9NVIizgrrWzHTStOnK8cUMxN0b/TfgVBmr9hZPKuAXbw08jPe2z3FMGEw0NSa6DOy9zDTeEr1VdrF8Gu5KBO3Qn/fJPeO97HEDH2a7hSiH6Z6Y2lX8NJwduO2HDmvKokm/n5DtiDRGlWf1c9+XgoRURHKjlvZBRx3B5pI5PHbAhHKu/g8c/SptdVhdBNZIAIyX8QNUMnfNqUnqCPpAIY405wsw4KPA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=OfYl6FyYmAMehqiQyaMvCYx3RO+0nfHl4AoKouM7Z+E=;

b=FNWpD0QF2tgN0eLQm4WfsHtL4p+A3P9Eh5gZvu/9HD6VhPhUhe6jGva3xWIbhHkMvrkpcP3eRo19FJi7E8wdGlxKmrOZn2lDD1x6FYrYhuBDeAsxWUaZsfJnZSsBl/ku78LdNlHsm8f1ZAxTXmP+L5+GtuA8FYQhtruLzeuqJTfwlZn9QnR2NaBKjQEFw/CFJ64c7JJg6l+RgHFsiu7gEmw9Af+p/fnCFPKlLran2JXr2uGL2gukuMwIzY312S7SHltKTZjJQ+5uFUXnELXR7/3QB6jbOSUFvCnteyF8DhCaIodMl9qf8F3yRbMYZJmx5BS6nT3/7DjnQbTfI8ABIg==

Received: from TYSPR04MB8165.apcprd04.prod.outlook.com (2603:1096:405:9b::7)

by SEZPR04MB7298.apcprd04.prod.outlook.com (2603:1096:101:17a::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.7; Thu, 10 Sep

2026 07:45:21 +0000

Received: from TYSPR04MB8165.apcprd04.prod.outlook.com

([fe80::7622:da4a:293a:b3b1]) by TYSPR04MB8165.apcprd04.prod.outlook.com

([fe80::7622:da4a:293a:b3b1%4]) with mapi id 15.21.0406.007; Thu, 10 Sep 2026

07:45:21 +0000

From: Vikram Kumar

Subject: SEO Growth.?

Thread-Topic: SEO Growth.?

Thread-Index: AQHdQPgtRlwXK+NBHk+oxnqJmxGDzA==

Date: Thu, 10 Sep 2026 07:45:19 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYSPR04MB8165:EE_|SEZPR04MB7298:EE_

x-ms-office365-filtering-correlation-id: d3e44ba3-e044-4989-aea9-08df0f0f7796

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|24021099003|25010399006|4140399003|55001999006|15080799012|8060799015|22091999003|15030799006|24071999003|20031999006|16051099003|19110799012|8062599012|24121999003|39105399006|31061999003|3412199025|440099028|102099032|11120399003|41105399003|39145399003|40105399003|2607281247196008|26121999007;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?pQOja7AX6Uw1vqJPzFMDiwaQJCqiuLgo4sI+QuRN7NNQH8wETNmCXK1BS1?=

=?iso-8859-1?Q?Q4FY2DEjFvYISSPJ7Lf9R2qrY7dxol/y0xuBUbjPsHXsNkGDn+PgwAD7KI?=

=?iso-8859-1?Q?0S3IwNlTn+UhaHSfDBHUiUrXekVAUmkn10cb05+B6MV9VtWJ9w6E9WTpCt?=

=?iso-8859-1?Q?qrc+BPD+QuOdny2RnuLHFD0w0VeRb71QqkI45dwCr4OwIpQdcXELTSmCt9?=

=?iso-8859-1?Q?D8ZXTz7CHFTaKQK8ZbNXrcSDBksMg7Xbq3CYwjzJyLYVLAD8SoeTA/PD4n?=

=?iso-8859-1?Q?k+qA+ibtXWD2vxXsrpmYh4wmAeCNoQIw6ZyIxFYOcIaLh6zmGBae7rS13u?=

=?iso-8859-1?Q?iveilYOQGmZ7ER0hfz0gX+pV4lPrQkeka3NwLdejA1NsTU+Akrx5oNfg8Z?=

=?iso-8859-1?Q?miYRLXsCpzBXXNyZG/FGjgL/IZXRTnSMY1vLS141pfUbWc+pSNMIhj8s0M?=

=?iso-8859-1?Q?+QbpEERmjtyotgc8qcZQ2FR32V34ErcrrXX0ctBt4QsKrNVv1GjuxBFo93?=

=?iso-8859-1?Q?fm/GSdvBArmlgenKL+iFu+N0S/rpH0OgoSZqcbLzDPbAY2i8MUIwUxsXMn?=

=?iso-8859-1?Q?S9d4eUzIYf0KTUi3rdOJpo/rWBRBy2IilVkJkz7WB8KWTKHwvmHUBDPUhJ?=

=?iso-8859-1?Q?yU+oKDpdbI14TdCSBvTBi5h4wYvJeVKCIfXEzCE6XNR/Hr2CyPDoTVDQ5X?=

=?iso-8859-1?Q?zpe0rh19TWUvIkDGehR645VOqF7aQ8sIwTYkYTdKImBoKUzatLsdluqNF3?=

=?iso-8859-1?Q?6hkWjQfByEzEQKYvfSl+Oq9J9UpSsfT5INI7ddn1VBsCHF+3gT8Kse548d?=

=?iso-8859-1?Q?mj2LaqS+05Ni5FT8+DGyVWnAkkk+sEXvj1VUUhaoAIhvAZc843nIfSKd7u?=

=?iso-8859-1?Q?YAOSLqdZR1X+7AOE3Pl67xkBgyQmQ7wg0EwZfT7Yl6ZrRCbsGgMijoFFmc?=

=?iso-8859-1?Q?MRRi7/HxffCd2XyCcLClHA1+ir8srJyTjeW17smkz+9RskLauXD1Ryd1Tm?=

=?iso-8859-1?Q?3EU0rLTl1YGMKtAJaeNgUcFIBaPUqv1JjUiDm52Q6WGQSoUzOtE6Pevxer?=

=?iso-8859-1?Q?JSGKuy9uyYQXtKKOQccFdkKGQjOL8VzTqZB/Ykh5eWfmcRrUgw3xFchxbz?=

=?iso-8859-1?Q?lcNH2WDJx31YoV9d16Ogf4ZCeZBHtmY9y3H+vLoAk6A2p0EEhKVspuELhR?=

=?iso-8859-1?Q?C/xnfO9X/D9s97v78J3w9/uRK4Ok/T04FZqSC6iUv6wiYLZx0JnC4DGt7V?=

=?iso-8859-1?Q?N2PaXYtKo8TdR4kOIZ8HIfys4c0JfsaQAIZLydSBRTi1s5Wgeh8e2FB2Lg?=

=?iso-8859-1?Q?TRWi?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?taw7uRMYmbF52rk/O2FodbYaNo/vlEz4oeeu2Ku3rVTW8WeXXAdMjZIkTI?=

=?iso-8859-1?Q?eF1UCQM+tXIy7eOq3ahHOijl+Qi/j/aBjYaEW5jjQ9WboIlXic6+y93L3D?=

=?iso-8859-1?Q?qgqpdT4lpJ2ncGTU5pZElG33igxAvjFWJtHbKEZH2u/tLV/nGDPB6T3n0h?=

=?iso-8859-1?Q?kBC1O1j5aTUTeBFmW/JOLRMQoNfJmkB5YfY+/Q//pNl6WA91mPM8MhdjwI?=

=?iso-8859-1?Q?b3m/sjSNqCcdbAAY4xvILUMo1Sta+lddNvyEF3lWGZQtaABb++6ppP4cro?=

=?iso-8859-1?Q?s6nD0BPvIAyyYoMNyljY9xufR1b2/8QuJDqbrV3afLsrRs7xa1DUcJ0Ajk?=

=?iso-8859-1?Q?mkpylNp0b//nkhtaCaB9YBgsdCyaDB+45lUtdCB4jxudnf+jjAyuse5O3b?=

=?iso-8859-1?Q?l2vfcjHAadFl7r8gV4R/0dZbAt6JkNouKOExugJDikdm/4G+SjeB6XSMDw?=

=?iso-8859-1?Q?15Vxx0S5KYP+Z0i+9z0qFgkttUGYEhWlTPi3Chl/DlB0WwlMN1tafE8UDU?=

=?iso-8859-1?Q?rB2RWZVZf0HroGyFQZId6sr+IJZZSvAHVPmMUZ2zcc5oa+g7NjuCtkmyQn?=

=?iso-8859-1?Q?N59eh6NOEzvTYvhzAv+1NXupikU2m8yMd95FV5u09CJ8R/gtMa10Dhshtr?=

=?iso-8859-1?Q?BOcGct/lUQKF/muyoa8Sc4yXW4Guch259tGGeiTZO6H3Kq43u+4RmIFsHu?=

=?iso-8859-1?Q?vI7GODX0V7ibDImjmIF3cTWLB03zmdS8dsRGPtPHEh1qYmbNGITlYMjCcu?=

=?iso-8859-1?Q?yFGD0wQAqngqZDKGhl1E+U/5BRbERSpwLSIPL2GzUbNd7nXDcsHDlVb4pp?=

=?iso-8859-1?Q?jeJYkI6ypuZocRP0PEzs9Z+rq/XiAO6F2Y2q6suN94Lv/XCBKucAVM3Omm?=

=?iso-8859-1?Q?DNHKA+BBcFvJSU8eZSPFiZ9dZC1gvAugABZXIV/70fbB6Z49kLkrRUtaER?=

=?iso-8859-1?Q?i6j7pP6Hb8DeCqGr1gpVKjl28i63QLn37mpvKc+zCVZTl/MhnHYzbvtCr3?=

=?iso-8859-1?Q?jM+uFkcvrGkakEFQP2wYiLhobe9jQoWCz6GN0gpffzGRuk08dGSRVTs3LI?=

=?iso-8859-1?Q?piHd5A9ISoprYQKBdNUIRgCmOyMxmLSkhQCMIsy+TVONdTCedvTOR6Ddt4?=

=?iso-8859-1?Q?LEsif6xqOtIOUdrnWTIArUxTVdhA6HP0EJtS+uVeRBmoAttk8pcSiD5ttX?=

=?iso-8859-1?Q?3ctj+NdjoDadGBU3eBgPgdzriCR9bQsCxpn7NxGDd048J+2X8lnGz+K07f?=

=?iso-8859-1?Q?zQdHjLjbj+lRKwe+ZvtqIkFYX8SFF06ojlspJ7WxzyydckhCnfJl90wPmC?=

=?iso-8859-1?Q?qJkkfWors4p35PVX8/azfSzSHSKs/h2Rr//I0YZTIKs4Fe7fgNOF3CKoEJ?=

=?iso-8859-1?Q?LLXToMHa8r7Qlmq3shs8mO7pZx2ZLNapltRIlklrKzpzzQw7LFl/4s+Mz1?=

=?iso-8859-1?Q?Ae1DEgIavJ5ob8k7?=

Content-Type: multipart/alternative;

boundary="_000_TYSPR04MB81653FD53979F2D2B97B4006CFBF2TYSPR04MB8165apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYSPR04MB8165.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: d3e44ba3-e044-4989-aea9-08df0f0f7796

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Sep 2026 07:45:19.5504

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR04MB7298



--_000_TYSPR04MB81653FD53979F2D2B97B4006CFBF2TYSPR04MB8165apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,

We can get your Website on the 1st page of Google.

Let me know if you are interested, I will send you our cost list.

Warm Regards

Vikram



--_000_TYSPR04MB81653FD53979F2D2B97B4006CFBF2TYSPR04MB8165apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

We can get your Website on the 1st page of Google.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Let me know if you are interested, I will send you our cost list.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Warm Regards



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Vikram








--_000_TYSPR04MB81653FD53979F2D2B97B4006CFBF2TYSPR04MB8165apcp_--

Product catalogue spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 04:20:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4bt2-000000003pW-2vSe

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 04:20:08 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 04:20:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed2-f12.google.com ([74.125.228.76]:45131)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4W9S-00000000Kzg-2GHK

for root@doctor.nl2k.ab.ca;

Wed, 09 Sep 2026 22:12:52 -0600

Received: by mail-ed2-f12.google.com with SMTP id 4fb4d7f45d1cf-6a60591ae52so2894889a12.0

for ; Wed, 09 Sep 2026 21:11:54 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1789013508; cv=none;

d=google.com; s=arc-20260327;

b=nVWMutDESpPOCzr4UPvTUDJhXmK1aWGg31xkah0flZynBEJ6DfPS+3dtmGiV/xv84V

dVjaoq6MmrNLYt0pE3Wi1PtP+0+OYC0rEKXvXJrlOsXxql1qfFRX1hmIw8X8smUMjJPv

5VTGIj598iZ14zI6TonUoqUuvS8k0NnaKpy4v/7Uyli/K17dXw9cVN/chloVpN4ZpLQL

GuSy1wXRTffiWNymGoaKNTYCgQppVmbmbFzj94aqs2pu67ZbGCqZDkRvXj3axWItvKRx

Pnd/xe453n/Qwgs/GKD+uzK0yv18vkIPOCnuRuN0YZRqgH+KWMqWEvFGF/4Tb7aLS1+6

DOrQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=7TnkWKPPaKJJbjTE0j9Bmi+KwhAGCHTcE7xDyvtYE8Y=;

fh=kDegMZdOJxkEDm0LYdBBsHg987u2ureB/725Vaiu0Qc=;

b=bpqB1a7rmrpKS7C5nWnqqdwoH8zQxvtoTv2FA9MQtC46XbIFENcg0Ol+v1xu2jYT9M

vK48GqljMETzaQ4dUKZdyOh3wxRHV0F69n2rEVU5OH0VJWG+HnGlG6CLfqzcrKPGcVps

vcIr+rh1dinMwrq/16AZMst5U3LTLAIsbTKZas8fMNPapSVQktrmjOk8wvFvqp7Eaksv

0vGbLBMPBZiVzIP9Rrd3QzRv4Dc0Gc0/mtnvGBMmw/tYofSuc4T5D992DRH76H+c7bT5

LU5k+xkJKJux2h/EPXYe/lCk+9429WGTNaZdjdwmYuk/QXvAh/NAQ26XMCSnnNUnVXJu

QhHA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1789013508; x=1789618308; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=7TnkWKPPaKJJbjTE0j9Bmi+KwhAGCHTcE7xDyvtYE8Y=;

b=Q3NKEd/2mPyFyvXVU/XZE/GBTRH6a6k9nY0uSqAwx+khFf5EJEIfSsBkGd3KkSDMle

0/2aJi6tlSjcgTDqzvTGLBDtc82NvBwyi7rx0o8iD7mYNQKCjQLo7FQymzoDcxPgMdDl

9fZMoJitubqVDwCSL6Axp3rvjqjTfS00o4FNdRDEOkDli69HjfE4hig/T5BGrpMiuJND

AUDqVLXuOib9hCMasal2Yrc9VZi7TfGJVZYIp4q5FXlL4QvujRZi7IfhSjgX0csULy3f

2HM00JWUOeWi51X0DoJuDRV3MB6KBMKkuX9/m+xM2CO/Y+WHZ9nwd3yjwwLEIRYSu8WO

AEUQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1789013508; x=1789618308;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=7TnkWKPPaKJJbjTE0j9Bmi+KwhAGCHTcE7xDyvtYE8Y=;

b=Apsg3rWdEoa2Y2jrEYwB7+PKUWy19XxhsFJUCujTc+ihfQASWwinlX00BhmZ9g/d8T

BeTtF/MTGJYh06OvS8YJFgXtI3PVfuw1fea3yt68dnHQYzDSryS+pTx4NiCo1RkYztDO

XjOBepjwB2FEsaDt0CC/0UbYaQP+Iw5olkVbBQFySSO0790Eb0oTMV4SSHzeHvLfKixY

vWUzGG9EpVm9Ob8zKTD+87mW3Pae4cptXpD4p5rPYjFrWYuHnF6+k2q4UYyHE3ljPA2a

KwWs4Gy5XJYOFBYC/PkyQsecL2bnLE4cNyUnMh5SBt8z/aLEpVR+PZhuu1O3exE1EYFW

MWmg==

X-Forwarded-Encrypted: i=1; AKwUvBwnfyt9KEOoAQdsAzLIxxzzMbpYMBJsZ7EOKElZkADQ6cRwjlJq+4ehB5ACXTPk+uvUtJpl@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++nfGkZWz54vUxQlH0FpsEvwEzkWEZEUTKxyMx7Waxlb1XC92+D8

xRvGX8fzFCCLjMGHRqSES8vxyQVdlUa2Uw2y4ogAHpU18F5oM6n2vjMdGUy6TMhBGHQBMPiB5nR

QLujd9Ba/kOuqER3q0kbP8kP7M2BvYTE=

X-Gm-Gg: AYBFou338K4ceFzgahGA0wLeI92viP213lOCq6xmAG5eJEAUKluVASWWpy6rM5UtOwn

M6kHia03iptcbIKx3BzRB5CnIcI8GQyEmiAhYV6mWXAjL1zb+AZ98AlAct9Iv/k7AFdgQsM3HRd

ah7EYFhHMBKPXa/ualQJJBqBnsTq1otLdQzy+pRPV+wmHzllfD2ID8j4nj49wplrhDXc2YLlojG

Tf/mEPzTZ7bR2sFEBesxK7RRaxd/C6cPjFKruIHu2ev7aitH1F/oki+VoW814Vw+bFHtpBBChM/

5S6uK85+L2KqdE+Z/JcKUQFTHpswf0WI0wwKl6t9HjEfA9+JUMgJMBU9AxDoFTrsIwvquZzmKPm

rrd2i8R5TjqJ+bOifiZNhkkyYG2IPm34I7qj+af/ACLgKYf3lt0OMiNcvuIeKlNO6xa3gY7LY0v

Jx74SU0ntDRbXi/+M1ZtU=

X-Received: by 2002:a05:6402:4587:b0:6a1:f7f4:200b with SMTP id

4fb4d7f45d1cf-6a98e0106dbmr7243001a12.12.1789013507684; Wed, 09 Sep 2026

21:11:47 -0700 (PDT)

MIME-Version: 1.0

From: global mentaloid

Date: Wed, 9 Sep 2026 21:11:36 -0700

X-Gm-Features: AcwNN1WBmED8IkAsjfx1ta3H0dL-X6tJXd5wBZ0DfUiVO4_1UQQxmqEIcdgPPV8

Message-ID:

Subject: hello dear

To: contact@urlquery.net, phishing@urlquery.net, support@urlquery.net,

freya@yorilo41.com, sales@any.run, domain.operations@web.com,

abuse@namesilo.com, you@domain.com, cg@graysage.com, root@doctor.nl2k.ab.ca,

aboo@nk.ca, aboo@doctor.nl2k.ab.ca, air04@globaloceanltd.com,

kristine@promoteyourbusiness.ca, global18@winoceanltd.com

Content-Type: multipart/alternative; boundary="0000000000009fbce9065b192a12"



--0000000000009fbce9065b192a12

Content-Type: text/plain; charset="UTF-8"



Hello,

This is global mentaloid trade Ltd Pro touch Israel; we would need your

products as soon as possible. Please could you send us a copy of your

latest catalog to our email ID (roshansetara2030@gmail.com) Thanks and best

regards.



--0000000000009fbce9065b192a12

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,
This is global mentaloid trade Ltd Pro touch Isr=

ael; we would need your products as soon as possible. Please could you send=

us a copy of your latest catalog to our email ID (
setara2030@gmail.com">roshansetara2030@gmail.com) Thanks and best regar=

ds.




--0000000000009fbce9065b192a12--

Loan spam from Google GMail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Sep 2026 19:49:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4Tuv-000000000Ao-34z5

for dave@doctor.nl2k.ab.ca;

Wed, 09 Sep 2026 19:49:33 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Sep 2026 19:49:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f169.google.com ([209.85.210.169]:58874)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4ToU-00000000PHe-09x9

for sales@nk.ca;

Wed, 09 Sep 2026 19:43:02 -0600

Received: by mail-pf1-f169.google.com with SMTP id d2e1a72fcca58-86908cbc011so890497b3a.1

for ; Wed, 09 Sep 2026 18:42:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=swiftbridge.ca; s=google; t=1789004521; x=1789609321; darn=nk.ca;

h=references:list-unsubscribe-post:list-unsubscribe:message-id:date

:to:from:subject:mime-version:content-type:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=Bso4lOVSO5IVjbBTONBwulc2zpwX8ooDbQ3q4Uft90E=;

b=e1AYgN1t1737DZ6WfeZFHeh+tw7okETpjoXwAtyDtQxJfGSLLQ/FNDsC2Xy6CBHMsS

BQBLC+woPYZ1IlTwlQQi9TTUM4myq2fuMs6oWM/Mf89CmNpQm8UPA6jO2VsKUo1J4eRO

G0yIqGD4vC8A9lUmvAIKNVM3ppzYwwjjNO8ybr0h6Y+20yXXIJi4Y5vCQVJYV/btHqkd

rADq3CfBpovNcHGhBFdQLk5hEeF7XkoonlFwDIHQV2f9yQ+MCjCG9c8MOBbJYy5Jg7o+

Ch/welTuiaZPpQUYuzYWsUvpIfdjzYsJL3odzpBp5cjLWgpk20QC3PzfLD3usugssimW

RT+g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1789004521; x=1789609321;

h=references:list-unsubscribe-post:list-unsubscribe:message-id:date

:to:from:subject:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Bso4lOVSO5IVjbBTONBwulc2zpwX8ooDbQ3q4Uft90E=;

b=Q/sPDFLFU3b6/Zw47kVi6YVrFVRXSxkWvc2SSBnK7x+BsJQMPI+xDqrqig8HZzYHWq

ANdAuynOQUw9qa3zbsVQKXzEFLDNJKG0ZB4v8OqU5KdqVxpEYmF2VokypyA5rf3TC+Di

VeNtg03IHeIPQfGZw8HL/FQP+i+WJ9f+wiG9nGVnpZuBCio4jA/7yOUF/PpBLPCkOsos

pad32dDPY43yqL9xaUB46aYRWgLmVdb3FFKPHAZJP7osz7SnVVIS9gWcE6jCQc3mX9QS

+UyQhTTzXxqA5f+8e+QtIhZXm3pk5sURDonF6OVj8QaMLvQF+YYl90J2SeIiTxeIHMOI

iz+g==

X-Gm-Message-State: AFuF++nnhhpXTUU6QxEIGJY3VJjDSjR65BhGDjPpO5PwL4XwQHLeT30l

qEybFKeReXynLG9SWGCIHeOGVjL86PwNX5xgv2QoJsFClgK1R+Awauwe5+GJbKVGa74+5VxkTtq

mAYZr6w==

X-Gm-Gg: AYBFou19UEfVzAOuiMtpIqYyCEGSDKrMR+UXiA57Sh9T8P3MTfTvJ2tn7hW29fXNM1A

6ng6AlR8DGwXeVPHv2VnxzsZ588Nw9tei0TrdsER8ACraJY6PL3w+DA/upZV5wgG4HS/4X+v+Yy

N8qD08RDceagKXDf1xf9FtUyZZYP8IcGkFpwuTWTfyoUnpk414bi69qD2bp6LYXHHLAnOHxWYnv

6DPEXCpE9/aYHYVU3SbrftCUg6FCfHJ3YoDVjFlkz6OPk0AJgYctPUJl8dz2V33sx2WVaaMYdyO

P8yz397/3lYdD+QIKxE/oH8XpSTbFgM7tnEJ8z3uyWHJjmab4lY2j5w7B7BNHMBxCYQcDEKGIuG

2zXTNUAnVNhhGgogau3RQpHhihtwdWrxVJkEYX+u+XJ6Rfy9OCiZbe9ti7m1b63QZ8h/QRjJGw1

omGFk/uBXZ8hSU7Nv+JWoigB1yRawATElhbEavRykyq6iOroMqR9v5pne2jVZYHxvy6T4syYk49

s4Wzcqi0ZyYr2iDSGoV3dOX6UH41xNqpCmYIGsVH+S1cw/i5yKOBtc9UTrhkTDPavqOqcMf6tC4

6aCxaqPguqkXOMYugrepEQN8Fk2U2LwuM587ApHvzu+63RePngH3um9rVQ==

X-Received: by 2002:a05:6a00:9a9:b0:857:726d:270e with SMTP id d2e1a72fcca58-8616dd533a7mr52270813b3a.26.1789004520706;

Wed, 09 Sep 2026 18:42:00 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-c0.close.com. [54.200.191.154])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-86761163258sm2579644b3a.48.2026.09.09.18.41.59

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 09 Sep 2026 18:41:59 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============8530153334603716737=="

MIME-Version: 1.0

Subject: Could you use more capital?

From: =?utf-8?q?Roy_R?=

To: sales@nk.ca

Date: Thu, 10 Sep 2026 01:41:59 +0000

Message-ID: <178900451945.7.16886983453001799191@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_KJVM9Gg4pihbKRAhquNtjLksxKq8NWIMJenO2JPYdVX

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

References: <178900451945.7.13213305385700969296@smtpgw.close.com>

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Gurkirat, Quick question — would additional working capital

help right now? We may be able to get you approved for $25k–$500k, depending

on your business and cash flow.



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[54.200.191.154 listed in will-spam-for-food.eu.org]

[209.85.210.169 listed in will-spam-for-food.eu.org]

[209.85.210.169 listed in will-spam-for-food.eu.org]

[209.85.210.169 listed in will-spam-for-food.eu.org]

[209.85.210.169 listed in will-spam-for-food.eu.org]

[209.85.210.169 listed in will-spam-for-food.eu.org]

[209.85.210.169 listed in will-spam-for-food.eu.org]

[209.85.210.169 listed in will-spam-for-food.eu.org]

[209.85.210.169 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.169 listed in dnsbl.ahbl.org]

[209.85.210.169 listed in dnsbl.ahbl.org]

[209.85.210.169 listed in dnsbl.ahbl.org]

[209.85.210.169 listed in dnsbl.ahbl.org]

[54.200.191.154 listed in dnsbl.ahbl.org]

[54.200.191.154 listed in dnsbl.ahbl.org]

[54.200.191.154 listed in dnsbl.ahbl.org]

[54.200.191.154 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.169 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.169 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.169 listed in list.dnswl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: swiftbridge.ca]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: swiftbridge.ca]

[URI: www.swiftbridge.ca]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.169 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.169 listed in bl.score.senderscore.com]

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 IMPRO_URI_2 No description available.

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Could you use more capital?



--===============8530153334603716737==

Content-Type: multipart/alternative; boundary="===============7423728741844359450=="

MIME-Version: 1.0



--===============7423728741844359450==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



Hi Gurkirat,



=20



Quick question =E2=80=94 would additional working capital help right now?



=20



We may be able to get you approved for $25k=E2=80=93$500k, depending on you=

r business

and cash flow.



=20



It only takes a couple minutes to get started:



=20



[Check your options](https://form.jotform.com/242605781483259)



=20



Worth seeing what=E2=80=99s available?



=20

![photo](https://ci3.googleusercontent.com/meips/ADKq_NZcwYaCAZ90rjgA_bjLpd=

4UBFKqUrHszw5qpzRZhK0SNMTtvlfq5zGViREQoOUAdVJMjeicSY8kTxvpVSSXmTyQwrq5M5IB2=

6TVMQhTMEd-

HXVMeR6WJ2TFGheuvLHxDzKlmbEZCoK7opGGGjR_q5TiTVefUnoNDMPitlcfbg=3Ds0-d-e1-ft=

#https://d36urhup7zbd7q.cloudfront.net/u/O6rlxveRayv/28587ed2-7c1a-49f7-92d=

8-ab9cbb1a3725__400x400__.jpeg)|

**Roy Joseph**| **Operations Manager -**[**Apply

Here!**](https://form.jotform.com/242605781483259) =20

**Swiftbridge Funding** =20

--- =20

| +1 647-691-3094 | [www.swiftbridge.ca](http://www.swiftbridge.ca) =20

--- =20

|

[![instagram](https://ci3.googleusercontent.com/meips/ADKq_NandMz9xr29JOnOo=

0ZGdt9IUU2uHaL1R39vaFC2NqcN17ttmyRblzHiisIgSKi6PYdfEsJSsbtXM30S6OiMDtOlnHuj=

8c9qwveZHk9y4bM-

WnzUlNF7=3Ds0-d-e1-ft#https://gifo.srv.wisestamp.com/s/inst/E4405F/48/0/bac=

kground.png)](https://instagram.com/swiftbridgefunding)|

[![linkedin](https://ci3.googleusercontent.com/meips/ADKq_NYWx_R1C52H8WTUFY=

iJQy38-AlU07dlE8P81d508aEMaVFWlSBbw-

iTGs8QQjhOzTvhy0I8TsN1QrcyihwN0sH39dCjRCrlp_Yv5H1m45hADcbKig=3Ds0-d-e1-ft#h=

ttps://gifo.srv.wisestamp.com/s/ld/0077b5/48/0/background.png)](https://www=

.linkedin.com/company/swift-

bridge-funding/) =20

---|--- =20

=20

=20

=20

=20

To stop receiving these emails, click

[Unsubscribe](https://app.close.com/go/unsubscribe/orga_rkJepeCLpETmCWxJkfO=

SoXmVctXd0sGdXUBNuPxrS8x/sales%40nk.ca/VXBlw6Fuqe1NXDIkBcNws9nXSz1DrVPka6K2=

SzHPIME=3D/)

--===============7423728741844359450==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



Hi Gurkirat,

Quick question =E2=80=94 would a=

dditional working capital help right now?

We may =

be able to get you approved for $25k=E2=80=93$500k, depending on your busin=

ess and cash flow.

It only takes a couple minutes =

to get started:



pan data-system-generated=3D"signature">

acing=3D"0" style=3D"min-width: 50px;">
5px;">

1" rowspan=3D"1" style=3D"padding: 0.01px 14px 0.01px 1px;">

=3D"https://ci3.googleusercontent.com/meips/ADKq_NZcwYaCAZ90rjgA_bjLpd4UBFK=

qUrHszw5qpzRZhK0SNMTtvlfq5zGViREQoOUAdVJMjeicSY8kTxvpVSSXmTyQwrq5M5IB26TVMQ=

hTMEd-HXVMeR6WJ2TFGheuvLHxDzKlmbEZCoK7opGGGjR_q5TiTVefUnoNDMPitlcfbg=3Ds0-d=

-e1-ft#https://d36urhup7zbd7q.cloudfront.net/u/O6rlxveRayv/28587ed2-7c1a-49=

f7-92d8-ab9cbb1a3725__400x400__.jpeg" alt=3D"photo" style=3D"width: 160px; =

height: 160px;">

tyle=3D"padding: 0.01px 0.01px 0.01px 14px; border-left: 1px solid rgb(189,=

189, 189);">
Roy Joseph

cellspacing=3D"0" style=3D"min-width: 25px;">
idth: 25px;">

"padding: 0.01px;">

ding=3D"0" cellspacing=3D"0" style=3D"min-width: 25px;">
e=3D"min-width: 25px;">

" width=3D"388" height=3D"0" style=3D"padding-top: 14px;">=


ght=3D"0" style=3D"padding: 14px 0.01px 0.01px;">
ellspacing=3D"0" border=3D"0" style=3D"min-width: 50px;">
le=3D"min-width: 25px;"><=

tr>

px; padding-top: 0px;">
ht: 6px; padding-top: 0px;">
<=

br>

subscribe-footer">


oseml.com/t/KJVM9Gg4pihbKRAhquNtjLksxKq8NWIMJenO2JPYdVX/1TRpq4kUQd.png" alt=

=3D"" width=3D"1" height=3D"1" />

--===============7423728741844359450==--



--===============8530153334603716737==--

Cryptocurrecy phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Sep 2026 15:53:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4QEM-000000008tD-27e2

for dave@doctor.nl2k.ab.ca;

Wed, 09 Sep 2026 15:53:22 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Sep 2026 15:53:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f231.google.com ([209.85.221.231]:50354)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4PNN-000000003ti-3GME

for sales@nk.ca;

Wed, 09 Sep 2026 14:58:45 -0600

Received: by mail-vk1-f231.google.com with SMTP id 71dfb90a1353d-5c82d057971so987491e0c.0

for ; Wed, 09 Sep 2026 13:57:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=prosa.ai; s=google; t=1788987464; x=1789592264; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=SWWJL4rudSD3KqXSUlvRZdAK/rCz+TPAVG68qmWi4i4=;

b=VuGKgJyhv96DTEb0R6MBCsPYk30KDYSUo/rpEUNoaBKiJqV/7ZFgEOFoVpPaFPGoCq

65DYNkPfmLLctkbJbYA9R96EMWEzmnTHtzYTbcbLWiictzGHgPESiNR2SCVxt9JdpYnu

vKuzqSglwZP9o4y6SAtUGEarFUez800WwQi7tXuPfxU1po7xRpP6YD+HoUg7UL71xGP2

hQ5ndv0nCLEcCLWfLAc4sjVmXK1ffGHE7Pr0y9/iykZokBsY44uoiRoYhBpRTg6RnH3O

9zbR1smZquEE4RJLauVniqf4ZtVGMWkgLlhJIt0cv3wl2JJB6OjGy16fe3l3fAr6/2GN

Siaw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788987464; x=1789592264;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=SWWJL4rudSD3KqXSUlvRZdAK/rCz+TPAVG68qmWi4i4=;

b=pVec+dUQ8q5sfbE5XFLa6Hrjzp+3Medoz7Mcea3K4d9deFhWz6/srcLLgFU+eyiUth

MON9jAYsMLctv+wqphA+MJLJ6TU9fJsr+efGm5RyDZFOWj435kWoNUYRxfgtM4hsPNZo

NlDuUMjPZmRGQ7mal+YgKGwNK0SGWCAA5ADhmB6KOxMPL29A0Lq2ujvf/0rGesVjacfg

kP6zqxJhYF0Tim1swxfpz7DSIUpEnEHYMaQgGk5KoaeoGNftgrNy6R43kk4HCse2rkYp

sj7D5yOkHUG0peywqXS1cLiqTyQ7PgGM11IheaT32warnR594+iVOas0VvSjd9aDqSAX

059g==

X-Gm-Message-State: AFuF++mhMAGfwc37uA+oTU7Gb0dIveEKQI/rpZhWX/86ZkXeIFSbP9P6

loYGcrmYQuCMbNmrhtgC6E59Iyvwmx5QZc90eFZBLlRu2mSMJMWpoMb0h+zh1r+8T6hFhAqbPx3

0ZGi4DDzjjnXrmVlddt+jtw2JBE4AZLk9Cgf1MxRWQKUX6ow=

X-Gm-Gg: AYBFou009dSOm7VY0/fE+OJiT+RlBz0kc8DDD8DB7+2BlvQHgGwGqF9s68qu899f4Qh

yAdnfKXjPARQiM1abqN9uQnQb2tPR92j3b1YEqj5XwHHbzmxtlSChczQlPNytuaypDxgwmakJ5h

VnxRbR3TJk3Fc7JKXlmlpSU6g+csyxQVqeN9A4FVRxHYC9O7aisb6Em6cfyI/iMvB3V+J3NH8pG

tbeHQUrG7zyAh1XdALeTU79MUSGKMCBVv6sxrkldC8QfZ1EyfxHW5AuWGywk8LyQVaf8uqr2HXu

+gVDZVhlQiDfurZhnwS4po4zJmMWwL+uVo4/5X+1wSBAGZk/9CQc4vw8pgcUNf7Dmrmeu+cVlhH

Az19TWLLlSZO8gP/ugqEUSM61

X-Received: by 2002:a05:6122:17a5:b0:5c7:fbb5:6ea0 with SMTP id 71dfb90a1353d-5c7fbb570d1mr15852464e0c.4.1788987463982;

Wed, 09 Sep 2026 13:57:43 -0700 (PDT)

Received: from clay.ma ([192.227.217.254])

by smtp-relay.gmail.com with ESMTPS id 71dfb90a1353d-5c7ec232ce8sm8329512e0c.5.2026.09.09.13.57.43

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 09 Sep 2026 13:57:43 -0700 (PDT)

X-Relaying-Domain: prosa.ai

From: Asset Trust

To: sales@nk.ca

Subject: Your Reserve Funded

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Wed, 09 Sep 2026 20:57:42 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Dear Phils, Your investment has been successfully processed.

Your portfolio has been credited with 26.2 Bitcoin as requested on



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[209.85.221.231 listed in will-spam-for-food.eu.org]

[209.85.221.231 listed in will-spam-for-food.eu.org]

[209.85.221.231 listed in will-spam-for-food.eu.org]

[209.85.221.231 listed in will-spam-for-food.eu.org]

[209.85.221.231 listed in will-spam-for-food.eu.org]

[209.85.221.231 listed in will-spam-for-food.eu.org]

[209.85.221.231 listed in will-spam-for-food.eu.org]

[209.85.221.231 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.227.217.254 listed in dnsbl.ahbl.org]

[192.227.217.254 listed in dnsbl.ahbl.org]

[192.227.217.254 listed in dnsbl.ahbl.org]

[192.227.217.254 listed in dnsbl.ahbl.org]

[209.85.221.231 listed in dnsbl.ahbl.org]

[209.85.221.231 listed in dnsbl.ahbl.org]

[209.85.221.231 listed in dnsbl.ahbl.org]

[209.85.221.231 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.227.217.254 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.227.217.254 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.227.217.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.227.217.254 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.231 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: prosa.ai]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

3.1 URI_OBFU_WWW BODY: Obfuscated URI

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.231 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.221.231 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Your Reserve Funded



=EF=BB=BF











Dear Phils,

Your investment has been successfully processed. =

Your portfolio has been credited with 26.2 Bitcoin as requested on =



www.bitfore .net

Below are your login =

credentials:

Customer ID: 61094857
Password: =

bit89077

Please log in to confirm your balance.

Best regards,=


Inderjit








Cryptocurrency phish from Google GMail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Sep 2026 15:53:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4QEE-000000008sK-2nQN

for dave@doctor.nl2k.ab.ca;

Wed, 09 Sep 2026 15:53:14 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Sep 2026 15:53:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f103.google.com ([209.85.216.103]:44519)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4P6o-000000002VY-1fzC

for root@nk.ca;

Wed, 09 Sep 2026 14:41:38 -0600

Received: by mail-pj1-f103.google.com with SMTP id 98e67ed59e1d1-3964dfb5a69so6567401a91.1

for ; Wed, 09 Sep 2026 13:40:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=prosa.ai; s=google; t=1788986438; x=1789591238; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=SWWJL4rudSD3KqXSUlvRZdAK/rCz+TPAVG68qmWi4i4=;

b=tu9BV8F8J4OTYiMtZrSaKp683sOju1lpaF1w5PJ/QGWWCm4ApB/McjcBiSLSSbW5u7

XEBmj6UlhRDacxDHVfU/bgOi0Ab5Fr4NOgObOcjuEnJerqFhFJB7Ms53WdaACtZv2VhT

9o/MdfF+X6ijoQ7ecW5gXibF90/NFa18H3TMgBP6JQYJDU7hToBhOk0HgfR/hIek7NNw

/zPHwEQ1q2eloD9sfYoa5zUF6WjwDccTbkFaKh0YhjaY/V02jKM4IlE6pi4mD4z5wHZ6

CdV0qaA4IIS41bQunZZNka/bd7nGHGzzfKBjl84/m5ZSJGqSPAZReaKtRV+LDhGXs4Sc

l62A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788986438; x=1789591238;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=SWWJL4rudSD3KqXSUlvRZdAK/rCz+TPAVG68qmWi4i4=;

b=kcSq+5fIAodzDRzxZWV1+w/X54q+menj89guipZgq/JFgxjsJwLppYzx205wKgubQ0

OF2eH6JlmL4QBbQrY2JXsZ9edt+sWvQhGoBT0AqCQ5Z3XjA8pzmAFYMLhxMsUe/hToD2

Yg709fG9DDUDeUmtsRlZGwRWOWlLco9QTfjmhB4erPclB/A9YRdIe+luNmKSnMGk6gBe

FrTUHwzxKkYzkVCo4DSQtAbLiIn/IdRctSkjw9aHTq83Q2E8SIdiYwxhCZ8NnEA4b3cJ

rrQpo+a47rWHqbs6R5YP3+cJfElJwTPRl3/TNa0vToxn6dOj3dARLhy3vHLyDZzg0LQA

HwFQ==

X-Gm-Message-State: AFuF++m4ISlrcIe2KDtnmJ5XF+EC0exybOh8ny5YRfFeAAfrz5fxViof

Q0upM/9yuOlSzmd0ZIrmidioIbA+cs2LyWeDDPtODAxOPsHa0XQt+6pKLbow/BxZdXDzykXz3rk

CxFqe7MxC3xx78aTlOjJ+JNa5DocL4ZKmlh/OIvSYNPYapQ4=

X-Gm-Gg: AYBFou001PaTxUPSsXEovb9+WSa0ANJvNiy/Rky7JELgtvbZieSxrFV2z5RBQ7OEva7

CVRJSDOr163dj5/hTfdD6YK6qgOT/jSgZa0eNgUkdWWKvrlkyp9GIv4W6iayEtcNEkHbsLIwyHM

EsHZxRY8mAJJCCQsUerCYMy1Z8U5VQ1nem3X0Ho6UgFO+o7TpLtxcgVi7Mx1+tlR97Qvd/hqL6Z

deq2G/ZtN76nTd7TojuWL4GoH/fjcoFO3H773cIBCio9kDKjIgC4Gd+SuCFlHQaG8FF/qD0b4+2

ui3qK5hboqSeOO9rx+SsR/Ubg55nFMYhFC4xSVtqYmYQ9zfmenbBlyxkVDEG88l/Uf+jy7Z01oe

5eQ8nJwg1OTeQz08MRSk=

X-Received: by 2002:a17:90b:2585:b0:38e:c7b0:84ad with SMTP id 98e67ed59e1d1-39babeb3329mr12896990a91.0.1788986437738;

Wed, 09 Sep 2026 13:40:37 -0700 (PDT)

Received: from clay.ma ([192.227.217.254])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39cd2098bbesm544447a91.2.2026.09.09.13.40.37

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 09 Sep 2026 13:40:37 -0700 (PDT)

X-Relaying-Domain: prosa.ai

From: Coin Portfolio

To: root@nk.ca

Subject: Your Balance Increase

Message-ID: <14530081-2d4c-3c93-f0f1-3a87cd6d9f28@prosa.ai>

Content-Transfer-Encoding: quoted-printable

Date: Wed, 09 Sep 2026 20:40:36 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Dear Phils, Your investment has been successfully processed.

Your portfolio has been credited with 26.2 Bitcoin as requested on



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[192.227.217.254 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.227.217.254 listed in dnsbl.ahbl.org]

[192.227.217.254 listed in dnsbl.ahbl.org]

[192.227.217.254 listed in dnsbl.ahbl.org]

[192.227.217.254 listed in dnsbl.ahbl.org]

[209.85.216.103 listed in dnsbl.ahbl.org]

[209.85.216.103 listed in dnsbl.ahbl.org]

[209.85.216.103 listed in dnsbl.ahbl.org]

[209.85.216.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.227.217.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.227.217.254 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.227.217.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.227.217.254 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.103 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: prosa.ai]

-0.0 SPF_PASS SPF: sender matches SPF record

3.1 URI_OBFU_WWW BODY: Obfuscated URI

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.103 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.103 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Your Balance Increase



=EF=BB=BF











Dear Phils,

Your investment has been successfully processed. =

Your portfolio has been credited with 26.2 Bitcoin as requested on =



www.bitfore .net

Below are your login =

credentials:

Customer ID: 61094857
Password: =

bit89077

Please log in to confirm your balance.

Best regards,=


Inderjit








Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Sep 2026 15:52:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4QDj-000000008pH-3FoR

for dave@doctor.nl2k.ab.ca;

Wed, 09 Sep 2026 15:52:43 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Sep 2026 15:52:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m82213662.xmail.ntesmail.com ([8.221.36.62]:11424)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4Nrr-00000000LZo-1bRA

for sales@nk.ca;

Wed, 09 Sep 2026 13:22:12 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1325928_334243503.1788981661202"

To: sales

Subject: =?UTF-8?B?RXhjbHVzaXZlIEZhY3RvcnkgRGVhbHMgZm9yICDigJMgUHJvbW90aW9uIEJlZ2lucyE=?=

X-Priority: 3

MIME-Version: 1.0

Received: from optimalman@emjiaju.com( [10.139.4.160] ) by ajax-webmail ( [127.0.0.1] ) ; Thu, 10 Sep 2026 03:21:01 +0800 (GMT+08:00)

From: OptimalMan

Date: Thu, 10 Sep 2026 03:21:01 +0800 (GMT+08:00)

X-WM-Tid: 0aa0879dcdde03b9kunm0cc63e831abf96

DKIM-Signature: a=rsa-sha256;

b=U+uIRyS//unkiONZeumJzBparlHdoG0EveiwPfBjComQqMm/mwUpe780WciufVYeJgbapZVwmIfJuJ2hJLNKOS8wXRd5xIS0ET1o1eZje71xuLKp6GyayXg3CcXYyI7YZwJxyUHS3ZK4cGW7GK8Dm2jYLF4ZNBCH+FS+hgFeRbw=; s=default; c=relaxed/relaxed; d=emjiaju.com; v=1;

bh=iI2jrlwmOSJnvZidPS0AIoV7gos3IKmzdVXUo6kQTqo=;

h=date:mime-version:subject:message-id:from;

Message-ID:











Hit subscribe now to receive regular updates and our product’s latest features! Subscribe



If you don't want to receive our emails, you can easily unsubscribe here.

Hello Sales,



Introducing our Shelf, a blend of simplicity, durability, and style. This versatile piece is perfect for organizing and enhancing any room. Its sleek design complements various decor styles, making it a must-have for modern spaces.

3 Layer Rotating Practical Shelf Furniture Detachable Tray Trolley Kitchen Cart with Wheel

3 Tier Plastic Kitchen Storage Rolling Cart Organizer Cart With Wheels for Kitchen





Key Features:

① Simple Design: Fits seamlessly into any setting.

② Durable Construction: Built to last with high-quality materials.

③ Stylish Appearance: Adds a touch of elegance to your space.



Consider our Shelf for your next project. Its combination of functionality and aesthetics makes it an ideal choice for both residential and commercial environments.



Kind regards,



Yuchen

Sales Manager

OptimalMan

Email: optimalman@emjiaju.com











Continue learning about new features by hitting . Retain My Entry



To halt ongoing emails, head over to Set My Preferences.





Jianqun

optimalman@emjiaju.com





在2026-09-03，OptimalMan 写道:



-----原始邮件-----

发件人： OptimalMan

发件时间: 2026年09月03日 周四

收件人： [sales ]

主题： Exclusive Factory Deals for – Promotion Begins!











Hit subscribe now to receive regular updates and our product’s latest features! Subscribe



If you don't want to receive our emails, you can easily unsubscribe here.

Hello Sales,



OptimalMan has been a leader in the home furnishings industry for over 20 years. Our state-of-the-art production facilities ensure top-notch quality. Our storage racks are designed to be simple, durable, and stylish, making them a perfect fit for any space.

3 Layer Rotating Practical Shelf Furniture Detachable Tray Trolley Kitchen Cart with Wheel

Three Tier Rolling Cart Kitchen Storage Trolley High Quality Black Organizer Cart With Wheel





We invite you to explore our range of products that meet European standards and offer exceptional load-bearing capacity. We are confident that our products will meet your needs.

King Size Stable Modern Iron Platform Lift up Hardware Kit Gas Spring Mechanism Storage Bed Frame

Foldable Metal Solid Wood Tatami Bed Frame Pallet Bed Slat with Plastic Flower

New dining chair, Nordic style, stylish design。



Factory Direct Outdoor Modern Living Room Chairs for Hotel Restaurant Living Room Garden Wedding Events Plastic Leisure Chairs

Wholesale Kitchen Furniture Hot Sale Cheap Modern Design Restaurant Cafe Chair Living Room Comfortable Plastic Dining Chair





Thanks!



Yuchen

Sales Manager

OptimalMan

Email: optimalman@emjiaju.com





Secure your updates and feature insights at . Continue Product News



Wish to step back? Quickly hit Control Contact Settings.





Jianqun

optimalman@emjiaju.com





Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Sep 2026 15:49:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4QB4-000000008Wu-2Rb1

for dave@doctor.nl2k.ab.ca;

Wed, 09 Sep 2026 15:49:58 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Sep 2026 15:49:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm2-f11.google.com ([74.125.225.139]:33560)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4InG-00000000MKP-0VpZ

for sales@nk.ca;

Wed, 09 Sep 2026 07:57:03 -0600

Received: by mail-wm2-f11.google.com with SMTP id 5b1f17b1804b1-49cfcf2548aso22421995e9.0

for ; Wed, 09 Sep 2026 06:56:07 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1788962160; cv=none;

d=google.com; s=arc-20260327;

b=rcK2Lo9vNB0EdIAsKejbFdr8byHU0j6RTEes46dl4G6Y4JKilJBLNOnAoM+YJ5RwDC

5zNUw6JJ5cySYfjWbKaJpO8fCkfZ0+VCmmcuJbyW91dBqeEFhUCwd3LI3OEibv5ObnnA

1umreSu1S7fWMq+0kqRdTvr7btbhofCQ4sei3ompnhMqYohCIGDESqK/SCFHMG9rHUc/

fuL8kHpNuDMLAwSL6MK6646VSKRYsrtqzPrraS34AevbBcBQlxAExcKsEJeTglIPBsEr

IWfpl1qVAQ8PvrS+NYCVyPgOsL5tLzZrRBok9oCyJmOK9e7AwNcCtPpQstrYKee02fj5

qWtA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:sender:mime-version:dkim-signature;

bh=kJ2J4x0U5LWSOL+wIgWuvEvFB4vvJpYT+Yk2aV8B468=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=Q2uOjlklfsKqqHueu82MfZhXfh1O6QXEe4qwKnmPpIPBpdB62z1KeEKNBhCV1pDGMj

7V60t/xXIouPBOMiDUi2G2fAvUlB8hv2wHzy68Cr/DfnH0FWV5576SAHDuprWqiSB3Mb

xorutrSbl+MqIfe/zk+gR17iOuxdMYGW4QfFjiQvjfbGxqIayvgWrdxIXEaoP0GcQoFm

eeAcBdh8wyN1+TEhuoQoLYXipUYemm1VgTkQKU0u4homNFhW332V7RMYDkXnxxsw2u1W

HPLcNNhX9y4EWWcIZYu723JP8+sOa2AB6RY2HJfylh3pOTUDwMgOO/jGgmL4M/aDyBL2

Hr/w==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=digytech-digital.20251104.gappssmtp.com; s=20251104; t=1788962160; x=1789566960; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:sender:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=kJ2J4x0U5LWSOL+wIgWuvEvFB4vvJpYT+Yk2aV8B468=;

b=p47vNNROAxzQ3wS69IXU/DIbUSaybb3hlgMIe9D5oujEROIrUyOxU0uroUQ3qYhntO

YilGf/EBP8BNb43GRORi0LSyNBdZtJh32BpfGxQvMKduJ2ETRa6WDj3MWo/yqySB3nNx

bw50u2Ez2/vRmt0rmqlAwydO8aYx/MGyIGNZN1TpzjXvIOciNH6H1BgEII52ce9yq07e

6a6a5rTiL+YrK0L3/xU8PWAup/aVixgE/3ewSNJhPyDlUkGfNlbRO+2x89tI0SsEOx0p

yOxxCBjsVSN4xLYoupTbHBjpk3jdF18Ggfya29SiJbgEBScpScyUPrjKDgZxZeY3Gqf1

xmBg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788962160; x=1789566960;

h=content-type:to:subject:message-id:date:from:sender:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=kJ2J4x0U5LWSOL+wIgWuvEvFB4vvJpYT+Yk2aV8B468=;

b=qAVAnlCgY2jYENaEVxbdFgq1iJbpIyBxrE324oduERaHZ6L5rM5RI/Z+sEZWcSJJ2q

B8Xp+F9g6K5KVhSoF+6HS2z1WaJ9Ed7iZbxirfOKYhfEROAKyN67r+8DsR2THr7vGGlm

WjaAcD82waZIitcSXkzIq1EqB46OCvky/uCqFv3u3SiCRApI0nMXDZgedt0kNWynY1Hi

/N0okS3+SB/o5hPvcIhKzC3bQ1RWkAvrjTts7qKDtiFx8yVesAc3lghHcGU1KEDEtrp+

F5xUkcMNoZv6YXQthm2FcpWIdKRRoExN2CGINSJsC8AnIhrSDOBpGLUOlJR5v74xntsL

M4Lg==

X-Gm-Message-State: AFuF++m0wRDP16g6A9V8QcniXVgx2ryURuSJZ3WpwxFFy/nLPjpc26To

zPiOCjP1xVDruB55uxJzgVMHNIDpBal4CQcyWmjOrlhvElvJNdaLBD1c0VZPEIHr4FJVB2zqkAc

U8kFJnRL+152gWSd55ycw9l1f6SZpvU61CMdrcCyf9XiX7SkVqNlkzAG4NA==

X-Gm-Gg: AYBFou3bmc8iAIfV/THT6RIrgHbAVWVmSyYtV72T2ydkwCJ+PVNwLMmN6V0wKU3RRIr

pbxPw5LAG0GSMEo55d/iaKbeJZX0FMYLkdatvx0U9CiQXqPw/Pb+fDnmrm18/5BHzsUzSFjgffA

v6YJMYW9mAe2700o6tC0TI1tCnbmUz/f96DWl86DCtCYamVtMtwcZj4sMWcZ9YTaWtFOzftB3JC

HQ679mFCFTOyrzvynZfp+BxX1YaZHcH48P0w62aPn5nzUf2i8fKaSv39dd9CI0VMMib1Yj7Kimn

3Qzel7JEPRr6pTFXfrXEcCsHjXb0M9WfwWCJlrBk

X-Received: by 2002:a05:600c:8b05:b0:49c:edd2:855 with SMTP id

5b1f17b1804b1-49cf823c411mr381147105e9.6.1788962159997; Wed, 09 Sep 2026

06:55:59 -0700 (PDT)

Received: from 443397008974 named unknown by gmailapi.google.com with

HTTPREST; Wed, 9 Sep 2026 08:55:57 -0500

Received: from 443397008974 named unknown by gmailapi.google.com with

HTTPREST; Wed, 9 Sep 2026 08:55:57 -0500

MIME-Version: 1.0

Sender: zoe@digytech.digital

From: zoe@digytech.digital

Date: Wed, 9 Sep 2026 08:55:57 -0500

X-Google-Sender-Auth: 4NdrcodsNFEFqLoVdq2HDbDueng

X-Gm-Features: AcwNN1X64kGLsPsmR2HA6FheV3YsgOOBQOV4Tq2TSEBZW2rwjuIxBRAe3CygNfA

Message-ID:

Subject: About nk .ca.

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000103f12065b0d36d3"



--000000000000103f12065b0d36d3

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi nk .ca Team,



I noticed something interesting while going through your website: nk .ca



Your website does see some organic search traffic here and there. Now, I

believe I can help increase that portion of organic traffic significantly

at *nk .ca*.



I believe you would like to come top in searches for keywords related to *n=

k

.ca*. I found a number of SEO issues such as broken links, page speed

issues, HTML validation errors, and images with no ALT text on your

website, which are stopping you from getting that traffic.



How about I fix those, and also promote you through engaging content on

relevant places on the web (read, social media).



I guarantee you will see a drastic change in your search ranking and

traffic once these issues are fixed.



Is this something you are interested in?



If yes, please allow me to send you a no-obligation audit report and quote=



.



Hoping to hear from you and take this partnership ahead.



Kind Regards,



Zoe

Business Analyst.



PS 1: Please answer our email with =E2=80=9CInterested=E2=80=9D or =E2=

=80=9CNot Interested=E2=80=9D so

that we will know the status of your inquiry and act accordingly. If you

are interested, then I will send more details on our =E2=80=9Ccorporate id=

entity=E2=80=9D,

=E2=80=9Ccompany profile=E2=80=9D, =E2=80=9Cwhy you should choose us?=E2=80=

=9D nk .ca



--000000000000103f12065b0d36d3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable









Hi nk .ca Team,

I noticed something interesting while going=

through your website: nk .ca

Your website does see some organ=

ic search traffic here and there. Now, I believe I can help increase that p=

ortion of organic traffic significantly at nk .ca.

I believe y=

ou would like to come top in searches for keywords related to nk .ca=

. I found a number of SEO issues such as broken links, page speed issues, H=

TML validation errors, and images with no ALT text on your website, which a=

re stopping you from getting that traffic.

How about I fix those, and=

also promote you through engaging content on relevant places on the web (r=

ead, social media).

I guarantee you will see a drastic change in your=

search ranking and traffic once these issues are fixed.

Is this some=

thing you are interested in?

If yes, please allow me to send you a
>no-obligation audit report and quote.

Hoping to hear from you an=

d take this partnership ahead.

Kind Regards,

Zoe<=

br>Business Analyst.

PS 1: Please answer our email with =E2=

=80=9CInterested=E2=80=9D or =E2=80=9CNot Interested=E2=80=9D so=

that we will know the status of your inquiry and act accordingly. If you a=

re interested, then I will send more details on our =E2=80=9Ccorporate i=

dentity=E2=80=9D, =E2=80=9Ccompany profile=E2=80=9D, =E2=80=9Cwhy you shoul=

d choose us?=E2=80=9D nk .ca


















--000000000000103f12065b0d36d3--