NetKnow Corporate Blog

Loan phishing from India

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:49:00 +0000

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 May 2026 16:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wS0bq-000000006LP-0LFA

for dave@doctor.nl2k.ab.ca;

Tue, 26 May 2026 16:50:50 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 May 2026 16:50:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.cottonink.co.id ([103.93.57.62]:47051 helo=hungry-einstein.103-93-57-62.plesk.page)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRzV5-000000003Nm-1Xhv

for doctor@edmontonab.ca;

Tue, 26 May 2026 15:39:55 -0600

Received: from webmail.cottonink.co.id (localhost.localdomain [IPv6:::1])

by hungry-einstein.103-93-57-62.plesk.page (Postfix) with ESMTPSA id 8FDCB189823;

Tue, 26 May 2026 21:29:20 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cottonink.co.id;

s=default; t=1779830981;

bh=ubNfC/1t+t2ZPM90v1tjgfQvlARb8pm0J/ZK7J4VskQ=; h=From:To:Subject;

b=Accqygv3LtAVv6QEck438+dRismSgY08UM9wJbQxfcERmYR30WZrjFbeA0qO75aqg

RiygkYqfq5SYXOp6CWoErg6E+0q5gl2bX2aDWJSDo8N5mKaVgjeCxchJfIHpoILFao

o3a8Kpr4p/n6It9deinUiTrSKWVVYsu9FD6q6unA=

Authentication-Results: cottonink-svr;

spf=pass (sender IP is ::1) smtp.mailfrom=mail@cottonink.co.id smtp.helo=webmail.cottonink.co.id

Received-SPF: pass (cottonink-svr: connection is authenticated)

MIME-Version: 1.0

Date: Tue, 26 May 2026 23:29:20 +0200

From: AG

To: undisclosed-recipients:;

Subject: We are Offering Low-Cost Loans

Reply-To: agfinancialproductsinc@gmail.com

User-Agent: Roundcube Webmail/1.4.15

Message-ID: <9457c1ed9ca60f733e4c281500d9c9f6@cottonink.co.id>

X-Sender: mail@cottonink.co.id

Content-Type: text/plain; charset=US-ASCII;

format=flowed

Content-Transfer-Encoding: 7bit

X-PPP-Message-ID:

<177983096923.10362.10062391004631211881@hungry-einstein.103-93-57-62.plesk.page>

X-PPP-Vhost: cottonink.co.id

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: -- We are Offering Low-Cost Loans for PERSONAL & Investment

PURPOSES Fixed rate: 5.9%. Flexible repayment: up to 30 years. Bad/Low rating

is welcome. For more info and application, do reply.

Content analysis details: (5.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.93.57.62 listed in dnsbl.ahbl.org]

[103.93.57.62 listed in dnsbl.ahbl.org]

[103.93.57.62 listed in dnsbl.ahbl.org]

[103.93.57.62 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.93.57.62 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.93.57.62 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.93.57.62 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.93.57.62 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.93.57.62 listed in will-spam-for-food.eu.org]

[103.93.57.62 listed in will-spam-for-food.eu.org]

[103.93.57.62 listed in will-spam-for-food.eu.org]

[103.93.57.62 listed in will-spam-for-food.eu.org]

[103.93.57.62 listed in will-spam-for-food.eu.org]

[103.93.57.62 listed in will-spam-for-food.eu.org]

[103.93.57.62 listed in will-spam-for-food.eu.org]

[103.93.57.62 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.93.57.62 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} We are Offering Low-Cost Loans

--

We are Offering Low-Cost Loans for PERSONAL & Investment PURPOSES

Fixed rate: 5.9%.

Flexible repayment: up to 30 years.

Bad/Low rating is welcome.

For more info and application, do reply.

To un-subscribe please reply with "un-subscribe" as subject.

Telnet communications phish

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:47:00 +0000

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: davey@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 May 2026 15:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRz21-00000000N2a-39Zy

for davey@doctor.nl2k.ab.ca;

Tue, 26 May 2026 15:09:45 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 May 2026 15:09:45 -0600

Resent-Message-ID:

Resent-To: davey@doctor.nl2k.ab.ca

Received: from mx.ite.net ([202.88.64.59]:34424 helo=mail.ite.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRz0d-00000000MwD-0dhK

for sales@nk.ca;

Tue, 26 May 2026 15:08:28 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.ite.net;

s=smtp1dkim; t=1779829640;

bh=bdpPih9R599ZjFoEzPvLC8e6DKkxJ1PD9O9hGEf8RNY=;

h=From:Subject:Date:From;

b=nwMEl3in2bfFH5OMAdOcX9ZieuEmeVv+ZAhmofcFdeOzjHsln1PaLXaX6Thh81TNU

djjqrFdOTRA7q0j1Dr3Vu5hPDFq1bS8J2n2OAgbSG9zaJaweDcqR754c21TtMCXxzo

irzdllAG5aUweJiXStEd+/F2Gid1h7c7BiLpcsUM=

Received: from User (unknown [14.192.212.45])

by mail.ite.net (Postfix) with ESMTPA id D6E308CD18FD;

Wed, 27 May 2026 07:07:15 +1000 (ChST)

From:

Subject: SECURE YOUR TELNET EMAIL ACCOUNT NOW !

Date: Tue, 26 May 2026 16:07:19 -0500

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 5.50.4522.1200

X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200

X-Virus-Scanned: clamav-milter 1.4.3 at av01.ite.net

X-Virus-Status: Clean

X-Spam_score: 18.0

X-Spam_score_int: 180

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Telnet Customer, We noticed a login attempt to your

Telnet email account from a new IP address & device - Was this you ?

Content analysis details: (18.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[14.192.212.45 listed in dnsbl.ahbl.org]

[14.192.212.45 listed in dnsbl.ahbl.org]

[14.192.212.45 listed in dnsbl.ahbl.org]

[14.192.212.45 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[202.88.64.59 listed in bl.score.senderscore.com]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 NSL_RCVD_FROM_USER Received from User

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.0 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

2.0 MIXED_HREF_CASE Has href in mixed case

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Subject: {SPAM?} SECURE YOUR TELNET EMAIL ACCOUNT NOW !

Dear Telnet Customer,

We noticed a login attempt to your Telnet email account from a new IP address & device - Was this you ?

Your Last login details:

Date and time : May 26, 2026 at 03:17 AM (ET)

Location* (IP) : Norway / 143.105.198.197

Device/Browser : 150.01.0 / Chrome

If this was you:

You can ignore this message. There's no need to take any action.

If this wasn’t you:

Complete these steps now to secure your Telnet email account HERE

- SECURE YOUR TELNET EMAIL ACCOUNT NOW

Thank you !

Telnet Communications.

http://www.telnetcommunications.com/

605 Boxwood Drive

Cambridge, ON

Canada N3E 1A5

1-855-TELNET1 (835-6381).

PCShield Phish FRom Google Gmail Part 2

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:45:00 +0000

alwadood Xidas has invited you to Subscription renewal activity is nearing activation

Title: Subscription renewal activity is nearing activation

When: Wednesday, May 27, 2026 at 02:29

Organizer:

alwadood Xidas

Description:

Billing Notification: Invoice #LB9QV5X6Q2 [PCShield Essentials]

Wednesday, 27 May 2026 03:29:58

Account: X0PM4AN6R97RZ8

Dear Customer,

Please find the details of your upcoming membership renewal below. A payment of USD473.00 will be automatically charged within the next 24 hours.

Product Insights Dashboard:

Product: PCShield Essentials

Validity: 5-Years

Cost: USD473.00

Entry Key: bf7f2a3f-a210-4cb5-85e6-59c6ec215e09

If you have any questions regarding this invoice, please contact support at 1-808-748-1467.

Regards,

Sheena Grant

Geek Squad

Customer Assistance Line: 1-808-748-1467

1101 Starview Lane Grandview Il 62702 US

Attendees:

doctor@nl2k.ab.ca

Subscription renewal activity is nearing activation

Billing Notification: Invoice #LB9QV5X6Q2 [PCShield Essentials] Wednesday, 27 May 2026 03:29:58 Account: X0PM4AN6R97RZ8 Dear Customer, Please find the details of your upcoming membership renewal

Billing Notification: Invoice #LB9QV5X6Q2 [PCShield Essentials]

Wednesday, 27 May 2026 03:29:58

Account: X0PM4AN6R97RZ8

Dear Customer,

Please find the details of your upcoming membership renewal below. A payment of USD473.00 will be automatically charged within the next 24 hours.

Product Insights Dashboard:

Product: PCShield Essentials

Validity: 5-Years

Cost: USD473.00

Entry Key: bf7f2a3f-a210-4cb5-85e6-59c6ec215e09

If you have any questions regarding this invoice, please contact support at 1-808-748-1467.

Regards,

Sheena Grant

Geek Squad

Customer Assistance Line: 1-808-748-1467

1101 Starview Lane Grandview Il 62702 US

When

Wednesday May 27, 2026 ⋅ 4:29am (Eastern Time - New York)

Organizer

alwadood Xidas

alwadoodxidas@dfvwe.com

Guests

(Guest list has been hidden at organizer's request)

Reply for doctor@nl2k.ab.ca

Yes

No

Maybe

More options

Invitation from Google Calendar

You are receiving this email because you are an attendee on the event.

Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more

PCShield Phish FRom Google Gmail Part 1

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:42:00 +0000

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 May 2026 15:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRz13-00000000Mzz-0Bqa

for dave@doctor.nl2k.ab.ca;

Tue, 26 May 2026 15:08:45 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 May 2026 15:08:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f199.google.com ([209.85.222.199]:51387)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRxUl-00000000Hov-0GWL

for doctor@nl2k.ab.ca;

Tue, 26 May 2026 13:31:28 -0600

Received: by mail-qk1-f199.google.com with SMTP id af79cd13be357-914b56ea791so644123385a.2

for ; Tue, 26 May 2026 12:30:32 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1779823826; x=1780428626; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=hy36SyVaSzcSRDwKlWbJB6KFGEPe0BixcyqWC8BMP4g=;

b=Vsz9vf1Bu8nC8dH/Wp/kL+dcHHwKorYZaUNXZ/0pRF5/Ba+pwbaEwgb1JTchYHjmXI

y7d2uuF52lWO+miSZEJIdnbR6M2a4W1TLQhmWAzlugY8+bywhiMCOyElXVUrxWZBMWiB

g4X5J3XAqN4BEAZWTXLUTdIe0kimE4yLMdPs0JPnSp88Ip+d5yTYVRQdeb8Mnh+rTafu

iDrtSA+YqiePlUYFxi7VXv9y4gwAQJe3mPnkQWMHoJzPkHln2ZwTG4XUwnXWJ1uUMYwE

e284YrKqif0pmnE2gwUIOhiS9jNNrt4TPsX+3kNiwXzCjg9TAu2T9ZS95cdvEzd2xiLB

J4Qw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dfvwe-com.20251104.gappssmtp.com; s=20251104; t=1779823826; x=1780428626; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=hy36SyVaSzcSRDwKlWbJB6KFGEPe0BixcyqWC8BMP4g=;

b=yBpH47yzlawBAPsJyaQSuFELDE5LIo1uGoC9xgMoUzpJNkoJipKAnlx6oJSnA0v7Fd

1GU/Le7g1r69Cixe3W2vlrit3jRd++zpX7UtKQkuKpiyXTfNbxv5xd3pPk4u4iD2ErCO

uKyNNvKrTQjod6mOgbtaY3d6Fwb+K9oDoe87Xg3kcO+bdlEnXjjal/HsD1Tw9w92muy/

L0YIQ3zK1rbPEkHkLQqV5sVSpc45nY7oCjq6HZGjXRCaIyDyRy3G5AOezSh0ur9nD333

jEYQjcseDGNULenzr66tNL69zDKVp7TkUxjAxNOGTinZVrzZsqPx9RoMRupAtyZOb8sY

R62w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779823826; x=1780428626;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=hy36SyVaSzcSRDwKlWbJB6KFGEPe0BixcyqWC8BMP4g=;

b=Ptj5+xI1c4rbeV98ei8xOJ9B8IKI2NCMRE8kBkXlUXOBghW6CUzT1AWRo9BE78xyoB

uC6m/XCZdtJ+1rsNOyw+aResQBnXqW40nFAT+J7VlsSm4n4f58MztZdqx6jZVYEFAZsU

toSdJjN7nRV67c5P1IpxD97kuB1jZHjXrov1VQh/MOHH/E6xQkq6E+d3FOHMckzzJULY

3vUz85shLUy8HlxjE2AngvvMfu1m/XqIhWfh6TKgP00W0MfChdsOwZinj0RlK7wyTdoe

laQ2iChXFa+E4QKKROh1ivodm6K4WMH5w0uZJMt9ISnYwtONtK7br8HX+FNJ8DPt/MnD

+pxg==

X-Gm-Message-State: AOJu0YzGfutnuZvG46aCB3RzVxDFsy09Ga/tpxM/KpMizcadOtMBS/8q

o8B/Y+KTd5dHEGnMacTz9a0/O49T9v8rxxV/K/VzE7cwJAV0EAYkEgf6YmDpxDalbxdtCwEQait

qMRJh6J1N0wR2T1NB/+aa0EgPhpuHXO+FAFmzOkQpK7+/tkgoceC16+w9

MIME-Version: 1.0

X-Received: by 2002:a05:620a:bd4:b0:8ed:d906:a8ff with SMTP id

af79cd13be357-914b48bd86amr2852835385a.14.1779823816063; Tue, 26 May 2026

12:30:16 -0700 (PDT)

Reply-To: alwadood Xidas

Sender: Google Calendar

Message-ID:

Date: Tue, 26 May 2026 19:30:16 +0000

Subject: Invitation: Subscription renewal activity is nearing activation @ Wed

May 27, 2026 4:29am (GMT-4) (doctor@nl2k.ab.ca)

From: alwadood Xidas

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="00000000000051d1340652bd860f"

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Subscription renewal activity is nearing activation Wednesday

May 27, 2026 â‹… 4:29am Eastern Time - New York Billing Notification: Invoice

#LB9QV5X6Q2 [PCShield Essentials] Wednesday, 27 May 2026 03:29:58 Account: X0PM4AN6R97RZ8

Dear Customer, Please find the details of your upcoming membership renewal

[...]

Content analysis details: (7.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.199 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.199 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.199 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Invitation: Subscription renewal activity is nearing activation @ Wed

May 27, 2026 4:29am (GMT-4) (doctor@nl2k.ab.ca)

PC Shield Phish from Google Gmail Part 2

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:41:00 +0000

PC Shield Phish from Google Gmail Part 1

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:36:00 +0000

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 May 2026 15:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRz18-00000000N0g-0znF

for dave@doctor.nl2k.ab.ca;

Tue, 26 May 2026 15:08:50 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 May 2026 15:08:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f71.google.com ([209.85.219.71]:51694)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRxUX-00000000Hoa-3ajO

for doctor@nl2k.ab.ca;

Tue, 26 May 2026 13:31:16 -0600

Received: by mail-qv1-f71.google.com with SMTP id 6a1803df08f44-8aca14d1faaso76277116d6.3

for ; Tue, 26 May 2026 12:30:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1779823817; x=1780428617; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=hy36SyVaSzcSRDwKlWbJB6KFGEPe0BixcyqWC8BMP4g=;

b=jA3vXefv0pfZalYWiwp4rlm4cq7uRqXgv4XXg3BFG8y1FbLMtPAej7dSrd6gUFo74h

Og9eodpT3uEwGtw+kZ2UrBbrfSxojlorxJWCKjSRCxgU6QzfNClPm3pbD+ESerq4cghw

6Xh/UmiNwirr9dkRmnD10IKNmMBVi1q5bAcctDRvO8rtpEGQAjZY8xTmsf43Nf0mVPW+

Bad8ajX7emXhq9PHa87KiBpHs0dRnUxZUkXr6s90ftBUJcVe0F8w5qgmQPlI96M/zU0t

Ph8B0Oq2lwJVKr867MU3aTbZAya2OjPm1m04/SOfN8qi6DXjGTJ1oj0UcMEFw7ivv2d4

xVyA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dfvwe-com.20251104.gappssmtp.com; s=20251104; t=1779823817; x=1780428617; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=hy36SyVaSzcSRDwKlWbJB6KFGEPe0BixcyqWC8BMP4g=;

b=zfzHJdoOIPu+oTU7EM4GjakcUVxNW1ra0MRgNMj5M6wnTXSH9avtGZduod0qXONyaQ

VVfS8EW1MjcYJhgsQw7IC4nTkYBkURHsQaBJ46ExFOfjy0/USNrA3bexFdPpVSvaZh47

ERMyYwb+69v0PpdCCGzR7PeVx3+KpKx9dKr+sOg8+/A62U7kqUbTHfrxX6+4VLbzmPtP

P3oVVyjFZzc8GIoy8/y5OtODUY7c2W5QV5NPGcSMWi+gbW1cSWGXm1jINsrVUfTCjsGB

W6Mh/vJooc7iXMk6VRecQUqMF9VzjraZhhitvBUUNiuyqP852T4HCwmvQs32kUNqZSEP

3VAg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779823817; x=1780428617;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=hy36SyVaSzcSRDwKlWbJB6KFGEPe0BixcyqWC8BMP4g=;

b=GsSTCh3EpmWXmQIm3DZRiJUwYOwqkt7ZhVyL8QMgH0tsfaMxFjsV5u6wfUSgm9pw+s

vIr88aaCOiY6OHPRtUvwOIrZyUYxXUUki0klObXcsnmA0yiNSsYgznkrQn11g9nXfWp8

jppHIOo0q1PzK2Rb9It9x3R5fgK+HsYAHURUeCEnMb7qOi+zwC8l+02YmOLlG8lIhd8j

xwCel7hxeTJYo8ySF7PKUDTzvc63SapIulwB42Fz/vU8en08ZFJOClXWcF9bPHnNxKqy

2gBBYpdoJ8vnN++faBnfKDZdPdQo+aoTVJCLcFCrl2XZPQwgmsf3F9EZ30b3orh+Gpqa

mhcQ==

X-Gm-Message-State: AOJu0YyXkEE7pH+gubEEC2exuOblmeQvbbFLEXnw54CqDwPi28SeDLM7

JMLtawAQEJQi4rIT+AZ14YpR9IGcNiL0NcwaHQET112NdFIfESNbRrDivx4aOlhd+WBPHSrf4Oe

EPgJVp05PoD8K+xaTZBwKEUI1yhdVgcztHZV1qOZUVtKmaO7TVivHm2n/

MIME-Version: 1.0

X-Received: by 2002:a05:620a:bd4:b0:8ed:d906:a8ff with SMTP id

af79cd13be357-914b48bd86amr2852835385a.14.1779823816063; Tue, 26 May 2026

12:30:16 -0700 (PDT)

Reply-To: alwadood Xidas

Sender: Google Calendar

Message-ID:

Date: Tue, 26 May 2026 19:30:16 +0000

Subject: Invitation: Subscription renewal activity is nearing activation @ Wed

May 27, 2026 4:29am (GMT-4) (doctor@nl2k.ab.ca)

From: alwadood Xidas

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="00000000000051d1340652bd860f"

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Subscription renewal activity is nearing activation Wednesday

May 27, 2026 â‹… 4:29am Eastern Time - New York Billing Notification: Invoice

#LB9QV5X6Q2 [PCShield Essentials] Wednesday, 27 May 2026 03:29:58 Account: X0PM4AN6R97RZ8

Dear Customer, Please find the details of your upcoming membership renewal

[...]

Content analysis details: (7.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.71 listed in dnsbl.ahbl.org]

[209.85.219.71 listed in dnsbl.ahbl.org]

[209.85.219.71 listed in dnsbl.ahbl.org]

[209.85.219.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.71 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.71 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.71 listed in will-spam-for-food.eu.org]

[209.85.219.71 listed in will-spam-for-food.eu.org]

[209.85.219.71 listed in will-spam-for-food.eu.org]

[209.85.219.71 listed in will-spam-for-food.eu.org]

[209.85.219.71 listed in will-spam-for-food.eu.org]

[209.85.219.71 listed in will-spam-for-food.eu.org]

[209.85.219.71 listed in will-spam-for-food.eu.org]

[209.85.219.71 listed in will-spam-for-food.eu.org]

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.71 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.71 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Invitation: Subscription renewal activity is nearing activation @ Wed

May 27, 2026 4:29am (GMT-4) (doctor@nl2k.ab.ca)

Web/SEO/App pam from Microsoft Outlook Part 2

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:34:00 +0000

--_000_PUUP216MB3146341E0E498EABBCD91FEE960B2PUUP216MB3146KORP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi,

I can help you get your website on the first page of Google and increase th=

e number of leads and sales you get from your website.

Would you like to be listed on top of all major search engines such as Goog=

le, Yahoo! and Bing for multiple search phrases (keywords) related to your =

products/services?

Can I send you SEO packages and price list?

Thank you.

John Smith

--_000_PUUP216MB3146341E0E498EABBCD91FEE960B2PUUP216MB3146KORP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

: 19.2px; background-color: rgb(255, 255, 255); margin: 0in 0in 0.0001pt;">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Hi,=

ht: 19.2px; background-color: rgb(255, 255, 255); margin: 0in 0in 0.0001pt;=

font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt;">

I can help you get your website on the=

first page of

G
tyle=3D"color: rgb(200, 38, 19);">o
245, 212, 39);">o
>gl
style=3D"color: rgb(200, 38, 19);">e
(0, 0, 0);"> and

increase the number of leads and sales you get from your website.
div>

ht: 19.2px; background-color: rgb(255, 255, 255); margin: 0in 0in 0.0001pt;=

font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt;">

Would you like to be listed on top of =

all major search engines such as

G
=3D"color: rgb(200, 38, 19);">o
212, 39);">og
b>l
e=3D"color: rgb(200, 38, 19);">e
0, 0);">,

Yahoo! and Bing for multiple search phrases (keywords) related to your pro=

ducts/services?

ht: 19.2px; background-color: rgb(255, 255, 255); margin: 0in 0in 0.0001pt;=

font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

ht: 19.2px; background-color: rgb(255, 255, 255); margin: 0in 0in 0.0001pt;=

font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(12, 136, 42);">

Can I send you SEO packages and price list?

ht: 19.2px; background-color: rgb(255, 255, 255); margin: 0in 0in 0.0001pt;=

font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

ht: 19.2px; background-color: rgb(255, 255, 255); margin: 0in 0in 0.0001pt;=

font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you.

xt-indent: 0px; line-height: 19.2px; background-color: rgb(255, 255, 255); =

margin: 0in 0in 0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);">

John Smith

--_000_PUUP216MB3146341E0E498EABBCD91FEE960B2PUUP216MB3146KORP_--

Web/SEO/App pam from Microsoft Outlook Part 1

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:30:00 +0000
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 26 May 2026 11:17:00 -0600

Received: from mail-koreasouthazolkn19010012.outbound.protection.outlook.com ([52.103.75.12]:56605 helo=PUWP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRvNr-00000000Ar1-097T

for dave@nk.ca;

Tue, 26 May 2026 11:16:14 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=vDUmdL0jkQi9nKBPEMMcC6hgV1iydgjujEodS29LfME8Wa4udSxoc9evKjHpjApndKms9lPmPA0FtnbB8fWL0xovhte80kWe0I03FLuT5kwGA4/tC3wc0Ov/xg0j2o0rBoFObJDDQg5NDNkKHdczMahUSyut0FcS6wAxmUcdHiRyapkC3Iv0YQMbn1VZXAzpTGpYVg2EJ5fuGHOH11JD5ipKfwY1tUEM0EE6LbJqCM8tA2kl1FkDZjIYBk+bVYeeWEcFeKqLfaM4iA7BGCFh9HIJu2FHEXmKDDnmbdv3w87VuyVIy3LzAFB+ycJR+lsQVpLWI1U3GS0JmX9iJ96AOw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ZwVmf2vTR5OI8gHgYZeKGyVUttZjgkQM8pahXmEfdS8=;

b=ubRkmLAYKUK0q8PoDgoPVFK8q9avLsSCfdVcEVG9j9tcaiv6BJHX+YSEF4P5OIRYPPoqzj6H+kJV0RrwpkDLrD174SJNoEVZ3TdRaxi19pKpqkDb4NcVo4Mrm1t/0Uz5kvve3rvX3CNNBeGoRq3jMZnohJXTbm5gcVmOujD/Lr26MO2exs1UfjZ9RHzfTvS2XZAJ2wzY3GV+BAYHVDVSCHjFjfG92HJUOsEg0G9ndDYXSG0bDg+yohL+tbpNMro1hW/8iclPFjmUYqxWDoSlb8BaXtOEirIHdkbMlbGnwK8We3uADOt8KIX8j8jfmCWp0MN3cHCRaxkedKkAyke7xA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ZwVmf2vTR5OI8gHgYZeKGyVUttZjgkQM8pahXmEfdS8=;

b=dsst8NSnOCRHZzw0DXagDAviu4pQzn+8/RMl2zJc8DaxjL6smFxGi6u4YbDKYgbREmGJHA0X9OAff7Pbfd/88VOoCKXQC2O0MkdmDJJ+1JaeHv/qNGQI+A/8Y6z2GrKd353/xSONEylpH5UQFS/eF0gT5PcCHFXF6wjuHbYmMBWDKTzhbeR1icDRwDTkAU859NH+AOeFWI2u8zbt5NS2Ie/FGa+yfLkXtXKMlP79MEfFDbDvhIvO11gNtNtmlaVbZybcOTahXcWwPTvHxyUGH5YuC1QoPj0KGzl2th3KZbvJLUY19YIU4H9zjxhg2OjbYQty0h/HJ85SALmlvH2TqA==

Received: from PUUP216MB3146.KORP216.PROD.OUTLOOK.COM (2603:1096:301:169::14)

by PU4P216MB1833.KORP216.PROD.OUTLOOK.COM (2603:1096:301:10b::13) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.71.12; Tue, 26 May

2026 17:14:35 +0000

Received: from PUUP216MB3146.KORP216.PROD.OUTLOOK.COM

([fe80::46b1:cf0:529b:1e76]) by PUUP216MB3146.KORP216.PROD.OUTLOOK.COM

([fe80::46b1:cf0:529b:1e76%6]) with mapi id 15.21.0048.019; Tue, 26 May 2026

17:14:35 +0000

From: John Smith

To: John Smith

Subject: Re: First page on Google?

Thread-Topic: First page on Google?

Thread-Index: AQHc7TMgd6XrPcuPUESh5C0sFJ+waw==

Date: Tue, 26 May 2026 17:14:35 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PUUP216MB3146:EE_|PU4P216MB1833:EE_

x-ms-office365-filtering-correlation-id: a2ad26da-602a-4e6b-5e34-08debb4a42b2

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|19110799012|15030799006|8062599012|8060799015|31061999003|39105399006|19101099003|55001999006|37011999003|22091999003|24121999003|3412199025|440099028|18071099003|102099032|39145399003|40105399003|41105399003|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?0Pky5AufZjkbSzc8EYp+OsHhKgDLIkTUJ5aIbYvmbm5tffYdfjTo/WrZMx?=

=?iso-8859-1?Q?+s7yhBskf2kLroDXm4Aw5RyB7BlXfrUHze4GRt57Jki2LeGpji2NsqdQUB?=

=?iso-8859-1?Q?Gtt/+oVFRRI6sQVw/UPEXbxNWqJ0kyvd8kIWn9SZDtyiPv3xcAZxNZgNH/?=

=?iso-8859-1?Q?dpaRNKsPle7qJwOilHSwbnmTuDbSOK+H4vVTHhSdvBD0jkjNAZgRFHocAe?=

=?iso-8859-1?Q?7nBKVPW/Zrq6f6E3iXXV24pq8h0EYzbOVxjWxAZMVkGmt3WgRbAl1evPxP?=

=?iso-8859-1?Q?+fd3gX5OtmHuz9Y/P8RTE4wfKMGaQiWpcpl9bSCCJMZNOqfXc/KvuflDfE?=

=?iso-8859-1?Q?6JfutjKhPtTvx39co4pW+i3+TSi138xvZLmSNIQnT5fMoR0t9kh3a/fDBK?=

=?iso-8859-1?Q?EUgDeV1xfoojbCZI1/1AwXlw/O9xY8j9Unuop67ISy3crZAQtPJzujc3lN?=

=?iso-8859-1?Q?/EU82VW2N/pH8zckppOcU/fL9hUYO67zoUsDXlYfoBOMUDxACI72D+5WLc?=

=?iso-8859-1?Q?eXaDmnm+cXk4Rp5kqp3DJVB1gR1Cf0J4/KXnjozHgFtgou+LL7Wpp54K4u?=

=?iso-8859-1?Q?/pZqDh/c9tCD/pwrjWGfhQZ7ujlGlrOafHMrJqUWiKqGvbvBJpcCXC9lv/?=

=?iso-8859-1?Q?H52iVI+d8y2HKoy0h9hYaM1nGo7/UnGdg2jjayQoikn2uC03zs8kHtAZdl?=

=?iso-8859-1?Q?PhbSBQvuEBxPJmtWGRhm3TvA1JonUK3fYwRcXsjKBjmaUYdDJ7/LofzKz6?=

=?iso-8859-1?Q?XKDOn682yGqt34IllcULOTE4q/sbyHV2QtZa4UejvI4Z55lJF8AE7EoALD?=

=?iso-8859-1?Q?ilT7MgdSxPHMcy6GrR1SXaf9hgYE05rhhznkeYZcBPqyXppUY5ztvh3Rfn?=

=?iso-8859-1?Q?IFYL2tbP3gZ2dt04h7O5VcKyNQm3XYSQvy4jwXHnAuu+mUBpW0QL9HRe1Z?=

=?iso-8859-1?Q?JkYZp7I1Q3YuPHC0/kFufCkjCJMY9swJHGOVMFE4k02D4SmrraHjgEZNxD?=

=?iso-8859-1?Q?YYOuUv30RpjKL/rmOd4MmCG5d7iQ6Z5TJU9KcS1wwiXdo10bdXJ/GjcO53?=

=?iso-8859-1?Q?bfN+YwvdUCangMpSuWBIoGQ3IPs/fVs8BYHcLgaFY1FZkTsxCD2I45hyPv?=

=?iso-8859-1?Q?PIilFvho//2dA6/WZGCG2MycEBRlIpV8oR2CmPaal2/+10/1XHQfurNMAk?=

=?iso-8859-1?Q?Thp4S5H7+CA1xWuPjxbPe1xzlQXJ6NVFdaaktdP1WQKJDm6rv8w1FPSfrV?=

=?iso-8859-1?Q?Zdr6YnlNU6uRCjSvW0lg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?UrsLWHKKfgYHfNdJZSxOI2sAogQ0dqVJ33l5dDO4r5aPzEnJ7iOM7elpE3?=

=?iso-8859-1?Q?izwKGNc1eVokhKmoRpETHYOYNj5muN4WmlofZlXLf95gUudVJnhHTci6sO?=

=?iso-8859-1?Q?9qpO64J/40o7U5erZsahjy2tm+yZhrAZ/p5MtGFfqKbaL9HwwntEMEB4fb?=

=?iso-8859-1?Q?uWiDnTToYLxVSEn0EnhRFsoOFLwmbDpmYc8ARbUeF4kFqsXWKDAD/f+EvI?=

=?iso-8859-1?Q?YAe2K5toaeu/ZeXxfWwIqbzESMMJdVWWvU4dYoglRdfOI6Di6EGPvjOFwU?=

=?iso-8859-1?Q?DaPTXhUuUUDE3BVMA9fcjTWe47U6e3PQANua8iSv9Ln2AyZJn8go6fP7Te?=

=?iso-8859-1?Q?aTQBtXzRtRZrghDsgYV7/EbuXSStHX+5rK13MkAxJDCJDfEVQk3F9cG9aW?=

=?iso-8859-1?Q?NTuq2Rk9v0W7WztMW84HV0dBDLkuhTYbHXxv/hG92Ekn5HXpPeh6bN/QQN?=

=?iso-8859-1?Q?4Hn99KD+vEozddZWM8ZrTkWjLRmyI8TpQy9CU0PX8YoHxn/3xAhQTN+ZrC?=

=?iso-8859-1?Q?+rH+qo8EyjKNzrWdxd1yvv+JIkQqK/LeS18azJkPWtr+UTuJS1KhSELt7T?=

=?iso-8859-1?Q?r9nU3YMtOmJnn+LaC1DOfKEA9FQDKP9M0aYl+73LwZQ4ssZCUP8vg069VL?=

=?iso-8859-1?Q?gSj3Y8MDiY8W80bkkhWCuveMQiviZnYLqQkZiwEb2SzvwV9HYrawLhFGo5?=

=?iso-8859-1?Q?X52gxfCZ6/w94ZCv+NdYdczuy8ZQT7LuWgmm1CkQiH+EqQufMl0jONFAA+?=

=?iso-8859-1?Q?R+gaMDm0sqRDTRs3jSByJEmdZWq+O5fr427VtDWYaWRA5CdAHbvtCGf4Qi?=

=?iso-8859-1?Q?asiUq6gO5uBdJDF2TlNFo3jHt99cEr8kCCLt+k1WSHqzUB1/OSrcAtyFI+?=

=?iso-8859-1?Q?m4Ih4AbHHwdcI4MkWTdSvt5EZMLCp09RrDhM4MTbv0zxocYcg2Ekvb9CtX?=

=?iso-8859-1?Q?WxTF7ix+1fCkdoGWBcSMg4dDEZyM/yuAjC1Xlj7TD6Whg6l0BMkbKMHxL8?=

=?iso-8859-1?Q?LL0n0DSwRaQ8HQ+CFWiUGVfVnIDmNXU3vYU/vPn79p8x5IAQTrBAjTbysw?=

=?iso-8859-1?Q?x2pUacSfSPwedv4dA6MJQVJrShRqvGV1R8rzcQ3JouSfL34sxVS9ca498N?=

=?iso-8859-1?Q?R896k6Ntn0uCl94Eg9i+UHIHPVImeAsxZYj5P4Pte4TeTHNAdSa/Uy3yBa?=

=?iso-8859-1?Q?VSnHRL305DCBgBPjqsPv3o7IGnWDWSvlm/7zzWTl8nAk1mEhvD3JYmBn88?=

=?iso-8859-1?Q?80At5gibeBnBnWoZkUus1Q++JtU7LFM3H4NpM5u1MSIFSNGMYMJ4t8WlcR?=

=?iso-8859-1?Q?FMa4dFl/DxugOayPhYRQWzkEFzEG/Kk8PhEwrVvkxrOxJrwMBQ/wdDdZqz?=

=?iso-8859-1?Q?lQmEB4ywv6qx6Ab1UngHVWAGao8qhAcBbtRMwWkjvWj0k3gxT6UGW67uL6?=

=?iso-8859-1?Q?yqog//qtHpcgFHLf11Ps33B3nFhADqrmWSL2IOKuOdrYAhBcz41cMyts0H?=

=?iso-8859-1?Q?9PP47JpqySl8RxWGqZev/R?=

Content-Type: multipart/alternative;

boundary="_000_PUUP216MB3146341E0E498EABBCD91FEE960B2PUUP216MB3146KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PUUP216MB3146.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: a2ad26da-602a-4e6b-5e34-08debb4a42b2

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 May 2026 17:14:35.4053

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU4P216MB1833

Business Proposal spam from Microsoft Outlook Part 2

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:29:00 +0000
--_000_SJ0PR04MB79049077FF882784875CE4AD870B2SJ0PR04MB7904namp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

ATENCI=D3N: Tenga precauci=F3n con el contenido, no abra archivos ni enlace=

s no solicitados y no env=EDe informaci=F3n sin validar el receptor.

I have a proposal for you, 35% for your time and effort if interested conta=

ct me via sgt.marinaquez@mvquez.com for details

Kind Regards

Sgt. Marina

--

[https://fcdn.ucacue.edu.ec/assets/img/correo/ucacue-ecodisclaimer.png] IMP=

RIMA ESTE MENSAJE SOLO SI ES NECESARIO

--_000_SJ0PR04MB79049077FF882784875CE4AD870B2SJ0PR04MB7904namp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

or: rgb(255, 235, 156) !important; margin: 3px; line-height: 12pt;">

ri, sans-serif;">ATENCI=D3N: Tenga precauci=F3n con el contenid=

o, no abra archivos ni enlaces no solicitados y no env=EDe informaci=F3n si=

n validar el receptor.

margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I have a proposal for you, 35% for your time and effort if interested =

contact me via

sgt.marinaquez@mvquez.com for details

margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Kind Regards

margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Sgt. Marina

--

#a0bf38;color: #fff;font-weight: 900;font-size: 0.79em;width: 390px;border-=

radius: 3px;padding:4px 10px 2px 4px;text-shadow: 2px 1px 1px #869d38;text-=

align: center;">

tps://fcdn.ucacue.edu.ec/assets/img/correo/ucacue-ecodisclaimer.png" alt=3D=

""> IMPRIMA ESTE MENSAJE SOLO SI ES NECESARIO

--_000_SJ0PR04MB79049077FF882784875CE4AD870B2SJ0PR04MB7904namp_--

Business Proposal spam from Microsoft Outlook Part 1

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:22:00 +0000
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 May 2026 07:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRrQB-000000004Ui-171H

for dave@doctor.nl2k.ab.ca;

Tue, 26 May 2026 07:02:11 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 May 2026 07:02:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westcentralusazon11020134.outbound.protection.outlook.com ([40.93.198.134]:12058 helo=CY7PR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRrKv-000000005zF-2mDC

for doctor@doctor.nl2k.ab.ca;

Tue, 26 May 2026 06:56:59 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=R3qzZDIbkFAKTcVI+PPY5JHN99pnf2XdoxKxOWz/NWSueoAo1ZkD8UjufAFn0RfQLd7b7G/c/PhSbFKDqLxTxOPSfz94wvZ/DGg+Qy7125fmW4NaIXkVuqQ67hv8acrek0dNhdZdM/l4QPZqbZGGb+rEwxWmjKgzA1yOSwQOWx57TlHZEWRNSisfpehBX7R+Os6mK4UnCD5ykqdwfJxx17bqQXTgUMJ8Gs1/V+gKLiOGhV3nfGobhrYM+DwNlpo1DUTzysis2T5z9jZN8IpqBf8LLKIIsGK3LViC4pqLSl4uC0NEGxZMjghtC7lGXPjdP0SRk//eSlngrGiPBDGjVw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=rRk9NWVnRVtTLCbz55PoJOjlDfzycuS9LSVa+syGnSI=;

b=fRYzore7ARBr9bCt2hTkvAisWTkR6N16TNlP8OqCmHoU6sqWQWK3jAjtGCXBqBUTavYAT5ZYtYiZCfvqNh/0xo8O0GHS0KeNcSuwosnunh3exqLYDbLRgzYZz/5ssHUm2SaAdFnNGk+xSoE8NM+2DQ7kgtBVJ05ZqdFPJlWxOwhrPCJM2HoIIRPI8xT7NJ+2z8/WLVgcB9Q3BpIHJOtVHrVeYbTAVxSJPIqeEz8QBApqFpbzbRsmzJ3+4K9Ycs4fLrO5Gj1KN7+pvCAzOmRdjyXK0ZPUg15XgGyuHRcOTjb0XvXgnSVRM1k9xzAQ+6mDr9U4yvUhZ/mTD4wjEQ2jwA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=est.ucacue.edu.ec; dmarc=pass action=none

header.from=est.ucacue.edu.ec; dkim=pass header.d=est.ucacue.edu.ec; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ucacueedu.onmicrosoft.com; s=selector2-ucacueedu-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=rRk9NWVnRVtTLCbz55PoJOjlDfzycuS9LSVa+syGnSI=;

b=BE2aGZ0EV87GvaK1c5RfM1TDYS04ppbidA4JhYkJSGt838s7zkPldkPDDpD8BdL4PRasc7BtMUWSPBZJ5SbzCFRKWXtVXLXu2+7qKlsxHWqINfFy8ri39Jmq6mNc47V2sX2Gc9uMq+MZ62LLCVlAqQrFSGcGURh/WWko81bTyOo=

Received: from SJ0PR04MB7904.namprd04.prod.outlook.com (2603:10b6:a03:302::6)

by IA3PR04MB9678.namprd04.prod.outlook.com (2603:10b6:208:512::20) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.48.20; Tue, 26 May

2026 12:55:46 +0000

Received: from SJ0PR04MB7904.namprd04.prod.outlook.com

([fe80::e723:c3cc:4a71:c3fb]) by SJ0PR04MB7904.namprd04.prod.outlook.com

([fe80::e723:c3cc:4a71:c3fb%5]) with mapi id 15.21.0071.011; Tue, 26 May 2026

12:55:46 +0000

From: BARROS VINTIMILLA MARIA DOMENICA

To: "help@live.us"

Subject: Hi Dear

Thread-Topic: Hi Dear

Thread-Index: AQHc7Q73lbzpLma4rUK+dHS6Uu1B7g==

Date: Tue, 26 May 2026 12:55:46 +0000

Message-ID:

Accept-Language: es-ES, en-US

Content-Language: es-ES

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=est.ucacue.edu.ec;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SJ0PR04MB7904:EE_|IA3PR04MB9678:EE_

x-ms-office365-filtering-correlation-id: d0077911-7182-409a-7b13-08debb261a75

x-ms-exchange-atpmessageproperties: SA

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|366016|1800799024|3109299003|786006|69100299015|31052699007|39142699007|7416014|376014|8096899003|18002099003|56012099003|38070700021|55112099003|11063799006;

x-microsoft-antispam-message-info:

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

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SJ0PR04MB7904.namprd04.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(3109299003)(786006)(69100299015)(31052699007)(39142699007)(7416014)(376014)(8096899003)(18002099003)(56012099003)(38070700021)(55112099003)(11063799006);DIR:OUT;SFP:1102;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?3HbugDiBRJ3k190joiMVLOTV9ymNppDpR/wHjIpqYsPuYQEPfMTunDx9/G?=

=?iso-8859-1?Q?DwXx9THmOkpYX88UcHFgk6WU4j90tYIuGoMnDNhFAP/qxOv1n+5xktC89x?=

=?iso-8859-1?Q?q1dpdBOlUFbxVyfsUFSFwZrBKTf3P0gzvTqZ2BmeP9N8S/r1v351P6KUOW?=

=?iso-8859-1?Q?aqq6KZ7SZxS8SSOc3g5mjCggr73WWP0RjOF6A8d/VLG4PMyns0aWtz7BZd?=

=?iso-8859-1?Q?WUIwns4YzbCRqaeL5X9xZWRBMUvDktUE5vU/+AkcTEb88jPZY3JU28uFey?=

=?iso-8859-1?Q?E5hgh3OWAUQIP4SCPyKxP2dSaKd+CIzgVS9WJh3EdER0MRO1kt+dHM/1ML?=

=?iso-8859-1?Q?fdg/zh2Z73648h5/YY0kBamRCmqIEBbHRyTRqxJJ5eIfTmZoUGIcVC6Mfr?=

=?iso-8859-1?Q?OiRFYfdgi+sb9LHGKbJamo6Wb75SX70fkv5VQ98DtRk7Vu0X6Fy2fmHT9T?=

=?iso-8859-1?Q?MnLazmh4D/2jG3OO7esWJKVixaK/rRMMSr+Sj8hTcjh1cjUvEttSyRVTwQ?=

=?iso-8859-1?Q?fsFDckz1dR8OGH3lIUwUGDxDqb03Mf1kY2clRB4W8eoSR6c00jwpHH60s1?=

=?iso-8859-1?Q?T2d8CUP15L9XSjrkEPGqhyxiMCbIS3shUGXXgkHzNIlcnW5vFKlf3HmCbs?=

=?iso-8859-1?Q?1mGkzfqEtcOgB9gRkOqHviX1KFUp6zTMpt/e9q4Se41uGJ7oMoO+TDfKzw?=

=?iso-8859-1?Q?zVHnw79sBNy6b+2M7sbFYdqVPgbyRUpqEFgLC+A/tfTzEnPoqjOI56nXAF?=

=?iso-8859-1?Q?XzgFxbbf7DhsE5SQwDJFiSqXt7Wzlz5AzMgeDKy3QNCnCoLbO4TXVKG3Bp?=

=?iso-8859-1?Q?dZEIcF301QSsg18l5vgVmeAiR8H/G2Zyj0s4iVSKFtdtNnF6EiDpIlPJR2?=

=?iso-8859-1?Q?yehla5ghlqkodtdzbIfnpA7oyeDiQG1CfILLed3vwVDHGeQwCXFdn07T/m?=

=?iso-8859-1?Q?5YlT83GYe8WZ8M2KXccXVFzVe3oaRc01tZfjgz8WPfMOUz7RtfEJtbYXpv?=

=?iso-8859-1?Q?815EjWFYGdCoZ/1e58Bj37GPbfIL/nRsawsXjcSLfi92UhjC1rIQ8982Ip?=

=?iso-8859-1?Q?sHcURj++L26upxRmRoHBORrORT0b3fqgSebyqhKP8iIZrbcSCGJBBOGrE8?=

=?iso-8859-1?Q?jVO4DoIBQfq1/tD0VCBQtjzKVTMl9c7L8GEc5SXyTFsX6aCAn/picls7n7?=

=?iso-8859-1?Q?sF9TtS0VjYFBv9cVnxewqh2XJEt5t91IT2ncdKB2wr2X7XUYGu/8AKR41h?=

=?iso-8859-1?Q?9pHQOhyFUF24g/6llHsa0het7JyhTUPYhCgHokX9fto473t2jgvYg5C/Yb?=

=?iso-8859-1?Q?MvwVDU6LUyYvjAVloxFwpHVL1WH56XudL4YsQh8Og6d9/8ZTYXfdvrYiER?=

=?iso-8859-1?Q?FufMqB4UXlpSiffEaNqA3wDzOQxXW+2AqFqEDFJBzHmYg53Zs85GCHf2zl?=

=?iso-8859-1?Q?QPoUqO4W31BKE9TbfPfvuTl1kVqkWnifDv46HlmN59GMEVZ0YD0+v9vR9M?=

=?iso-8859-1?Q?01v035vix8u44wr6kkfvjuhQ5bE+gb8MDHmlJkLwnmaH1JFUvuILZbTEwz?=

=?iso-8859-1?Q?DC73iqtoda4+CAxyfiArF1pLA7kAlZAZVHLe5nhJ3BaedRUI25bPoNMsIe?=

=?iso-8859-1?Q?/AlqAJmF1NmSqTVh3tgKjht8YaowjVZSycabjXNftdSy+n+qw1bN8xt9EO?=

=?iso-8859-1?Q?zb7tgFi5kdPclLFM4NsaBRDzHA4PZiNhiOHB//xkHsRCplbV8gPNxMFFYy?=

=?iso-8859-1?Q?Veq5Drs6risRl3PpjwBswxc4BzS+CX6ya5pg4nIA/61ySsGBu13eRIQ71U?=

=?iso-8859-1?Q?+SWzwGXB8g=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SJ0PR04MB79049077FF882784875CE4AD870B2SJ0PR04MB7904namp_"

MIME-Version: 1.0

X-OriginatorOrg: est.ucacue.edu.ec

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SJ0PR04MB7904.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: d0077911-7182-409a-7b13-08debb261a75

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 May 2026 12:55:46.0211

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 7ef32de5-906b-4cc3-9292-fb130a69fdec

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: ArPhlv//wI+zEFCBE2SccGkoJ6xuUk+ZzVzyBuc95ZVV4TlGel+1iHeD8vNzJ7CFk967XFbF2mnnTt9oRRQWZw8ZkiDR8UgIZy7aYEPEqyg=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA3PR04MB9678

business broker spam from Google Gmail Part 2

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:21:00 +0000

> Are you free for a brief chat sometime next week?

>=20

> Best,

>=20

> Oliver Bogner

> Managing Partner | The Advisory Investment Bank

> Top 3 Lower Middle Market Investment Bank on Axial - 2025 List

> 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> A: 269 S Beverly Dr. =

Beverly Hills, CA 9021

> On Tue, April 21, 2026 12:15 PM, Oliver Bogner =

> [development@teaminvesttheadvisor=

y.com]> wrote:

>=20

> > I'm following up because I haven't heard from you, =

so I'm assuming you've decided not to sell?

> >=20

> > You would be a great=

fit.

> >=20

> > Best,

> >=20

> > Oliver Bogner

> > Managing Partner | The =

Advisory Investment Bank

> > Top 3 Lower Middle Market Investment Bank on =

Axial - 2025 List

> > 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> > A: 269 S Beverly Dr. Beverly Hills, CA 9021

> > On Wed, April 15, 2026 =

12:01 PM, Oliver Bogner

> > [development@teaminvesttheadvisory.com]> wrote:

> >=20

> > > Greetings,

> > >=20

> > > Would you be interested in learning about some potential =

offers.

> > >=20

> > > Valuations are exceptionally strong right now in =

your space.

> > >=20

> > > Best,

> > >=20

> > > Oliver Bogner

> > > Managing Partner | The Advisory Investment Bank

> > > Top 3 Lower Middle Market Investment Bank on Axial - 2025 List

> > > 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> > > A: 269 S Beverly Dr. Beverly Hills, CA 9021

> > > On Mon, March 30, =

2026 12:08 PM, Oliver Bogner

> > > [development@teaminvesttheadvisory.com]> wrote:

> > >=20

> > > > Just checking in

> > > >=20

> > > > Best,

> > > >=20

> > > > Oliver Bogner

> > > > Managing Partner | The Advisory Investment =

Bank

> > > > Top 3 Lower Middle Market Investment Bank on Axial - 2025 List

> > > > 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> > > > A: 269 S Beverly Dr. Beverly Hills, CA 9021

> > > > On Tue, March 24, 2026 12:53 PM, Oliver Bogner =

> > > > [development@teaminvestthea=

dvisory.com]> wrote:

> > > >=20

> > > > > Greetings,

> > > > >=20

> > > > > We potentially have an interested buyer for Netknow Internet =

Knowledge.

> > > > >=20

> > > > > I'm Oliver Bogner, Managing Partner at =

The Advisory Investment Bank (Top 5 Lower Middle Market, 2025). I've been =

in your shoes as an operator and sold my past companies; now I head up the =

Advisory, where we help other founders like us exit. I've been featured on =

Forbes 30 under 30 2 times, INC 5,000 CEO, and many more.

> > > > >=20

> > > > > Valuations in your space are very high right now - companies =

doing $1M in profit get valuations up to 12 x.

> > > > >=20

> > > > > Do you have some time next week to connect?

> > > > >=20

> > > > >=20

> > > > > Best,

> > > > >=20

> > > > > Oliver Bogner

> > > > > Managing Partner | The Advisory Investment Bank

> > > > > Top 3 Lower Middle Market Investment Bank on Axial - 2025 List

> > > > > 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> > > > > A: 269 S Beverly Dr. Beverly Hills, CA 9021

> > > > >=20

> > > > >

business broker spam from Google Gmail Part 1

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:20:00 +0000
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 May 2026 07:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRrPy-000000003Er-1fTh

for dave@doctor.nl2k.ab.ca;

Tue, 26 May 2026 07:01:58 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 May 2026 07:01:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f176.google.com ([209.85.160.176]:58511)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRqvi-00000000NWI-1LyG

for sales@nk.ca;

Tue, 26 May 2026 06:30:50 -0600

Received: by mail-qt1-f176.google.com with SMTP id d75a77b69052e-516cc597842so25291881cf.0

for ; Tue, 26 May 2026 05:29:53 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=teaminvesttheadvisory.com; s=google; t=1779798587; x=1780403387; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=7UmQWTBehBQ++TkW5myU7mpKrv6ByNXG472y12WA/q0=;

b=GHlxvOmURcey/qFNiMuJCyknuFRcK3CYMn8QKFVW+wEXRldZO9W76SBoDXGLZXoUkg

yKDoZGR0w/zRzONAftsj/24fTFmM9TuIh+1pws/FHDu0cIQid4mjtZAl7/aBnP43K0Yp

haJfNiHJtcLFSscyeeuENWP+36YPhYObCIFMynHg3moVHRcZjyVqwhnaKpDyRhGpYcrS

7chdXcj3HQ1Oz+ZgNU0MjcPjpnIkQMJD+6fWpoOcHU3ITBGgXSpK6e73SnBbADFBHUW2

tvNuahzxNN8CqTDvEucP3mq2zFpTpezBswnv0fnBDHOYfD8qpfl9dSeFf7sbZJ26rEng

Cvig==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779798587; x=1780403387;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state:from

:to:cc:subject:date:message-id:reply-to;

bh=7UmQWTBehBQ++TkW5myU7mpKrv6ByNXG472y12WA/q0=;

b=Ev8x2Mnv/1V1aVoIzbqFNIWtz+UMi0Txg0ARC1vBIX/IR/jOUDtqYzrjho+y08Tlcs

pnWuyWLxCJYz45BiVV+8tYvaRLd22LxMx6UXa0RVW6htttwfGf2Wu85LCXEz8RpO+UJ9

OfZ/w67EFFKm5BfxwDrxSgJCB8YS/492DHvbdz7PrNrp56O/gfDnKhxvrdbMLoJ52ELT

jbO3NdAh+6i0VFSKSIhKXQ23eSvTYcpb6gGxgwHQZ6Ru7jVA0PPqC7hSxnpeepZ2+xKP

VqECzDlNGvv817YkUr59RG8g2BRAodUkJXQ9QKCI2OoDAvqnfSBLXJFRneV6u/x005LI

Prig==

X-Gm-Message-State: AOJu0Yxczd2pFFqBD0u5MavmWCCI25nhiCQabp78VdD0pafDzXZ76nPA

bkmZhqjrKfW8rJhx5Py+AO/O7MKyP4hjTQMX8zXbVa+NkSEBXEyFFE686p7khZ+pIsGwFAE8txF

gIN3GRw==

X-Gm-Gg: Acq92OFfHT8rqeVXSsU0derY1VAa7vHn+aJozUS25g2Q59zDe73ZId3uL04TRDuFOxW

ZCUg7TlsJLHy5g1Hf12vEwt5AkRgB8eOqkHafQMI++FU1RnMTrxASoGDyRuQ4Qa62zSiI5r7woA

NIb0V7zqKZ0FjGvEo3gSga8kTbrEpP5o1ZLEMMh/41w0EqXKKYaaSzNjnzXOWqN8hJFNAu/obyY

i85rznCAE0HSTCmD+WKj4VWAXwWjXWD20kgJ3FrGLowKXWLcw4ecb5umAz17DZrdx3xBsZB6b0r

yZogc8M2JISzb+pS53mVT4VG2KcoExZ+e8xDnSV4gcnaaWLPiwbgSvgfkstWWLvT6Mte/FGeqeE

pA6EdiBwQCXSjcA9vuj06o0HaP2SLOz+D3coKJuMrcWiarby60UbJNRoahwjQVva00SG+VVIWwk

MAhPJTalp8HlhTvjEUTdSfABhy01Fv1YCv4A/yHZEnVF79bNhT96KJPG7QDk8I4tudpHk+7KHfY

3SYtX8tMZmTsdHYgHgGp6K9OU4pJw44dtsk0ltS8ygE+1Jl1PEig2NklyQmGa4PvNbLCAM1JvaL

iTMA

X-Received: by 2002:a05:622a:1343:b0:516:cee1:4727 with SMTP id d75a77b69052e-516d42d9774mr246929791cf.14.1779798586582;

Tue, 26 May 2026 05:29:46 -0700 (PDT)

Received: from 019e6443-3301-76f5-8930-aeb6eea20abb.local (ec2-52-23-251-33.compute-1.amazonaws.com. [52.23.251.33])

by smtp.gmail.com with ESMTPSA id 6a1803df08f44-8cc80dcf895sm156541666d6.1.2026.05.26.05.29.46

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 26 May 2026 05:29:46 -0700 (PDT)

Message-ID:

<019e6443-3301-76f5-8930-aeb6eea20abb@teaminvesttheadvisory.com>

In-Reply-To:

<019e4a7f-eb92-7c10-81f5-3f8810d93ffc@teaminvesttheadvisory.com>

References:

<019e4a7f-eb92-7c10-81f5-3f8810d93ffc@teaminvesttheadvisory.com>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019e6443-3301-76f5-8930-aeb6eea20abb

From: Oliver Bogner

To: sales@nk.ca

Subject: Re: Netknow Internet Knowledge <> The Advisory

Content-Transfer-Encoding: quoted-printable

Date: Tue, 26 May 2026 12:29:46 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Just touching base once more.

Best,

Oliver Bogner

Managing Partner | The Advisory Investment Bank

Top 3 Lower Middle Market =

Investment Bank on Axial - 2025 List

2x Forbes 30 Under 30 Alumni | 2x Inc =

5,000 CEO

A: 269 S Beverly Dr. Beverly Hills, CA 9021

=C2=A0

On Thu, May 21, 2026 12:25 PM, Oliver Bogner
sory.com>

[development@teaminvesttheadvisory.com]> wrote:

> Hello,

>=20

> Quick note: we may have a buyer who is actively seeking a business like =

Netknow Internet Knowledge.

>=20

> Oliver Bogner here, Managing Partner at =

The Advisory Investment Bank (Top 5 Lower Middle Market, 2025). Previously =

sold some of my own companies, Forbes 30 under 30, and INC 5,000 CEO.

>=20

business broker spam from Google Gmail Part 2

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:15:00 +0000

On Thu, May 21, 2026 12:25 PM, Oliver Bogner
sory.com>

[development@teaminvesttheadvisory.com]> wrote:

> Hello,

>=20

> Quick note: we may have a buyer who is actively seeking a business like =

Netknow Internet Knowledge.

>=20

> Oliver Bogner here, Managing Partner at =

The Advisory Investment Bank (Top 5 Lower Middle Market, 2025). Previously =

sold some of my own companies, Forbes 30 under 30, and INC 5,000 CEO.

>=20

> Are you free for a brief chat sometime next week?

>=20

> Best,

>=20

> Oliver Bogner

> Managing Partner | The Advisory Investment Bank

> Top 3 Lower Middle Market Investment Bank on Axial - 2025 List

> 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> A: 269 S Beverly Dr. =

Beverly Hills, CA 9021

> On Tue, April 21, 2026 12:15 PM, Oliver Bogner =

> [development@teaminvesttheadvisor=

y.com]> wrote:

>=20

> > I'm following up because I haven't heard from you, =

so I'm assuming you've decided not to sell?

> >=20

> > You would be a great=

fit.

> >=20

> > Best,

> >=20

> > Oliver Bogner

> > Managing Partner | The =

Advisory Investment Bank

> > Top 3 Lower Middle Market Investment Bank on =

Axial - 2025 List

> > 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> > A: 269 S Beverly Dr. Beverly Hills, CA 9021

> > On Wed, April 15, 2026 =

12:01 PM, Oliver Bogner

> > [development@teaminvesttheadvisory.com]> wrote:

> >=20

> > > Greetings,

> > >=20

> > > Would you be interested in learning about some potential =

offers.

> > >=20

> > > Valuations are exceptionally strong right now in =

your space.

> > >=20

> > > Best,

> > >=20

> > > Oliver Bogner

> > > Managing Partner | The Advisory Investment Bank

> > > Top 3 Lower Middle Market Investment Bank on Axial - 2025 List

> > > 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> > > A: 269 S Beverly Dr. Beverly Hills, CA 9021

> > > On Mon, March 30, =

2026 12:08 PM, Oliver Bogner

> > > [development@teaminvesttheadvisory.com]> wrote:

> > >=20

> > > > Just checking in

> > > >=20

> > > > Best,

> > > >=20

> > > > Oliver Bogner

> > > > Managing Partner | The Advisory Investment =

Bank

> > > > Top 3 Lower Middle Market Investment Bank on Axial - 2025 List

> > > > 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> > > > A: 269 S Beverly Dr. Beverly Hills, CA 9021

> > > > On Tue, March 24, 2026 12:53 PM, Oliver Bogner =

> > > > [development@teaminvestthea=

dvisory.com]> wrote:

> > > >=20

> > > > > Greetings,

> > > > >=20

> > > > > We potentially have an interested buyer for Netknow Internet =

Knowledge.

> > > > >=20

> > > > > I'm Oliver Bogner, Managing Partner at =

The Advisory Investment Bank (Top 5 Lower Middle Market, 2025). I've been =

in your shoes as an operator and sold my past companies; now I head up the =

Advisory, where we help other founders like us exit. I've been featured on =

Forbes 30 under 30 2 times, INC 5,000 CEO, and many more.

> > > > >=20

> > > > > Valuations in your space are very high right now - companies =

doing $1M in profit get valuations up to 12 x.

> > > > >=20

> > > > > Do you have some time next week to connect?

> > > > >=20

> > > > >=20

> > > > > Best,

> > > > >=20

> > > > > Oliver Bogner

> > > > > Managing Partner | The Advisory Investment Bank

> > > > > Top 3 Lower Middle Market Investment Bank on Axial - 2025 List

> > > > > 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> > > > > A: 269 S Beverly Dr. Beverly Hills, CA 9021

> > > > >=20

> > > > >

business broker spam from Google Gmail Part 1

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:09:00 +0000
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 May 2026 07:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRrPt-000000002Zd-17h0

for dave@doctor.nl2k.ab.ca;

Tue, 26 May 2026 07:01:53 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 May 2026 07:01:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy1-f179.google.com ([74.125.82.179]:58769)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRqvq-00000000NWV-0vGh

for sales@nk.ca;

Tue, 26 May 2026 06:30:57 -0600

Received: by mail-dy1-f179.google.com with SMTP id 5a478bee46e88-30246cfd41aso350526eec.1

for ; Tue, 26 May 2026 05:30:03 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=teaminvesttheadvisory.com; s=google; t=1779798597; x=1780403397; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=7UmQWTBehBQ++TkW5myU7mpKrv6ByNXG472y12WA/q0=;

b=JCdsVyvZROeRhTNUZpHdn6Ruj57WxaXcJ0uCAnzm1aJmH1l4B7IpWqJhkyj6vezkcp

MdbNipRampTSuu3878RMQ9q8WKLXpAV95GLVuT525i+R9cBM6yc0kpC//jMAitJXRglM

FZZhyyEzSwYUwnUmNO8gi3MdcR2t6ULaGmlCMIHvJhv1I+IOBbZq/U/tGuf7c/aMILVs

J3tSu1JqNi2maMO3oodWOEOQjvPbSziTGGIqQn3qWFkxsUr0vght5h974gdPsn4dCaDs

qAuFLGwLDBpQ3irwnDr/ssVatN5SJZhIduVzkj/QH6+cucdD9dV9tfgdCYWn0qMZCr8v

uqLg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779798597; x=1780403397;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state:from

:to:cc:subject:date:message-id:reply-to;

bh=7UmQWTBehBQ++TkW5myU7mpKrv6ByNXG472y12WA/q0=;

b=rI9wrt7lMAU4QtkwvUKDfU16i/gBrk0h+XxZXgiEYAGryMh+yOHt2WvxhXUCmRoZcY

JkOz3l9QEijE4JCH0MNnIuyOiJShA73EovQm8f7HTMTSnW3kZD3BOrqGY66on+sShqcd

YANqXMjGCn0YxKCjsmgTxbMgCEJ/bI4kmMj6qoMSLXEhVxXeKrd7rcqNIUfZmr6VsuII

10nATR9g6TNXLVIW1wgxKmbSj7jZUPAMN29i6LqFqUmo7W9o2Jn7jgiVe95M/5MlGn8E

zx12sqEXK/f66ipo1IzL0M3yZpYP9f/dUoz9ibrPZJBNQLf0kM16FELrpbRWPyA1Al9U

00fg==

X-Gm-Message-State: AOJu0YwCUBbloYxSi/wrHyDlGKq5HFS9XDTjGH+StiDDCum/dxBmjF9A

yogTZpGm/8Rp8eXlXsA1TzHx0mhGESXtWlTTv6E4CfqEWG8cr274ftRLyN96hfJ4j2VQ8cMJcfC

M+f6ueQ==

X-Gm-Gg: Acq92OEJk5vXGFqhhwTngvj6Dalxb8m7Aq3kR3ZkRG3OKz99MttfaXDFVH9F7t4OTMq

owNFAtmg0iuIx2s1H7EMCCu15KzD7X9Tw/LoA2ixS8ykLkozBvQ2pejqu3bXGXtq5iRY5J4oSRF

DnssSlU8orX0KiieJuzUxRDOh00PsKzjr3Z5tDi1RF7EFfBF7tHo08crRkrip47+NJYQcyPI1xK

+l+qGNTItKJNTbJlAlusU2IBc05bc2PGiQs0/gBOPrYdsrZv+ZVlPquRwUyLZDVHYPEfWY6wAvJ

i9jes1fTCziNy2ZotMupPcnOOXP7FuMERiOCt3af20CQnTj+bkfsE2wNH5mIpCOy0jbLlk2gjlK

qDl022Mp35SVWmqSJoOVUkIab+IyxU6mvr8MxYKBlKwonuCTtVUk0VnMm9SM/SfguFlC9dz+akq

CiJWyDXT0mZLJtRCvF82mu9E8GNnYqaR5S2R6cKpOD0cg9Wg+6FqBg2382tcDuMjmtBQkNgdxC+

vV6L27GrkP9pwnUogpYqiNBa0Nst3ovLRE22MnAQrnXyng6MS+4Oo31GHgASLblYzTMkkSXabtP

awDz

X-Received: by 2002:a05:622a:1343:b0:516:cee1:4727 with SMTP id d75a77b69052e-516d42d9774mr246929791cf.14.1779798586582;

Tue, 26 May 2026 05:29:46 -0700 (PDT)

Received: from 019e6443-3301-76f5-8930-aeb6eea20abb.local (ec2-52-23-251-33.compute-1.amazonaws.com. [52.23.251.33])

by smtp.gmail.com with ESMTPSA id 6a1803df08f44-8cc80dcf895sm156541666d6.1.2026.05.26.05.29.46

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 26 May 2026 05:29:46 -0700 (PDT)

Message-ID:

<019e6443-3301-76f5-8930-aeb6eea20abb@teaminvesttheadvisory.com>

In-Reply-To:

<019e4a7f-eb92-7c10-81f5-3f8810d93ffc@teaminvesttheadvisory.com>

References:

<019e4a7f-eb92-7c10-81f5-3f8810d93ffc@teaminvesttheadvisory.com>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019e6443-3301-76f5-8930-aeb6eea20abb

From: Oliver Bogner

To: sales@nk.ca

Subject: Re: Netknow Internet Knowledge <> The Advisory

Content-Transfer-Encoding: quoted-printable

Date: Tue, 26 May 2026 12:29:46 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Just touching base once more.

Best,

Oliver Bogner

Managing Partner | The Advisory Investment Bank

Top 3 Lower Middle Market =

Investment Bank on Axial - 2025 List

2x Forbes 30 Under 30 Alumni | 2x Inc =

5,000 CEO

A: 269 S Beverly Dr. Beverly Hills, CA 9021

=C2=A0

PersistIQ spam from Google Gmail

nospam@example.com (Dave Yadallee) — Tue, 26 May 2026 22:06:00 +0000
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 May 2026 07:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRrPG-00000000PoI-2NSg

for dave@doctor.nl2k.ab.ca;

Tue, 26 May 2026 07:01:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 May 2026 07:01:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f176.google.com ([209.85.222.176]:42272)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wRppW-00000000KO1-3rcp

for root@nk.ca;

Tue, 26 May 2026 05:20:22 -0600

Received: by mail-qk1-f176.google.com with SMTP id af79cd13be357-914db83362aso215388885a.1

for ; Tue, 26 May 2026 04:19:28 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=persistiqengagehub.pro; s=google; t=1779794362; x=1780399162; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=4bcWKJxvKnQ0gV5dk3Zf1LnR1GA3A5NLvcE/1jwVTCA=;

b=ONzJymUiyk60gEhw3ADLd2Pfdd5RrFTbqGftHwrSiurzwJwJYG5cj3MYLMt7b0BAYa

B7TK6Na2QcKFFXn197PbBLLBWt7Z2ufSE+BOmsdJgxH0vDXruSoXXsCo9QE+4vOB8KMD

1K3M7HJNgwTYSfzaWnEaZ9GntFxLEa7kLZgX8IJPxLOBEf50tfPc20wSAbjxW7nXxTpP

Fljf94qLwr/YTA5j+YVaH/k6M+59x5HeNqRO2JwOSlQofW7cD5gRBADzVn12EPcXMaO7

lmNW2vZzfniY2rDaqHsdPuhvAKtz6NvWz/dr2EfYmL0I2CPD1rjRDosr5uyXc9RrDMeB

XisA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779794362; x=1780399162;

h=mime-version:date:content-transfer-encoding:subject:to:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=4bcWKJxvKnQ0gV5dk3Zf1LnR1GA3A5NLvcE/1jwVTCA=;

b=lCy6InvppDyP3ig8DPofR54HJvCkN9QLuSPIsKAfGKY6IrPV9ZGxMH4Km4zPyd0zwD

RaoQaaQ0c5RI40aBAvecUyUJYmxTjGJg1nsCJf+NwNKvRzBiZYxqxQRKZNC5VK0Il7Ih

JP1LlflQ2lqio5A3daEB24bgGrNs45fFzQeFwAF8h3dIZbAc/K01DPnhlxAYUx/W41dJ

mQ57wCF0ul+9i3L7P2K8qUNujMCLeoyPovswb+0+whuHUgaEVYWSi9o06/x9a9lNavjs

EYeTDYgkp/YGuAmbn3TN8U8qne/8NCEwT7MxOzu88WYOLtnwC9cfI7rHIoL+tEGR2UD3

Ycjg==

X-Gm-Message-State: AOJu0Yw8GFYyh0+XOUMPPXNgHZHjqyJCCA8yZSAlV6pzGyqAr64QVHzk

8mWG8rr1kdwUdu6us7IF+1GaJUmk+sDVG5epfKnM+GF+CAEoVMZVmYd8tRxKGT3zBRU1ayOVpRh

vdx1+CQ==

X-Gm-Gg: Acq92OEJnLo9n/jaAqW+viVMaQyZH1YwQ9iZQcdXbWdwsp0oouYZevDuUuZDF96SHMM

CHSD4hvbaaJFeGEBPS7PuEnz9DmNZuKdghlxg5yaeff0soD6H5e4P2toVVmNXq+nnE17YLS1Ybm

gy/Gj+WEC9tDtXTz1gFl7YeOuYSEJKHROJsX8vfVJ2J1wHAW1wldYoodASfaRHTPL5HQu1Zt7Iy

by/evWqta7oEnw2101Ud/DN/v82JREsyp2NVbdV2WhP1+rm2XfcmVM5gLYwcUi8Qk93HqWcl5/b

FcCelZFJxyMG+YdS51DAspZ6Z0BE329Dodj2G8Ug1cdjGv8K1PsPXDSFlP8VPf+WrMpczIemlUA

OOIB/UXVbkaGSkxjdLc0bCTT1LkklamyVrfA3P2l6s3SbqReBraZlQWKyJ4FKEwsubLgAl/9iPz

IkyhVYSXreQAHGp7S7vnpFh/OORjw5i4IZ5gY2kJYDPUsvNJ9q8Ytzixe9+nLmR97yJ9AvG9EFR

+/tIQ1+NYOWLp0DB2ohl/rExpCajqnMf3LILeHJGZJlwKehJhCaAbxSyTiDdnUJsqyQ

X-Received: by 2002:a05:620a:4506:b0:8eb:41de:fb38 with SMTP id af79cd13be357-914b50420dcmr2149417285a.7.1779794351677;

Tue, 26 May 2026 04:19:11 -0700 (PDT)

Received: from 019e6402-917a-72ec-a3fc-49447cea5f56.local (ec2-3-236-19-255.compute-1.amazonaws.com. [3.236.19.255])

by smtp.gmail.com with ESMTPSA id af79cd13be357-914f86e8e1esm183540285a.7.2026.05.26.04.19.10

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 26 May 2026 04:19:10 -0700 (PDT)

Message-ID: <019e6402-917a-72ec-a3fc-49447cea5f56@persistiqengagehub.pro>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019e6402-917a-72ec-a3fc-49447cea5f56

From: Bella Powell

To: root@nk.ca

Subject: about internet services clients

Content-Transfer-Encoding: quoted-printable

Date: Tue, 26 May 2026 11:19:10 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hey, Came across NK, and wanted to check if you are looking

to bring in more clients for internet services? If yes, worth a quick chat

to see how we can help?

Content analysis details: (7.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[3.236.19.255 listed in dnsbl.ahbl.org]

[3.236.19.255 listed in dnsbl.ahbl.org]

[3.236.19.255 listed in dnsbl.ahbl.org]

[3.236.19.255 listed in dnsbl.ahbl.org]

[209.85.222.176 listed in dnsbl.ahbl.org]

[209.85.222.176 listed in dnsbl.ahbl.org]

[209.85.222.176 listed in dnsbl.ahbl.org]

[209.85.222.176 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[3.236.19.255 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[3.236.19.255 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[3.236.19.255 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[3.236.19.255 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[3.236.19.255 listed in will-spam-for-food.eu.org]

[3.236.19.255 listed in will-spam-for-food.eu.org]

[3.236.19.255 listed in will-spam-for-food.eu.org]

[3.236.19.255 listed in will-spam-for-food.eu.org]

[3.236.19.255 listed in will-spam-for-food.eu.org]

[3.236.19.255 listed in will-spam-for-food.eu.org]

[3.236.19.255 listed in will-spam-for-food.eu.org]

[3.236.19.255 listed in will-spam-for-food.eu.org]

[209.85.222.176 listed in will-spam-for-food.eu.org]

[209.85.222.176 listed in will-spam-for-food.eu.org]

[209.85.222.176 listed in will-spam-for-food.eu.org]

[209.85.222.176 listed in will-spam-for-food.eu.org]

[209.85.222.176 listed in will-spam-for-food.eu.org]

[209.85.222.176 listed in will-spam-for-food.eu.org]

[209.85.222.176 listed in will-spam-for-food.eu.org]

[209.85.222.176 listed in will-spam-for-food.eu.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: persistiqengagehub.pro]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: persistiqengagehub.pro]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.176 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 PDS_PRO_TLD .pro TLD

[URI: persistiqengagehub.pro (pro)]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.176 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.176 listed in wl.mailspike.net]

Subject: {SPAM?} about internet services clients

Hey,

Came across NK, and wanted to check if you are looking to bring in =

more clients for internet services?

If yes, worth a quick chat to see how =

we can help?

-Bella

Thanks,

Bella

PersistIQ

422 Richards St, Suite 170. =

Vancouver, BC V6B 2Z4

P.S. Please let me know if you don't want to hear =

from me again

=C2=A0