IMF Nigerian spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 13:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxWhg-00000000IOG-0YW7

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 13:50:52 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 13:50:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f47.google.com ([209.85.128.47]:42479)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxVjC-00000000FQ6-3Pmc

for doctor@netknow.ca;

Tue, 03 Mar 2026 12:48:35 -0700

Received: by mail-wm1-f47.google.com with SMTP id 5b1f17b1804b1-483703e4b08so56962525e9.1

for ; Tue, 03 Mar 2026 11:47:36 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772567250; x=1773172050; darn=netknow.ca;

h=reply-to:date:to:subject:content-description

:content-transfer-encoding:mime-version:from:message-id:from:to:cc

:subject:date:message-id:reply-to;

bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;

b=MCvs8lDQBlrurb6wJKR9XLCyKfzjktcpjFy+DIaW4XEd0nQusMN2o2ngt7YWk8Phqm

yzsZKrA4HcoR4MGr4vyl1ifLblqDxB1DYz6YWiWivRDwbOP0Jx+aXtEpcxpeENin+T6U

G4To6BZ+iqHMbjDGOd5UuV1xeKId4hdqHLgBc7H6YH4+eIV7IYWTq6Y003j28qN4DoJ1

Oq0rkZ+woxOyXxsjTA1fFQJR8NONNPT3nkKdUYryDsv98NkFRUqxMyQeBI32xNcrmp4H

bVWNwZPllRbdA3VQ7egsIUEktKT4gF+uD4bVleuMdNdlQFbM8Cg/dUEJmVh69lOrMnoa

UG+A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772567250; x=1773172050;

h=reply-to:date:to:subject:content-description

:content-transfer-encoding:mime-version:from:message-id:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;

b=ML+bGqbc22sckaKfd62G1KmE+B1KFpnzEGUGL5sd2Hp1fKU5zSIofIEMwTUcaXr3c+

gmFKM+/1uGdk9tmoTsvvu5MF+mx6rMXTx4JZWYaMxO2HW9n7LL2dMYsGu0PR5oq8jUvQ

Y+IVSNdXHmt9xcveesIsPjPKt06KovQe4Ayhu767BIwRICSCw9JEjxKy6yK2L3QvLHjQ

0fuHfPMQQR2bg1o4W5qNGv+FQ8xtEPFiGHDBF6roLU08BTQZcuq+XUF3CZD83myADU9u

zR/5JQJ/C9Jx/ZeRnOy0ZoOZ4BEtwrhOtEkWJKB8hXqoIe0kc3FkVWUgCmJqtniRKi3A

emUg==

X-Forwarded-Encrypted: i=1; AJvYcCWtptOpZIMXvK6XNGeTfMPkEjGFPG30gjm+KUOvo66JBir4LJX/fuN8qFR9NjyvaGpwh180WK8=@netknow.ca

X-Gm-Message-State: AOJu0YwZBYbef5Ufc//PUR2bAtnHvIizc7AQ6Q8bT3WUTFjtG8/z6IYN

qCG1udiS54zzZf7tO4Br4h2p+wa3mfrU1PCILzizu593HAWWFEEz3lJ8

X-Gm-Gg: ATEYQzxMX6iiOQEznoIomBAeHRIAqpjHovw6lc35QK6GlDn92X+rUxdt6YmjoCuiL6j

zviVNYva9hI0SZi3Rz4l8k3S8pnaQ5GdbPQokcL9+GHTRxYpzA5VnICoOyaqACtV/rurFuCxpSD

wxXcpP3dNIERGSMsuEEsJBedX3TC9tXAg5lM0XBAJt0gpN9umhDIlTGF5rAiOKkUBPVEok17XWs

4jGF96eDHLhc3tZs/QZBFtOlvyjveCuXAf6A6XMkCegLuIU2Zcp4HUz/3JGPBXS+SFMQeGFvHtT

2K90tB17/M7GNnBDi1TFGcrLlzSUctiwhGV6qduGDsH7ZgsEEiePP5EKd0/m0Y45IlVc/A4CCKm

PUf7hc/VE3s4ruDzN9aPdfM3msBqPVEDaWSB5aXeYIpozfVgAAbjMzeMEGNJZ/UsXpVqkRfATXu

Ew0Q7AM3wid//2oBnsGvv2vMoitHLavcuIZaN8xQ==

X-Received: by 2002:a05:600c:5308:b0:483:a352:b4e4 with SMTP id 5b1f17b1804b1-48513a66cf5mr53632865e9.6.1772567249578;

Tue, 03 Mar 2026 11:47:29 -0800 (PST)

Received: from [10.114.60.112] ([105.112.10.222])

by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-4851334f9edsm40953205e9.4.2026.03.03.11.47.25

(version=TLS1 cipher=AES128-SHA bits=128/128);

Tue, 03 Mar 2026 11:47:28 -0800 (PST)

Message-ID: <69a73ad0.050a0220.264259.fa91@mx.google.com>

From: IMFOFFICE

X-Google-Original-From: "IMFOFFICE"

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Notice of Pending Compensation Payment

To: Recipients

Date: Tue, 03 Mar 2026 11:47:25 -0800

Reply-To: imf_consultantoffice01@consultant.com

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: INTERNATIONAL MONETARY FUND (IMF) Washington D.C. Office

1900 Pennsylvania Ave NW, Washington, DC 20431 Ref: XVGNN82020 | Fund Release

Code: 601 Mobile : +17712204464 WhatsApp : +13472215926 Subject: Notice of

Pending Compensation Payment



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[209.85.128.47 listed in will-spam-for-food.eu.org]

[209.85.128.47 listed in will-spam-for-food.eu.org]

[209.85.128.47 listed in will-spam-for-food.eu.org]

[209.85.128.47 listed in will-spam-for-food.eu.org]

[209.85.128.47 listed in will-spam-for-food.eu.org]

[209.85.128.47 listed in will-spam-for-food.eu.org]

[209.85.128.47 listed in will-spam-for-food.eu.org]

[209.85.128.47 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[209.85.128.47 listed in dnsbl.ahbl.org]

[209.85.128.47 listed in dnsbl.ahbl.org]

[209.85.128.47 listed in dnsbl.ahbl.org]

[209.85.128.47 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[105.112.10.222 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[105.112.10.222 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[105.112.10.222 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[105.112.10.222 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.47 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[imf_consultantoffice01(at)consultant.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[captainsalca67(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[captainsalca67(at)gmail.com]

1.5 HK_SCAM_N8 BODY: No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.47 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_SCAM No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

0.5 MONEY_NOHTML Lots of money in plain text

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.0 XFER_LOTSA_MONEY Transfer a lot of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Notice of Pending Compensation Payment

IMF Nigerian spam from Google Gmail Part 2

INTERNATIONAL MONETARY FUND (IMF)

Washington D.C. Office

1900 Pennsylvania Ave NW, Washington, DC 20431

Ref: XVGNN82020 | Fund Release Code: 601

Mobile : +17712204464

WhatsApp : +13472215926



Subject: Notice of Pending Compensation Payment



We are writing to inform you of an important update regarding the difficult=

ies you have encountered in receiving your long-awaited payment. We underst=

and that you have faced continuous demands for money from corrupt bank offi=

cials and courier companies, which has resulted in your funds remaining unp=

aid.



I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=

cial at the International Monetary Fund (IMF). We have received numerous re=

ports regarding the unjust treatment of individuals like you by various ban=

ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=

K. In response, we have decided to take action, and I have been appointed t=

o handle your transaction directly here in the United States.



Please be advised that all government agencies, NGOs, financial institution=

s, security companies, and courier companies involved in your case have bee=

n instructed to cease any further communication with you. We strongly recom=

mend that you do not respond to them, as the IMF is now directly overseeing=

the disbursement of your payment.



Your name has appeared on our list of beneficiaries for payment, and we con=

duct payments twice a year in accordance with our banking regulations. We s=

incerely apologize for the delay and encourage you to disregard any previou=

s contact from other offices. Please focus on communication with our office=

for all payment-related matters.



Your new payment details are as follows:



United Nations Approval No: UN5685P



White House Approval No: WH44CV



Reference No: 35460021



Allocation No: 674632



Password No: 339331



Pin Code No: 55674



Certificate of Merit Payment No: 103



Release Code No: 0763



IMF Telex Confirmation No: 1114433



Secret Code No: XXTN013





Your compensation fund amounts to USD $10.7 million. Having received these =

vital payment details, you are now eligible to receive your payment. Please=

ensure that you follow my instructions closely in order to receive your fu=

nds within the next 168 hours.



To proceed, you are provided with the code: 601. Any correspondence from me=

that does not include this code should be considered fraudulent and delete=

d immediately.



Please respond to this email at imf_consultantoffice01@consultant.com witho=

ut delay, and we will provide you with further instructions on how to compl=

ete the payment process.



Thank you for your attention to this matter.



Sincerely,

Dr. Nigel A. Clarke

Deputy Managing Director

International Monetary Fund (IMF)

IMF Nigerian spam from Google Gmail Part 2

INTERNATIONAL MONETARY FUND (IMF)

Washington D.C. Office

1900 Pennsylvania Ave NW, Washington, DC 20431

Ref: XVGNN82020 | Fund Release Code: 601

Mobile : +17712204464

WhatsApp : +13472215926



Subject: Notice of Pending Compensation Payment



We are writing to inform you of an important update regarding the difficult=

ies you have encountered in receiving your long-awaited payment. We underst=

and that you have faced continuous demands for money from corrupt bank offi=

cials and courier companies, which has resulted in your funds remaining unp=

aid.



I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=

cial at the International Monetary Fund (IMF). We have received numerous re=

ports regarding the unjust treatment of individuals like you by various ban=

ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=

K. In response, we have decided to take action, and I have been appointed t=

o handle your transaction directly here in the United States.



Please be advised that all government agencies, NGOs, financial institution=

s, security companies, and courier companies involved in your case have bee=

n instructed to cease any further communication with you. We strongly recom=

mend that you do not respond to them, as the IMF is now directly overseeing=

the disbursement of your payment.



Your name has appeared on our list of beneficiaries for payment, and we con=

duct payments twice a year in accordance with our banking regulations. We s=

incerely apologize for the delay and encourage you to disregard any previou=

s contact from other offices. Please focus on communication with our office=

for all payment-related matters.



Your new payment details are as follows:



United Nations Approval No: UN5685P



White House Approval No: WH44CV



Reference No: 35460021



Allocation No: 674632



Password No: 339331



Pin Code No: 55674



Certificate of Merit Payment No: 103



Release Code No: 0763



IMF Telex Confirmation No: 1114433



Secret Code No: XXTN013





Your compensation fund amounts to USD $10.7 million. Having received these =

vital payment details, you are now eligible to receive your payment. Please=

ensure that you follow my instructions closely in order to receive your fu=

nds within the next 168 hours.



To proceed, you are provided with the code: 601. Any correspondence from me=

that does not include this code should be considered fraudulent and delete=

d immediately.



Please respond to this email at imf_consultantoffice01@consultant.com witho=

ut delay, and we will provide you with further instructions on how to compl=

ete the payment process.



Thank you for your attention to this matter.



Sincerely,

Dr. Nigel A. Clarke

Deputy Managing Director

International Monetary Fund (IMF)

IMF Nigerian spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 13:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxWh7-00000000IMu-2Eti

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 13:50:17 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 13:50:17 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f49.google.com ([209.85.128.49]:60687)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxVj9-00000000FOM-3dsr

for doctor@edmontonab.ca;

Tue, 03 Mar 2026 12:48:32 -0700

Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-4806cc07ce7so68607055e9.1

for ; Tue, 03 Mar 2026 11:47:32 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772567245; x=1773172045; darn=edmontonab.ca;

h=reply-to:date:to:subject:content-description

:content-transfer-encoding:mime-version:from:message-id:from:to:cc

:subject:date:message-id:reply-to;

bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;

b=be2AVCLCQ1veM9ynqTvfdQP1JAaUqPMtLg725YPxpFc8C5OS01Sw7Mh0lQ5rmDxP9f

FqCTmsPLhfzmxKXJgTKlrai0E+YQj0TJRXyG1qbQ/4cB2k2PpiOhT/fiZltGp7vTgVQQ

JvLKUDlm91gewWRjTSvO6AaWjkZWq5KnB6H7sO7+0F98UwLz5eacMnvTiPEOp+wi4VOW

Nsr7wrd+h6rRPQBdDSy1YvL1l3jo7IQcdAN6QU79WU7C5XHZhAdlXbcUY5NxX1jELd+C

+TfkbmnOhVls6d1Py93X/DenB5WH6didtu9e2emu//Y0bKq/cc/vGUN2AAdbK6JOy7vg

utEQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772567245; x=1773172045;

h=reply-to:date:to:subject:content-description

:content-transfer-encoding:mime-version:from:message-id:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;

b=v80o4diCSmOFd31c3Dd5LypXt8Bo9goB/r/gHtNSE3nbNVv4O+6KAF2dgCMRjM5Rpm

GVaXARtEKSfrdcpLQaYD+L7Ra/+zwADj0MrYPP62QXJ1IwQOptfZ3ftEHQ70oztrjh+K

W2Z3iLCY8OMdnQErNa77U2p68Cf1q5If4nNnI5zulJkk/9jhsQFpZl+Jbr1wVQNJzIeL

JP0X5du9a6oQQmFMN2aTFZpq3keKFIYmO1fW8y7RraMkJHrWyOMm2U1nfSjlZ6p8KGwY

8aP6Os/Ebv0N4/Qbe/oDBppIKEnkiBWQ3Ov2gbvdaYOdbjyOUhC1S61kRbv4yJXnS0RE

TyrQ==

X-Forwarded-Encrypted: i=1; AJvYcCVJ5EnMGtiMWkx75p3q9cxTtgSvF9faLvl5v1Xpv7fqlWDBkuGJRJ85ahQxiNXTdtkYloe0VF8=@edmontonab.ca

X-Gm-Message-State: AOJu0Yy+qy85+h7YpnyhdF9i8UEg4/076NMWndN8qc4VcM5rAzABqsjo

qTJye2ySR/IvCyHGnpyZX5BMgWx3EeBAACoukmNhRTDfpECse3TNNwyO

X-Gm-Gg: ATEYQzyOBeCmoxk11Q+1nv81z5q9dHV/X/RIEKCBQIo8d1SaB2Zth+5vgt7my7Q7lrK

/c65sxBn/vCHkSpbxMQy/otnNNQdxEoeIAZSUuqYnm23UzlQht9t0Af5eQYD9EJDXxfaFmAIEX4

2p3QoW31y3j+ZCXe2yt3krgHiIWYUY9i3nvIU/eD/sl4WlUlmEpOhtqGlduxdSzx8E6fnTTHbTr

ijXfaB9DCROgP5Q3Qw8wag8BPVg6sdqoisvXLCg0+uKVl3137mDSnqVnKzFI0PsZVs9fJ+SnRtP

bDoUrcA4VoXxbO2u+3KQ1RyJno03qq+uYeNgEhFypcDRDK/PN7qzcd0Sd9P4PlYW0Z3Sk1+2K+q

IbzAs5kZ1OHfD/IkSIb7vEHOMFatHyw39KkjprtFYjr85Z33NBYnpqOBHaLoxA8DdtSWJuh0DAp

KBhAWneiz+zRZe/uRPRUy2jcwY19fMQxjiQpbJMw==

X-Received: by 2002:a05:600c:8b8a:b0:47a:935f:61a0 with SMTP id 5b1f17b1804b1-483c9b6cfccmr331897115e9.0.1772567245319;

Tue, 03 Mar 2026 11:47:25 -0800 (PST)

Received: from [10.114.60.112] ([105.112.10.222])

by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-4851334f9edsm40953205e9.4.2026.03.03.11.47.21

(version=TLS1 cipher=AES128-SHA bits=128/128);

Tue, 03 Mar 2026 11:47:24 -0800 (PST)

Message-ID: <69a73acc.050a0220.264259.f9a2@mx.google.com>

From: IMFOFFICE

X-Google-Original-From: "IMFOFFICE"

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Notice of Pending Compensation Payment

To: Recipients

Date: Tue, 03 Mar 2026 11:47:21 -0800

Reply-To: imf_consultantoffice01@consultant.com

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: INTERNATIONAL MONETARY FUND (IMF) Washington D.C. Office

1900 Pennsylvania Ave NW, Washington, DC 20431 Ref: XVGNN82020 | Fund Release

Code: 601 Mobile : +17712204464 WhatsApp : +13472215926 Subject: Notice of

Pending Compensation Payment



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[209.85.128.49 listed in dnsbl.ahbl.org]

[209.85.128.49 listed in dnsbl.ahbl.org]

[209.85.128.49 listed in dnsbl.ahbl.org]

[209.85.128.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[105.112.10.222 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[105.112.10.222 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[105.112.10.222 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[105.112.10.222 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.49 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.49 listed in sa-trusted.bondedsender.org]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.49 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[imf_consultantoffice01(at)consultant.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[captainsalca67(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[captainsalca67(at)gmail.com]

1.5 HK_SCAM_N8 BODY: No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.49 listed in wl.mailspike.net]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.49 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.49 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 HK_SCAM No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.5 MONEY_NOHTML Lots of money in plain text

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

1.0 XFER_LOTSA_MONEY Transfer a lot of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

Subject: {SPAM?} Notice of Pending Compensation Payment

IMF Nigerian spam from Google Gmail Part 2







INTERNATIONAL MONETARY FUND (IMF)

Washington D.C. Office

1900 Pennsylvania Ave NW, Washington, DC 20431

Ref: XVGNN82020 | Fund Release Code: 601

Mobile : +17712204464

WhatsApp : +13472215926



Subject: Notice of Pending Compensation Payment



We are writing to inform you of an important update regarding the difficult=

ies you have encountered in receiving your long-awaited payment. We underst=

and that you have faced continuous demands for money from corrupt bank offi=

cials and courier companies, which has resulted in your funds remaining unp=

aid.



I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=

cial at the International Monetary Fund (IMF). We have received numerous re=

ports regarding the unjust treatment of individuals like you by various ban=

ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=

K. In response, we have decided to take action, and I have been appointed t=

o handle your transaction directly here in the United States.



Please be advised that all government agencies, NGOs, financial institution=

s, security companies, and courier companies involved in your case have bee=

n instructed to cease any further communication with you. We strongly recom=

mend that you do not respond to them, as the IMF is now directly overseeing=

the disbursement of your payment.



Your name has appeared on our list of beneficiaries for payment, and we con=

duct payments twice a year in accordance with our banking regulations. We s=

incerely apologize for the delay and encourage you to disregard any previou=

s contact from other offices. Please focus on communication with our office=

for all payment-related matters.



Your new payment details are as follows:



United Nations Approval No: UN5685P



White House Approval No: WH44CV



Reference No: 35460021



Allocation No: 674632



Password No: 339331



Pin Code No: 55674



Certificate of Merit Payment No: 103



Release Code No: 0763



IMF Telex Confirmation No: 1114433



Secret Code No: XXTN013





Your compensation fund amounts to USD $10.7 million. Having received these =

vital payment details, you are now eligible to receive your payment. Please=

ensure that you follow my instructions closely in order to receive your fu=

nds within the next 168 hours.



To proceed, you are provided with the code: 601. Any correspondence from me=

that does not include this code should be considered fraudulent and delete=

d immediately.



Please respond to this email at imf_consultantoffice01@consultant.com witho=

ut delay, and we will provide you with further instructions on how to compl=

ete the payment process.



Thank you for your attention to this matter.



Sincerely,

Dr. Nigel A. Clarke

Deputy Managing Director

International Monetary Fund (IMF)

IMF Nigerian spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 12:43:00 -0700

Received: from mail-wm1-f53.google.com ([209.85.128.53]:39675)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxVdM-00000000Bye-0Yv0

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 12:42:31 -0700

Received: by mail-wm1-f53.google.com with SMTP id 5b1f17b1804b1-483ad568d68so10404255e9.2

for ; Tue, 03 Mar 2026 11:41:33 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772566887; x=1773171687; darn=doctor.nl2k.ab.ca;

h=reply-to:date:to:subject:content-description

:content-transfer-encoding:mime-version:from:message-id:from:to:cc

:subject:date:message-id:reply-to;

bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;

b=A163dce9L3agYMryUtXbfDaTenQY3Uk8y5QBkMuFrARl8kibj2Ebw4CUPOt8LoBeq0

VBc1192l7JfVoo2yCsXSxAu1EULco6pa3F4u5z5Ag1GYD19nKJUfmBJOxmBGRh7LqZSx

nyN+vUSBjnoUYfNef3wpIXC2xR2b9bxEESAGEYzUOUrvDJT8am5JjGDK7Ok7RxJA8dEe

V1oDkJUVy/rmVaiMKZSVOSmG5RlDgTfHRs5gZJNc6SgLT1Aarxgh/hjjabSL0gu4WulM

oh1EUreIGc01tPsMFcqLjZcdvGXPkAt7zelr3eoYHWKZlqTutnwSDF7OuG+kO016AGwk

ZlPA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772566887; x=1773171687;

h=reply-to:date:to:subject:content-description

:content-transfer-encoding:mime-version:from:message-id:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;

b=RK7g264DGQwewVb74myjKPoD4hfQd1ey1kXOIgpfayO6e7jggaXAl12ujdkbCpsjnX

EPz9QgjQiWt5lx4mMiaielLMDPiST2Y7PdtuKob3TyC/pjEtidBr7EBclc/pb0wh3oT4

akeiwPIy1AW3A9bAzvMkc0vHPD9fmfEHK0ZWEN5RRnKUj2VvvTuaVk+X3nVu92Ue7ob5

L5YhQsL5RtOnxrd9h5XEJ7mXiuD4Dk5vjd3ME7p9/dUBh5xg0zqNzvkxZJmIEmfEDMEz

QPnYM4eC1tczKnRHxZ7eI6FGJh6z4jc5O1MSMLvOOVsZ6mrSZbmdGC+T4HVQh949ds9Q

v1wg==

X-Forwarded-Encrypted: i=1; AJvYcCV7q7+lHxUeLaS5NTn85Nyn74pN6fFzt89dgWDUAgTG8pz/aH7hY9NkjetAHdL9evw6n2pi@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyJALyvRatBPqdDHIHUVMfgqd5M+C3qY5/nrdOlSwvGoLEqZWVa

6QvwB8EXUQoMI27lnYBcuzrqcefUGZ6uuTR9SteCO0Qf8F4/MZAUWYBu

X-Gm-Gg: ATEYQzwqE2RM50ET/jDgh4VyTw+79Figj7RhN+MG6Rv/iOh5+tlTz95D+a6+rcFA4kW

74u/OAvf6rj7cvtEja8F1XlkcwwpaRvQ2RyfQKR5iTnqhobGj6WQoRPy9GBCA7v5qgifhjjDpOT

1oCT6BWRDeTmZRE6EojICWu0MCeVMQ9E4KU6WtNKB7c/a9w5u3i2HyKq6SZJyXyov1Z5ZPtPhsR

Jzm53Av7higNpxC56JPhE3KxyPNsSUwET84HdYLRaFdb6vrspT2wr5Pv/5F8P7kwIvOlVRR1hVV

mzfH+maEkWZ8MRiCtRtFPalJ1dx7UXli4oGqlr+nsxHrBL0BRs3/c8js/VLi91Yv/PvOP11JNTs

mq6X4YDPZESkprYhY8RPiwuCSilohYA/M5zDFaGGEUcadknonlfdR+ERlXimlN2i45RBi1ba4BA

5uNtu1y3mVN6oP32MKP6wM++UVLXgzZfUJXlSJGg==

X-Received: by 2002:a05:600c:34d0:b0:47a:94fc:d063 with SMTP id 5b1f17b1804b1-483c9bc553amr185043575e9.1.1772566886883;

Tue, 03 Mar 2026 11:41:26 -0800 (PST)

Received: from [10.114.60.112] ([105.112.10.222])

by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-485187c81adsm311945e9.6.2026.03.03.11.41.21

(version=TLS1 cipher=AES128-SHA bits=128/128);

Tue, 03 Mar 2026 11:41:26 -0800 (PST)

Message-ID: <69a73966.050a0220.304fc9.c161@mx.google.com>

From: IMFOFFICE

X-Google-Original-From: "IMFOFFICE"

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Notice of Pending Compensation Payment

To: Recipients

Date: Tue, 03 Mar 2026 11:41:21 -0800

Reply-To: imf_consultantoffice01@consultant.com

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: INTERNATIONAL MONETARY FUND (IMF) Washington D.C. Office

1900 Pennsylvania Ave NW, Washington, DC 20431 Ref: XVGNN82020 | Fund Release

Code: 601 Mobile : +17712204464 WhatsApp : +13472215926 Subject: Notice of

Pending Compensation Payment



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[209.85.128.53 listed in will-spam-for-food.eu.org]

[209.85.128.53 listed in will-spam-for-food.eu.org]

[209.85.128.53 listed in will-spam-for-food.eu.org]

[209.85.128.53 listed in will-spam-for-food.eu.org]

[209.85.128.53 listed in will-spam-for-food.eu.org]

[209.85.128.53 listed in will-spam-for-food.eu.org]

[209.85.128.53 listed in will-spam-for-food.eu.org]

[209.85.128.53 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.53 listed in dnsbl.ahbl.org]

[209.85.128.53 listed in dnsbl.ahbl.org]

[209.85.128.53 listed in dnsbl.ahbl.org]

[209.85.128.53 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.53 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.53 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[imf_consultantoffice01(at)consultant.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[chimaibiam29(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[chimaibiam29(at)gmail.com]

1.5 HK_SCAM_N8 BODY: No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.53 listed in wl.mailspike.net]

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_NOHTML Lots of money in plain text

1.0 XFER_LOTSA_MONEY Transfer a lot of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Notice of Pending Compensation Payment

IMF Nigerian spam from Google Gmail Part 2



15 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.54 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.54 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.54 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[imf_consultantoffice01(at)consultant.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[chimaibiam29(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[chimaibiam29(at)gmail.com]

1.5 HK_SCAM_N8 BODY: No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.54 listed in wl.mailspike.net]

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 HK_SCAM No description available.

0.5 MONEY_NOHTML Lots of money in plain text

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.0 XFER_LOTSA_MONEY Transfer a lot of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Notice of Pending Compensation Payment





INTERNATIONAL MONETARY FUND (IMF)

Washington D.C. Office

1900 Pennsylvania Ave NW, Washington, DC 20431

Ref: XVGNN82020 | Fund Release Code: 601

Mobile : +17712204464

WhatsApp : +13472215926



Subject: Notice of Pending Compensation Payment



We are writing to inform you of an important update regarding the difficult=

ies you have encountered in receiving your long-awaited payment. We underst=

and that you have faced continuous demands for money from corrupt bank offi=

cials and courier companies, which has resulted in your funds remaining unp=

aid.



I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=

cial at the International Monetary Fund (IMF). We have received numerous re=

ports regarding the unjust treatment of individuals like you by various ban=

ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=

K. In response, we have decided to take action, and I have been appointed t=

o handle your transaction directly here in the United States.



Please be advised that all government agencies, NGOs, financial institution=

s, security companies, and courier companies involved in your case have bee=

n instructed to cease any further communication with you. We strongly recom=

mend that you do not respond to them, as the IMF is now directly overseeing=

the disbursement of your payment.



Your name has appeared on our list of beneficiaries for payment, and we con=

duct payments twice a year in accordance with our banking regulations. We s=

incerely apologize for the delay and encourage you to disregard any previou=

s contact from other offices. Please focus on communication with our office=

for all payment-related matters.



Your new payment details are as follows:



United Nations Approval No: UN5685P



White House Approval No: WH44CV



Reference No: 35460021



Allocation No: 674632



Password No: 339331



Pin Code No: 55674



Certificate of Merit Payment No: 103



Release Code No: 0763



IMF Telex Confirmation No: 1114433



Secret Code No: XXTN013





Your compensation fund amounts to USD $10.7 million. Having received these =

vital payment details, you are now eligible to receive your payment. Please=

ensure that you follow my instructions closely in order to receive your fu=

nds within the next 168 hours.



To proceed, you are provided with the code: 601. Any correspondence from me=

that does not include this code should be considered fraudulent and delete=

d immediately.



Please respond to this email at imf_consultantoffice01@consultant.com witho=

ut delay, and we will provide you with further instructions on how to compl=

ete the payment process.



Thank you for your attention to this matter.



Sincerely,

Dr. Nigel A. Clarke

Deputy Managing Director

International Monetary Fund (IMF)

IMF Nigerian spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 12:43:00 -0700

Received: from mail-wm1-f54.google.com ([209.85.128.54]:39676)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxVdM-00000000Byf-0UYo

for dave@nl2k.ab.ca;

Tue, 03 Mar 2026 12:42:31 -0700

Received: by mail-wm1-f54.google.com with SMTP id 5b1f17b1804b1-483ad568d68so10404265e9.2

for ; Tue, 03 Mar 2026 11:41:33 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772566887; x=1773171687; darn=nl2k.ab.ca;

h=reply-to:date:to:subject:content-description

:content-transfer-encoding:mime-version:from:message-id:from:to:cc

:subject:date:message-id:reply-to;

bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;

b=KqGqlbxXZ01AF1iG1dPEi2wzIfCPWDv+jCD9el2xj05FIfoHTOguNDrm/k8v2ppObo

7fVolozlwJCn7bWXiC2bbBFcHC2HB3tOPvhcMhzOj7gsUJb6ZYd4vUharrgsFZt9Gvtk

9cglBZnKDx4V1DCywjUoThay4rRpobpT7MsGX9+wwT7jCV1l69pq0bHIDW/6pfG57Z8g

W6QFwVIUndwiiluc9X6hNCc4oyOHgG3eHUu+QPvtMjWnUovV1WLhH/HzCQ1h3opO1jXg

wQG+Ti6Ri0LVmT3SnI2LVolbbZL6hBkQZ/mE3S8K1/T19h1u3QV8X0VwbxEy6GJPiuba

Ec6A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772566887; x=1773171687;

h=reply-to:date:to:subject:content-description

:content-transfer-encoding:mime-version:from:message-id:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;

b=SgIjwBm85zP74jednUYwXbCjdzFBjRq/qyzCCtuL+ZmbL4pIvS0H3FwttVdNzLlAgc

W68ZQ+O8CAMN7Z3lwLOfLdgkzllUHiXkgc5iNi1SdYbOZPYE2XWrjF1nA9ObaaKlvHxd

M2j3G9nG2H5kDKTgApbrnmEDSDOeD5KEJVL1aVQIoFIXSpUL1gon7XhXKMS5AAF4UFzr

s66PMeECcVZ7DCRGS2m5PNvlaDU5Z9S0thrKO5idlTteoLYGT/nMgmu4bqSD4QO30jhd

DPMENXdBKSjjt58HpWg+kgwAvqQeDOmYo1suu7oMu9CysrFLnmLjm+3tAGv4Z7+6hber

lnQg==

X-Forwarded-Encrypted: i=1; AJvYcCVMFG8zbuLIE5f+hkVsUyv6qB/OstbB43MqXLr9pwC6Tae5NJdtYxopXthqvoWtEZLOE+WE@nl2k.ab.ca

X-Gm-Message-State: AOJu0YyUyCHT2S0QnKVWJcreRc3GGfcXdp25lOv9Z+o3/bMg5rx7aiAe

Zv+pjdJeC2NNO8zPO6bt3VkvMRcA5dwzF2I/xBKlh4i+UbrHWuy18e0y

X-Gm-Gg: ATEYQzxrB6qqKUg+7ahDxwfj8OrdVhn8K8jdRPJv1kKaiXjVeRjgdO1wl/hhaImMS97

k4OmDK82jVIcqVqFrj/53QgPZcNAWpRbsQNwlFzqe0WJhFSCkiPtP0KISedymNo99nUU7Jv6U6g

vQa5EOAFXX+N/Fa9iurBwHRLZ6tmts0y7GPc85OZHyKW4aFHHbqMC3e4siCwjyq4q3+k7B8NVzM

T8i+tl5LsagQ0ltBsBxTS4qGFgHcMw4MOmUvWtfPavTuMj+bBae27N61MvoLiAtfay2osefiBxg

YKIbJoW6LWq7NXrofpqs0NQfUi/Rakuzy6+NwuetqTurBnFtdUdxT/IB9Fx4rEEdsQzYtxJu8ay

9Z6vBQVnWKHr9upA5nDXXAvQVfK5tVE2iuNotKUMuVaHAQpoIxJKXpsFkOlWw5OyaU4l/y36W7c

Ry9KUPe6FMPODXO1kZksIweqeeRX3EKOjtJvbdnA==

X-Received: by 2002:a05:600c:34d0:b0:47a:94fc:d063 with SMTP id 5b1f17b1804b1-483c9bc553amr185043575e9.1.1772566886883;

Tue, 03 Mar 2026 11:41:26 -0800 (PST)

Received: from [10.114.60.112] ([105.112.10.222])

by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-485187c81adsm311945e9.6.2026.03.03.11.41.21

(version=TLS1 cipher=AES128-SHA bits=128/128);

Tue, 03 Mar 2026 11:41:26 -0800 (PST)

Message-ID: <69a73966.050a0220.304fc9.c161@mx.google.com>

From: IMFOFFICE

X-Google-Original-From: "IMFOFFICE"

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Notice of Pending Compensation Payment

To: Recipients

Date: Tue, 03 Mar 2026 11:41:21 -0800

Reply-To: imf_consultantoffice01@consultant.com

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: INTERNATIONAL MONETARY FUND (IMF) Washington D.C. Office

1900 Pennsylvania Ave NW, Washington, DC 20431 Ref: XVGNN82020 | Fund Release

Code: 601 Mobile : +17712204464 WhatsApp : +13472215926 Subject: Notice of

Pending Compensation Payment



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[105.112.10.222 listed in will-spam-for-food.eu.org]

[209.85.128.54 listed in will-spam-for-food.eu.org]

[209.85.128.54 listed in will-spam-for-food.eu.org]

[209.85.128.54 listed in will-spam-for-food.eu.org]

[209.85.128.54 listed in will-spam-for-food.eu.org]

[209.85.128.54 listed in will-spam-for-food.eu.org]

[209.85.128.54 listed in will-spam-for-food.eu.org]

[209.85.128.54 listed in will-spam-for-food.eu.org]

[209.85.128.54 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.54 listed in dnsbl.ahbl.org]

[209.85.128.54 listed in dnsbl.ahbl.org]

[209.85.128.54 listed in dnsbl.ahbl.org]

[209.85.128.54 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

[105.112.10.222 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.54 listed in dnsbl.ahbl.org]

Telnet Communications phish Part 3

T

qivIPi7+054T+CviG00bXrXVri7ubb7WjWFukiBNxXBLOuDkHit74PfGrQfj

Zo19qegQX9vb2dx9mkGoRLGxbaG4AZsjBHOaAPQaK8p+Mn7Rnhj4H6jpVnr9

rqdxLqMUs0J0+BJFCoyg7izrg5cevep/g5+0D4b+OL6qnh+21KA6b5fnf2hA

sed+cbdrtn7p64oA9Por5vT9u34ePqYsV07xEZjc/ZRiziKl9+z/AJ69M9/S

tj4nfti+BfhvrVxo6m717VbZzHcRaeqmOFx1VpGIG4ei5x0OKAPeK4n4y+Pb

j4YfDHX/ABRbWkd9caZAJUt5WKq5LquCR0+9XnXwz/bJ8DfEbXLfRnW90HUr

lgkC6gq+VKxPCiRScMfRsAngEnivQ/jRqfhvSPhf4gvPGGnSat4aigBvrKNA

7SpvUABdy5+baeooA+c/ht+3Drnjr4h+G/Dk/hiwtYdVvUtXnjncsgIPIB78

d6+wga+N/hn8Q/2d9Q+Ivhu18OeAL3T/ABBNeolhdvaKqwy4OGJ844GM84Nf

X9/qFtpNjPeXtxFaWkCGSWeZwqIoHJJPAFAFuivnDxV+3X8PdCvJLbTYtS8Q

Mhx9otIQkJ+jOQT9QMe9Xfhr+2d4P+I3inT/AA8unappmpX8pit/OjR4mbBO

CytkHAPbHvQB9BUV5h8XP2hvCPwXntbbX5ruS/uozNFaWVuZHZAcbskhQM8c

nPtXkZ/4KD+ERPgeHNZMO7G8mPdj1xnr7ZoA+q6illSCNnkcRooyzscAe5rz

j4U/tCeDPjEZIdBv5I9RjXe+nXyeVOF/vAZIYe6k474rzP8AaS/aX8J6Dp3j

D4e3Vpqra3Lp7W4kjt0Nvulj+XLFwccjJxxQB6le/tA+ALPxTp/h1PElrfa1

fXC2sVpYkzlXPQOUyEHuxFejV+RXww8Q2ngr4g+GtbvUk+xaZex3EqW6guUX

OQoyAT9SK/R74PftHeF/jdqmoWGgW2qW89jEs8p1CBI1KsccbXbnPrigD5y1

f/goP4h0241KNfCWmuLWaaNSbiQEhGIH54zX2l4f1JtY0HTb90Eb3dtHOyA5

CllDEfrXxLrHxP8A2YIrnURd/DW/lkSaYTlbJTvYM28j9/3O4/jX2z4dltbj

QNMlsITBYPaxNbxEYKRlBtX8BgUAadFeJfEf9rv4e/DnUJtNkvbjWtShOyW3

0qMSCJvRnJCg+wJI7iuI03/goB4KuboJe6HrVlCcDzUWOXH1G4HH0zQB9SUV

y3gP4keHPibo/wDafhvVYdTtQQrhMh4m/uuhwVPsRXDfFn9qDwl8GfEkOia7

aatPeTWwulaxgSRApYqASXXn5T2x70AexUV4hJ+154At/h9Y+LbiXUILa+mm

gtdPkgU3czRPtchFYjaCOpYD8eK4zSv2/fBF3qCw3uj6zY27Nj7TsSQL7lQ2

cd+Mn2NAH1FRWX4f8Q6f4q0a01XSbyO/0+6QSQ3EJyrj2/UEdjxXj3xJ/bE8

A/DrVJ9LE9zr2pQMUli0xVaOJgeVaQkDPGMDOD1xQB7rRXy3p3/BQPwRNNtv

tE1qyi/56IkcuB7jcOPpmvpHQNds/EuiWOr2DtLY3sK3ELMhVmRhkHB5HXpQ

Bp0h6UtFAHK+N/CU/i+3t7UXotLVHMkihNzO2OO/Qc1gWvwXsLfl7+5lI5wF

Va9JpD0qHCLd2jtp42vSh7OnKy9Efjx4lLjxHrO8nzBe3Gc8EnzG6+9for+z

/wCAtGuPhb4fEaHyxY28gaJiuXeMPJ9fnZq+NP2ovhfd/DL4uauGgK6RrM76

hp84BKsHO6SP/eVy3HoVPSvUP2WP2rdK+H2iL4S8ZGW306NybLVUQyLEp5Mc

oHIUHJDc9celU0mY06sqd3F2b/zPr8/DuyB/d3Eyexw1eXftI63e/B74Wajq

+lXph1O4dLC1mVcNE0mdzj3ChiPQ4rrZv2n/AIVQWYuW8caV5RGRtkZmP4AZ

/CvIf2hfGWkftD/s969q/hD7TeW3hvVUkmeWBoy4WP8AeMgPJUJNuzjoG4qV

FIt4mtJNSlc+S/hD8Obj4ufEXSvDcdy9v9skaS5uz8zJGoLyPz1bAPXqTX1Z

8UP2F/CeneA9SvfCtxqUGuWNu9wn2u5M0dzsUlkZSOCwBwVxg4r5r/Zx+Ilh

8L/i9omuaodmmDzLa5lAJ8pJFK7+OynaTgdM190fFz9ofwR4X+G+qX1v4h07

Vbq7tHjsbOyuFlknkdMKNqkkDkEk4wAe/FWcp+fnwi+I2o/Cz4haR4g0+dol

SdIryHJ2z27MBIjDvwSw9CARXvn/AAUEkWfxj4QkQ5RtNkYHp1kFfM3hTw3d

+M/FGkaFZRGa81O7jt1Vf9pvmb2AXcc+gr6W/b+txaeLPBsAPEemOgOcZxIB

+FAHmf7PXwFvfj3rd3ZyapJpWiaVGrTzovmOGkLFUjB+UEkMST09ORWL8d/h

BL8EvH8nh9r86naSwLdWt2yhHaMkjDgcBgQRkcHg4FfTH/BPH/kXvGfb/TID

j/tma4T/AIKDf8lU8M/9gZv/AEe1AHBfs7fs93fx/wBS1H7Rq0ulaHpKpHLc

xqJJS7ZZY41bhRjJJORz05rmPjd8KZvgz8Qbvw3JfDUYljSe3uioVnifONyj

owww444zX1X/AME9P+RE8V/9hRP/AEUteTft68/G+y6ZOiW/H/baegD1H9mn

V5dQ/ZE8ZW0kjOtgNQgTP8KmESYHt85P418QafJNELf7OzpOwVE8tirEsAMA

9uuM19nfsr/8mp/Ej/rve/8ApHFXyD4OyfEegZ/5+7fr/vrQB9G+L/2H77wf

8JLrxNL4gabX7G1+13WmLCotwoGXRX+8WUd+hIPHSvmexjuLi7ghtPMNzOwh

jWNirOWO0L+OQMGv1Y+Ov/JGvG3/AGCbn/0Wa/L/AOHP/JQfCH/YZsf/AEoS

gD3r4mfsWXPw3+Ed54tfxGbzVtOgFzfaeIVEGzI3iNvvZXOcng4PA4ry39nP

VZ9H+O/gea3lMTS6mls7A4zHICrD6EHFfoB+1F/yb14/H/UKmP6Cvzu+CP8A

yWbwL/2Gbb/0MUAez/8ABQH/AJK5oHf/AIkw/D989eo/8E9f+SdeJz/1Fv8A

2kleaf8ABQSzlj+KHhu5KN5EukNGr443LMxI+uCD+NQfsafHnw18KYvEOi+K

r06ba386XltesrPGrBNrRttB2k4Ug9CSaANr/goj/wAjf4G/68Lz/wBGQ1pf

8E7v9d47/wC3X/2pXkX7Vnxn034z+PbCfRBI2jaVbNbwTyoUadnYNI+08hfl

QDvxnvXrv/BO45m8d/S1/lJQB8g6pIYdW1GQOUKXczBgSCCJW6eh4zX1D8O/

2GL7xz4CtvEOseJptJ1fUoftdvaLbiRVD/MpmY8ktkE7cYz3Oa+W9bUPqGqK

wyrXU4I9f3jcf0r9efB0Sw+EdDRBhEsYFUegEa8UAfkVqVhc6Hqt5ZXA8q9s

rh4JNrH5ZI2KnB9ip54r9CfjFrs3if8AYqv9WuX8y5vNAtZpmxjMhMW7j65r

4Q+Jv/JSvGX/AGGr7/0okr7b8cf8mEt/2Ltr/wChR0AfIH7Pn/Jd/AH/AGGI

v5NX0B+338Sb0ato/gi1naGx8j7feqjECZixWNG9Qu0tjoSRnoK+fv2fP+S8

fD//ALDEX/oLV7L+374Wu7H4iaJr5Rjp1/Y/ZhJjhZo2OV9vlZT78+lAHGfs

x/s4D463+pXup3s2n+HtNdYpWtsCW4lI3bFJ+6ApGTg9QPWvqXwl+xj4Q8Be

PNA8UaHqOqxTaXM0xtruVZ0nJjZME4BUjdnI7ivB/wBjP4/eH/hgur+GvE9y

NNsdQnF3a6jICYo5NoVo3I6ZCqQTxnI9K+u4/jt8P59V07TIPFmm3WoajOLe

1t7abzXkkJ6YXOPqcCgDzX9pP4b/AA08QeJ9L8Q/EfxW+j2lraG2h06Gby3m

y5bf8oMhGeMKMe9eEeKdP/Zk1DSJrLSNQ1bStRWJjBqESzOu/tvDfeHtgcdx

XiXxa8U6j4x+IviLVtUllkvHvJUCyZJiRWKrGB6KABgelfUd98KP2e/BHwpO

uXmoQ+IJ2sxJDMNSJuLmYrwqRow2ksRwR8vfoaAPlP4ceKLzwR498Pa3aSsl

zZ30TFoyQHUsFZfdWBIweoNfan7UP7NnhvVtN8X/ABGlvNRXWY7MSiFJVEBK

KFHGOn418IaYS2p2BICk3URIU5A/eDj6V+pn7Q8D3HwP8apGpdv7MlbA64Ay

f0BNAH5ofDPw1beM/iF4c0C9klis9TvY7WZ4CA4VjyR6Hiv0Z+DP7Nvhv4H6

tqV/ol5qNzLfwrBIt7KHAVTuGMAc571+dnwk1u18N/FDwjqt9KIrK01OCWaU

8BE3AFj7AHOfQV+rWleJtG12Vo9N1ax1CRUEhW0uUlIUnhvlJ496APyA8U/8

hDX/APr6u/8A0Y9foH+0X8Sb34d/s16KmmTtbalq9ra2Ec0Zw0SGEGRlPY7R

tz1G7I6V+fnikf6fr/8A19XX/ox6+5v2tPCl3rv7NnhbUrVGl/sdbSe4VRnb

E0IRmx6AlfoCT2oA+UvgZ8K5PjJ8SLDw0tybO2ZHuru4QZZIUxuK/wC0WZVG

emc9q+k/jb+xN4a8O/DzUda8HS38Op6XA1y8F5cmZLmNPmdTkfK2ATkemMV4

X+yz8TNO+FfxetNS1mUwaTeWz2FxPjIg3lSrn/ZBUA46Bs9q+xf2gf2gvB/h

v4V6zHYa7Yavqmq2clpZWllOszM0ildx2k7QoYkk46YoA+Iv2fviZe/C/wCK

WhapbTyCwvLiOy1CAH5ZoJGC8juVYhge2D616d+3z/yWXTP+wPH/AOjZK8R+

FnhG78ZfEPwvoNhG0k1xfQ5wCdkaMHdzjoAqnntXt37fP/JZdM/7A8f/AKNk

oA5L9nX9ne9+Pt1fNPqsuk6FpREclxGgkcyPlvLjDcD+8TjjI4Oaxf2gPgrP

8C/GsGjNfHVLC7tvtVpduoSR1DbWVwOAVOORgEEcdq+p/wDgnyij4W6+wADN

rD5IGCf3Uf515v8A8FDf+R/8Gf8AYLuf/RqUAbP7H/iTWp/gN8TtM09nefTF

klsApIZHkt2JC475UEAd/rXyN4cl05dY02TXYrq50kTK19HattnePPz7Seje

596+xP8Agn3ew6b4Y+Il5cP5cFvcW8sjnoFWFyT+QJrc8QfBj4DfGsy6zoHi

ax0a9uiXaTTb2OJGfuzQP/IAUAcZpHw6/Zm+KVlHp2j63d+HNWmjMcQubp4J

Q2MBmEmUZsnpnk9q+zvDmix+HfD+maVHIZorG1itVkYAFgiBQT7nGa/KD4ne

DLTwF441Pw/Za3a+I7S0ZRHqNrja+RnBwSAy5wQCRmv0C/Y28San4n+Amiza

rcPcz2009nFLISWaKOQrHknk4XAz7UAe4UUUUAFFFFAHM+Pfh7oHxN0CXRvE

WnR6hYudw3HDxOOjIw5Vh6j9RXyj4w/4J73P2mSTwr4qi8hjlbfV4WBQenmJ

nd9dor7UooA+AYP+Cf3jx5QH13QIV6lszE/+gda+nf2dvgK/wR8KarpN7qkW

ttqVz58oWDZGg2BCoBJ3Agd8fSvYaKAPkj4pfsFadrmpT6j4K1aPQzM5dtMv

EL2yE9fLZfmRf9nBA7Y6V5zZf8E+fGzXIE+uaBbRE/NJF5rN+A2DJ784r79o

oA8Y+Bn7MHhz4KM+oRyPrXiKRPLbUrlAvlKeqxJzsB7nJJ9ccVz/AO0x+zTq

3xz1/Rr/AE3WLLTEsbV4GS6RmLEtnI29u1fQ9FAHiH7MfwE1P4E6ZrttqWqW

uptqE8cqNaoy7AqkYO7vzXPftLfsv6z8cvGOk6xp2tWWmQ2dibRorpHZmPmF

twx9cV9IUUAeMfsy/AzUvgZ4c1nTtS1O11OS+uxcK9qrKFAQLg7u/Ga4v9o3

9lPWvjX4/g8Qafrdhp0Eenx2ZhuY3ZiyvIxbK/74H4V9N0UAeE/B/wDZ91T4

bfB3xV4NvNVtLy71iS4eO5gRhHH5kCRjIPPBUnjtXiWh/sAeJ9K1TTrp/FWk

yLazxSsqwyAttYHA446V9x0UAc58Q/DU3jPwLr+g28yW0+o2UtqksgJVC6kZ

OPrXyP4X/YK8TaD4m0TU5fFGlSx6ffW128axSAuscquQOO+3FfbdFAHG/F3w

TcfEf4Z+JPDFrcR2lzqlk9tHPMCURm7nHP5V8x+AP2GfEnhDx14e16fxLpc8

GmX0V3JFHFIGdUOSoyOvua+zqKAPNPjn8D9J+OPhePTr+Z7G+tXMtlfxLuaB

zwwK/wASsAMjjoPSvlE/8E/fHBvdn/CQ6F9m3f6799u2+u3b19s4r75ooA+Q

vEH7BkZ8B6Vo+ia3bjWkvjeX+qX0JHmr5ZQRRqudqgkHBJJPOegHoX7MX7O+

q/AiTxC2o6taan/aYh2fZUZdmzf13dfvDpXvdFAHwve/8E+vE91d3co8VaSq

zTvKAYZMgM5YduuDivtrRbFtM0exs3YO9vBHCzDoSqgcflV6igD4n8WfsG+J

PEPirXNVh8T6VDFqF/cXaRvFIWRZJWcA8dRuxxXvviH4OX+s/s5n4cR6hbR6

h/ZcNh9tZW8rchU7sdcHbXrdFAHxv8M/2IPEfgb4ieGvEdz4k0y5t9LvUupI

IopAzgA8DIwDz3r6j8ffD/RPiZ4budC8QWa3lhNgjna8bjo6N/CwzwR+OQTX

S0UAfDniv/gnvrcN7IfDfiixubEklY9UieOVR2GUBDH3wM+grS+Ef7D/AIo8

F+P9C8Q6rrukiDTLtbowWayO8m3Py/MoAz+lfaNFAHyj8cP2Ix458T33iLwn

q9vpV5fStNdWN8jGEyE5Z0ZclSTzjBGSTkdK5H4ef8E/tQt/EdreeMNY0+TT

IJBI9lpquz3AByUZmA2qehIySMjjrX25RQB8PXP7APiNtcmvLbxNpENv9ta4

hh8iX5I/N3In4DA/CvtS+0+HV9MuLG+iSaC5haGeI8q6sMMv0wTV2igD4c8Y

/wDBPvWk1aZ/C/iKwm0x2LRw6mrpLGCfukqCGA9eD7V6X+yx+zH4i+BvinWd

W1nU9NuoL+yW1WCx8wsGEm7cxZQMYBHHrX0xRQB8K6x/wT58Ualc6lKvirSU

+1SzSKGhk4DsxHbrzX2jpmgRQeFLPRL6OK8hSySznRlzHKAgVuD2ODxWzRQB

8ffEj9gG11HUJrzwVrqaVDKSRpupI0kUWT/BIuWC+gIP1rhtL/4J8eMmu1F1

r2hWlvn53gWV3PuBtGT9SK++qKAPI/gf+zf4c+CEEtxZtJqmuTp5c+qXKhXK

ZB2IoyEXgHAySepPbg/2jv2Vta+Nfjq013TtcsdNghsUtTDcxuzEh2bIx/vY

r6YooA8f/Zq+Cuo/A7whqOj6jqNtqUt1fNdrLaqyqAUVcc98rmuU/ab/AGZd

X+OniXQtS03WbLTI9OtJbZ0ukdmcs6sCNvb5cc19F0UAfPfwI/Zq1b4T+DPG

+h3+tWl5L4hjEcU9tE2IP3LRkkNjPLZxXg15/wAE8vGVq6rZ6/oV1Eg2rJKs

qPwOp+U4+gJr79ooA+GfCf8AwT21uS9j/wCEi8TWFpYKctHpcTySkemXChSf

XBx6Gvsvwd4T03wL4a07QdHt/s2m2EQhhj6nA7k9yTkk+9bdFAH/2Q==



------=_NextPart_000_00B2_01C2A75B.6333C7F4--

Telnet Communications phish PArt 2

his is a multi-part message in MIME format.



------=_NextPart_000_00B2_01C2A75B.6333C7F4

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

















Your Telnet email account has been flagged for revalidation.




To revalidate and continue using the Telnet email services - CLICK HERE




 




Telnet Communications.




http://www.telnetcommunications.com/








------=_NextPart_000_00B2_01C2A75B.6333C7F4

Content-Type: image/jpeg;

name="img1.jpg"

Content-Transfer-Encoding: base64

Content-ID: <00C044C2270A$03381608$0100007f@lfcimklvkeghibt>



/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAMCAgMCAgMDAwMEAwMEBQgFBQQE

BQoHBwYIDAoMDAsKCwsNDhIQDQ4RDgsLEBYQERMUFRUVDA8XGBYUGBIUFRT/

2wBDAQMEBAUEBQkFBQkUDQsNFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQU

FBQUFBQUFBQUFBQUFBQUFBQUFBQUFBT/wAARCABdAZ8DASIAAhEBAxEB/8QA

HwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUF

BAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkK

FhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1

dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXG

x8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEB

AQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAEC

AxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRom

JygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOE

hYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU

1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD9U6KKKACi

kJxSFgDg0ABYCjcD61V1C9h06zuLy4fZBBE0sjnsqgkn8ga8c/Zf+IM/jrw5

4gW6lZ7u21SWbBOQsczF1UewO+s3NKSh3O6lhKlXDVMTH4YNJ/8Ab1/6+Z7f

RTd2Bg9cU6tDhCiiigAopu6lyKAFooooAKKKKACiiigAooooAKKKKACiiigA

ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACi

iigAooooAKKKKACiikJxQAEZrxP40fHS8+DfjHSVutPGoeHby0d5fK+WeORW

52noRjHB/MV7JHdRySyQrIjSx43oCMrnpkds183/ALbuh/b/AAhoF/8AdEN1

JbM4GeJE4H/jhNYV5OMHKL2PbyajSxGNjQrRupJr52dvxscz8U/21PB3ij4f

6zpGiQ6tFqN7D9nR57dFQKxAfJDn+HcPxryj9nr9oLRvhR4svbrUo7yTS7y0

8qRbeMMwdWyhxkZ6kZ7V5Be+E4rOzmnW5kYxru2lQAa56FPNmjjJxvYLn0yR

z+tZx9nWl7WL2O6t/aOT0JZbWgkquvRvtunptp/wT7v179uzw1cwQ2nhjStQ

u9XupUghOoRiKFGZgoZsMS3J6DGfUV9P2vm/ZovPx52wb8dN2Of1r8xfhP8A

D6C9+KPhVJblzAmoxTSFwFVUQ72JPYDbnPavrXxv+3N4A8L38tlpkd94kmiJ

VpbJAluT6CRvvc9wCPc1pSqRqXlF6Hn5hl9bLYwoYmCjN3d73utEtm9mn2Po

2ivm3wX+3V4D8SahDZ6rbX/hx5SFW4ulEkAP+068rz3xj1Ir6LguI7uGOaGR

JYpFDpIjBlYHoQe475rc8Y+EfE/7dXj/AEbXtXsYNM0NorS5lhRnhlJKq5Az

8/XAr7b8H6tNr/hPRtTuVRbi8s4biRYwQoZkDED2ya/Jjx9/yOPiP/r/ALj/

ANGNX6Yn4iaf8KvgLoviXVYbiextNMs98dqgaQ7lRRgEjPLCgD1CivBvAf7Z

Hgbx5rFxYxx6hpKW9rJdzXeookcMcaAEkkOefbFcrrv7f/guw1FoNM0bVdXt

VYqboBYVYZ+8qtyR9cH2oA+o6K80+D/x/wDCfxqtrj+wriWG/tgGn028QRzx

qf4wMkMueMgnHfGRXZeKvFukeCdEuNX13UIdL06DHmXE5woz0A7knoAMk0Ab

NFfLWu/8FAfBtjdmLTND1bVYQceewWBT7gEkkfXB9q7n4V/ta+BvinqkOkwz

XGjaxMQsVpqSBBM392NwSGPscEnoDQB7ZXnXjr9oP4f/AA6Eia14mso7pFLG

ztm8+f8A74TJH41lfGr9o3w78Eb7TbLXLLUbqTUYnkiNjGrgBSAc5Yc8jpmv

zF1F0ubu8miUok0ruoYYPzEnn35oA/Yyyu47+zt7mLPlTRrIm4YOCMj+dWK+

evhD+1t4S8d654f8H2Gn6tFqc0AiWWeFBEDHHychyccHtX0IDmgBaKKKACii

igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKK

ACiiigAooooAqX7zxWc72qLLcrGxiRzhWbBwCewzivC/Cn7X/hbVJRaa/Z3n

h27Vtju6+dAGHDHcvIGR3Ga9t1fW9P0G1NzqN9b2FuvWS4lCLwPfrX56fFCL

S7z4i69PoNzHe6TPdNPBNCPkO7DFR7BiR+FcWJqzpWcD7PhzK8PmftaeJg9E

mpK6t3Xbto0dZefHvVdK+NWseLtJmNxp9xcCI2hO1Lm1T5UB44bAyDjIJ57i

vb/jX4h0r4tfs73evaNKbiCCWG48tgA8UgcKyOOxAc/hzyDXyNDpZbGQa63w

rreo+GrLVrG2fdYapbtb3Ns5+R8j5XA7Mpwcj6V5sK0rSjLZn6DjMooOdCvh

9J0nH5xjbR/LZ/L0871m2f8Ase8JHAjJrz/TwWv7RT3nQf8Ajwr2XxJppi8M

6k+OFgY/hxXj2jjdq+nD1uohj/ga124NWpyR8dxXUU8dQa6L9TuviHcy6TZQ

20LtEbosHZDglB1X6Ekcd65vwZp+jXl7K2s3cdvbRKNsbsVEjEnjjsMdK7v4

26DNHY2F+qEwwyPFIQOFLYwfYfLj61wngvStE1rU2tda1B9MR1zDOMbS2fun

PTPY1pRSVGy/A8/OK06mcuU0pJWspfDa3Xyvf5nT/E3RvA8PhXw9qPha/iGr

M0lrqempIzA7T+7nUH7u4cEZxnHvX1h+wV48vfEfw71Xw/euZRoN0sdtI7Zb

yZAWC/RSCB7HHavnCf4NeD7ODz7nxZHDFj7/AJ8R/QEmvqf9j7wB4X8K+E7r

WvDuuy6t/be0ypMAnlmMsvyr1xz1NdMJJqyPAxuGqUpupNJXe0Wnb/gHwP4+

/wCRx8R/9f8Acf8Aoxq+7/j/AP8AJmSf9g7Tv/Qoq+EfH3/I4eI/e/uP/Q2r

7u+P/wDyZkn/AGDtO/8AQoq1PLPhLwd4X1Dxv4o0zw9pZAvNTnW2TeSEGSPm

bvtGM/hX0H8Zf2LR8MPhpd+J7DxJcavc6eEe8tp7dY0dCQrGPHIILA4OcjPN

cB+yV/ycL4S/66Tf+iXr7x/aQH/FivGv/YOk/mKAPz//AGZteufD/wAePB09

s7KLi8+yTBT9+KRWUqfbO0/Va9C/bn8f3fiD4qL4YWdxpehwRk24OFa4kQOz

kdzsZAPT5vU15V8AufjZ4Fz/ANBWH+dehftueFbrQfjjd6lJG/2TWraG4glI

ypZEETqPcbFOOuGHrQBp/s7+E/glJ4SfU/iNrFjcazcyusenXU8qC2jVsKcJ

j5mILZJOAR3zXk/xj0Twz4V+INyngTWxqWgsqXNncRSFntnPVN3BJUjIPXBH

pXb/AAH+FPwz+J+lyW/iLxhceHfEUUjA20rxRxzR/wALxs45PYgnIPbkV6H4

n/Zp+Cvg61WfU/ihJGGIVY4p4ZncnoAqZJPPpQB6npPwu8O/tafC7wN4r8VT

6jHqUFg0L/YbgRgyBtshbKnJLJn8a+ANUhWyvbyKPJSGR0XccnAYgfjxX6v/

AAp+Hll8Lfh/p3hrTrme8tLVXKTXAAdtzFucfWvyl8QxPHrGpxOpSQXEysh6

g7jx9aAP0N+Ef7JngrwLrGgeL9NuNWbVYYBKqz3QaIl48N8u0ep717+OlcP8

OPiJ4Z8T+F/Dx03XLC4mubOMR263CecSEG5dmc5GDkdsV3AzzQAtFFFABRRR

QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA

BRRRQAUUUUAc5438EaL8QNDk0rW7JLy1Y7lJ4eN+zoeqsPWvkX4l/ArUvhtd

GYFtQ0V2xHequCnosg/hPv0P6V9u1WvbSG9tpLe4iSeCVSrxyDcrA9iO4rnq

0I1d9z3srznEZZLli7we8f1XZ/n1Pz+t9K6YFadvpPT5a9u+JXwVg8OLLq2k

ELpuRvtXb5ocnjaT1Xpx2964O30jOBt9OB615bpODsz9JpZnTxdNVaT0ON13

w4NR8P6jbGVLVZICpnkPyp7n0FeBS6do3h/VbWRNcGqG3nSVhaW7FSFYHAZi

AenUV1Xxx8cTatr8+gWspTSrBtkoUkCeYYyW9QucAdM5qv8ACr4J6j8S0kvW

nGm6RE5Q3JXc0jjGVQd8ep4Hoa9GlD2cbyZ8FmmMWPxKhRheUdL+n4W9Tspf

jl4V1WG4tNQ0i+aznBWRZFR1Kn1AbOfp0PNYth8EtL8fwT3/AIM10Pao+x7f

UYXVom67d2OR05x+NehTfsiaNNbgW2u6lDOBjfNHGyk+pAA/TFek/AP4K6j4

K0u/0eae3u5ri9Nws8WQuzYq5IPQ8dBn2oSjFfuxVHWryX15JxS3WjX3P80e

CaV+yF4jv7yOH+0dMBc4HkLI7n8Cor7R+CXwRtvhd4X0uzu7j+0dQtEIWXZt

VSSSSBk5PPcmub8V/tA/Db4GXM2mXF7LrGvRnbcQabEJXjOOjEkKn+7kkelc

rZf8FA/BstyEuvD+s20JODKgjkI/DcK3UW/iPDq1acW44ZWT0b6s4/xH+wJr

et63ql8niywiW8uJZlVrZyU3sTjrz1r6E+I/whuvG/wPHgODUIbW6+y21v8A

a5ELJmIoScdcHaa6T4d/FPwx8VNLa/8ADWqxajHGQJYgCssJPZ0PKng9eD2z

XL/GH9o/wv8ABLVNPsNetdUnmvYWnjNhAkihQcc7nXBz6ZrQ4jyb4OfsY6t8

MPiVo/ia58SWV7BYM7NBFA6s+5GXGT05bNfQvxP8IS+P/h9rvh2C5S0m1G2a

BZ5F3KhOOSB24rz+3/a3+H7/AA/TxdPcXtjZy3MlpBZ3EK/ap5EA3bI1Ygjk

ckgDuRXEWP7f/gi41ERXOi6zaWjNj7SURyPQlA3A+mSPQ0Ac78O/2HNZ8E+P

PD+vy+KLG5j028S5eGO3cM4XsCTxwe9fSPxR+FXh74veGm0bxDamaEN5kFxE

wSa2k/vxt2PYg5BHBBFYPjf9o7wH4D8L6brt5rS3ltqkfm2EOnr5s1yvcqvG

AOhLEAHjrxXlunft/wDgm4v0iu9F1mytWbH2kIkm3nqVDZx34yfQGgDzrxL/

AME9NcF4w0TxRpl3ZFsgapDJG4HYHYGBPuMfQUnhn/gnjrsV9E+reJ9Ks4Uk

Vz/Z0DyscEHGGCY6e9fY7eN9IbwVJ4rtbkahoq2bXyT2uGMsQUtlckc4B4OO

eOK8g8G/treAvHHiXS9EsbLXYLrUJVhikuraNI0J7uRKcD3GaAPfYkEUSoCS

FUDn2r5M+Mv7DjeL/FN/rvhLWbbTGv5TPPp9+jeUsjEl2R1yQCSTgg4PQ44H

VeNf25fAPhjVJrDTor/xFJE2x7iyVVt8jrtdj831AwexNdZ8JP2oPBfxeluL

Wynm0nVLeIzvZakFjJjX7zowJDAd+hA5IxzQB438Ev2MPFXwy+KWi+K9Q1jQ

54bF3Lx2qytK6spXALIMHmvsNa+bfFv7dvgLQdSks9NtdR18RMVa6tkVIW/3

CxywyOuAPc13Xwc/aV8I/Gi5msdKe5sdXhTzHsL5ArsgxlkIJDAZ9j3xigD1

Telnet Communications phish PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 11:58:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxUvx-000000004OM-1OAK

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 11:57:29 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 11:57:29 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx.ite.net ([202.88.64.59]:57318 helo=mail.ite.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxUnN-0000000042F-0WL9

for sales@nk.ca;

Tue, 03 Mar 2026 11:48:45 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.ite.net;

s=smtp1dkim; t=1772563660;

bh=jeh1m2YgnqeDDCXh75gDDh9lhngW/9jApU60mG0Q4co=;

h=From:Subject:Date:From;

b=ZgEIymRKfdXbQPdvLrWavLHUPCXZ6371o1g9GTMyx4us21bQRiHvhu5F0amTOnm/I

rVArCGgJEF/vbRH9kNpg/ogQJM0e3LAH8NvOTk/CXeG3jJ6RKDvc2AynbY1oVRMWPF

PwRVtVwQVMQ/p1y+ACGi1Hs9aX5mdvHMaZgvUnjU=

Received: from User (unknown [209.107.192.250])

by mail.ite.net (Postfix) with ESMTPA id 1A2AB8CCAE9E;

Wed, 4 Mar 2026 04:47:11 +1000 (ChST)

From:

Subject: ::: SECURITY ALERT :::

Date: Tue, 3 Mar 2026 12:47:38 -0600

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_00B2_01C2A75B.6333C7F4"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 5.50.4522.1200

X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200

X-Virus-Scanned: clamav-milter 1.4.3 at av01.ite.net

X-Virus-Status: Clean

X-Spam_score: 21.6

X-Spam_score_int: 216

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Telnet email account has been flagged for revalidation.

To revalidate and continue using the Telnet email services - CLICK HERE



Content analysis details: (21.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[209.107.192.250 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.107.192.250 listed in dnsbl.ahbl.org]

[209.107.192.250 listed in dnsbl.ahbl.org]

[209.107.192.250 listed in dnsbl.ahbl.org]

[209.107.192.250 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.107.192.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.107.192.250 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.107.192.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.107.192.250 listed in dnsbl.ahbl.org]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[202.88.64.59 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[202.88.64.59 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[202.88.64.59 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[202.88.64.59 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[202.88.64.59 listed in wl.mailspike.net]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.0 NSL_RCVD_FROM_USER Received from User

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.2 MISSING_HEADERS Missing To: header

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

2.0 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} ::: SECURITY ALERT :::

Web/SEO/App spam from Microsoft Outlook Part 2

x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?eaj6cbV9avCtSx/CmpnAgKymq/5+Vsu79Ltx+Z2VYjE+lhya3HhUF7kv?=

=?Windows-1252?Q?Ttt1y6+73kp/K5SN8ufthJSdrtAUUY0GfjXufAly0EDg3k9sZW0Ex8QZ?=

=?Windows-1252?Q?cnsKEh2KRcc6LdQl52dB5FLHexmJ7PNg6pH4tW/mngQyQzXuyXmaCPL/?=

=?Windows-1252?Q?QavpYMvjO8JZkJ9vpAPF+6lCs2/C8pujigxd+bi4kz/dqLcvN7VKPpCa?=

=?Windows-1252?Q?AK1N9ouXjWhr3297WMDsVleaanuSHbS6EYRNGOvs2+wUtcWvMrK/K8G5?=

=?Windows-1252?Q?7F75sb6YGMCPFaIQheDsVskHtwZYlR+E7s5lIsYrqmBcBl66925xU4uA?=

=?Windows-1252?Q?bCdQSfMJ1DQrhC7hJTzvD2DBpMyKmQGJrGgtjDY3m238PWMv64zTvg/C?=

=?Windows-1252?Q?rI0nTicGtnueZSjGsa6QbAhJUkeqK99/kIF/zoXk6o6BsIQo3UWh5RpW?=

=?Windows-1252?Q?RUUJWKky6M7v4C3ihZ/gKl4m8Ntogg0SsB+G+wfMDeVwcfbsmVTKemJa?=

=?Windows-1252?Q?TnnozJTz3XbsMMdRKXEn0D/ibQzzx2OT2z+DVPfppLF7y9HsV1mHCrdG?=

=?Windows-1252?Q?ALnogf2+n6L6Xi7sOSKl5AZrx34rqDcB/lMz8C10mIkWG69xzO1iC9wn?=

=?Windows-1252?Q?1V5QPKePO8u4C7p/Dfh1KtwDMebiDMaHwLo9Qvz32x5zixt4Q7je8r9v?=

=?Windows-1252?Q?wzRvv8zisT54nz4z6bXn/CxEDcfWQwJ6xoVnmIohLgggI6I3iWTps8dw?=

=?Windows-1252?Q?95xOXtWa4Cu4YV5BjMFF2iFJbFYHiSCSYyPoD4oziHrcFg1/1GNSRPNf?=

=?Windows-1252?Q?Mje9ltEbBkHiQ38AN29XV8J8IpjhNhDbpak7eWP+gptxpCdBjj2FhnKU?=

=?Windows-1252?Q?nRoRbkReDgmMf1lJoOv4ybdQAqf8DZpjl9qUd7Xf7VjbOo+pu++EQKrl?=

=?Windows-1252?Q?hhTn7LBnh/TBCbMlrZLcKb8o2EJQaThqAwmi7WZQIpaT1muSGPQGtaPp?=

=?Windows-1252?Q?9ThWOMyeJMJQIHsBtTiPZ1Hh/3lH/AG24nFALOfmnmarrBGDDBxa0VTg?=

=?Windows-1252?Q?C9+TMi0Qifs41UNW7+K141efiXMs5Un6m0F3J1HFiOk2gEuUsYRaK1lB?=

=?Windows-1252?Q?DVoKpyczV9CICGzw2S0vxDfUsdnkNsA70txxJTEnBgaeAgcKuiXbzOV+?=

=?Windows-1252?Q?lxEgDvi3NeTLdX5s7vZSV/7A6kn1CZ3qPv5jUjpHbxKNV25IOTyhWzTu?=

=?Windows-1252?Q?pTiZxMbd/VIhUhlh3MFHs3xRb+twZ1a6YHp1IengsflS2uJVFSGSBNWX?=

=?Windows-1252?Q?IxXAVpE1qyUo/QJ7A5HJ8h2cot75WTnVnsHE4s/FMKNC9UpUqzsVzMTc?=

=?Windows-1252?Q?ZmfQds9jJZB85OQ3jmIILdRVSAO60/XFgD9FZ2IzWg3LSiWckMCbMXdk?=

=?Windows-1252?Q?SsV1FFQeD79wox/Tc0SBoW9BffzFem8sDZk3M/sj+xQMbthcdM3eEQZn?=

=?Windows-1252?Q?zrg10pil3Sa6bRXl5xV2oZbm+Hjez9yZaTeDpAZT3s6yFMmiaaBbVIR/?=

=?Windows-1252?Q?HNEAL1DSsBma26+9?=

Content-Type: multipart/alternative;

boundary="_000_JH0PR01MB546857F53FD771FFCE77ACC1EC7FAJH0PR01MB5468apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: JH0PR01MB5468.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 8fd360f2-8d5d-4ef8-dc7c-08de79514c54

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Mar 2026 18:18:41.2645

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5882



--_000_JH0PR01MB546857F53FD771FFCE77ACC1EC7FAJH0PR01MB5468apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Your website has great potential but it=92s not ranking well on Google.

We can help you get better visibility and higher traffic.



Shall I send you our SEO pricing?



Thanks,



--_000_JH0PR01MB546857F53FD771FFCE77ACC1EC7FAJH0PR01MB5468apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Your website has great potential but it=92s not ranking well on Google.
v>


_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

We can help you get better visibility and higher traffic.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Shall I send you our SEO pricing?



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks,








--_000_JH0PR01MB546857F53FD771FFCE77ACC1EC7FAJH0PR01MB5468apcp_--

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 11:58:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxUvi-000000004Ng-3ie3

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 11:57:14 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 11:57:14 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013073.outbound.protection.outlook.com ([52.103.74.73]:12658 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxULj-000000003A6-2noy

for root@nk.ca;

Tue, 03 Mar 2026 11:20:14 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=U+cf8vAqmQ0bbCguL+J/lYKq4P1mlCZ3+4W4fthYxeux1nxFu+WNw2YgHrcwhUtBHuL1eUkGLoiNtoWRiJkhXqM+MBcLTGt2cw2T4QBslirc2euwaDivn2jmycLVSqjhLGsn/3BRqVhW6ZlvgV5kIW+KuA9BgDa4HazQ9D4OKAhu4UIsqoNWEUocauz3rZpJeP/x7h4ezY1HxwmJ7onoZDjow/sQVVIXlpjpWMQ7OUh6IQi9SOlu4fU92CI1Z5JBJsTjSxXqxIiZzh8Xg2g7SZ7+71t5iIVUxrbisjqrh7lp4dJadOjjxER8jasNHeoaQ/oKRrwcSqI8+Kl7lLofMQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=3HJ1A6Uun4ffb366T8Y8TYkxaixJqXXanQ5Z7hLX+Kc=;

b=rZIoyRpME1pasTYJ/6tFQ6FE1mUsUJpDPTk+Jo7vWi4JDTMkXLikmM1R1alioxmY8MJ0pAilrfcowXx5QkzLrZuriClaZxLXu37BdZsb/pZSywkn6fFIlblcZV1HpckClZXhshgCoFhQOcDhR+jHTxRbhKVhsu7YzzKrY3GmIJBHMbyLacvvfxGGKBbU6pL15A8xDDjWIzZN+eG4Zn2b5g0xCNialNyFLbySSW8cjzEwEeWot0S2VGlT71x4OahBxFktoeGT1PMJZ4qMUrcbb6AQE/Sbo5a3LRosPdWKWfPVcQt7shfPdoTVcj71vZ/uro6ASBUcqgm4pqbrc77hdw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=3HJ1A6Uun4ffb366T8Y8TYkxaixJqXXanQ5Z7hLX+Kc=;

b=ik26Lb3g2D0cmYsct4Q9oYXDz0stjQG6Jq418tzufIYptSr1BS91jysxxYQns3j77/nPPLzgl9kRCpYq5vk5b+ndIt2SMF5vjEwpkAn2fWtIB1MLz50SXMjOEsWHu4hRKysTYs04WDAuTBmuunEcSBhHwLUM5MF1UxXdQ8M/UlMESOrytLlDoJoUQ/qhWiTvhqJDpQ4yPwdE0NriTpWHOKonxstvXS/NB3sf0WFoCYUvqq6+YHthmeVoC0hvjSkVh44rKTnRQ8MZAQ9pR3J/0h4nhkyJZI5Lz4JNDvJ53zvx4T8Wfc+jHRmxdVc8y8Zi6CrYbwVDgwHthRtWdZw63A==

Received: from JH0PR01MB5468.apcprd01.prod.exchangelabs.com

(2603:1096:990:13::11) by SEYPR01MB5882.apcprd01.prod.exchangelabs.com

(2603:1096:101:1e1::9) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.22; Tue, 3 Mar

2026 18:18:41 +0000

Received: from JH0PR01MB5468.apcprd01.prod.exchangelabs.com

([fe80::1bbb:e9b4:b451:4d55]) by JH0PR01MB5468.apcprd01.prod.exchangelabs.com

([fe80::1bbb:e9b4:b451:4d55%4]) with mapi id 15.20.9678.016; Tue, 3 Mar 2026

18:18:41 +0000

From: Cabin Seo

To: Cabin Seo

Subject: Re: Yes

Thread-Topic: Yes

Thread-Index: AQHcpzPVGDrDugEl1EGrsWPDNCnIeLWWZ4kmgAVBy0aAAXx4cA==

Date: Tue, 3 Mar 2026 18:18:41 +0000

Message-ID:



References:























































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: JH0PR01MB5468:EE_|SEYPR01MB5882:EE_

x-ms-office365-filtering-correlation-id: 8fd360f2-8d5d-4ef8-dc7c-08de79514c54

x-microsoft-antispam:

BCL:0;ARA:14566002|8062599012|20031999003|8060799015|31061999003|19110799012|7071999006|15030799006|15080799012|10112599003|461199028|39105399006|3412199025|440099028|102099032|40105399003|41105399003|39145399003|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?tcWt7jAiSNl1A6TBD0d6o7wByMMmARmzBNlQJsGEaACHnWHzDRaag26O?=

=?Windows-1252?Q?IcICZgZ7l4O3vIn8b9frGc/b1M7Q0496xbPRRyIvvhFQyV9DhcftkhaS?=

=?Windows-1252?Q?VG0Jl65Umx54NUWq/4EpCnBSOYzrmdjhfM8WIf5mNZrDTGc1yWIb8YSb?=

=?Windows-1252?Q?VQLCLTR8Q4k/pA4IelwIuos6XCIln8qT9/4APfxUtqnZwGJp6k3O3Km4?=

=?Windows-1252?Q?onUNlXP/DoB787HJ99bTFkBgmPJeraD30IUJVyf2ZJIR2fU/01UOXs02?=

=?Windows-1252?Q?4ggETcrATH2HBYFICUGh0DHAFVv3ul51GbKyV4gkRWQgqZkaKajBRFox?=

=?Windows-1252?Q?82KTcZadIergZqjrTXoH2Hy5Dhj7C6APlnynTc3Wxfo3GbQeiZDaGWrN?=

=?Windows-1252?Q?UxCqhST1pkKoC2W0hWdfvUKBcddiDYkY/YI59vZMkYMLsX+gQ2DD/YgT?=

=?Windows-1252?Q?R20zUSinakCxDl30DO+W0D8Q09hOf7KxBGvM0VTKm4fGkZkONoPu1NSG?=

=?Windows-1252?Q?89dU4fMVCJASwAmkuc+wpG5j+17PNtE0Y3hCXrmxnKICGFWsHR2fPhMp?=

=?Windows-1252?Q?PJRkEulfKBFs9UsM8p9bW3gMGwfXkCZYr91ATKcfe/yLwH77Gngu+QWZ?=

=?Windows-1252?Q?9AYUq+38MXByLQh2ChU65u6rHSylSpvta7jKO9o+fa1UwEGgmXJNOUP0?=

=?Windows-1252?Q?/tfMauRRP5GS+k+KI/TzsOgmN5MWxeeQgIIvGmaoI0gBv0d12eBMmHYk?=

=?Windows-1252?Q?pkA9saxsBvMqRO9SYbfP7pdt1KqUHuflGZEZUVej0YpMBFGe0EEff15f?=

=?Windows-1252?Q?7sIl/rvpH9rINYY4HSCl5VpIYN7WVeDOX+HWZ24EENJyagOVxP2dce1J?=

=?Windows-1252?Q?ylteXHTqb9f6LGvq94nNpEX2aLPImeUaZhvqvPHT6joKCgV5qY3K+rlS?=

=?Windows-1252?Q?jZxG3G463m32URfv0Ijkx0E1BsxBawDig1T6JQ+fUoVSZV+EPfSlE6f3?=

=?Windows-1252?Q?3j3XOkbQsGJWVi5C2TYmz3SaLaUOkdkYlbxBZHESepGMPcIebWpejueS?=

=?Windows-1252?Q?2ziVsx7Tfe2T02sV0Kb555EZD/QKRgXmti7FscMIdsEvHK7NdSztRF6R?=

=?Windows-1252?Q?XmjtT2dliON6YAzIvfLkTEGYmd8gV9fZVqL1AiWCgnhpoozmQaPwE8LM?=

=?Windows-1252?Q?AMKs5Ln1KVo9cuMrorJifE7mLYIy+7l2?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

HR Phishing from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Mar 2026 11:57:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxUvI-000000004Lv-0JeC

for dave@doctor.nl2k.ab.ca;

Tue, 03 Mar 2026 11:56:48 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Mar 2026 11:56:47 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f227.google.com ([209.85.210.227]:58878)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxTKX-000000000ft-0x6L

for sales@nk.ca;

Tue, 03 Mar 2026 10:14:56 -0700

Received: by mail-pf1-f227.google.com with SMTP id d2e1a72fcca58-8272c559597so5891802b3a.1

for ; Tue, 03 Mar 2026 09:13:58 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wildbirdtrust-com.20230601.gappssmtp.com; s=20230601; t=1772558032; x=1773162832; darn=nk.ca;

h=mime-version:date:message-id:subject:to:from:from:to:cc:subject

:date:message-id:reply-to;

bh=GRc2CAzc6wVUKgRku9e0U0ToYunHqwre11Spo5t0iQY=;

b=sBsc4nnzKrIx6djr4HzK4uXDrfc/ImumdbqNtwNkohn8NwlMBpig056+TGi4IZAT5O

9k/XPnkVdTpP4beesZhODC9hfcoRfxE3FynCYof8b4lOj7KL0i4Y7xurio/YsHxoot0q

7WC8bWWxDk7S+BvJHAIJzyXyBtx+H/myFn1+45jg9Reu1ZAogKREc5U0yWD6wPMo+Zv7

5kMyN+fDlyPV4zGl24Dkd65benkgwT3fasX8PKykSwG1RwPRap5jZZMqtesKHjsv0dT6

WxdW6XD1eInhnmeJ5o/Vbr7yWETIGXHLNXL/EJ6uSG4JYZQsUtufD6awgnOt993Ri6bl

Y3fg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772558032; x=1773162832;

h=mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=GRc2CAzc6wVUKgRku9e0U0ToYunHqwre11Spo5t0iQY=;

b=F25kof8UpSZEOcsHNxOGbZ3Yy8HjSd8ckt5Ub6DAhwsNAwIFurmA0SPiPoD+PNqfCH

ZqmO24PRN2DPQ2oRZ9cdpjncL27wjw+svlN1MRFn0kC8TtDbSJzy6ohbHJDGOxIMImP4

Foaz4nCb/rCHzZ/ukNrbOlsyTCLRB7o27UN0DXlnu0ev/waAdQpfVTZrQsjTc/Y24jLX

flQCj6L6A8qxFPJfiwFDlYcQqJWf00T+HG9QPya7eH/eSDDLgEaKqiBhYi/bWKKmzNG+

DONwAIEOauFhrgG4BLQJLY2CYh8/idQ5zmeTsVQ+mM7dDRMnWum5e95jw9bOT/gBgi26

gYDg==

X-Gm-Message-State: AOJu0YyEI23BUTQdX7VhN6tMK55ZWmApj3EC9/Shb/qDWlEfN2cQCVJM

cvI8OJdKnaJCjG+Dv7KGj8mc35tqsl9f05h121FZGKnDSq78mpUk9VKPwxw0Q7R+cEzmPr2dr4v

MGXl5Luz8Wj6QBPbVk6UQkldt0ChlDPrpYeAJZJUrDc6X

X-Gm-Gg: ATEYQzw2BR8t9CStgeFQINsaNQblZMQ+g6l1MB3NqwLZUp1ephWWgpfhGo7zP3YT9+7

6nwJgnrK7zZajoUviHsu+Ptl9u6yHGj1cfg8pgid43mme4nV0i0Vxfnia9QU9S45nwd2TUVEh08

8IpaccEnZ0EI3Bz36UUgbPOkDMMB61jKV5qYyeAul5Z2886psIJcw/Pdsk6h2V7QtFPeVidRJua

j5PtFHzF7FffrGLZ6RutcDmu5sKxkZJvtgFYuY9EsmutJia6ht6VgCVIAE7QhZlcenOrAzCds71

XAAuEVG0fVcuD28KuOWKBVhmdurAfnH+7HaThD7PQIGkgXVcflkFHYysJDl1+R+MKFYHQUVc827

zZRDu/vuN49dJ85DYterEUDzNfsVsVxsWVgoR4PHSUV3MQbPailmbIUc=

X-Received: by 2002:a05:6a21:7481:b0:394:6208:6624 with SMTP id adf61e73a8af0-395c3ae84a0mr15487930637.36.1772558031801;

Tue, 03 Mar 2026 09:13:51 -0800 (PST)

Received: from wildbirdrevolution.org ([203.25.124.126])

by smtp-relay.gmail.com with ESMTPS id 41be03b00d2f7-c70fa5c17c3sm1345028a12.2.2026.03.03.09.13.50

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 03 Mar 2026 09:13:51 -0800 (PST)

X-Relaying-Domain: wildbirdrevolution.org

From: "nk HR Operations & Total Rewards/OU=EXCHANGE ADMINISTRATIVE GROUP

(FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-81893"



To: sales@nk.ca

Subject: Your 2026 Compensation Statement Ready

Message-ID:

Date: Tue, 03 Mar 2026 17:13:50 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-83946af1e00ba36c-Part_1"

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 



Content analysis details: (10.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[203.25.124.126 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

[209.85.210.227 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.227 listed in dnsbl.ahbl.org]

[209.85.210.227 listed in dnsbl.ahbl.org]

[209.85.210.227 listed in dnsbl.ahbl.org]

[209.85.210.227 listed in dnsbl.ahbl.org]

[203.25.124.126 listed in dnsbl.ahbl.org]

[203.25.124.126 listed in dnsbl.ahbl.org]

[203.25.124.126 listed in dnsbl.ahbl.org]

[203.25.124.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.227 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.227 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.227 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.227 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.227 listed in list.dnswl.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.227 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Your 2026 Compensation Statement Ready



3 attachments no doubt malware laced

Web/SEO/App spam from Microsoft Outlook Part 2

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?dYYRkouxEppVA4vVihtwNw45n8rWLa8zWXHPE65Mg3Rcn0i/aFcmgJ0Y?=

=?Windows-1252?Q?RmYc/ej9Gg5aoTF8pbhFm1FNVwjCJrb8ue1tQVhOAVoVQsDe0iZgnExi?=

=?Windows-1252?Q?nbd6LLxsBX0PjcFD8Tceam7ZYe+5yt+oXNz1wBmA/vUsZS2lSKKRT/rJ?=

=?Windows-1252?Q?iBBvIktHXp2QD5H3DPiNRTYnjzuxtOebKu+izOIveZjXDcsRP21gpSxI?=

=?Windows-1252?Q?rShxkCkA62USwWH1N7y0qJxuJI9x7SaFSC4lWJ4O4K0HAMbv0fbJJv88?=

=?Windows-1252?Q?YpS4dxem89ZkvIJhKVGS6tgVucu2z+3xAt7nw2decqm6xmQB97/HKw/i?=

=?Windows-1252?Q?FA1/Z8/T3czj7nNO7A7gro7BCzIjKcT7+3z5TusAFKAaZpxsTper79QT?=

=?Windows-1252?Q?j4qCLaH0Dl40kuJBfnthv5bbDmiHA5ZHzZ3Nl6udA2Dds0BbpUAcT3OQ?=

=?Windows-1252?Q?q6I3mfeWjaHXSbbATU86X/7akSRW8zhAzSaqAfTh+PGx3QobaN3f6ok7?=

=?Windows-1252?Q?Em5DDfqAFx2yK4kE0J7vKF7H5ZAPiMWxPdS7HS0s/h7k+SBP+klxZEKp?=

=?Windows-1252?Q?au05qFRdd+2Tm4C3nM7tQKlfxt+ivVm0ra4uEKNsmt+fWlKoktoteqqh?=

=?Windows-1252?Q?2uMUSvqyw2XwrXJBKn0ouZ7JdXHdp6JcshuX1UbibInUjZ4A3nAMy7z+?=

=?Windows-1252?Q?oQ6xIrSTD4MR9xJJxSfRoGM2vHWcwSjnjMnrHJvLPOWunnn2uiSsPR+t?=

=?Windows-1252?Q?Sr8oebhC872P9ft5Fi+it85//R8BtGyDjUDmRonXfOi7vDnsfKZKtcbw?=

=?Windows-1252?Q?M/xGXxM6MQNShEawEd5DHhWAKI/NenRW7wkilwtDTAHYC7fAceCAAeTK?=

=?Windows-1252?Q?wqnyY++ieey/o0O+i85rM6P0XFQ/0aeMzOkRkH3TJ/2AAxWi0HdEtaFH?=

=?Windows-1252?Q?64CAZTL0cR/NYrglJU0xttRKoPzbJ7g8dGM9lUwwo1XnX/OxpKbSdf6M?=

=?Windows-1252?Q?zkbXeSGscXR8pvaRUqnwRC2zNzhFRy2VeA+gHd0zav/EDuGp1PvA3n4a?=

=?Windows-1252?Q?S4N6rWmFJhXFPwwo/12MZvW1NyFQdMm1gPdrRMxsUbngchsnfv4UDVQz?=

=?Windows-1252?Q?7qI2rLIKx/P2ym9tP3yLhq5MZdMGGHZy8WQaNBMrT60u5x4uFME+RGtw?=

=?Windows-1252?Q?qpJbLWK8GopKOYJ679qsFkbzLJWe0pSrHDaUQ6l1uGUZeZQnmhizf8i/?=

=?Windows-1252?Q?jz/m9Ynm/0xnrgQHVZToYSmbpVWxPRJro8lLDZmk1lySG73EUFprIM8J?=

=?Windows-1252?Q?Uu2lA6aRCWUv3mNZ3eAoe/CUosl9Gs1RqrmKk/UiwxMmO9w9CXGk0z39?=

=?Windows-1252?Q?JP53L+75SMTPwPg/pFBeRCV65d8wwJ05EuoZ+bWzKDKWg2pnlXBnzXVC?=

=?Windows-1252?Q?VxA/IQUyti2P1WEHdvfdtrKadQLWDvHKFI+2tYCMyOijhl4PxibR0/ei?=

=?Windows-1252?Q?sDfTypSFr3IcarbG8TkuiPZpl8LeGQ5RLSjzRo4m32vU9CYkvVGWXaaW?=

=?Windows-1252?Q?6n9v/WapvGruIPnhqPLJmu8Nz/AUoPQ+QxZj7g=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_PU4P216MB1369F8874D3159D4CC8CF8B2E47FAPU4P216MB1369KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PU4P216MB1369.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: d32a4f50-ade4-454b-2153-08de794583a6

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Mar 2026 16:54:20.1119

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE2P216MB1428



--_000_PU4P216MB1369F8874D3159D4CC8CF8B2E47FAPU4P216MB1369KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I personally visited your website when I was browsing it.



In order to significantly improve these search results for you, I would lik=

e to send you an audit report of your website.



Can I Send you Quote=94 and Cost/=94?



Best regards



--_000_PU4P216MB1369F8874D3159D4CC8CF8B2E47FAPU4P216MB1369KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I personally visited your website when I was browsing it.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

In order to significantly improve these search results for you, I would lik=

e to send you an audit report of your website.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Can I Send you Quote=94 and Cost/=94? 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Best regards








--_000_PU4P216MB1369F8874D3159D4CC8CF8B2E47FAPU4P216MB1369KORP_--