Leads generation spam from Yahoo! Mail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Mar 2026 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzzGm-00000000Nag-3dnk

for dave@doctor.nl2k.ab.ca;

Tue, 10 Mar 2026 09:45:16 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Mar 2026 09:45:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic309-20.consmr.mail.ne1.yahoo.com ([66.163.184.146]:42466)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzxWX-000000007o6-0VET

for sales@nk.ca;

Tue, 10 Mar 2026 07:53:35 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aol.com; s=a2048; t=1773150751; bh=QkQ9PaKr/JjYO4BVUeRPWQM4RBS3oW0K38ToBDLp3Lc=; h=From:To:Subject:Date:References:From:Subject:Reply-To; b=piH7pJ2GvdhBqvPX5RRM/QS7dXYdXuW95skEFmnSJNbuEpEel4vQtSSq/CYZ+oGpVQpAGwcAMoXI6Zo5mNSm8qVN4U8oE9241utABuTiY3YSzGSlZu/8iGBDAfE/Ypsp2piSu3isUzKL20mG85+IMYNu+PxOG2l6QlVtugbpeQSkMZCNmL6H5/micgdlzdikTBvSFe+vDnWSi4fczO2R/z0TqHjs4Rz3v/8g2421MiV7Xbs42X75mtMb2O0GZvqRNdUM9FjZ1lnQzmcal7ARhlM2oMC2vaBCiUT1GXYvoFmBopsMzRT6JKX4k2u0tD5yN1NNeJRe/REHctIDD0CDRw==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1773150751; bh=i0OZdJjqaJ5F7xpormeR//7br7xvSNtQESq5IKF99Tr=; h=X-Sonic-MF:From:To:Subject:Date:From:Subject; b=Opx1kekT0VS7A2PFGvZNSnPPgMBNHx5Z2NWUwFxR8qJR0uANZL6NdTKoI3NksWnDDjCKyBxOyJ2diIk4LDd5aRuT+ExTyX/p8cKZMD1SFMSylvP0XEkRvHKIYKQkti9+MkuHb9FTnQtEfluT4hnWDKaFQRa8wc6FX19WB3/XticBTqi2SqjJkzfi4no+XYqQ8cpHRWEc5YZlzlK8ywnIzgupfBGZP3UuIyu6aNHT8zeE9b0Xms3mPIguPFLhvh1fKNMYMYGp45QiBIZFYHW9/cmexeu1tLXng5TW91Ddq4ENiciMFvUUG1iWdj4ypwt+2XPu3W5YhQ6dfJYL2I+Fjg==

X-YMail-OSG: j.zyy0gVM1k0nR3upl0F2rbwrLRt14My5ATxoeZ.VtxkCRk57jrrC6ZJk3NzTwv

5ArkxWj_ag40rZ1RP4KZyhxEIg7KFnwEUo70Zjb3eetEylARoFxiDd.v0wM1w3HcvPsOt6COnHXp

Qf.ItHlCTsCaGjIk8V_fZtnOg1neSfAbA56.kqEWZ_UPFmmiH.FKBqNsNKafpL8HK37IBbbg9pvz

PkLlpyoyx0ypHL1dUGPtZAL6rbXU.3TEVe0SQ8aisXvYuFYhGUyzrnNUg5dMMenlEkD4RtPwBH19

db9EvoE7TkYExfklZNiRvBAtTJRmlcNDJkHZqI0z2S2V77H7q5SSZomscJL8jfyu5XjUAZWnzRtV

LVgxyXRqmFuCATuySX5GpVsJXKjckNnYU3pvcykCQUzuxSiGi85yeRj5Q4lmIJ.CEvSNco17Agml

Sin28AicQK.TRsi5Ppo_JKa.k6B0XTH49An8iyMZQPluDILBloJJtVBn5aS4HGGVFSJUjBCIrgy1

GKDXWVpgU_LE5us0DKuQlwYn0vlcEP73Sl9SMuvi4wvi2kP_trevtZv1P7XmH6TWE1Q5SsITOsxM

.Z1mlotCVgokW8rjo.CezodkkZAeBViyC9b14h4FMppaXjof8NyFdZu1PlX7zTwYlz0tmUlEykNf

yGxVP1x_WK9cZ5RcJ5Pwop3oKaV51K5aYEU3TwU0K.WUt8pa14wtqx_jDAYpjgwk5gLxXt6Ij_qc

uZFfHfRGJ974DFEj4BsY5EAqy7YEytR5sUQXHPHoMYpvOlFVR7gzuYTgoNKmKv5L5AWEU4_XXWfz

6Bwh4_YAcbA5wW1DwFz0UlAHriIWCH94mXEv5O7oAFsAxrbKqY5luv3PMGZ1Tq3ij2kLEnxWxy1U

a2YqlUSr9JpFyzN_EDErTOHZMsnRI4WrQLaDIsdJcmlmG3Mw9E2kZAnmWOj_1XrwFW6Cy67wMIsm

a3tv2M3ZL0Qx9ArQNm2arvKRgqNS4uU.lxwS1PyBEXWL5vrHs5PjlWs1wlI_NE2FBpInqDPwaMQq

4M_XFBnzmjDbpsHOCa3uzPkOx4bOWwvl.AsYfwF.LMErWv9PKjCVrxz4hsWUWtBM911BlEV9BrGU

mRmcr8mipVudkkOliy6XS.o5yMF9rO20xYWpo4co3bkWjKl9QqJAHal26eBM_D3BU8UHWlxdDgQf

kRXke0dCRCw.C0iTEyvtemGZf9CZeANBPdQclgIHLqviFhh_NGCeuwxABDalhEOTatTeax67B0D2

1mVyF.JgDEzT3.eD24hRtbNoXjqFJvIshcWrJoAcay.uRRNspKeGTZuWmtUEMP_aosd6QUjBLSCi

SzG0zhsA05fH_5uafZG.j_i7NjnC1XX53fK7KNaAQkc.7bjBKFVoAZ6QIwhjdeIHZm5DltEQCnKd

ovxmbuowAOeZWeK7B8BwszTMnOo2feVmUJRAUX5fRI5H3yyelt74mLmGLofEET4vx6xxc.QHf260

71331ugZDc9wW6x7GG_JZLd5q_9dBB.vajwNIqnCJhLPwnqUSfFJBMGSgh91CgI48aY2IDAbaPqE

KTvYRaUfUK2NgnBRLADv5LlysfGjh6Y7h2la_2zWC2KynA6urDrYHEw0sOp.jZK98Z44I8NFX8mR

iRlfpU2UmJtnN55c3WNSJB0hqnfbeaLRjKBCVR0zApnp4wmqnJh7spYnclAd49NHOyK8QFEOlQRG

0KMG4zjJ12ojeBketcPtCv05nuqWRc5GlorObhC8fU8WiKBrLzTY.IBeMMaElCdq2zI1euULXauB

Yl6UfpDTuok7PbdafeknLPBfdyJ1OzrdI3k4jNGubeR4gdFRV_uwbgNtbGeJm6Oo5ZOl8B523TId

s2D_KJUP1Chv3ZoQUD.HDqf.ecliBPCkrnVJY71mo8Zdu9h6DYIoERbqfwIrskn0FU.erdnC9QNS

1SuU1JJHpSkUDuWtuQ9Kc6Oj6CRDad.Of9ZI.r6OJuh8qqbyHSam1kvZNa0ebC68wn.uuh7paXYA

qBsBqpsJse5gK7pEzSwy.IMdRsESfHlM2O50R64lof6mOGWtr2xvoeDh5BaoD6cVBq6kVXL8tI7r

toLmO6dH4L4P.7QM9zC5iINk5x.5iflkVEFH55jWwWKE5_O9Iajz.P9sFMQIMI.4TVY0F.DXS_DE

pZ31JUEOE3SdISZST5dzuA4lTrSFogEsDK2c3QkoJ1aBBei_ps6vlkpghTXTQ5SR_I._b4jYQTju

HUEBgwZlNqMM0Ai1GwdjD7iB7KkXt5_o5VxfSuZj9jloCTIU-

X-Sonic-MF:

X-Sonic-ID: 6abf030d-d56b-425a-95ce-2eaa15b8ec4b

Received: from sonic.gate.mail.ne1.yahoo.com by sonic309.consmr.mail.ne1.yahoo.com with HTTP; Tue, 10 Mar 2026 13:52:31 +0000

Received: by hermes--production-sg3-6959968fbd-sgdpf (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 46d41d04b00f701ea556095d644f5e34;

Tue, 10 Mar 2026 13:52:27 +0000 (UTC)

From: "Donat Agency"

To: "Donat Agency"

Subject: intro - Leads Generation System

Date: Tue, 10 Mar 2026 19:21:22 +0530

Message-ID: <00a501dcb095$0b8d0840$22a718c0$@aol.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_00A6_01DCB0C3.2545E080"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AdywgOVBrj0poIHQQGu0mFKJeRDHXQ==

Content-Language: en-in

References: <00a501dcb095$0b8d0840$22a718c0$.ref@aol.com>



This is a multipart message in MIME format.



------=_NextPart_000_00A6_01DCB0C3.2545E080

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







We deliver 12-15 qualified agency retainers monthly via manual LinkedIn

outreach-no bots, pure personalization targeting.







Agencies using our method hit 30% revenue growth in 90 days.







Reply "YES" for a Open to a 15-min intro call.







Best,



Growth Partner







PS: If you'd like, I can also send more information about our company and

some recent campaign examples.





------=_NextPart_000_00A6_01DCB0C3.2545E080

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:x=3D"urn:schemas-microsoft-com:office:excel" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
link=3D"#0563C1" vlink=3D"#954F72">


class=3DMsoNormal style=3D'text-autospace:none'>
style=3D'color:black'>Hi,


style=3D'text-autospace:none'>
style=3D'color:black'> 


style=3D'text-autospace:none'>We deliver =

12-15 qualified agency retainers monthly via manual LinkedIn =

outreach—no bots, pure personalization =

targeting.


style=3D'text-autospace:none'>
style=3D'color:black'> 


style=3D'text-autospace:none'>Agencies =

using our method hit 30% revenue growth in 90 days.

style=3D'color:black'>


style=3D'text-autospace:none'>
style=3D'color:black'> 


style=3D'text-autospace:none'>Reply =

"YES" for a Open to a 15-min intro =

call.


style=3D'text-autospace:none'>
style=3D'color:black'> 


style=3D'text-autospace:none'>
style=3D'color:black'>Best,


style=3D'text-autospace:none'>Growth =

Partner


style=3D'text-autospace:none'>
style=3D'color:black'> 


style=3D'text-autospace:none'>
style=3D'color:black'>PS:
If =

you'd like, I can also send more information about our company and some =

recent campaign examples.



------=_NextPart_000_00A6_01DCB0C3.2545E080--



Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Mar 2026 09:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzzGM-00000000NOc-0LFa

for dave@doctor.nl2k.ab.ca;

Tue, 10 Mar 2026 09:44:50 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Mar 2026 09:44:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.75.204] (port=54225 helo=mta75-204.mmglsmd.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzwoD-00000000Lwo-3ETl

for root@nk.ca;

Tue, 10 Mar 2026 07:07:46 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1773148003; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=VYeEArXvf0P5NMup+MJFDyWrADGc7lU/cXkFaNuHFc0=;

b=kBfdm6HTvQNw3YMYAseTEQNpz+VOtIKbUfPw3r52Q5ae72zNfbljV8aV

wIhFSVnAmg78c3HOJkmJMcM1Et9aO1S3Rf3eMWYMBbS1ozmDPy5jHDmXoa

GeXmPOpWOxvrKpv602IrZTNypKskQVK2bcGp0u7Uf/PifhRak7hAVmPGM=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id NQCEHYAdeXhn

for ; Tue, 10 Mar 2026 21:06:43 +0800

Content-Type: multipart/mixed; boundary="===============1660803437111589483=="

MIME-Version: 1.0

Message-Id: <20260310210643.45413-{13453:20260310205202-13453-93}-0022090@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?Re=3A_Welded_and_Seamless_steel_pipe_and_fittings_with_high_qua?=

=?utf-8?q?lity?=

From: Sophia-Threeway steel

To: "www.nk.ca"

Date: Tue, 10 Mar 2026 21:06:43 +0800

Mail-ID: 69b01623e1382308acc110c1

X-Spam_score: 12.3

X-Spam_score_int: 123

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Procurement Manager, Good morning!



Content analysis details: (12.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.75.204 listed in dnsbl.ahbl.org]

[160.124.75.204 listed in dnsbl.ahbl.org]

[160.124.75.204 listed in dnsbl.ahbl.org]

[160.124.75.204 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.75.204 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.75.204 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.75.204 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.75.204 listed in dnsbl.ahbl.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: ns17.xincache.com/112.80.181.45]

[URI: ns18.xincache.com/112.80.181.111]

-0.0 SPF_PASS SPF: sender matches SPF record

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?q?Re=3A_Welded_and_Seamless_steel_pipe_and_fittings_with_high_qua?=







Dear Procurement Manager,



Good morning!



Greetings from Threeway Steel! With over 33 years of experience as a trusted manufacturer, we specialize in providing high-quality solutions for industrial applications, including storage tanks, heat exchangers, flanges, pipes, and related components. We are keen to partner with established companies like yours to support the growing industrial and infrastructure development across South America.



Our track record includes supplying to major global projects and companies such as ADNOC, SHELL, Petronas, and Tan Son Nhat International Airport. By consistently meeting stringent quality and delivery standards, we have built a reputation for reliability and excellence.



Our Key Strengths Include:



Product Range: Comprehensive offerings, including storage tanks, heat exchangers, flanges, elbows, tees, reducers, and pipes in carbon steel, alloy steel, and stainless steel.



Certifications & Standards: Compliance with international standards, including API 5L, ASTM A106/A53, DIN 2448/EN 10216, JIS G3454, and ISO 9001.



Material Options: Carbon steel (e.g., A106 Gr.B, API 5L X42/X52), alloy steel (e.g., A335 P11/P22), stainless steel (e.g., 304/316/316L), and more.



Quality Assurance: Rigorous non-destructive and pressure testing to ensure reliable performance and long-term durability.



Competitive Pricing: Cost-effective solutions without compromising on quality.



Reliable Service: On-time delivery, dedicated technical support, and extensive experience in international markets.



We would be delighted to share detailed catalogs, specifications, and a customized quotation tailored to your specific needs. Whether for regular supply or large-scale projects, we are committed to providing dependable and efficient solutions.



Would you be interested in discussing your current requirements or scheduling a brief virtual meeting at your convenience?



Looking forward to your response.

Best regards,



Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Mar 2026 09:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzzGM-00000000NOc-0LFa

for dave@doctor.nl2k.ab.ca;

Tue, 10 Mar 2026 09:44:50 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Mar 2026 09:44:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.75.204] (port=54225 helo=mta75-204.mmglsmd.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzwoD-00000000Lwo-3ETl

for root@nk.ca;

Tue, 10 Mar 2026 07:07:46 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1773148003; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=VYeEArXvf0P5NMup+MJFDyWrADGc7lU/cXkFaNuHFc0=;

b=kBfdm6HTvQNw3YMYAseTEQNpz+VOtIKbUfPw3r52Q5ae72zNfbljV8aV

wIhFSVnAmg78c3HOJkmJMcM1Et9aO1S3Rf3eMWYMBbS1ozmDPy5jHDmXoa

GeXmPOpWOxvrKpv602IrZTNypKskQVK2bcGp0u7Uf/PifhRak7hAVmPGM=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id NQCEHYAdeXhn

for ; Tue, 10 Mar 2026 21:06:43 +0800

Content-Type: multipart/mixed; boundary="===============1660803437111589483=="

MIME-Version: 1.0

Message-Id: <20260310210643.45413-{13453:20260310205202-13453-93}-0022090@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?Re=3A_Welded_and_Seamless_steel_pipe_and_fittings_with_high_qua?=

=?utf-8?q?lity?=

From: Sophia-Threeway steel

To: "www.nk.ca"

Date: Tue, 10 Mar 2026 21:06:43 +0800

Mail-ID: 69b01623e1382308acc110c1

X-Spam_score: 12.3

X-Spam_score_int: 123

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Procurement Manager, Good morning!



Content analysis details: (12.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

[160.124.75.204 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.75.204 listed in dnsbl.ahbl.org]

[160.124.75.204 listed in dnsbl.ahbl.org]

[160.124.75.204 listed in dnsbl.ahbl.org]

[160.124.75.204 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.75.204 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.75.204 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.75.204 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.75.204 listed in dnsbl.ahbl.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: ns17.xincache.com/112.80.181.45]

[URI: ns18.xincache.com/112.80.181.111]

-0.0 SPF_PASS SPF: sender matches SPF record

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?q?Re=3A_Welded_and_Seamless_steel_pipe_and_fittings_with_high_qua?=







Dear Procurement Manager,



Good morning!



Greetings from Threeway Steel! With over 33 years of experience as a trusted manufacturer, we specialize in providing high-quality solutions for industrial applications, including storage tanks, heat exchangers, flanges, pipes, and related components. We are keen to partner with established companies like yours to support the growing industrial and infrastructure development across South America.



Our track record includes supplying to major global projects and companies such as ADNOC, SHELL, Petronas, and Tan Son Nhat International Airport. By consistently meeting stringent quality and delivery standards, we have built a reputation for reliability and excellence.



Our Key Strengths Include:



Product Range: Comprehensive offerings, including storage tanks, heat exchangers, flanges, elbows, tees, reducers, and pipes in carbon steel, alloy steel, and stainless steel.



Certifications & Standards: Compliance with international standards, including API 5L, ASTM A106/A53, DIN 2448/EN 10216, JIS G3454, and ISO 9001.



Material Options: Carbon steel (e.g., A106 Gr.B, API 5L X42/X52), alloy steel (e.g., A335 P11/P22), stainless steel (e.g., 304/316/316L), and more.



Quality Assurance: Rigorous non-destructive and pressure testing to ensure reliable performance and long-term durability.



Competitive Pricing: Cost-effective solutions without compromising on quality.



Reliable Service: On-time delivery, dedicated technical support, and extensive experience in international markets.



We would be delighted to share detailed catalogs, specifications, and a customized quotation tailored to your specific needs. Whether for regular supply or large-scale projects, we are committed to providing dependable and efficient solutions.



Would you be interested in discussing your current requirements or scheduling a brief virtual meeting at your convenience?



Looking forward to your response.

Best regards,



Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Mar 2026 07:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzwgE-000000006Jl-1g2S

for dave@doctor.nl2k.ab.ca;

Tue, 10 Mar 2026 06:59:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Mar 2026 06:59:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.digitalnova.at ([85.125.61.5]:32977)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzw1N-00000000Ht8-3fkB

for root@nk.ca;

Tue, 10 Mar 2026 06:17:20 -0600

Received: (qmail 1882 invoked by uid 399); 10 Mar 2026 13:16:01 +0100

Received: from unknown (HELO 11.155.101.34.bc.googleusercontent.com) (christina@kawooom.at@34.101.155.11)

(de-)crypted with TLSv1.2: DHE-RSA-AES256-GCM-SHA384 [256/256] DN=unknown

by web.digitalnova.at with ESMTPSAM; 10 Mar 2026 13:16:01 +0100

X-Originating-IP: 34.101.155.11

X-Sender: christina@kawooom.at

Reply-To: vicjha@zydneyfreezers.pro

From: Viktor Jhangiani

To: root@nk.ca

Subject: Important

Date: 10 Mar 2026 12:15:58 +0000

Message-ID: <20260310114508.FD585110E3FD9271@kawooom.at>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi In my earlier years, I worked as an engineer and gold

merchant in Odessa, Ukraine. Now that I'm retired and writing to you from

my hospital bed following a diagnosis of esophageal cancer with only a f [...]





Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.101.155.11 listed in will-spam-for-food.eu.org]

[34.101.155.11 listed in will-spam-for-food.eu.org]

[34.101.155.11 listed in will-spam-for-food.eu.org]

[34.101.155.11 listed in will-spam-for-food.eu.org]

[34.101.155.11 listed in will-spam-for-food.eu.org]

[34.101.155.11 listed in will-spam-for-food.eu.org]

[34.101.155.11 listed in will-spam-for-food.eu.org]

[34.101.155.11 listed in will-spam-for-food.eu.org]

[85.125.61.5 listed in will-spam-for-food.eu.org]

[85.125.61.5 listed in will-spam-for-food.eu.org]

[85.125.61.5 listed in will-spam-for-food.eu.org]

[85.125.61.5 listed in will-spam-for-food.eu.org]

[85.125.61.5 listed in will-spam-for-food.eu.org]

[85.125.61.5 listed in will-spam-for-food.eu.org]

[85.125.61.5 listed in will-spam-for-food.eu.org]

[85.125.61.5 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[85.125.61.5 listed in dnsbl.ahbl.org]

[85.125.61.5 listed in dnsbl.ahbl.org]

[85.125.61.5 listed in dnsbl.ahbl.org]

[85.125.61.5 listed in dnsbl.ahbl.org]

[34.101.155.11 listed in dnsbl.ahbl.org]

[34.101.155.11 listed in dnsbl.ahbl.org]

[34.101.155.11 listed in dnsbl.ahbl.org]

[34.101.155.11 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[85.125.61.5 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[85.125.61.5 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[85.125.61.5 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[85.125.61.5 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope

Subject: {SPAM?} Important















Hi

In my earlier years, I worked as an engineer and gold merchant =

in Odessa, Ukraine. Now that I'm retired and writing to you from my hospita=

l bed following a diagnosis of esophageal cancer with only a few months lef=

t to live, it's been difficult to maintain hope or find the energy for char=

itable activities-a cause deeply important throughout my life. It would mea=

n so much if we could discuss this further because helping others has alway=

s brought me immense fulfillment and joy.



Please let me know when you receive this message, and I will provide all th=

e necessary details.

I truly appreciate it.









BitDefender phish from Google GMail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Mar 2026 17:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzk7C-00000000Ga5-3gDD

for dave@doctor.nl2k.ab.ca;

Mon, 09 Mar 2026 17:34:22 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Mar 2026 17:34:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f73.google.com ([209.85.219.73]:48270)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzgFu-0000000018j-0px9

for doctor@nl2k.ab.ca;

Mon, 09 Mar 2026 13:27:16 -0600

Received: by mail-qv1-f73.google.com with SMTP id 6a1803df08f44-89a116bf0f8so438272476d6.0

for ; Mon, 09 Mar 2026 12:26:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1773084372; x=1773689172; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=lBhMdg9ewmx6jozQJCqCcRgdL6hyDcTETLQs6u0PtTU=;

b=HGOcik361r8j0b2VAeb/fJGXsACOj2YNBO6fsiK5gBC+og4SqoSJa+OEcp7Z2hyTe8

Yb4CVeTxx6M+p0cRRN/Oq360H5MK63OL7GpNYQrv5jsJvHxLQyuznHW3fiWj2Jm96eDA

SQRmkSkm9Bc1fPzeMEEo5jaYmObOErYho2P3SZUf2YhS1ifpzeL9T8crP+VSxfQ99GJY

RxYXH1NplSjgKCID8qrzJpOaxWvCb3gKreCswbhA6ppEAA+LvGnF36DAc36kzfeUkmQW

nwCj4P8JNk6hFKtIl0iss66dFd7hOirMzhVaCO+mpuqkDhadqPoEKzSxiKoeUJ3pQfWX

ar8Q==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rthhmjsmk-org.20230601.gappssmtp.com; s=20230601; t=1773084372; x=1773689172; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=lBhMdg9ewmx6jozQJCqCcRgdL6hyDcTETLQs6u0PtTU=;

b=iqfRVmjzUiJyRecRDd4kNk0JwE6dzIRu9xCjEaGhsmShN8I5xyuH8gOKhusjKcCujd

gdSf9q4Z286pkAH5dn1i1Dgt+uZMsXpPXRJOOARAfX88mCNNiS7xoflHIYZanfo7g6FY

i+MT+MKvbKURtdUM3/lbaCrMVdWfY036+5aKdiXWypexJe7lJu8i0Or3/mOcVNW3yJzF

pIsfwtLHMwesXJicNRlxL22s8cf6Wug5vbTAKmW20LSAFwI8+9NOw+OfjHGLOeEyNqqo

uAGvtfQsTvQbD+DDH5Umnp2OTu0FdLTFb7GoOKLf/SUCTJNKIH4iNJ5mfuquZT2Vdwza

onow==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773084372; x=1773689172;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=lBhMdg9ewmx6jozQJCqCcRgdL6hyDcTETLQs6u0PtTU=;

b=ehIbVkhryQ5ovqKISQDytCudknYF00KFTAUjPElOu7KlmGkdfiC704gxl5VnNrJbFr

oGrU2VB4zGDEtTTm6ZGKgRHzyn2K09J2dEf6PSKn0CaSYNM55RVABz1pKiH1b6J+X8kY

+jJuBGqMFyn/kRrxF4U8p0J+tuh3tcTZZY1wls9aWmCfWVYByu1/1WUnJAbiAAIH7tgQ

tW25OUspSQcmAxYuaE3NORZ8h3niqmMMEiIC0gNmpwACdhriRtQiSIncsx+Xgv5+1Mru

mD6Vd/lNRIMm+SnMR5guLNE2qpapmv+tIjvludcE79KBqRdmfgBdx71vaYRmjsmIwDW1

9wWg==

X-Gm-Message-State: AOJu0YxbnvMW9ke2qTYI73jYwHMBvnturt+ZazYBgw+AzqK2LnBCZFYw

qhWHZWqAPMZaCsSWNSxBrVlW5msQcFIHc8LYbpkHc03+IsAeSV3g7yS6CZp9cdep/ZJFPHKS9BN

nCb+LwwxHWF7Fp/UtOyP1Rz2NknqXUJ9dEQO7akf09YSvdNtFXKvm5GLS

MIME-Version: 1.0

X-Received: by 2002:a05:620a:371b:b0:8c9:f8e5:9f0d with SMTP id

af79cd13be357-8cd6d37fabdmr1707238085a.32.1773084371744; Mon, 09 Mar 2026

12:26:11 -0700 (PDT)

Reply-To: Amparo Mcgerr

Sender: Google Calendar

Message-ID:

Date: Mon, 09 Mar 2026 19:26:11 +0000

Subject: Invitation: Transaction QSTJ-4726-FADT entry update available @ Tue

Mar 10, 2026 4:25am (EDT) (doctor@nl2k.ab.ca)

From: Amparo Mcgerr

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="00000000000022854f064c9c60ff"

X-Spam_score: 12.3

X-Spam_score_int: 123

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Transaction QSTJ-4726-FADT entry update available Tuesday

Mar 10, 2026 â‹… 4:25am Eastern Time - New York Transaction date: Tuesday,

10 March 2026 Transaction Id: QSTJ-4726-FADT Renewal Process Information



Content analysis details: (12.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.73 listed in dnsbl.ahbl.org]

[209.85.219.73 listed in dnsbl.ahbl.org]

[209.85.219.73 listed in dnsbl.ahbl.org]

[209.85.219.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.73 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.73 listed in list.dnswl.org]

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.73 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.73 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.73 listed in wl.mailspike.net]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.73 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.73 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Invitation: Transaction QSTJ-4726-FADT entry update available @ Tue

Mar 10, 2026 4:25am (EDT) (doctor@nl2k.ab.ca)



Amparo Mcgerr has invited you to Transaction QSTJ-4726-FADT entry update available

Title: Transaction QSTJ-4726-FADT entry update available

When: Tuesday, March 10, 2026 at 02:25

Organizer:

Amparo Mcgerr

Description: Transaction date: Tuesday, 10 March 2026

Transaction Id: QSTJ-4726-FADT



Renewal Process Information



Welcome,



Your membership with Bitdefender is scheduled for renewal today. As part of the renewal terms, a payment of $410.80 will be processed. Support is available at +1-(863) 409-8542 if you require assistance.



Product Management Dashboard:

Service Provider: Bitdefender

Add-on Service: Secure Safety

Amount Scheduled: $410.80

Validity: 5 Years

Total Payable: $410.80



For further information or help, please contact Customer Service at +1-(863) 409-8542.



With sincere appreciation,

Paul Publishing

Bitdefender, llc

2026 Company. All Rights Reserved.

Server id: 6c72d0bc-302a-43e0-a6c6-270bcad9b94c

Attendees:



doctor@nl2k.ab.ca





Transaction date: Tuesday, 10 March 2026

Transaction Id: QSTJ-4726-FADT



Renewal Process Information



Welcome,



Your membership with Bitdefender is scheduled for renewal today. As part of the renewal terms, a payment of $410.80 will be processed. Support is available at +1-(863) 409-8542 if you require assistance.



Product Management Dashboard:

Service Provider: Bitdefender

Add-on Service: Secure Safety

Amount Scheduled: $410.80

Validity: 5 Years

Total Payable: $410.80



For further information or help, please contact Customer Service at +1-(863) 409-8542.



With sincere appreciation,

Paul Publishing

Bitdefender, llc

2026 Company. All Rights Reserved.

Server id: 6c72d0bc-302a-43e0-a6c6-270bcad9b94c

When

Tuesday Mar 10, 2026 ⋅ 4:25am (Eastern Time - New York)

Organizer

Amparo Mcgerr

bristolsutton7254@rthhmjsmk.org

Wallet tracker spam from Google Gmail Part 2

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@on.spiceworks.com header.s=s1 header.b=imkC0bez; spf=pass

(google.com: domain of bounces+2752257-4a50-support=shuimo01.com@email.on.spiceworks.com

designates 167.89.82.157 as permitted sender) smtp.mailfrom="bounces+2752257-4a50-support=shuimo01.com@email.on.spiceworks.com";

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=spiceworks.com

X-Original-From: DQMH Consortium

Precedence: list

Mailing-list: list cu@shuimo01.com; contact cu+owners@shuimo01.com

List-ID:

X-Spam-Checked-In-Group: support@shuimo01.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 38.0

X-Spam_score_int: 380

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is a notification from the Help Desk. -- Reply above

this line to add a comment -- header logo Essential__"Tracker" News made 2

updates.



Content analysis details: (38.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.82.157 listed in dnsbl.ahbl.org]

[167.89.82.157 listed in dnsbl.ahbl.org]

[167.89.82.157 listed in dnsbl.ahbl.org]

[167.89.82.157 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.82.157 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.82.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.82.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.82.157 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shuimo01.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.70 listed in list.dnswl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: shuimo01.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: shuimo01.com]

[URI: www.shuimo01.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.216.70 listed in sa-accredit.habeas.com]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.216.70 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} [Ticket #808] --Never Lose Your Wallet

=?UTF-8?B?QWdhaW7igJQiVHJhY2s=?= It Anywhere"--





----==_mimepart_69af192869b3_1137aef0382074ee

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



This is a notification from the Help Desk.

-- Reply above this line to add a comment --



header logo

-----------



Essential__"Tracker" News made 2 updates.



#808 --Never Lose Your Wallet Again=E2=80=94"Track It Anywhere"--



Essential__"Tracker" News wrote:

created with attachments



osdhyyyu69d5dhhhff.jpg



Essential__"Tracker" News wrote:

Your Wallet's New Best Friend



[image: osdhyyyu69d5dhhhff.jpg]



Ticket Attributes

-----------------



Creator

Essential__"Tracker" News



Assignee



Status

open



Why did you receive this email?



Glad you asked! We're using the Spiceworks Cloud Help

Desk

to track issues and get all your requests sorted in a

snap. Have a concern? Just reply to this

email, and we'll be in touch. Thanks!



Terms of Use ( https://www.ziffdavis.com/terms-of-use/ )=20

|

Privacy Policy ( https://www.spiceworks.com/privacy/ )

|

Cookie Policy=20

( https://www.spiceworks.com/privacy/cookies/ )

|

Security Details=20

( https://www.spiceworks.com/support/security-center/ )

----==_mimepart_69af192869b3_1137aef0382074ee

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Wallet tracker spam from Google Gmail Part 3








">


.tron/vite/assets/mailer-e57c98f5.js" as=3D"script" crossorigin=3D"anonymou=

s">

=20





=

This is a notification from the Help Desk.


--=

Reply above this line to add a comment --








3D"header
ogo" src=3D"https://on.spiceworks.com/rails/active_storage/blobs/redirect/e=

yJfcmFpbHMiOnsiZGF0YSI6MTM2MTQ4NDQ5LCJwdXIiOiJibG9iX2lkIn19--b8363fc24f0195=

27856d4f71fd5ba8ea182113e9/DQMH-R-consortium-shadowed-lowercase%20(3).png">





=20











Essential__"Tracker" News made 2 updates.=20








#808 --Neve=

r Lose Your Wallet Again=E2=80=94"Track It Anywhere"--














Essential__"Tracker" News wrote:

created with attachments








3D"osd=<br
hyyyu69d5dhhhff.jpg" src=3D"https://on.spiceworks.com/rails/active_storage/=

blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MjEwMDA4MzcyLCJwdXIiOiJibG9iX2lkIn19=

--8a4ed426753390c57abc848589b6effb6edb2068/osdhyyyu69d5dhhhff.jpg">







>


ler__ticket-notification-activity">



Essential__"Tracker" News wrote:

*Your Wallet's New Best Friend <https://www.shuimo01.com/*>*=



[image: osdhyyyu69d5dhhhff.jpg] <https://www.shuimo01.com/*><=

br>


















Ticket Attributes



































Creator Essential__"Tracker" News
Assignee
Status open


























OWreoEpnn5mgi1dhahguWNF7sDL1nXwsTxSE695I-2BeN8CYooVow9y7eRVgBnu1PIbMZe0cIIR=

b5XzJwnYPF12b75i4HIWhkAF-2BlHIZ9U8gFBiF4g3RymJII5HS2eE27Hdc0I09-2BTt0nyhFfm=

kVR5zCA0J0Vfl6RQCcIQe-2FrEFwjEaZGcrdkGwdM2QQxlplxK0Bh-2FXYiX4MZoQ-3D-3D" al=

t=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important=

;width:1px !important;border-width:0 !important;margin-top:0 !important;mar=

gin-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;=

padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !impor=

tant;padding-left:0 !important;"/>





----==_mimepart_69af192869b3_1137aef0382074ee--

Wallet tracker spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Mar 2026 17:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzk6s-00000000GZO-20pF

for dave@doctor.nl2k.ab.ca;

Mon, 09 Mar 2026 17:34:02 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Mar 2026 17:34:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f70.google.com ([209.85.216.70]:44528)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzg1u-000000000SG-0wdo

for sales@nk.ca;

Mon, 09 Mar 2026 13:12:40 -0600

Received: by mail-pj1-f70.google.com with SMTP id 98e67ed59e1d1-359887aece0sf9076227a91.1

for ; Mon, 09 Mar 2026 12:11:48 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1773083502; cv=pass;

d=google.com; s=arc-20240605;

b=B8IUFzcOwsvP+IBEkLK5KG7RdQkdHk/JZOiEYfyRvijpcuIGt2vLzFVm23mZ/VFkKm

xYHlXxApZsOYwj3dMT8MR5p9Tv1l1lmCtlxDsdqV1LFBVpFWLVhVhG9Q/mvhBBetG1Oj

v9i1mO9hm2xSjRpqEgjLVB2P66X4VvmHTSk4J70PKaisYgLkdJXJysdgJznUHmpj1yCp

VWOOlXdx9Wdvd4q464r3V1VFMnpLGz+vn72A+CbB67gCtIEuuzOxPA6vbyEqMonBOyMb

qLkUpsBq+LJhAXVpJhJYYlTAh+u4v2gz5aIqIpeZLIQ0mDXIJg+EBk46daxrJMK3nnms

rYVA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:content-transfer-encoding:to

:reply-to:mime-version:subject:message-id:from:date:dkim-signature;

bh=yWDAv0Dec2VFDxnuWYcKAIxCe7h3Qn0sLc+IzV9vhYI=;

fh=zMf8ErnXv22DFkKNQe/QMbnlif4xsyHDBri6Sw61zms=;

b=PemU4AH9hWTygB+7KbeP2zFiJfcEBfRd76dKdqqwAHXUEAt26f5KVGFnef36ulMt2m

06j5bg/lngy8Bwn5y1RA+xkLSeWgeuX0qvYGL6Z94mebImyfZRuMnJNlKWkz13qUy+Gx

cXRGBc+MGfNvFsPIV5T8hPJNKIRiojWAfl2Gs3KKO/GY+nCCqMvmEFdnR3gYqFJaxruq

Pow2KzaHfghmy2NclJB8XdTlQiIyDxRhGV/0lEmIyAJoDAyT7nQKYFXRdiYfyu0+Kx8K

BtwY8ttSm7NcrwC91ALmFJUsGcCr0/gJUu2majVTjNgQZN6/lXnA8syYN4qdx8UgoubI

FVDA==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@on.spiceworks.com header.s=s1 header.b=imkC0bez;

spf=pass (google.com: domain of bounces+2752257-4a50-support=shuimo01.com@email.on.spiceworks.com designates 167.89.82.157 as permitted sender) smtp.mailfrom="bounces+2752257-4a50-support=shuimo01.com@email.on.spiceworks.com";

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=spiceworks.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=shuimo01.com; s=google; t=1773083502; x=1773688302; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-transfer-encoding:to:reply-to

:mime-version:subject:message-id:from:date:from:to:cc:subject:date

:message-id:reply-to;

bh=yWDAv0Dec2VFDxnuWYcKAIxCe7h3Qn0sLc+IzV9vhYI=;

b=af6aMOE85FYCl09ATTr0/ksfEOiPFjGnHIFqSjFR76LNBvvk9foH1jxeCAfJcyW595

+LRpfZ8tl/TNudHpU7wz+a1Al7bUzBuyFW79AkPg739xh6EOsWO163FAD2598kPUIsHu

AVRgHgmD78huOAVc7Jjr9KGfdIfwhQa0KnNgg=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773083502; x=1773688302;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender

:content-transfer-encoding:to:reply-to:mime-version:subject

:message-id:from:date:x-beenthere:x-beenthere:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=yWDAv0Dec2VFDxnuWYcKAIxCe7h3Qn0sLc+IzV9vhYI=;

b=d/Owgu2QvQFvhaHD8I8/IwP6RAGLZTZh6vnH0YxxQzMA94QwKUePqjLGLt3BMWnvx5

h45oBVLPso/PuLNMQ2i6Znt7XWc3ukSHlmmKvZFUipd36fGfQuQDU/RGZmHkT0EQVrDO

MzCXPwquSn5Q3D9x7kNxNn1Q8e0oyffluWBnL7rTr70EC/jn2xBwXCZOEQCcfgGHpjDi

CBT4EseGFwjNR0z7TAxN6nQmLbR0rfqRLmOYHXWICXv7A4ZX1b8Rjwxa/wnUV4g1udiG

5hgwsFfDmAQLYkE9pDhlmoVkVgj+3WdZvaCrUBV8vkUd1WhlsuM2mdu/ZJV8dQFrUIA1

Bphg==

X-Forwarded-Encrypted: i=2; AJvYcCXa69bQoMxmIThM8mbuV2ZxqOquBM0m5c+BY5xdOFk3Opv9dFvzPkZ6hL8MZaxAFQZUvGM08w==@nk.ca

X-Gm-Message-State: AOJu0Yy5dMH69gg8PTr6z54MtBYSmIigk5sDPKnsb6LLPyWwkSnLr0OD

JIzAMvTmrU9uPHjvrmYF98BZoPK3Giy/7hYvapXnHiq7rM4n2EiTgXkHfWMugibQfJQ=

X-Received: by 2002:a17:90b:562d:b0:341:c964:126c with SMTP id 98e67ed59e1d1-359be384d3amr11442162a91.34.1773083502207;

Mon, 09 Mar 2026 12:11:42 -0700 (PDT)

X-BeenThere: cu@shuimo01.com; h="AV1CL+GZntGyEgKLJoZ35gvLx8IxMcNoQmucM2dWltQhf9LZFA=="

Received: by 2002:a17:90b:1493:b0:359:9169:85c3 with SMTP id

98e67ed59e1d1-359af762e72ls3514233a91.0.-pod-prod-01-us; Mon, 09 Mar 2026

12:02:02 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCV39ZY4X3qAoD6DS9/TVBO/CKn3EvSprXtVBfRIAy1Z2G8vbZuhRW52VbvJ7iiVvRSciA==@shuimo01.com

X-Received: by 2002:a17:90a:e7d1:b0:359:8c63:8ff2 with SMTP id 98e67ed59e1d1-359be31d34amr10862609a91.22.1773082922465;

Mon, 09 Mar 2026 12:02:02 -0700 (PDT)

X-BeenThere: support@shuimo01.com; h="AV1CL+FP+nGzv6D76xiEPDogtuxxfQ/muoYeoacE5gTFyfTKaQ=="

Received: by 2002:a17:90b:2682:b0:359:8da1:b064 with SMTP id

98e67ed59e1d1-359af891c9els4906800a91.2.-pod-prod-01-us; Mon, 09 Mar 2026

12:02:01 -0700 (PDT)

X-Received: by 2002:a17:90a:e7d1:b0:359:8c63:8ff2 with SMTP id 98e67ed59e1d1-359be31d34amr10862569a91.22.1773082921500;

Mon, 09 Mar 2026 12:02:01 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1773082921; cv=none;

d=google.com; s=arc-20240605;

b=F3MA43FgR/ihXog11nk5QA08PeG4uby4GC3D3EpFLWFV+w9dO/Sk6tnHFHA0OydoQ4

r2VT5EcpAQKlBnlmdTGmM172HkrVSXURmhDxGwCiwMPIwkSPEWoYWEiBTJsPzRAhobtt

T68lRYNSrCOqIev3UQf8eXReLLySfwiqGB1nu1V3ZmaaLvZ65l8UnBfJw7sCs9fu/83I

A+8+IQ88rysP8LhcqTcwguqgCLkAyQv9QkiPZvWVTUUb5JWEXMxuIS/rHgxcu5775eu4

PhL0KIoCGpXGHXVzNIE098b8ULzUzQOGIv2fWv0WQBJrG0UCwfZd6XFYAg2XydvLGAZA

Acfg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=content-transfer-encoding:to:reply-to:mime-version:subject

:message-id:from:date:dkim-signature;

bh=yWDAv0Dec2VFDxnuWYcKAIxCe7h3Qn0sLc+IzV9vhYI=;

fh=q2RpAI0SnxLy5idRDVySWu0JYH58Z9CxF47keIPGJ6E=;

b=kXNS8D1Y9wHH/xZ+KpGnIU74JOy3a/OPx8iUfScK6p2ZvXfwW6SZI3KD/lYLTdHh5p

ROviXXePKQy5Ry/UpkNuG0JYKLJNjfeVt2FmcOVZsWcSlK/dA/GCWtVROe/25bS6BKOR

/XsJlabU0oGEqdIzXbi3KpAsQxJgQWwWLHhM29jFaWut/gHlCAlvydyaz7kR35yAB4Dx

kzqE4pT12ZVg99jQ1wwXU5yqZn6AFzAz/YCxlfb/7WtDdp3iJ7OfWCyJBXEoC2BpDAlD

aybZ7JU1+FrdQB4XXM86X1J3JZaNLni4gj0BDSgesAZEzUA17KMHeh6OiKWGk4l/cYo8

kwTw==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@on.spiceworks.com header.s=s1 header.b=imkC0bez;

spf=pass (google.com: domain of bounces+2752257-4a50-support=shuimo01.com@email.on.spiceworks.com designates 167.89.82.157 as permitted sender) smtp.mailfrom="bounces+2752257-4a50-support=shuimo01.com@email.on.spiceworks.com";

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=spiceworks.com

Received: from o1678982x157.outbound-mail.sendgrid.net (o1678982x157.outbound-mail.sendgrid.net. [167.89.82.157])

by mx.google.com with ESMTPS id 41be03b00d2f7-c739e0b2cfdsi14177598a12.54.2026.03.09.12.02.01

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Mon, 09 Mar 2026 12:02:01 -0700 (PDT)

Received-SPF: pass (google.com: domain of bounces+2752257-4a50-support=shuimo01.com@email.on.spiceworks.com designates 167.89.82.157 as permitted sender) client-ip=167.89.82.157;

Received: by recvd-546686db75-6jfjj with SMTP id recvd-546686db75-6jfjj-1-69AF1928-27

2026-03-09 19:02:00.112486846 +0000 UTC m=+7073452.628063483

Received: from on.spiceworks.com (unknown)

by geopod-ismtpd-9 (SG)

with ESMTP id ovG5IXAqRaykXUsrbd0VwQ

for ;

Mon, 09 Mar 2026 19:02:00.082 +0000 (UTC)

Date: Mon, 09 Mar 2026 19:02:00 +0000 (UTC)

From: "'DQMH Consortium' via clshduuueeddd"

Message-ID: <69af19287140_1137aef0382075af@helpdesk-ticket-outbound-email-jobs-69bc94486c-blll6.mail>

Subject: [Ticket #808] --Never Lose Your Wallet

=?UTF-8?B?QWdhaW7igJQiVHJhY2s=?= It Anywhere"--

Mime-Version: 1.0

Reply-To: DQMH Consortium

X-SG-EID: =?us-ascii?Q?u001=2EQC0beqY3oXfZzN5pp+L7+Pupxrv71yqgo2LomstDYJZhQ=2FWVexVOlbD1E?=

=?us-ascii?Q?t3Q5uO8QfsMsYIiC9Owd21Js3dl0jKjZLwbHAEL?=

=?us-ascii?Q?Wub1rMycQpwY06EPrbGVAjQOckswUKUrOmD4WN7?=

=?us-ascii?Q?AOgVOqB4kyTB0XrZiYvDLQAZJV2a27dhWJEWrQe?=

=?us-ascii?Q?NhtXW94+ynXZ=2F=2Fjt3F7Uy6F7xcI2lsakp9=2F14lv?=

=?us-ascii?Q?ceICw=2FfRplK+vdKO1gHf7o+EH1zyYFtcmFQHbCM?=

=?us-ascii?Q?NzhN2dfLkn8M8lCqohpsRyiVDA=3D=3D?=

To: support@shuimo01.com

X-Entity-ID: u001.gmpV4gFpr9jxF52dwbVvCQ==

Content-Type: multipart/alternative;

boundary="--==_mimepart_69af192869b3_1137aef0382074ee"

Content-Transfer-Encoding: 7bit

X-Original-Sender: help@dqmh-consortium.on.spiceworks.com

NetKnow now in Netcraft's top 10600

MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services
which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).



Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

NetKnow now in NetCarfts Top 10600 Part 1

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now at 10555 from 10884 at Netcraft
and pfs compliant



A slight increase! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server


  3. and
  4. keep design current!




How do we compare with other providers in

Edmonton
, Alberta, Canada?



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 4220 from 5685 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business


is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Rogers





Rogers Business Solutions

which rank 4883 from 4895 and are hosted in Europe.



Netknow again





We at Netknow are at 10555 from 18857 since the start of 2026.



Government of Alberta



The Government of Alberta Website

ranks 15160 from 14761 by Netcraft and seems to hosted on Cloudfare.



City of Edmonton







The City of Edmonton
ranks 32584 from 32596 by Netcraft and hosted by Google.



University of Alberta







The University of Alberta
ranks 51937 from 51868 hosted by Amazon Techonologies.



Juno and NetZero





We have Juno Internet ranked on top

at 324349 from 301562 who are the owners of

US Based Netzero
at Netcraft Rank 77594 from 78084 .



NAIT / Northern Alberta Institute of Technology





NAIT ranks 107740 from 107894 hosted by Microsoft .



Grant MacEwen University





MacEwan ranks 108774 from 104997 .



TekSavvy



TekSavvy ranks 281297 from 275196 and are hosted by Microsoft



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from 1170578 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 296108 from 303560 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 399306 from 399699 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Internet Centre / CCINet



Internet Centre

rank 456802 from 457602 . Their partner Rack Nine ranks > 2000000.



Distributel / 3Web / CIA



Cybersurf

is ranked 911334 from 827288 and seems to be hosted in USA by DigitalOcean.



Primus



Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Northern lights Fiber







Northern lights Fiber
are ranked by Netcraft >2000000 and uses AWS.



OkayVPN





OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

Web/SEo/App spam from Google Gmail Part 2

------=_NextPart_000_0012_01DCB019.C6138030

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">



















Hello,





Are you looking to grow your business and =

attract more

customers? I specialize in SEO services that help websites rank on the =

first

page of Google, bringing in more traffic and qualified leads.





If you're interested, I'd be happy to share our =

past results,

pricing details, and a customized proposal for your business.





Looking forward to connecting with you.





Best regards,


Tejpratap


Digital Business Manager





 

















------=_NextPart_000_0012_01DCB019.C6138030--



Web/SEo/App spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Mar 2026 12:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzfEL-00000000NrO-03tn

for dave@doctor.nl2k.ab.ca;

Mon, 09 Mar 2026 12:21:25 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Mar 2026 12:21:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f180.google.com ([209.85.215.180]:53582)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vzeac-00000000Lg9-2ck5

for sales@nk.ca;

Mon, 09 Mar 2026 11:40:33 -0600

Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-c737d3a51bdso2142020a12.3

for ; Mon, 09 Mar 2026 10:39:33 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1773077967; x=1773682767; darn=nk.ca;

h=content-language:thread-index:mime-version:date:subject:to:from

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=P7lKr+8tSvGDRABvNSyylLZvuZ6QbRVuQ+2YKoB8b4g=;

b=SSgQZ1FCAaxt/jXMFy2xUUiiTr/0ZCh6PXSbUaqIIaWPLXxZvrNyLgKn/dOEoOHa2Z

HnP1yTkoINy31/+VfQKCrzD0GY2DjTR6BhbVTzB/6xv1Hs+I2YO6RVL2H+Vt9OYBFrXd

xktjgBr/G5QNwGMdERFirRVD3X8zBnDc7yyMUI+lKvzCWEbvE7nNKEBz39Z3BJnsHMbi

RdI+SLYx4YCWMjwRtIaU4L8UQF24py5Gn6z7SSM4AtC3SRFwgBX8Ad4XOxdSmF0Y4r/P

DTxScJ1hgzzKYMeXGDgORpnKyi/bHkjsJDyaxcqo/26Es4fqovNxoXuX2MTsxMQovJJU

7U9g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773077967; x=1773682767;

h=content-language:thread-index:mime-version:date:subject:to:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=P7lKr+8tSvGDRABvNSyylLZvuZ6QbRVuQ+2YKoB8b4g=;

b=WJT0mLgAF917Dq/xKo/KA0FvfBVzIiUZ9f6mQnmsPTRsj2rkGQ0zIhv69E9i5vpcSh

Tuevm81B4YpF3E8gfk5lk3n+DXlmRP9pDA13vaBFKo3+OI1miFu2v5L61wpMLHIeAWYv

SCiohIXdqL6RQUGT/CtrlgzSUOVe8D7RF4SoNbtrtVrIJo0sH8zElfndoP9TOY2oCc6A

Xdf19lUpygQPKeutihtf239gjepLLpCXpXGdm8nJ8f+SZMpXHzwIMcWhAmlg8/cUIQPJ

7EY4cq7017LyDK7BCmlovlx6mS/9ndjMYUuR+1w9XEpeRDZYpCE4yv3NWqVHbzp72Z+b

ghYg==

X-Gm-Message-State: AOJu0YxeA4fS8eBconYKSNpDI4DqiLSYlfzB+WE7RIrgjplp6xLqQ4Y+

J9pYEbmOcp3Dq5BSIZlSUkPyRhgYEp+ToQv9F1m6Cps4SyZAx+5QD6fvjRePyjzA

X-Gm-Gg: ATEYQzw22vbDmADZyaCxrkhMCZjpITzm9mqaBcevngrCNrMbWbfVBlk7qtuRmniMZJH

qFyVFiPCyNcdePCSUMuZh/jt+hnixr1LO8O9Ldkl64qrwxlPBu9iJtltTcMiyMC1dXHCgFhxmhj

ATQvdEVx1sbRr75as+WjOPe7FHdCRr6X3qAckuczm/CEwE6zNOq9DJ400GeZ/TvC75HeDJRwkWE

IL7X4fd1zwokbc5pmgjm6c3nuamaMAqp4xt44//BQ4YRcZzJhX7jSqNARkrvwjxelpvAQ/hQrK0

ECbTw7m00w0u92v1/kmh5qAoFXQY9zwE4PkwJwAlkhMqFsxVW1drHP5pz/LuOaWnEm/6NNPXqvd

x20kL6dH/kJRD5M2tcy8AxlsTDQn+S5iWsrmKSN9YG39BDaJv3RttZ2HpJJ9AdkFM+FBft8uJDl

5MhjcELrafzLbnG2j/ROPj0wEidHQwOn2uRcb/0YoYMg9m

X-Received: by 2002:a17:902:e94f:b0:2ae:5655:b16 with SMTP id d9443c01a7336-2ae82415803mr116937995ad.21.1773077966861;

Mon, 09 Mar 2026 10:39:26 -0700 (PDT)

Received: from DESKTOP34DRMQP ([2409:40e5:104b:eaf4:c1af:c71f:440e:c09b])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2ae83e78f77sm171297375ad.21.2026.03.09.10.39.24

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 09 Mar 2026 10:39:26 -0700 (PDT)

Message-ID: <69af05ce.170a0220.2116b9.7fd8@mx.google.com>

X-Google-Original-Message-ID: <001101dcafeb$ac5b4430$0511cc90$tj592824gmail.com>

From: "Tejpratap"

To:

Subject: =?us-ascii?Q?Ready_to_Grow_Your_Brand_Online=3F_Let's_Start_Today!?=

Date: Mon, 9 Mar 2026 23:09:21 +0530

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0012_01DCB019.C6138030"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adyv61mpHrfRqTwQRwCC+EHz8b0zIw==

Content-Language: en-in

x-cr-hashedpuzzle: UA8= AYsz BvcI B3wd B5Eu Cg72 DRmQ DYfo DkJo E8QJ FSGw F068 IlHw KQNJ LRCN MDmX;1;cwBhAGwAZQBzAEAAbgBrAC4AYwBhAA==;Sosha1_v1;7;{3775F83F-8494-4658-9EC8-9851B190B57D};bQBhAG4AYQBnAGUAcgAuAHQAagA1ADkAMgA4ADIANABAAGcAbQBhAGkAbAAuAGMAbwBtAA==;Mon, 09 Mar 2026 17:37:07 GMT;UgBlAGEAZAB5ACAAdABvACAARwByAG8AdwAgAFkAbwB1AHIAIABCAHIAYQBuAGQAIABPAG4AbABpAG4AZQA/ACAATABlAHQAGSBzACAAUwB0AGEAcgB0ACAAVABvAGQAYQB5ACEA

x-cr-puzzleid: {3775F83F-8494-4658-9EC8-9851B190B57D}



This is a multipart message in MIME format.



------=_NextPart_000_0012_01DCB019.C6138030

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



Are you looking to grow your business and attract more customers? I

specialize in SEO services that help websites rank on the first page of

Google, bringing in more traffic and qualified leads.



If you're interested, I'd be happy to share our past results, pricing

details, and a customized proposal for your business.



Looking forward to connecting with you.



Best regards,

Tejpratap

Digital Business Manager

Web/SEO/App spam from Microsoft Outlook Part 4




Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hi,



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I personally visited your website when I was browsing it.



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

In order to significantly improve these search results for you, I would lik=

e to send you an audit report of your website.



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Can I Send you Quote=94 and Cost/=94? 



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



ont-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvet=

ica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Best regards,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












--_000_PU4P216MB228267DDBC238752537126E0CA79APU4P216MB2282KORP_--

Web/SEO/App spam from Microsoft Outlook Part 2























































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PU4P216MB2282:EE_|PU4P216MB1486:EE_

x-ms-office365-filtering-correlation-id: 029ae66a-6107-4e93-47d1-08de7e01c0a1

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|15080799012|15030799006|8062599012|8060799015|19110799012|7071999006|31061999003|20031999003|24121999003|37011999003|22091999003|39105399006|7042599007|3412199025|440099028|102099032|35041999009|39145399003|41105399003|40105399003|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?3SW3rcvMSpw4x4a/hXtPadqSmU7a8BaiUpJI5mDw9QyhyvwxZU0kSR84?=

=?Windows-1252?Q?jhuaqzj9zABScrOLV6GlKjb/dTdL7Q/4a5qQFiuepCMJddPWBAFrutKU?=

=?Windows-1252?Q?NtmOMcHeA5hCOnvN/37DOAMUg/na/mAA9FW8zB2jo9g9Eqdsy0Itwyb8?=

=?Windows-1252?Q?v4cftRJDy46zuHRc4VcXnj7K/v6AwhU04prCNTXST9GW/C0L4KoM9mOq?=

=?Windows-1252?Q?nlTr/r8n3GJli0V1VMboFZFPQskgFZOxAMYy2mIibxRQH7RoqnDTW3Hc?=

=?Windows-1252?Q?tFC8aa9jH+LVAsYhI2GS/9dg73q88BFK6egnBBi6cIXONgnUeMVrEXzD?=

=?Windows-1252?Q?AJIY/t3WSEdi9xXB0LGV+FvFVYsglJl52JaIMffg3iu5s4a/hVKBozXx?=

=?Windows-1252?Q?sIuy54KoKuDuVfGJBX3NmIWH+D0T7N9KD+KDwsra17UFe2ygPsq1blNW?=

=?Windows-1252?Q?dxPl4RQvxToo6CSlMoaYdnZU4OYrSDkaHSTnsxOu93wvS7q91L1nQH3p?=

=?Windows-1252?Q?QiSyTwBJTOLYDvf+WOti2vZrjwhV6yi8unZa33ueaJBLODUmVPoZDE4I?=

=?Windows-1252?Q?vkcAHbSsOmmzjReAGBOoo8Qe3mwHM0ELCUy0sht2aItZtMSFsFVrkOCD?=

=?Windows-1252?Q?GM8krX7eBXcfO/EzOb1DI+1mru2UqIbIaNN52n55ZSke59nuCBes+QSj?=

=?Windows-1252?Q?Gr6XEWcNwYixvnRc3euqC0zEhFD5UCDs8oT3YvsI4L69pglG5sP7bm17?=

=?Windows-1252?Q?fLMvsNyfaBwZfKlMoxVzSZzvfvYptbSFqsA/yOPSq8+5omXagixGBTzR?=

=?Windows-1252?Q?ElnRTAjAZTaQhVGU5wZxCWr6P3PoOR82aF9GML0d52P3EEQX6yZqc2ZU?=

=?Windows-1252?Q?39ZKvxePAEIqSTeDTCPTHsGW2t5rvMmy2BfGQuHGX5HdoEC7Smcy9o+A?=

=?Windows-1252?Q?6YPeFhwlp4AUsAYZA5fuA/ZibrGYRqNtE7YYb1QEKP2ZnS7uLIEz/+AU?=

=?Windows-1252?Q?gs6JjZNtx1RLqvFVXhTSVn0CFOu2JmljxpNfHXlK0SzPsB13JSBd4mqn?=

=?Windows-1252?Q?GSCvHzTHjdStp5AjdM3UMwmnwjzssatBaFSQTTs6LkMsB+Yd/L3nM2cb?=

=?Windows-1252?Q?dWRQX6aUqcz+JYylqXnj93FAV41tQz1d598AP1225vrbjus1qqV7fU66?=

=?Windows-1252?Q?z39dXJ1SEM7SB5/jytZszGbUoPLjki88YPkdCAYFoPICoG6bbhvSc/6p?=

=?Windows-1252?Q?RlEySi0MfgXT1NrAv/AgCFKhkqnH8hHvQnSFdn8d/UdnUmQZx3BAY+uy?=

=?Windows-1252?Q?3R+d0vTxLlAI4Ooj+eFsPRQ7K1rgGg0G5egDRG7ZnDPbe90/?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?Y9O9fby68ZaBJODxKkPpcy3PPMQnOszzardlXLECCKVNNH0LPNcZsmu2?=

=?Windows-1252?Q?0wD21yNza8WDtZ79nFmfTVWMBgGjWWnJZ29qRwa2/FqMqGYcJtlaAjUJ?=

=?Windows-1252?Q?iS9kdqAlP9eTg9IFlMB3m7/uTqkvsUx7XvJmo6inK6Hu3FBjslAmzTjR?=

=?Windows-1252?Q?Gf3sdBvaOJcPX7vEeBqRtTqCk/lyvbuHLa08osyrtj2bn4LDGVWmmT8W?=

=?Windows-1252?Q?6WbG93X3R96msHsvb2U2Goq80KmKvDsHwx4WJIjWO8t5JLJTyjKch9Me?=

=?Windows-1252?Q?+fagx3lK4XEjUN/Z+4Y5dtoYNuWc6iuVpn/NrGK+LB2GvDed6UokYCAt?=

=?Windows-1252?Q?NoAk3OWn9obIdf//qZYVhjpxfDViwu3bODmlTwgjzAHaf2HuR7qaS4z+?=

=?Windows-1252?Q?mO2WO6Vd7Ht3cXwcyY0Xm8MEYUIifl56bnf1TNhwn4jh+Nl6dCcapw3E?=

=?Windows-1252?Q?1Ga12q5rD16e8qnZH0luuGBoDEqhzXMxPGRIO6Rvvb0vVBmR//vsK1dH?=

=?Windows-1252?Q?QfeWqeidrHOenm81DnHF+9qOwUycXcUVbQQchl/cmeduqIXiHQOk+A2t?=

=?Windows-1252?Q?0fgDcz/DhPv355qzEitjTLdUlBmqTHfZCmmT9kTKmSefOxrY/hmyfSTV?=

=?Windows-1252?Q?D9lbpnX0X3rgDFSxfWGdREIE586ZZVb0cC0vssbavcW2lGZfTJMvZXOh?=

=?Windows-1252?Q?IKFKMxbjSoYz7K6QYiv26Lt0Mn/DTfFR6PbnYbnECvZNlf5Kd04PyEj8?=

=?Windows-1252?Q?IO13hfcj5H2zrlTm/+mIF2w9/XGd2xTkstTrF9m6TNaCwhTZqoA/689R?=

=?Windows-1252?Q?dFW+pm9+9P56vPTd3bEVNixh3o2pnMSwkDhB+iqiAEBfQyfWjb5Nf7Ym?=

=?Windows-1252?Q?NeWyBhjrLPnJpckDKIrQeO60KEVgIXa9JYnjolLOaqcCDAwqIq9aAynQ?=

=?Windows-1252?Q?3bnc/bM+KTUF86MSpiPQf4BcKuWv9ltitczrJ4uVlHTn7PSiXZ6NaLBo?=

=?Windows-1252?Q?eAIOY8LsGLnbT+bjRnw363v6Zwg4Ws46C8oKhYSpM0rS5GeE/1422RXJ?=

=?Windows-1252?Q?hVZOxlD24UBkXOPI8i8rbg6P26Qkbb2rKZ8BFjIg6e85Mrm84E0vliGG?=

=?Windows-1252?Q?BBBhLGBTtf+Kr5phcMJVpfNIsQiBaBn0TmInwSZAlVx4Px6rV2WHCvaZ?=

=?Windows-1252?Q?2qYncMkdOZgEzRkTj78m+AOK0mYtD58UpVA8iHl3cwLqGp5ENXO5kZSH?=

=?Windows-1252?Q?wu1pYK/qxtsrmbLfZM8JTArBPIETYtJCKVj39R8l3X5FCdZLzZoEXBV4?=

=?Windows-1252?Q?mf/SNI1ZaprgecAt2CfTFpb3uPQk8B8ZJlOsPFNawzfl9DvgrFXkWRtt?=

=?Windows-1252?Q?3ejm1vZF5gF8EqU7BARdA+OErPUU/RUd3Y6GiigWgLdosj5rbsY1IgCU?=

=?Windows-1252?Q?92sH0f9HITPzNH598sHtAHlBW/lNglfbKydBmajf6M4/IYHHR/jVvCFY?=

=?Windows-1252?Q?8t0Hqb0q714PDNc/BLDldFeYnkJ5EePUEVliJYDYIhm7z2/tuoS+oE70?=

=?Windows-1252?Q?Dy25HpugDbmLNzCigNS7S+pMPMdW8muS7Qs8vw=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_PU4P216MB228267DDBC238752537126E0CA79APU4P216MB2282KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PU4P216MB2282.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 029ae66a-6107-4e93-47d1-08de7e01c0a1

X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Mar 2026 17:31:52.4792

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU4P216MB1486

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I personally visited your website when I was browsing

it. In order to significantly improve these search results for you, I would

like to send you an audit report of your website.

Web/SEO/App spam from Microsoft Outlook Part 3

Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:301:12c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:12c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:12c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:12c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:12c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:12c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:12c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:12c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

[52.103.74.32 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.74.32 listed in dnsbl.ahbl.org]

[52.103.74.32 listed in dnsbl.ahbl.org]

[52.103.74.32 listed in dnsbl.ahbl.org]

[52.103.74.32 listed in dnsbl.ahbl.org]

[2603:1096:301:12c:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:12c:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:12c:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:12c:0:0:0:8 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.74.32 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.74.32 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.74.32 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.74.32 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.74.32 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[https.www.alonsolynn9879(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[https.www.alonsolynn9879(at)outlook.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.74.32 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_TOCC_5 To or Cc header with 5 consecutive vowels

1.0 MR_DIFF_MID No description available.

Subject: {SPAM?} Re: Yes



--_000_PU4P216MB228267DDBC238752537126E0CA79APU4P216MB2282KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I personally visited your website when I was browsing it.



In order to significantly improve these search results for you, I would lik=

e to send you an audit report of your website.



Can I Send you Quote=94 and Cost/=94?



Best regards,





--_000_PU4P216MB228267DDBC238752537126E0CA79APU4P216MB2282KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">